Edit tour

Windows Analysis Report
https://dinamicconsultores.app.questorpublico.com.br/

Overview

General Information

Sample URL:	https://dinamicconsultores.app.questorpublico.com.br/
Analysis ID:	1428365
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Found iframes

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6272 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dinamicconsultores.app.questorpublico.com.br/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_334	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_334, type: DROPPED

Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1027983844?random=1713468635861&cv=11&fst=1713468635861&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1027983844?random=1713468635861&cv=11&fst=1713468635861&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1027983844?random=1713468635861&cv=11&fst=1713468635861&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1027983844?random=1713468660162&cv=11&fst=1713468660162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1027983844?random=1713468660162&cv=11&fst=1713468660162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1027983844?random=1713468660162&cv=11&fst=1713468660162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config

Source: https://dinamicconsultores.app.questorpublico.com.br/entrar

HTTP Parser: Number of links: 0

Source: https://dinamicconsultores.app.questorpublico.com.br/entrar

HTTP Parser: <input type="password" .../> found

Source: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3	HTTP Parser: No favicon

Source: https://dinamicconsultores.app.questorpublico.com.br/entrar	HTTP Parser: No <meta name="author".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="author".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="author".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="author".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="author".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="author".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="author".. found

Source: https://dinamicconsultores.app.questorpublico.com.br/entrar	HTTP Parser: No <meta name="copyright".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.questor.com.br/questor-zen/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49752 version: TLS 1.2

Source:	Binary string: g.k.setPlaybackQualityRange=function(a,b,c){var d=g.OT(this.app,this.playerType);d&&g.Pdb(d,g.jP(a,b\|\|a,!0,"m"),!0,c)}; source: chromecache_394.2.dr
Source:	Binary string: g.Pdb=function(a,b,c,d){a.videoData.Qz=b;if(a.Lf&&c){c=a.pk;var e=a.Lf;if(e.j.j){var f=fP(),h=e.j.videoInfos[0].video.j;if(!(f>h&&0!==h&&b.j===h)){var l;f=gbb(c,null==(l=e.j)?void 0:l.videoInfos);l=c.oa.getPlaybackRate();1<l&&f&&(l=zRa(c.W.G,e.j.videoInfos,l),0!==b.j&&l<b.j&&c.oa.setPlaybackRate(1));var m,n;b=g.wK[mP(b)];e=(null==(m=e.videoData.B)?void 0:null==(n=m.video)?void 0:n.j)\|\|0;g.qC("yt-player-quality",{quality:b,previousQuality:e},31104E3);c.W.schedule.policy.C=480<=fP();if(c.L("html5_exponential_memory_for_sticky")){m= source: chromecache_394.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.36.68.63
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /entrar HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /bundles/bootstrapcss?v=kyR4jYxJOjVS6IRFVEvIKGoZyzo_coA_3ChUQqkeb4g1 HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /bundles/mainCss?v=Ooa5At86l5X3WqQryTmy0L1v8ZvhQci4CCODkN2LgXg1 HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /bundles/logOn?v=mY8oLJVUU1u651zqYdfRKitT9ZGmsEcUQ93ApDZOC201 HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /bundles/jquery?v=XgddrwFLu0z8WptdlVDXPqymDmw7ToIMYb1BryT4OPk1 HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /Content/Js/UpdateBrowserNotify.js HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /bundles/modal-bootstrap?v=rHzxfH54gahafGK9DFP6lEs3QUY6B_as_gyYDJX3Io41 HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /icons/google/chrome/48/Google-Chrome-icon.png HTTP/1.1Host: icons.iconarchive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Images/loginicons.jpg HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/bundles/mainCss?v=Ooa5At86l5X3WqQryTmy0L1v8ZvhQci4CCODkN2LgXg1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /product-identity/firefox/firefox/firefox-logo.png HTTP/1.1Host: design.firefox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/google/chrome/48/Google-Chrome-icon.png HTTP/1.1Host: icons.iconarchive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Images/loginicons.jpg HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /product-identity/firefox/firefox/firefox-logo.png HTTP/1.1Host: acorn.firefox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/product-identity/firefox/firefox/firefox-logo.png HTTP/1.1Host: acorn.firefox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login?state=1d86a31c-4069-458b-be1a-11fa68fbad79 HTTP/1.1Host: default.supernova-docs.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oauth2/authorize?response_type=code&redirect_uri=https://default.supernova-docs.io/auth/callback&state=1d86a31c-4069-458b-be1a-11fa68fbad79&code_challenge_method=S256&code_challenge=OZGjSbzjIFp1bhMgUxSjJ5C_HI0FO3sZpY5Xje3PU7I&initial_tab=signin HTTP/1.1Host: auth.supernova.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Images/favicon.ico HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/entrarAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /Content/Images/favicon.ico HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /entrar HTTP/1.1Host: dinamicconsultores.app.questorpublico.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
Source: global traffic	HTTP traffic detected: GET /product-identity/firefox/firefox/firefox-logo.png HTTP/1.1Host: acorn.firefox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/product-identity/firefox/firefox/firefox-logo.png HTTP/1.1Host: acorn.firefox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login?state=e7462017-ee9c-4fb1-85b2-628528237b17 HTTP/1.1Host: default.supernova-docs.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oauth2/authorize?response_type=code&redirect_uri=https://default.supernova-docs.io/auth/callback&state=e7462017-ee9c-4fb1-85b2-628528237b17&code_challenge_method=S256&code_challenge=Pr-oG13SqGjk-SLom682pClpdLYNA8BO8Xh0G3u_bEE&initial_tab=signin HTTP/1.1Host: auth.supernova.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dinamicconsultores.app.questorpublico.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /politicas-de-cookies/questor-zen/ HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.4.3 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css?ver=6.5.2 HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js?ver=6.5.2 HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/animated-typing-effect/assets/css/cursor.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/css/bootstrap.css?ver=4.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/css/font-awesome.min.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/css/flaticon.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/css/slick.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/css/slick-theme.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/css/magnific-popup.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/style.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/inc/backend/css/simple-likes-public.css?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1710847526 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-3073.css?ver=1710847526 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=1710847526 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/global.css?ver=1710847527 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.15 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/inc/backend/js/simple-likes-public.js?ver=0.5 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/animated-typing-effect/assets/js/typed.js?ver=1 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/animated-typing-effect/assets/js/typed.fe.js?ver=1 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cidades-ajax/js/mobwe_js.js?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/form-masks-for-elementor/assets/lib/jquery.mask.js?ver=1.6.4 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/form-masks-for-elementor/assets/js/elementor-mask.js?ver=1.6.4 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/jquery.magnific-popup.min.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/jquery.isotope.min.js?ver=20190829 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/slick.min.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/easypiechart.min.js?ver=20190829 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/jquery.countdown.min.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/elementor.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/elementor-header.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/scripts.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/js/header-mobile.js?ver=20180910 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.15 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.3.1 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /neurolead/neurolead.min.js HTTP/1.1Host: cdn.leadster.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/engitech/fonts/Flaticon.woff2 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.questor.com.brsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.questor.com.br/wp-content/themes/engitech/css/flaticon.css?ver=6.5.2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public_api/banner/style/vXME11817141.css?t=1 HTTP/1.1Host: cdn.privacytools.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public_api/banner/script/bottom/vXME11817141.js?t=1 HTTP/1.1Host: cdn.privacytools.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/343080441?insights=1 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1027983844?random=1713468622572&cv=11&fst=1713468622572&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lead-tracking/stable/lead-tracking.min.js HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/traffic-source-cookie/stable/traffic-source-cookie.min.js HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1027983844/?random=1713468622572&cv=11&fst=1713468622572&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.31/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468622572&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq2loY7UDUNovyKkzFnTkGrxGYpA8jyw&random=3133616513&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public_api/banner/pop/vXME11817141.html?t=1&m=0&c=1,705,326,596,201 HTTP/1.1Host: cdn.privacytools.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.questor.com.brSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468622572&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq2loY7UDUNovyKkzFnTkGrxGYpA8jyw&random=3133616513&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/cropped-favicon_questor-32x32.png HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/politicas-de-cookies/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569
Source: global traffic	HTTP traffic detected: GET /js/rdstation-popups/bricks/rdstation-popup.min.js?v=1 HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/integration/2.0.0/rd-js-integration.min.js?v=1 HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public_api/banner/pop/vXME11817141.html?t=1&m=0&c=1,705,326,596,201 HTTP/1.1Host: cdn.privacytools.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /send HTTP/1.1Host: pageview-notify.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468625&host=www.questor.com.br&query=&platform=desktop HTTP/1.1Host: app.leadster.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/cropped-favicon_questor-32x32.png HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_n6fyeulem&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.questor.com.brSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.questor.net.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_n6fyeulem&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /questor-zen/ HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-15279.css?ver=1713207547 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1710847529 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/09/questor.png HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/chatbot-zen-celular-601x520.png HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/001-culos-de-realidade-virtual.svg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1710847529 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-2840.css?ver=1710847529 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-2854.css?ver=1710847529 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-3897.css?ver=1712669208 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/09/questor.png HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-11299.css?ver=1710847529 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.29.7/js/vendor.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.29.7/js/player.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.29.7/css/player.css HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c6ea8d8e630f57d377818da4c8bd1b8c"If-Modified-Since: Thu, 21 Dec 2023 11:41:45 GMT
Source: global traffic	HTTP traffic detected: GET /signals/config/134545240619778?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /js_opt/modules/utils/vuid.min.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/002-virar.svg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /td/rul/1027983844?random=1713468635861&cv=11&fst=1713468635861&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/003-integrao-de-dados.svg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/004-conectividade.svg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen1.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=600&mh=338 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/Questor_branco-1024x255.png HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
Source: global traffic	HTTP traffic detected: GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/001-culos-de-realidade-virtual.svg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/chatbot-zen-celular-601x520.png HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=600&mh=338 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1027983844/?random=1713468635861&cv=11&fst=1713468635861&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/002-virar.svg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen2.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/003-integrao-de-dados.svg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/004-conectividade.svg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen5.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen4.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen3.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
Source: global traffic	HTTP traffic detected: GET /tag/uet/343080441?insights=1 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/Zen-Edoc-720x520.png HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/Questor_branco-1024x255.png HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
Source: global traffic	HTTP traffic detected: GET /signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C124%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C117%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen1.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
Source: global traffic	HTTP traffic detected: GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468635861&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqx0nSSN4net9tcsfCE6tPkyIlzmlLS1B1j1gbufSW0B3S5f-E&random=1923464135&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468635861&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqx0nSSN4net9tcsfCE6tPkyIlzmlLS1B1j1gbufSW0B3S5f-E&random=1923464135&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/video.d11c91c1b2b642a34601.bundle.min.js HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen2.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen5.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/form.10bf1a6475f0741920ff.bundle.min.js HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/popup.085c1727e36940b18f29.bundle.min.js HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/questor-zen/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen4.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/10/zen3.jpg HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/07/Zen-Edoc-720x520.png HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/09/Montserrat-Bold.woff HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.questor.com.brsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.questor.com.br/wp-content/uploads/elementor/css/post-15279.css?ver=1713207547Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==; _clsk=7jxt0%7C1713468639357%7C2%7C1%7Cl.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_8h8a2n6cj&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.questor.com.brSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fquestor-zen%2F&time=1713468641&host=www.questor.com.br&query=&platform=desktop HTTP/1.1Host: app.leadster.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /send HTTP/1.1Host: pageview-notify.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_8h8a2n6cj&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi_webp/vowPgCByrlE/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/0af6e327/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /vi_webp/kcHoXFYUlVQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /K1O63kjyY-HyaTz3j3XD8cyDN6SUjD0vGlw8Ro7HdRmx51DgX4D3DhO63ZTc37ayTHUBWfvCtA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /vi_webp/vowPgCByrlE/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/kcHoXFYUlVQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /K1O63kjyY-HyaTz3j3XD8cyDN6SUjD0vGlw8Ro7HdRmx51DgX4D3DhO63ZTc37ayTHUBWfvCtA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /generate_204?TKHpgw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?F4TfAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /politicas-de-cookies/questor-zen/ HTTP/1.1Host: www.questor.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==; _clsk=7jxt0%7C1713468639357%7C2%7C1%7Cl.clarity.ms%2Fcollect; _ga_43W2WYML5H=GS1.1.1713468627.1.1.1713468641.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c6ea8d8e630f57d377818da4c8bd1b8c"If-Modified-Since: Thu, 21 Dec 2023 11:41:45 GMT
Source: global traffic	HTTP traffic detected: GET /tag/uet/343080441?insights=1 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /td/rul/1027983844?random=1713468654473&cv=11&fst=1713468654473&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1027983844/?random=1713468654473&cv=11&fst=1713468654473&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468654473&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNf2k7qoR8SIQKyLJZa5C03JGRQtclteuSFBMuyko4jcWlODs&random=2501142473&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468654473&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNf2k7qoR8SIQKyLJZa5C03JGRQtclteuSFBMuyko4jcWlODs&random=2501142473&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468655&host=www.questor.com.br&query=&platform=desktop HTTP/1.1Host: app.leadster.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /send HTTP/1.1Host: pageview-notify.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_iuh09f9i7&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.questor.com.brSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_iuh09f9i7&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.questor.net.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /questor-zen/ HTTP/1.1Host: www.questor.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468654.28.0.0; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjU1MzIwfQ==; _clsk=7jxt0%7C1713468655852%7C3%7C1%7Cl.clarity.ms%2Fcollect; _ga_43W2WYML5H=GS1.1.1713468627.1.1.1713468656.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1Host: d335luupugsy2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c6ea8d8e630f57d377818da4c8bd1b8c"If-Modified-Since: Thu, 21 Dec 2023 11:41:45 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/343080441?insights=1 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1027983844/?random=1713468660162&cv=11&fst=1713468660162&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /td/rul/1027983844?random=1713468660162&cv=11&fst=1713468660162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468660162&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqp6YQs-x1WgM0lmcG6PvKzClliawqxKK60qAsxdlx50iW-WNf&random=1069753338&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1027983844/?random=1713468660162&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqp6YQs-x1WgM0lmcG6PvKzClliawqxKK60qAsxdlx50iW-WNf&random=1069753338&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_9h2ggd7no&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.questor.com.brSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-Modified-Since: Thu, 12 Dec 2013 23:40:16 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /generate_204?0rMcgA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?a3ddJA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fquestor-zen%2F&time=1713468665&host=www.questor.com.br&query=&platform=desktop HTTP/1.1Host: app.leadster.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /send HTTP/1.1Host: pageview-notify.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /popup/show.json?account_id=703230&uniq=_9h2ggd7no&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1Host: popups.rdstation.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=LClr4Vb1Z8WRvsV-3Z1E8f8eot39Fv_2aRL0lWidGHKHq6gKWac9XYWRFeG9PYyupAo0tWqqZN-KX-eaoq0xotYw9fLxCz6GtAL9Fg0LHkbRMLYrC7_2EUAaAkmKVlNPFecDp-D3nQxO6ytd4DqI0gcnurWgSfo1y_Ieo-a5B6A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=LClr4Vb1Z8WRvsV-3Z1E8f8eot39Fv_2aRL0lWidGHKHq6gKWac9XYWRFeG9PYyupAo0tWqqZN-KX-eaoq0xotYw9fLxCz6GtAL9Fg0LHkbRMLYrC7_2EUAaAkmKVlNPFecDp-D3nQxO6ytd4DqI0gcnurWgSfo1y_Ieo-a5B6A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=RBsRhxfypwjzSImNWT9Sw2-CQMEfCYnUIQc2X2REQQO35ZVwU8mNA6dx3zHdabgIcjeD0KQKeFgjQ9XBetr4qJQATSkhsbZrG6DjihkEBYcpjkR5UjnHLP5lJPbQDbBnQBdoEdI_bp3Tp8zyZ4KdhBKvyE3sOL0bwY4cH9WFfug
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.questor.net.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_291.2.dr	String found in binary or memory: <div class="elementor-element elementor-element-1a5df8e elementor-widget elementor-widget-video" data-id="1a5df8e" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=vowPgCByrlE","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_291.2.dr	String found in binary or memory: <div class="elementor-element elementor-element-4a8c064 elementor-widget elementor-widget-video" data-id="4a8c064" data-element_type="widget" data-settings="{"youtube_url":"https:\/\/www.youtube.com\/watch?v=kcHoXFYUlVQ","video_type":"youtube","controls":"yes"}" data-widget_type="video.default"> equals www.youtube.com (Youtube)
Source: chromecache_291.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-repeater-item-77e204b" href="https://www.youtube.com/c/QuestorSistemas" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/questorsistemas" /> equals www.facebook.com (Facebook)
Source: chromecache_336.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_394.2.dr	String found in binary or memory: (g.Ko(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Ko(c,"www.youtube.com"),d=c.toString()):(c=DBa(d),yJ(c)&&(d=c));c=new g.yP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Hj:function(){e=zb()},od:function(){d()}}};var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: a))):this.Jd(g.NV(a.errorMessage)):this.Jd(PV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Jn(c,{hl:a})),this.Jd(PV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.lc&&!d.D&&RYa(this,function(e){if(g.tU(e,b.api,!VR(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.vc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|uBa(this.Af)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=VB(d,h,bSa):h&&(d="embedded");this.La=d;cua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb(cSa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb(cSa,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.So=!this.qa;this.Qa=UB(!1,a.disableplaybackui);this.disablePaidContentOverlay=UB(!1, equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: a.severity,e,mK(a.details),f)}else this.oa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.oe(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.YC)(),FX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.oe(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: aRa=function(a,b){if(!a.j["0"]){var c=new BK("0","fakesb",{video:new xK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new BQ(new g.yP("http://www.youtube.com/videoplayback"),c,"fake"):new MQ(new g.yP("http://www.youtube.com/videoplayback"),c,new lQ(0,0),new lQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=hA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},kA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Sg:d,Qg:e,Rg:f,Ch:g,Dh:h,we:m,zb:b},p=D.YT,q=function(){yC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=G.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(BC(w,"iframe_api")\|\|BC(w,"player_api"))return b}for(var x=G.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!sC&&zC(x[B],n.we))return Lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: function Qr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Qa(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?mc(a.src):"https://www.youtube.com"),this.h=new Kr(b),c\|\|(b=Rr(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Qa(this.g)),Er[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_340.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Iz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!p.length)return!0;var q=Ez(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!kI(q, equals www.facebook.com (Facebook)
Source: chromecache_394.2.dr	String found in binary or memory: g.TR=function(a){a=RR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",yjb);var mBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var fNa={G5a:0,D5a:1,A5a:2,B5a:3,C5a:4,F5a:5,E5a:6};var upa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(Uu,g.Kd);Uu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Nn.Nj(this.G);delete Uu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: g.eS=function(a){var b=g.TR(a);rSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.TR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.NR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),nD&&(a=jpa())&&(b.ebc=a));return g.Jn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: o fiscal para mercado corporativo.","publisher":{"@id":"https://www.questor.com.br/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.questor.com.br/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https://www.questor.com.br/#organization","name":"Questor","url":"https://www.questor.com.br/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https://www.questor.com.br/#/schema/logo/image/","url":"https://www.questor.com.br/wp-content/uploads/2020/09/questor.png","contentUrl":"https://www.questor.com.br/wp-content/uploads/2020/09/questor.png","width":204,"height":54,"caption":"Questor"},"image":{"@id":"https://www.questor.com.br/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/questorsistemas","https://www.instagram.com/questorsistemas/","https://www.linkedin.com/company/questor-sistemas/","https://www.youtube.com/QuestorSistemas"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: o fiscal para mercado corporativo.","publisher":{"@id":"https://www.questor.com.br/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.questor.com.br/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https://www.questor.com.br/#organization","name":"Questor","url":"https://www.questor.com.br/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https://www.questor.com.br/#/schema/logo/image/","url":"https://www.questor.com.br/wp-content/uploads/2020/09/questor.png","contentUrl":"https://www.questor.com.br/wp-content/uploads/2020/09/questor.png","width":204,"height":54,"caption":"Questor"},"image":{"@id":"https://www.questor.com.br/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/questorsistemas","https://www.instagram.com/questorsistemas/","https://www.linkedin.com/company/questor-sistemas/","https://www.youtube.com/QuestorSistemas"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: o fiscal para mercado corporativo.","publisher":{"@id":"https://www.questor.com.br/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.questor.com.br/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https://www.questor.com.br/#organization","name":"Questor","url":"https://www.questor.com.br/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https://www.questor.com.br/#/schema/logo/image/","url":"https://www.questor.com.br/wp-content/uploads/2020/09/questor.png","contentUrl":"https://www.questor.com.br/wp-content/uploads/2020/09/questor.png","width":204,"height":54,"caption":"Questor"},"image":{"@id":"https://www.questor.com.br/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/questorsistemas","https://www.instagram.com/questorsistemas/","https://www.linkedin.com/company/questor-sistemas/","https://www.youtube.com/QuestorSistemas"]}]}</script> equals www.youtube.com (Youtube)
Source: chromecache_394.2.dr	String found in binary or memory: r;this.lj=b?b.hl\|\|"en_US":XB("en_US",a.hl);this.region=b?b.contentRegion\|\|"US":XB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":XB("en",a.host_language);this.Mo=!this.Dc&&Math.random()<g.WI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Dc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Gd=WB(this.Gd,a.ismb);this.So?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=RR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.Um= equals www.youtube.com (Youtube)
Source: chromecache_340.2.dr	String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_291.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=134545240619778&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=413255480274437&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_394.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(oR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.hR(this.B)?gR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: var DB=function(a,b,c,d,e){var f=Iz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!g.length)return!0;var h=Ez(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)
Source: chromecache_394.2.dr	String found in binary or memory: var G3={};var Bfb=/[&\?]action_proxy=1/,Afb=/[&\?]token=([\w-])/,Cfb=/[&\?]video_id=([\w-])/,Dfb=/[&\?]index=([\d-])/,Efb=/[&\?]m_pos_ms=([\d-])/,Gfb=/[&\?]vvt=([\w-]*)/,sfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Ffb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),vfb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: dinamicconsultores.app.questorpublico.com.br

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-WZY91LD4XC&cid=990543739.1713468623&gtm=45je44f0v874940361z8854767554za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.questor.com.brX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.questor.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 19:30:28 GMTContent-Type: /Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 19:30:44 GMTContent-Type: /Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 19:30:58 GMTContent-Type: /Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 19:31:11 GMTContent-Type: /Transfer-Encoding: chunkedConnection: close

Source: chromecache_376.2.dr	String found in binary or memory: http://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
Source: chromecache_412.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_281.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_398.2.dr	String found in binary or memory: http://e-piksel.com
Source: chromecache_372.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_450.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_334.2.dr	String found in binary or memory: http://icons.iconarchive.com/icons/google/chrome/48/Google-Chrome-icon.png
Source: chromecache_334.2.dr	String found in binary or memory: http://ipinfo.io
Source: chromecache_252.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: chromecache_412.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_412.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_288.2.dr	String found in binary or memory: http://oceanthemes.net/
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: http://schema.org/WPFooter
Source: chromecache_333.2.dr, chromecache_338.2.dr, chromecache_394.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_288.2.dr	String found in binary or memory: http://wpdemo.archiwp.com/engitech
Source: chromecache_288.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_334.2.dr	String found in binary or memory: http://www.questor.net.br
Source: chromecache_391.2.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_376.2.dr	String found in binary or memory: http://www.updateyourbrowser.net/
Source: chromecache_376.2.dr	String found in binary or memory: http://www.updateyourbrowser.net/_static/imagens/arrow.gif
Source: chromecache_376.2.dr	String found in binary or memory: http://www.updateyourbrowser.net/_static/imagens/close_03.gif
Source: chromecache_394.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_394.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_394.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_394.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_394.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_394.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_296.2.dr, chromecache_340.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_296.2.dr, chromecache_340.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_238.2.dr	String found in binary or memory: https://ajuda.rdstation.com/s/faleconosco?utm_source=rdstation&utm_medium=referral&utm_id=paginaerro
Source: chromecache_295.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_381.2.dr	String found in binary or memory: https://app.rdstation.com.br
Source: chromecache_296.2.dr, chromecache_340.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cdn.leadster.com.br/neurolead/neurolead.min.js
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_288.2.dr	String found in binary or memory: https://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/
Source: chromecache_381.2.dr	String found in binary or memory: https://d335luupugsy2.cloudfront.net
Source: chromecache_381.2.dr	String found in binary or memory: https://d335luupugsy2.cloudfront.net/js/integration/2.0.0/rd-js-integration.min.js?v=1
Source: chromecache_381.2.dr	String found in binary or memory: https://d335luupugsy2.cloudfront.net/js/lead-tracking/stable/lead-tracking.min.js
Source: chromecache_381.2.dr	String found in binary or memory: https://d335luupugsy2.cloudfront.net/js/traffic-source-cookie/stable/traffic-source-cookie.min.js
Source: chromecache_291.2.dr	String found in binary or memory: https://denuncia.questor.com.br/
Source: chromecache_334.2.dr	String found in binary or memory: https://design.firefox.com/product-identity/firefox/firefox/firefox-logo.png
Source: chromecache_333.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_394.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_291.2.dr	String found in binary or memory: https://docs.questor.com.br/
Source: chromecache_260.2.dr, chromecache_440.2.dr, chromecache_237.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_260.2.dr, chromecache_440.2.dr, chromecache_237.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_238.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Nunito
Source: chromecache_291.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Nunito
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OI6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC0OIKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OA6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlC6OAKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQ6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCmOQKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOY6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCpOYKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOM6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCtOMKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOU6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCwOUKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOE6T_N7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.0.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.10.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.100.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.101.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.102.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.103.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.104.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.105.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.106.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.107.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.108.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.109.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.11.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.110.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.111.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.112.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.113.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.114.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.115.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.116.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.117.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.118.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.119.wo
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.12.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.13.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.14.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.15.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.16.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.17.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.18.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.19.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.2.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.20.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.21.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.22.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.23.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.24.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.25.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.26.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.27.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.28.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.29.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.3.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.30.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.31.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.32.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.33.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.34.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.35.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.36.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.37.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.38.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.39.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.4.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.40.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.41.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.42.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.43.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.44.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.45.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.46.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.47.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.48.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.49.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.5.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.50.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.51.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.52.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.53.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.54.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.55.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.56.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.57.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.58.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.59.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.6.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.60.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.61.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.62.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.63.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.64.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.65.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.7.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.8.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.9.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.93.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.94.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.95.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.96.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.97.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.98.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR44z5ZnPydRjlCCwlCzOEKTZFstupOfBjNSl5zPnvB_dOjwqCu.99.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.0.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.10.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.100.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.101.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.102.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.103.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.104.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.105.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.106.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.107.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.108.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.109.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.11.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.110.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.111.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.112.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.113.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.114.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.115.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.116.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.117.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.118.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.119.wof
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.12.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.13.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.14.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.15.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.16.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.17.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.18.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.19.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.2.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.20.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.21.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.22.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.23.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.24.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.25.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.26.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.27.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.28.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.29.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.3.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.30.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.31.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.32.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.33.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.34.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.35.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.36.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.37.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.38.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.39.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.4.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.40.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.41.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.42.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.43.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.44.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.45.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.46.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.47.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.48.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.49.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.5.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.50.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.51.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.52.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.53.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.54.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.55.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.56.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.57.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.58.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.59.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.6.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.60.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.61.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.62.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.63.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.64.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.65.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.7.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.8.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.9.woff2
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.93.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.94.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.95.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.96.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.97.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.98.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.99.woff
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCPctaNY.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.0.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.10.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.100.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.101.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.102.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.103.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.104.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.105.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.106.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.107.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.108.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.109.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.11.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.110.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.111.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.112.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.113.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.114.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.115.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.116.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.117.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.118.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.119.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.12.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.13.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.14.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.15.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.16.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.17.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.18.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.19.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.2.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.20.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.21.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.22.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.23.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.24.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.25.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.26.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.27.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.28.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.29.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.3.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.30.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.31.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.32.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.33.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.34.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.35.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.36.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.37.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.38.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.39.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.4.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.40.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.41.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.42.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.43.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.44.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.45.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.46.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.47.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.48.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.49.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.5.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.50.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.51.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.52.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.53.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.54.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.55.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.56.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.57.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.58.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.59.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.6.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.60.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.61.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.62.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.63.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.64.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.65.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.7.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.8.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.9.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.93.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.94.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.95.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.96.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.97.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.98.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwl6aaU4Qt0V05ZAcgT3T1VKO2vL6LbP.99.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwlKa8cv.woff2)
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe0RMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9w
Source: chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8u
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_345.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_328.2.dr, chromecache_277.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/epiksel/countdown
Source: chromecache_271.2.dr	String found in binary or memory: https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt
Source: chromecache_333.2.dr, chromecache_338.2.dr, chromecache_394.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_328.2.dr, chromecache_277.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_450.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_265.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_265.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.32.0/LICENSE
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_348.2.dr	String found in binary or memory: https://google.com
Source: chromecache_348.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_423.2.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: chromecache_394.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_291.2.dr	String found in binary or memory: https://instagram.com/questorsistemas
Source: chromecache_394.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_291.2.dr	String found in binary or memory: https://linkedin.com/company/questor-sistemas
Source: chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_296.2.dr, chromecache_340.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_366.2.dr	String found in binary or memory: https://pageview-notify.rdstation.com.br/send
Source: chromecache_394.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_291.2.dr	String found in binary or memory: https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&am
Source: chromecache_291.2.dr	String found in binary or memory: https://privacidade.questor.com.br/
Source: chromecache_340.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_291.2.dr	String found in binary or memory: https://questor.com.br/central-de-atencao-questor
Source: chromecache_291.2.dr	String found in binary or memory: https://questor.com.br/questor-negocio
Source: chromecache_291.2.dr	String found in binary or memory: https://questor.com.br/questor-syn
Source: chromecache_291.2.dr	String found in binary or memory: https://questor.desk.ms/
Source: chromecache_394.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_394.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_394.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_394.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_340.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js?ver=6.5.2
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_238.2.dr	String found in binary or memory: https://status.rdstation.com.br/
Source: chromecache_394.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_394.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_394.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_394.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_296.2.dr, chromecache_340.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_334.2.dr	String found in binary or memory: https://upload.wikimedia.org/wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v6.4.2/css/all.css
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v6.4.2/css/v4-shims.css
Source: chromecache_394.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_272.2.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid
Source: chromecache_325.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_327.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_334.2.dr	String found in binary or memory: https://www.google.com/intl/pt-BR/chrome/
Source: chromecache_352.2.dr, chromecache_439.2.dr, chromecache_382.2.dr, chromecache_359.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1027983844/?random
Source: chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_394.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_296.2.dr, chromecache_340.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_432.2.dr, chromecache_238.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5CDSWRL
Source: chromecache_238.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NVX78QP
Source: chromecache_408.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_394.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_334.2.dr	String found in binary or memory: https://www.mozilla.org/pt-BR/firefox/new/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/#/schema/logo/image/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/#organization
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/#website
Source: chromecache_432.2.dr	String found in binary or memory: https://www.questor.com.br/?p=10406
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/?p=15279
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/?s=
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/analista-contabil-digital/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/analista-fiscal-digital/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/blog/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/cloud/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/conheca-a-questor/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/distribuidores/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/erp-pequenas-empresas/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/fale-conosco/
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/feed/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/gestao-contabil/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/gestao-empresarial/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/integracao-com-hubcount/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/integracoes-questor-mercos-para-vendas-mobile/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/marketplace-contabil/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/monitoramento-automatico-das-cnds
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/monitoramento-automatico-das-cnds/
Source: chromecache_432.2.dr	String found in binary or memory: https://www.questor.com.br/politicas-de-cookies/
Source: chromecache_432.2.dr	String found in binary or memory: https://www.questor.com.br/politicas-de-cookies/questor-zen/
Source: chromecache_432.2.dr	String found in binary or memory: https://www.questor.com.br/politicas-de-cookies/questor-zen/#breadcrumb
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-caixa-postal/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-connect/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-integra-maquininha-de-cartao-pos-da-stone/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-negocio/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-syn/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-zen/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-zen/#breadcrumb
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/questor-zen/#primaryimage
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/quiu/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/solucoes-fiscais/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/tareffa/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/trabalhe-na-questor/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/universidade-questor/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/vhsys/
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/css/cursor.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/js/typed.fe.js?ver=1
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/js/typed.js?ver=1
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/cidades-ajax/js/mobwe_js.js?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.21.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/c
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/j
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/form-masks-for-elementor/assets/js/elementor-mask.js?v
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/form-masks-for-elementor/assets/lib/jquery.mask.js?ver
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.4.3
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.3.1
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/css/bootstrap.css?ver=4.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/css/flaticon.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/css/font-awesome.min.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/css/magnific-popup.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/css/slick-theme.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/css/slick.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/inc/backend/css/simple-likes-public.css?ver=6.
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/inc/backend/js/simple-likes-public.js?ver=0.5
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/easypiechart.min.js?ver=20190829
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/elementor-header.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/elementor.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/header-mobile.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/jquery.countdown.min.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/jquery.isotope.min.js?ver=20190829
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/jquery.magnific-popup.min.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/scripts.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/js/slick.min.js?ver=20180910
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/themes/engitech/style.css?ver=6.5.2
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2020/09/questor.png
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Black.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-BlackItalic.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Bold.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-BoldItalic.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Italic.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Medium.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-MediumItalic.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Regular.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-SemiBold.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-SemiBoldItalic.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Thin.woff
Source: chromecache_241.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-ThinItalic.woff
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen1-300x225.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen1-720x540.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen1-768x576.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen1.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen2-300x225.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen2-720x540.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen2-768x576.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen2.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen3-300x225.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen3-720x540.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen3-768x576.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen3.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen4-300x225.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen4-720x540.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen4-768x576.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen4.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen5-300x225.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen5-720x540.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen5-768x576.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2021/10/zen5.jpg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-1024x255.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-1536x383.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-2048x511.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-300x75.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-720x180.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-768x192.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/05/Mockup-Tela-DTEC-720x576.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2022/05/Mockup-Tela-DTEC-768x615.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-720x794.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/001-culos-de-realidade-virtual.svg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/002-virar.svg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/003-integrao-de-dados.svg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/004-conectividade.svg
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Edoc-720x520.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Q-drive-150x150.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Q-drive-300x300.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Q-drive-720x720.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Q-drive-768x768.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Q-drive.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Whats-280x300.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Whats-720x771.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Whats-768x823.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Whats-956x1024.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Whats.png
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/chatbot-zen-celular-601x520.png
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/cropped-favicon_questor-180x180.png
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/cropped-favicon_questor-192x192.png
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/cropped-favicon_questor-270x270.png
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/2023/07/cropped-favicon_questor-32x32.png
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1710847
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=171
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1710
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/global.css?ver=1710847527
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/post-11299.css?ver=1710847529
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/post-15279.css?ver=1713207547
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/post-2840.css?ver=1710847529
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/post-2854.css?ver=1710847529
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/post-3073.css?ver=1710847526
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-content/uploads/elementor/css/post-3897.css?ver=1712669208
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/css/dashicons.min.css?ver=6.5.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/hoverIntent.min.js?ver=1.10.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-json/
Source: chromecache_432.2.dr	String found in binary or memory: https://www.questor.com.br/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-z
Source: chromecache_432.2.dr	String found in binary or memory: https://www.questor.com.br/wp-json/wp/v2/pages/10406
Source: chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/wp-json/wp/v2/pages/15279
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.questor.com.br/xmlrpc.php?rsd
Source: chromecache_286.2.dr	String found in binary or memory: https://www.youtube-nocookie.com
Source: chromecache_269.2.dr, chromecache_333.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_394.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_291.2.dr	String found in binary or memory: https://www.youtube.com/c/QuestorSistemas
Source: chromecache_394.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_296.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_432.2.dr, chromecache_291.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_394.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_394.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_291.2.dr	String found in binary or memory: https://youtube.com/questorsistemas
Source: chromecache_394.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_394.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098

Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.36.68.63:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@30/393@126/44

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dinamicconsultores.app.questorpublico.com.br/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6272 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6272 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: g.k.setPlaybackQualityRange=function(a,b,c){var d=g.OT(this.app,this.playerType);d&&g.Pdb(d,g.jP(a,b\|\|a,!0,"m"),!0,c)}; source: chromecache_394.2.dr
Source:	Binary string: g.Pdb=function(a,b,c,d){a.videoData.Qz=b;if(a.Lf&&c){c=a.pk;var e=a.Lf;if(e.j.j){var f=fP(),h=e.j.videoInfos[0].video.j;if(!(f>h&&0!==h&&b.j===h)){var l;f=gbb(c,null==(l=e.j)?void 0:l.videoInfos);l=c.oa.getPlaybackRate();1<l&&f&&(l=zRa(c.W.G,e.j.videoInfos,l),0!==b.j&&l<b.j&&c.oa.setPlaybackRate(1));var m,n;b=g.wK[mP(b)];e=(null==(m=e.videoData.B)?void 0:null==(n=m.video)?void 0:n.j)\|\|0;g.qC("yt-player-quality",{quality:b,previousQuality:e},31104E3);c.W.schedule.policy.C=480<=fP();if(c.L("html5_exponential_memory_for_sticky")){m= source: chromecache_394.2.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
auth.supernova.io	18.244.202.65	true	false	unknown
i.ytimg.com	64.233.185.119	true	false	high
advisory-snail-red.custom.supernova-docs.io	34.246.128.183	true	false	unknown
d335luupugsy2.cloudfront.net	3.161.169.69	true	false	high
cdn.privacytools.com.br	172.67.74.112	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	74.125.138.156	true	false	high
zenapp02.app.questorpublico.com.br	186.250.92.55	true	false	unknown
scontent.xx.fbcdn.net	31.13.65.7	true	false	high
pages.rdstation.com.br	34.68.90.188	true	false	unknown
fresnel.vimeocdn.com	34.120.202.204	true	false	high
prod.refractr.mozit.cloud	44.236.48.31	true	false	unknown
questor.com.br	209.14.140.191	true	false	unknown
default.supernova-docs.io	52.30.252.71	true	false	unknown
photos-ugc.l.googleusercontent.com	64.233.176.132	true	false	high
www.google.com	142.250.9.147	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
k8s-production.rdops.systems	35.223.116.65	true	false	unknown
icons.iconarchive.com	104.21.235.214	true	false	high
static.doubleclick.net	172.253.124.148	true	false	high
vimeo.com	162.159.128.61	true	false	high
vimeo.map.fastly.net	151.101.0.217	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	high
youtube-ui.l.google.com	172.217.215.136	true	false	high
googleads.g.doubleclick.net	108.177.122.154	true	false	high
play.google.com	172.253.124.102	true	false	high
cdn.leadster.com.br	172.67.75.61	true	false	unknown
td.doubleclick.net	64.233.177.156	true	false	high
upload.wikimedia.org	208.80.154.240	true	false	high
app.leadster.com.br	172.67.75.61	true	false	unknown
vimeo-video.map.fastly.net	151.101.14.109	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	high
pageview-notify.rdstation.com.br	unknown	unknown	false	unknown
i.vimeocdn.com	unknown	unknown	false	high
acorn.firefox.com	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high
f.vimeocdn.com	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	high
design.firefox.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
dinamicconsultores.app.questorpublico.com.br	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
www.questor.net.br	unknown	unknown	false	unknown
l.clarity.ms	unknown	unknown	false	unknown
www.questor.com.br	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
player.vimeo.com	unknown	unknown	false	high
popups.rdstation.com.br	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_8h8a2n6cj&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v	false	unknown
https://www.youtube.com/s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js	false	high
https://www.questor.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	false	unknown
https://www.questor.com.br/wp-content/themes/engitech/inc/backend/css/simple-likes-public.css?ver=6.5.2	false	unknown
about:blank	false	low
https://www.questor.com.br/wp-content/uploads/2023/07/002-virar.svg	false	unknown
https://app.leadster.com.br/api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468625&host=www.questor.com.br&query=&platform=desktop	false	unknown
https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0	false	unknown
https://dinamicconsultores.app.questorpublico.com.br/Content/Images/loginicons.jpg	false	unknown
https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.21.0	false	unknown
https://www.questor.com.br/wp-content/uploads/2021/10/zen2.jpg	false	unknown
https://www.facebook.com/tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET	false	high
https://www.questor.com.br/wp-content/themes/engitech/js/slick.min.js?ver=20180910	false	unknown
https://www.google.com/pagead/1p-user-list/1027983844/?random=1713468654473&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNf2k7qoR8SIQKyLJZa5C03JGRQtclteuSFBMuyko4jcWlODs&random=2501142473&rmt_tld=0&ipr=y	false	high
https://d335luupugsy2.cloudfront.net/js/integration/2.0.0/rd-js-integration.min.js?v=1	false	high
https://www.questor.com.br/wp-content/themes/engitech/css/flaticon.css?ver=6.5.2	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET	false	high
https://www.questor.com.br/wp-content/uploads/elementor/css/global.css?ver=1710847527	false	unknown
https://cdn.privacytools.com.br/public_api/banner/pop/vXME11817141.html?t=1&m=0&c=1,705,326,596,201	false	unknown
https://www.questor.com.br/wp-content/uploads/2023/07/003-integrao-de-dados.svg	false	unknown
https://www.questor.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0	false	unknown
https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_9h2ggd7no&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v	false	unknown
https://www.questor.com.br/wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png	false	unknown
https://www.questor.com.br/wp-content/themes/engitech/fonts/Flaticon.woff2	false	unknown
https://cdn.privacytools.com.br/public_api/banner/script/bottom/vXME11817141.js?t=1	false	unknown
https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Bold.woff	false	unknown
https://d335luupugsy2.cloudfront.net/js/lead-tracking/stable/lead-tracking.min.js	false	high
https://default.supernova-docs.io/auth/login?state=e7462017-ee9c-4fb1-85b2-628528237b17	false	unknown
https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Edoc-720x520.png	false	unknown
https://www.questor.net.br/	false	unknown
https://fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=557d10726a4bf685533a5cd18e4b442310c8a38d1713468662	false	high
https://www.google.com/pagead/1p-user-list/1027983844/?random=1713468622572&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq2loY7UDUNovyKkzFnTkGrxGYpA8jyw&random=3133616513&rmt_tld=0&ipr=y	false	high
https://dinamicconsultores.app.questorpublico.com.br/entrar	false	unknown
https://www.clarity.ms/tag/uet/343080441?insights=1	false	unknown
https://f.vimeocdn.com/p/4.29.7/js/vendor.module.js	false	high
https://www.questor.com.br/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.3.1	false	unknown
https://www.questor.com.br/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18	false	unknown
https://www.questor.com.br/wp-content/uploads/2021/10/zen3.jpg	false	unknown
https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_iuh09f9i7&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v	false	unknown
https://www.clarity.ms/s/0.7.31/clarity.js	false	unknown
https://www.youtube.com/generate_204?a3ddJA	false	high
https://www.questor.com.br/wp-content/themes/engitech/css/font-awesome.min.css?ver=6.5.2	false	unknown
https://player.vimeo.com/video/215696696?color&autopause=0&loop=0&muted=0&title=0&portrait=0&byline=0#t=	false	high
https://www.questor.com.br/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2	false	unknown
https://analytics.google.com/g/collect?v=2&tid=G-WZY91LD4XC&gtm=45je44f0v874940361z8854767554za200&_p=1713468632977&gcd=13l3l3l3l1&npa=0&dma=0&cid=990543739.1713468623&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713468622&sct=1&seg=1&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&dt=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&en=page_view&_et=1&tfd=13150	false	high
https://www.questor.com.br/wp-content/uploads/elementor/css/post-11299.css?ver=1710847529	false	unknown
https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/js/typed.fe.js?ver=1	false	unknown
https://connect.facebook.net/signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C124%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C117%2C217%2C152%2C110%2C133%2C126%2C114	false	high
https://www.facebook.com/tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET	false	high
https://dinamicconsultores.app.questorpublico.com.br/bundles/modal-bootstrap?v=rHzxfH54gahafGK9DFP6lEs3QUY6B_as_gyYDJX3Io41	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.questor.com.br/wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=171	chromecache_432.2.dr, chromecache_291.2.dr	false	unknown
http://www.updateyourbrowser.net/	chromecache_376.2.dr	false	unknown
https://www.questor.com.br/questor-caixa-postal/	chromecache_291.2.dr	false	unknown
http://www.smartmenus.org/	chromecache_391.2.dr	false	high
https://px.ads.linkedin.com/collect?	chromecache_340.2.dr	false	high
https://www.questor.com.br/tareffa/	chromecache_291.2.dr	false	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_277.2.dr	false	high
https://www.questor.com.br/wp-json/wp/v2/pages/15279	chromecache_291.2.dr	false	unknown
http://getbootstrap.com)	chromecache_450.2.dr	false	low
https://www.questor.com.br/questor-zen/#breadcrumb	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/gestao-empresarial/	chromecache_291.2.dr	false	unknown
https://github.com/microsoft/clarity	chromecache_285.2.dr	false	high
https://www.questor.com.br/gestao-contabil/	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-720x180.png	chromecache_291.2.dr	false	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_394.2.dr	false	high
https://www.questor.com.br/universidade-questor/	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/questor-syn/	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/erp-pequenas-empresas/	chromecache_291.2.dr	false	unknown
https://www.google.com/pagead/1p-user-list/1027983844/?random	chromecache_352.2.dr, chromecache_439.2.dr, chromecache_382.2.dr, chromecache_359.2.dr	false	high
https://questor.desk.ms/	chromecache_291.2.dr	false	high
https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver	chromecache_432.2.dr, chromecache_291.2.dr	false	unknown
https://docs.questor.com.br/	chromecache_291.2.dr	false	unknown
https://www.google.com/intl/pt-BR/chrome/	chromecache_334.2.dr	false	high
http://www.questor.net.br	chromecache_334.2.dr	false	unknown
https://www.questor.com.br/politicas-de-cookies/	chromecache_432.2.dr	false	unknown
https://www.questor.com.br/analista-contabil-digital/	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/blog/	chromecache_291.2.dr	false	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_333.2.dr	false	high
https://fontawesome.com/license/free	chromecache_260.2.dr, chromecache_440.2.dr, chromecache_237.2.dr	false	high
https://youtu.be/	chromecache_394.2.dr	false	high
https://www.questor.com.br/questor-zen/#primaryimage	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-ThinItalic.woff	chromecache_241.2.dr	false	unknown
http://icons.iconarchive.com/icons/google/chrome/48/Google-Chrome-icon.png	chromecache_334.2.dr	false	high
https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver	chromecache_291.2.dr	false	unknown
https://player.vimeo.com/NOTICE.txt	chromecache_314.2.dr, chromecache_423.2.dr	false	high
https://getbootstrap.com/)	chromecache_328.2.dr, chromecache_277.2.dr	false	high
https://www.questor.com.br/wp-content/themes/engitech/inc/backend/css/simple-likes-public.css?ver=6.	chromecache_432.2.dr, chromecache_291.2.dr	false	unknown
https://www.questor.com.br/conheca-a-questor/	chromecache_291.2.dr	false	unknown
https://denuncia.questor.com.br/	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Q-drive-300x300.png	chromecache_291.2.dr	false	unknown
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages	chromecache_423.2.dr	false	high
http://youtube.com/drm/2012/10/10	chromecache_394.2.dr	false	high
https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-SemiBoldItalic.woff	chromecache_241.2.dr	false	unknown
https://ajuda.rdstation.com/s/faleconosco?utm_source=rdstation&utm_medium=referral&utm_id=paginaerro	chromecache_238.2.dr	false	high
https://www.questor.com.br/questor-negocio/	chromecache_291.2.dr	false	unknown
https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Black.woff	chromecache_241.2.dr	false	unknown
https://www.questor.com.br/integracoes-questor-mercos-para-vendas-mobile/	chromecache_291.2.dr	false	unknown
http://oceanthemes.net/	chromecache_288.2.dr	false	high
http://jqueryui.com	chromecache_412.2.dr	false	high
http://schema.org/WPFooter	chromecache_432.2.dr, chromecache_291.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.105.132	unknown	United States	15169	GOOGLEUS	false
172.253.124.148	static.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.0.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
64.233.176.132	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.26.10.91	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.9.136	unknown	United States	15169	GOOGLEUS	false
172.67.75.61	cdn.leadster.com.br	United States	13335	CLOUDFLARENETUS	false
74.125.138.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.215.136	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
208.80.154.240	upload.wikimedia.org	United States	14907	WIKIMEDIAUS	false
209.14.140.191	questor.com.br	United States	40676	AS40676US	false
34.246.128.183	advisory-snail-red.custom.supernova-docs.io	United States	16509	AMAZON-02US	false
35.223.116.65	k8s-production.rdops.systems	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
186.250.92.55	zenapp02.app.questorpublico.com.br	Brazil	262967	OptidataLtdaBR	false
151.101.14.109	vimeo-video.map.fastly.net	United States	54113	FASTLYUS	false
172.67.74.112	cdn.privacytools.com.br	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
31.13.65.36	unknown	Ireland	32934	FACEBOOKUS	false
142.250.9.104	unknown	United States	15169	GOOGLEUS	false
52.30.252.71	default.supernova-docs.io	United States	16509	AMAZON-02US	false
64.233.177.119	unknown	United States	15169	GOOGLEUS	false
64.233.177.156	td.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.128.217	unknown	United States	54113	FASTLYUS	false
108.177.122.154	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
64.233.185.119	i.ytimg.com	United States	15169	GOOGLEUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
142.251.15.103	unknown	United States	15169	GOOGLEUS	false
108.177.122.157	unknown	United States	15169	GOOGLEUS	false
34.68.90.188	pages.rdstation.com.br	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
34.120.202.204	fresnel.vimeocdn.com	United States	15169	GOOGLEUS	false
18.244.202.65	auth.supernova.io	United States	16509	AMAZON-02US	false
31.13.65.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
142.250.105.104	unknown	United States	15169	GOOGLEUS	false
104.26.10.199	unknown	United States	13335	CLOUDFLARENETUS	false
3.161.169.69	d335luupugsy2.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.9.147	www.google.com	United States	15169	GOOGLEUS	false
74.125.136.136	unknown	United States	15169	GOOGLEUS	false
104.21.235.214	icons.iconarchive.com	United States	13335	CLOUDFLARENETUS	false
44.236.48.31	prod.refractr.mozit.cloud	United States	16509	AMAZON-02US	false
104.21.235.213	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428365
Start date and time:	2024-04-18 21:28:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dinamicconsultores.app.questorpublico.com.br/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@30/393@126/44
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://dinamicconsultores.app.questorpublico.com.br/entrar#box-send-newpass-usr Browse: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Browse: http://www.questor.net.br/ Browse: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Browse: http://www.questor.net.br/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.94, 172.217.215.101, 172.217.215.139, 172.217.215.102, 172.217.215.138, 172.217.215.113, 172.217.215.100, 173.194.219.84, 34.104.35.123, 142.250.105.95, 64.233.177.95, 64.233.176.95, 172.217.215.95, 108.177.122.95, 64.233.185.95, 142.251.15.95, 74.125.136.95, 173.194.219.95, 172.253.124.95, 74.125.138.95, 142.250.9.95, 13.85.23.86, 23.40.205.59, 23.40.205.58, 23.40.205.75, 23.40.205.48, 23.40.205.49, 192.229.211.108, 20.166.126.56, 199.232.214.172, 172.67.142.245, 104.21.27.152, 13.85.23.206, 172.217.215.97, 13.107.21.237, 204.79.197.237, 23.49.5.148, 23.49.5.145, 13.107.42.14, 20.120.65.166, 20.110.205.119, 172.253.124.102, 172.253.124.100, 172.253.124.138, 172.253.124.101, 172.253.124.139, 172.253.124.113, 162.159.138.60, 162.159.128.61, 74.125.138.94, 142.250.105.94, 142.251.15.101, 142.251.15.100, 142.251.15.139, 142.251.15.113, 142.251.15.138, 142.251.15.102
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, a767.dspw65.akamai.net, use.fontawesome.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, player.vimeo.com.cdn.cloudflare.net, fonts.gstatic.com, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, jnn-pa.googleapis.com, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.m
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://dinamicconsultores.app.questorpublico.com.br/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4957)
Category:	downloaded
Size (bytes):	4997
Entropy (8bit):	5.3943508050550175
Encrypted:	false
SSDEEP:	96:BisNh4jqf9fzI7tNrf8FDqlCDdVMbVDPkmflkxQxN/8S2:MsNKjw9fMNYFDjd8FPkOpNES2
MD5:	D4611B146B41AA47D51076A0D3798082
SHA1:	6BB95B45DFC5379953C39FE6C56322350BE95411
SHA-256:	25CA7ABF6B5B9BECD0676818FDE2D3B374BADCFF7867F95DBCBFEBEAC59A24C0
SHA-512:	8AEA3153A84C401A138518EBE7730AC1ACD0B9CC3CAC6EB8019520820DF0BBD3D74596BAA8D5139ABD9DC88A78D93A951167BFE520EA7CC7BB062793C0D32F74
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0
Preview:	/! elementor - v3.21.0 - 15-04-2024 /.(()=>{"use strict";var e,r,_,t,a,i={},n={};function __webpack_require__(e){var r=n[e];if(void 0!==r)return r.exports;var _=n[e]={exports:{}};return i[e].call(_.exports,_,_.exports,__webpack_require__),_.exports}__webpack_require__.m=i,e=[],__webpack_require__.O=(r,_,t,a)=>{if(!_){var i=1/0;for(u=0;u<e.length;u++){for(var[_,t,a]=e[u],n=!0,o=0;o<_.length;o++)(!1&a\|\|i>=a)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](_[o])))?_.splice(o--,1):(n=!1,a<i&&(i=a));if(n){e.splice(u--,1);var c=t();void 0!==c&&(r=c)}}return r}a=a\|\|0;for(var u=e.length;u>0&&e[u-1][2]>a;u--)e[u]=e[u-1];e[u]=[_,t,a]},_=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,__webpack_require__.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var a=Object.create(null);__webpack_require__.r(a);var i={};r=r\|\|[null,_({}),_([]),_(_)];for(var n=2&t&&e;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2894
Entropy (8bit):	5.130108035080603
Encrypted:	false
SSDEEP:	48:HrjSTxswDB/P7LUS0BvpKkR2/HSXmpgMPnfFrYHe1rcYlX3orrkdEv4Hm6Hid:HC+2/Vpb/flue1pFdEv4Hmo0
MD5:	3FD2AFA98866679439097F4AB102FE0A
SHA1:	DBC9C4139E49D0D9FB41B7191AAD1A2DB6C555FD
SHA-256:	CCD31FFA708D025833F954B3E0560CEDD58DF9A0D2706B2CCEE5F501C5B2467B
SHA-512:	82811EF42ABD80CBEBD4A74D35475FC3871478FC25A486B08BB7E04921B7824DB56C56B2191E9AB56A421552B483A2E64F966396711E5F248AFAE9D1DED22CB2
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3
Preview:	.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..clip-path: inset(50%);..height: 1px;..width: 1px;..margin: -1px;..padding: 0;..border: 0;..word-wrap: normal !important;.}...wpcf7 form .wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #00a0d2; /* Blue /.}...wpcf7 form.init .wpcf7-response-output,..wpcf7 form.resetting .wpcf7-response-output,..wpcf7 form.submitting .wpcf7-response-output {..display: none;.}...wpcf7 form.sent .wpcf7-response-output {..border-color: #46b450; / Green /.}...wpcf7 form.failed .wpcf7-response-output,..wpcf7 form.aborted .wpcf7-response-output {..border-color: #dc3232; / Red /.}...wpcf7 form.spam .wpcf7-response-output {..border-color: #f56e28; / Orange /.}...wpcf7 form.invalid .wpcf7-response-output,..wpcf7 form.unaccepted .wpcf7-response-output,..wpcf7 form.payment-required .wpcf7-response-output {..border-color: #ffb900; / Yellow */.}...wpcf7-form-contro

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27374)
Category:	downloaded
Size (bytes):	27593
Entropy (8bit):	4.837122304634699
Encrypted:	false
SSDEEP:	384:0pwu4Eyfd7PNRzAmReUtPAM0NuzwpmnWt:0WuqdNReUtPAM0v4E
MD5:	665DE85010641F678F0178A9D330A7AF
SHA1:	BF1EC2791CD06922F4A1B67480F75209D85E6DEB
SHA-256:	0E0A27C105CAF20BD4CC76FE58F222D856AB8F626447846842DDDCA8CE7509EF
SHA-512:	7D67CEFFB7860E9AEFA7BFD40139DF8693C3805DF77DEB63F78B43BFDAB4CFF58DE0F0D88933FDEFE41C5754168296E46FEAD4A7BEA0EA09480F999D7FF2BE49
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v6.4.2/css/v4-shims.css
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */..fa.fa-glass:before{content:"\f000"}.fa.fa-envelope-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-envelope-o:before{content:"\f0e0"}.fa.fa-star-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-home:before{content:"\f015"}.fa.fa-file-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 6 Free";font-weight:400}.fa.fa-arrow-circle-o-do

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	2359
Entropy (8bit):	5.125982147086506
Encrypted:	false
SSDEEP:	48:tb2IUwRI4Mvvzwgur1RzVDBMa6FJKJyNGci+1aM:drgvLwgur1976XqcjQM
MD5:	13A492AC138A395F0A78BFCD37DF6003
SHA1:	8843DEB07C1A0D97E74B33101DAD84BA454EF92F
SHA-256:	816944CED2A06A1FBF01B1F10479122E786F0C6FDC5263CC6CD9DEA06F5E4EBA
SHA-512:	71959C518643E1E94432503F06D66147F8033EBA72C0FF7637E9759EB29B3BA2DDF9ED655912F052CE248019F56F712C5B7CB3755FC161EC022ABF466C6D6EEA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>..<head>. <meta charset="UTF-8">.. Google Tag Manager -->. <script>(function (w, d, s, l, i) {. w[l] = w[l] \|\| []; w[l].push({. 'gtm.start':. new Date().getTime(), event: 'gtm.js'. }); var f = d.getElementsByTagName(s)[0],. j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =. 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);. })(window, document, 'script', 'dataLayer', 'GTM-NVX78QP');</script>. End Google Tag Manager -->.. <meta name="viewport" content="width=device-width,initial-scale=1">. <title>RD Station Marketing \| 404 P.gina N.o Encontrada</title>.. <style>. @import url('https://fonts.googleapis.com/css2?family=Nunito+Sans&display=swap');. </style>.. <link rel="stylesheet" href="//d3ndvx6e67vt0s.cloudfront.net/assets/error_page2/stylesheets/error_pages.css" />.</head>..<body>. Google Tag Manager (noscript) -->.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10918
Entropy (8bit):	7.977820921269713
Encrypted:	false
SSDEEP:	192:NVU2KHDeZ8pNdH5mKEnQyLgoKSOECGDceKuY5y+BVfURYEi0:NeDq8p1cgoK/GDvgLfCY
MD5:	1FDC1070CEF176653677D9EC5477E8DC
SHA1:	90902E9918B92E1D6A0538A8A329900A4CFD8877
SHA-256:	D800149CE9A641119085477901038F17775C57E69D3B8B77E014B24D4A332D91
SHA-512:	A8FE6B68CC3B82D7539C84BBEA6CB46748CFA9AE23315E8219A873A8B3C8BD2EE334C4791A7B0BA3AEE0D18A7C6024962E3C876E0F74E5CE1D37168ED44EB96B
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8 ............>m6.I$"."!.y....en..g.o..l.k...E...[.3.....x..Wn.._.w....N.....y.....i..?........7.'...w..lo_?...~ \|............O...f?....I.......o..aO....z......a.....c...7....k....:.....:..........g..q.s.[.......5....{C._...y....`..........K.>._.......U.o.O?_..............w..vO.W.....H..iAR,..PT.+f.."...H..iAR,..PT.+f.."...H..iAR,.`..y..\|5......6..8....!..P.>.1a....".. .)..?"..>...Yz.lS.I...8w.gyJ.;...ZQ...XV.\|<{.O.`PA.I...T.K5=......^.........r....L..E".b~.k............A.}....<=......V...=.#..r...Y.L\|z.0j..7x~..>_..@.B......m...-.!......................\.s.Dx.L..v.~.y.\..........'5...o.<...J.:.C....D.\|U.....Y.40_.a..RC....O...]w..6%{.J..t......,..Q...&[Z./..k-..m..u.y).K..k...m../.<3...]..E~!.B.2H..."f+..}..U{7c.02.[c..:.I9.j>.k.L...].~..Q.(*Q!....h.T........""...nH..W..?\...`..R+...9.. ..+..YQ..Bd.#..p7f.X..Fr.v.A].....1....>w.c.@...C.E....t..g..........a..!V...).../..^....;...).C...:.(b.+.-\|:....Z...m...X..(

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:25:35], baseline, precision 8, 800x600, components 3
Category:	downloaded
Size (bytes):	352632
Entropy (8bit):	7.945308034876878
Encrypted:	false
SSDEEP:	6144:IZiZsuLLd4ph0kfOdAd/A8MWpZAn2OxVdgFNpFbiQDzOtjcl67nW/QjiTNOhxfQ:IEPIhf82Zu0fBOGl67nCQGROvfQ
MD5:	D9F09608299014A82654CEACA4521743
SHA1:	A7B004B1245924A0B9C71333D7441B6E209FB302
SHA-256:	25FC3A242121F1910D4765E1E377885D7B3ED478ADCBC076852C02E37DBCC17A
SHA-512:	374FED387535E1135502A9CA6EB8C1A6730B36750654AF6D553BD25C3CE758157043238D5BB8F4AC63574987FFE10EA2FBCCE42F7B323768FE7B4C9FCFFFDA26
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2021/10/zen5.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:25:35............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..d.$...I.R.$.JRI$..K.jP3s1.q-..qe..q.I$.elo..m.mu3..\I....an-....-5c.l.........8.V}..92s..\|1.{=..r!%.....s.=V.....7I..;>.{K...7o.6..........v.psC..]5....1

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32282)
Category:	downloaded
Size (bytes):	34939
Entropy (8bit):	4.808877706580758
Encrypted:	false
SSDEEP:	768:Y/zgRzeKdDLeDUyT6U2bfgXdr6akqHi8Ij:jzezU7d
MD5:	82BB263F84DB13F1BA917D82BDDF824D
SHA1:	D4731870AA55ECFC1EDC6CA51237A4DB22971A1F
SHA-256:	830A84603A842455CE49F1DCF03FBEE9E3C0110B4CBFAB33488C26F03B7B6DA6
SHA-512:	DF25FAB02DAFDBAA326430577BD5F461B15895785C826F887FA0D0B6972F63BCB0E89557E1798414813335C3CB254677DBF4E21253FF35D31E742D4C43E1CCDE
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/post-15279.css?ver=1713207547
Preview:	.elementor-15279 .elementor-element.elementor-element-2843a14 > .elementor-container{max-width:1174px;}.elementor-15279 .elementor-element.elementor-element-2843a14 > .elementor-container > .elementor-column > .elementor-widget-wrap{align-content:center;align-items:center;}.elementor-15279 .elementor-element.elementor-element-2843a14{padding:2% 0% 1% 0%;}.elementor-15279 .elementor-element.elementor-element-711be63 > .elementor-widget-container{padding:0px 0px 015px 0px;}.elementor-15279 .elementor-element.elementor-element-62c8780 .elementor-button{background-color:var( --e-global-color-primary );}.elementor-15279 .elementor-element.elementor-element-62c8780 > .elementor-widget-container{margin:10px 0px 0px 0px;}.elementor-15279 .elementor-element.elementor-element-3015e06:not(.elementor-motion-effects-element-type-background), .elementor-15279 .elementor-element.elementor-element-3015e06 > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:var( --e

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58981)
Category:	downloaded
Size (bytes):	59016
Entropy (8bit):	6.036924444025019
Encrypted:	false
SSDEEP:	768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq
MD5:	D68D6BF519169D86E155BAD0BED833F8
SHA1:	27BA9C67D0E775FC4E6DD62011DAF4C3902698FC
SHA-256:	C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E
SHA-512:	FD0956D1A7165E61348FDA53D859493A094D5A669AA0BA648BE3381B02ED170EFD776704AF6965F1E31143F510172EE941D4F2FC32C4751D9B8763B66301486D
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/css/dashicons.min.css?ver=6.5.2
Preview:	/! This file is auto-generated /.@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	9141
Entropy (8bit):	5.2975271144294185
Encrypted:	false
SSDEEP:	192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF
MD5:	A8127C1A87BB4F99EDBEEC7C37311DCD
SHA1:	9997A1745F48BDD233DBE9BD8164DAA53EBA105B
SHA-256:	F313D12EA6124BD28FC4A6B7163D253BB83D5AEAB5EDCE594880C5C3DF475CBC
SHA-512:	AA10DDC5B29905C60A058FAED3F5F195F7577CEAC46489E02461B5135732194DAA3AEF4AA473127BF8C753312E02074CFDAC8D0F8F0CC8AA544C7F8E02BEBD08
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Preview:	/! This file is auto-generated /.(()=>{var t={2058:(t,e,r)=>{var n;!function(){"use strict";var i={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/[bcdiefguxX]/,json:/[j]/,not_json:/[^j]/,text:/^[^\x25]+/,modulo:/^\x25{2}/,placeholder:/^\x25(?:([1-9]\d)\$\|$([^)]+)$)?(\+)?(0\|'[^$])?(-)?(\d+)?(?:\.(\d+))?([b-gijostTuvxX])/,key:/^([a-z_][a-z_\d])/i,key_access:/^\.([a-z_][a-z_\d]*)/i,index_access:/^\[(\d+)\]/,sign:/^[+-]/};function a(t){return function(t,e){var r,n,o,s,l,u,p,c,f,d=1,h=t.length,g="";for(n=0;n<h;n++)if("string"==typeof t[n])g+=t[n];else if("object"==typeof t[n]){if((s=t[n]).keys)for(r=e[d],o=0;o<s.keys.length;o++){if(null==r)throw new Error(a('[sprintf] Cannot access property "%s" of undefined value "%s"',s.keys[o],s.keys[o-1]));r=r[s.keys[o]]}else r=s.param_no?e[s.param_no]:e[d++];if(i.not_type.test(s.type)&&i.not_primitive.test(s.type)&&r instanceof Function&&(r=r()),i.numeric_arg.test(s.type)&&"number"!=typeof r&&

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 132532, version 0.0
Category:	downloaded
Size (bytes):	132532
Entropy (8bit):	7.9930314375123155
Encrypted:	true
SSDEEP:	3072:NoAHFhxxQkoxDaSGFUX0g3iYsRzmrzO3JYjXbM7vSGzChI:NoAlhxxQhWuX0gOd8z4YjXbMbQhI
MD5:	137A9F5F920BCCCAD63C115397DC1532
SHA1:	FFEFF0ECBA6363380E2F473952779A66E82A7190
SHA-256:	C5CF5C12460A4237C53BA41F4611F73C4DC17CB8CFBC1B8396FF4D25E751F936
SHA-512:	1A63009B91FB0BB9F11F722732929375F137B7F74AB108345FE97C477AE9B00C4DC476E27CFBF44D2A611E7B2E53AD64DA3FA5E3D0F480C297BB91E2687F26D6
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2021/09/Montserrat-Bold.woff
Preview:	wOFF........................................FFTM..............eWGDEF..0.........x..SGPOS..Ql......^Wc.GSUB..1p......@Ff.f9OS/2.......R...`V.Ucmap...P...O....c.bacvt .......f....3..=fpgm.......p...mM$.\|gasp..0.............glyf..'........D...head.......6...6....hhea.......!...$...Ohmtx...d........3.^yloca...4.........i[zmaxp....... ... ....name...........`r...post......#...U....Qprep.............K........335..[_.<............F......@........4............x.c`d``>...m.....l..@.d.^...3.F........q.N...U.....(.:.......#....x.c`a.........).....B3.1.1:..............\.P.G........O...g.e.S``...c..............x...pU.......~H$.)!!......V.).%!.R.O..J.P.):.:R..f...b;.X)...@.TB.8j}..C[.R.0....-....[..{=..8-L..?.....Zk...\z.?..H..<).vJ../.f.d.IgsH..$.w.x..i.m.6.J.{M.......y....i).VI33Q<39..6.5..../.f.\|.\|_......#.. .[.68o.J.9"....G.[Ri-.^R..(w.>6'..........S.Gy...\|.m.T.......:.X.98.=.....=\|..._..!.O7_..f...$.j~....rinj(..WJ...&...1?.....~.i.,.}..2.L..e. .J.y>gr..J.V..V2...$d..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2639
Entropy (8bit):	4.460518333297625
Encrypted:	false
SSDEEP:	48:c+gU8h5l3ge0nLLaB9g42Ux7RtPdGFTUO18xU5AVMHovt/W:7gBl3H0n3aB9g42UxFtE3oKAuHovtO
MD5:	8EB98C743F8786DBC9019B5CD85C8AE0
SHA1:	0AF816166CA52E09EA3975760597E081299773C2
SHA-256:	7F891264E72A45E87664844B1E259F48BB0D8BA2C565DA1F44C81456BA7B52CC
SHA-512:	C1F1F9B11C8D317E7281DB480A5496B4CAA01090333FFD456E27D4FE2CE08550F2D512D5C242ECB7F4226655F3059C368EDC637C8A1BE50DB6A43758E0188ED5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="m509.421 196.955-94.575-82.038a7.479 7.479 0 0 0-12.38 5.649v42.715l-37.826.012-.171-.004c-25.662-.568-50.379 5.557-72.148 17.576V109.06h46.818a7.478 7.478 0 0 0 5.584-12.454L261.591 3.278a7.48 7.48 0 0 0-11.172 0l-83.132 93.33a7.48 7.48 0 0 0 5.584 12.454h46.818v32.93a7.479 7.479 0 0 0 14.958 0v-40.409a7.479 7.479 0 0 0-7.479-7.479h-37.62l66.454-74.606 66.454 74.606h-37.618a7.479 7.479 0 0 0-7.479 7.479v88.82a143.293 143.293 0 0 0-15.031 12.621c-11.451 11.042-20.731 23.537-27.678 37.134v-68.249a7.479 7.479 0 0 0-14.958 0v104.998c-21.761-12.025-46.465-18.154-72.138-17.577l-.181.004-37.841-.012v-42.715a7.477 7.477 0 0 0-12.38-5.649L2.579 292.995C.94 294.415 0 296.476 0

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1945)
Category:	downloaded
Size (bytes):	1983
Entropy (8bit):	5.149615854813435
Encrypted:	false
SSDEEP:	48:s+WgEH/s7Y7KEfX78CloDQSM4tSb56UCoPa0UX8ARks:jyE7Y7vTblwLM4tSb5dVC0UX8Iks
MD5:	DAE3ED517B23ABAD11D0BD6B79F24080
SHA1:	3CBE159417DAB94723AA715DC8A44B61DFE04A86
SHA-256:	F6D92BE1F6D97A323320191DFED0C85AAA581EF050BE1AE22E20A4AE007BCEE5
SHA-512:	2D4881356FE2EA33532A72FD1033460770E36DB8C5614269E2C396E86C134B89E73BC0461FF2711E7D2E891368821299DF6E53A1E44C8F64CC6719F030F3C992
Malicious:	false
Reputation:	low
URL:	https://d335luupugsy2.cloudfront.net/js/traffic-source-cookie/stable/traffic-source-cookie.min.js
Preview:	/! Resultados Digitais 2023-01-09 /.var TrafficSourceCookie;!function(){"use strict";var t,r,i,o,u,c,a,s,n,f,l,d,m,g,h,p,v,w,_,T;void 0===TrafficSourceCookie&&(t=">>",r="encoded_",i=/rdst_srcid/,o="(none)",s=function(){if(n())return 30<((new Date).getTime()-n())/1e3/60},n=function(){return g().created_at},f=function(n){return"function"==typeof window.btoa?r+btoa(n):n},l=function(n){var e;return"function"==typeof window.atob&&0<n.length&&0===n.indexOf(r)?(e=n.replace(r,""),atob(e)):n},d=function(n){for(var e=n+"=",t=document.cookie.split(";"),r=0;r<t.length;r++){var i=t[r].replace(/^\s+\|\s+$/g,"");if(0===i.indexOf(e))return i.substring(e.length,i.length)}return null},m=function(n){var e=new Date;e.setTime(e.getTime()+31536e6),document.cookie=u+"="+n+"; expires="+e.toGMTString()+"; domain="+c+"; path=/; sameSite=Lax"},g=function(){var e=d(u),e=l(e);try{e=JSON.parse(unescape(e))}catch(n){e=e.split(t),e=_({value:e[1]},{value:e[0]})}return e},h=function(){return a.includes("utm_campaign")

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	40414
Entropy (8bit):	7.9634890448198945
Encrypted:	false
SSDEEP:	768:TUS55Msm51qxNIB1x+hcv7ktuBqlmY2bher98bRDtwKCN49lRGY:K9IxNIB1x+KvwuBqlBvR80KCO7GY
MD5:	11E07E25233A517146A5A8EACD19F5C1
SHA1:	181D1C5FC910C5539C5527882BC3E233B488AA09
SHA-256:	565A47112A13824C38A452C771854E716844318024245662822008536A17FD6E
SHA-512:	7CBE1306774439BD466FE85E052E73073F1F4992780AF5718ECBF808188CA6B0435F22D80D87D2BDF1DFCCA71E5158DE71F42AB6606DCDA673F6CAFC882564C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.............pHYs..........+.... .IDATx....eWu..Y.......z4=.....R)L.JE..Q.....cY..`......fd.cB.QT..P...1..~.o..........e,...E.0.F..{y.^..G.....k.8?.........z}..{..Z...k..>BE=`R.b.=.$......Zl..a..?...'kQ.E0....bx...[.&.KV........_.cCQ.H.K...s...Y.c....<.R.b...`N....^.R......-S...],].....r)..^..k.46..y\|.'M.kIc....S...i.J0K.w...t.../.oT.....P.#Z.\|...1...X.....i.B_..-...t.....E....E./..)..E:EiYy.]<%eZ.S...VN..1....v...R...[F.".0h.W..J%...Q0...^....1.%..H...^F."...w.=...e.b:j..R..,.....Xx.PM.].....v.'...e(.Z.K.r.#.4,Z....WF..5......<..Nlx..!.3/.V?/O.>78.~.x<..2.&'..h.:..%.kT.......aie/J.c.#.X....mX$.+<W.%z.4..Y6\|......2.["+....+M.u..bp....Z$...db..{.2.{1.%.W2....KeFuT'..h.E.c._i^J..2......]X..,.W......r#m.RR.......H...5.].7.k.)V...'.1...=...J.lx.?{........]..RW....cn*.....zu...^..zyu..y..:Z.._...].-...x....._..k..F......y.......[..V.(.%.....N..-....}.R.S.KW'.\|..".b.y]..D...E..F...W...ePb.".....'.+...b

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 204 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2116
Entropy (8bit):	7.871702931550276
Encrypted:	false
SSDEEP:	48:iO0T7uJlHKP5we2f3np5Q6i24HeX4QoGPJfjDin6W:ITSJpKPaBfzQp274QPHW6W
MD5:	F8D479C14D1BEF9C024837322BF087E0
SHA1:	38153D965EC53F09953CCB75223030F7B3E5DEC6
SHA-256:	D6E7072BDDA42B558101921D2464B136C9DFB2528690E9C36B0030C1E84F871D
SHA-512:	39D7E7F019197E619EB278EC3DD66586A689351C019369118D1CB7DDB2596ECF986C27A048801D90394E76D335DD1AC2518D0B57F9CB700F8BE1082290EC9220
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2020/09/questor.png
Preview:	.PNG........IHDR.......6......+v.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..];r.F..T./.86U......@d.Hd.P..D..T.t.P...:...U.....`.-7VXh>=..@R...TK.@c...of6....@ .....@ .....@ ...u.........B...@.(~.A.B{.......2...E. ....Z.....).g)."8j.EY.U..$.........a.,..3......3..d2L.. .....F.0...i..O..."....N=.2i.,.......m\|. .f.n..A...\..3%....`.4.!...KF...3.G...].].u.V}....%.1.i.M....4......0.!....aZ...t.=...p....yuu......~{.r.'....} . .v...1fx$..W.&i...s..<D.W..R....u.........~.4.S...B......_.>K....e.(H...1.'.?.-].....R.-......d...U.B.Z.... ..P1.3.......i.XG..F...~...A.....'.,d......]W..)..g=AKj!......oE...J.#...(.@...M.....}..(...s.ps.....w../.<\.E...n...T.UJ..).g.>6J./!....<.n]n,>....61.>.....J.s.5.8r.r...X.\|S.l..ogO.}I...vL.../..fu$......c.2...j..e.T.x......_..=..G.....c.SBD...y'..O*9{HzN.K.....s..M\|..0.wV..p..=.Y2U%ML.g.6..f.y......^_e..+"..p7...!{.l.yC..+.$...0Q...0A..o..7.........i\...I.~....j....4..iM..Y...(\.C..3X....s....T......%..C.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4609793&time=1713468622232&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:24:29], progressive, precision 8, 800x600, components 3
Category:	downloaded
Size (bytes):	364492
Entropy (8bit):	7.973510039503235
Encrypted:	false
SSDEEP:	6144:cjbmjbRIiAZNVKsukYrFkNvZSqS4lgRspkYAcirBJT8FLW/Bz+1Dgy15akCS9rdk:I+JAklkYGNvZSh4lgRspGb9BzAp5d9XO
MD5:	02E5D64A6183B8A4E118035C506F241C
SHA1:	168223549F035299943EF6ED1B34731684FCF739
SHA-256:	BDA5CBD01A772D3A620407873935A19F071893CE6A5614B14F3FECFFF3F0BEA0
SHA-512:	9290381E962029472394133E167B4888DAD1D874B71C2B6A1DF38AE41CF8BA53DFD9117CFFE12BD89CF42C64A77AD437F3F9E29993F472BC5059794CF633600D
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2021/10/zen2.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:24:29............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..:.M.3!.#&.H`>.O5.'.......gO.n.hh.......*.(E.......Y....PcM..............[...S".\'.d;eU.....h..9su}p.as..X..k\.o..f..&.....Y#.R......_-.+>.?.T:g.LL.e.8

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32003), with CRLF line terminators
Category:	downloaded
Size (bytes):	35631
Entropy (8bit):	5.039408805516544
Encrypted:	false
SSDEEP:	768:DjUIewRmi5Bnh/JMFmlD6sMlD6gjfGXrrTTfvVyy9zx:DjlZBnh/J2KD6LD6nrTT/9zx
MD5:	D5E00CF73D518CA8D72C253C51E6014A
SHA1:	409130EC6321C17EBF6743F6AE0816E5DDDA7235
SHA-256:	7FE76FC5D85D4E5B0B7D32C7C9FF88A3F6556342EFA6D29D701344FFC76AFADD
SHA-512:	07940B350DE3433C4E2244466F584F841823BF47B6E7822539FCDBCEB2D3D5B90AE9DC804CE28327E53805833B452D7A4B35F0FC5FAEC33A8B574BB16A5A2250
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/jquery.isotope.min.js?ver=20190829
Preview:	/!.. Isotope PACKAGED v2.0.0.. * Filter & sort magical layouts.. * http://isotope.metafizzy.co.. */....(function(t){function e(){}function i(t){function i(e){e.prototype.option\|\|(e.prototype.option=function(e){t.isPlainObject(e)&&(this.options=t.extend(!0,this.options,e))})}function n(e,i){t.fn[e]=function(n){if("string"==typeof n){for(var s=o.call(arguments,1),a=0,u=this.length;u>a;a++){var p=this[a],h=t.data(p,e);if(h)if(t.isFunction(h[n])&&"_"!==n.charAt(0)){var f=h[n].apply(h,s);if(void 0!==f)return f}else r("no such method '"+n+"' for "+e+" instance");else r("cannot call methods on "+e+" prior to initialization; "+"attempted to call '"+n+"'")}return this}return this.each(function(){var o=t.data(this,e);o?(o.option(n),o._init()):(o=new i(this,n),t.data(this,e,o))})}}if(t){var r="undefined"==typeof console?e:function(t){console.error(t)};return t.bridget=function(t,e){i(e),n(t,e)},t.bridget}}var o=Array.prototype.slice;"function"==typeof define&&define.amd?define("jquery-bridget/

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10287), with no line terminators
Category:	downloaded
Size (bytes):	10287
Entropy (8bit):	5.186109917031445
Encrypted:	false
SSDEEP:	192:4v6jbN3B7E+rLKlrm5ReHK5o8ZH+gpYTMHcJ67qYD:4v6jbNiSemnYeciD
MD5:	8456FF924AFC1C7B79F8E9C61D4EDB50
SHA1:	69381F72090B4A2B76385DCBE86A5CE33A042820
SHA-256:	BC9CE60ECD8AD81F4255BAEC05CEE96D4A32F484F1CC6975E11AC87A5DE667F2
SHA-512:	4A51B11B965A633504EB58F3301D50143F77347A240CE8F1F85014FC84818840061B196A5E31F31E8BD8C0410E57A7F1931C699907144375926B0431FA808BCC
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.15
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=100)}({100:function(e,t,n){"use strict";n.r(t);var r=function(e){return"string"!=typeof e\|\|""

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:25:10], baseline, precision 8, 800x600, components 3
Category:	downloaded
Size (bytes):	347680
Entropy (8bit):	7.952813934353732
Encrypted:	false
SSDEEP:	6144:UFnToWQg8/eLiO+QF6E8/IbTXBfnp1KHkHPrX:UFnTx6rQMt/Ixn7KHkv7
MD5:	80CFEBDA417FB1956AC04446515F8062
SHA1:	1018B21B86ED2203CDCF817269810302B83169B5
SHA-256:	9FC9F931C6C0FC8794A9EE7B19447253FC23A388626A66AC7C075F317AEF21E3
SHA-512:	FF81497D1EC4735733046577672E98347D54598BF705087945986862B33FFC34C22F92054DDC56D3C02DDC4DD3C8FC5B4B6CF45F4B24CCF7405EBA4A1CA05006
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2021/10/zen4.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:25:10............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...@...K......^..H.@..T..m.....@.>..{\KA.i.".......K.\6.C..(WU.5..2.6..e.y...F@....<...q.o.];..{.x..O.()..^.....5>...T......A.................mu.D.a{.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1380), with no line terminators
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	4.982769106939095
Encrypted:	false
SSDEEP:	24:c0nAnMDpD5XgLDVN0GNFgH6be5US49H8cyy1e4jjDfzvK19H8pyFKy9H8Oyu:cmqsJ5XqDP0gF0u5m4rzSt7
MD5:	8B73318E0532A9D9D7163D7E788B8635
SHA1:	60B84E5578C601A98284C245B249A22EA0D5FEDC
SHA-256:	9F6B3DB0929B6097DD6DA5DCF6E75ED2EB386259F7DC21D8F87CFBB6DC9A9B96
SHA-512:	B3E94C2FD7B91730F07F5CD6EE0E06C068D718DEC5C70B9D22FBE98F92A739B01723968A6CACA54ED62734E1F32B3F14F04DF1CC953B635B3A09FC857406009E
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/post-3073.css?ver=1710847526
Preview:	.elementor-kit-3073{--e-global-color-primary:#E9511D;--e-global-color-secondary:#E9511D;--e-global-color-text:#393B43;--e-global-color-accent:#393B43;--e-global-color-f6815d2:#FFFFFF;--e-global-color-fa3ba1e:#E9511D00;--e-global-typography-secondary-font-family:"Roboto Slab";--e-global-typography-secondary-font-weight:400;--e-global-typography-text-font-family:"Roboto";--e-global-typography-text-font-weight:400;--e-global-typography-accent-font-family:"Roboto";--e-global-typography-accent-font-weight:500;}.elementor-kit-3073 button,.elementor-kit-3073 input[type="button"],.elementor-kit-3073 input[type="submit"],.elementor-kit-3073 .elementor-button{color:var( --e-global-color-f6815d2 );background-color:var( --e-global-color-primary );}.elementor-section.elementor-section-boxed > .elementor-container{max-width:1140px;}.e-con{--container-max-width:1140px;}.elementor-widget:not(:last-child){margin-block-end:20px;}.elementor-element{--widgets-spacing:20px 20px;}{}h1.entry-title{display:va

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56940), with CRLF line terminators
Category:	downloaded
Size (bytes):	57130
Entropy (8bit):	4.716772851017316
Encrypted:	false
SSDEEP:	768:2YC319PizNq4/xBo8UHJikQ2R/oMQyYJrX75CthZQzB:2YkPUE4/3uHEB2Wfd7stA9
MD5:	BCB9E231E1EBAD9486A058F51E48ECAD
SHA1:	BD8BD96843A052A7595982B851CE09B8DD528CE2
SHA-256:	86B597D2DA16AFEE245CA58F1C95F132655E3C57835D9AC939E23C20925FBA96
SHA-512:	1C52BCC26BE651D6F1510F6D4EC06866BED12F229B7DE7DC3F074A60B7F704859F9F2A20058D6DE6026A72F3080DBBC5CCF306A91857CBBD8745C4A8782CC94F
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/css/font-awesome.min.css?ver=6.5.2
Preview:	/!.. Font Awesome Free 5.12.0 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. */...fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.f

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x100, components 3
Category:	dropped
Size (bytes):	708
Entropy (8bit):	6.634329938945573
Encrypted:	false
SSDEEP:	12:txCZlBXljfrt//TdnHxwB0Wkir7Hf8ynTAkY0gw8AYDnk2:6lXNDtXxHKhn/X7Y0giKt
MD5:	ECA60DB4A378AE0712F73E167023C817
SHA1:	27AAFC7FC52F02EFFE9CA7E0725895C4FDE9D965
SHA-256:	5BFB8813AC10BBDFB518841AD98B15D016AADBA2DDFA513B01FAE7DDB885DA2C
SHA-512:	3042F1ADB396E3F3A49B729FA2BCA07D3B6624032F12F86683532AB20BEC32164FDAD01FA86598E8F236A0FD179A67E4BDF1BC6466417E751D4C9084E7CBFDF6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................... ...C................ ......d.(.........................................0...........................!1A..BQr.."#2Uaq...........................................................?..............G....QRSBb.<..y.8....;=.\.....>...{.M@@A.gP..OY.J$"BG}.... .q.a..C.2.........Q.....VRjc...P.'..3..{.........d..W2/.*...O.......n...cG...R.~...........................!...;..X.L..<..b..'q.K.g..\|.M...W...F.Z.F.1oG....G..[..r.{....Utl.: .....xg..7.2{..O..h[Y,.3k./....PG..k%.).2R.....t6.v.;..h6D.........'.3.\c...:.......4..e...u.Z.....&.ty.;.~.!;....l.$.?q/.............

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:25:10], baseline, precision 8, 800x600, components 3
Category:	dropped
Size (bytes):	347680
Entropy (8bit):	7.952813934353732
Encrypted:	false
SSDEEP:	6144:UFnToWQg8/eLiO+QF6E8/IbTXBfnp1KHkHPrX:UFnTx6rQMt/Ixn7KHkv7
MD5:	80CFEBDA417FB1956AC04446515F8062
SHA1:	1018B21B86ED2203CDCF817269810302B83169B5
SHA-256:	9FC9F931C6C0FC8794A9EE7B19447253FC23A388626A66AC7C075F317AEF21E3
SHA-512:	FF81497D1EC4735733046577672E98347D54598BF705087945986862B33FFC34C22F92054DDC56D3C02DDC4DD3C8FC5B4B6CF45F4B24CCF7405EBA4A1CA05006
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:25:10............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...@...K......^..H.@..T..m.....@.>..{\KA.i.".......K.\6.C..(WU.5..2.6..e.y...F@....<...q.o.];..{.x..O.()..^.....5>...T......A.................mu.D.a{.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x100, components 3
Category:	downloaded
Size (bytes):	708
Entropy (8bit):	6.634329938945573
Encrypted:	false
SSDEEP:	12:txCZlBXljfrt//TdnHxwB0Wkir7Hf8ynTAkY0gw8AYDnk2:6lXNDtXxHKhn/X7Y0giKt
MD5:	ECA60DB4A378AE0712F73E167023C817
SHA1:	27AAFC7FC52F02EFFE9CA7E0725895C4FDE9D965
SHA-256:	5BFB8813AC10BBDFB518841AD98B15D016AADBA2DDFA513B01FAE7DDB885DA2C
SHA-512:	3042F1ADB396E3F3A49B729FA2BCA07D3B6624032F12F86683532AB20BEC32164FDAD01FA86598E8F236A0FD179A67E4BDF1BC6466417E751D4C9084E7CBFDF6
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/Content/Images/loginicons.jpg
Preview:	......JFIF.....H.H.....C....................................................... ...C................ ......d.(.........................................0...........................!1A..BQr.."#2Uaq...........................................................?..............G....QRSBb.<..y.8....;=.\.....>...{.M@@A.gP..OY.J$"BG}.... .q.a..C.2.........Q.....VRjc...P.'..3..{.........d..W2/.*...O.......n...cG...R.~...........................!...;..X.L..<..b..'q.K.g..\|.M...W...F.Z.F.1oG....G..[..r.{....Utl.: .....xg..7.2{..O..h[Y,.3k./....PG..k%.).2R.....t6.v.;..h6D.........'.3.\c...:.......4..e...u.Z.....&.ty.;.~.!;....l.$.?q/.............

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2952
Entropy (8bit):	4.4210567864322705
Encrypted:	false
SSDEEP:	48:c+gU8ZzudIFEINMIuXe9TIx5DI9m9yurZJCqL8H5VVQvFv2laZzRDSEXBRO8QL:7gTuoSu9Ta89m9yQ1YHr6oaZBlLQL
MD5:	EE9559C7A774E1EA67C41C340D1C9399
SHA1:	70D8DC8DE9EB5468776FBA2AAA649BF5D05E3AE7
SHA-256:	07C65A053FFFCE351C50F2EA85774DFD0BFAF39C1F6D4049305AE39FCAE980E9
SHA-512:	CCDCAFA9CC675D8C23052EE5226487E10F5B3E3C96D98D710AD7D4D8478DBAE6E49F7BDFC7C9B9B52CBA680D9AD0B66BB837AF8ED89195F506936AEC39ACAFCC
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/001-culos-de-realidade-virtual.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 124 124" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="m81.85 23.127 1.609.928c2.244 1.296 4.225-2.181 1.998-3.465l-1.609-.928a2 2 0 0 0-1.998 3.465z" fill="#e9511d" data-original="#000000" opacity="1"/>. <path d="M109.625 79.167V45.065c4.211-.919 7.375-4.669 7.375-9.148 0-5.166-4.206-9.368-9.375-9.368a9.344 9.344 0 0 0-6.792 2.929l-10.556-5.954a2 2 0 0 0-1.965 3.485l10.445 5.892a9.357 9.357 0 0 0-.046 5.91l-29.484 17.23c-1.721-2.08-4.322-3.407-7.227-3.407s-5.506 1.327-7.227 3.407l-29.484-17.23a9.36 9.36 0 0 0-.052-5.927l29.866-17.227a9.345 9.345 0 0 0 6.931 3.082c2.738 0 5.197-1.186 6.913-3.062l8.168 4.567c2.263 1.258 4.197-2.237 1.952-3.492l-8.105-4.532a9.33 9.33 0 0 0 .447-2.85c0-5.168-4.206-9.37-9.375-9.37-5.17 0-9

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63224)
Category:	downloaded
Size (bytes):	63265
Entropy (8bit):	5.207090627844495
Encrypted:	false
SSDEEP:	1536:ZeAjA679C+QRCHXC4WHqMPB8Vx8WXwCDFYNIekHeBHmjkfzRNE4cR8+Sxp6xID1C:Fd97yl71kbx
MD5:	5CCC4763017AC61801706D50D27DCFEF
SHA1:	3E5977AEBC5292AEA4592A35763FDE8CD96AC2B5
SHA-256:	88A55F2F63B0693A5E880094799388B608EB0A80F666A7E8460F2AC82E7B3DA5
SHA-512:	E03BCF95F94ABA680DFB8CCE54E974149A72670235D873818888A267194CAC0C6BD5B1BA005ABB000BB74882F66A6D81ACC656B51B638A6DCA835EE3D5C83485
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0
Preview:	/! elementor - v3.21.0 - 15-04-2024 /.(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[354],{381:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=(e,t)=>{t=Array.isArray(t)?t:[t];for(const n of t)if(e.constructor.name===n.prototype[Symbol.toStringTag])return!0;return!1}},8135:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class _default extends elementorModules.ViewModule{getDefaultSettings(){return{selectors:{elements:".elementor-element",nestedDocumentElements:".elementor .elementor-element"},classes:{editMode:"elementor-edit-mode"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$elements:this.$element.find(e.elements).not(this.$element.find(e.nestedDocumentElements))}}getDocumentSettings(e){let t;if(this.isEdit){t={};const e=elementor.settings.page.model;jQuery.each(e.getActiveControls(),(n=>{t[n]=e.attributes[n]}))}else t=this.$element.data("elementor-sett

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3763
Entropy (8bit):	4.524524975432267
Encrypted:	false
SSDEEP:	96:L5El0mFL0yB0R7gsZ7p7cprROprE2j2Bm:6hCNa0pN
MD5:	E4CEE66657CE55E2B0818B43D21A8FB3
SHA1:	E086BF189F591C2A56C184B73EC561EB09CA61E5
SHA-256:	F116944035B3527F06BED102841BF710CA680B96E002D5B7CC6864742C26F2DE
SHA-512:	295201F9339A0BA338468203DCDF1C996AF252E424870E89E269924AF3C9120A56F43EE016D70EE1DBBB386FF016382A8DBDDC89B83CCE868C9E1E0B99A6BED3
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/elementor-header.js?ver=20180910
Preview:	(function($) {.. "use strict";.... /* --------------------------------------------------.. * sticky header.. * --------------------------------------------------/.. $('.header-static .is-fixed').parent().append('<div class="header-clone"></div>');.. $('.header-clone').height($('#site-header .is-fixed').outerHeight());.. $('.header-static .header-clone').hide(); .. $(window).on("scroll", function(){.. var site_header = $('#site-header').outerHeight() + 1; .. .. if ($(window).scrollTop() >= site_header) { .. $('.site-header .is-fixed').addClass('is-stuck'); .. $('.header-static .header-clone').show(); .. }else {.. $('.site-header .is-fixed').removeClass('is-stuck'); .. $('.header-static .header-clone').hide();.. }.. });.. .. / --------------------------------------------------.. * side panel.. * --------------------------------------------------*/.. var element = $('

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12876), with no line terminators
Category:	downloaded
Size (bytes):	12876
Entropy (8bit):	5.1179527069320745
Encrypted:	false
SSDEEP:	96:E/RM439EyyCqLCi5BQ6i4CPIrf6OTpOuwIoLgIZqxydn6YFwQ2gGhsxtUIf/6Mie:E/Rh9EyiCPIrf6DuLWgEn6Y2BgGhsxNZ
MD5:	BCAD7781B3E74DB2565B8424C45232CD
SHA1:	41B0D94434EF667897C06E1184B703064FFCEDA1
SHA-256:	D622534D53D3AC1095AF275F0B30274FCD835785577DF2DDE6D9398E6F7A2C8F
SHA-512:	8BF688AD357079C992136D62AD437795165F22EA1F23919611FCB756D1975D34FE2272819CFCB6B16AA79980997149F253C20334F8AB7BF133E3C91B3F9E98B7
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
Preview:	.swiper-container{margin-left:auto;margin-right:auto;position:relative;overflow:hidden;z-index:1}.swiper-container .swiper-slide figure{line-height:0}.swiper-container .elementor-lightbox-content-source{display:none}.swiper-container-no-flexbox .swiper-slide{float:left}.swiper-container-vertical>.swiper-wrapper{flex-direction:column}.swiper-wrapper{position:relative;width:100%;height:100%;z-index:1;display:flex;transition-property:transform;box-sizing:content-box}.swiper-container-android .swiper-slide,.swiper-wrapper{transform:translateZ(0)}.swiper-container-multirow>.swiper-wrapper{flex-wrap:wrap}.swiper-container-free-mode>.swiper-wrapper{transition-timing-function:ease-out;margin:0 auto}.swiper-slide{flex-shrink:0;width:100%;height:100%;position:relative}.swiper-container-autoheight,.swiper-container-autoheight .swiper-slide{height:auto}.swiper-container-autoheight .swiper-wrapper{align-items:flex-start;transition-property:transform,height}.swiper-container .swiper-notification{pos

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (707)
Category:	downloaded
Size (bytes):	751
Entropy (8bit):	5.126012824487848
Encrypted:	false
SSDEEP:	12:UoCBPX1dE7EEemMNAPOKQ30zhzofTQIPseRWWgAYRRjjwE9oQKX62HoRlviR4SIj:B0LZpmBBLhmRWwkAOoQKX62HoRla4SIj
MD5:	12C0D4B91F81B0711B5B8E33808CF379
SHA1:	764946F6456971E7C97440A616A1E8B572CCCFA7
SHA-256:	A346209DA6ADB41CF88E3A81759E440B74A4D4F6BB18E029600CCC75DCA09D07
SHA-512:	ADD555CDA62C77C40C5BA6CE60EE819CB0B2A4BFAC7675061ED680D2FA858EA92C0EFE5D610E91CC716AF4FC47041E173086CDADF21C3BA8434D73C4C4FE3FBC
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/popup.085c1727e36940b18f29.bundle.min.js
Preview:	/! elementor-pro - v3.21.0 - 15-04-2024 /."use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[50],{8872:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=elementorModules.frontend.handlers.Base.extend({getDefaultSettings:()=>({selectors:{form:".elementor-form"}}),getDefaultElements(){var e=this.getSettings("selectors"),t={};return t.$form=this.$element.find(e.form),t},bindEvents(){this.elements.$form.on("submit_success",this.handleFormAction)},handleFormAction(e,t){if(void 0===t.data.popup)return;const o=t.data.popup;if("open"===o.action)return elementorProFrontend.modules.popup.showPopup(o);setTimeout((()=>elementorProFrontend.modules.popup.closePopup(o,e)),1e3)}})}}]);

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	1055
Entropy (8bit):	5.312171042632955
Encrypted:	false
SSDEEP:	24:E1hfkXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E12XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	25F3CA9CEECFADF1D06A8226E6419E5F
SHA1:	3B38EE70566F7F8A3FA39A1E70C73EE2DD516089
SHA-256:	B50DD0986C969FD95C7C1B8395EFB9455C6096E891E9388AFFDB1380D7E623FA
SHA-512:	8AF85BA3C2F2F7807807570EEB985CC89E35EBD1BAFFF5A970D409B58E6642AAC714EA7BEE14E1FFC0EEDE6A1E79AD6D709EDA9416193A3499620ACE7527F012
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTag

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10639)
Category:	downloaded
Size (bytes):	10777
Entropy (8bit):	5.10124207653776
Encrypted:	false
SSDEEP:	192:n6SLFVlm5+1dR9hrWXPsw4iO3SS3O+e03xC/dTuSnFq1m+n0eH6RxljwNyJJN+fb:xVm499hrWXkzniaO70w/dTuUqYG6v6Us
MD5:	39E282A6420BD42AABB7272E7524A33D
SHA1:	60F061357746F09AB60D595BA37584A5F60D991C
SHA-256:	749050B9E72078B086EF578E9D5C6E764C89985D149A4AC76861004E0E6945CA
SHA-512:	E08542134257503398F845A781220CB6BEFFA0E6D139D8450BE0330798EE1228B488E3C907E53F5E48C8741169A9F5495CB21949CD716DFF06167CC8B4D5CA54
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
Preview:	/! dialogs-manager v4.9.3 \| (c) Kobi Zaltzberg \| https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt . 2023-12-28 17:35 /. !function(p,t){"use strict";var y={widgetsTypes:{},createWidgetType:function(t,e,n){n=n\|\|this.Widget;function i(){n.apply(this,arguments)}var o=i.prototype=new n(t);return o.types=o.types.concat([t]),p.extend(o,e),(o.constructor=i).extend=function(t,e){return y.createWidgetType(t,e,i)},i},addWidgetType:function(t,e,n){return e&&e.prototype instanceof this.Widget?this.widgetsTypes[t]=e:this.widgetsTypes[t]=this.createWidgetType(t,e,n)},getWidgetType:function(t){return this.widgetsTypes[t]}};y.Instance=function(){var n=this,e={};this.createWidget=function(t,e){t=new(y.getWidgetType(t))(t);return t.init(n,e=e\|\|{}),t},this.getSettings=function(t){return t?e[t]:Object.create(e)},this.init=function(t){return p.extend(e,{classPrefix:"dialog",effects:{show:"fadeIn",hide:"fadeOut"}},t),p("body"),n},n.init()},y.Widget=function(n){function e(t,e){var t=a.effec

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5781)
Category:	downloaded
Size (bytes):	5825
Entropy (8bit):	5.470038809333262
Encrypted:	false
SSDEEP:	96:BXmNgP6fnn22dL5MIGA6iZ20DTl7CKEpre1oXA26x4Af090Mxbl229AVqeVdaZtz:RmNgSfn/L5MXiZzTgvrLQ26CO090MxrB
MD5:	48C9ACCFD6EA88FC9C9E3527C5E59F45
SHA1:	3FCAFA52DD723A0F79ED0061FEC864491D412A7E
SHA-256:	969E71D2C58889EFB61CD106846E486FD055C9E94C3AD19CA545FCE0EA709E1F
SHA-512:	E1E92F09923B004C0C9978156106517664520E41E8DA2CD7CAD878021790D21E7E4486F83854D7F7C57C135CE3FC9EEEA609B71CF9C60C51CF5BF487D990CEC5
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.21.0
Preview:	/! elementor-pro - v3.21.0 - 15-04-2024 /.(()=>{"use strict";var e,r,a,c={},n={};function __webpack_require__(e){var r=n[e];if(void 0!==r)return r.exports;var a=n[e]={exports:{}};return c[e].call(a.exports,a,a.exports,__webpack_require__),a.exports}__webpack_require__.m=c,e=[],__webpack_require__.O=(r,a,c,n)=>{if(!a){var i=1/0;for(o=0;o<e.length;o++){for(var[a,c,n]=e[o],_=!0,b=0;b<a.length;b++)(!1&n\|\|i>=n)&&Object.keys(__webpack_require__.O).every((e=>__webpack_require__.O[e](a[b])))?a.splice(b--,1):(_=!1,n<i&&(i=n));if(_){e.splice(o--,1);var t=c();void 0!==t&&(r=t)}}return r}n=n\|\|0;for(var o=e.length;o>0&&e[o-1][2]>n;o--)e[o]=e[o-1];e[o]=[a,c,n]},__webpack_require__.f={},__webpack_require__.e=e=>Promise.all(Object.keys(__webpack_require__.f).reduce(((r,a)=>(__webpack_require__.f[a](e,r),r)),[])),__webpack_require__.u=e=>714===e?"code-highlight.28a979661569ddbbf60d.bundle.min.js":721===e?"video-playlist.74fca1f2470fa6474595.bundle.min.js":256===e?"paypal-button.3d0d5af7df85963df32c.b

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:24:52], progressive, precision 8, 800x600, components 3
Category:	dropped
Size (bytes):	301108
Entropy (8bit):	7.968528102603389
Encrypted:	false
SSDEEP:	6144:76pjNNbGwFLEwolt0HcclQKP5oCyIwrFrBGuxVf7hVUrz:uphBGwVGlSkKPJzwrtBXxV9VGz
MD5:	D3CC6CE5AC586C2C2AEFE0A3DBAAB09C
SHA1:	C32D9988DD85A6653DFDE53364E5F7E8D08DDCAC
SHA-256:	1EF0B5125BE60D4349045CEE19070AE23A93407EB9D579DF2FF28DB5E264839D
SHA-512:	F3E79B39D1F5F3A4CDCE77D7F1C8E81F005539BB200899732873C6AF8C03C8E8A52DAC69A1AC0EF72339FC5BEC94ECB72D10703ED75847A658DBE4DCEDCDB84F
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:24:52............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....a....*..R.aV..m...X..-Kk..\|B...=;-../.\|.....}G....K`..<.VN.=.UX..m.sYa..\|.."A...:..R..^.~;.6A.x.....K.. .[6.....j..AR.{.6...i.."...\..p.+...X8.ve...%

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
Preview:	{"popups":[]}

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js?ver=6.5.2
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4483
Entropy (8bit):	5.071104944050023
Encrypted:	false
SSDEEP:	96:7gwdzZPTFyIotHIQGlSCwmiCAECKTCAuB:/ZxyIF0rlE3TYB
MD5:	DDA94DCB0AFE0D27AB857472874AA00B
SHA1:	ED1C5A174B633B812080D79BC3EBB0B25B0A9D4D
SHA-256:	F349CF7F810EA22B3023A3AF828D644A1BEB3333D309ABFD5277A189D7A96748
SHA-512:	55B9327F9B4CF64F1D714062E42F2B6D5A3B7C830E15F2019C2A8EACBD8D1014E31C2AC1CE192B6C2436D70C029D75E57DC686556EB2990AA28FA4142711EB2D
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/003-integrao-de-dados.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="M7.5 89.973v100.688c0 3.1 2.513 5.613 5.613 5.613h39.465c-4.463 6.331-6.892 14.209-6.299 22.681 1.206 17.246 15.146 31.206 32.34 32.377 20.357 1.387 37.3-14.767 37.3-34.892a34.882 34.882 0 0 0-6.387-20.166h80.528c3.1 0 5.613-2.513 5.613-5.613v-48.908c0-3.698-3.51-6.372-7.08-5.41a34.689 34.689 0 0 1-9.034 1.191c-20.046 0-36.14-16.972-34.784-37.374 1.158-17.421 15.314-31.489 32.688-32.515a34.837 34.837 0 0 1 11.069 1.112c3.594.961 7.142-1.637 7.142-5.357V13.113c0-3.1-2.513-5.613-5.613-5.613H29.269C17.246 7.5 7.5 17.277 7.5 29.338v30.687M301.302 471.683c-16.647 0-29.931-14.451-28.065-31.531 1.432-13.115 12.013-23.633 25.096-24.978 6.643-.683 12.871.957 17.995 4.195V315.7

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11009), with no line terminators
Category:	downloaded
Size (bytes):	11009
Entropy (8bit):	4.379807762379107
Encrypted:	false
SSDEEP:	192:IlCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeq4:HpkSy
MD5:	D41D2B8968F4B7CD61D77ADD7D710369
SHA1:	FABC79E68253A05B89580322B933267797C0DDBB
SHA-256:	A4A63708D6A258FD4AE6E6B3AA95424B367BD6E3B4BE57BB10DE32793A839C91
SHA-512:	2629014FC8018A055CEFE4B3E34FA452EC9AFF04E3149D33A4BEE24481A9FD33CA038DED3C6346D732443D94D3B9E5D6E6F2E28238FF142348FEDCC5B34C1EA0
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=1710847526
Preview:	.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg,.elementor-bg-transform-zoom-out .elementor-bg{transform:scale(1.2)}.elementor-bg-transform-zoom-out:hover .elementor-bg{transform:scale(1)}.elementor-bg-transform-move-left .elementor-bg{transform:scale(1.2) translateX(8%)}.elementor-bg-transform-move-left:hover .elementor-bg,.elementor-bg-transform-move-right .elementor-bg{transform:scale(1.2) translateX(-8%)}.elementor-bg-transform-move-right:hover .elementor-bg{transform:scale(1.2) translateX(8%)}.elementor-bg-transform-move-up .elementor-bg{transform:scale(1.2) translateY(8%)}.elementor-bg-transform-move-down .elementor-bg,.elementor-bg-transform-move-up:hover .elementor-bg{transform:scale(1.2) translateY(-8%)}.elementor-bg-transform-move-down:hover .elementor-bg{transform:scale(1.2) translateY(8%)}.elementor-animated-content{--translate:0,0}.elementor-animated-content:focus .elementor-animated-item--grow,.elementor-anim

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20818)
Category:	downloaded
Size (bytes):	20947
Entropy (8bit):	5.284765612372891
Encrypted:	false
SSDEEP:	384:vtmrxoiMoB8uxsARrbXEBwCrSQX6GSnL/LuCcQjy2GuPR592rt+7U:1XLm+Hx6GSnLbci0uPB77U
MD5:	F62227501A7654F2B87CC1F1016ED0DC
SHA1:	9A45CEA8875B8E067276F942EB8BA5D08E820CC9
SHA-256:	4EF35581D56516AF9C0A792F09316BDA2494A5F497EDF5DE30E6AB74052BC380
SHA-512:	D1F7E5EA4C79DD093C7172C14CF247A1D7EC242EC742E8103BFD3AA89E19DC02266658BF4DA35D388A7CB2BB02F77ED2E19376DB9107AAF972C7B4787D0A5E96
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/jquery.magnific-popup.min.js?ver=20180910
Preview:	/! Magnific Popup - v0.9.9 - 2013-12-27. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,n,i,o,r,a,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",h="."+g,v="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,n){t.ev.on(g+e+h,n)},k=function(t,n,i,o){var r=document.createElement("div");return r.className="mfp-"+t,i&&(r.innerHTML=i),o?n&&n.appendChild(r):(r=e(r),n&&r.appendTo(n)),r},T=function(n,i){t.ev.triggerHandler(g+n,i),t.st.callbacks&&(n=n.charAt(0).toLowerCase()+n.slice(1),t.st.callbacks[n]&&t.st.callbacks[n].apply(t,e.isArray(i)?i:[i]))},E=function(n){return n===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=n),t.currTemplate.closeBtn},_=function(){e.magnificPopup.instance\|\|(t=new w,t.init(),e.magnificPopup.instance=t)},S=function(){var e=document.creat

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	568
Entropy (8bit):	4.934230509004346
Encrypted:	false
SSDEEP:	12:UjRMjHpUbrlM1cp7kpVSUbi2vSX5LWuVtIYady:Oc2brecJkX7bd6JLWu4dy
MD5:	F6926D8096E184EB3B4D360DABE016AD
SHA1:	1351362CCA4E7F092B67238FDBE47D430597C909
SHA-256:	E094451C6103212B5A60A7B961FEAF6C52E14C363F3A1881360873CD57E026D2
SHA-512:	2590E5F0EABD6FEC01524DB3C6729CDCAE1FF27F01B12BC23B22CBE242E6794F82B39DDB599581BCE85EA0D875F4A8C1BF3C0EE3E5C6E1D77F27EA7A8AB7533C
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/bundles/logOn?v=mY8oLJVUU1u651zqYdfRKitT9ZGmsEcUQ93ApDZOC201
Preview:	/* Minification failed. Returning unminified contents...(10,1): run-time error CSS1019: Unexpected token, found '}'.. */...glyphicon-refresh-animate {-animation: spin 1.5s infinite linear; -webkit-animation: spin2 1.5s infinite linear;}..@-webkit-keyframes spin2 { from { -webkit-transform: rotate(0deg);} to { -webkit-transform: rotate(360deg);}}..@keyframes spin { from { transform: scale(1) rotate(0deg);} to { transform: scale(1) rotate(360deg);}}..#cookies-id {.. font-size: 12px;.. margin-top: 10px;.. padding-left: 3px;.. position: absolute;..}..}..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (315)
Category:	downloaded
Size (bytes):	33450
Entropy (8bit):	4.3061210674644705
Encrypted:	false
SSDEEP:	768:PwzhQIFi67YisFIe27Sfi6YGRRRERsRjRCRC:zd9YGveGRUA
MD5:	5480F11A9755AFEBA769FB68B05F0673
SHA1:	80F114ABE8C8E140F25A747A97945584F7238A71
SHA-256:	A875E1D5F8CFE252CC8F5E04D750DD8C771FB8ACEABD435D548425A445AB61D3
SHA-512:	0E9C25B5ED877D6760805778892F9CDDB9AB7FBFF816D4E0699ABD35E4D800BE465393FFA80083EFE03E14A48FFDE2316DEED45D8F21722F451481D40EB0635A
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.3.1
Preview:	/jslint browser: true, white: true, this: true, long: true /./global console,jQuery,megamenu,window,navigator/../! Max Mega Menu jQuery Plugin /.(function ( $ ) {. "use strict";.. $.maxmegamenu = function(menu, options) {. var plugin = this;. var $menu = $(menu);. var $toggle_bar = $menu.siblings(".mega-menu-toggle");. var html_body_class_timeout;.. var defaults = {. event: $menu.attr("data-event"),. effect: $menu.attr("data-effect"),. effect_speed: parseInt($menu.attr("data-effect-speed")),. effect_mobile: $menu.attr("data-effect-mobile"),. effect_speed_mobile: parseInt($menu.attr("data-effect-speed-mobile")),. panel_width: $menu.attr("data-panel-width"),. panel_inner_width: $menu.attr("data-panel-inner-width"),. mobile_force_width: $menu.attr("data-mobile-force-width"),. mobile_overlay: $menu.attr("data-mobile-overlay"),. mobile_

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2309
Entropy (8bit):	7.60731633314013
Encrypted:	false
SSDEEP:	48:ak0h+rVmBCqXTjrddePNxZPlhW/t79kEMhpLCMk/:atGVG1XfaZPyyhpCMk/
MD5:	78C786AA97EC525D9949C47E8132E115
SHA1:	94420D45FD6BECECD9F2A7FCE10240D855E59FF6
SHA-256:	BC05988B8F1F68B54DF0CE9997D9582AFAE1867BE9908F550808CD7FCD49034E
SHA-512:	31B0B96D1EB460D1FB9B5A6B38A490B467CFE905D1C300FDFC3D75332113EBA3018B660C6CBF657B96A0C9D0CD1B22A77578D99BBD7A7BBD55A9FAD8EF20A34C
Malicious:	false
Reputation:	low
URL:	https://icons.iconarchive.com/icons/google/chrome/48/Google-Chrome-icon.png
Preview:	.PNG........IHDR...0...0.....`.......PLTEGpL....2,............................!....##.C9......=.;Q;..h..Y).`O.:3.OB.E;n...50.-C.@=.=,l.:.=..".. !X'...#^)...6..p..g... w6...A.>.[K...XI.....RD.aPpX...;.:.J....3}3.....D.A....6.9b~4...H... -x62.;.}8.!....-....(n2..I...M.IL.I...."'.00L.I.63.KA.=7J.H.A:K.HK.G....,,.PD.:6...I.GG.F.D<.$(F.E/z.....)+V..4~..WIE..\...41..!(u..G>.TG.........^O=.....I.G......e..dS.[L.......&)...J..c..Q.......dRM.......#:..6....E.E...7.=q..C.C.......I"I.Fh...H#B.Dy.....!n..l..jXD.BF.C...?.AA..B.A`..l... ...#...1.;<.A.+*.%&..".....F......."...Q..%r..2/....H9Y.U.[\..!W.@.J'......z.y.<5u~9.6'..\|.[/.!."................~.....%x.2......_.3.]..L+../Z.=...........].C..Q..u..%.e..[.Slh/...mS.+.....59.ae.MP....R.."......e.<`....(.......,D..Y.Y...........tRNS..%..$.....2.>ie&8rS....../.W....Y{...P.{..'.u...u.B..B.....l...........Y........................................................................................................

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62292), with CRLF line terminators
Category:	downloaded
Size (bytes):	62389
Entropy (8bit):	5.353636010965601
Encrypted:	false
SSDEEP:	768:xojOeB7foxMGtJm4UUvBkU4/4uu34xMR/UuSJwfGm0ZlBCmQdrCylwVc:Cjd1foxMGZtCMRsuSJvswVc
MD5:	30B9882CF93F4A9B2FFA96AB351271D8
SHA1:	970340E440846513D7BA29BAF27795A042C96AA8
SHA-256:	D6F3A8301FFA9A9AA6A748CCC535A559242CD73451BB4D236B7E72FF64123703
SHA-512:	D6B4041CD68701C94C876259A947831C677902789AC1C4D13B71CD3F47C8FF96B02240681D372D10A74D102E32DC7837F0C633F0A4B28A560CF5F3C11BF8EECF
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.31/clarity.js
Preview:	/* clarity-js v0.7.31: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Ua},get start(){return qa},get stop(){return Fa},get track(){return Ha}}),e=Object.freeze({__proto__:null,get clone(){return fr},get compute(){return hr},get data(){return rr},get keys(){return ir},get reset(){return pr},get start(){return lr},get stop(){return gr},get trigger(){return dr},get update(){return vr}}),n=Object.freeze({__proto__:null,get check(){return Er},get compute(){return Nr},get data(){return ar},get start(){return kr},get stop(){return Tr},get trigger(){return Or}}),a=Object.freeze({__proto__:null,get compute(){return Cr},get data(){return Sr},get log(){return Ir},get reset(){return Dr},get start(){return Mr},get stop(){return _r},get updates(){return xr}}),r=Object.freeze({__proto__:null,get callbacks(){return jr},get clear(){return Yr},get consent(){return Xr},get data(){return Ar},get electron(){return Rr},

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3131)
Category:	downloaded
Size (bytes):	3171
Entropy (8bit):	5.105676569535949
Encrypted:	false
SSDEEP:	96:BNTRke0nA0SOq2wB53r6OvqAK/G9w81OwK4jkHJL6LE3cwn6Q5UzDp:1x0X+zB53r6OvqnDwK4jGuI3vn6Q5UZ
MD5:	A5338A4CA795FD8740C4633896E3DEDD
SHA1:	CBB8582DDD4882E54EECADDB67E77D5AA5FCBD0C
SHA-256:	055E558B706230579FE5F011379888E719EE330556EC57549C828591B7471E4B
SHA-512:	4BEC6FBEBC31FDADE151DBBDC1C1F9FDDA1538A96CC6E39CC96AF4279C270F730AC53536C5A7E3A878B3E0F488AC16C5CCCB5EAE9ADF17B1E1F208744358C94C
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/js/video.d11c91c1b2b642a34601.bundle.min.js
Preview:	/! elementor - v3.21.0 - 15-04-2024 /."use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[791],{5363:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class Video extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{imageOverlay:".elementor-custom-embed-image-overlay",video:".elementor-video",videoIframe:".elementor-video-iframe",playIcon:".elementor-custom-embed-play"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$imageOverlay:this.$element.find(e.imageOverlay),$video:this.$element.find(e.video),$videoIframe:this.$element.find(e.videoIframe),$playIcon:this.$element.find(e.playIcon)}}handleVideo(){this.getElementSettings("lightbox")\|\|("youtube"===this.getElementSettings("video_type")?this.apiProvider.onApiReady((e=>{this.elements.$imageOverlay.remove(),this.prepareYTVideo(e,!0)})):(this.elements.$imageOverlay.remove(),this.playVideo()))}playVideo(){if(this.elements.$video.lengt

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1354
Entropy (8bit):	4.9133564971813675
Encrypted:	false
SSDEEP:	24:2z7PDOFcmjYcycAxpLXAQ7zYANoz2yILEdygJFrOLR4/Lp8+g0giRjkyALBgOiST:CmFbYfcAxpUQHFSz2y6E/FrY4Dp8+g0e
MD5:	A3BB4D0520E50CC1C3C582AC68E9F95B
SHA1:	AFFE6B634C8D6ADCB39D9F06E5714D05019D6121
SHA-256:	3889880268725416E46BA18C76C1BD0AAA537E7C6B21EE172E0694CF5CB1F396
SHA-512:	B5BBDBE856309F3D52A829841ADF62FC69D78C89FBFD7CE2F9C4B22039CD2CF231C3E0616700468C0D20B45857D0035DD68DFC199A240B910BE8F7D521FC8699
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/inc/backend/js/simple-likes-public.js?ver=0.5
Preview:	(function( $ ) {...'use strict';...$(document).on('click', '.sl-button', function() {....var button = $(this);....var post_id = button.attr('data-post-id');....var security = button.attr('data-nonce');....var iscomment = button.attr('data-iscomment');....var allbuttons;....if ( iscomment === '1' ) { /* Comments can have same id */.....allbuttons = $('.sl-comment-button-'+post_id);....} else {.....allbuttons = $('.sl-button-'+post_id);....}....var loader = allbuttons.next('#sl-loader');....if (post_id !== '') {.....$.ajax({......type: 'POST',......url: simpleLikes.ajaxurl,......data : {.......action : 'process_simple_like',.......post_id : post_id,.......nonce : security,.......is_comment : iscomment,......},......beforeSend:function(){.......loader.html(' <div class="loader"></div>');......},.......success: function(response){.......var icon = response.icon;.......var count = response.count;.......allbuttons.html(icon+count);.......if(response.status === 'unliked') {........var li

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (389)
Category:	downloaded
Size (bytes):	166835
Entropy (8bit):	4.971776834339917
Encrypted:	false
SSDEEP:	3072:UztZbjLWsIbldVwkAtZ1EhPjh1BJuQvV3NsIcj:UztZbjLWsIbldVwkAtZ1EhPjh1BJuQve
MD5:	D28D26BA596D79A76C2443CCA6623F92
SHA1:	67E6AA6332D37A9386F4833696BBA40DC2507906
SHA-256:	F128146D3143E86C066959EECA3036E95C8202481BC0E69A0E35D402FC7C5DB1
SHA-512:	793780D32D08BA2DF9D10910FEBD5DFD2BE1BDA6DFDD9514ACD01FF9B33F94F5CC77C0FDF20B4DDEA79D305344D2A8310595B43220DBD8E4C21AE45D3C3E63C0
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/style.css?ver=6.5.2
Preview:	@charset "UTF-8";./.Theme Name: Engitech.Theme URI: http://wpdemo.archiwp.com/engitech.Author: OceanThemes.Author URI: http://oceanthemes.net/.Description: Engitech is a WordPress theme for IT Solution and Services Company. Engitech is easy to use, it provides everything you need to create great looking website. With Engitech you can impress your customer by it.s professional design and the interactivity. Engitech built with latest website technology to ensure your website is looks nice on desktop and mobile. Get Engitech now!.Version: 1.3.License: GNU General Public License v2+.License URI: http://www.gnu.org/licenses/gpl-2.0.html.Text Domain: engitech.Domain Path: /languages/.Tags: one-column, two-columns, left-sidebar, right-sidebar, full-width-template, post-formats, theme-options, threaded-comments, translation-ready.././*--------------------------------------------------------------.>>> TABLE OF CONTENTS:.----------------------------------------------------------------.# Norm

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (474)
Category:	downloaded
Size (bytes):	74700
Entropy (8bit):	4.87865887236074
Encrypted:	false
SSDEEP:	768:j2FF64MVm0WlEQaLVcWNrS164cJKkNDLw3c/A11VzFbFEC:iQ4MVm0WtzhyC
MD5:	449C6099A07818B6DEB2683B0C9F84D0
SHA1:	A4E379DF5090DFCBA5047E1B92FD5EDFE03F0F66
SHA-256:	151A8F0AD68E02203B1F00B05D27F306E8A0216C2C6EAE85182C5A3FD63698EB
SHA-512:	E1410671E4A39A66C54DB1C580363FEC5C269F91F761026896B6CC6F4D21FCDE4E1B8DEE939471331C352ED2402ADA052BF3304B0B2D7C060F6F2A65BFD9529A
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.4.3
Preview:	.jet-listing .slick-slider,..jet-listing-dynamic-field__content .slick-slider {. position: relative;. display: block !important;. -webkit-box-sizing: border-box;. box-sizing: border-box;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}..jet-listing .slick-list,..jet-listing-dynamic-field__content .slick-list {. position: relative;. display: block;. overflow: hidden;. margin: 0;. padding: 0;.}..jet-listing .slick-list:focus,..jet-listing-dynamic-field__content .slick-list:focus {. outline: none;.}..jet-listing .slick-list.dragging,..jet-listing-dynamic-field__content .slick-list.dragging {. cursor: pointer;. cursor: hand;.}..jet-listing .slick-slider .slick-track,..jet-listing .slick-slider .slick-list,..jet-listing-dynamic-field__content .slick-sli

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12198), with no line terminators
Category:	downloaded
Size (bytes):	12198
Entropy (8bit):	5.031745242580206
Encrypted:	false
SSDEEP:	192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz
MD5:	3819C3569DA71DAEC283A75483735F7E
SHA1:	ECD40A5CC6F0B76200C454CA880210DC301CFAB8
SHA-256:	214674CC77ABA35AB3567B88E2739FD08E8E96C61D279559AD61874069683EA0
SHA-512:	2710655DFF46653DAEB3A6E3F6D36F885E51D5B375738EE353ACA40C6F66AE1A7DECE57039D58747012ED9EA2822191143C06F270123B8CC580F6A41B8E8AEF4
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
Preview:	!function(){"use strict";function Waypoint(options){if(!options)throw new Error("No options passed to Waypoint constructor");if(!options.element)throw new Error("No element option passed to Waypoint constructor");if(!options.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+keyCounter,this.options=Waypoint.Adapter.extend({},Waypoint.defaults,options),this.element=this.options.element,this.adapter=new Waypoint.Adapter(this.element),this.callback=options.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=Waypoint.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=Waypoint.Context.findOrCreateByElement(this.options.context),Waypoint.offsetAliases[this.options.offset]&&(this.options.offset=Waypoint.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this),allWaypoints[this.key]=this,keyCounter+=1}var keyCounter=0,allW

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	195957
Entropy (8bit):	5.22155929292633
Encrypted:	false
SSDEEP:	3072:rIyJbtH3HZTfTPPuwDWulHELkHvajKKU0ey6O/t5Yq4VaEp2bT3Us5rdq1b5H:rB7PPpj
MD5:	5BED232D4109F1AE5FD15813D4C84076
SHA1:	6E7DDA2A14584D474BCE8231112532C76E2CF1FD
SHA-256:	1C2FCDE6C2B7919BB100D4A5E09009B3608D134A91E8AE02EEE34C32CB875837
SHA-512:	AD30A9E07AFE3F18C1A866AD599D709E6154F3D3E4D63C5BF2A62482ABEA233D98390E7090072560B27ED0DBFE4D4F5C11F883C95FC8032B73CC61AFC12CE6F9
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/questor-zen/
Preview:	<!doctype html>..<html lang="pt-BR">..<head>...<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1">...<link rel="profile" href="https://gmpg.org/xfn/11">.....<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v22.5 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Questor Zen - Questor - sistemas cont.beis, empresariais e corporativos</title>..<link rel="canonical" href="https://www.questor.com.br/questor-zen/" />..<meta property="og:locale" content="pt_BR" />..<meta property="og:type" content="article" />..<meta property="og:title" content="Questor Zen - Questor - sistemas cont.beis, empresariais e corporativos" />..<meta property="og:description" content="Saiba como simplificar e desburocratizar rotinas com um portal web que garante independ.ncia para sua organiza..o cont.bil! Tenha um portal da contabilidade que simpli

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1320)
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	5.12998078008981
Encrypted:	false
SSDEEP:	24:BE9VqsRthp0Mejm4s1RWe2LSaaq1aa5/DM/RR2ns4t8oYRFOobvuh0usUiEFyB/6:BE9bLToj4we2L9DM/RQnv8oYjOobG53l
MD5:	B667DBC895223EFAB2D7CD4B524D83D6
SHA1:	B60BDF5D62426CE539DA53ED135BAEB6FA3EA975
SHA-256:	96B8CB5F676CDF0FCCB5A1002BB23B854477D8ADE4F71B2E6438BD7BBCEE2A86
SHA-512:	C9CB7C811766011414FC3982B7135E6B7A99A17E981814F75EEEAAABE423E62204B7D3CEB6DA4F327A4D1E5D3A0D1964E7FCB26BD0DE50880601AA0A98D20D85
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
Preview:	/! elementor - v3.21.0 - 15-04-2024 /."use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[357],{1327:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class TextEditor extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{paragraph:"p:first"},classes:{dropCap:"elementor-drop-cap",dropCapLetter:"elementor-drop-cap-letter"}}}getDefaultElements(){const e=this.getSettings("selectors"),t=this.getSettings("classes"),r=jQuery("<span>",{class:t.dropCap}),p=jQuery("<span>",{class:t.dropCapLetter});return r.append(p),{$paragraph:this.$element.find(e.paragraph),$dropCap:r,$dropCapLetter:p}}wrapDropCap(){if(!this.getElementSettings("drop_cap"))return void(this.dropCapLetter&&(this.elements.$dropCap.remove(),this.elements.$paragraph.prepend(this.dropCapLetter),this.dropCapLetter=""));const e=this.elements.$paragraph;if(!e.length)return;const t=e.html().replace(/ /g," "),r=t.match(/^ *([^ ] ?)/);if(!r)return;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65495)
Category:	downloaded
Size (bytes):	210609
Entropy (8bit):	5.113941528851756
Encrypted:	false
SSDEEP:	1536:ypJOoOYWxuY++npUEJAWSnnJ8erKz9EQ/yQTD/c52Xhr+f0h02C/ZlL+sLOIjZQk:Irjq/cUrXm2cZlLxIE
MD5:	2E4A9443FD858C2FFD20DA076D4B266D
SHA1:	A47F270E29164F38B31E0262808B7DDF0211A584
SHA-256:	C548B66FB01AFBC6B8DD54081E76F284DD6DAAA12E4A5E8E331C9299BC10C87E
SHA-512:	E37B42D72798371CCBBE1799E3EBC29491498B6FAD5B3A59809B41119D5EA1A88FB2310727ED2CE42EC344F99FAA5DCAC1F28F6039845A850F77A8AD7A50762B
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.7/css/player.css
Preview:	/* VimeoPlayer - v4.29.7 - 2024-04-17 */.@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:translateY(10px)}20%{transform:translateY(0)}40%,80%{transform:translateX(8px)}60%{transform:translateX(-8px)}100%{transform:translateX(0)}}@keyframes pulse{50%{transform:scale(.9)}}@keyframes dash{0%{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35px}100%{stroke-dasharray:89,200;stroke-dashoffset:-135px}}@keyframes rotate{100%{transform:rotate(360deg)}}:fullscreen-ancestor>:not(:fullscreen-ancestor):not(:fullscreen){display:none!important}body:not(.showfocus) .player a,body:not(.showfocus) .player button,body:not(.showfocus) .player li,body:not(.showfocus) .player span,body:not(.showfocus) .player svg{outline:0!important}body:not(.showfocus) .player input{outline:0}.vp-center{display:flex;align

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 255, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	62241
Entropy (8bit):	7.898431905711469
Encrypted:	false
SSDEEP:	1536:kcKt9gzIMwgx/UFZWoSo4TFX+uV3RHipo9/L7fDqhN1:kER0iX+utZipG/Lqt
MD5:	30BD2ED0FB5398D2FD96C00481BB95C0
SHA1:	65A003964BD2F3AC9E017E85F7A361D4AF22665A
SHA-256:	9C4F671147A4620B8BDFD9636779BEDA2EE09C3A7C8822911BC852701F2BA4CC
SHA-512:	3114AE75C17E50FEF4D32A81C11676A6255F7B6B4DDCDAC47F05920F7258539DF9AFFA1DECFB95E0AB31F12C1E7F6A6B02CD4DBE43F4D8764C0543480EBD5CA4
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2022/02/Questor_branco-1024x255.png
Preview:	.PNG........IHDR.............o..\....pHYs..........+.... .IDATx..{.vYU..[................t.....C....0Hh...#^.FE..QCQ..$...b.7@%. ....AP...t.0=T.!]..8=d...y...w=k...>.<......s.^{...^.s..>....M.K.m...L(.7.:....+<.&..8..zk......\|......[...".w...P._#.......s.............0.....4...........R........E.........}a........#.a. ...&..Ii..g.\|Q..$.4.Q>%.-9r..S.G.....K.\|,.K...k...[l..Y..........J6j..R.{c{.a..]..vn..9.....e{..&gI.\.GCML..C....i....V>Z.hcG...hcG.?.........o......Q.W....).Kt.}.]....y<{...6.C.FyH.K._b;.G..z..............%z..I..:.]O%.J..,...S=r.....^k.g-...5.z.d.X/..x..1U#...<....%......_.WO..C..Tb.Dk...1.#'x}..{..\|................................................../...(}.`r.".P..EP../}T.e..q%X...d..O..H":Z.Z2......2.....m...-9.:O.%v..;.^.X+.=....jcj...R......z.T-...}.........9...>....F....v..S.....%{c-.=.>Z....5....-.-.{...=tX.F.}...S...>...^85...(.X..8.Q..x..Q......j9."....Q..e.....#.m.lG.1^.._C..%=J:..G.1-.hi..).H...Sn...n.N...?,.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	58775
Entropy (8bit):	5.560806789897555
Encrypted:	false
SSDEEP:	768:/+1ReeGxgHQ0UpMAF17JgoHAt4/PFZNSFzq8MSGeCx5R+6WkDt3uC:UBqNpMiSt4/P8FMN3uC
MD5:	D402BD816DC653A38C45B999B83A09EC
SHA1:	CAFBC4938C3DFD636AA833B1003248D97353F2C0
SHA-256:	0DD380BA638F1DF10476E7866F3E04F56E13ECC0DD03974EB46122D7E31DFFC8
SHA-512:	D6A4F8D109B026C625B769A0BD074493087416262DD57B77469BEE9A78F4FED1F04F926D1364D94639AE98280C5BE721C3B726F1A54CC7FE7FD04AB1621E0621
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Zqb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.NS(a)},$qb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Cc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	295708
Entropy (8bit):	5.558748535787834
Encrypted:	false
SSDEEP:	3072:U/Vagjq+71vbzwHn23Ys38Onp2LUF1eFS+MCY55CgY8pv1HzAnLP/w222ao0/on:2hq8wH2ounVL55Cv8pNHzWLn22J
MD5:	970CD81C9AB9D5A8E563332CC638BEEC
SHA1:	D259199EEF02025F624FA2D29A3AFB75091583C1
SHA-256:	06E1175C9131335472B30FFF91AD3D6BDC9BD6ADCEA41BD07F03DA4BCE28090B
SHA-512:	41B7E7FD2324F8A49ECE44283040507A70BD7FA36BEB948753814121ABAED9FFCAACC601039435C85D731692325039600D1B952B5FC96DD5A1E2DBDB991C385C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-43W2WYML5H
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":14},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1323
Entropy (8bit):	4.928058577335935
Encrypted:	false
SSDEEP:	24:21Trg0KkYKD2nZoKTpCp3B5u0ZeA96VKnY2npaC4MouInn:urPKk3DdeMp3B5u0D9+KnY014Mouq
MD5:	073E1CAA35CD0E64FBC2604A73CFA224
SHA1:	3617ED9FE396D6C1C1D22AD3690FBEBA99DFC01D
SHA-256:	5F1522637324F3DFC2B57793F9BBA2C16A92D5CDFBAE97CD9E22282D99614FFF
SHA-512:	EBEBED69BCE060A8447C9CB24ECD6CE0E70C9A767ED34B5780BB6E875FF48E193F30160268D2AD1A98687339399036F26094218CEF535633EC1D6BCD5204EC41
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/form-masks-for-elementor/assets/js/elementor-mask.js?ver=1.6.4
Preview:	(function($) {..var fmeMasks = {...'ev-tel': '0000-0000',...'ev-tel-ddd': '(00) 0000-0000',...'ev-tel-ddd9': '(00) 00000-0000',...'ev-tel-us': '(000) 000-0000',...'ev-cpf': '000.000.000-00',...'ev-cnpj': '00.000.000/0000-00',...'ev-money': '000.000.000.000.000,00',...'ev-ccard': '0000-0000-0000-0000',...'ev-ccard-valid': '00/00',...'ev-cep': '00000-000',...'ev-time': '00:00:00',...'ev-date': '00/00/0000',...'ev-date_time': '00/00/0000 00:00:00'..};.. $(window).on( 'load', function() {..."use strict";. $('.fme-mask-input').each(function() {....if($( this ).data('fme-mask') !== undefined) {.....var inputMask = $( this ).data("fme-mask");.....if(inputMask == 'ev-cpf' \|\| inputMask == 'ev-cnpj' \|\| inputMask == 'ev-money') {......$( this ).mask( fmeMasks[inputMask], {reverse: true} );.....} else {......$( this ).mask( fmeMasks[inputMask] );.....}....}...});...jQuery(document).on( 'elementor/popup/show', () => {....$('.fme-mask-input').each(function() {.....if($( this ).data("fme-ma

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.661699255973271
Encrypted:	false
SSDEEP:	24:ylut2Juo0ct/39G3KhfKappwjtJsPJPJk:yYt8uo0ctP91Yt6P5q
MD5:	DF57F47EFE771976F4F48375359AB8B7
SHA1:	4B49D6358A49F445B5FFB3F579F2D995F30DAFBF
SHA-256:	09E7FE4A7F215550D36BB6FF1635F5D476080C50A868B853AA55E9F7E17303C3
SHA-512:	03BE8D912193ABD99DE0F3ABDA000F5406B2D57953C06FEA79DB491E25320CE45EF065768D1074EBB42A0E45CA05DDED64AB31CE1B3603D98EDE7AF3AA62A491
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/Content/Images/favicon.ico
Preview:	............ .h.......(....... ..... ......................................V...V...................V...V...V..V..V.-.............V.h.V...V...V...V...V.E.V...V.H.V.`.V.;.V.%.V.M.V...V.).....V...V...V.......V...V.^.V...V..V.k.....V...........V.!.V...V...V..V._.............V...V.9.V.y.V..V..V./.............V.k.V...V...V.c.V.{.V...V...V.s.V.I.V.......V.m.V...V.g.V.1.V.2.V...V...........V...V...............................V.C.V.m.V...V.e.V...................V.#.V.W.V.#.........V./.V.e.V.(.............................V...V...V.*.V...V.\.V.T.V...V...V...............................V.[.V.t.....V.#.V...V...V...V...V...............................V.9.V.......V.6.V...V...V...V.4.V...................................V...V.t.....V...V.......V...V.f.................................V...V...V.@.........V...V..V.......................................V...V...V.......V...V.\.............................................V.h.V.6.V.9.V...................................................V.<.V.[.V...V....

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	24045
Entropy (8bit):	5.306962034529945
Encrypted:	false
SSDEEP:	384:sCJSwM+mEAWlmUABmXAYmqAwmAAYmuABmSABmqABmpAwm3AYmaABmwABmygABm69:so/MPtWU9Ywx35pxbY/Y3YO5QxnYZYqX
MD5:	9B5C85EC1268E69D31A4DCE7206E81FE
SHA1:	1C04091E383CDF31623342475BABC7203B25193B
SHA-256:	1A19FA99191747283135CE2436A86C0917B59972B10D9B91C0506516B6CAF558
SHA-512:	E3AE323400C73462A8C13449D60F8B14489B3279437D3ED53F3C0BC4DF6B817C1959AB9C81AA3D697082353DF576A520A842903113B8E01B1EBDDF4581853CD9
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C124%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C117%2C217%2C152%2C110%2C133%2C126%2C114
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5877), with CRLF line terminators
Category:	downloaded
Size (bytes):	6367
Entropy (8bit):	4.985022727945386
Encrypted:	false
SSDEEP:	192:Af/dVCO7EWPWNJ9d+DDtkikx7UqMk96Whf3:A7PdkIk
MD5:	DC4D1DD517F1477282C16B168FBD5564
SHA1:	A732934DB1832C6BD5633EECACFBBA43328B8B46
SHA-256:	638528273D6B9D1EBFAF8BC8DB4D516A2B9E39E6FAFF7858253C1B024734AD71
SHA-512:	104A1EBB9C444CB1E029D3E0A0B7D5A691F6A7CD9AD98B730E58AE45A4FD1C551438D487DF49018F1120B93D8F5B4E4FDE46475511B34D820B523626626BC31D
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/css/magnific-popup.css?ver=6.5.2
Preview:	/! Magnific PopUp CSS/...mfp-bg,.mfp-wrap{position:fixed;left:0;top:0}.mfp-bg,.mfp-container,.mfp-wrap{height:100%;width:100%}.mfp-container:before,.mfp-figure:after{content:''}.mfp-bg{z-index:1042;overflow:hidden;background:#0b0b0b;opacity:.8;filter:alpha(opacity=80)}.mfp-wrap{z-index:1043;outline:0!important;-webkit-backface-visibility:hidden}.mfp-container{text-align:center;position:absolute;left:0;top:0;padding:0 8px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mfp-container:before{display:inline-block;height:100%;vertical-align:middle}.mfp-align-top .mfp-container:before{display:none}.mfp-content{position:relative;display:inline-block;vertical-align:middle;margin:0 auto;text-align:left;z-index:1045}.mfp-close,.mfp-preloader{text-align:center;position:absolute}.mfp-ajax-holder .mfp-content,.mfp-inline-holder .mfp-content{width:100%;cursor:auto}.mfp-ajax-cur{cursor:progress}.mfp-zoom-out-cur,.mfp-zoom-out-cur .mfp-image-holder .mfp-close{cursor:-

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28374
Entropy (8bit):	4.124773851704526
Encrypted:	false
SSDEEP:	384:dwVLfRFsrO6TVxhO6MmO6cBO6K4O6mgg5:CZFsDVxi5EVg4
MD5:	462E41B6E9204FB718984E6E3D78EA6F
SHA1:	079BEFD0FFA72DE5004A9FB18AA006997CB657B6
SHA-256:	FC31017E3EF9682F0DC86D0CF55151AF0AFD569135EB348DB7D69976C088A54F
SHA-512:	C8266C3DEC940BB56A660BE40AEE252630FE8883E0A1010411827CFE97F76CE20BB30B4634D07E62E11C7FE0FF5F7F1DB36F9CD00D4C4098A94E2BDB185E5AFD
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/elementor.js?ver=20180910
Preview:	( function( $ ) {.. 'use strict';.... /* rtl check /.. function rtl_isotop(){.. if ($('body').hasClass("rtl")) {.. return false;.. } else {.. return true;.. }};.... function rtl_slick(){.. if ($('body').hasClass("rtl")) {.. return true;.. } else {.. return false;.. }};.... / --------------------------------------------------.. * counter.. * --------------------------------------------------*/.. var icounter = function () {.. $('.icounter').each(function() {.. var pos_y = $(this).offset().top - window.innerHeight;.. var $this = $(this).find('span.num'),.. countTo = $this.attr('data-to'),.. during = parseInt( $this.attr('data-time') ),.. topOfWindow = $(window).scrollTop();.... if ( pos_y < topOfWindow ) { .. $({.. countNum: $this.text().. }).animate({.. co

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	4.98667547688996
Encrypted:	false
SSDEEP:	12:2PRMf8dRiVKMmiZgKVZCkzv3TH5dpiRRnn:26QemiZ/VZCYvT5dIbnn
MD5:	88D15C710C0D25C142E628660DBF7554
SHA1:	845A899BE703513852C527CFBFD4C68C8FA0CCD8
SHA-256:	BA9466316EE743D0769D90D241EBFCC86BFECBDEE5D3F71E957A8F5889BC1A53
SHA-512:	521AA3ABF2BB400B886FDB84F430B5EC4AACAC4B993739DDA7A56C130C4C4BF789560F3F901F91F25C10799E6DDDF57C3C1DA0D6BD0E3D4AA9630008550631F3
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/header-mobile.js?ver=20180910
Preview:	(function($) {.. "use strict";.. /* ========================================== ...Header Mobile...========================================== */...// mobile_mainmenu create span...$('.collapse .mobile_mainmenu li:has(ul)').prepend('<span class="arrow"><i class="flaticon-right-arrow"></i></span>');.....$( "#mmenu_toggle" ).on('click', function() {....$(this).toggleClass( "active" );......if ($(this).hasClass( "active" )) {.....$('.mobile_nav').stop(true, true).slideDown();....}else{.....$('.mobile_nav').stop(true, true).slideUp();....}.....});.....$(".mobile_mainmenu > li span.arrow").click(function() {.. $(this).parent().find("> ul").stop(true, true).slideToggle().. $(this).toggleClass( "active" ); .. });....})(jQuery);

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	18824
Entropy (8bit):	7.9840168113967005
Encrypted:	false
SSDEEP:	384:7navftrjVmynotTIT64BkqnWygT+MDsQ/4bVVTvj5Z89oUlKZF:WvfZ5mHWnWyIb4bPTQ9RK
MD5:	07F573A75CBE1409313092AF29BED7FD
SHA1:	0FB631C7A5B5D6E92005542205D4EBD39F1B0633
SHA-256:	B9000E44C79BDFF056CA890A79EA0A0B88F4AE011EBA7751D2ECEACA4B12253E
SHA-512:	A9B6ED988F631F35CC96052D06AF3020C085517BC6F43A07D700D8F66841447FF6D67F66DC9D7362A8C0DDBBE9DE3AB7A7AC1F1A25C8072AC7A6C04C40833FEF
Malicious:	false
Reputation:	low
Preview:	RIFF.I..WEBPVP8 tI..P#.......>m6.H.#'.#y.....M.B.>.tJB.&+....D.P...r....5./.2..w....j.]..wB.........'..y.}.?W.a.r.u.X...o...../...>............+.G._.............._....................k.[.........._.?..............7....]}..7.......z.........C.......O...w....?....c.G._........k.._......._._.~....g..`..........K.?.m...........o................../.?.>....h...C.'............%....D...Q.. .@:.%....D...Q.. .@:.%....D...Q.. .@:.%....nEp...XY.n...%aiT...%.Yp)-2.D..aiT...%.Q.P.uB,.B/...gU.........".DT..;......<4.\|.....[E~.... .A.5Hc..+.7.....H-..X>.._....F..><...?..ZO..t.aP.~..0..............b.P.0I5.&...M....../.m<!.-...=S..u&,.....u...a.....~.wE.kx.^.:.(..T.....Vy{...:...B.n7HPE.....D.^...L.b.h...:.....F@A..(.f.N.3.A.[..[#z..3.}.I.zh....=....-.Nd...t..l..,.W......ZJ+....Y..;...rS....4E..c.(...Z.c+..68..S..s.D.s9..g...@6.v$..jI./..N...Z...E....x..6dQB....._..si....~........;5g..T3W....=...D....:\..........^..q...J.....=......f.".o.1HZUE...:

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:24:29], progressive, precision 8, 800x600, components 3
Category:	dropped
Size (bytes):	364492
Entropy (8bit):	7.973510039503235
Encrypted:	false
SSDEEP:	6144:cjbmjbRIiAZNVKsukYrFkNvZSqS4lgRspkYAcirBJT8FLW/Bz+1Dgy15akCS9rdk:I+JAklkYGNvZSh4lgRspGb9BzAp5d9XO
MD5:	02E5D64A6183B8A4E118035C506F241C
SHA1:	168223549F035299943EF6ED1B34731684FCF739
SHA-256:	BDA5CBD01A772D3A620407873935A19F071893CE6A5614B14F3FECFFF3F0BEA0
SHA-512:	9290381E962029472394133E167B4888DAD1D874B71C2B6A1DF38AE41CF8BA53DFD9117CFFE12BD89CF42C64A77AD437F3F9E29993F472BC5059794CF633600D
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:24:29............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..:.M.3!.#&.H`>.O5.'.......gO.n.hh.......*.(E.......Y....PcM..............[...S".\'.d;eU.....h..9su}p.as..X..k\.o..f..&.....Y#.R......_-.+>.?.T:g.LL.e.8

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	18824
Entropy (8bit):	7.9840168113967005
Encrypted:	false
SSDEEP:	384:7navftrjVmynotTIT64BkqnWygT+MDsQ/4bVVTvj5Z89oUlKZF:WvfZ5mHWnWyIb4bPTQ9RK
MD5:	07F573A75CBE1409313092AF29BED7FD
SHA1:	0FB631C7A5B5D6E92005542205D4EBD39F1B0633
SHA-256:	B9000E44C79BDFF056CA890A79EA0A0B88F4AE011EBA7751D2ECEACA4B12253E
SHA-512:	A9B6ED988F631F35CC96052D06AF3020C085517BC6F43A07D700D8F66841447FF6D67F66DC9D7362A8C0DDBBE9DE3AB7A7AC1F1A25C8072AC7A6C04C40833FEF
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/vowPgCByrlE/sddefault.webp
Preview:	RIFF.I..WEBPVP8 tI..P#.......>m6.H.#'.#y.....M.B.>.tJB.&+....D.P...r....5./.2..w....j.]..wB.........'..y.}.?W.a.r.u.X...o...../...>............+.G._.............._....................k.[.........._.?..............7....]}..7.......z.........C.......O...w....?....c.G._........k.._......._._.~....g..`..........K.?.m...........o................../.?.>....h...C.'............%....D...Q.. .@:.%....D...Q.. .@:.%....D...Q.. .@:.%....nEp...XY.n...%aiT...%.Yp)-2.D..aiT...%.Q.P.uB,.B/...gU.........".DT..;......<4.\|.....[E~.... .A.5Hc..+.7.....H-..X>.._....F..><...?..ZO..t.aP.~..0..............b.P.0I5.&...M....../.m<!.-...=S..u&,.....u...a.....~.wE.kx.^.:.(..T.....Vy{...:...B.n7HPE.....D.^...L.b.h...:.....F@A..(.f.N.3.A.[..[#z..3.}.I.zh....=....-.Nd...t..l..,.W......ZJ+....Y..;...rS....4E..c.(...Z.c+..68..S..s.D.s9..g...@6.v$..jI./..N...Z...E....x..6dQB....._..si....~........;5g..T3W....=...D....:\..........^..q...J.....=......f.".o.1HZUE...:

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10019)
Category:	downloaded
Size (bytes):	18468
Entropy (8bit):	4.942984129844562
Encrypted:	false
SSDEEP:	384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm
MD5:	4601BA55044413706C2022CB6C1C3D05
SHA1:	5103EC2FBB389568EBF5CFE4FD721F3DF2FF7AEC
SHA-256:	FE513EF974B767510D0A2B9F1B4D3AFA53185B89AB617C869E5E3D6DB960192C
SHA-512:	8DAB2D19378E34B40043621AAC57B418E56486DCFEBD1A5991BE8A02EE6B071D07EC6BFD9408DEA8FF0198995DE9D42A46E66513D68B40B68056707E4E691E01
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.0
Preview:	@keyframes bounce{20%,53%,80%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-15px,0)}90%{transform:translate3d(0,-4px,0)}}.bounce{animation-name:bounce;transform-origin:center bottom}@keyframes flash{50%,from,to{opacity:1}25%,75%{opacity:0}}.flash{animation-name:flash}@keyframes pulse{from,to{transform:scale3d(1,1,1)}50%{transform:scale3d(1.05,1.05,1.05)}}.pulse{animation-name:pulse}@keyframes rubberBand{from,to{transform:scale3d(1,1,1)}30%{transform:scale3d(1.25,.75,1)}40%{transform:scale3d(.75,1.25,1)}50%{transform:scale3d(1.15,.85,1)}65%{transform:scale3d(.95,1.05,1)}75%{transform:scale3d(1.05,.95,1)}}.rubberBand{animation-name:rubberBand}@keyframes shake{from,to{transform:translate3d(0,0,0)}10%,30%,50%,70%,90%{transform:translate3d(-10px,0,0)}20%,40%

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4609793&time=1713468636052&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1116)
Category:	downloaded
Size (bytes):	540158
Entropy (8bit):	5.3494989696724256
Encrypted:	false
SSDEEP:	3072:AzEz7DysjNSOojdyYAXhzmsLdOeULtcD6R5kaQbtYHG91ONizAJePv:qjguZkja3nNizAJePv
MD5:	402F6728B8F7BAD89B189CFBE2CE81F0
SHA1:	424F7432734D6AC7FB2A97BFB2C350B2BB513C06
SHA-256:	EBC63A3F7DB1745E73128D7975B084E6537F9D4AC9ACC7900B36E96D3EE0683E
SHA-512:	4FDB1119EB9EF49BE56DCA777DB306DACF11A81F5994FAAFD2E19A844A4BDBF115502D81F1420FA37654E06354A19DC279ECD39998E204F040AC752FDF62A943
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Nunito+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CGothic+A1%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.5.2
Preview:	/* [0] /.@font-face {. font-family: 'Gothic A1';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.0.woff2) format('woff2');. unicode-range: U+f9ca-fa0b, U+ff03-ff05, U+ff07, U+ff0a-ff0b, U+ff0d-ff19, U+ff1b, U+ff1d, U+ff20-ff5b, U+ff5d, U+ffe0-ffe3, U+ffe5-ffe6;.}./ [2] /.@font-face {. font-family: 'Gothic A1';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/gothica1/v13/CSR74z5ZnPydRjlCCwlCCMcvCsF0so9KYQ_JRW9IP3jG6cq7prA.2.woff2) format('woff2');. unicode-range: U+d723-d728, U+d72a-d733, U+d735-d748, U+d74a-d74f, U+d752-d753, U+d755-d757, U+d75a-d75f, U+d762-d764, U+d766-d768, U+d76a-d76b, U+d76d-d76f, U+d771-d787, U+d789-d78b, U+d78d-d78f, U+d791-d797, U+d79a, U+d79c, U+d79e-d7a3, U+f900-f909, U+f90b-f92e;.}./ [3] */.@font-face {. font-family: 'Gothic A1';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/gothica1/v1

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	2342
Entropy (8bit):	7.775279131772128
Encrypted:	false
SSDEEP:	48:fSHZxV8PWo3gT3eTVz4ixNqLrCXkr1VQ7RFT3L/4ghrzu3:aHZvgoIVzJxwLw7vbgkro
MD5:	A064A48F4E34831CE3859269977E2316
SHA1:	678BD838723B25543231BAAE3D255A96AF3387BE
SHA-256:	E9048F906D4F282DE3211F9A6D36DA41E66E6877642E4DDD15C1C608C327106E
SHA-512:	6414E0308E4A1C12091E2D708F1695AD95FD874CC2FB5376A3609C1B34417008D7F12C38E655247661774360458D7E3B19B974016F5594FC41E08055B5F9499F
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/K1O63kjyY-HyaTz3j3XD8cyDN6SUjD0vGlw8Ro7HdRmx51DgX4D3DhO63ZTc37ayTHUBWfvCtA=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D...........................................0............................!1.A."#Qr$q23BRa...................................7.........................!1.AQaq...."2R..B.....Cbr...............?...(.DJ"Q...D.%.(.DJ".}S.=:....R/s..4..D. .=.kn1+[c....."}7[.<...h}.....A......h...S...[.c.,..%.`.N#,....^4.....Y..c...q.8..K.[>......,..../."Q...D.].3sK4...6.1.Y.;d.E.]"a.Gm.eK..+.....VX.>........ ..A.o........4.{\|.....V......x2.7...D/.N.__..f...i....9!..h...E.O..f'g.....L..@=N..aO.,r..1wX5....v..<..y..../...3.b...i!h...r.'iQ.w....{.d.`.../.NZ7 ..>q.8...x.F..vk..O.#)'..OE.._0..n......BIs....2N..A~...Fm./...1.5.cr;..m....>...1.......1....n9.....M.n.$.TY...Z7.....A..&=.hsL.4=.3V..5.J.-sI.....=..W..J"Q...W.....I.=4a.e.e....I%V..j1k.mgV.w....=...o.:..%..GV.....B......u.X.D$..a.E.+...C)...r..\7..C...r.O......]#..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	downloaded
Size (bytes):	1499
Entropy (8bit):	4.983141781132298
Encrypted:	false
SSDEEP:	24:Q77GSHLWBBB7c0pP30RddMUq2TXWtMr39tNsSlCtMyrjXsFXrTBF0Z005O6xcHT:Q7CSHLWrxccP30RA2Tmte9/TlCtdcFbp
MD5:	8C0498E2F1F7A684A8D2A3FEB934B64B
SHA1:	76099689CCAEE466D4608DA621C403B368DCAE03
SHA-256:	ED5B5DF9CEACFE76857AC51964972B0B417A215B2F50E837FD6B64BAD7339C40
SHA-512:	5689B6B18071D6020A8A2733BB9E17C07960D9E65F4012CE93F21347FA24A24175509BCA6920FE1B03D66FBC054D718671C23071AF115B64000C01DFBEA2E8DD
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/hoverIntent.min.js?ver=1.10.2
Preview:	/! This file is auto-generated /.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof module&&module.exports?module.exports=e(require("jquery")):jQuery&&!jQuery.fn.hoverIntent&&e(jQuery)}(function(f){"use strict";function u(e){return"function"==typeof e}var i,r,v={interval:100,sensitivity:6,timeout:0},s=0,a=function(e){i=e.pageX,r=e.pageY},p=function(e,t,n,o){if(Math.sqrt((n.pX-i)(n.pX-i)+(n.pY-r)(n.pY-r))<o.sensitivity)return t.off(n.event,a),delete n.timeoutId,n.isActive=!0,e.pageX=i,e.pageY=r,delete n.pX,delete n.pY,o.over.apply(t[0],[e]);n.pX=i,n.pY=r,n.timeoutId=setTimeout(function(){p(e,t,n,o)},o.interval)};f.fn.hoverIntent=function(e,t,n){function o(e){var u=f.extend({},e),r=f(this),v=((t=r.data("hoverIntent"))\|\|r.data("hoverIntent",t={}),t[i]),t=(v\|\|(t[i]=v={id:i}),v.timeoutId&&(v.timeoutId=clearTimeout(v.timeoutId)),v.event="mousemove.hoverIntent.hoverIntent"+i);"mouseenter"===e.type?v.isActive\|\|(v.pX=u.pageX,v.pY=u.pageY,r.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	118753
Entropy (8bit):	4.715587708852822
Encrypted:	false
SSDEEP:	768:nGnPXYb3bgTlBT5sZQ8tQIjCqn/0ginSla6T8L47YwbuXhl+:n9TtQIWqn/snSla6T8L47YwbuXhM
MD5:	14C715C558A5B33667FD061422C1A3B4
SHA1:	B2B9384CEB8FED3463C0894673E1E9E5F067B0BC
SHA-256:	55D22CC2AAA77695F5CF6D99036A205AB6151FF9034F11F8F3CAA4E89D344853
SHA-512:	6D434AF9AFBC60E35E5E419971CE2F2D9574D9FFEC81396234C516623683E5A040C8B1FC0E0E1C243FEA2AA172B4304F86006A4D567B3F73C2B4032FBA7BFF83
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1710847526
Preview:	.dialog-widget-content{background-color:var(--e-a-bg-default);position:absolute;border-radius:3px;box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{line-height:1.5;box-sizing:border-box}.dialog-close-button{cursor:pointer;position:absolute;margin-block-start:15px;right:15px;color:var(--e-a-color-txt);font-size:15px;line-height:1;transition:var(--e-a-transition-hover)}.dialog-close-button:hover{color:var(--e-a-color-txt-hover)}.dialog-prevent-scroll{overflow:hidden;max-height:100vh}.dialog-type-lightbox{position:fixed;height:100%;width:100%;bottom:0;left:0;background-color:rgba(0,0,0,.8);z-index:9999;-webkit-user-select:none;-moz-user-select:none;user-select:none}.elementor-editor-active .elementor-popup-modal{background-color:initial}.dialog-type-alert .dialog-widget-content,.dialog-type-confirm .dialog-widget-content{margin:auto;width:400px;padding:20px}.dialog-type-alert .dialog-header,.dialog-type-confirm .dialog-header{font-size:15px;font-weight:500}.dialog

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	435999
Entropy (8bit):	5.371953759816629
Encrypted:	false
SSDEEP:	6144:PRgOnSY1vAiPwrNhZQ9we1TbuYc5fSaxLTx0qnuCJ4+Tt634Nqb9HP:orf6TbChxLT1nDrTt634NkJP
MD5:	DAAF0CEF21D261FDB059DC53A1E7B610
SHA1:	144556C0102D239542A6FF66E18AF23EF8833B3A
SHA-256:	4CC5FDC2315043B6059E25FC11D246E71C17049221D468BFB1B17852E53D9311
SHA-512:	B30CB94326C889A8EFF97EFB516BA499885F2A7EE8A6CBA0B6F6A61A3DB718F3098B81DEF9EC9E88971DE5BFEE86D4D23DF954AD8CED817F8CC5ED5CE52C3DFF
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.7/js/vendor.module.js
Preview:	/* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,Object),r=Object.prototype.hasOwnProperty,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function o(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var s="object"==typeof i&&i&&i.Object===Object&&i,a="object"==typeof self&&self&&self.Object===Object&&self,u=s\|\|a\|\|Function("return this")(),c=u.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=c?c.toStringTag:void 0,_=Object.prototype.toString,p=c?c.toStringTag:void 0,m=function(e){return null==e?void 0===e?"[object Undefine

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66339
Entropy (8bit):	5.329176784536385
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyS:RIT7OX4s9eZYtj8ltS
MD5:	CFBAE34D2842ECBC3F9B95DE8C18CB95
SHA1:	DE07DC83F1FD48621169351CE1C27977BFB7C1EF
SHA-256:	2F3DF638677C66363A8F31CD806E2E4A32DC394DA2BDD016AEA0D918A00CDA42
SHA-512:	52B1F350F5B3B7F7F604C5AD63F21D734817011B6E01E790D458A7D0E013800E44624DE995036569610D6EB16B6420B7DF7EB573DB5F941CAF7F67520521F150
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11513), with no line terminators
Category:	downloaded
Size (bytes):	11513
Entropy (8bit):	5.205720179763049
Encrypted:	false
SSDEEP:	192:wNmuf8NM+UHN9Rr7lZBNWzd4PMfm/vx3imWAel/L0Fx18b2VautyX2fkiYgu0OOJ:wwuf8N5UHvRr5ZBNW+PMfm/hibLexa2b
MD5:	EFC27E253FAE1B7B891FB5A40E687768
SHA1:	AD12044651FFAC0BADCD0E42F32EDEF91678B1FF
SHA-256:	46E36DD6CA93014E4915C723632BF180D27CC96CCFB7C26E69213E1A82129A62
SHA-512:	42FAD6D6BEEAB116CBE8B149DF6B64D65C4998C0A2CC0562BC831AD02ACD82F2B6B9B33836047AAFD6C2D7CF31A6E91FEACA42A2FA6C6077B7F737DEA40D36E6
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3
Preview:	(()=>{"use strict";var t={d:(e,i)=>{for(var s in i)t.o(i,s)&&!t.o(e,s)&&Object.defineProperty(e,s,{enumerable:!0,get:i[s]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function i(t){if(this.formData={},this.tree={},!(t instanceof FormData))return this;this.formData=t;const e=()=>{const t=new Map;return t.largestIndex=0,t.set=function(e,i){""===e?e=t.largestIndex++:/^[0-9]+$/.test(e)&&(e=parseInt(e),t.largestIndex<=e&&(t.largestIndex=e+1)),Map.prototype.set.call(t,e,i)},t};this.tree=e();const i=/^(?<name>[a-z][-a-z0-9_:])(?<array>(?:\[(?:[a-z][-a-z0-9_:]\|[0-9])\]))/i;for(const[t,s]of this.formData){const o=t.match(i);if(o)if(""===o.groups.array)this.tree.set(o.groups.name,s);else{const t=[...o.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.unshift(o.groups.name);const i=t.pop

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 601 x 520, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	232881
Entropy (8bit):	7.991425568049002
Encrypted:	true
SSDEEP:	3072:RGTSxtazY9KSdb3T69E8KfAynpHYuEfrhDFMXJOIh0K+ZxyMbQ5tJqy/q9YUpME6:RGTSzd9jV3+68KI8udKOxZGHMfhw
MD5:	CDD1EB0883B119EF2B85A30A8C86D0AB
SHA1:	47491009D9D71A1839D49187CEE31A55BE95592D
SHA-256:	D25938AE4EBB4758338F581DEDC2B3AF4CB44F57878CB78765BD731920B078F8
SHA-512:	4BD3C2BA8E2CB7A9466D12A21A03A6CF1BDCD017E5420177DDC8F476DEBAF93F83D638BDD9731E25D8B706E258A8B35C446CCAD48385CF0836EBB4D6360877B1
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/chatbot-zen-celular-601x520.png
Preview:	.PNG........IHDR...Y.........]......pHYs..........+.... .IDATx..k.e.U&.e.}....R..R.T..,Yo.1 ?hL....0C.t..M3A.L....0<..0.....3..1.=...i..C.....X.%Y.lI.wI....{o.{.9{g..s.<Yke....2CJg.....k}7...$."...~.Su...cdq....m3....W....r.s...r.(...&..}.<...5.G...C...%fN.#g..o>P41.7...ZL..N.6se.}.Y.1...y..X&.q.......+..c.........P.tQ.8..k?WG........>0V........m...@...P.W&..'....t......o....X.S.'Y&..N....N..N.%FV.z.....z..I..../...<.._.2..s.7..X[$..s...N...cE..x}..OB2m:..p.C...+.?......P..\|~..3.?......(......u.8u.....W.]T....l..:_..\|K..Qs.......y...g..........B.>$..e.\|.)$/..s..9&...Q.....{...q.d...Ck7&.R\|....%..ET...N...Y.v.8..Fpt.zJ.g.k.O~.NJ........8..ul.M......-F....h.].......f).`..]..kGh..M.1:...8SG.....9.tlo.OC.?V..8'&e....XP...$.. ....9>.8.$(z........<Vw...J......}..W..J.....D..M.rrb...<...cK.6.W_..C...P..{.e..\|:...w#...X......i.[G...K.[^.5\|].c,..M..Y7y..L...$.X.BI...]..6NV.<Ww..1.9&i..M./1.....B.2&).......X.:.n`...&a....Z...._glC.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3757)
Category:	downloaded
Size (bytes):	3758
Entropy (8bit):	4.7836794506460025
Encrypted:	false
SSDEEP:	48:CLXLJTJIafOgWAfMfalMfDf6fH0fngfvjfIXlGpi0rpimy+piY+MXW:CLXLJ11fOgWAUSu7icfgnjwXlrg+h
MD5:	328EBFD01781DE6FE0F18F59CA04861C
SHA1:	334FEA12D6D0D4DE5F19F0F1DB467B444B0D67C3
SHA-256:	0BC32C16A963F587D3D0D69DA37F1DDF1269221FC7DF0907F420624614AB2963
SHA-512:	B9EBF51E04F4E685FC04BFDE3B89A56AF93AD4D4E80B8F5CEF864252494E76D09481CB0AAA65C1B41CCF97B1C5B2816B61BDA070DDA5336D583BB9EC8E07E126
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.15
Preview:	.clearfix::before,.clearfix::after{content:" ";display:table;clear:both}.eael-testimonial-slider.nav-top-left,.eael-testimonial-slider.nav-top-right,.eael-team-slider.nav-top-left,.eael-team-slider.nav-top-right,.eael-logo-carousel.nav-top-left,.eael-logo-carousel.nav-top-right,.eael-post-carousel.nav-top-left,.eael-post-carousel.nav-top-right,.eael-product-carousel.nav-top-left,.eael-product-carousel.nav-top-right{padding-top:40px}.eael-contact-form input[type=text],.eael-contact-form input[type=email],.eael-contact-form input[type=url],.eael-contact-form input[type=tel],.eael-contact-form input[type=date],.eael-contact-form input[type=number],.eael-contact-form textarea{background:#fff;box-shadow:none;-webkit-box-shadow:none;float:none;height:auto;margin:0;outline:0;width:100%}.eael-contact-form input[type=submit]{border:0;float:none;height:auto;margin:0;padding:10px 20px;width:auto;-webkit-transition:all .25s linear 0s;transition:all .25s linear 0s}.eael-contact-form.placeholder-hid

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20975)
Category:	downloaded
Size (bytes):	46055
Entropy (8bit):	4.5566202019504445
Encrypted:	false
SSDEEP:	192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6Hz:QqRDNx7F2OWT
MD5:	A3A1919053B25B1C0836B45BF2BA5680
SHA1:	1AF90E3968C8432265C8D38451E6516C121916FE
SHA-256:	E4607E0DDA5FE4894740FCD627EB03D080F275934048EA6934C8111104DC4958
SHA-512:	A584E63FCD3B5DC04F1846FF6941A9DB2157ABDBAEA534B24287965C773921280F2D304997D723CF918F53E4317CE687BBACFC03B823A4D1498361A1F3B11D6C
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/global.css?ver=1710847527
Preview:	.elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-image .widget-image-caption{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:var( --e-global-color-primary );}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap, .elementor-widget-text-editor.elementor-drop-cap-view-default .elementor-drop-cap{color:var( --e-global-color-primary );border-color:var( --e-global-color-pri

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15615
Entropy (8bit):	4.1162085109015765
Encrypted:	false
SSDEEP:	192:30QHN4qTSQ2wIcsqOLq5j1oaV4qfq3O8Rnjv/YTK9LrwumGzsC12MHZ0:30YfSlweqOi6cFR4uq0
MD5:	F7D1873C343BC36BAC14B572AC0FBDB6
SHA1:	A056B8C3CAAFC690B795A473251DE986D7D5BA3B
SHA-256:	561CEE3CE7C56F84F342DAEEF6D3BE53A01F09375F48F915B006779A62852DC2
SHA-512:	0E814860F4DED6F17C179287E4412AAE25C1511132E46658B7244AFCB8AD88111E1C62A764DED63E6C19EF42546D16FDAC8532D981F2DD4188FCC7B9528AC948
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/js/typed.js?ver=1
Preview:	// The MIT License (MIT)..// Typed.js \| Copyright (c) 2014 Matt Boldt \| www.mattboldt.com..// Permission is hereby granted, free of charge, to any person obtaining a copy.// of this software and associated documentation files (the "Software"), to deal.// in the Software without restriction, including without limitation the rights.// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell.// copies of the Software, and to permit persons to whom the Software is.// furnished to do so, subject to the following conditions:..// The above copyright notice and this permission notice shall be included in.// all copies or substantial portions of the Software...// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE.// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER.// LIABILITY, WH

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.971824596574495
Encrypted:	false
SSDEEP:	3:Hd1DDPYacgEoKY0A3CqTKBuHVysCTVSEpmsN:fMdY0AyqTKA1ysClpmsN
MD5:	548EA749570982DE2E0E792861FE6BF2
SHA1:	D3D180B5E6693EA7CB92814A5239CC14E1AED02C
SHA-256:	184109C38FF9415C686C937D6A99526912E0E97C8BB973B1F03EB76DA2221883
SHA-512:	22748D882D4068C45A12F29FBDAF97466CDBC648EBD796C34E41282E8BD4BA0691B6DA72C4D58E9237832863999B30BEC7221FF089468E1012EAC4FB611795DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmiKuDzGHkscBIFDRM0Cs4SQQm3KcGCh0qF9hIFDfZbc9ISBQ3TkGWEEgUNM9-IdxIFDb4sHHYSBQ0YfJqpEgUNRq8oERIFDeqe2jwSBQ1DPMLW?alt=proto
Preview:	CgkKBw0TNArOGgAKUAoLDfZbc9IaBAgHGAEKBw3TkGWEGgAKCw0z34h3GgQIDRgBCgcNviwcdhoACgcNGHyaqRoACgcNRq8oERoACgcN6p7aPBoACgcNQzzC1hoA

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3742
Entropy (8bit):	4.671879033323116
Encrypted:	false
SSDEEP:	96:3cVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoy:3cVWNXK3XuXW5O
MD5:	27629A4E6BF5E246B6A0D6B78B8D9C1C
SHA1:	056A3F2DF9FFA374036776E58893532993073603
SHA-256:	38552AF52704F8BFD64255601606E6BE758E8F3DF964418A5BC9BDEAADC8337E
SHA-512:	6C6706CD231280F469467B0C1D3C0672AFF776FC1B2B9FF996A69CAF40C0682BFAC91CB8347235353BC87082F4FCDBFF7D31767C3DF6FED7EEF5B36B3771866F
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/343080441.js
Preview:	(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;.. var uo = c.getAttribute('data-ueto');.. if (!uo) return;.. var u = w[uo];.. w.clarityuetq = w.mtagq \|\| u;.. if (!co(u)) { setTimeout(function () { cl(); }, 250); return; }.. var m = u.beaconParams.mid;.. w.clarity('set', '_uetmid', m);.. w.clarity('metadata'

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1448)
Category:	downloaded
Size (bytes):	9446
Entropy (8bit):	4.9581898849925725
Encrypted:	false
SSDEEP:	192:UJ5ttJZNDd80Z/BmRaF7gGDZI+fUT312YUFRDgsNy:4TZRdDZXfEcYUFRDgso
MD5:	4C661941B61080F86AF189F3C363E34A
SHA1:	2BB18A310CB6505A6AF6CC856CF3BAFA37A3542E
SHA-256:	0219CF89E9788216B4EF3B8A6C54C22143EFF5A539297B5A1BA36D67D191EF11
SHA-512:	4A349581C9F2164C287E0E607C615EA1383334C4992BE95C52A538BF7C36C581F61E08A63CF384AC6BCBC5F962B5DD0EED943CF17906DE2B6F07F72F58C83300
Malicious:	false
Reputation:	low
URL:	https://cdn.privacytools.com.br/public_api/banner/style/vXME11817141.css?t=1
Preview:	.cc-window{opacity:1;-webkit-transition:opacity 1s ease;transition:opacity 1s ease}.cc-window.cc-invisible{opacity:0}.cc-animate.cc-revoke{-webkit-transition:transform 1s ease;-webkit-transition:-webkit-transform 1s ease;transition:-webkit-transform 1s ease;transition:transform 1s ease;transition:transform 1s ease,-webkit-transform 1s ease}.cc-animate.cc-revoke.cc-top{-webkit-transform:translateY(-2em);transform:translateY(-2em)}.cc-animate.cc-revoke.cc-bottom{-webkit-transform:translateY(2em);transform:translateY(2em)}.cc-animate.cc-revoke.cc-active.cc-top{-webkit-transform:translateY(0);transform:translateY(0)}.cc-animate.cc-revoke.cc-active.cc-bottom{-webkit-transform:translateY(0);transform:translateY(0)}.cc-revoke:hover{-webkit-transform:translateY(0);transform:translateY(0)}.cc-grower{max-height:0;overflow:hidden;-webkit-transition:max-height 1s;transition:max-height 1s;}..cc-revoke,.cc-window{position:fixed;overflow:hidden;-webkit-box-sizing:border-box;box-sizing:border-box;font

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	295734
Entropy (8bit):	5.558871421043842
Encrypted:	false
SSDEEP:	3072:U/Vagjq+71vbzwHn23Y+38Ovp2LUF1eFS+MCY55CgY8pv1HSAnLP/w222ao0/oL:2hq8wH2oOnVL55Cv8pNHSWLn22l
MD5:	EBB55A650E2F4DA2CABA25FAF26CC580
SHA1:	6B521F99DE172BE6631DC4F4D3BF48459A567F94
SHA-256:	2AA94411B7E6A52BC5162AD8DAEA9E73E7BF6945B29270D4969B2C30C744E337
SHA-512:	2F024110797F2256A19D454F2BCB5325370456F31045BE006E682CDA674E11BFCA57830D41DCC986E8FDE5973D698835CB866B1660EF5FA3C3113D14F3196741
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-43W2WYML5H&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":14},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css?ver=6.5.2
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
URL:	https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_iuh09f9i7&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v
Preview:	{"popups":[]}

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	1438
Entropy (8bit):	7.448022801589746
Encrypted:	false
SSDEEP:	24:emoCk/nHQhLlY9gIvoyI6sUcN2qtrO0E/cOplOjv94SGUNJ3y:emoC2whL+pAGBq2qHE/TpE4SGUNJi
MD5:	4C54E16AD697A1B1A2CC61FF43EAC5EF
SHA1:	E7C0680FE8A8911B08D09BFF3B12A3AB6AB9759E
SHA-256:	4AFDB82B3A0333D4597130BD7D5F251C9D09B8569C7048E41362A0171186725F
SHA-512:	C07E383E3B880FFC3C0DD27D44C5C0BFD715643832E31492828005D38B968FC335EEFEDDC4E813E81CF3ED8B754B0354226502949E372AA320CAC26594DEAC56
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P.."...............................................4..I........k.r....\.}3,...0.X,B..;bk...f. d....Y.................................................:'......................................... s2-.......=.........................!.1AQ...."bq......23SU.$%4acr.............?.n....=.....[<.D..@Q.L.........S...^T../.<.....N.<1y ~./#.............`...7....E%....d.......k..1.6=n..".....\....o.A.^:E...r..H.2.RR.2.]9...;!..K.o....[?..w.Y....!m.v..s....V?..+..\|CAk.J&.P.yt.....M..w>.....PR.`.y.6.8..s.jz}su.er1..s.H..5....K...JK'(...b.YIIw.cU9QMX+...?lH.Y..O&.KOf.%..c.#..CZj..0jH....xv~?..B..~...}..z......t.".]CKN..}D.}.J..}2 ^iK...\|..M.z..:...A:UD..\|.fb..#.V(.....uU.......y....qK.r.&-...P.u.....<.?.U{...Q......u..0...t.d....4.7lL.Y..b.5&z....0..!......!....w.>.wE../55.$...Z.wp.4..Nf>.........#.SU...5.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2481
Entropy (8bit):	4.757211776717653
Encrypted:	false
SSDEEP:	48:aX7wSLr2dc40BM3jyFqHRjqjpKqzquBMTGn:+7wSLs3jHHd1TGn
MD5:	5B470CA078C3A210BB4DB42CC349A153
SHA1:	9FEB229D43F18D3513F1D6AABB1969F407625D42
SHA-256:	3492C5D7C1FFFB44BF380F21B4C1AECEB0EDADDF1B3C3EF66139C842DD1BF9F7
SHA-512:	918777F7C048A9A907F89F18505AF82DDDEC1AC63422D10B860A2B47E341AFA32CE42EB9345EFD680A4EB08B74008725A213F36129D86D4907CC51A246C7883A
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/css/slick-theme.css?ver=6.5.2
Preview:	/* Arrows */..slick-prev,..slick-next.{. font-size: 0;. line-height: 0;. position: absolute;. top: 50%;.. display: block;.. width: 20px;. height: 20px;. padding: 0;. -webkit-transform: translate(0, -50%);. -ms-transform: translate(0, -50%);. transform: translate(0, -50%);.. cursor: pointer;.. color: transparent;. border: none;. outline: none;. background: transparent;.}..slick-prev:hover,..slick-prev:focus,..slick-next:hover,..slick-next:focus.{. color: transparent;. outline: none;. background: transparent;.}..slick-prev:hover:before,..slick-prev:focus:before,..slick-next:hover:before,..slick-next:focus:before.{. opacity: 1;.}..slick-prev.slick-disabled:before,..slick-next.slick-disabled:before.{. opacity: .25;.}...slick-prev:before,..slick-next:before.{. font-family: 'slick';. font-size: 20px;. line-height: 1;.. opacity: .75;. color: white;.. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothin

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531)
Category:	downloaded
Size (bytes):	220979
Entropy (8bit):	5.6154075312842
Encrypted:	false
SSDEEP:	1536:5ihMF2MaJLH2DmDPzuz22/ym8ON9lxC/ZciTJYt/oLlUApL2KVX7NxCpK0u3jiJr:MtJ7DR0lfiJdKK0u3iYZhnjCiCNiWbuE
MD5:	A70E911421DA4EB47E035D6F25388F76
SHA1:	C910977D4DE4C1239CA2023D63BB04032BB3C1E9
SHA-256:	85B38E7085AC3E5D7B57603C31D75140522FA3A4A70C0A944AD7337B80451E1A
SHA-512:	2C78498874F88CFD516F84F27417D28FADDE24EDDDB8B0FF5BC0AC2EF13C3CF4E05F9B75A63735040DCDF271B401FBEEB0320F2C61FC3C07A9FEF4EF08BAF406
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (333), with CRLF line terminators
Category:	downloaded
Size (bytes):	11222
Entropy (8bit):	4.649016862050744
Encrypted:	false
SSDEEP:	96:hD8P8qjWWFTrlY7SfdU+AdUVBRdSM/IoEQraMoY5rAjKdRXb3IamC0D:hoPe7SfdekBjAoHo8TRXb3IamC0D
MD5:	420380C6A33B2F9C0606CCA84AA1DAA3
SHA1:	EE0EA8A0D8217DDEC4009AF9942053C9B4534841
SHA-256:	3F5D5A5357219FFBB3A9027CADDAACB443847D42B1FC60A7F05447DA963A1529
SHA-512:	77FC4792856184D96B3FB41B7CA50BC09262BE99A447F80D5C2BC150254F8B6C2CB654AB145AE237ABB057397F8EE3B8BA2AF7891AC6D9D7F1758F8F58F1C756
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/entrar
Preview:	<!DOCTYPE html>..<html>..<head>.. <title>Questor Zen - Login</title>.. <link href="/Content/Images/favicon.ico" rel="shortcut icon" />.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <link href="/bundles/bootstrapcss?v=kyR4jYxJOjVS6IRFVEvIKGoZyzo_coA_3ChUQqkeb4g1" rel="stylesheet"/>.... <link href="/bundles/mainCss?v=Ooa5At86l5X3WqQryTmy0L1v8ZvhQci4CCODkN2LgXg1" rel="stylesheet"/>.... <script src="/bundles/jquery?v=XgddrwFLu0z8WptdlVDXPqymDmw7ToIMYb1BryT4OPk1"></script>....</head>..<body>.. <div class="container">.. <div id="main-content">.. ......<link href="/bundles/logOn?v=mY8oLJVUU1u651zqYdfRKitT9ZGmsEcUQ93ApDZOC201" rel="stylesheet"/>..........<script type="text/javascript" src="/Content/Js/UpdateBrowserNotify.js"></script>....<div id="form-signin">.... <form class="form-signin" action="/entrar" method="post">.. <div>.. <h3 class="">Dinamic Consultores Empresariais S S Ltda</h3>.. <

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4609793&time=1713468660183&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454814460294955
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPU:ttlWBZ7O0bvQQGArHu5GKn8
MD5:	ED4FA4EB31641234901881C752E61024
SHA1:	DBD32C0D8D3E063329D7A27E24499E63804A94FB
SHA-256:	85F407912384186334577F65BF6BB88045BD96F5222D7C696CC71303D65C826A
SHA-512:	E3ABF742E5AC3175A0DCD9799FB29EFFCFCB1B6BE294D10449421A77C9EC6A0FC12855566E9761150E38BDD0CEA1D369E4984C9EF618D9F7B212CBCE88EC4A8B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38582), with no line terminators
Category:	downloaded
Size (bytes):	38590
Entropy (8bit):	5.294651497536075
Encrypted:	false
SSDEEP:	384:rO70wDgKuJz+ZbNuSPlVTzkRnddaJQUky7nrTDKUgigNC1Qaa3rJBFgTsVNmlio4:w0qumBs/0Xnaiwa6ssUoqAMnwtB
MD5:	92F8C01350C630F414F5D0B015AD6864
SHA1:	EAB40AB4E77F92F2FB17684AAF44B579A51B8034
SHA-256:	17B79ECE7EF9D1454A90156690D33D64387B67A7A7548FC826012512E287A937
SHA-512:	C2D619D5CBEC24AAA5DA29A80031ECE9EE65B949F38E00E75EF6EBFFA0A38B3FD3F32F271A941D3E0D1F001B90D0A30D3A9CF342E409FE3FB75AC47A3361FF9A
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Preview:	!function(r){"use strict";var t,e,n;e={},(n=function(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}).m=t=[function(r,t,e){e(1),e(70),e(77),e(80),e(81),e(83),e(95),e(96),e(98),e(101),e(103),e(104),e(113),e(114),e(117),e(123),e(138),e(140),e(141),r.exports=e(142)},function(r,t,e){var n=e(2),o=e(38),a=e(62),c=e(67),i=e(69);n({target:"Array",proto:!0,arity:1,forced:e(6)((function(){return 4294967297!==[].push.call({length:4294967296},1)}))\|\|!function(){try{Object.defineProperty([],"length",{writable:!1}).push()}catch(r){return r instanceof TypeError}}()},{push:function(r){var t=o(this),e=a(t),n=arguments.length;i(e+n);for(var u=0;u<n;u++)t[e]=arguments[u],e++;return c(t,e),e}})},function(t,e,n){var o=n(3),a=n(4).f,c=n(42),i=n(46),u=n(36),f=n(54),s=n(66);t.exports=function(t,e){var n,p,l,y=t.target,h=t.global,v=t.stat,g=h?o:v?o[y]\|\|u(y,{}):o[y]&&o[y].prototype;if(g)for(n in e){if(p=e[n],l=t.dontCallGetSet?(l=a(g,n)

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	327826
Entropy (8bit):	5.589615323522859
Encrypted:	false
SSDEEP:	3072:GWo02tPPLdCYIqJAPqcj5RUmzhWEt/WkCidORd9qTH/CkMw3taGoQHOaPhXKh:ANPLdCDt6mzhJt/EidOzUTfChw9aPYpC
MD5:	D5B8D160AB640BFC1DD99ACD65F1D38D
SHA1:	1BE3896846933D5011C56D56B4A0609B9F1A1CAF
SHA-256:	A4A828C62029E531DFD2399D717731F7A22CE1C3E2C0BB796EEE2C4BAE9046B7
SHA-512:	F562F2E71D4071147F96588903487CB76551815E384ED32E1C2265150D68161045C6407B8A09A717ACBE80F830EDD974576308BF26DEA6D40B7B9EEA1B956EB7
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32972, version 1.0
Category:	downloaded
Size (bytes):	32972
Entropy (8bit):	7.993219721506124
Encrypted:	true
SSDEEP:	768:8h3MT8YcpplOIE6+ko/CaKoMtAe9X6RBFchNC9Vi:1M+ko/IoS9XwFca9Vi
MD5:	CCC822C8AEE131FCB221FC3257A83991
SHA1:	E15730E1E1ED021B25B89C81309308D67A3C0172
SHA-256:	C8E4DF00BDAD9EE1602DED3B28CA40610B3866740F0D70272FFAAF748DEDF694
SHA-512:	BC4259432CB5B2A29A54596C20D61678071A1AAA20FA63E09E744C7AA74C15302D17E7673162BEA7AD4B39BEAF537CD5CA176807388777C30012EE965277F5B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v15/pe0RMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9wNvrwlNstMKW3Y6K5WMwd-laLQ.woff2
Preview:	wOF2...................R..............................n...?HVAR..?MVARb.`?STAT.v'2..2/d.....h....N.0..b.6.$.... ...../..[v.Q.6....m..U...c....fA../0.....a.1....g%..3...c.@..!.(..YF.K...%..@ks.s.]Y.z..Cy.h.W.........2N.E&...Wx.w$d.z.M...d....r>.Qf....dX.0..T._'.m..a_.H..t....v..>...Omr....j...^..V..gtR..o....qk\|"j.x..u}V....i..(2!....."......_.1.H.-.....H.r.q.!i`5b..&"F..."ec....P....~.7..D..Q...r..I.\..7.!..$@BD.]'V...:.5.n..;.n.u..<O..y.}.........Q...H.C.Y.7<?..4.....G......q.]8......X;.m........f..U.W4.w....].TN..0....;.d..l:... ^.#.......B..P.e[.S..x.$..z.....h..........^...<.. .2...$%.TT..uFj..T...RP..{.K...Bh.XIy.Fx........L~F.~.W.!6d................Il..M......H......d.....Z..z.....Wg..%.d;....D..A.....$Ew....h.q..2N.[p....8Z.C.%p.&...N.......E.E..&:.....P.?uB`.;...Q.A7..Pl._.CK......,[=.............)..dIO...l/....t.#.,.,o.B....L.fz...T%Q.gb.j..$.\.~U.....b....H+..)b..'..R.[.Mi....3.../..,....IhT..:...L......T.e.5..'E $...._.....PJ.......:.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18898)
Category:	downloaded
Size (bytes):	292696
Entropy (8bit):	5.5557686361302405
Encrypted:	false
SSDEEP:	3072:j7aq+71vbzwHnXfVi89np2LUF1eF5fyXatvFv722gY8pv1H6++LoHn:Cq8wHPNU7tvx722v8pNH6+7
MD5:	B9189A79DBEC35D23143204C701DC698
SHA1:	4BECF45FAA686F8C58780C02CAB10F71C4B74682
SHA-256:	ADCEDDB1C78D60A1E531C5E5F1D699C1BFBD40FE190476055A6816A32F402AC7
SHA-512:	FA7926B629584226A3A1624B947F5822B98E4328DB0D65D23B748DB7D5FCE56F1B9EA2DA63086A425DD7CE3000344851FE5C96F044B738A0240E5B9CF8547B2B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5CDSWRL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"LeadForm","vtp_name":"Category"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__jsm","vtp_javascript":["template","(function(){return document.querySelector('input[type\\x3d\"tel\"]').value})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){return document.querySelector('input[type\\x3d\"email\"]').value})();"]},{"function":"__awec","vtp_mode":"MANUAL","vtp_phone_number":["macro",5],"vtp_email":["macro"

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	995
Entropy (8bit):	7.233100894131324
Encrypted:	false
SSDEEP:	24:+cKYj6LGz5DbjuXgIqfHmTMwpbHK8LJLG/0rdu7wRz:+cKYjwGZMH/IwpbHK86v4z
MD5:	8065DAD5718A22D965D99CC05C237215
SHA1:	D6F0EF4707271946DF0A4564CFDA61694E24728D
SHA-256:	452BD5046327FE08628C5E21DB1F4B001D3751AE3E54E99DB08FE225E66A02C2
SHA-512:	0066F6751EC68E4372BFAF1BD3931921CB8DCBF0620EC561FEB11C59D5594E52B56F28758515FFD7010C4DFB9D0B36C31BA803F43808C6C745D3DAAA5B094112
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma...................mdat......g...2.......b..+k....=...~.~...a..s8.`.B^a'...AP.=aj....+.W. .3tO..l...~^.z..]....&.......J0..._..q......!.j&......7.kd...Z..EK...DF......n{....a.kG.......#..I..O._!o+..k........7.l.JA..\.~Dm..X...{.'(...R..y.v7......f..K...zO....UMU......0sR.o.G....(d.!..Gww.7....O....-.)..U.T.DK...}..w.6..L....Us.'.V&k.=.4..?....3..u..k.S..K...U.)/d..b.Tf...:$.....\...C\|4..$.(^.FM.v.2..,).8MH]P.n..e\|>4.N...I.M..g.P[6)....g.Pm..5....j............r.....(.X..j..b......m.~.X._*.D...^^vJ.._.s+..o{........s.3G...gk....@....?......D..\|3....a....f./.bU.a.......G_..].......%f....-.w.!a.^j.w..S.%-#.`..."F..K.6#E.pE"..]....H.EZ=.P......u...F.<....,.%A..r!.6.=".G.gh...9mWJ..<.....@

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3570)
Category:	downloaded
Size (bytes):	5292
Entropy (8bit):	4.636356216046929
Encrypted:	false
SSDEEP:	96:pD9Adudzu5vN/joiBpFxljyokK/lekKaocwoT1PW3ItWoNb:pDidudzu5vN/joiBpFxljyokK/lekKaB
MD5:	418DFA6828D7FD44F39959F26A3C9433
SHA1:	1E368541DBB2681985F6FA90C19003429D0DB348
SHA-256:	58A376B64A681E501C6D80DFF7510400EBD99CF51F265A0F4AEDAF217BAA089A
SHA-512:	7B1F6F1D340BFBEFA891BC80AB1649FA15B4D02CE1BCDFF05533EEE72E68AA11C27CF963DB1A5E132D863458092DF7430461AB1897B21A57D1A6582B64AC26AF
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/post-11299.css?ver=1710847529
Preview:	.elementor-11299 .elementor-element.elementor-element-2ee21b6d > .elementor-container{min-height:60vh;}.elementor-11299 .elementor-element.elementor-element-2ee21b6d > .elementor-container > .elementor-column > .elementor-widget-wrap{align-content:space-between;align-items:space-between;}.elementor-11299 .elementor-element.elementor-element-2ee21b6d{padding:0% 0% 0% 0%;}.elementor-bc-flex-widget .elementor-11299 .elementor-element.elementor-element-6f657d5d.elementor-column .elementor-widget-wrap{align-items:flex-start;}.elementor-11299 .elementor-element.elementor-element-6f657d5d.elementor-column.elementor-element[data-element_type="column"] > .elementor-widget-wrap.elementor-element-populated{align-content:flex-start;align-items:flex-start;}.elementor-11299 .elementor-element.elementor-element-6f657d5d > .elementor-element-populated{padding:0px 0px 0px 0px;}.elementor-11299 .elementor-element.elementor-element-4b1e06b8 .elementor-icon-wrapper{text-align:right;}.elementor-11299 .elem

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	729
Entropy (8bit):	4.412324448520298
Encrypted:	false
SSDEEP:	12:2PvyN405F0I2mX8YWbxPbNe3oWYoBJYwu3uCaCRGQw2jvO9F4nv:2iNbFxWVTNCoWFBa3uCTRGQw2U4nv
MD5:	6603F8CD50EFA8369526F56C8C202489
SHA1:	0434B41E19D7188EA594FD5BFA00AC38B1D9B7CA
SHA-256:	65FDE5FC0A0151D33BEA0BFC69398048F6037DA276705D396761015B31CCBA84
SHA-512:	7D2FF10D6696E2697853E2334DC20F21E791C3EAE28249F8C6621C44FEF4D3EFBAC035508902DAE4B420321ADDF3497B534D2F76727589012FD748834A44406C
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/js/typed.fe.js?ver=1
Preview:	(function( $ ) {. $( document ).ready( function() {. $( '.typed-me' ).each( function() {. var options = {}, strings = [];. for( var key in this.dataset ) {. if( key.substr( 0, 6 ) == "string" ) {. var v = this.dataset[ key ].replace('&', '&'); // in case the user already used &. v = v.replace( /"/g, '"' );. // Replace & with & otherwise the browser freezes.. v = v.replace('&', '&');. strings.push( v );. } else {. options[ key ] = parseInt( this.dataset[ key ] );. }. }.. options[ 'strings' ] = strings;. options[ 'contentType' ] = 'html';.. $( this ).typed( options );. });. });.})(jQuery);.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	46796
Entropy (8bit):	5.49249921743214
Encrypted:	false
SSDEEP:	768:yBLBSB7BOBdBJB/vp/LXO9pQNN5YYFTVptg4TK2cCqJ34IaURijoByBfBABaBuBH:gc
MD5:	9ABEEE4EC31E36147F43FDB381C6FD4C
SHA1:	01CEF8EADCF8E0FA6BB0B78EF064794FB5DBFF15
SHA-256:	E8CC80BE6C43744AD0FA84933313CC74406E594583A351ED53963E6DBC72FCF1
SHA-512:	04D35F9A51C6CBB9B05DC5B3F6B87B6C7CD260809B38D854A0FFD2AD6C7B13B03E5CD4C4610D2255F42B052D830AE04B6C94E4905F946012D5582284DC7EA2FE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.5.2
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2) format('woff2');. unicod

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
URL:	https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_9h2ggd7no&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v
Preview:	{"popups":[]}

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13927)
Category:	downloaded
Size (bytes):	354104
Entropy (8bit):	5.56573907034515
Encrypted:	false
SSDEEP:	3072:Mg4agSq+71vbzwHn239f38ivp2LUF1eF5f+XatvFY55CgY8pv1Hy2nLP/w22t0oH:f4Qq8wH2tdU/tvW55Cv8pNHyILn2tt
MD5:	862AE9F08D31B42B198F2D85142027D3
SHA1:	D491C59EC88F4665E3FE5B658556C50F8A6921ED
SHA-256:	B149C94D891BFAA069EF07BE6CB74339B23EC06F45B361D0D71BA0D126A040B0
SHA-512:	D5B8CACF03213665585BAF9F313DBBD58D562A3F064550F8F332D05C0D24FD0344A94936ECDCE7C68BF576F41665D33E6826837C5875CA4B316B85DA1C210110
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-WZY91LD4XC&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":31,"vtp_instanceDestinationId":"AW-1027983844","tag_id":1024},{"function":"__ogt_ip_mark","priority":21,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":995},{"function":"__ogt_1p_data_v2","priority":21,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	4.447797609065123
Encrypted:	false
SSDEEP:	192:hHWBhS89bZ6mF9V57FYQFMgcJM7JQL06lMwJt5wjlffh:c1FpF9FMgc27sJg
MD5:	C37ADA96A2A1498BBAD077E15B7FD3CE
SHA1:	3F2BE88DE884F044C310F4EAF4DE3162D88824D4
SHA-256:	869505E7A7D2B2B99B94BBE29B5E569B63A336A0C907F186B77EC243B6AEACDD
SHA-512:	675A58F56BE3775E7A520F3672784DEC7A3CDE65084D6248526E8CB003ECE1702F244B6485C6634EECA46D7393BA7125566A5E3F6409F35F4EDC9DCDC502CEC9
Malicious:	false
Reputation:	low
URL:	"https://cdn.privacytools.com.br/public_api/banner/pop/vXME11817141.html?t=1&m=0&c=1,705,326,596,201"
Preview:	<style type="text/css">. #ov_z349840300 {. display:none;. position: fixed;. left: 0px;. top: 0px;. width: 100%;. height: 100%;. text-align: center;. z-index: 99999999;. background-color:#000A;. }. #dp-preferences {. position: fixed;. margin-left: calc(50vw - 400px);. margin-top: calc(50vh - 310px);. min-width: 500px;. max-width: 800px;. max-height: 600px;. color: #26264A;. font-family: Arial, Helvetica, sans-serif;. font-size: 14px;. background-color: #FFFFFF;. box-sizing: initial !important;. -webkit-box-sizing: border-box;box-sizing: border-box;-webkit-font-smoothing: antialiased;. }.. #dp-preferences::after,. #dp-preferences::before,. #dp-preferences ,. #dp-preferences ::after,. #dp-preferences *::before {. box-sizing: initial !important;. }.. .dp-preferences-topbar {. width: 100%;.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3816
Entropy (8bit):	4.836057101764009
Encrypted:	false
SSDEEP:	48:WoEKL3NcApAqjOZFajT1CRoCxOhbEVmK2OAgWp2C9LQz9Mk1N9/M:W2N2ZPNchbEVxvAt2yQz9l1j/M
MD5:	07D57B10FF810CEF716E3DBA091CA042
SHA1:	4ED9CA281CD04EB2B3B7E26B673728F2EBB9997D
SHA-256:	23AC4CCBAD11FAE51F36D4CC72C6CBD62B76771B7A2A60CB8CAF4FCD8A41A765
SHA-512:	85E4D4C2F89AE40AC853E7BDFA74F24D14A21D50FCE6815C4B1F9DD0E6BCAC654C1170859901692945EDCF896F5458AB934917BAA579B7668E43F86EAA655D74
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/css/flaticon.css?ver=6.5.2
Preview:	/.. Flaticon icon font: Flaticon.. Creation date: 21/12/2019 08:43.. /....@font-face {.. font-family: "Flaticon";.. src: url("../fonts/Flaticon.eot");.. src: url("../fonts/Flaticon.eot?#iefix") format("embedded-opentype"),.. url("../fonts/Flaticon.woff2") format("woff2"),.. url("../fonts/Flaticon.woff") format("woff"),.. url("../fonts/Flaticon.ttf") format("truetype"),.. url("../fonts/Flaticon.svg#Flaticon") format("svg");.. font-weight: normal;.. font-style: normal;..}....@media screen and (-webkit-min-device-pixel-ratio:0) {.. @font-face {.. font-family: "Flaticon";.. src: url("../fonts/Flaticon.svg#Flaticon") format("svg");.. }..}....[class^="flaticon-"]:before, [class=" flaticon-"]:before,..[class^="flaticon-"]:after, [class=" flaticon-"]:after { .. font-family: Flaticon;.. font-size: 20px;.. font-style: normal;..}.....flaticon-arrow:before { content: "\f100"; }...flaticon-search:before { content: "\f101"; }...flaticon-commer

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26856), with no line terminators
Category:	downloaded
Size (bytes):	26857
Entropy (8bit):	4.567562841173206
Encrypted:	false
SSDEEP:	768:vPoScoKTAllwvGQzKNwGz42lvQz0Ahm+PmBMqRI3HtCelEqJUrZgFE:zCE
MD5:	8BFFF50A45B7BB78DFBCDEDCB5610535
SHA1:	45944C6D4264D60E8AB36480646F6FBE4725A223
SHA-256:	1C361808DFA7C199339E826E36230C4ADFFF634E75D3A188CF1EBEB6612B642A
SHA-512:	BEE465FE1C8C2F4580E7C7E8205B2DE00E3A5782D2C0A103A0BE3DB6498005E975362D0CE871629E4CFC2D224B543930F79C6223589B0D0B58BBAC9DFC5C6800
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1710847529
Preview:	@charset "UTF-8";.site-main .menu-navigation-container{overflow:visible}.elementor-item:after,.elementor-item:before{display:block;position:absolute;transition:.3s;transition-timing-function:cubic-bezier(.58,.3,.005,1)}.elementor-item:not(:hover):not(:focus):not(.elementor-item-active):not(.highlighted):after,.elementor-item:not(:hover):not(:focus):not(.elementor-item-active):not(.highlighted):before{opacity:0}.elementor-item-active:after,.elementor-item-active:before,.elementor-item.highlighted:after,.elementor-item.highlighted:before,.elementor-item:focus:after,.elementor-item:focus:before,.elementor-item:hover:after,.elementor-item:hover:before{transform:scale(1)}.e--pointer-double-line .elementor-item:after,.e--pointer-double-line .elementor-item:before,.e--pointer-overline .elementor-item:after,.e--pointer-overline .elementor-item:before,.e--pointer-underline .elementor-item:after,.e--pointer-underline .elementor-item:before{height:3px;width:100%;left:0;background-color:#3f444b;z-

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2377), with no line terminators
Category:	downloaded
Size (bytes):	2377
Entropy (8bit):	5.859536752373166
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt087ARCQImD1KUX46:wsbSUtJfxrqLWWWdV6j1HAIeXp
MD5:	0C621205DE0E8AA3F6EB2618AFF74E74
SHA1:	BF60FF7F8B7BF8668E4E64E3C83B159EB3AD5827
SHA-256:	91BAEF994C4154CA9AB951245BB5171998B30E86502312F131CB91E671587571
SHA-512:	9D1A74A11EED6F7F1960B45DB526FD54DC2213880E823A4099060E942F780CEACEE49BB63A684B1438EA22DDF57869AC046A05C4DECB0C85A3E8BB3F6FD2C97D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1027983844/?random=1713468654473&cv=11&fst=1713468654473&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.661699255973271
Encrypted:	false
SSDEEP:	24:ylut2Juo0ct/39G3KhfKappwjtJsPJPJk:yYt8uo0ctP91Yt6P5q
MD5:	DF57F47EFE771976F4F48375359AB8B7
SHA1:	4B49D6358A49F445B5FFB3F579F2D995F30DAFBF
SHA-256:	09E7FE4A7F215550D36BB6FF1635F5D476080C50A868B853AA55E9F7E17303C3
SHA-512:	03BE8D912193ABD99DE0F3ABDA000F5406B2D57953C06FEA79DB491E25320CE45EF065768D1074EBB42A0E45CA05DDED64AB31CE1B3603D98EDE7AF3AA62A491
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ......................................V...V...................V...V...V..V..V.-.............V.h.V...V...V...V...V.E.V...V.H.V.`.V.;.V.%.V.M.V...V.).....V...V...V.......V...V.^.V...V..V.k.....V...........V.!.V...V...V..V._.............V...V.9.V.y.V..V..V./.............V.k.V...V...V.c.V.{.V...V...V.s.V.I.V.......V.m.V...V.g.V.1.V.2.V...V...........V...V...............................V.C.V.m.V...V.e.V...................V.#.V.W.V.#.........V./.V.e.V.(.............................V...V...V.*.V...V.\.V.T.V...V...V...............................V.[.V.t.....V.#.V...V...V...V...V...............................V.9.V.......V.6.V...V...V...V.4.V...................................V...V.t.....V...V.......V...V.f.................................V...V...V.@.........V...V..V.......................................V...V...V.......V...V.\.............................................V.h.V.6.V.9.V...................................................V.<.V.[.V...V....

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2639
Entropy (8bit):	4.460518333297625
Encrypted:	false
SSDEEP:	48:c+gU8h5l3ge0nLLaB9g42Ux7RtPdGFTUO18xU5AVMHovt/W:7gBl3H0n3aB9g42UxFtE3oKAuHovtO
MD5:	8EB98C743F8786DBC9019B5CD85C8AE0
SHA1:	0AF816166CA52E09EA3975760597E081299773C2
SHA-256:	7F891264E72A45E87664844B1E259F48BB0D8BA2C565DA1F44C81456BA7B52CC
SHA-512:	C1F1F9B11C8D317E7281DB480A5496B4CAA01090333FFD456E27D4FE2CE08550F2D512D5C242ECB7F4226655F3059C368EDC637C8A1BE50DB6A43758E0188ED5
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/002-virar.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="m509.421 196.955-94.575-82.038a7.479 7.479 0 0 0-12.38 5.649v42.715l-37.826.012-.171-.004c-25.662-.568-50.379 5.557-72.148 17.576V109.06h46.818a7.478 7.478 0 0 0 5.584-12.454L261.591 3.278a7.48 7.48 0 0 0-11.172 0l-83.132 93.33a7.48 7.48 0 0 0 5.584 12.454h46.818v32.93a7.479 7.479 0 0 0 14.958 0v-40.409a7.479 7.479 0 0 0-7.479-7.479h-37.62l66.454-74.606 66.454 74.606h-37.618a7.479 7.479 0 0 0-7.479 7.479v88.82a143.293 143.293 0 0 0-15.031 12.621c-11.451 11.042-20.731 23.537-27.678 37.134v-68.249a7.479 7.479 0 0 0-14.958 0v104.998c-21.761-12.025-46.465-18.154-72.138-17.577l-.181.004-37.841-.012v-42.715a7.477 7.477 0 0 0-12.38-5.649L2.579 292.995C.94 294.415 0 296.476 0

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:25:35], baseline, precision 8, 800x600, components 3
Category:	dropped
Size (bytes):	352632
Entropy (8bit):	7.945308034876878
Encrypted:	false
SSDEEP:	6144:IZiZsuLLd4ph0kfOdAd/A8MWpZAn2OxVdgFNpFbiQDzOtjcl67nW/QjiTNOhxfQ:IEPIhf82Zu0fBOGl67nCQGROvfQ
MD5:	D9F09608299014A82654CEACA4521743
SHA1:	A7B004B1245924A0B9C71333D7441B6E209FB302
SHA-256:	25FC3A242121F1910D4765E1E377885D7B3ED478ADCBC076852C02E37DBCC17A
SHA-512:	374FED387535E1135502A9CA6EB8C1A6730B36750654AF6D553BD25C3CE758157043238D5BB8F4AC63574987FFE10EA2FBCCE42F7B323768FE7B4C9FCFFFDA26
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:25:35............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..d.$...I.R.$.JRI$..K.jP3s1.q-..qe..q.I$.elo..m.mu3..\I....an-....-5c.l.........8.V}..92s..\|1.{=..r!%.....s.=V.....7I..;>.{K...7o.6..........v.psC..]5....1

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1027983844?random=1713468660162&cv=11&fst=1713468660162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2359), with no line terminators
Category:	downloaded
Size (bytes):	2359
Entropy (8bit):	5.843338101828755
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08NAuhCQImD1P6:wsbSUtJfxrqLWWWdV6j1ZAu4v
MD5:	1E78127B7B8E3B72F888D74147653376
SHA1:	06C6AA3C6E91DAD3D10FA351D4ACFB098EC844A9
SHA-256:	5BC62875EADF00151FFE1B9A48EA755A6F78A1952F0E0A6000F9C7C304892D51
SHA-512:	8639D4FFB4632751D5241DCA4CA3617A4145345E50BED20F536E64FEDA30639A34EE56548634706601BE8D052C32560430D839139674D626C905C6E311E30B39
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1027983844/?random=1713468622572&cv=11&fst=1713468622572&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3814
Entropy (8bit):	5.005660658639155
Encrypted:	false
SSDEEP:	48:CEwFxH/6gwdlIH8HA6gwNHJa6khLv6gwbeyHJlujlHJZECHJxRpkA5oDs+/vouVj:Oxi9IcTPzB3iXjWNhVWNAVGDjsDjsI
MD5:	22E028C10766D6B06BF71E22C4B03A10
SHA1:	E62225CA8F64CEB4746CF45423F5884CF7E6A1DB
SHA-256:	228F22CC4BF1603374F4A51CCF824377ADC04AA0123AED741F32CD5F0899ED81
SHA-512:	C67AE6F0736FAC5FF021176AE95773B9FA1D042745FDA5320159C28C8C071B7CE50D1F6B43C8637F2D2516B3A902DC5B8BD6CA6087DCE665FF46AE4073276534
Malicious:	false
Reputation:	low
URL:	https://upload.wikimedia.org/wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256"><defs><radialGradient id="b" cx="161.8" cy="68.9" r="95.4" gradientTransform="matrix(1 0 0 -.95 0 248.8)" gradientUnits="userSpaceOnUse"><stop offset=".7" stop-opacity="0"/><stop offset=".9" stop-opacity=".5"/><stop offset="1"/></radialGradient><radialGradient id="d" cx="-340.3" cy="63" r="143.2" gradientTransform="matrix(.15 -.99 -.8 -.12 176.6 -125.4)" gradientUnits="userSpaceOnUse"><stop offset=".8" stop-opacity="0"/><stop offset=".9" stop-opacity=".5"/><stop offset="1"/></radialGradient><radialGradient id="e" cx="113.4" cy="570.2" r="202.4" gradientTransform="matrix(-.04 1 2.13 .08 -1179.5 -106.7)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#35c1f1"/><stop offset=".1" stop-color="#34c1ed"/><stop offset=".2" stop-color="#2fc2df"/><stop offset=".3" stop-color="#2bc3d2"/><stop offset=".7" stop-color="#36c752"/></radialGradient><radialGradient id="f" cx="376.5" cy="568" r="97.3" gradientTransform="matrix(.28

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2289
Entropy (8bit):	4.233589411648575
Encrypted:	false
SSDEEP:	48:c+gU8SKXOiO/ZjMPU7ENSUe9ackxM31IAq6r55P75c1cy97B:7gaiEZAc7ExeIcUSnFcB
MD5:	FA365BD1B7F1F4954E01C7CD19564A05
SHA1:	2E27F3DDF26F65C715509EDBFE7245C2BA859617
SHA-256:	05BD81B1257478860D6FA2ADD62A0C94BCA79B0EF02C1DF1119D329112880D04
SHA-512:	8DB60662667F2EADD20E059D2539739DF5BD38C4D4CB22031247982647012A50A2E704950E8F4226AABA858A9447EFF99F45D33435FBAF431CF59DE3F1E34C6E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 72 72" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="M69 15.2c0-2.3-1.8-4.1-4.1-4.1-1.5 0-2.8.8-3.5 2L42.3 7.3v-.2c0-2.3-1.8-4.1-4.1-4.1-2 0-3.7 1.5-4 3.4L10.9 8.1C10.4 6.5 8.8 5.3 7 5.3c-2.2 0-4 1.8-4 4.1s1.8 4.1 4.1 4.1c.8 0 1.5-.2 2.1-.6l6.2 6.1c-1 1.7-.7 3.6.6 4.9L8.4 35.8c-.4-.1-.8-.2-1.3-.2-2.3 0-4.1 1.8-4.1 4.1s1.8 4.1 4.1 4.1c.7 0 1.3-.2 1.8-.5l16.9 19.3c-.5.7-.7 1.5-.7 2.3 0 2.3 1.8 4.1 4.1 4.1s4.1-1.8 4.1-4.1c0-1.4-.7-2.7-1.8-3.4l7.4-20.9 2.8 13.6c-1.4.7-2.3 2.1-2.3 3.7 0 2.3 1.8 4.1 4.1 4.1s4.1-1.8 4.1-4.1c0-.3 0-.6-.1-.9l9.7-4.8c.8.9 1.9 1.4 3.1 1.4 2.3 0 4.1-1.8 4.1-4.1 0-1.7-1.1-3.2-2.6-3.8l3.7-26.5c1.9-.2 3.5-1.9 3.5-4zM57.7 46.4 44.6 36.3c.5-1 .8-2.1.8-3.3 0-1.1-.3-2.1-.7-3.1l17.5-11.7c.3.3.7.6 1.2.7l-3.7

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	2342
Entropy (8bit):	7.775279131772128
Encrypted:	false
SSDEEP:	48:fSHZxV8PWo3gT3eTVz4ixNqLrCXkr1VQ7RFT3L/4ghrzu3:aHZvgoIVzJxwLw7vbgkro
MD5:	A064A48F4E34831CE3859269977E2316
SHA1:	678BD838723B25543231BAAE3D255A96AF3387BE
SHA-256:	E9048F906D4F282DE3211F9A6D36DA41E66E6877642E4DDD15C1C608C327106E
SHA-512:	6414E0308E4A1C12091E2D708F1695AD95FD874CC2FB5376A3609C1B34417008D7F12C38E655247661774360458D7E3B19B974016F5594FC41E08055B5F9499F
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D...........................................0............................!1.A."#Qr$q23BRa...................................7.........................!1.AQaq...."2R..B.....Cbr...............?...(.DJ"Q...D.%.(.DJ".}S.=:....R/s..4..D. .=.kn1+[c....."}7[.<...h}.....A......h...S...[.c.,..%.`.N#,....^4.....Y..c...q.8..K.[>......,..../."Q...D.].3sK4...6.1.Y.;d.E.]"a.Gm.eK..+.....VX.>........ ..A.o........4.{\|.....V......x2.7...D/.N.__..f...i....9!..h...E.O..f'g.....L..@=N..aO.,r..1wX5....v..<..y..../...3.b...i!h...r.'iQ.w....{.d.`.../.NZ7 ..>q.8...x.F..vk..O.#)'..OE.._0..n......BIs....2N..A~...Fm./...1.5.cr;..m....>...1.......1....n9.....M.n.$.TY...Z7.....A..&=.hsL.4=.3V..5.J.-sI.....=..W..J"Q...W.....I.=4a.e.e....I%V..j1k.mgV.w....=...o.:..%..GV.....B......u.X.D$..a.E.+...C)...r..\7..C...r.O......]#..

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13054), with no line terminators
Category:	downloaded
Size (bytes):	13054
Entropy (8bit):	5.177767631277299
Encrypted:	false
SSDEEP:	384:I/Igki2JjSTXMpzZJ3eY+3kY+H6cqv8s+pfYm03pYToAAA:I/IgNwjSTXMpeY+3kY0dqv8s+pfYm03M
MD5:	917602D642F84A211838F0C1757C4DC1
SHA1:	392DF3FB4B0EC96CE4EBB5616E6B2A5C55A54BF8
SHA-256:	D702E5ED1E573918D912775AC1E88987FC177AA51EFE1253A08F71AB54F96516
SHA-512:	92AFC44A2405434F119E8E57732E232CDFADBDBA1948D3E89EAB596282119D14CF9707F36037B22C9DD6F3104AADECC28B9301D044842D60DD43CEA98DDBC929
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3
Preview:	(()=>{"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},a=(e,a)=>{const n=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["validating","validating"],["payment_required","payment-required"]]);n.has(a)&&(a=n.get(a)),Array.from(n.values()).includes(a)\|\|(a=`custom-${a=(a=a.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const r=e.getAttribute("data-status");if(e.wpcf7.status=a,e.setAttribute("data-status",a),e.classList.add(a),r&&r!==a){e.classList.remove(r);const a={contactFormId:e.wpcf7.id,pluginVersion:e.wpcf7.pluginVersion,contactFormLocale:e.wpcf7.locale,unitTag:e.wpcf7.unitTag,containerPostId:e.wpcf7.containerPost,status:e.wpcf7.status,prevStatus:r};t(e,"st

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39932)
Category:	downloaded
Size (bytes):	39972
Entropy (8bit):	5.277326341489423
Encrypted:	false
SSDEEP:	768:NRPzjLRkRevx1QEa/A3JSJGfVebVqJj/QlKEAzBc5GETSebsvTilI8UHTSX5aodz:NRP/LRkRQx1QEa3GfV9JREAzBc53TSex
MD5:	E89CB5DD5E3B9E2ABE2170CC33B94F3F
SHA1:	C2B27AAE073C0C6BEAB34F829B3B2615A2B0D56B
SHA-256:	EBD07E134EAA69FF679725DA56A465FACAFC8A09C61EF8BF42CEEAD8F79F6562
SHA-512:	9B54125C5B6405ED77D6718D03940F9CE52E5F2B0328758D2A7422A1AE18FEC679BDF000AA5D55DA83D23D9092305FB1773402D20720BA1375311C7ED1AB173D
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0
Preview:	/! elementor - v3.21.0 - 15-04-2024 /."use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[819],{9220:(e,t,n)=>{var o=n(3203);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=o(n(8135));class _default extends elementorModules.ViewModule{constructor(){super(...arguments),this.documents={},this.initDocumentClasses(),this.attachDocumentsClasses()}getDefaultSettings(){return{selectors:{document:".elementor"}}}getDefaultElements(){const e=this.getSettings("selectors");return{$documents:jQuery(e.document)}}initDocumentClasses(){this.documentClasses={base:i.default},elementorFrontend.hooks.doAction("elementor/frontend/documents-manager/init-classes",this)}addDocumentClass(e,t){this.documentClasses[e]=t}attachDocumentsClasses(){this.elements.$documents.each(((e,t)=>this.attachDocumentClass(jQuery(t))))}attachDocumentClass(e){const t=e.data(),n=t.elementorId,o=t.elementorType,i=this.documentClasses[o]\|\|this.documentClasses.base;this.documents[

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	2058
Entropy (8bit):	5.386010312154138
Encrypted:	false
SSDEEP:	48:s+GoZalxsAPSCEb1tTNVHlfj2yShvyun/:jGo1AaCEbjRVHw9JZ/
MD5:	361325C86C17EBC03FF0F4D88D267A83
SHA1:	CDAAEA7BEEA1FA3940CD5586A99515E442724029
SHA-256:	63DD9340BF7F1AC6A576E8A0D2467F9270158FF446DE0158DF6A3A57CB08F4DF
SHA-512:	EC86562BD6E82E446DC74121986A5399C8DCA6F2EF25F378D5AE5647C3E42012D1F465756766E7F7CB740711454434F428DBEB51A1A1DC0C6A0237D5F4078EA8
Malicious:	false
Reputation:	low
URL:	https://d335luupugsy2.cloudfront.net/js/lead-tracking/stable/lead-tracking.min.js
Preview:	/! Resultados Digitais 2020-08-17 /.var LeadTracking=function(){"use strict";var a,b,c,d="https://pageview-notify.rdstation.com.br/send",e=function(b){a=b,f()},f=function(){g()?h():window.addEventListener("load",h)},g=function(){return"complete"===document.readyState},h=function(){b\|\|(b=!0,s(a))},i=function(){return location.hostname+location.pathname},j=function(){if(m("rdtrk"))return JSON.parse(m("rdtrk")).id},k=function(){var a=0,b=document.domain,c=b.split("."),d="_gd"+(new Date).getTime();if("localhost"==b)return"";for(;a<c.length-1&&-1==document.cookie.indexOf(d+"="+d);)b=c.slice(-1-++a).join("."),document.cookie=d+"="+d+";domain="+b+";";return document.cookie=d+"=;expires=Thu, 01 Jan 1970 00:00:01 GMT;domain="+b+";",b},l=function(a,b,c,d,e){var f=new Date;f.setFullYear(f.getFullYear()+c),b=JSON.stringify(b);var g=encodeURIComponent(b)+"; expires="+f.toUTCString()+"; domain="+e+"; path="+d+"; SameSite=Lax";document.cookie=a+"="+g},m=function(a){var b=new RegExp("(?:^\|\\s)"+a+"=

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1027983844?random=1713468635861&cv=11&fst=1713468635861&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14617), with no line terminators
Category:	downloaded
Size (bytes):	14617
Entropy (8bit):	4.623185988721201
Encrypted:	false
SSDEEP:	384:N5cuW9s3/Z4gFKkifUFwfe28UOgCt/mr0n7HKrMny5R8jzgNSktNeh5Rsdal03bp:N5cuW9s3/Z4gFKkifUFwfe28UpCt/mr1
MD5:	EB74F34A32E2560D38941259ED3DF027
SHA1:	F87B6674ACCA94F507448E0A83A85744DACF4BCB
SHA-256:	C83A4040C3C177C1992ECB124B0A4286E7EFCF74552BB2417B54AD29F4FC917A
SHA-512:	5F4EA2182C582FA3FD7C4DD665863C90ED3CB7A0DE8187B7D8F075ED489908C575C870049BD71D103E1531D4DF2116DF5240DFBA153820B3318A77E6A3178DFF
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/post-3897.css?ver=1712669208
Preview:	.elementor-3897 .elementor-element.elementor-element-7c8305fd:not(.elementor-motion-effects-element-type-background), .elementor-3897 .elementor-element.elementor-element-7c8305fd > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:var( --e-global-color-primary );}.elementor-3897 .elementor-element.elementor-element-7c8305fd{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;padding:60px 0px 60px 0px;}.elementor-3897 .elementor-element.elementor-element-7c8305fd > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-3897 .elementor-element.elementor-element-51882ba9 .elementor-heading-title{color:#FFFFFF;}.elementor-3897 .elementor-element.elementor-element-51882ba9{color:#FFFFFF;}.elementor-3897 .elementor-element.elementor-element-51882ba9 a{color:#FFFFFF;}.elementor-3897 .elementor-element.elementor-element-51882ba9 a:hover{color:#FFFFFF;}.elementor-3897 .elementor-elemen

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4609793&time=1713468654407&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	491967
Entropy (8bit):	5.460734501451703
Encrypted:	false
SSDEEP:	6144:tdR1CtGJGGL0BbxAo18lVVRAcbu96DhVl:tdVGGxVVRUwDzl
MD5:	480AC1AE63BA903513C3BCCD4E12203E
SHA1:	D7F1FBA708A7A6D7A182C31EC0674BC225DEB5D7
SHA-256:	424B14EA26FF7BA339A9CD1DDECB8FCA842FD79097FDF8DA0F24C6693A55929C
SHA-512:	76703C3D939A5D9D0B5ED2BCAE0F19CA912FAFE1D5E036C2DFAB64D170250D5CDF3767FA6075A957CDD08EBE54F6461EE53D8F501A927D34A642CA20A28698FF
Malicious:	false
Reputation:	low
URL:	https://cdn.leadster.com.br/neurolead/neurolead.min.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=21)}([function(t,e,n){"use strict";n.d(e,"a",(function(){return v})),n.d(e,"b",(function(){re

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2952
Entropy (8bit):	4.4210567864322705
Encrypted:	false
SSDEEP:	48:c+gU8ZzudIFEINMIuXe9TIx5DI9m9yurZJCqL8H5VVQvFv2laZzRDSEXBRO8QL:7gTuoSu9Ta89m9yQ1YHr6oaZBlLQL
MD5:	EE9559C7A774E1EA67C41C340D1C9399
SHA1:	70D8DC8DE9EB5468776FBA2AAA649BF5D05E3AE7
SHA-256:	07C65A053FFFCE351C50F2EA85774DFD0BFAF39C1F6D4049305AE39FCAE980E9
SHA-512:	CCDCAFA9CC675D8C23052EE5226487E10F5B3E3C96D98D710AD7D4D8478DBAE6E49F7BDFC7C9B9B52CBA680D9AD0B66BB837AF8ED89195F506936AEC39ACAFCC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 124 124" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="m81.85 23.127 1.609.928c2.244 1.296 4.225-2.181 1.998-3.465l-1.609-.928a2 2 0 0 0-1.998 3.465z" fill="#e9511d" data-original="#000000" opacity="1"/>. <path d="M109.625 79.167V45.065c4.211-.919 7.375-4.669 7.375-9.148 0-5.166-4.206-9.368-9.375-9.368a9.344 9.344 0 0 0-6.792 2.929l-10.556-5.954a2 2 0 0 0-1.965 3.485l10.445 5.892a9.357 9.357 0 0 0-.046 5.91l-29.484 17.23c-1.721-2.08-4.322-3.407-7.227-3.407s-5.506 1.327-7.227 3.407l-29.484-17.23a9.36 9.36 0 0 0-.052-5.927l29.866-17.227a9.345 9.345 0 0 0 6.931 3.082c2.738 0 5.197-1.186 6.913-3.062l8.168 4.567c2.263 1.258 4.197-2.237 1.952-3.492l-8.105-4.532a9.33 9.33 0 0 0 .447-2.85c0-5.168-4.206-9.37-9.375-9.37-5.17 0-9

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1027983844?random=1713468622572&cv=11&fst=1713468622572&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:24:52], progressive, precision 8, 800x600, components 3
Category:	downloaded
Size (bytes):	301108
Entropy (8bit):	7.968528102603389
Encrypted:	false
SSDEEP:	6144:76pjNNbGwFLEwolt0HcclQKP5oCyIwrFrBGuxVf7hVUrz:uphBGwVGlSkKPJzwrtBXxV9VGz
MD5:	D3CC6CE5AC586C2C2AEFE0A3DBAAB09C
SHA1:	C32D9988DD85A6653DFDE53364E5F7E8D08DDCAC
SHA-256:	1EF0B5125BE60D4349045CEE19070AE23A93407EB9D579DF2FF28DB5E264839D
SHA-512:	F3E79B39D1F5F3A4CDCE77D7F1C8E81F005539BB200899732873C6AF8C03C8E8A52DAC69A1AC0EF72339FC5BEC94ECB72D10703ED75847A658DBE4DCEDCDB84F
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2021/10/zen3.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:24:52............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....a....*..R.aV..m...X..-Kk..\|B...=;-../.\|.....}G....K`..<.VN.=.UX..m.sYa..\|.."A...:..R..^.~;.6A.x.....K.. .[6.....j..AR.{.6...i.."...\..p.+...X8.ve...%

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (1438), with CRLF line terminators
Category:	downloaded
Size (bytes):	8338
Entropy (8bit):	5.2104269179994676
Encrypted:	false
SSDEEP:	192:aS4YN1Rai+JKekKfskc7Y8ekKfskc7U9JWnvK/fJFI:Bexf7cexf7RsvKHLI
MD5:	15EC68B91C996154BE88E3D72427EE43
SHA1:	06EF2280078C91FE51434A36B1080B7F85F5D8AC
SHA-256:	92676A6CEE8E2CBE76AB8560E8E6050912D11950C03192FAF92359FDD7593952
SHA-512:	DC10B6E18DE827E16644B695D62CF97647EB75516F3E10D3154F84552BE9B3A3DEEB302915C37D645DEA14C3E5929F90258C4097C9D9865B7108DE714A6EEE7E
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/Content/Js/UpdateBrowserNotify.js
Preview:	.var BrowserDetect = {.. init: function () {.. this.browser = this.searchString(this.dataBrowser) \|\| "An unknown browser";.. this.version = this.searchVersion(navigator.userAgent) \|\| this.searchVersion(navigator.appVersion) \|\| "an unknown version";.. this.OS = this.searchString(this.dataOS) \|\| "an unknown OS";.. },.. searchString: function (data) {.. for (var i = 0; i < data.length; i++) {.. var dataString = data[i].string;.. var dataProp = data[i].prop;.. this.versionSearchString = data[i].versionSearch \|\| data[i].identity;.. if (dataString) {.. if (dataString.indexOf(data[i].subString) != -1).. return data[i].identity;.. } else if (dataProp).. return data[i].identity;.. }.. },.. searchVersion: function (dataString) {.. var index = dataString.indexOf(this.versionSearchString);.. if (index == -1).. return;.. return parseFloat(dataString.substring(index + this.versionSearchString.length + 1));.. },.. d

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (384), with CRLF line terminators
Category:	downloaded
Size (bytes):	8005
Entropy (8bit):	4.600776578775398
Encrypted:	false
SSDEEP:	96:Lf1CYsc6UNCMPH7pTHVc3DCKCiO6wyueBXDhWoSySXLSjSMST9K1X:j1C+4+H7x7iO63fcvmuFU
MD5:	1DF3C849BA39AFDE7C29D2B00596A65C
SHA1:	B68C59DA8F2F3ADB72B20935D4DAFDE6DA0F17FF
SHA-256:	AA69CF5DAF3C81E0F9DA0E1C8B6015B6DFF9C897B31DC50788AEE8631E820275
SHA-512:	611A5054BDB324CB58137F0456C7485DEB27C576F9DF2E47A73D868AC4CEA7C97F8138A8380AC8F48C11218891EB60D99F315A0207F9E65C12F808067BC26D03
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/scripts.js?ver=20180910
Preview:	(function( $ ) {.. "use strict";.... /* rtl check /.. function rtl_isotop(){.. if ($('body').hasClass("rtl")) {.. return false;.. } else {.. return true;.. }};.... function rtl_slick(){.. if ($('body').hasClass("rtl")) {.. return true;.. } else {.. return false;.. }};.... / --------------------------------------------------.. * preloader.. * --------------------------------------------------*/.. if ( $('#royal_preloader').length ) {.. var $selector = $('#royal_preloader'),.. $width = $selector.data('width'),.. $height = $selector.data('height'),.. $color = $selector.data('color'),.. $bgcolor = $selector.data('bgcolor'),.. $logourl = $selector.data('url');.. .. Royal_Preloader.config({.. mode : 'logo',.. logo : $logourl,.. logo_size : [$wi

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11896, version 1.0
Category:	downloaded
Size (bytes):	11896
Entropy (8bit):	7.981532104749844
Encrypted:	false
SSDEEP:	192:RdtTiomBUzh0smRsmu5YANAvBLqekBo6GUzA9lilEQDkZhyf/+BTDWKCZsZUNKF:5DcU90fRe5YANAvBLqeooBUc9EZkZhyw
MD5:	ABE00F683E10E6978387F5CEDE633CAF
SHA1:	1C4BB3AE0A74206F359B5A27DC37814D3317F440
SHA-256:	ED0B55C2609CC4A6039C6FA571235F134EF2230E356491C488278C135FBC0DD6
SHA-512:	858002741102CC103E1C0EDB9723BBEA0DB869EB0219043526946EA75FC7E8DDD129529BF101457CEFB8A9CC29A05FD1DACA1EBDBE66832DD89C530D7475A257
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/fonts/Flaticon.woff2
Preview:	wOF2.......x......Z.............................?FFTM..`..J.......d........6.$.... ..?.....JEF......XQ.lR7...@.......aCE... ..Qdb.....-\.C.z-p......7..u...gJ.+.EX..Sw..fw.W...U..........$wx^7..M.8.&..s.BHd......T 7l.B......F...H\.5t.&t.V.-.Z'v,'.v~..C.&.-k.5;...?1g..H0.Tv 5G.....ruqYKy.P.....R\..4..^..>B.3...8...Mz.I.M.9.l.GJ...g.z.....c..1..Lh.R-r(.D..l...M......_..B.........7.=;p.ae?..F.......9..I.A;...:K...}...(..w.%.............l.C..v.68f..q.P4.V....M....}...<.. ."M.....s...d.B.R.\......2...X..+].n...~...`....(-.....w......jN`...Q.}.b[...8..}....^..#..........[..~.".b.I.S.J..=..=6.`0}6..IU..g...........2^R......t...I....L,Z..\|...X5g......a..(u]..q....\|.!......-.G..P.....r>..V.,i X j.w..^..w.2.J.(..Zd..~...f...,.MhkC..b..K%..jYK'....v...k..1.=v..E....XO:U....Xt..e.I..../.p!N.B........<..-..^L...}...c..........s...i...t...z.uJ.{.W.hS[......s.7.fso#%i=../[.$1.9..8@y:#..Zo.0.....-.9.U3d$.xV...`.u.g...sY.x!.. m..8..N.4..%./B..gV.........m....o

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51437)
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.6914132784066815
Encrypted:	false
SSDEEP:	1536:jL1vJUPIxubKUfOBbxT2+kfVcaXryjm3ifN4i:ZO5bKUfOfK+kSa2jNr
MD5:	895054D4AF36A84FCE27EB97927CA036
SHA1:	639981DFD85846B185237E62B3892EA473B79E26
SHA-256:	ACD3A22015A7FC3412FE11C416D1EDBFDEDE063B0B2DFDC2711807434260CB42
SHA-512:	4CA4C9FAD90A6FFA57BB872593753BD7BFF70BFC24B3624720B737956047A0CA2C3851E2C8B5DCF9C96E4557AE4655738B33B1FCFB8507C7F36A24445EAA24ED
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function b(I){return I}var H=function(I,r,W,D,F,x,Q,m,w,a,u,J){for(a=(u=39,86);;)try{if(60==u)break;else{if(u==I)return a=86,m;if(u==W)R.console[x](J.message),u=I;else if(58==u)a=86,u=41;else if(u==r)u=w&&w.createPolicy?D:44;else if(u==D)a=D,m=w.createPolicy(Q,{createHTML:e,createScript:e,createScriptURL:e}),u=I;else if(41==u)u=R.console?W:I;else if(39==u)w=R.trustedTypes,m=F,u=r;else if(44==u)return m}}catch(S){if(86==a)throw S;a==D&&(J=S,u=58)}},e=function(I){return b.call(this,I)},R=this\|\|self;(0,eval)(function(I,r){return(r=H(43,68,74,20,null,"error","ad"))&&1===I.eval(r.createScript("1"))?function(W){return r.createScript(W)}:function(W){return""+W}}(R)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applicati

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
Preview:	{"popups":[]}

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3863), with no line terminators
Category:	downloaded
Size (bytes):	3863
Entropy (8bit):	5.181157225604236
Encrypted:	false
SSDEEP:	96:HeBYTjSApfKYJVDR72Kdvmea54yyvneaUa:tZpfzPRrK4pv/
MD5:	C6EA8D8E630F57D377818DA4C8BD1B8C
SHA1:	307B911DCECD6673924FE3E12073E6E7DFDEF044
SHA-256:	72E41BBF371099A0CA16DFC2046FFD1D988365D977DCEAFC854C20BDB3F52851
SHA-512:	1B03654506274452E81C4004571700C9E8682D6CDF9878CA4FF8738CBC77831E44215D78E79716CFCF54B945FE4EFA042E190DF6225B4E8F5D9F7D8DFCDE4C36
Malicious:	false
Reputation:	low
URL:	https://d335luupugsy2.cloudfront.net/js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js
Preview:	"use strict";var RDStation=function(){var t={windowLoaded:!1};return window.addEventListener("load",function(){t.windowLoaded=!0}),t}(),RDCookieControl=function(){var t={analytics:{eventName:"rd_cookie_consent_allow_analytics",track:!0},functional:{eventName:"rd_cookie_consent_allow_functional",track:!0},configuration:null};return document.addEventListener(t.analytics.eventName,function(){t.analytics.track=!0}),document.addEventListener(t.functional.eventName,function(){t.functional.track=!0}),t}();!function(){var t=function(){var t=document.createElement("iframe");t.onload=function(){RDStation.windowLoaded=!0,e()},t.setAttribute("style","width: 1px; height: 1px; position: absolute; top: -100px;"),t.setAttribute("id","rd_tmgr"),document.body.appendChild(t)},u=function(){!window.opener\|\|-1==window.name.indexOf("TAGMANAGER_VERIFY")&&-1==window.location.href.indexOf("tagmanager_verify")\|\|window.opener.postMessage(JSON.stringify({task:"checkTagManager",tagManagerChecked:!0}),"https://app.r

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356), with no line terminators
Category:	downloaded
Size (bytes):	2356
Entropy (8bit):	5.847698299783539
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08iA7RCQVm7B1KFH6:wsbSUtJfxrqLWWWdV6j12AcF
MD5:	4991522E8BD1B259FC23FA21B68C16D1
SHA1:	071C8A90FE458794613E63188004926F7E91EE13
SHA-256:	B857792BF2E228A849230E6F00E45A45049490A76A1E73AF42A0190D6FF82A8A
SHA-512:	1712B8C6FAA752BF0B60A581F7DAC0D70255963A792E796B7D304428C1FB4CEEB6005C38A9334121D721661F14F7F5829AD0B6C5F0559B0164BC99A632A1EBCA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1027983844/?random=1713468635861&cv=11&fst=1713468635861&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	982
Entropy (8bit):	7.746327909444835
Encrypted:	false
SSDEEP:	24:2ekaxhwhmuXE9+IpqoQ29WkIdfNn59BYNyUbEl:2ek4mL0V0xkmNn59Ygl
MD5:	DAAD67EC30FC25F7E5C6A8450D2F78AF
SHA1:	A937DD97C492AD2A4043DCA77A135D1B7C6326AA
SHA-256:	734916DCE359FAAFE1AD05697108DFBEA373EEB4EF344251AC3529F7A57BFD97
SHA-512:	7BEBA03E7F5ECC1112B04E2EB77D315EA9EAD6657DE715D4DF8CFBAE4BE0AA3F52E2DFEBE7DE17D2FD88217207F7D7801B06E997DC81B7FBF34EBBE661804E97
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/cropped-favicon_questor-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........+......IDATX..MlTU....u:ViH.....Pj...Rc.4."..@gt%..4FW..+C......#..1..Z0..(..F.....!v.f.. .C;..;.:..7w>.b..$os....{..{....h.Z. p+A}.A.....U..z...'.L... 4..N............"..pT.=./...x.......v.-yK`..6..l...c.. ...,.k.n&..s..._(l..c..h)CTY>a?j...{\|.....@W..;.......GW......K.G...K.}@.A..kI.......V\|..Wu0..~.x..+)o>.?...q...m...."#....<.I9......E.7h.x....'.Z/C.n.,a...,..S.`Q.c..P....;CI.nq.H.9.C.W805l.L1....h'........V..H+.$<....>.Oaw.X.v...U>....6...7h..)..;........v.@..~..%.....G..P.er...k......T).>..........2Y]..N..\|..A.U...?5.x`_6...hb+..^...N9.)....<......^...\|.....tv).R.8.N.......rw.g<.....=....]...6.q{...3U.S....5#.q....~...<..(\|...R@..x..)$.I.@E.......%M......I>a.,......\ec$...........I..lI7..e.6.P..,.1...Ba.X&.'v.oW...fg..u.W8.\|...M.w...1....5.../t4<...~7}e..l.....d.0..m..=...k..CPq.............m..;.-s.j..\p..JC.e..K..L.kT..N9_.rZ....v...S..}...E.o.?.?..!.l......IEND.B`.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66172
Entropy (8bit):	5.328550652849919
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyQ:RIT7OX4s9eZYtj8ltQ
MD5:	A0A4C65654B0157864E636BDE5977C9B
SHA1:	AA8BA19DBA5C7BF3FE4A998FB9B1C582BB1BBA4A
SHA-256:	486421BB995D28F89F1894755A4648643FFE5F361A8FA0C1F84C092BBF19BE21
SHA-512:	60AEF69E781E3CAF0AEAB7E09C32379EB3CBBF2A7D4DAD9A029541C6A660824B3AEF37D00A4B23C81E4449E8217B6BAFA01D4DF35E9D5E3DC1EFFF73F08E92D6
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/134545240619778?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
Preview:	{"popups":[]}

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1027983844?random=1713468654473&cv=11&fst=1713468654473&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4358)
Category:	downloaded
Size (bytes):	5520
Entropy (8bit):	5.07877659735423
Encrypted:	false
SSDEEP:	96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC
MD5:	6823120876C9AFC8929418C9A6F8E343
SHA1:	90B0ADB37D70FFEC5F9189C36BB0027C310C9502
SHA-256:	B65B3DE1BC923B9355248A0D941A0EAEE15DFB9A6B8EADB51323A8DF6189DCD1
SHA-512:	63D84226815C831245754ADB30040EE72DCF218D01F991A5619675374BBE3B706E3721D32F5120D9D27E500813E8214244992B3875B3A7E7E4BC7DED5201183A
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Preview:	/! This file is auto-generated /./!. imagesLoaded PACKAGED v5.0.0. * JavaScript is all like "You images are done yet or what?". * MIT License. */.!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=typeof window?window:this,(function(){function t(){}let e=t.prototype;return e.on=function(t,e){if(!t\|\|!e)return this;let i=this._events=this._events\|\|{},s=i[t]=i[t]\|\|[];return s.includes(e)\|\|s.push(e),this},e.once=function(t,e){if(!t\|\|!e)return this;this.on(t,e);let i=this._onceEvents=this._onceEvents\|\|{};return(i[t]=i[t]\|\|{})[e]=!0,this},e.off=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;let s=i.indexOf(e);return-1!=s&&i.splice(s,1),this},e.emitEvent=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;i=i.slice(0),e=e\|\|[];let s=this._onceEvents&&this._onceEvents[t];for(let n of i){s&&s[n]&&(this.off(t,n),delete s[n]),n.apply(this,e)}return this},e.allOff=function(){return d

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14808, version 1.0
Category:	downloaded
Size (bytes):	14808
Entropy (8bit):	7.97197904567176
Encrypted:	false
SSDEEP:	384:JyKwnWiAC7vqkJOKomt8yzGQLEDzPXjE/aPqXBdkGDhUKC:JyZWKL91t8kEbE/Ym+GFUKC
MD5:	F6EAFB483166DA96C77E2B0613C8F3A7
SHA1:	466CBC4E0651792E5C08FFB86296ACACA971C4BE
SHA-256:	8D8018EF4BCB567A16FC02BA9E38B67DB217953DD5A8F317E6F101F873DFAD74
SHA-512:	861268EC3E3A9D98500D9B06A45AAB0F9DC632B203B67F52930DB337066813F163F8D4D3F801D239414D2F4ACF18A8FE90016DEF0B19D2ADB204BBF60A3D7072
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/gothica1/v13/CSR94z5ZnPydRjlCCwlKa8cv.woff2
Preview:	wOF2......9...........9x.........................:..n.@.`..l.0..f.....8.....T..6.$..$. ..6.......a.):.O..X.....:.....I...Y..t.H...........T..6.!...D...5...Y.rr.FM...K.Y.:...v...t...........Vt.......MF..[.1.$.....97$!....L[.8..L.c..@.@..../$V@....t..X...9.~.Y!..... ....VB.J?.."./...6Q.S.?..%(..(......Y.W.?.vwR=...6.'9y-\|.~6....&...~..m3tl.3.......w.u.U& `.b"Vl.J.._...7.Q....=?z_..NmF2tg."..;J......\.L......5....$p.dCH.Q...(.E..fR..be..x>L..#../..f.._....O....Xx..Te35mF....$mR}...Z....m.4....f!.$........6....-!....3...\|8...ep.=......&Y:..'..m....E...)..e...q...2..0l4.Oi[.o_.{..>..;......D.B.a....n.NP.v.B.h.......R.pT^...,C@7}\|.qR(...a\|.Z.l......%.Q4%.......T....TW.J.t.v....fR.j.%.._...d..bkZ.v..i..N)...wi.x.wRjE...(A....`..5.....h..iJ.V.k. ......j...r....\|..vF.P...CJ..../....7...%.l.."..K....y^E.mM..%...SJ.0............*..X~Au.........S.0F...o7.C<..A...........V.nm.QPB3.... .....1...1X'f.s......b.y....!.I_.)'..hP..<....Z[%...\U.b.wV

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	4.332124638832412
Encrypted:	false
SSDEEP:	12:D+3or1Y9Rx6XRxsRxBv1Yh1RYq1YPv1Yh1RYq1YoW1Yh1RYq1YL:D4or14P6XPsPBdYRVqdYRVn6YRVs
MD5:	FBB010333C2B840FDDDE234E31344710
SHA1:	5333A2898CFF0F6D46C0FE35F676CD3F01114EE3
SHA-256:	A8F0CDBA9AF9734E31AA748A0953C3FD806D5EA2AA37D9BFEBE494CD7F707AE6
SHA-512:	CCBA8E4A1AEB3A39915110553512742946F696B2370105B853CAC2AE0407F1C08906B674070F7F3EA6407B842D3CB328E99477B63C167A47647A8C3517F677C4
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/animated-typing-effect/assets/css/cursor.css?ver=6.5.2
Preview:	.typed-cursor {. opacity: 1;. -webkit-animation: blink 0.7s infinite;. -moz-animation: blink 0.7s infinite;. animation: blink 0.7s infinite;.}..@-moz-keyframes blink {. 0% {. opacity: 1;. }. 50% {. opacity: 0;. }. 100% {. opacity: 1;. }.}.@-webkit-keyframes blink {. 0% {. opacity: 1;. }. 50% {. opacity: 0;. }. 100% {. opacity: 1;. }.}.@keyframes blink {. 0% {. opacity: 1;. }. 50% {. opacity: 0;. }. 100% {. opacity: 1;. }.}.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24021)
Category:	downloaded
Size (bytes):	24109
Entropy (8bit):	5.254879761454111
Encrypted:	false
SSDEEP:	384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym
MD5:	9E7C898D1649315173DB5D2D8730FB75
SHA1:	364A6836A90B28329404B7D7F58A524861EF63F5
SHA-256:	F9B60AE2F2938C589960EF00D9B9A644F0847F7183F597CDC3FBF8CFE904C552
SHA-512:	4ED0541755C25DD9AFBF9DA3B64AC082A2F7119720E4B8A21FBC7CB302278AA2D2E15D0E3F735F14A9913A38508C85C45B3DF22922609ADFE551541396881601
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1
Preview:	/! SmartMenus jQuery Plugin - v1.2.1 - November 3, 2022. http://www.smartmenus.org/. * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&"object"==typeof module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){function b(b){var i=".smartmenus_mouse";if(h\|\|b)h&&b&&(a(document).off(i),h=!1);else{var j=!0,k=null,l={mousemove:function(b){var c={x:b.pageX,y:b.pageY,timeStamp:(new Date).getTime()};if(k){var d=Math.abs(k.x-c.x),g=Math.abs(k.y-c.y);if((d>0\|\|g>0)&&d<=4&&g<=4&&c.timeStamp-k.timeStamp<=300&&(f=!0,j)){var h=a(b.target).closest("a");h.is("a")&&a.each(e,function(){if(a.contains(this.$root[0],h[0]))return this.itemEnter({currentTarget:h[0]}),!1}),j=!1}}k=c}};l[g?"touchstart":"pointerover pointermove pointerout MSPointerOver MSPointerMove MSPointerOut"]=function(a){c(a.originalEvent)&&(f=!1)},a(document).on(d(l,i)),h=!0}}function c(a){return!/

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3840), with no line terminators
Category:	downloaded
Size (bytes):	3840
Entropy (8bit):	5.006081738542248
Encrypted:	false
SSDEEP:	48:tumBSpqZPBo2yx54kFCgkzvUPWxfpfYk/ukVTjBnBeU9BkMX4thA0bLiuzfaHyMm:gZEggcWAouEE9vEFiRR6brYLbP
MD5:	A3E2CB5205A123D1563D6BD408C0568B
SHA1:	D14020AAA61C317C3BA3BF2555995000A62927BB
SHA-256:	BC8AE3E3C1E7BBDA77FAF362F0739E76F1F06D2B5D7EC56F09CCAF0ADF40D5B1
SHA-512:	25724FDD623A75D4A208A83F06B22E024B23935EE9A31E4E359E71A1BF2FB12F36EC0EA4121F27BC80CC1100FD5D59BAD8155EFE0193A6CCD33D4C5A211BECF5
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/bundles/modal-bootstrap?v=rHzxfH54gahafGK9DFP6lEs3QUY6B_as_gyYDJX3Io41
Preview:	+function(n){"use strict";var t=function(t,i){this.options=i;this.$element=n(t);this.$backdrop=this.isShown=null;this.options.remote&&this.$element.load(this.options.remote)},i;t.DEFAULTS={backdrop:!0,keyboard:!0,show:!0};t.prototype.toggle=function(n){return this[this.isShown?"hide":"show"](n)};t.prototype.show=function(t){var i=this,r=n.Event("show.bs.modal",{relatedTarget:t});if(this.$element.trigger(r),!this.isShown&&!r.isDefaultPrevented()){this.isShown=!0;this.escape();this.$element.on("click.dismiss.modal",'[data-dismiss="modal"]',n.proxy(this.hide,this));this.backdrop(function(){var u=n.support.transition&&i.$element.hasClass("fade"),r;i.$element.parent().length\|\|i.$element.appendTo(document.body);i.$element.show();u&&i.$element[0].offsetWidth;i.$element.addClass("in").attr("aria-hidden",!1);i.enforceFocus();r=n.Event("shown.bs.modal",{relatedTarget:t});u?i.$element.find(".modal-dialog").one(n.support.transition.end,function(){i.$element.focus().trigger(r)}).emulateTransitionEn

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	381443
Entropy (8bit):	5.18697771120859
Encrypted:	false
SSDEEP:	1536:Ioi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDCAY6+:Ioi8ZiSgKBjSoyJuf8tcTgo3N
MD5:	EFF7AFAC8F7AC0ED881F37FFD3EEBCBE
SHA1:	21ACF841F4603DBFAED62DECEF15175B5D68F20F
SHA-256:	FF1235E0E6C896931D1F31F618B35E68A469BEFD8C90D7A0DA22F1D988B0BBC2
SHA-512:	24E363D03E898E7347877DC159EBFB1D446C481D0BAEAFF5049BC401A424DC2B0C602ADEE28CF10C142838C334C7109EAAD879BD793366B3DADCEEC5EA86376A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2546025
Entropy (8bit):	5.660474814936524
Encrypted:	false
SSDEEP:	24576:dTu2yKLtnVCBa26V/ZcLbFLGQFChwSyyta0yzZZs2FPkIpfu7LDY:c2yuVCBGxHyyta0AdFPkp7g
MD5:	49D004306911152B2D9C8470C6855607
SHA1:	D2DB3B6DAF04831C2E719337FEE2992D4F11917E
SHA-256:	32B27F09F362CE9B7B218F547FF7FB3109DA60A9C57217C757E17CC98108D848
SHA-512:	72D5ED93D71E0A389938604B22C5E495BE64D13A2B0FFDF4680662AC85EBE4A46E40D284D43236376A26B23A1B4765B990D4E45E81EFC440BBFA5CD20AFBEF85
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9548)
Category:	downloaded
Size (bytes):	9597
Entropy (8bit):	4.669706785796817
Encrypted:	false
SSDEEP:	192:J0uZYVuWu92OaxxQ5UyGtinzugurADDxQQxQn3u8uHn2RYD4u5u7u2uz0OyaOCy/:W/
MD5:	2E33AA2A1A174B01EBD6502BAE475E53
SHA1:	248F5CBC1FA417F8B9E7FB315569294E6E16026C
SHA-256:	182E44EC18249C16748170DAEC626C08A44E0EFE0EA3FC05B128549012463356
SHA-512:	57750C2E1819C414EFC5903591EDE4F39C84DCEE870771C79C46A78B072AA6B90D132FFE8DEE3F7DF4673E16C3FD839D20B5E304D41BB26C1D6303E061C511B0
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/post-2840.css?ver=1710847529
Preview:	.elementor-2840 .elementor-element.elementor-element-4bac70b5:not(.elementor-motion-effects-element-type-background), .elementor-2840 .elementor-element.elementor-element-4bac70b5 > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:#EC6825;}.elementor-2840 .elementor-element.elementor-element-4bac70b5{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;}.elementor-2840 .elementor-element.elementor-element-4bac70b5 > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-bc-flex-widget .elementor-2840 .elementor-element.elementor-element-690e5ff5.elementor-column .elementor-widget-wrap{align-items:center;}.elementor-2840 .elementor-element.elementor-element-690e5ff5.elementor-column.elementor-element[data-element_type="column"] > .elementor-widget-wrap.elementor-element-populated{align-content:center;align-items:center;}.elementor-2840 .elementor-element.elementor-element-690e5f

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:22:28], progressive, precision 8, 800x600, components 3
Category:	downloaded
Size (bytes):	338430
Entropy (8bit):	7.968858146153891
Encrypted:	false
SSDEEP:	6144:m8K8qTs+P484tqOmIjTQu/jV0yJOUt6xKJcD2tHXs4k1AD4cOeWXQq8WQYKIRsXt:m8K8CA8WtcSB0yJaxacDOH8iz2KIRs9
MD5:	9558121D8D95E589673002C88040F892
SHA1:	F3191C599F64C434D9D79FAB5F0D3D03191CBBF6
SHA-256:	7E2612F5588E5E6F9101D2C13349BCA86E8A131EF09B7118CEC612CA2643D343
SHA-512:	24C7F6054541D449A4B98B2B7F64958719968F208DDA7C04351B7937396B3F222C3A21222429A90C6A0D69FC075B35CEC2273B9021177652CE303A897FB1F933
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2021/10/zen1.jpg
Preview:	.....2Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:22:28............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..( .....?.......,....]].p#.d;..3Tsr..j.......6...6.R.y^...v.........E.8~...-V......?..._....#c.`. z5.\.n{on.....~.I.L...=&0~E.Z.^E!..I..q..v2...lu

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2289
Entropy (8bit):	4.233589411648575
Encrypted:	false
SSDEEP:	48:c+gU8SKXOiO/ZjMPU7ENSUe9ackxM31IAq6r55P75c1cy97B:7gaiEZAc7ExeIcUSnFcB
MD5:	FA365BD1B7F1F4954E01C7CD19564A05
SHA1:	2E27F3DDF26F65C715509EDBFE7245C2BA859617
SHA-256:	05BD81B1257478860D6FA2ADD62A0C94BCA79B0EF02C1DF1119D329112880D04
SHA-512:	8DB60662667F2EADD20E059D2539739DF5BD38C4D4CB22031247982647012A50A2E704950E8F4226AABA858A9447EFF99F45D33435FBAF431CF59DE3F1E34C6E
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/004-conectividade.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 72 72" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="M69 15.2c0-2.3-1.8-4.1-4.1-4.1-1.5 0-2.8.8-3.5 2L42.3 7.3v-.2c0-2.3-1.8-4.1-4.1-4.1-2 0-3.7 1.5-4 3.4L10.9 8.1C10.4 6.5 8.8 5.3 7 5.3c-2.2 0-4 1.8-4 4.1s1.8 4.1 4.1 4.1c.8 0 1.5-.2 2.1-.6l6.2 6.1c-1 1.7-.7 3.6.6 4.9L8.4 35.8c-.4-.1-.8-.2-1.3-.2-2.3 0-4.1 1.8-4.1 4.1s1.8 4.1 4.1 4.1c.7 0 1.3-.2 1.8-.5l16.9 19.3c-.5.7-.7 1.5-.7 2.3 0 2.3 1.8 4.1 4.1 4.1s4.1-1.8 4.1-4.1c0-1.4-.7-2.7-1.8-3.4l7.4-20.9 2.8 13.6c-1.4.7-2.3 2.1-2.3 3.7 0 2.3 1.8 4.1 4.1 4.1s4.1-1.8 4.1-4.1c0-.3 0-.6-.1-.9l9.7-4.8c.8.9 1.9 1.4 3.1 1.4 2.3 0 4.1-1.8 4.1-4.1 0-1.7-1.1-3.2-2.6-3.8l3.7-26.5c1.9-.2 3.5-1.9 3.5-4zM57.7 46.4 44.6 36.3c.5-1 .8-2.1.8-3.3 0-1.1-.3-2.1-.7-3.1l17.5-11.7c.3.3.7.6 1.2.7l-3.7

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1156)
Category:	downloaded
Size (bytes):	1310
Entropy (8bit):	5.25030793929785
Encrypted:	false
SSDEEP:	24:1dtP8nlSqL3o82BVnQB7SyM5dilLIde18LZsUaDxJW4GYEdKvZ/GOXVn:nOQqcxBVQB+5dcL0e1uZsU6xJW49dGY
MD5:	977F91AF4ABBE0C10C99E11FF8B50234
SHA1:	73AE3C785C548A85AC705F937D858568E07C04C3
SHA-256:	215FD4205BB1F595561F5E11311B16E5D3B517E776FB8976EAA68E0719B96CAF
SHA-512:	C28FB84B10512E788D52788A0806C774E8C5308F968862E42AD61C83E1B42DDEBE7CAB634F5C2D2BFA30C5A8049F6322FB9E8A7EB9F3D0A9B3F9BF48558DE182
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/jquery.countdown.min.js?ver=20180910
Preview:	// CountDown Clock.// Version : 1.0.1.// Developer : Ekrem KAYA.// Website : http://e-piksel.com.// GitHub : https://github.com/epiksel/countdown..!function(t){t.fn.countdown=function(e,n){function o(){var t=new Date(r.date),e=s(),o=t-e;if(0>o)return clearInterval(d),void(n&&"function"==typeof n&&n());var a=1e3,f=60a,u=60f,l=24*u,c=Math.floor(o/l),h=Math.floor(o%l/u),x=Math.floor(o%u/f),g=Math.floor(o%f/a),y=1===c?r.day:r.days,m=1===h?r.hour:r.hours,v=1===x?r.minute:r.minutes,D=1===g?r.second:r.seconds;c=String(c).length>=2?c:"0"+c,h=String(h).length>=2?h:"0"+h,x=String(x).length>=2?x:"0"+x,g=String(g).length>=2?g:"0"+g,i.find(".days").text(c),i.find(".hours").text(h),i.find(".minutes").text(x),i.find(".seconds").text(g),i.find(".days_text").text(y),i.find(".hours_text").text(m),i.find(".minutes_text").text(v),i.find(".seconds_text").text(D)}var r=t.extend({date:null,offset:null,day:"Day",days:"Days",hour:"Hour",hours:"Hours",minute:"Minute",minutes:"Minutes",second:"Second",s

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 255, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62241
Entropy (8bit):	7.898431905711469
Encrypted:	false
SSDEEP:	1536:kcKt9gzIMwgx/UFZWoSo4TFX+uV3RHipo9/L7fDqhN1:kER0iX+utZipG/Lqt
MD5:	30BD2ED0FB5398D2FD96C00481BB95C0
SHA1:	65A003964BD2F3AC9E017E85F7A361D4AF22665A
SHA-256:	9C4F671147A4620B8BDFD9636779BEDA2EE09C3A7C8822911BC852701F2BA4CC
SHA-512:	3114AE75C17E50FEF4D32A81C11676A6255F7B6B4DDCDAC47F05920F7258539DF9AFFA1DECFB95E0AB31F12C1E7F6A6B02CD4DBE43F4D8764C0543480EBD5CA4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o..\....pHYs..........+.... .IDATx..{.vYU..[................t.....C....0Hh...#^.FE..QCQ..$...b.7@%. ....AP...t.0=T.!]..8=d...y...w=k...>.<......s.^{...^.s..>....M.K.m...L(.7.:....+<.&..8..zk......\|......[...".w...P._#.......s.............0.....4...........R........E.........}a........#.a. ...&..Ii..g.\|Q..$.4.Q>%.-9r..S.G.....K.\|,.K...k...[l..Y..........J6j..R.{c{.a..]..vn..9.....e{..&gI.\.GCML..C....i....V>Z.hcG...hcG.?.........o......Q.W....).Kt.}.]....y<{...6.C.FyH.K._b;.G..z..............%z..I..:.]O%.J..,...S=r.....^k.g-...5.z.d.X/..x..1U#...<....%......_.WO..C..Tb.Dk...1.#'x}..{..\|................................................../...(}.`r.".P..EP../}T.e..q%X...d..O..H":Z.Z2......2.....m...-9.:O.%v..;.^.X+.=....jcj...R......z.T-...}.........9...>....F....v..S.....%{c-.=.>Z....5....-.-.{...=tX.F.}...S...>...^85...(.X..8.Q..x..Q......j9."....Q..e.....#.m.lG.1^.._C..%=J:..G.1-.hi..).H...Sn...n.N...?,.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19185)
Category:	downloaded
Size (bytes):	19229
Entropy (8bit):	5.029935094514972
Encrypted:	false
SSDEEP:	384:pjIjPUo8HOfXXtaij86dYXviaX0QO+aEeYWWhdNMCHr5w//sjKHqXt58sbu8sUZJ:pjIjPUo8HOfXXtaij86dYXqaX0J+aEeC
MD5:	1CCB21BE6B67BC06CB5BD2760E2048AF
SHA1:	2100CFB1D930E99F89A8190831C4033F721289D8
SHA-256:	AD3CADB66764CE8FA9611297F60F907D55510A649546FC4C1868C25297C88F21
SHA-512:	C41193AACD17F8A82C423D60849A0A5E2DC9BB705A2019E797D506223C7C9FE98BEF687DD307A21861FBBED67D7AA27A811AFC2EFACEA320D4436A4374ED9006
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/form.10bf1a6475f0741920ff.bundle.min.js
Preview:	/! elementor-pro - v3.21.0 - 15-04-2024 /."use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[680],{2679:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class DataTimeFieldBase extends elementorModules.frontend.handlers.Base{getDefaultSettings(){return{selectors:{fields:this.getFieldsSelector()},classes:{useNative:"elementor-use-native"}}}getDefaultElements(){const{selectors:e}=this.getDefaultSettings();return{$fields:this.$element.find(e.fields)}}addPicker(e){const{classes:t}=this.getDefaultSettings();jQuery(e).hasClass(t.useNative)\|\|e.flatpickr(this.getPickerOptions(e))}onInit(){super.onInit(...arguments),this.elements.$fields.each(((e,t)=>this.addPicker(t)))}}t.default=DataTimeFieldBase},784:(e,t,s)=>{var r=s(3203);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=r(s(2679));class DateField extends i.default{getFieldsSelector(){return".elementor-date-field"}getPickerOptions(e){const t=jQuery(e);ret

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	40414
Entropy (8bit):	7.9634890448198945
Encrypted:	false
SSDEEP:	768:TUS55Msm51qxNIB1x+hcv7ktuBqlmY2bher98bRDtwKCN49lRGY:K9IxNIB1x+KvwuBqlBvR80KCO7GY
MD5:	11E07E25233A517146A5A8EACD19F5C1
SHA1:	181D1C5FC910C5539C5527882BC3E233B488AA09
SHA-256:	565A47112A13824C38A452C771854E716844318024245662822008536A17FD6E
SHA-512:	7CBE1306774439BD466FE85E052E73073F1F4992780AF5718ECBF808188CA6B0435F22D80D87D2BDF1DFCCA71E5158DE71F42AB6606DCDA673F6CAFC882564C2
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png
Preview:	.PNG........IHDR.......,.............pHYs..........+.... .IDATx....eWu..Y.......z4=.....R)L.JE..Q.....cY..`......fd.cB.QT..P...1..~.o..........e,...E.0.F..{y.^..G.....k.8?.........z}..{..Z...k..>BE=`R.b.=.$......Zl..a..?...'kQ.E0....bx...[.&.KV........_.cCQ.H.K...s...Y.c....<.R.b...`N....^.R......-S...],].....r)..^..k.46..y\|.'M.kIc....S...i.J0K.w...t.../.oT.....P.#Z.\|...1...X.....i.B_..-...t.....E....E./..)..E:EiYy.]<%eZ.S...VN..1....v...R...[F.".0h.W..J%...Q0...^....1.%..H...^F."...w.=...e.b:j..R..,.....Xx.PM.].....v.'...e(.Z.K.r.#.4,Z....WF..5......<..Nlx..!.3/.V?/O.>78.~.x<..2.&'..h.:..%.kT.......aie/J.c.#.X....mX$.+<W.%z.4..Y6\|......2.["+....+M.u..bp....Z$...db..{.2.{1.%.W2....KeFuT'..h.E.c._i^J..2......]X..,.W......r#m.RR.......H...5.].7.k.)V...'.1...=...J.lx.?{........]..RW....cn*.....zu...^..zyu..y..:Z.._...].-...x....._..k..F......y.......[..V.(.%.....N..-....}.R.S.KW'.\|..".b.y]..D...E..F...W...ePb.".....'.+...b

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3691), with no line terminators
Category:	downloaded
Size (bytes):	3691
Entropy (8bit):	5.1390862101309125
Encrypted:	false
SSDEEP:	96:1+gGkHquT9h56He1t9x6ZSS7ZL0tSxdlIw4UM00oLxJM3D9a9A:sHkRRaezf6ZSS7B0tSramL43D9au
MD5:	C2033C47499D72691C8EB33197CEE4D5
SHA1:	8493D590A9C728CA75452DDED6276410A6ADE3C4
SHA-256:	2CF66DE18850F2574674AE58BD725AA7DA6EBDDECB9F41A9D44894891317B539
SHA-512:	4BE63ED76FC04B339E37D553B71EBE40869E330EEA4854D0854045FBDA8A63140053CFD44B1619AD7E3ADC5682C67E771C58DFF01A976837D770775087A1E36F
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/easypiechart.min.js?ver=20190829
Preview:	!function(t){"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e)}):"object"==typeof exports?module.exports=t(require("jquery")):t(jQuery)}(function(n){function o(e,o){var n,t=document.createElement("canvas");e.appendChild(t),"object"==typeof G_vmlCanvasManager&&G_vmlCanvasManager.initElement(t);var i=t.getContext("2d");t.width=t.height=o.size;var a=1;1<window.devicePixelRatio&&(a=window.devicePixelRatio,t.style.width=t.style.height=[o.size,"px"].join(""),t.width=t.height=o.sizea,i.scale(a,a)),i.translate(o.size/2,o.size/2),i.rotate((o.rotate/180-.5)Math.PI);var r=(o.size-o.lineWidth)/2;function s(e,t,n){var a=(n=Math.min(Math.max(-1,n\|\|0),1))<=0;i.beginPath(),i.arc(0,0,r,0,2Math.PIn,a),i.strokeStyle=e,i.lineWidth=t,i.stroke()}function d(){o.scaleColor&&function(){var e,t;i.lineWidth=1,i.fillStyle=o.scaleColor,i.save();for(var n=24;0<n;--n)e=n%6==0?(t=o.scaleLength,0):(t=.6*o.scaleLength,o.scaleLength-t),i.fillRect(-o.size/2+e,0,t,1),i.rotate(Math.PI/12);

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 601 x 520, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	232881
Entropy (8bit):	7.991425568049002
Encrypted:	true
SSDEEP:	3072:RGTSxtazY9KSdb3T69E8KfAynpHYuEfrhDFMXJOIh0K+ZxyMbQ5tJqy/q9YUpME6:RGTSzd9jV3+68KI8udKOxZGHMfhw
MD5:	CDD1EB0883B119EF2B85A30A8C86D0AB
SHA1:	47491009D9D71A1839D49187CEE31A55BE95592D
SHA-256:	D25938AE4EBB4758338F581DEDC2B3AF4CB44F57878CB78765BD731920B078F8
SHA-512:	4BD3C2BA8E2CB7A9466D12A21A03A6CF1BDCD017E5420177DDC8F476DEBAF93F83D638BDD9731E25D8B706E258A8B35C446CCAD48385CF0836EBB4D6360877B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........]......pHYs..........+.... .IDATx..k.e.U&.e.}....R..R.T..,Yo.1 ?hL....0C.t..M3A.L....0<..0.....3..1.=...i..C.....X.%Y.lI.wI....{o.{.9{g..s.<Yke....2CJg.....k}7...$."...~.Su...cdq....m3....W....r.s...r.(...&..}.<...5.G...C...%fN.#g..o>P41.7...ZL..N.6se.}.Y.1...y..X&.q.......+..c.........P.tQ.8..k?WG........>0V........m...@...P.W&..'....t......o....X.S.'Y&..N....N..N.%FV.z.....z..I..../...<.._.2..s.7..X[$..s...N...cE..x}..OB2m:..p.C...+.?......P..\|~..3.?......(......u.8u.....W.]T....l..:_..\|K..Qs.......y...g..........B.>$..e.\|.)$/..s..9&...Q.....{...q.d...Ck7&.R\|....%..ET...N...Y.v.8..Fpt.zJ.g.k.O~.NJ........8..ul.M......-F....h.].......f).`..]..kGh..M.1:...8SG.....9.tlo.OC.?V..8'&e....XP...$.. ....9>.8.$(z........<Vw...J......}..W..J.....D..M.rrb...<...cK.6.W_..C...P..{.e..\|:...w#...X......i.[G...K.[^.5\|].c,..M..Y7y..L...$.X.BI...]..6NV.<Ww..1.9&i..M./1.....B.2&).......X.:.n`...&a....Z...._glC.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9888), with no line terminators
Category:	downloaded
Size (bytes):	9888
Entropy (8bit):	4.306545787439804
Encrypted:	false
SSDEEP:	96:BW9CszCZ1KI/G+tl+A0zbjiviRILvy6kjM6AHReKuLjYvcv5VV:BW9CsCG+tl+A0zb+qS6AHReKuLj6eh
MD5:	26503FF2D56C6481E682F0A195E0B8D5
SHA1:	283C2F922880FE81EB1E7EC72DB0768E1711C986
SHA-256:	61F8845B48FA5671FE87D2FB694CD986F621CF29C256E1848BCF70C9A92EB945
SHA-512:	4D168A571F7EF7A4F7AAF09630319A25927914707D3E5992D2BA555D6EDF18CCABCBC719766A6A3062FC62AE75AFE30786945A213E8447C72862FE1562556DCC
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1710847529
Preview:	.elementor-widget.elementor-icon-list--layout-inline .elementor-widget-container{overflow:hidden}.elementor-widget .elementor-icon-list-items.elementor-inline-items{margin-right:-8px;margin-left:-8px}.elementor-widget .elementor-icon-list-items.elementor-inline-items .elementor-icon-list-item{margin-right:8px;margin-left:8px}.elementor-widget .elementor-icon-list-items.elementor-inline-items .elementor-icon-list-item:after{width:auto;left:auto;right:auto;position:relative;height:100%;border-top:0;border-bottom:0;border-right:0;border-left-width:1px;border-style:solid;right:-8px}.elementor-widget .elementor-icon-list-items{list-style-type:none;margin:0;padding:0}.elementor-widget .elementor-icon-list-item{margin:0;padding:0;position:relative}.elementor-widget .elementor-icon-list-item:after{position:absolute;bottom:0;width:100%}.elementor-widget .elementor-icon-list-item,.elementor-widget .elementor-icon-list-item a{display:flex;font-size:inherit;align-items:var(--icon-vertical-align,ce

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.3477942093616955
Encrypted:	false
SSDEEP:	3:0H2TX3WZNTs/pY1CYYn:0s2sxn
MD5:	FDAF0DA7B6FD5EFE13ACF188318E467C
SHA1:	377ED6868D3C52667C09FDB34ACB0E807B0EF776
SHA-256:	88AFD1DF2DCC150634652D6307C0DEABC52399A8E085A89B42A9330B6089FC05
SHA-512:	8AF7D3F0BED505C0F6DF8D04FBB488E759382204740335D429649B703242BB488B4C52A47F2245A4E04C523BB8043D4E78FA732E78A79ED0970A48C38265714D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkdGO8OetBd4BIFDZFh1L0SBQ1lIZnq?alt=proto
Preview:	CiAKEQ2RYdS9GgQICRgBGgQIVhgCCgsNZSGZ6hoECEsYAg==

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	4.4669710771752325
Encrypted:	false
SSDEEP:	24:zesUPCp+WmsmsVulwf+3m120siyHZ+1eMxnep/FeMFY:KoF99QlY+2I0de9ej
MD5:	E7CE6678F4D4E2723E4A799995A8D0CB
SHA1:	38AB0B2823ED01465B225E14E69A0779B6BCFB78
SHA-256:	30CE3892250C39F7980860ABC530E82A3F80A9DDB8F135F5843722C5768A0866
SHA-512:	93F536A2486DDA998E0463EF586C399285677AA6F405B0A32A57906BD8A6AA85E608FD3C6145A2A93C30B477BCD8CF50268AF7EE1A2F43AA3F9C1337BB75120F
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/cidades-ajax/js/mobwe_js.js?ver=6.5.2
Preview:	jQuery(function($) {. $('body').on('click', '.abrir-modal', function() {. var data = {. 'action': 'load_post_by_ajax',. 'id': $(this).data('id'),. 'security': blog.security. };.. $.post(blog.ajaxurl, data, function(response) {. $('#postModal .modal-body').html('');. $('#postModal .modal-body').html('');. $('#postModal h5').text('');. response = JSON.parse(response);. $('#postModal h5').text(response.title);. $('#postModal .modal-body').html(response.content);. $('#postModal').modal({ show: true });. });. });.... $('body').on('change', '#form-field-estado', function() {. var estado = $(this).val();. var data = {. 'estado' : estado,. 'action': 'load_cidades_by_ajax',. 'security': blog.security. };.. $.post(blog.ajaxurl, data, function(response) {. console.log(response);.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120953
Entropy (8bit):	5.4801075096032275
Encrypted:	false
SSDEEP:	3072:GQFQRtdKh8EeaYshUS/BVCFcbWRxiBgBuVe5J0WJvdS:pFItdK2Ee7S/BVCFcbWRxiBgBuVe5J0d
MD5:	78EF7CAB784B16F42C602A84A0450C74
SHA1:	8EBD6D2C8C53D309C72D3CA6D67D19B70AC78207
SHA-256:	EFA52A0ED7764824EFB787DBBDABD8B76C40CFEE4056A5D861EED2113E6312DE
SHA-512:	3E19FA7AAB4D48FD7FA86D60F4C20A13B9174AC007FDB32F3A7D5A0098ED6CC5A354B1F8B24C39569DA40BCC265D1D66A340A238AE5D5A1A4E754957988EFBB0
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/0af6e327/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var a8=function(a){g.Ep(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Dga(a.B,b,c)},OAb=function(a){if(a instanceof g.xt)return a;.if("function"==typeof a.Fk)return a.Fk(!1);if(g.ab(a)){var b=0,c=new g.xt;c.next=function(){for(;;){if(b>=a.length)return g.t2;if(b in a)return g.zt(a[b++]);b++}};.return c}throw Error("Not implemented");},PAb=function(a,b,c){if(g.ab(a))g.$b(a,b,c);.else for(a=OAb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},QAb=function(a,b){var c=[];.PAb(b,function(d){try{var e=g.Ov.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.tla(e)&&c.push(d)},a);.return c},RAb=function(a,b){QAb(a,b).forEach(function(c){g.Ov.prototype.remove.call(this,c)},a)},SAb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 204 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2116
Entropy (8bit):	7.871702931550276
Encrypted:	false
SSDEEP:	48:iO0T7uJlHKP5we2f3np5Q6i24HeX4QoGPJfjDin6W:ITSJpKPaBfzQp274QPHW6W
MD5:	F8D479C14D1BEF9C024837322BF087E0
SHA1:	38153D965EC53F09953CCB75223030F7B3E5DEC6
SHA-256:	D6E7072BDDA42B558101921D2464B136C9DFB2528690E9C36B0030C1E84F871D
SHA-512:	39D7E7F019197E619EB278EC3DD66586A689351C019369118D1CB7DDB2596ECF986C27A048801D90394E76D335DD1AC2518D0B57F9CB700F8BE1082290EC9220
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6......+v.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..];r.F..T./.86U......@d.Hd.P..D..T.t.P...:...U.....`.-7VXh>=..@R...TK.@c...of6....@ .....@ .....@ ...u.........B...@.(~.A.B{.......2...E. ....Z.....).g)."8j.EY.U..$.........a.,..3......3..d2L.. .....F.0...i..O..."....N=.2i.,.......m\|. .f.n..A...\..3%....`.4.!...KF...3.G...].].u.V}....%.1.i.M....4......0.!....aZ...t.=...p....yuu......~{.r.'....} . .v...1fx$..W.&i...s..<D.W..R....u.........~.4.S...B......_.>K....e.(H...1.'.?.-].....R.-......d...U.B.Z.... ..P1.3.......i.XG..F...~...A.....'.,d......]W..)..g=AKj!......oE...J.#...(.@...M.....}..(...s.ps.....w../.<\.E...n...T.UJ..).g.>6J./!....<.n]n,>....61.>.....J.s.5.8r.r...X.\|S.l..ogO.}I...vL.../..fu$......c.2...j..e.T.x......_..=..G.....c.SBD...y'..O*9{HzN.K.....s..M\|..0.wV..p..=.Y2U%ML.g.6..f.y......^_e..+"..p7...!{.l.yC..+.$...0Q...0A..o..7.........i\...I.~....j....4..iM..Y...(\.C..3X....s....T......%..C.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2309
Entropy (8bit):	7.60731633314013
Encrypted:	false
SSDEEP:	48:ak0h+rVmBCqXTjrddePNxZPlhW/t79kEMhpLCMk/:atGVG1XfaZPyyhpCMk/
MD5:	78C786AA97EC525D9949C47E8132E115
SHA1:	94420D45FD6BECECD9F2A7FCE10240D855E59FF6
SHA-256:	BC05988B8F1F68B54DF0CE9997D9582AFAE1867BE9908F550808CD7FCD49034E
SHA-512:	31B0B96D1EB460D1FB9B5A6B38A490B467CFE905D1C300FDFC3D75332113EBA3018B660C6CBF657B96A0C9D0CD1B22A77578D99BBD7A7BBD55A9FAD8EF20A34C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTEGpL....2,............................!....##.C9......=.;Q;..h..Y).`O.:3.OB.E;n...50.-C.@=.=,l.:.=..".. !X'...#^)...6..p..g... w6...A.>.[K...XI.....RD.aPpX...;.:.J....3}3.....D.A....6.9b~4...H... -x62.;.}8.!....-....(n2..I...M.IL.I...."'.00L.I.63.KA.=7J.H.A:K.HK.G....,,.PD.:6...I.GG.F.D<.$(F.E/z.....)+V..4~..WIE..\...41..!(u..G>.TG.........^O=.....I.G......e..dS.[L.......&)...J..c..Q.......dRM.......#:..6....E.E...7.=q..C.C.......I"I.Fh...H#B.Dy.....!n..l..jXD.BF.C...?.AA..B.A`..l... ...#...1.;<.A.+*.%&..".....F......."...Q..%r..2/....H9Y.U.[\..!W.@.J'......z.y.<5u~9.6'..\|.[/.!."................~.....%x.2......_.3.]..L+../Z.=...........].C..Q..u..%.e..[.Slh/...mS.+.....59.ae.MP....R.."......e.<`....(.......,D..Y.Y...........tRNS..%..$.....2.>ie&8rS....../.W....Y{...P.{..'.u...u.B..B.....l...........Y........................................................................................................

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15752, version 1.0
Category:	downloaded
Size (bytes):	15752
Entropy (8bit):	7.986884574909637
Encrypted:	false
SSDEEP:	384:DIpkuoeBluvyxH/Mn3F3uccTKl7FPjAEbOccVzhFnizKKkB:CdhB6YHcF+cQKTUnccVzH3J
MD5:	B20371A6DAF29D4A1F2E85DBBF40FB20
SHA1:	0355A01C1CCB45CB728E7E07C41C8EBF456F70BB
SHA-256:	7E262106F82CC52663E403F5B73795BBEAB9CA0630C33C03579354FBCD4FAE1E
SHA-512:	0D4A0EAF7C8EF92A0E5C9747E7F0CA4EDF267B8F264053505EAB96928DB3E1F6CA89634AEDFACF984DDB46B93EC74C891A25F2C3EB46EA823F07D488F17E80FF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......=........\..=#.........................d.....^.`.. .Z..<.....,..\|........6.$.... ..\|. ..8.k}%l...;p..i.H..q@.?..D..F.2..o.!.5@.~0%.H.Q.By.....:.L.Z.p.^.....}../.R3...c&p}../>(.W....@....=.Q.....cL.0..{0..N...'.$..~..i.o@@j.h.@..".SSs....u...N.q.D.....>u.9.9.....1..&jE/...Y..E.4.co...L2..l`.c.%.m..[.U.p......u....6[...-...jTa...[>&I2E.O..T..0'L.:c."s..'...bo....%.0..C.0....vV.xv..<vL.w@.v%..).$>`.4+...y.....G.......4i]_..."...AAMUN......(.l......,...[.x..;.%.GX^....z5.l.L...w.}......b.k..O...h.....>..KR.R.M3..ciF.e;.V.........!....r....luL.`....W]_1.mw.O-...).....BR.t...V..Zt....a3...($FI..WU.wA.z.\|.1..A.H...9..=..0@.2i.R......:...B0UqZ...[..'O..K.-6..k..."......vK..9.B...C...n.{m.... ..(.S50......8.q....$I.H.,..9 ..A....(....6.....,.X..h I .Bd...g..M....).....r.x.}.9...~.4..,...@.7.....O.......a..e.(.....'...*..+...F;z.../...vd..1.y.....e..b.....A##....xJ.~q......\|...#d...mk.-.wI.z.V..11.]o.....I.k....N...b,...%^..X...0.`.....b.I.\|.....k......#..

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8189)
Category:	downloaded
Size (bytes):	21438
Entropy (8bit):	5.300921910116817
Encrypted:	false
SSDEEP:	384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv
MD5:	C4E68A0F3463C0BD3C39EAB38815E881
SHA1:	0CE58644E9F3C5063A11453FF287C5EC096465A7
SHA-256:	CA7DCE2391845E8AEC7DA135F33FABD10F74EED28A532AC66FD01F761FCFB42F
SHA-512:	E871F258F625A5C8E8EC3848242352FD75DCB0F0B580333FCE07625A6A2F53E83F22E4DD7492F2D12A880709D540DE0BCDD9B335D853FE9CCCFC0EFCCF718BCE
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	982
Entropy (8bit):	7.746327909444835
Encrypted:	false
SSDEEP:	24:2ekaxhwhmuXE9+IpqoQ29WkIdfNn59BYNyUbEl:2ek4mL0V0xkmNn59Ygl
MD5:	DAAD67EC30FC25F7E5C6A8450D2F78AF
SHA1:	A937DD97C492AD2A4043DCA77A135D1B7C6326AA
SHA-256:	734916DCE359FAAFE1AD05697108DFBEA373EEB4EF344251AC3529F7A57BFD97
SHA-512:	7BEBA03E7F5ECC1112B04E2EB77D315EA9EAD6657DE715D4DF8CFBAE4BE0AA3F52E2DFEBE7DE17D2FD88217207F7D7801B06E997DC81B7FBF34EBBE661804E97
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........+......IDATX..MlTU....u:ViH.....Pj...Rc.4."..@gt%..4FW..+C......#..1..Z0..(..F.....!v.f.. .C;..;.:..7w>.b..$os....{..{....h.Z. p+A}.A.....U..z...'.L... 4..N............"..pT.=./...x.......v.-yK`..6..l...c.. ...,.k.n&..s..._(l..c..h)CTY>a?j...{\|.....@W..;.......GW......K.G...K.}@.A..kI.......V\|..Wu0..~.x..+)o>.?...q...m...."#....<.I9......E.7h.x....'.Z/C.n.,a...,..S.`Q.c..P....;CI.nq.H.9.C.W805l.L1....h'........V..H+.$<....>.Oaw.X.v...U>....6...7h..)..;........v.@..~..%.....G..P.er...k......T).>..........2Y]..N..\|..A.U...?5.x`_6...hb+..^...N9.)....<......^...\|.....tv).R.8.N.......rw.g<.....=....]...6.q{...3U.S....5#.q....~...<..(\|...R@..x..)$.I.@E.......%M......I>a.,......\ec$...........I..lI7..e.6.P..,.1...Ba.X&.'v.oW...fg..u.W8.\|...M.w...1....5.../t4<...~7}e..l.....d.0..m..=...k..CPq.............m..;.-s.j..\p..JC.e..K..L.kT..N9_.rZ....v...S..}...E.o.?.?..!.l......IEND.B`.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	186143
Entropy (8bit):	5.2730115748813
Encrypted:	false
SSDEEP:	1536:KXFpLhKR5iY4/1BaU2Zau0w6DPcD8AS/1emVZZkcsuDBgVsQd1nUWfOlb0rpXFpK:IL7nJqnsmuGrVL7nJqnsmuGrr
MD5:	314844761A01E0C9C505A72161904ED4
SHA1:	A9FAA0D011A6DDEA0BA5465A4931362C0ECA455E
SHA-256:	A1D55239B222C8ED0F41BF2E390521A51257042C9443786A8D0576CD165F2562
SHA-512:	A7B2FCC6C81B4E04351691F0202C5C9E0717DF8224DE85C2258D1FDC477C1F484C26A7DCBBD8162935FFA9DCE403BDE0B66C48C2B9AA06C1490D302EDA7601B9
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/bundles/jquery?v=XgddrwFLu0z8WptdlVDXPqymDmw7ToIMYb1BryT4OPk1
Preview:	(function(n,t){function gt(n){var t=n.length,r=i.type(n);return i.isWindow(n)?!1:1===n.nodeType&&t?!0:"array"===r\|\|"function"!==r&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in n)}function te(n){var t=ni[n]={};return i.each(n.match(s)\|\|[],function(n,i){t[i]=!0}),t}function ur(n,r,u,f){if(i.acceptData(n)){var h,o,c=i.expando,l=n.nodeType,s=l?i.cache:n,e=l?n[c]:n[c]&&c;if(e&&s[e]&&(f\|\|s[e].data)\|\|u!==t\|\|"string"!=typeof r)return e\|\|(e=l?n[c]=b.pop()\|\|i.guid++:c),s[e]\|\|(s[e]=l?{}:{toJSON:i.noop}),("object"==typeof r\|\|"function"==typeof r)&&(f?s[e]=i.extend(s[e],r):s[e].data=i.extend(s[e].data,r)),o=s[e],f\|\|(o.data\|\|(o.data={}),o=o.data),u!==t&&(o[i.camelCase(r)]=u),"string"==typeof r?(h=o[r],null==h&&(h=o[i.camelCase(r)])):h=o,h}}function fr(n,t,r){if(i.acceptData(n)){var e,o,s=n.nodeType,u=s?i.cache:n,f=s?n[i.expando]:i.expando;if(u[f]){if(t&&(e=r?u[f]:u[f].data)){for(i.isArray(t)?t=t.concat(i.map(t,i.camelCase)):(t in e)?t=[t]:(t=i.camelCase(t),t=(t in e)?[t]:t.split(" ")),o=t.length;o--;)del

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
Preview:	{"popups":[]}

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 30464
Category:	downloaded
Size (bytes):	9976
Entropy (8bit):	7.97657634763972
Encrypted:	false
SSDEEP:	192:XMmgyZ8CjEuv6VASDYndQHMOp/zR2V3oxwJenw1i0Pb6lNwd6WWCn:XMmgq8AxqTDeQHMAzR2V3bA2WN6Bvn
MD5:	A101060A6EC593B54E9C4227F96E2695
SHA1:	87E5D1E874CFF1FC3524D73EDCA02A0F34125E66
SHA-256:	92B7C144D31D888DDC8CB1F6FC837ADB4E702473F8160B5B1A083B65E8FA2F79
SHA-512:	49C986B5A7ACFD92E6968C49F66479421AF9737E6CC5145D7E81624B3D2D84E2C5EEBFF2303470BAD70DC3B90440689BEB70483D1F17E17DC877549E6630A089
Malicious:	false
Reputation:	low
URL:	https://d335luupugsy2.cloudfront.net/js/integration/2.0.0/rd-js-integration.min.js?v=1
Preview:	...........}.v.F......&..f."eg&..peYN..e.I..ft!.I!...h.#..e....U..@..%;;.g}\|$...]]...n.?...@Di.......;.u..Y......ig....................l..\.~.f..u".".w.^$!>..YcN.7#..I..YGs[L...qQdI..]~.J3...H.c...........z...B...A....RV='.....J.....9K....sf.....K......w...P.3>...>KW<.w.m.b..2.......6....j3`..,=..\|q...sv..L.nW.vEz&.(Y...nwW..y..n\p.z...[...l]\.\e.......6\|Z.aWt.6.q....+.B..\|}._....\|=&.....j..K...sa....c..........Y......3.G.a.....d....&j.D...V..KY9\.lIKb.q/.dF.b..h2.p...1.q....U}.x-.KB.~.f...>..\.X..QM.*KE..t....M.'Kn.,.u.\|.b..n....l.I...$.wp.`...%.w.i..v4.U.8.y..&..:.Y..M.".Tu.....@.:.f.........K....oSYU"l..+.qW/..e..G..A.@..>u..........n....%.Q..9B.C..'.%.;#...6(.3.0u..z.......5'...\|{.SO/...g.I.m.$.5&...Y.X.=\.nW'.a.....H3..L.....X@3........".e .....W..j.y.1..f.>c?G..3+6Ju.....k.o'A}.1..r....Q..&.Z[...3v.d?).....FvI.^........`j.C....U.?X....[.^>T......x..%.,.. "....,.........}....3..Q.AN..r.d.d..Yz...8..f...R.2Ip.-....{...8.(u.+~....

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10918
Entropy (8bit):	7.977820921269713
Encrypted:	false
SSDEEP:	192:NVU2KHDeZ8pNdH5mKEnQyLgoKSOECGDceKuY5y+BVfURYEi0:NeDq8p1cgoK/GDvgLfCY
MD5:	1FDC1070CEF176653677D9EC5477E8DC
SHA1:	90902E9918B92E1D6A0538A8A329900A4CFD8877
SHA-256:	D800149CE9A641119085477901038F17775C57E69D3B8B77E014B24D4A332D91
SHA-512:	A8FE6B68CC3B82D7539C84BBEA6CB46748CFA9AE23315E8219A873A8B3C8BD2EE334C4791A7B0BA3AEE0D18A7C6024962E3C876E0F74E5CE1D37168ED44EB96B
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/kcHoXFYUlVQ/sddefault.webp
Preview:	RIFF...WEBPVP8 ............>m6.I$"."!.y....en..g.o..l.k...E...[.3.....x..Wn.._.w....N.....y.....i..?........7.'...w..lo_?...~ \|............O...f?....I.......o..aO....z......a.....c...7....k....:.....:..........g..q.s.[.......5....{C._...y....`..........K.>._.......U.o.O?_..............w..vO.W.....H..iAR,..PT.+f.."...H..iAR,..PT.+f.."...H..iAR,.`..y..\|5......6..8....!..P.>.1a....".. .)..?"..>...Yz.lS.I...8w.gyJ.;...ZQ...XV.\|<{.O.`PA.I...T.K5=......^.........r....L..E".b~.k............A.}....<=......V...=.#..r...Y.L\|z.0j..7x~..>_..@.B......m...-.!......................\.s.Dx.L..v.~.y.\..........'5...o.<...J.:.C....D.\|U.....Y.40_.a..RC....O...]w..6%{.J..t......,..Q...&[Z./..k-..m..u.y).K..k...m../.<3...]..E~!.B.2H..."f+..}..U{7c.02.[c..:.I9.j>.k.L...].~..Q.(*Q!....h.T........""...nH..W..?\...`..R+...9.. ..+..YQ..Bd.#..p7f.X..Fr.v.A].....1....>w.c.@...C.E....t..g..........a..!V...).../..^....;...).C...:.(b.+.-\|:....Z...m...X..(

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862)
Category:	downloaded
Size (bytes):	42863
Entropy (8bit):	5.085616303270228
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
MD5:	D5A61C749E44E47159AF8A6579DDA121
SHA1:	3B41B3BC956685015A347A2238E71DB29DFA0DBB
SHA-256:	0C7178CC6CA34FB18E30F070A5E7A1C287B2D7CCFCBA2CFDF06E0F46EDA55740
SHA-512:	5ED98CB4311C373DA3EDE92BB47BCE551E22C30683EA8FC55097BAF99ABE1E0702B24DE48F8B9241047CC1E4364158F5A343E4E8FC182E8866DB4E99CCD7EE6E
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/js/slick.min.js?ver=20180910
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	8326
Entropy (8bit):	5.411157450119828
Encrypted:	false
SSDEEP:	192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/O:cdaJ39e74boZrkVVjeFexA8Am
MD5:	E89D326E0218C78FE207AE20685E59FE
SHA1:	F611756B4CE4A933510B6084ADEB3BF9F6FC4732
SHA-256:	41F8DE4923E2E2EDBA1B3E6712827F46970330BF75FAAD011C706FA1D53CFC52
SHA-512:	424500ECECCA73394B8661C07ECA1A5A6880BABA0F5DC2C03D37ED99C52F16F06DF5B9F46C937E5AEAAAFB41152FF8F7E08D8FD8B1ECEEB668C42FFB43144177
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/form-masks-for-elementor/assets/lib/jquery.mask.js?ver=1.6.4
Preview:	// jQuery Mask Plugin v1.14.16.// github.com/igorescobar/jQuery-Mask-Plugin.var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.findInternal=function(a,n,f){a instanceof String&&(a=String(a));for(var p=a.length,k=0;k<p;k++){var b=a[k];if(n.call(f,b,k,a))return{i:k,v:b}}return{i:-1,v:void 0}};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.SIMPLE_FROUND_POLYFILL=!1;.$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(a,n,f){a!=Array.prototype&&a!=Object.prototype&&(a[n]=f.value)};$jscomp.getGlobal=function(a){return"undefined"!=typeof window&&window===a?a:"undefined"!=typeof global&&null!=global?global:a};$jscomp.global=$jscomp.getGlobal(this);.$jscomp.polyfill=function(a,n,f,p){if(n){f=$jscomp.global;a=a.split(".");for(p=0;p<a.length-1;p++){var k=a[p];k in f\|\|(f[k]={});f=f[k]}a=a[a.length-1];p=f[a];n=n(p);n!=p&&null!=n&&$jscomp.defineProperty(f,a,{configurable:!0,writable:!0,valu

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2310
Entropy (8bit):	5.078292106295874
Encrypted:	false
SSDEEP:	48:UzuE3mJie1s1ERMfrJKaVoH7H/0QT6SXYiANiXydv4LdO4Ldj:UzuE3mJH1sGR0NKN7uAYiJyBTK
MD5:	137309AA03C63999BF1EE72C19F75D8B
SHA1:	2D9E56554730DB3DF5008951B0404732082E22EA
SHA-256:	97FFDC41B1B47C67EA9E95934D92A2B688DFEB4119AC23BFC7B9D779C861CA89
SHA-512:	47A9250D8400410460EB00E72410622D33AFDB10E4D9BFB33715FB5CB9566D50FED2B8DA6917D4CA1BF6BAF6167C4494E5A3CFB873DAA38D6A16F08BA9E1B2E8
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/inc/backend/css/simple-likes-public.css?ver=6.5.2
Preview:	/* Wrapper /...sl-wrapper{.. float: right;..}...sl-wrapper a {...border-bottom: 0 !important;...text-decoration: none !important;.. color: #d5d5d5;..}...sl-wrapper a:hover{.. color: #ff2f2f;..}...sl-button {...font-size: 1em;...line-height: 1;...font-weight: normal;..}...sl-wrapper a .sl-count{.. font-size: 14px;.. font-family: "Nunito Sans", sans-serif;.. font-weight: 800;.. margin-left: 7px;.. color: #929292;..}..../ Colors /..a.liked {...color: #ff2f2f;..}..a.liked:hover,..a.liked:active,..a.liked:focus {...color: #ff2f2f;..}..a.liked span.sl-count,..a.liked span.sl-text,...sl-count, .sl-text {...color: #1b1d21;..}..../ Icon /...sl-icon {...font-family: 'Arial Unicode MS', Arial, sans-serif;...vertical-align: middle;.. margin-top: 1px;.. display: inline-block;..}...sl-icon svg {...fill: currentColor;...width: 14px;...height: 14px;..}...sl-icon svg:after {...content: "";...position: absolute;...top: 0;...right: 0;...bottom: 0;...left:0;..}..../ Count */...sl-count, .s

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	586757
Entropy (8bit):	5.6220892051894396
Encrypted:	false
SSDEEP:	6144:IHySnHLgsYwTAXcTuAqIhzgCzDk+0DQTtM+un8rwMF5BiCPC7:InHLnYNChzgCzIjv87FPPw
MD5:	2296FB574AA5763E0DE8D692AACC8FC9
SHA1:	BFD743AA1EF5D70B43F5A06C6D71245117C3CBBE
SHA-256:	DA286F7DDC94DA3F6FD6453FD5B05D463E31E9F3A64D8EB1CAF44F36627A12C0
SHA-512:	52AFBA15F97D2C7F50FDC7D60A09C442561219988510C930D4C08ACFB610A3A9B02697FAB4C73397745F1AEBC27E47C95A0927E661E01242BBD596E131C46276
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.7/js/player.module.js
Preview:	/* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,r as g,m as b,p as E,P as y,T as C,l as T,n as w,o as L,q as S,u as A,G as k,v as I,w as P,F as O,y as R,Q as N,S as D,z as M,A as x,H as B,R as V,B as U,D as F,E as H,I as q,M as W,J as Y,K as G,N as $,O as z,U as K,W as j,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as we,ap as Le,aq as Se,ar as Ae,as as ke,at as Ie,au as Pe,av as Oe,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Be,aC as Ve,aD as Ue,aE as Fe,aF as He,aG as qe,aH as We,aI as Ye,aJ as Ge,aK as $e,aL as ze,aM as Ke,aN as je,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt,aV as it}from"./vendor.module.js"

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
URL:	https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_n6fyeulem&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v
Preview:	{"popups":[]}

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8171), with no line terminators
Category:	downloaded
Size (bytes):	8171
Entropy (8bit):	5.072859919696532
Encrypted:	false
SSDEEP:	192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX
MD5:	DDA652DB133FDDB9B80A05C6D1B5C540
SHA1:	60C8514C57A5DB2980C4B046B0DD479BD427357B
SHA-256:	C1A9A3E223BAD631DFF12D33B5499EB145CB08D8621C20D9D73870E78D97AFE4
SHA-512:	05CB3673448A79AA81887C60A82ABA51F9A843DC13AB4FC39B3E6D8AE7D632732D9AFEFAF72FC3D197C2795A3364FDFD4F83C9B628644D98F1C9017BFD435E62
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Preview:	!function(e){"object"==typeof exports&&"undefined"!=typeof module\|\|"function"!=typeof define\|\|!define.amd?e():define("inert",e)}((function(){"use strict";var e,t,n,i,o,r,s=function(e,t,n){return t&&a(e.prototype,t),n&&a(e,n),e};function a(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function d(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){d(this,u),this._inertManager=t,this._rootElement=e,this._managedNodes=new Set,this._rootElement.hasAttribute("aria-hidden")?this._savedAriaHidden=this._rootElement.getAttribute("aria-hidden"):this._savedAriaHidden=null,this._rootElement.setAttribute("aria-hidden","true"),this._makeSubtreeUnfocusable(this._rootElement),this._observer=new MutationObserver(this._onMutation.bind(this)),this._observer.observe(this._rootElement,{attributes:!0,childList:!0,subtree:!0})}function h(e,t){d(this,h),thi

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 520, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	196125
Entropy (8bit):	7.99253489210516
Encrypted:	true
SSDEEP:	3072:2bywUNWg0XMMk5o1BVJZ4llAIb7Xwz94ZQSntbqWfKpxbPO3LKZGl/UMM8trLAYL:2bHUWXpkGVn2lTQz9UtbOxSLXrLAHcR
MD5:	6A7C44093119B9EDD1427CAC47C2D303
SHA1:	7D86C440722CC1579F0E60DEE1063FB506194F5C
SHA-256:	AA9F28467EE47FCE1024EC6B38CB904CCC439A8FDC6AEE5FEA83594CD7D818FE
SHA-512:	298050D3091CF464A43EF3B41687EBC3573CEA407B846B64D774D7DB484B7CC210418D58BE3C5FDE1B2C420BE8F923AE17338249C7497E569CCB48F5F19186FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............G:......pHYs..........+.... .IDATx..w.$.}......=.==...Y3;.w.0.%...I.(...dx..D..y:..E(B:.."/../.NAJ$!."..#.....k0..nvfg.6U..~.GfVgegUW.....}'z*+..^......A"...M.^a\.3.W\....\a..f..1.....d..$m.;./....-.&..V...i{..cZ.Z...d2.L.E.Sm..2j..usL.Y{..5....c.1f.v.1...t.%%.A...L&.ie..A.....c....5.N;h.1...n..1...r..d2-ZK1n.tCjW.p..q%i.2f.1...c.Yy...)c.1..a6....N..1.L&..W..1...6LW2.n2.L&Sy..1....5Q.5._..B'.1..L...^k.3..cV.Y../\|.....k3..8...c..C..L..c..2.>...c.1..).e.W.)+.J3e...3Sd..8..dZ[.....c.Y;.1....J1..4....g~.c.7.N..c..2&...,..Rf.6.r2e...J0.xcz.1.L..v..e.1.......$.....1..t..c.1+.L&SWrt6qE&...S\.j1..m4.d2.L+......c..fJ.NZ........b..gf..o..1W...c.Y=..o.1.lpf%M.zQ/....=.c.1...<L..1.k..J..\.Y.Z..\..m0.d2.L..^{..c.1+..e...-.S..f.t.0.T.1fa.L..c.1..cL.0m.8..`..Z..2.....w....}...`.1.OwR7.1...1.U[Q.1&..d2].z..f.1.....uY..8...M.+.L.U=}#1.k.Y...c.1..t.W. ...fL...^...c..=s.1.k.YU..p#....1..c...L&.<.6..v.+0e.J0...I.)...

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Windows), datetime=2021:10:27 15:22:28], progressive, precision 8, 800x600, components 3
Category:	dropped
Size (bytes):	338430
Entropy (8bit):	7.968858146153891
Encrypted:	false
SSDEEP:	6144:m8K8qTs+P484tqOmIjTQu/jV0yJOUt6xKJcD2tHXs4k1AD4cOeWXQq8WQYKIRsXt:m8K8CA8WtcSB0yJaxacDOH8iz2KIRs9
MD5:	9558121D8D95E589673002C88040F892
SHA1:	F3191C599F64C434D9D79FAB5F0D3D03191CBBF6
SHA-256:	7E2612F5588E5E6F9101D2C13349BCA86E8A131EF09B7118CEC612CA2643D343
SHA-512:	24C7F6054541D449A4B98B2B7F64958719968F208DDA7C04351B7937396B3F222C3A21222429A90C6A0D69FC075B35CEC2273B9021177652CE303A897FB1F933
Malicious:	false
Reputation:	low
Preview:	.....2Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.5 (Windows).2021:10:27 15:22:28............................. ...........X..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..( .....?.......,....]].p#.d;..3Tsr..j.......6...6.R.y^...v.........E.8~...-V......?..._....#c.`. z5.\.n{on.....~.I.L...=&0~E.Z.^E!..I..q..v2...lu

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4483
Entropy (8bit):	5.071104944050023
Encrypted:	false
SSDEEP:	96:7gwdzZPTFyIotHIQGlSCwmiCAECKTCAuB:/ZxyIF0rlE3TYB
MD5:	DDA94DCB0AFE0D27AB857472874AA00B
SHA1:	ED1C5A174B633B812080D79BC3EBB0B25B0A9D4D
SHA-256:	F349CF7F810EA22B3023A3AF828D644A1BEB3333D309ABFD5277A189D7A96748
SHA-512:	55B9327F9B4CF64F1D714062E42F2B6D5A3B7C830E15F2019C2A8EACBD8D1014E31C2AC1CE192B6C2436D70C029D75E57DC686556EB2990AA28FA4142711EB2D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-background:new 0 0 512 512" xml:space="preserve" class="">. <g>. <path d="M7.5 89.973v100.688c0 3.1 2.513 5.613 5.613 5.613h39.465c-4.463 6.331-6.892 14.209-6.299 22.681 1.206 17.246 15.146 31.206 32.34 32.377 20.357 1.387 37.3-14.767 37.3-34.892a34.882 34.882 0 0 0-6.387-20.166h80.528c3.1 0 5.613-2.513 5.613-5.613v-48.908c0-3.698-3.51-6.372-7.08-5.41a34.689 34.689 0 0 1-9.034 1.191c-20.046 0-36.14-16.972-34.784-37.374 1.158-17.421 15.314-31.489 32.688-32.515a34.837 34.837 0 0 1 11.069 1.112c3.594.961 7.142-1.637 7.142-5.357V13.113c0-3.1-2.513-5.613-5.613-5.613H29.269C17.246 7.5 7.5 17.277 7.5 29.338v30.687M301.302 471.683c-16.647 0-29.931-14.451-28.065-31.531 1.432-13.115 12.013-23.633 25.096-24.978 6.643-.683 12.871.957 17.995 4.195V315.7

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1794
Entropy (8bit):	4.590518033091159
Encrypted:	false
SSDEEP:	24:ve0hjm0M3ZGwgbb6qSiRDI2QWTFyXIZcVkTFxchwQUm8B5Td:vel5wXbbsi5hBTU8pTXbS8Td
MD5:	D52EFAC8566F31384507AC078F6CD699
SHA1:	A7A5FE90361417007E06CC54A0E659DE3D900FC3
SHA-256:	C8EF7B485347A1B89E8FB25F75E8AD897D85490C1D2509D143F093144571962F
SHA-512:	2F538254382167FF60B05BD89598E1F2E6AAD8464F599B9E1A2EEEA6634948F6F6AE32B76D7B287767968300C42C0C8F22DBFC3F6EA496223514D74110C30C6D
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/css/slick.css?ver=6.5.2
Preview:	/* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;. margin-l

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65126), with no line terminators
Category:	downloaded
Size (bytes):	119662
Entropy (8bit):	5.206663742363127
Encrypted:	false
SSDEEP:	768:k7K30pxUpuGnom5/yJuA4kbNOsl1i3ExFIEW7QYsca8Dme4bQRKCUA4PlO+7ryXb:mchA7bNYEwEijsI8MxZP3IguCPxXP1B
MD5:	8D1FF391964851FF2376108D07D63C62
SHA1:	E346518DE08764D254121D091304C41FB8075BAE
SHA-256:	6DC4CF9D1CD942579F5567E6E65594CB3E92E7EC9DB9008796CA1C7479C106E8
SHA-512:	6197B0F64F757016EB3B8D559AD8412A7602D3FB1903C56A7798FE407CD0D5B625F6E5B6DE76DC22438F69F6CBB0D39C85FAB1FF4C2662AA1EE5CB8C68800976
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/bundles/bootstrapcss?v=kyR4jYxJOjVS6IRFVEvIKGoZyzo_coA_3ChUQqkeb4g1
Preview:	article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a{background:transparent}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{margin:.67em 0;font-size:2em}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{height:0;-moz-box-sizing:content-box;box-sizing:content-box}mark{color:#000;background:#ff0}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"." "." "." "."}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:0}fieldset{padding:.35em .625em .75em;margin:0 2px;border:1px solid silver}legend{padding

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	59757
Entropy (8bit):	5.322609671087342
Encrypted:	false
SSDEEP:	1536:jnapL72k4DpJ3r39mNI0XAHTs5I1uvd33ELkHvajKKU0ey6O/vK5Yq4aEp2bT3U+:jaGJbt1qwulHELkHvajKKU0ey6O/S5Yk
MD5:	B79DDBE0B8831340A70F2BD9E6C55452
SHA1:	CF578EF73EE40D8F57DD6BCEA160D190B50D3971
SHA-256:	91089099D98BB1288CD613BEC3F18FEC0E064B8EB56F00166067FE5667F35DDE
SHA-512:	DD2EEAB21D61F96EC885E2C1C3DBF3BF3C473FAA73AC65E4CA81DA0C75D4E6EFAB80FE8FC265800204D6F280EE855EE30349DE5CD6BA1FC846B6A07484D1650B
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/politicas-de-cookies/questor-zen/
Preview:	<!doctype html>..<html lang="pt-BR">..<head>...<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1">...<link rel="profile" href="https://gmpg.org/xfn/11">.....<meta name='robots' content='noindex, nofollow' />... This site is optimized with the Yoast SEO plugin v22.5 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Questor-Zen - Questor - sistemas cont.beis, empresariais e corporativos</title>..<meta property="og:locale" content="pt_BR" />..<meta property="og:type" content="article" />..<meta property="og:title" content="Questor-Zen - Questor - sistemas cont.beis, empresariais e corporativos" />..<meta property="og:description" content="POL.TICA DE COOKIES – QUESTOR ZEN A Questor Sistemas S.A. utiliza cookies para possibilitar e aprimorar a experi.ncia.do usu.rio no sistema ZEN. Esta Pol.tica estabelece as diretrizes adotadas na coleta e utiliza..o de cookies em nosso sistema. Para a Questor transpar.ncia . fundamental,

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3
Category:	dropped
Size (bytes):	20575
Entropy (8bit):	7.969606144299366
Encrypted:	false
SSDEEP:	384:H4OPG1b4fd5y4OxUfSonBPnN8ZMGRg4kTC1nofSpP8tVlmdXw5ennf+7oH+l3:H4OPG1b4fdcNaSor8iGuipP8TlJennmN
MD5:	82EB850B10324D707F4F00B57E888070
SHA1:	06DA3E3D9A08DD82847E254D47108CDA70CA3C66
SHA-256:	22E389283B06E043F31DD449F0F6FD7613F5F993E34DAB2C8BB1A566B93B8FA3
SHA-512:	CC1469CDC774A7D3B77435CC4DBC92619B5AFBA0F90855CADCA2A6FD0308612455DE6D455D1A6729C855F9F1164066676FA6846ED1A3E91CC9DD546DB19E12A6
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......R.X.."................................................a..^..0..(..F .w(...g..,.....`... .3...k...z.1(M.^D..F..M.../..0..@.o...KT.0Lg.Ra(....B}[.LJ........`..~.........B...6. ...7)D.2...i.k..C%. .=.......c...3.$...!.9.@Bb./"`lu....0}?..$.......V.(f.L.&,..[..U...c..*@....j......../ 'a....QG.{Oh......#.\....3..k......w>.....z.\|..mQ..aB.N._.=...[.G.s.....^...2z.{..w.1m..?U.>Mv...&...X@/T..>...i..xu..X0.3.......}...?......{...h.^..M..n.....S....z..l......o..[..k..O..h.K..1\....Kz'....7.%..s.Q...=OY.M...<..g.....y?.9....&e.R..o.......t.9.....k~OV.....=Oo...!...r...!...U..3...>@[.\|.....<..>.......M..z........}.....G.U..<o.L..&...y=..Y.`.w.e.(..W...=N...._i.......u_i.~J/.L\.....w}.t;m....a......~...v..d.._i........_i.~J..x..Wi.u..<.={.....^....~..?.s..q .G..c......6...w....y:{z..y.j...V..S..v?.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4272)
Category:	downloaded
Size (bytes):	4307
Entropy (8bit):	5.146101486826543
Encrypted:	false
SSDEEP:	96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps
MD5:	072D3F6E5C446F57D5C544F9931860E2
SHA1:	EE6AA3D65B474309376468B24BB6F829A4514809
SHA-256:	2CB546FBDDA7995D374FFFA4B2F6530BBCF57D014639DDF76DE45DF43D593045
SHA-512:	19CEB31EC694AC5C42A0A7B02CFC1C31DDFC033DD62916A1C55BBBDD2435E21F73127C539687633E96F2706B2D75C37609B44A9C9462B63F9F96795CB4495968
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Preview:	/! This file is auto-generated /.(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e),t.d(e,{actions:()=>S,addAction:()=>m,addFilter:()=>p,applyFilters:()=>k,createHooks:()=>h,currentAction:()=>w,currentFilter:()=>I,defaultHooks:()=>f,didAction:()=>O,didFilter:()=>j,doAction:()=>b,doingAction:()=>x,doingFilter:()=>T,filters:()=>z,hasAction:()=>v,hasFilter:()=>y,removeAction:()=>A,removeAllActions:()=>F,removeAllFilters:()=>g,removeFilter:()=>_});const n=function(t){return"string"!=typeof t\|\|""===t?(console.error("The namespace must be a non-empty string."),!1):!!/^[a-zA-Z][a-zA-Z0-9_.\-\/]*$/.test(t)\|\|(console.error("The namespace can only contain numbers, letters, dashes, periods, unders

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 520, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	196125
Entropy (8bit):	7.99253489210516
Encrypted:	true
SSDEEP:	3072:2bywUNWg0XMMk5o1BVJZ4llAIb7Xwz94ZQSntbqWfKpxbPO3LKZGl/UMM8trLAYL:2bHUWXpkGVn2lTQz9UtbOxSLXrLAHcR
MD5:	6A7C44093119B9EDD1427CAC47C2D303
SHA1:	7D86C440722CC1579F0E60DEE1063FB506194F5C
SHA-256:	AA9F28467EE47FCE1024EC6B38CB904CCC439A8FDC6AEE5FEA83594CD7D818FE
SHA-512:	298050D3091CF464A43EF3B41687EBC3573CEA407B846B64D774D7DB484B7CC210418D58BE3C5FDE1B2C420BE8F923AE17338249C7497E569CCB48F5F19186FA
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/2023/07/Zen-Edoc-720x520.png
Preview:	.PNG........IHDR.............G:......pHYs..........+.... .IDATx..w.$.}......=.==...Y3;.w.0.%...I.(...dx..D..y:..E(B:.."/../.NAJ$!."..#.....k0..nvfg.6U..~.GfVgegUW.....}'z*+..^......A"...M.^a\.3.W\....\a..f..1.....d..$m.;./....-.&..V...i{..cZ.Z...d2.L.E.Sm..2j..usL.Y{..5....c.1f.v.1...t.%%.A...L&.ie..A.....c....5.N;h.1...n..1...r..d2-ZK1n.tCjW.p..q%i.2f.1...c.Yy...)c.1..a6....N..1.L&..W..1...6LW2.n2.L&Sy..1....5Q.5._..B'.1..L...^k.3..cV.Y../\|.....k3..8...c..C..L..c..2.>...c.1..).e.W.)+.J3e...3Sd..8..dZ[.....c.Y;.1....J1..4....g~.c.7.N..c..2&...,..Rf.6.r2e...J0.xcz.1.L..v..e.1.......$.....1..t..c.1+.L&SWrt6qE&...S\.j1..m4.d2.L+......c..fJ.NZ........b..gf..o..1W...c.Y=..o.1.lpf%M.zQ/....=.c.1...<L..1.k..J..\.Y.Z..\..m0.d2.L..^{..c.1+..e...-.S..f.t.0.T.1fa.L..c.1..cL.0m.8..`..Z..2.....w....}...`.1.OwR7.1...1.U[Q.1&..d2].z..f.1.....uY..8...M.+.L.U=}#1.k.Y...c.1..t.W. ...fL...^...c..=s.1.k.YU..p#....1..c...L&.<.6..v.+0e.J0...I.)...

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:YVK4V:Y9V
MD5:	6346E069259DD802EAF247566E2F4368
SHA1:	03783069DB6874744910CD5A92636F22529C6328
SHA-256:	96DDD38EFE76EC82A9F2B4ECB8C151AA7B202D792823131A8936FC9BD616B22A
SHA-512:	3C52CDC43A494510153FCC494F72D9FE54829577D484359F78EA3B95DFE498DAAB4265F991C176C4EEC0BAE51ED5C1736B1F340EED87BE4BB9334A7F0DA5F576
Malicious:	false
Reputation:	low
URL:	https://popups.rdstation.com.br/popup/show.json?account_id=703230&uniq=_8h8a2n6cj&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v
Preview:	{"popups":[]}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3814
Entropy (8bit):	5.005660658639155
Encrypted:	false
SSDEEP:	48:CEwFxH/6gwdlIH8HA6gwNHJa6khLv6gwbeyHJlujlHJZECHJxRpkA5oDs+/vouVj:Oxi9IcTPzB3iXjWNhVWNAVGDjsDjsI
MD5:	22E028C10766D6B06BF71E22C4B03A10
SHA1:	E62225CA8F64CEB4746CF45423F5884CF7E6A1DB
SHA-256:	228F22CC4BF1603374F4A51CCF824377ADC04AA0123AED741F32CD5F0899ED81
SHA-512:	C67AE6F0736FAC5FF021176AE95773B9FA1D042745FDA5320159C28C8C071B7CE50D1F6B43C8637F2D2516B3A902DC5B8BD6CA6087DCE665FF46AE4073276534
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256"><defs><radialGradient id="b" cx="161.8" cy="68.9" r="95.4" gradientTransform="matrix(1 0 0 -.95 0 248.8)" gradientUnits="userSpaceOnUse"><stop offset=".7" stop-opacity="0"/><stop offset=".9" stop-opacity=".5"/><stop offset="1"/></radialGradient><radialGradient id="d" cx="-340.3" cy="63" r="143.2" gradientTransform="matrix(.15 -.99 -.8 -.12 176.6 -125.4)" gradientUnits="userSpaceOnUse"><stop offset=".8" stop-opacity="0"/><stop offset=".9" stop-opacity=".5"/><stop offset="1"/></radialGradient><radialGradient id="e" cx="113.4" cy="570.2" r="202.4" gradientTransform="matrix(-.04 1 2.13 .08 -1179.5 -106.7)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#35c1f1"/><stop offset=".1" stop-color="#34c1ed"/><stop offset=".2" stop-color="#2fc2df"/><stop offset=".3" stop-color="#2bc3d2"/><stop offset=".7" stop-color="#36c752"/></radialGradient><radialGradient id="f" cx="376.5" cy="568" r="97.3" gradientTransform="matrix(.28

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356), with no line terminators
Category:	downloaded
Size (bytes):	2356
Entropy (8bit):	5.849891991249951
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08dAZCQVm7B1KY6:wsbSUtJfxrqLWWWdV6j1ZAww
MD5:	0C3B4B7AAC71777C1C47B2F7D18F781D
SHA1:	AD5EC61D258054184CBD59C29AA51A2AFFD58B03
SHA-256:	AFAFB0AD43E11B6AECF8E83BF8A306350C489AEA208B51E59BEF0A61B00C1C6A
SHA-512:	ABA75A27B22B930C0A7A662C8D330BCB2AB54FE36364A872979F5D82F9B6C2899C691348AF314F9DC98C3D9C2B141F0C8F2B9736A5DEB1E24382B8C9A2AB5E3A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1027983844/?random=1713468660162&cv=11&fst=1713468660162&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52276)
Category:	downloaded
Size (bytes):	102217
Entropy (8bit):	4.7821044831117785
Encrypted:	false
SSDEEP:	1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq
MD5:	5222E06B77A1692FA2520A219840E6BE
SHA1:	8B4236206A8B86AF3761A244277663046D7FF7EE
SHA-256:	0934B1FC0D3A766D41D3ADF5E7A115875E66E98EBBA408D965A41CF3D2CB4AB5
SHA-512:	CF780BA5DEF29277F562835B0B3A9129CE2ACA8AFC81A294D6A9A7F824A1C5BB81BAC00D23D42946884606B7821642B12E17A2E92F424171446DB2AEA8B8340C
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v6.4.2/css/all.css
Preview:	/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 209383
Category:	downloaded
Size (bytes):	57363
Entropy (8bit):	7.995680611298288
Encrypted:	true
SSDEEP:	1536:nolEsWhlVx8UcOk3if4DzknGulO5C/2krzaWXX:niEsWhJf+z/J5gdr24
MD5:	10B6883A771A55BCB6B5749D0515F172
SHA1:	401309900E66CE15537114EC1C1C7EE7E16EF6E9
SHA-256:	E1C3CE1B77B32FF1793DF29343B91D6F72905C81C9F6EB392063962D51F0A8FF
SHA-512:	62E703A394AE606EBA156854C75E288309CA969C9D37AB2033DF7FE3FC48778D650554B08DF6B51BEF4523CAA69482117ADD9316E507013DC0BDBB7CE27F797D
Malicious:	false
Reputation:	low
URL:	https://d335luupugsy2.cloudfront.net/js/rdstation-popups/bricks/rdstation-popup.min.js?v=1
Preview:	...........kw[Yv..=...k.-.....h..^,..Z....e.y%...h.T.,..2.q...q..3...^Il..S=...c.;^Y.xjU&.t~@...s./.dU;........g.}..\..W.V...tzz<.........`8mt..U'....n..A..:...T.oOt.#)..d\|rz2.......jo..}z.x....`6.......d.xo8{.....'.Y:].._..).}..k6.;....x6..L.^.>....v8~~5.......h.}w..F...s\|.a]UM...i.x.wwg.......>...N.#..8...N.q.....z1.4..Mg4..v.....R..~.u_.m...Qkb..>i.z..5Ig..Q.....O..t.......j.>i.._r..q....TJ......5Tu..v.<...q....;......=Z;....1...............p.v.>......I:...b....sX.w..u..i:[..Yg..$....k.5/ug/O......./_...f...d8zz0xz.r]..m...i...%9N.gV..r...t.T.K6.w..>..syv.r+....v\|y....>~m...fW.).\|...-.)..K:....').tktz\|las.0@...O.Mx3.Ln.!.Ha...hJp..ZO..aSc...`...a[O.&.qi.?[{w8:.q.....l.0.U ua...D...l..Fd....4....v7.,........q.k...{...x3`.l..<.N.l#...[g.^.U..11..Y{.}..\|}0...'<J.k..{.6...O..S.+.tmzzx.N....=...d2.......s.........g...........dx.....X.5....lF.....v.v:9n_.......%.....`.45..w....>...]..X.t.9i.....H....Z...7.....1..%.5.`.kM....RA...?..........

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	7824
Entropy (8bit):	4.447797609065123
Encrypted:	false
SSDEEP:	192:hHWBhS89bZ6mF9V57FYQFMgcJM7JQL06lMwJt5wjlffh:c1FpF9FMgc27sJg
MD5:	C37ADA96A2A1498BBAD077E15B7FD3CE
SHA1:	3F2BE88DE884F044C310F4EAF4DE3162D88824D4
SHA-256:	869505E7A7D2B2B99B94BBE29B5E569B63A336A0C907F186B77EC243B6AEACDD
SHA-512:	675A58F56BE3775E7A520F3672784DEC7A3CDE65084D6248526E8CB003ECE1702F244B6485C6634EECA46D7393BA7125566A5E3F6409F35F4EDC9DCDC502CEC9
Malicious:	false
Reputation:	low
Preview:	<style type="text/css">. #ov_z349840300 {. display:none;. position: fixed;. left: 0px;. top: 0px;. width: 100%;. height: 100%;. text-align: center;. z-index: 99999999;. background-color:#000A;. }. #dp-preferences {. position: fixed;. margin-left: calc(50vw - 400px);. margin-top: calc(50vh - 310px);. min-width: 500px;. max-width: 800px;. max-height: 600px;. color: #26264A;. font-family: Arial, Helvetica, sans-serif;. font-size: 14px;. background-color: #FFFFFF;. box-sizing: initial !important;. -webkit-box-sizing: border-box;box-sizing: border-box;-webkit-font-smoothing: antialiased;. }.. #dp-preferences::after,. #dp-preferences::before,. #dp-preferences ,. #dp-preferences ::after,. #dp-preferences *::before {. box-sizing: initial !important;. }.. .dp-preferences-topbar {. width: 100%;.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1898), with no line terminators
Category:	downloaded
Size (bytes):	1898
Entropy (8bit):	5.118923756006738
Encrypted:	false
SSDEEP:	24:FTeEGdrQmZducLey3D6BBe/+xad5TYKU8gu5j4YEEez1TJy+gCpflHo57TTKA:FT/pe3uBBe/T50WhDmVx85OA
MD5:	EAC1A009AA248D21B9B0AE38CD7AAB65
SHA1:	9DC33552D07960A74DA387DD95DAF793BFEC207A
SHA-256:	7D403C1AFA5C087372347EED02C29DCA6A093C722AEAB4F556C64AEEE2C5338F
SHA-512:	0B29674FAC14D7A2B46F2B0764434A1DC6EE7B9A71D1C26D35378C3A1FDA1BBE985D1942FEB55826D86960FBF362CA1861B25C4B78B646D9A83C947CE8C19F58
Malicious:	false
Reputation:	low
URL:	https://dinamicconsultores.app.questorpublico.com.br/bundles/mainCss?v=Ooa5At86l5X3WqQryTmy0L1v8ZvhQci4CCODkN2LgXg1
Preview:	body{padding-top:40px;padding-bottom:40px;background-color:#f5f5f5}#form-signin{padding-top:50px}#form-signin .form-signin{max-width:360px;padding:19px 29px 29px;margin:0 auto 20px;background-color:#fff;border:1px solid #e5e5e5;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;-webkit-box-shadow:0 1px 2px rgba(0,0,0,.05);-moz-box-shadow:0 1px 2px rgba(0,0,0,.05);box-shadow:0 1px 2px rgba(0,0,0,.05)}#form-signin .form-signin .form-signin-heading,.form-signin .checkbox{margin-bottom:10px}#form-signin .form-signin .form-signin-heading{padding-bottom:15px}#form-signin .form-signin input[type="text"],.form-signin input[type="password"]{font-size:16px;height:auto;margin-bottom:15px;padding:8px 9px 7px 5px}#form-signin .field-validation-error{color:red;font-size:11px;padding-bottom:10px;display:inline-block}#form-signin .form-signin #UserName,.form-signin #Password{background-image:url(/Content/Images/loginicons.jpg);background-repeat:no-repeat;padding-left:40px;color:#888}#f

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31052, version 1.0
Category:	downloaded
Size (bytes):	31052
Entropy (8bit):	7.994212302026679
Encrypted:	true
SSDEEP:	768:O0RiZKVUEuUY9yqDvkLAGxqwSUZZ+ntzoNQG:O0RvFuUY9qn4wSG+C
MD5:	5C4F357D4926FC197D43ABC63B7FCA8C
SHA1:	686AF7000D038D7479ED36B48A8EBB0EA9B98AEA
SHA-256:	1393ACC632C160DEF86B45C2521C8EE742B7E6239D0D90FB95F51D55CF48B9C3
SHA-512:	9F760F0C8C7FE583BBCB8270ABF62C826D33FA6DCEAF820533B64B56742284EC9B750066DAAF9E4D3C0305373D1DB8BD2AD47BBB88573610F0BE2A617E183DD6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-s.woff2
Preview:	wOF2......yL.......@..x...........................u...v...?HVAR.$?MVARb.`?STAT.z'2..2/d.....0.}..N.0..>.6.$.... ...../...I.5l...[..0....q..=7v0..U..@......X..OI.?d,>...nK...I#.".J+...3..kF.s.....>U.s..C..W.U.C..%`e....Y.a..5.{.1...z.......)8....K...p0..Zh.r..J...). .. .......G...]..-^T.z3.....s_Df...Ru....k.+r%2.......[.%.F.Z..?.4....h......P.....%..j.....Y...1.4i.Z.5/.....<...Jw....h:....5.J-.K.&..rqo...SK...2>..0s.l........g........_e..m...D..'...~.q.w.)C,A...A.@....{....4J.#.k.c....G.?.n.=...E......W..]].e..(...[.~...EI.VX....<Hx2`[z...I..z}@)..............,rD.......2.......z.R..t.$;.$.'....<nV.\|....~&A.!...Q...+&...M]........W.0-.<........Ig.+..g..=.....".+..8.d.d..-...O...d<.W/.H$R.D"...\|.....L...).9{./...c(0....oj..xx.^^.nN..........R....c..-.....FK..\|...',.\|..T.N......2...i.,....s..t.*.Z......u..>.e..<....!s..~U....@.$.04..T.j.fL..wA.(6A.l......^."..BI$.....(l..M.l..D'_...f...HA.Qv.6~k.....y....V.#:....{.H:...+...t..d..X.Ty).p..m.../..

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25022)
Category:	downloaded
Size (bytes):	25066
Entropy (8bit):	5.128687519765955
Encrypted:	false
SSDEEP:	768:fTLX+EVxFm6cKibdndptaQ9HuGJswyC/pkTAQYtDT6HJiwknOsN7KOljuOzQYqER:PtVxFm61ib94Q9HuGHiiwkOsN7KOljuy
MD5:	99CB1CA7FC653D4CFC240A74F83FC781
SHA1:	27FFAE219A5FD36C9380995837449405ADBE15B8
SHA-256:	F9A9329601265904D54C430182763D17B07563554581039A81CCD75DC74562A1
SHA-512:	08D20D5A12591F087D4FD13DC51F9BD03FB6255929DA9F673040D67C081AD477A66B0C9DBA1CE7D5BBD4C418D6693A19FCF245A9C810401201CA1BC67AA09767
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.21.0
Preview:	/! elementor-pro - v3.21.0 - 15-04-2024 /.(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[819],{2:(e,t,n)=>{"use strict";var s=n(3203);n(4242);var i=s(n(4774)),o=s(n(9575)),r=s(n(6254)),a=s(n(5161)),l=s(n(5039)),c=s(n(9210)),d=s(n(450)),u=s(n(7660));class ElementorProFrontend extends elementorModules.ViewModule{onInit(){super.onInit(),this.config=ElementorProFrontendConfig,this.modules={},this.initOnReadyComponents()}bindEvents(){jQuery(window).on("elementor/frontend/init",this.onElementorFrontendInit.bind(this))}initModules(){let e={motionFX:i.default,sticky:o.default,codeHighlight:r.default,videoPlaylist:a.default,payments:l.default,progressTracker:c.default};elementorProFrontend.trigger("elementor-pro/modules/init:before"),elementorProFrontend.trigger("elementor-pro/modules/init/before"),e=elementorFrontend.hooks.applyFilters("elementor-pro/frontend/handlers",e),jQuery.each(e,((e,t)=>{this.modules[e]=new t})),this.modules.linkActions={addAction:function(

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65525), with no line terminators
Category:	downloaded
Size (bytes):	70532
Entropy (8bit):	5.658980287899649
Encrypted:	false
SSDEEP:	1536:1MgNvUF5aA3RhHbWzeNO1MuVTHCsi7fxSDCDVR34pO9/0bl/zrWrsps2FUpCnUDA:sSA/WzRJCDOO9cbl/HWr13CscxpYs8cP
MD5:	276718B0D99B0023423619D238C743A5
SHA1:	B90E2B3E2525CACD2FE52D24719EA8067EE67464
SHA-256:	8F212D4547BC4880F1030B5A053E9BB00FEB09B553298A7ED280CA2D7B36218B
SHA-512:	B875BDCE23EA97777399BCD7A5FD55DC6DCA18AA694960D7FBE4BBA245CE6000FCA35E8BCC63716A60BC1B98B5E4A625ED5FC9A193B75E5C63B6518D63008E7B
Malicious:	false
Reputation:	low
URL:	https://cdn.privacytools.com.br/public_api/banner/script/bottom/vXME11817141.js?t=1
Preview:	function dcf876(){window.cookieconsent.initialise({position:"bottom",container:document.getElementById("dp_content_obj2"),layout:"privacy-tools-layout",layouts:{"privacy-tools-layout":'{{close}}<div class="privacy-tools-layout"> <div class="dp-bar-description">{{message}}</div> <div class="dp-bar-actions">{{compliance}}{{link}}</div> </div>'},palette:{popup:{background:"#e9511d"},button:{background:"#FFFFFF"}},content:{dismiss:"Aceitar",policy:"Pol.ticas de cookies",deny:"Rejeitar"},elements:{header:'<span class="cc-header">{{header}}</span>',message:'<span id="cookieconsent:desc" style="color: #FFFFFF !important;" class="cc-message">N.s coletamos cookies para oferecer um servi.o personalizado. Utilize as op..es abaixo para configurar suas prefer.ncias quanto . coleta de cookies.</span><span style="display:none" aria-label="dismiss cookie message" id="dm876B" style="color: #e9511d;" tabindex="0" class="cc-close">×</span>',messagelink:'<span id

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	10092
Entropy (8bit):	7.9661857087062575
Encrypted:	false
SSDEEP:	192:+WYqmIbP5pdUYuPzBVXwbL4wvimzktY1ErQEg5h:5F9pdf45OrYN3gT
MD5:	88B7AFC9C4F5A4B2FEEC9A183DABBB8F
SHA1:	0653648D92A8C3587F67C0E8AD2AD8078F9D8490
SHA-256:	E7F4AA70AD37D1C7E3CC0B77CF788465623B5A52115C0E0772A32C1012453E8B
SHA-512:	BC4A107004D24A50DF98B88455C00C1A603A755E2D47A5AD61181CDA19C9521ED07F18B6962C8666CBF79EDD457630F7EA3A551E08AD78CD2840FAC48BDED0D7
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=600&mh=338
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............&R...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......X...R....pixi............av1C........colrnclx...........ipma.................&Zmdat.....f%z...2.LF....0........l..%eacL8....i..#....X.. ...g...~...ER .aBk..........V...t.....X!j....8.....%..H.{/.5...P..z.H\|c(...c.H.m...CQ...t.1.B...z.Q....$.....Y^X.KG......^..q...We...f.jb`.\|...3.LAZ..k...b.)c....<#'.4.H...../y..3......MMx<...V..].Y.T7....<I.F?kxfL}...."x........]+....F-.[\.zJ.8.... ..W..g'..7..h".,n.H.M.[.I.V...}]...6.C1.1h..Pgu]9^.dx.....H....]..^...Ei=.4..W.......[....^{...-......h..j=...E).Z...o.)...%..@0R=.p....kE.}.....V".n.4fa..0...I.Y._)...q...cC..L../.i.?....y.s..:..C.{...U....!..#^....c...i.....R....'...*uQ....!.{D,.....hV.x;...7..5\.=......_i..........8......6r8..@7n...w...5c..{>.......p+8....,....P..r..q...n.1.......3..u...nzx..n..(.]t..z.\|.LeKg..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38238)
Category:	downloaded
Size (bytes):	38282
Entropy (8bit):	5.2050610199888965
Encrypted:	false
SSDEEP:	768:QdDnHy/adwdddrdDdVdydOdad6dpdLdFdVd65+P6fvqMIOlpwdfu8jbxwid8dHdP:wgaC/dRrIM4g7lv/YVHwhu8jbxwiGd5j
MD5:	CAC9D7AE322CFD0198F4700D5A2859E9
SHA1:	6B48F12010036B84F8E7AEF0E84055CFB1F38BAB
SHA-256:	2A10AB2828A2618F138F34578EFA80307B551FA2C318BBD3085622518FE89588
SHA-512:	80E44F0780B436A7835F6C809AC1261D7272534E8C94E84DA672255F757D1C8552E7166382F4612BB1EED4C588FD89A83DB2D69FF33CB083BFBD19552DF9197B
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.21.0
Preview:	/! elementor-pro - v3.21.0 - 15-04-2024 /."use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[437],{7996:(e,t,n)=>{var s=n(3203),o=s(n(4042)),r=s(n(8528)),i=s(n(7857)),l=s(n(3184)),a=s(n(7043)),d=s(n(4223)),u=s(n(4231)),c=s(n(2741)),m=s(n(3513)),h=s(n(3002)),g=s(n(8650)),f=s(n(6701)),p=s(n(102)),_=s(n(1748)),v=s(n(5438)),b=s(n(2439)),y=s(n(5032)),F=s(n(1474)),M=s(n(2105)),w=s(n(4351)),S=s(n(3159));const extendDefaultHandlers=e=>({...e,...{animatedText:o.default,carousel:r.default,countdown:i.default,hotspot:l.default,form:a.default,gallery:d.default,lottie:u.default,nav_menu:c.default,popup:m.default,posts:h.default,share_buttons:g.default,slides:f.default,social:p.default,themeBuilder:v.default,themeElements:b.default,woocommerce:y.default,tableOfContents:_.default,loopBuilder:F.default,megaMenu:M.default,nestedCarousel:w.default,taxonomyFilter:S.default}});elementorProFrontend.on("elementor-pro/modules/init:before",(()=>{elementorFrontend.hooks.a

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3142), with no line terminators
Category:	downloaded
Size (bytes):	3142
Entropy (8bit):	4.54837517796801
Encrypted:	false
SSDEEP:	96:LXhLAn8SRbJhRv0MduuDYkrJwxoHLWdWs:Th08SRNhBuuDYkVwxoHLWdWs
MD5:	C25D9FE6600F758686BC096DB276F727
SHA1:	67615448C5203BC030309D17C0B79816BB7E06DF
SHA-256:	D3B997669D50BD0530A923DC4DFEB6A64E79AEEE6989A670CF29E4915B5EF6D5
SHA-512:	97AC32B0D4DC423B83F533E920D1C2CB41481AEE34871CAC263F39020E449BE50BE10FFAB547489F87373B4B0C955093A5C822EC81DA1F78C03281B0160A036C
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/uploads/elementor/css/post-2854.css?ver=1710847529
Preview:	.elementor-2854 .elementor-element.elementor-element-55212198:not(.elementor-motion-effects-element-type-background), .elementor-2854 .elementor-element.elementor-element-55212198 > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-color:#FFFFFF;}.elementor-2854 .elementor-element.elementor-element-55212198{border-style:solid;border-width:0px 0px 1px 0px;border-color:#141D3826;transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;}.elementor-2854 .elementor-element.elementor-element-55212198 > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-2854 .elementor-element.elementor-element-524c330e .the-logo img{width:145px;}.elementor-2854 .elementor-element.elementor-element-524c330e > .elementor-widget-container{padding:13px 0px 13px 0px;}.elementor-2854 .elementor-element.elementor-element-2df0dc0f.elementor-column > .elementor-widget-wrap{justify-content:flex-end;}.elementor-2854 .

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11782), with CRLF line terminators
Category:	downloaded
Size (bytes):	12229
Entropy (8bit):	5.130183599606183
Encrypted:	false
SSDEEP:	96:TVx4mle2xoTUc/tpUcLQaDwCzOo/AE5ETlD/R4FPYqJ9j7dnEtEhdjX5OvQFRvs:5xyDtDDrzOoR8h54d9JZ5EShpJOvQFVs
MD5:	15F6DDA8D118290E170924A6B8E6FB73
SHA1:	AAB09D59A6EEDC8088210918AA278B64CEA3EF39
SHA-256:	A3D1B57CDF4187EA8479435AD218267CE2BDBDB9530A303BAD60EFAC7F9269EE
SHA-512:	E2EA8BCDD542BB11D4283D3D864A465685908AB0BD4626DD22277DCA9FAEEA8A8763638ABF3E45A40D49D2625830CA715C8267BCD5C77120C4362BE65EC4C6A0
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-content/themes/engitech/css/bootstrap.css?ver=4.0
Preview:	/!.. Bootstrap v3.3.7 (http://getbootstrap.com).. * Copyright 2011-2018 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //!.. * Generated using the Bootstrap Customizer (<none>).. * Config saved to config.json and <none>.. //!.. * Bootstrap v3.3.7 (http://getbootstrap.com).. * Copyright 2011-2016 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */hr,img,legend{border:0}legend,td,th{padding:0}body,figure{margin:0}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent;color:#337ab7;text-decoration:none}a:ac

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6625), with no line terminators
Category:	downloaded
Size (bytes):	6625
Entropy (8bit):	5.021395915232743
Encrypted:	false
SSDEEP:	192:cvtxGU52v1wAsFYM3qypqEdSmNql44UakS:cvwQ3sFWqxUaP
MD5:	FD7EF2E4737ACD74FD0DCDC3B515E304
SHA1:	0D792B33F12A48EE8AAAF2560A63A5682470645B
SHA-256:	1D52E1AC7D3BC25A8B0FFC257153F9DD50249F96FE9A4DF5E0D771241A69062C
SHA-512:	3C4358F9605F1CCE097F36689099B8364C43CC360C3D4F5CA77BE5CEE43BB818C6562496F26AD57CE44C34C474FE4CCB6DEED01A14ED259D498F5BC17F9532C7
Malicious:	false
Reputation:	low
URL:	https://www.questor.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Preview:	var runtime=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i=(w="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",a=w.asyncIterator\|\|"@@asyncIterator",c=w.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(r){u=function(t,e,r){return t[e]=r}}function h(t,r,n,i){var a,c,u,h;r=r&&r.prototype instanceof v?r:v,r=Object.create(r.prototype),i=new O(i\|\|[]);return o(r,"_invoke",{value:(a=t,c=n,u=i,h=f,function(t,r){if(h===p)throw new Error("Generator is already running");if(h===y){if("throw"===t)throw r;return{value:e,done:!0}}for(u.method=t,u.arg=r;;){var n=u.delegate;if(n&&(n=function t(r,n){var o=n.method,i=r.iterator[o];return i===e?(n.delegate=null,"throw"===o&&r.iterator.return&&(n.method="return",n.arg=e,t(r,n),"throw"===n.method)\|\|"return"!==o&&(n.method="throw",n.arg=new TypeError("The iterator

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 21:29:39.046056032 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 18, 2024 21:29:41.171084881 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 21:29:48.471179008 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:48.471271038 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:48.471332073 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:48.471657991 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:48.471697092 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:48.488281965 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:48.488373041 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:48.488636971 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:48.489105940 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:48.489155054 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.156239033 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.156651974 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.156716108 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.158190966 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.158267975 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.159393072 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.159502029 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.159616947 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.159648895 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.175381899 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.175841093 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.175908089 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.179527044 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.179620981 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.180053949 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.180259943 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.202728987 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.235086918 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.235153913 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.280968904 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.399949074 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.400051117 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.400120974 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.400644064 CEST	49735	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.400667906 CEST	443	49735	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.404748917 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.452128887 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649127960 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649166107 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649174929 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649189949 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649199963 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649274111 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.649329901 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.649373055 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.650424004 CEST	49736	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.650450945 CEST	443	49736	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.690768003 CEST	49739	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.690833092 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.690912008 CEST	49739	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.691267967 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.691303015 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.691363096 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.691684008 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.691729069 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.691801071 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.691836119 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.691863060 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.691917896 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692085981 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692188978 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.692262888 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692281961 CEST	49739	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692301035 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.692431927 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692466974 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.692537069 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692554951 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.692672014 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692703009 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.692790985 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.692804098 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.693136930 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.693157911 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:49.693227053 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.693357944 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:49.693371058 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.146250963 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.146469116 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.146711111 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.146744967 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.147114992 CEST	49739	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.147176027 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.147700071 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.148303986 CEST	49739	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.148384094 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.148551941 CEST	49739	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.149112940 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.149355888 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.149370909 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.150357008 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.150459051 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.150804043 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.150837898 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.150976896 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.151046038 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.151200056 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.151535034 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.151546001 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.151834965 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.151855946 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.151927948 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.151927948 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.151941061 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.152014017 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.153045893 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.153445005 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.153512955 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.153584957 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.153592110 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.153621912 CEST	443	49743	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.154201031 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.154216051 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.154901981 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.155303001 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.155311108 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.155661106 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.156119108 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.156862020 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.156936884 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.158081055 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.158159018 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.158754110 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.158839941 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.159146070 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.159152985 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.159286976 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.159295082 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.196125031 CEST	443	49739	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.201343060 CEST	49743	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.201343060 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.201345921 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.201452971 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.201756954 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.201776981 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.247992039 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.579056025 CEST	49745	443	192.168.2.4	142.250.9.147
Apr 18, 2024 21:29:50.579101086 CEST	443	49745	142.250.9.147	192.168.2.4
Apr 18, 2024 21:29:50.579190016 CEST	49745	443	192.168.2.4	142.250.9.147
Apr 18, 2024 21:29:50.582504034 CEST	49745	443	192.168.2.4	142.250.9.147
Apr 18, 2024 21:29:50.582526922 CEST	443	49745	142.250.9.147	192.168.2.4
Apr 18, 2024 21:29:50.636610985 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.636668921 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.636759996 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.636822939 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.636859894 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.636919022 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.638309002 CEST	49741	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.638339996 CEST	443	49741	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.639269114 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.639447927 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.639604092 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.646476984 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.646557093 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.646576881 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.646608114 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.646636963 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.646667004 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.646748066 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.646800995 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.648243904 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.648307085 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.648370028 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.648411036 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.648477077 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.648479939 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.648531914 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.648613930 CEST	49742	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.648631096 CEST	443	49742	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.655029058 CEST	49740	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.655057907 CEST	443	49740	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.662009954 CEST	49744	443	192.168.2.4	186.250.92.55
Apr 18, 2024 21:29:50.662039042 CEST	443	49744	186.250.92.55	192.168.2.4
Apr 18, 2024 21:29:50.780962944 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 21:29:50.840380907 CEST	443	49745	142.250.9.147	192.168.2.4
Apr 18, 2024 21:29:50.840998888 CEST	49745	443	192.168.2.4	142.250.9.147
Apr 18, 2024 21:29:50.841016054 CEST	443	49745	142.250.9.147	192.168.2.4
Apr 18, 2024 21:29:50.842664957 CEST	443	49745	142.250.9.147	192.168.2.4
Apr 18, 2024 21:29:50.842736006 CEST	49745	443	192.168.2.4	142.250.9.147
Apr 18, 2024 21:29:50.848754883 CEST	49745	443	192.168.2.4	142.250.9.147

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 21:29:48.288088083 CEST	192.168.2.4	1.1.1.1	0xe15	Standard query (0)	dinamicconsultores.app.questorpublico.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:48.288300991 CEST	192.168.2.4	1.1.1.1	0x7f97	Standard query (0)	dinamicconsultores.app.questorpublico.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:29:50.470101118 CEST	192.168.2.4	1.1.1.1	0xd1f2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.472982883 CEST	192.168.2.4	1.1.1.1	0xfa3a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:29:51.569467068 CEST	192.168.2.4	1.1.1.1	0x7518	Standard query (0)	icons.iconarchive.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.569928885 CEST	192.168.2.4	1.1.1.1	0x1fa2	Standard query (0)	icons.iconarchive.com	65	IN (0x0001)	false
Apr 18, 2024 21:29:51.570215940 CEST	192.168.2.4	1.1.1.1	0x5df3	Standard query (0)	design.firefox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.570337057 CEST	192.168.2.4	1.1.1.1	0x36c2	Standard query (0)	design.firefox.com	65	IN (0x0001)	false
Apr 18, 2024 21:29:51.570558071 CEST	192.168.2.4	1.1.1.1	0x76db	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.570671082 CEST	192.168.2.4	1.1.1.1	0xf1c9	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Apr 18, 2024 21:29:52.175847054 CEST	192.168.2.4	1.1.1.1	0x2189	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.176150084 CEST	192.168.2.4	1.1.1.1	0xffcf	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Apr 18, 2024 21:29:52.195436954 CEST	192.168.2.4	1.1.1.1	0x63ed	Standard query (0)	icons.iconarchive.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.195549965 CEST	192.168.2.4	1.1.1.1	0xe69c	Standard query (0)	icons.iconarchive.com	65	IN (0x0001)	false
Apr 18, 2024 21:29:52.503609896 CEST	192.168.2.4	1.1.1.1	0x9ffe	Standard query (0)	acorn.firefox.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.504311085 CEST	192.168.2.4	1.1.1.1	0xc962	Standard query (0)	acorn.firefox.com	65	IN (0x0001)	false
Apr 18, 2024 21:29:52.537440062 CEST	192.168.2.4	1.1.1.1	0x8f5c	Standard query (0)	dinamicconsultores.app.questorpublico.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.537811995 CEST	192.168.2.4	1.1.1.1	0x1c1	Standard query (0)	dinamicconsultores.app.questorpublico.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:29:55.221961975 CEST	192.168.2.4	1.1.1.1	0xed4b	Standard query (0)	default.supernova-docs.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:55.222119093 CEST	192.168.2.4	1.1.1.1	0x5428	Standard query (0)	default.supernova-docs.io	65	IN (0x0001)	false
Apr 18, 2024 21:29:56.390362024 CEST	192.168.2.4	1.1.1.1	0xf739	Standard query (0)	auth.supernova.io	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:56.390487909 CEST	192.168.2.4	1.1.1.1	0xe347	Standard query (0)	auth.supernova.io	65	IN (0x0001)	false
Apr 18, 2024 21:30:08.986150026 CEST	192.168.2.4	1.1.1.1	0x6884	Standard query (0)	www.questor.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:08.986150026 CEST	192.168.2.4	1.1.1.1	0xd73e	Standard query (0)	www.questor.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:11.417517900 CEST	192.168.2.4	1.1.1.1	0x463b	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:11.418061018 CEST	192.168.2.4	1.1.1.1	0xb5b3	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:11.418509960 CEST	192.168.2.4	1.1.1.1	0xd82f	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:11.418940067 CEST	192.168.2.4	1.1.1.1	0x16ac	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:21.740569115 CEST	192.168.2.4	1.1.1.1	0x55bb	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.740956068 CEST	192.168.2.4	1.1.1.1	0x8f6e	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:21.741946936 CEST	192.168.2.4	1.1.1.1	0x8fba	Standard query (0)	cdn.leadster.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.742274046 CEST	192.168.2.4	1.1.1.1	0x4128	Standard query (0)	cdn.leadster.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:22.600502968 CEST	192.168.2.4	1.1.1.1	0x3044	Standard query (0)	cdn.privacytools.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.601588011 CEST	192.168.2.4	1.1.1.1	0xb80a	Standard query (0)	cdn.privacytools.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:22.868891001 CEST	192.168.2.4	1.1.1.1	0x650e	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.868891954 CEST	192.168.2.4	1.1.1.1	0xc42d	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:22.879779100 CEST	192.168.2.4	1.1.1.1	0xd6d8	Standard query (0)	d335luupugsy2.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.879983902 CEST	192.168.2.4	1.1.1.1	0x1830	Standard query (0)	d335luupugsy2.cloudfront.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:22.981004000 CEST	192.168.2.4	1.1.1.1	0x22d3	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.981117010 CEST	192.168.2.4	1.1.1.1	0x6c8c	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Apr 18, 2024 21:30:23.496932983 CEST	192.168.2.4	1.1.1.1	0x31b9	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.497149944 CEST	192.168.2.4	1.1.1.1	0x98a8	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:23.900075912 CEST	192.168.2.4	1.1.1.1	0xaa3f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.900430918 CEST	192.168.2.4	1.1.1.1	0xb585	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:24.243398905 CEST	192.168.2.4	1.1.1.1	0xd529	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.243768930 CEST	192.168.2.4	1.1.1.1	0x362b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:25.298506975 CEST	192.168.2.4	1.1.1.1	0xddb9	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.298635960 CEST	192.168.2.4	1.1.1.1	0x1e59	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:25.298922062 CEST	192.168.2.4	1.1.1.1	0x3a02	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.299041033 CEST	192.168.2.4	1.1.1.1	0x5878	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:25.383596897 CEST	192.168.2.4	1.1.1.1	0xd11c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.383761883 CEST	192.168.2.4	1.1.1.1	0x73bd	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:25.640974998 CEST	192.168.2.4	1.1.1.1	0x870b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.641073942 CEST	192.168.2.4	1.1.1.1	0xb4f1	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:25.746443033 CEST	192.168.2.4	1.1.1.1	0x889a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.746620893 CEST	192.168.2.4	1.1.1.1	0x2237	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:26.023761034 CEST	192.168.2.4	1.1.1.1	0xad6c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.023895025 CEST	192.168.2.4	1.1.1.1	0x89c6	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:26.211935043 CEST	192.168.2.4	1.1.1.1	0xdd9f	Standard query (0)	l.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.212169886 CEST	192.168.2.4	1.1.1.1	0xd990	Standard query (0)	l.clarity.ms	65	IN (0x0001)	false
Apr 18, 2024 21:30:26.590138912 CEST	192.168.2.4	1.1.1.1	0xa248	Standard query (0)	app.leadster.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.590289116 CEST	192.168.2.4	1.1.1.1	0xefee	Standard query (0)	app.leadster.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:27.610955954 CEST	192.168.2.4	1.1.1.1	0xc2fb	Standard query (0)	pageview-notify.rdstation.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.616885900 CEST	192.168.2.4	1.1.1.1	0xee25	Standard query (0)	pageview-notify.rdstation.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:27.694736958 CEST	192.168.2.4	1.1.1.1	0x3c70	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.694895029 CEST	192.168.2.4	1.1.1.1	0x729e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:28.274380922 CEST	192.168.2.4	1.1.1.1	0x5532	Standard query (0)	cdn.privacytools.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.274558067 CEST	192.168.2.4	1.1.1.1	0xcc56	Standard query (0)	cdn.privacytools.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:28.315212965 CEST	192.168.2.4	1.1.1.1	0xd3c6	Standard query (0)	app.leadster.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.315347910 CEST	192.168.2.4	1.1.1.1	0x7481	Standard query (0)	app.leadster.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:28.318043947 CEST	192.168.2.4	1.1.1.1	0xc68b	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.318124056 CEST	192.168.2.4	1.1.1.1	0x78cb	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Apr 18, 2024 21:30:28.323163033 CEST	192.168.2.4	1.1.1.1	0x1d11	Standard query (0)	pageview-notify.rdstation.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.323398113 CEST	192.168.2.4	1.1.1.1	0x1395	Standard query (0)	pageview-notify.rdstation.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:28.560635090 CEST	192.168.2.4	1.1.1.1	0xa0fd	Standard query (0)	www.questor.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.561074972 CEST	192.168.2.4	1.1.1.1	0x4022	Standard query (0)	www.questor.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:28.988010883 CEST	192.168.2.4	1.1.1.1	0x45eb	Standard query (0)	www.questor.net.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.988420963 CEST	192.168.2.4	1.1.1.1	0xa846	Standard query (0)	www.questor.net.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:29.498199940 CEST	192.168.2.4	1.1.1.1	0x7c9b	Standard query (0)	popups.rdstation.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:29.498374939 CEST	192.168.2.4	1.1.1.1	0xf5bb	Standard query (0)	popups.rdstation.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:29.844898939 CEST	192.168.2.4	1.1.1.1	0x497e	Standard query (0)	www.questor.net.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:29.845099926 CEST	192.168.2.4	1.1.1.1	0x10ca	Standard query (0)	www.questor.net.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:29.955241919 CEST	192.168.2.4	1.1.1.1	0xaa35	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:29.955404997 CEST	192.168.2.4	1.1.1.1	0xb404	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Apr 18, 2024 21:30:30.370867968 CEST	192.168.2.4	1.1.1.1	0x3a33	Standard query (0)	popups.rdstation.com.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:30.370987892 CEST	192.168.2.4	1.1.1.1	0x55ef	Standard query (0)	popups.rdstation.com.br	65	IN (0x0001)	false
Apr 18, 2024 21:30:34.898477077 CEST	192.168.2.4	1.1.1.1	0x2852	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:34.899030924 CEST	192.168.2.4	1.1.1.1	0x11a5	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:35.896845102 CEST	192.168.2.4	1.1.1.1	0xc7cf	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:35.897392988 CEST	192.168.2.4	1.1.1.1	0xbc34	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:35.927215099 CEST	192.168.2.4	1.1.1.1	0x68cc	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:36.027806044 CEST	192.168.2.4	1.1.1.1	0xdbe2	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:37.279731989 CEST	192.168.2.4	1.1.1.1	0xfa1f	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.280113935 CEST	192.168.2.4	1.1.1.1	0x7521	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:37.398929119 CEST	192.168.2.4	1.1.1.1	0x5341	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.399211884 CEST	192.168.2.4	1.1.1.1	0xf84b	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:37.680465937 CEST	192.168.2.4	1.1.1.1	0x8f1c	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.680840969 CEST	192.168.2.4	1.1.1.1	0x9041	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:40.811880112 CEST	192.168.2.4	1.1.1.1	0x82d8	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.812176943 CEST	192.168.2.4	1.1.1.1	0x5d44	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:43.351778984 CEST	192.168.2.4	1.1.1.1	0x92b4	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.352180004 CEST	192.168.2.4	1.1.1.1	0x3818	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:44.454883099 CEST	192.168.2.4	1.1.1.1	0xf604	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.455205917 CEST	192.168.2.4	1.1.1.1	0x4a62	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:46.069628954 CEST	192.168.2.4	1.1.1.1	0x9228	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.070103884 CEST	192.168.2.4	1.1.1.1	0xe661	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:46.070568085 CEST	192.168.2.4	1.1.1.1	0x14cd	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.070894957 CEST	192.168.2.4	1.1.1.1	0xbda3	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:47.196264982 CEST	192.168.2.4	1.1.1.1	0x7110	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.196810007 CEST	192.168.2.4	1.1.1.1	0xf5de	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:47.789439917 CEST	192.168.2.4	1.1.1.1	0xff6f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.789671898 CEST	192.168.2.4	1.1.1.1	0xe3d9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:47.962044954 CEST	192.168.2.4	1.1.1.1	0x4ee4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.962201118 CEST	192.168.2.4	1.1.1.1	0xa428	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:30:47.970573902 CEST	192.168.2.4	1.1.1.1	0xecb0	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.970953941 CEST	192.168.2.4	1.1.1.1	0xdcf7	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:48.360783100 CEST	192.168.2.4	1.1.1.1	0x814d	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.360922098 CEST	192.168.2.4	1.1.1.1	0xce9c	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:50.238965034 CEST	192.168.2.4	1.1.1.1	0x1964	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.239156008 CEST	192.168.2.4	1.1.1.1	0xdabb	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 18, 2024 21:30:52.974562883 CEST	192.168.2.4	1.1.1.1	0xfb56	Standard query (0)	www.questor.net.br	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:52.974817991 CEST	192.168.2.4	1.1.1.1	0x7c1a	Standard query (0)	www.questor.net.br	65	IN (0x0001)	false
Apr 18, 2024 21:31:16.971739054 CEST	192.168.2.4	1.1.1.1	0xef67	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:16.971740007 CEST	192.168.2.4	1.1.1.1	0xcd75	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:31:17.954011917 CEST	192.168.2.4	1.1.1.1	0xaede	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.954186916 CEST	192.168.2.4	1.1.1.1	0xa45a	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 21:29:48.426418066 CEST	1.1.1.1	192.168.2.4	0xe15	No error (0)	dinamicconsultores.app.questorpublico.com.br	zenapp02.app.questorpublico.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:48.426418066 CEST	1.1.1.1	192.168.2.4	0xe15	No error (0)	zenapp02.app.questorpublico.com.br		186.250.92.55	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:48.596549034 CEST	1.1.1.1	192.168.2.4	0x7f97	No error (0)	dinamicconsultores.app.questorpublico.com.br	zenapp02.app.questorpublico.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:50.574810982 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.574810982 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.574810982 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.574810982 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.574810982 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.574810982 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:50.577513933 CEST	1.1.1.1	192.168.2.4	0xfa3a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:29:51.676891088 CEST	1.1.1.1	192.168.2.4	0x1fa2	No error (0)	icons.iconarchive.com			65	IN (0x0001)	false
Apr 18, 2024 21:29:51.678128004 CEST	1.1.1.1	192.168.2.4	0x76db	No error (0)	upload.wikimedia.org		208.80.154.240	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.678164005 CEST	1.1.1.1	192.168.2.4	0x7518	No error (0)	icons.iconarchive.com		104.21.235.214	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.678164005 CEST	1.1.1.1	192.168.2.4	0x7518	No error (0)	icons.iconarchive.com		104.21.235.213	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.750138998 CEST	1.1.1.1	192.168.2.4	0x5df3	No error (0)	design.firefox.com	prod.refractr.mozit.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:51.750138998 CEST	1.1.1.1	192.168.2.4	0x5df3	No error (0)	prod.refractr.mozit.cloud		44.236.48.31	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.750138998 CEST	1.1.1.1	192.168.2.4	0x5df3	No error (0)	prod.refractr.mozit.cloud		44.236.72.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.750138998 CEST	1.1.1.1	192.168.2.4	0x5df3	No error (0)	prod.refractr.mozit.cloud		44.235.246.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:51.877403975 CEST	1.1.1.1	192.168.2.4	0x36c2	No error (0)	design.firefox.com	prod.refractr.mozit.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:52.280458927 CEST	1.1.1.1	192.168.2.4	0x2189	No error (0)	upload.wikimedia.org		208.80.154.240	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.302788973 CEST	1.1.1.1	192.168.2.4	0x63ed	No error (0)	icons.iconarchive.com		104.21.235.213	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.302788973 CEST	1.1.1.1	192.168.2.4	0x63ed	No error (0)	icons.iconarchive.com		104.21.235.214	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.304008961 CEST	1.1.1.1	192.168.2.4	0xe69c	No error (0)	icons.iconarchive.com			65	IN (0x0001)	false
Apr 18, 2024 21:29:52.647445917 CEST	1.1.1.1	192.168.2.4	0x8f5c	No error (0)	dinamicconsultores.app.questorpublico.com.br	zenapp02.app.questorpublico.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:52.647445917 CEST	1.1.1.1	192.168.2.4	0x8f5c	No error (0)	zenapp02.app.questorpublico.com.br		186.250.92.55	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.660881996 CEST	1.1.1.1	192.168.2.4	0x1c1	No error (0)	dinamicconsultores.app.questorpublico.com.br	zenapp02.app.questorpublico.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:52.680529118 CEST	1.1.1.1	192.168.2.4	0x9ffe	No error (0)	acorn.firefox.com	advisory-snail-red.custom.supernova-docs.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:52.680529118 CEST	1.1.1.1	192.168.2.4	0x9ffe	No error (0)	advisory-snail-red.custom.supernova-docs.io		34.246.128.183	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:52.859441996 CEST	1.1.1.1	192.168.2.4	0xc962	No error (0)	acorn.firefox.com	advisory-snail-red.custom.supernova-docs.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:29:55.406039000 CEST	1.1.1.1	192.168.2.4	0xed4b	No error (0)	default.supernova-docs.io		52.30.252.71	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:55.406039000 CEST	1.1.1.1	192.168.2.4	0xed4b	No error (0)	default.supernova-docs.io		54.195.94.143	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:56.525333881 CEST	1.1.1.1	192.168.2.4	0xf739	No error (0)	auth.supernova.io		18.244.202.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:56.525333881 CEST	1.1.1.1	192.168.2.4	0xf739	No error (0)	auth.supernova.io		18.244.202.81	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:56.525333881 CEST	1.1.1.1	192.168.2.4	0xf739	No error (0)	auth.supernova.io		18.244.202.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:29:56.525333881 CEST	1.1.1.1	192.168.2.4	0xf739	No error (0)	auth.supernova.io		18.244.202.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:04.109167099 CEST	1.1.1.1	192.168.2.4	0x438f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:04.109167099 CEST	1.1.1.1	192.168.2.4	0x438f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:05.631244898 CEST	1.1.1.1	192.168.2.4	0xbce7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:05.631244898 CEST	1.1.1.1	192.168.2.4	0xbce7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:09.227106094 CEST	1.1.1.1	192.168.2.4	0xd73e	No error (0)	www.questor.com.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:09.227106094 CEST	1.1.1.1	192.168.2.4	0xd73e	No error (0)	questor.com.br		209.14.140.191	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:09.227174997 CEST	1.1.1.1	192.168.2.4	0x6884	No error (0)	www.questor.com.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:11.523178101 CEST	1.1.1.1	192.168.2.4	0x16ac	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:11.523231983 CEST	1.1.1.1	192.168.2.4	0xd82f	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:11.523653030 CEST	1.1.1.1	192.168.2.4	0xb5b3	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:11.528798103 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:11.528798103 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.845350981 CEST	1.1.1.1	192.168.2.4	0x55bb	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:21.845350981 CEST	1.1.1.1	192.168.2.4	0x55bb	No error (0)	scontent.xx.fbcdn.net		31.13.65.7	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.845654964 CEST	1.1.1.1	192.168.2.4	0x8f6e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:21.848825932 CEST	1.1.1.1	192.168.2.4	0x8fba	No error (0)	cdn.leadster.com.br		172.67.75.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.848825932 CEST	1.1.1.1	192.168.2.4	0x8fba	No error (0)	cdn.leadster.com.br		104.26.10.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.848825932 CEST	1.1.1.1	192.168.2.4	0x8fba	No error (0)	cdn.leadster.com.br		104.26.11.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:21.850287914 CEST	1.1.1.1	192.168.2.4	0x4128	No error (0)	cdn.leadster.com.br			65	IN (0x0001)	false
Apr 18, 2024 21:30:22.707215071 CEST	1.1.1.1	192.168.2.4	0x3044	No error (0)	cdn.privacytools.com.br		172.67.74.112	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.707215071 CEST	1.1.1.1	192.168.2.4	0x3044	No error (0)	cdn.privacytools.com.br		104.26.10.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.707215071 CEST	1.1.1.1	192.168.2.4	0x3044	No error (0)	cdn.privacytools.com.br		104.26.11.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:22.709811926 CEST	1.1.1.1	192.168.2.4	0xb80a	No error (0)	cdn.privacytools.com.br			65	IN (0x0001)	false
Apr 18, 2024 21:30:22.973576069 CEST	1.1.1.1	192.168.2.4	0xc42d	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:22.974466085 CEST	1.1.1.1	192.168.2.4	0x650e	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.015103102 CEST	1.1.1.1	192.168.2.4	0xd6d8	No error (0)	d335luupugsy2.cloudfront.net		3.161.169.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.015103102 CEST	1.1.1.1	192.168.2.4	0xd6d8	No error (0)	d335luupugsy2.cloudfront.net		3.161.169.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.015103102 CEST	1.1.1.1	192.168.2.4	0xd6d8	No error (0)	d335luupugsy2.cloudfront.net		3.161.169.59	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.015103102 CEST	1.1.1.1	192.168.2.4	0xd6d8	No error (0)	d335luupugsy2.cloudfront.net		3.161.169.206	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.086390972 CEST	1.1.1.1	192.168.2.4	0x6c8c	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.086390972 CEST	1.1.1.1	192.168.2.4	0x6c8c	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.090826988 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.090826988 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.090826988 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.090826988 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.090826988 CEST	1.1.1.1	192.168.2.4	0x22d3	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:23.601351976 CEST	1.1.1.1	192.168.2.4	0x31b9	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.601351976 CEST	1.1.1.1	192.168.2.4	0x31b9	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.601779938 CEST	1.1.1.1	192.168.2.4	0x98a8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:23.601779938 CEST	1.1.1.1	192.168.2.4	0x98a8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:24.005019903 CEST	1.1.1.1	192.168.2.4	0xaa3f	No error (0)	td.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.005019903 CEST	1.1.1.1	192.168.2.4	0xaa3f	No error (0)	td.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.005019903 CEST	1.1.1.1	192.168.2.4	0xaa3f	No error (0)	td.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.005019903 CEST	1.1.1.1	192.168.2.4	0xaa3f	No error (0)	td.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.348261118 CEST	1.1.1.1	192.168.2.4	0xd529	No error (0)	googleads.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.348261118 CEST	1.1.1.1	192.168.2.4	0xd529	No error (0)	googleads.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.348261118 CEST	1.1.1.1	192.168.2.4	0xd529	No error (0)	googleads.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.348261118 CEST	1.1.1.1	192.168.2.4	0xd529	No error (0)	googleads.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:24.349474907 CEST	1.1.1.1	192.168.2.4	0x362b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 21:30:25.403449059 CEST	1.1.1.1	192.168.2.4	0x3a02	No error (0)	stats.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403449059 CEST	1.1.1.1	192.168.2.4	0x3a02	No error (0)	stats.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403449059 CEST	1.1.1.1	192.168.2.4	0x3a02	No error (0)	stats.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403449059 CEST	1.1.1.1	192.168.2.4	0x3a02	No error (0)	stats.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403520107 CEST	1.1.1.1	192.168.2.4	0xddb9	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403520107 CEST	1.1.1.1	192.168.2.4	0xddb9	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403520107 CEST	1.1.1.1	192.168.2.4	0xddb9	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403520107 CEST	1.1.1.1	192.168.2.4	0xddb9	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.403520107 CEST	1.1.1.1	192.168.2.4	0xddb9	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.488275051 CEST	1.1.1.1	192.168.2.4	0xd11c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.488275051 CEST	1.1.1.1	192.168.2.4	0xd11c	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.489087105 CEST	1.1.1.1	192.168.2.4	0x73bd	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.745451927 CEST	1.1.1.1	192.168.2.4	0x870b	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.745451927 CEST	1.1.1.1	192.168.2.4	0x870b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.746422052 CEST	1.1.1.1	192.168.2.4	0xb4f1	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.746422052 CEST	1.1.1.1	192.168.2.4	0xb4f1	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:25.851233006 CEST	1.1.1.1	192.168.2.4	0x889a	No error (0)	www.google.com		142.251.15.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.851233006 CEST	1.1.1.1	192.168.2.4	0x889a	No error (0)	www.google.com		142.251.15.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.851233006 CEST	1.1.1.1	192.168.2.4	0x889a	No error (0)	www.google.com		142.251.15.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.851233006 CEST	1.1.1.1	192.168.2.4	0x889a	No error (0)	www.google.com		142.251.15.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.851233006 CEST	1.1.1.1	192.168.2.4	0x889a	No error (0)	www.google.com		142.251.15.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.851233006 CEST	1.1.1.1	192.168.2.4	0x889a	No error (0)	www.google.com		142.251.15.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:25.852319956 CEST	1.1.1.1	192.168.2.4	0x2237	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:26.128257990 CEST	1.1.1.1	192.168.2.4	0x89c6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:26.128318071 CEST	1.1.1.1	192.168.2.4	0xad6c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:26.128318071 CEST	1.1.1.1	192.168.2.4	0xad6c	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.319236040 CEST	1.1.1.1	192.168.2.4	0xd990	No error (0)	l.clarity.ms	vmss-clarity-ingest-eus-e.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:26.320271015 CEST	1.1.1.1	192.168.2.4	0xdd9f	No error (0)	l.clarity.ms	vmss-clarity-ingest-eus-e.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:26.697469950 CEST	1.1.1.1	192.168.2.4	0xa248	No error (0)	app.leadster.com.br		172.67.75.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.697469950 CEST	1.1.1.1	192.168.2.4	0xa248	No error (0)	app.leadster.com.br		104.26.10.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.697469950 CEST	1.1.1.1	192.168.2.4	0xa248	No error (0)	app.leadster.com.br		104.26.11.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:26.697957993 CEST	1.1.1.1	192.168.2.4	0xefee	No error (0)	app.leadster.com.br			65	IN (0x0001)	false
Apr 18, 2024 21:30:27.717468977 CEST	1.1.1.1	192.168.2.4	0xc2fb	No error (0)	pageview-notify.rdstation.com.br	k8s-production.rdops.systems		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:27.717468977 CEST	1.1.1.1	192.168.2.4	0xc2fb	No error (0)	k8s-production.rdops.systems		35.223.116.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.730750084 CEST	1.1.1.1	192.168.2.4	0xee25	No error (0)	pageview-notify.rdstation.com.br	k8s-production.rdops.systems		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:27.799535990 CEST	1.1.1.1	192.168.2.4	0x3c70	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.799535990 CEST	1.1.1.1	192.168.2.4	0x3c70	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.799535990 CEST	1.1.1.1	192.168.2.4	0x3c70	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.799535990 CEST	1.1.1.1	192.168.2.4	0x3c70	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.799535990 CEST	1.1.1.1	192.168.2.4	0x3c70	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.799535990 CEST	1.1.1.1	192.168.2.4	0x3c70	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:27.800775051 CEST	1.1.1.1	192.168.2.4	0x729e	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:28.422331095 CEST	1.1.1.1	192.168.2.4	0x7481	No error (0)	app.leadster.com.br			65	IN (0x0001)	false
Apr 18, 2024 21:30:28.422629118 CEST	1.1.1.1	192.168.2.4	0xc68b	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.422629118 CEST	1.1.1.1	192.168.2.4	0xc68b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.423713923 CEST	1.1.1.1	192.168.2.4	0x78cb	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.423713923 CEST	1.1.1.1	192.168.2.4	0x78cb	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.428852081 CEST	1.1.1.1	192.168.2.4	0x1395	No error (0)	pageview-notify.rdstation.com.br	k8s-production.rdops.systems		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.445820093 CEST	1.1.1.1	192.168.2.4	0x1d11	No error (0)	pageview-notify.rdstation.com.br	k8s-production.rdops.systems		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.445820093 CEST	1.1.1.1	192.168.2.4	0x1d11	No error (0)	k8s-production.rdops.systems		35.223.116.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.482866049 CEST	1.1.1.1	192.168.2.4	0xcc56	No error (0)	cdn.privacytools.com.br			65	IN (0x0001)	false
Apr 18, 2024 21:30:28.483154058 CEST	1.1.1.1	192.168.2.4	0x5532	No error (0)	cdn.privacytools.com.br		104.26.10.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.483154058 CEST	1.1.1.1	192.168.2.4	0x5532	No error (0)	cdn.privacytools.com.br		104.26.11.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.483154058 CEST	1.1.1.1	192.168.2.4	0x5532	No error (0)	cdn.privacytools.com.br		172.67.74.112	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.550961018 CEST	1.1.1.1	192.168.2.4	0xd3c6	No error (0)	app.leadster.com.br		104.26.10.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.550961018 CEST	1.1.1.1	192.168.2.4	0xd3c6	No error (0)	app.leadster.com.br		172.67.75.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.550961018 CEST	1.1.1.1	192.168.2.4	0xd3c6	No error (0)	app.leadster.com.br		104.26.11.199	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:28.846822023 CEST	1.1.1.1	192.168.2.4	0x4022	No error (0)	www.questor.com.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.903249025 CEST	1.1.1.1	192.168.2.4	0xa0fd	No error (0)	www.questor.com.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:28.903249025 CEST	1.1.1.1	192.168.2.4	0xa0fd	No error (0)	questor.com.br		209.14.140.191	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:29.391138077 CEST	1.1.1.1	192.168.2.4	0x45eb	No error (0)	www.questor.net.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:29.391138077 CEST	1.1.1.1	192.168.2.4	0x45eb	No error (0)	questor.com.br		209.14.140.191	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:29.392541885 CEST	1.1.1.1	192.168.2.4	0xa846	No error (0)	www.questor.net.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:29.607897043 CEST	1.1.1.1	192.168.2.4	0xf5bb	No error (0)	popups.rdstation.com.br	pages.rdstation.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:29.739857912 CEST	1.1.1.1	192.168.2.4	0x7c9b	No error (0)	popups.rdstation.com.br	pages.rdstation.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:29.739857912 CEST	1.1.1.1	192.168.2.4	0x7c9b	No error (0)	pages.rdstation.com.br		34.68.90.188	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:30.060039997 CEST	1.1.1.1	192.168.2.4	0xaa35	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.060039997 CEST	1.1.1.1	192.168.2.4	0xaa35	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.061026096 CEST	1.1.1.1	192.168.2.4	0xb404	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.061026096 CEST	1.1.1.1	192.168.2.4	0xb404	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.258614063 CEST	1.1.1.1	192.168.2.4	0x497e	No error (0)	www.questor.net.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.258614063 CEST	1.1.1.1	192.168.2.4	0x497e	No error (0)	questor.com.br		209.14.140.191	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:30.299304962 CEST	1.1.1.1	192.168.2.4	0x10ca	No error (0)	www.questor.net.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.480243921 CEST	1.1.1.1	192.168.2.4	0x55ef	No error (0)	popups.rdstation.com.br	pages.rdstation.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.494931936 CEST	1.1.1.1	192.168.2.4	0x3a33	No error (0)	popups.rdstation.com.br	pages.rdstation.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:30.494931936 CEST	1.1.1.1	192.168.2.4	0x3a33	No error (0)	pages.rdstation.com.br		34.68.90.188	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:35.003382921 CEST	1.1.1.1	192.168.2.4	0x2852	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:35.005413055 CEST	1.1.1.1	192.168.2.4	0x11a5	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:36.002805948 CEST	1.1.1.1	192.168.2.4	0xc7cf	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:36.002805948 CEST	1.1.1.1	192.168.2.4	0xc7cf	No error (0)	vimeo-video.map.fastly.net		151.101.14.109	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:36.003741026 CEST	1.1.1.1	192.168.2.4	0xbc34	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:36.033375978 CEST	1.1.1.1	192.168.2.4	0x68cc	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:36.033375978 CEST	1.1.1.1	192.168.2.4	0x68cc	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:36.033375978 CEST	1.1.1.1	192.168.2.4	0x68cc	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:36.033375978 CEST	1.1.1.1	192.168.2.4	0x68cc	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:36.033375978 CEST	1.1.1.1	192.168.2.4	0x68cc	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:36.133795977 CEST	1.1.1.1	192.168.2.4	0xdbe2	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:37.384550095 CEST	1.1.1.1	192.168.2.4	0xfa1f	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.504398108 CEST	1.1.1.1	192.168.2.4	0x5341	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:37.504398108 CEST	1.1.1.1	192.168.2.4	0x5341	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.504398108 CEST	1.1.1.1	192.168.2.4	0x5341	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.504398108 CEST	1.1.1.1	192.168.2.4	0x5341	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.504398108 CEST	1.1.1.1	192.168.2.4	0x5341	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.504870892 CEST	1.1.1.1	192.168.2.4	0xf84b	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:37.784884930 CEST	1.1.1.1	192.168.2.4	0x8f1c	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:37.784884930 CEST	1.1.1.1	192.168.2.4	0x8f1c	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.731061935 CEST	1.1.1.1	192.168.2.4	0x6e70	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.731061935 CEST	1.1.1.1	192.168.2.4	0x6e70	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		172.217.215.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		142.251.15.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		74.125.138.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		108.177.122.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		74.125.138.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		74.125.138.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		142.251.15.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		64.233.185.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		108.177.122.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		64.233.185.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916016102 CEST	1.1.1.1	192.168.2.4	0x82d8	No error (0)	youtube-ui.l.google.com		74.125.138.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916920900 CEST	1.1.1.1	192.168.2.4	0x5d44	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:40.916920900 CEST	1.1.1.1	192.168.2.4	0x5d44	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:43.456540108 CEST	1.1.1.1	192.168.2.4	0x3818	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:43.456540108 CEST	1.1.1.1	192.168.2.4	0x3818	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		74.125.136.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.250.9.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		108.177.122.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		108.177.122.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.250.9.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		172.217.215.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		108.177.122.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.251.15.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:43.457115889 CEST	1.1.1.1	192.168.2.4	0x92b4	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:44.559716940 CEST	1.1.1.1	192.168.2.4	0xf604	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.174391031 CEST	1.1.1.1	192.168.2.4	0x9228	No error (0)	googleads.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.174391031 CEST	1.1.1.1	192.168.2.4	0x9228	No error (0)	googleads.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.174391031 CEST	1.1.1.1	192.168.2.4	0x9228	No error (0)	googleads.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.174391031 CEST	1.1.1.1	192.168.2.4	0x9228	No error (0)	googleads.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.174532890 CEST	1.1.1.1	192.168.2.4	0xe661	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 21:30:46.174722910 CEST	1.1.1.1	192.168.2.4	0x14cd	No error (0)	static.doubleclick.net		172.253.124.148	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:46.174722910 CEST	1.1.1.1	192.168.2.4	0x14cd	No error (0)	static.doubleclick.net		172.253.124.149	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.300678015 CEST	1.1.1.1	192.168.2.4	0x7110	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:47.300678015 CEST	1.1.1.1	192.168.2.4	0x7110	No error (0)	photos-ugc.l.googleusercontent.com		64.233.176.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.302047968 CEST	1.1.1.1	192.168.2.4	0xf5de	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:47.893975019 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.893975019 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.893975019 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.893975019 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.893975019 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.893975019 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:47.894110918 CEST	1.1.1.1	192.168.2.4	0xe3d9	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:48.066768885 CEST	1.1.1.1	192.168.2.4	0x4ee4	No error (0)	googleads.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.066768885 CEST	1.1.1.1	192.168.2.4	0x4ee4	No error (0)	googleads.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.066768885 CEST	1.1.1.1	192.168.2.4	0x4ee4	No error (0)	googleads.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.066768885 CEST	1.1.1.1	192.168.2.4	0x4ee4	No error (0)	googleads.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.067970991 CEST	1.1.1.1	192.168.2.4	0xa428	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.075923920 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.465318918 CEST	1.1.1.1	192.168.2.4	0x814d	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:48.465318918 CEST	1.1.1.1	192.168.2.4	0x814d	No error (0)	photos-ugc.l.googleusercontent.com		142.250.105.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:48.465785027 CEST	1.1.1.1	192.168.2.4	0xce9c	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		142.250.9.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		142.250.9.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		108.177.122.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		74.125.136.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		108.177.122.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		74.125.136.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		74.125.136.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		74.125.136.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		172.253.124.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		172.253.124.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.343400955 CEST	1.1.1.1	192.168.2.4	0x1964	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:30:50.344304085 CEST	1.1.1.1	192.168.2.4	0xdabb	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:50.344304085 CEST	1.1.1.1	192.168.2.4	0xdabb	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:30:53.107095957 CEST	1.1.1.1	192.168.2.4	0x7c1a	No error (0)	www.questor.net.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:53.398961067 CEST	1.1.1.1	192.168.2.4	0xfb56	No error (0)	www.questor.net.br	questor.com.br		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:30:53.398961067 CEST	1.1.1.1	192.168.2.4	0xfb56	No error (0)	questor.com.br		209.14.140.191	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:00.102039099 CEST	1.1.1.1	192.168.2.4	0xad81	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:00.102039099 CEST	1.1.1.1	192.168.2.4	0xad81	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.076785088 CEST	1.1.1.1	192.168.2.4	0xef67	No error (0)	play.google.com		172.253.124.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.076785088 CEST	1.1.1.1	192.168.2.4	0xef67	No error (0)	play.google.com		172.253.124.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.076785088 CEST	1.1.1.1	192.168.2.4	0xef67	No error (0)	play.google.com		172.253.124.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.076785088 CEST	1.1.1.1	192.168.2.4	0xef67	No error (0)	play.google.com		172.253.124.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.076785088 CEST	1.1.1.1	192.168.2.4	0xef67	No error (0)	play.google.com		172.253.124.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:17.076785088 CEST	1.1.1.1	192.168.2.4	0xef67	No error (0)	play.google.com		172.253.124.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:18.061825991 CEST	1.1.1.1	192.168.2.4	0xaede	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:18.061825991 CEST	1.1.1.1	192.168.2.4	0xaede	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:18.061825991 CEST	1.1.1.1	192.168.2.4	0xaede	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:18.061825991 CEST	1.1.1.1	192.168.2.4	0xaede	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:18.061825991 CEST	1.1.1.1	192.168.2.4	0xaede	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:31:18.061825991 CEST	1.1.1.1	192.168.2.4	0xaede	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49895	209.14.140.191	80	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 21:30:29.617911100 CEST	433	OUT	GET / HTTP/1.1 Host: www.questor.net.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 21:30:29.842118979 CEST	357	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 18 Apr 2024 19:30:29 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.questor.net.br/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Apr 18, 2024 21:31:14.857599974 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49894	209.14.140.191	80	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 21:31:14.623207092 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49897	209.14.140.191	80	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 21:31:14.748183012 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:49 UTC	687	OUT	GET / HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:49 UTC	634	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 18 Apr 2024 19:29:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 175 Connection: close Cache-Control: private Location: https://dinamicconsultores.app.questorpublico.com.br/entrar Set-Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5; path=/; HttpOnly X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:49 UTC	175	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 64 69 6e 61 6d 69 63 63 6f 6e 73 75 6c 74 6f 72 65 73 2e 61 70 70 2e 71 75 65 73 74 6f 72 70 75 62 6c 69 63 6f 2e 63 6f 6d 2e 62 72 2f 65 6e 74 72 61 72 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="http://dinamicconsultores.app.questorpublico.com.br/entrar">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:49 UTC	745	OUT	GET /entrar HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:49 UTC	488	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 11222 Connection: close Cache-Control: private X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:49 UTC	11222	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 51 75 65 73 74 6f 72 20 5a 65 6e 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 62 75 6e 64 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 63 73 73 3f 76 Data Ascii: <!DOCTYPE html><html><head> <title>Questor Zen - Login</title> <link href="/Content/Images/favicon.ico" rel="shortcut icon" /> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="/bundles/bootstrapcss?v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:50 UTC	712	OUT	GET /bundles/bootstrapcss?v=kyR4jYxJOjVS6IRFVEvIKGoZyzo_coA_3ChUQqkeb4g1 HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:50 UTC	565	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 119662 Connection: close Cache-Control: public Expires: Fri, 18 Apr 2025 19:29:50 GMT Last-Modified: Thu, 18 Apr 2024 19:29:50 GMT Vary: User-Agent X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:50 UTC	15819	IN	Data Raw: 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 Data Ascii: article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-webkit-text
2024-04-18 19:29:50 UTC	16384	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 36 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 Data Ascii: rgin-left:100%}.col-lg-offset-11{margin-left:91.66666666666666%}.col-lg-offset-10{margin-left:83.33333333333334%}.col-lg-offset-9{margin-left:75%}.col-lg-offset-8{margin-left:66.66666666666666%}.col-lg-offset-7{margin-left:58.333333333333336%}.col-lg-offs
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 Data Ascii: tn-success[disabled]:hover,fieldset[disabled] .btn-success:hover,.btn-success.disabled:focus,.btn-success[disabled]:focus,fieldset[disabled] .btn-success:focus,.btn-success.disabled:active,.btn-success[disabled]:active,fieldset[disabled] .btn-success:acti
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d Data Ascii: group{display:block;float:none;width:100%;max-width:100%}.btn-group-vertical>.btn-group:before,.btn-group-vertical>.btn-group:after{display:table;content:" "}.btn-group-vertical>.btn-group:after{clear:both}.btn-group-vertical>.btn-group:before,.btn-group-
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 70 64 6f 77 6e 3e 61 3a 68 6f 76 65 72 20 2e 63 61 72 65 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 64 72 6f 70 64 6f 77 6e 3e 61 20 2e 63 61 72 65 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 6f 70 65 6e 3e 61 20 2e 63 61 72 65 74 2c 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 6f 70 65 6e 3e 61 3a 68 6f 76 65 72 20 2e 63 61 72 65 74 2c 2e Data Ascii: pdown>a:hover .caret{border-top-color:#fff;border-bottom-color:#fff}.navbar-inverse .navbar-nav>.dropdown>a .caret{border-top-color:#999;border-bottom-color:#999}.navbar-inverse .navbar-nav>.open>a .caret,.navbar-inverse .navbar-nav>.open>a:hover .caret,.
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 7d 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 68 2c 2e 70 61 Data Ascii: tr>td:last-child,.panel>.table-responsive>.table-bordered>tbody>tr>td:last-child,.panel>.table-bordered>tfoot>tr>td:last-child,.panel>.table-responsive>.table-bordered>tfoot>tr>td:last-child{border-right:0}.panel>.table-bordered>thead>tr:last-child>th,.pa
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 2d 77 69 64 74 68 3a 31 31 39 39 70 78 29 7b 2e 76 69 73 69 62 6c 65 2d 6d 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 74 72 2e 76 69 73 69 62 6c 65 2d 6d 64 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 74 68 2e 76 69 73 69 62 6c 65 2d 6d 64 2c 74 64 2e 76 69 73 69 62 6c 65 2d 6d 64 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 76 69 73 69 62 6c 65 2d 6d 64 2e 76 69 73 69 62 6c 65 2d 6c 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 74 72 2e 76 69 73 69 62 6c 65 2d 6d 64 2e 76 69 73 69 62 6c 65 2d 6c 67 7b 64 69 73 70 6c 61 79 Data Ascii: -width:1199px){.visible-md{display:block!important}tr.visible-md{display:table-row!important}th.visible-md,td.visible-md{display:table-cell!important}}@media(min-width:1200px){.visible-md.visible-lg{display:block!important}tr.visible-md.visible-lg{display
2024-04-18 19:29:51 UTC	5539	IN	Data Raw: 65 6e 74 54 79 70 65 3d 30 29 7d 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 30 25 2c 6c 65 66 74 20 31 30 30 25 2c 66 72 6f 6d 28 23 35 62 63 30 64 65 29 2c 74 6f 28 23 33 31 62 30 64 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 35 62 63 30 64 65 20 30 25 2c 23 33 31 62 30 64 35 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 35 62 63 30 64 65 20 30 25 2c 23 33 31 62 30 64 35 20 31 30 30 25 29 3b 62 61 Data Ascii: entType=0)}.progress-bar-info{background-image:-webkit-gradient(linear,left 0%,left 100%,from(#5bc0de),to(#31b0d5));background-image:-webkit-linear-gradient(top,#5bc0de 0%,#31b0d5 100%);background-image:-moz-linear-gradient(top,#5bc0de 0%,#31b0d5 100%);ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:50 UTC	707	OUT	GET /bundles/mainCss?v=Ooa5At86l5X3WqQryTmy0L1v8ZvhQci4CCODkN2LgXg1 HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:50 UTC	563	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1898 Connection: close Cache-Control: public Expires: Fri, 18 Apr 2025 19:29:50 GMT Last-Modified: Thu, 18 Apr 2024 19:29:50 GMT Vary: User-Agent X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:50 UTC	1898	IN	Data Raw: 62 6f 64 79 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 7d 23 66 6f 72 6d 2d 73 69 67 6e 69 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 30 70 78 7d 23 66 6f 72 6d 2d 73 69 67 6e 69 6e 20 2e 66 6f 72 6d 2d 73 69 67 6e 69 6e 7b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 39 70 78 20 32 39 70 78 20 32 39 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 20 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 2d Data Ascii: body{padding-top:40px;padding-bottom:40px;background-color:#f5f5f5}#form-signin{padding-top:50px}#form-signin .form-signin{max-width:360px;padding:19px 29px 29px;margin:0 auto 20px;background-color:#fff;border:1px solid #e5e5e5;-webkit-border-radius:5px;-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:50 UTC	705	OUT	GET /bundles/logOn?v=mY8oLJVUU1u651zqYdfRKitT9ZGmsEcUQ93ApDZOC201 HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:50 UTC	562	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 568 Connection: close Cache-Control: public Expires: Fri, 18 Apr 2025 19:29:50 GMT Last-Modified: Thu, 18 Apr 2024 19:29:50 GMT Vary: User-Agent X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:50 UTC	568	IN	Data Raw: 2f 2a 20 4d 69 6e 69 66 69 63 61 74 69 6f 6e 20 66 61 69 6c 65 64 2e 20 52 65 74 75 72 6e 69 6e 67 20 75 6e 6d 69 6e 69 66 69 65 64 20 63 6f 6e 74 65 6e 74 73 2e 0d 0a 28 31 30 2c 31 29 3a 20 72 75 6e 2d 74 69 6d 65 20 65 72 72 6f 72 20 43 53 53 31 30 31 39 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 2c 20 66 6f 75 6e 64 20 27 7d 27 0d 0a 20 2a 2f 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 66 72 65 73 68 2d 61 6e 69 6d 61 74 65 20 7b 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 32 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 7d 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 Data Ascii: /* Minification failed. Returning unminified contents.(10,1): run-time error CSS1019: Unexpected token, found '}' */.glyphicon-refresh-animate {-animation: spin 1.5s infinite linear; -webkit-animation: spin2 1.5s infinite linear;}@-webkit-keyframe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:50 UTC	692	OUT	GET /bundles/jquery?v=XgddrwFLu0z8WptdlVDXPqymDmw7ToIMYb1BryT4OPk1 HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:50 UTC	572	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 186143 Connection: close Cache-Control: public Expires: Fri, 18 Apr 2025 19:29:50 GMT Last-Modified: Thu, 18 Apr 2024 19:29:50 GMT Vary: User-Agent X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:50 UTC	15812	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 6c 65 6e 67 74 68 2c 72 3d 69 2e 74 79 70 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 57 69 6e 64 6f 77 28 6e 29 3f 21 31 3a 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 72 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 72 26 26 28 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 30 26 26 74 2d 31 20 69 6e 20 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 6e 29 7b 76 61 72 20 74 3d 6e 69 5b 6e 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 69 2e 65 61 63 68 28 6e 2e 6d 61 74 63 68 28 73 29 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 74 5b 69 5d 3d 21 30 7d Data Ascii: (function(n,t){function gt(n){var t=n.length,r=i.type(n);return i.isWindow(n)?!1:1===n.nodeType&&t?!0:"array"===r\|\|"function"!==r&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in n)}function te(n){var t=ni[n]={};return i.each(n.match(s)\|\|[],function(n,i){t[i]=!0}
2024-04-18 19:29:50 UTC	16384	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 75 2c 72 3d 30 2c 66 3d 6e 2e 6c 65 6e 67 74 68 2c 65 3d 67 74 28 6e 29 3b 69 66 28 69 29 7b 69 66 28 65 29 7b 66 6f 72 28 3b 66 3e 72 3b 72 2b 2b 29 69 66 28 75 3d 74 2e 61 70 70 6c 79 28 6e 5b 72 5d 2c 69 29 2c 75 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 6e 29 69 66 28 75 3d 74 2e 61 70 70 6c 79 28 6e 5b 72 5d 2c 69 29 2c 75 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 65 29 7b 66 6f 72 28 3b 66 3e 72 3b 72 2b 2b 29 69 66 28 75 3d 74 2e 63 61 6c 6c 28 6e 5b 72 5d 2c 72 2c 6e 5b 72 5d 29 2c 75 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 6e 29 69 66 Data Ascii: .toLowerCase()},each:function(n,t,i){var u,r=0,f=n.length,e=gt(n);if(i){if(e){for(;f>r;r++)if(u=t.apply(n[r],i),u===!1)break}else for(r in n)if(u=t.apply(n[r],i),u===!1)break}else if(e){for(;f>r;r++)if(u=t.call(n[r],r,n[r]),u===!1)break}else for(r in n)if
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 6e 6c 79 22 3d 3d 3d 6e 26 26 21 77 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 77 3d 5b 65 3f 79 2e 66 69 72 73 74 43 68 69 6c 64 3a 79 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 65 26 26 64 29 7b 66 6f 72 28 6b 3d 79 5b 6f 5d 7c 7c 28 79 5b 6f 5d 3d 7b 7d 29 2c 61 3d 6b 5b 6e 5d 7c 7c 5b 5d 2c 76 3d 61 5b 30 5d 3d 3d 3d 70 26 26 61 5b 31 5d 2c 6c 3d 61 5b 30 5d 3d 3d 3d 70 26 26 61 5b 32 5d 2c 63 3d 76 26 26 79 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 76 5d 3b 63 3d 2b 2b 76 26 26 63 26 26 63 5b 62 5d 7c 7c 28 6c 3d 76 3d 30 29 7c 7c 77 2e 70 6f 70 28 29 3b 29 69 66 28 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 6c 26 26 63 3d 3d 3d 74 29 7b 6b 5b 6e 5d 3d 5b 70 2c 76 2c 6c 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 Data Ascii: nly"===n&&!w&&"nextSibling"}return!0}if(w=[e?y.firstChild:y.lastChild],e&&d){for(k=y[o]\|\|(y[o]={}),a=k[n]\|\|[],v=a[0]===p&&a[1],l=a[0]===p&&a[2],c=v&&y.childNodes[v];c=++v&&c&&c[b]\|\|(l=v=0)\|\|w.pop();)if(1===c.nodeType&&++l&&c===t){k[n]=[p,v,l];break}}else
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 62 75 74 65 28 72 2c 75 2b 22 22 29 2c 75 29 3a 28 69 2e 72 65 6d 6f 76 65 41 74 74 72 28 6e 2c 72 29 2c 74 29 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 2c 75 2c 65 3d 30 2c 66 3d 74 26 26 74 2e 6d 61 74 63 68 28 73 29 3b 69 66 28 66 26 26 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 72 3d 66 5b 65 2b 2b 5d 29 75 3d 69 2e 70 72 6f 70 46 69 78 5b 72 5d 7c 7c 72 2c 69 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 72 29 3f 68 74 26 26 61 7c 7c 21 72 69 2e 74 65 73 74 28 72 29 3f 6e 5b 75 5d 3d 21 31 3a 6e 5b 69 2e 63 61 6d 65 6c 43 61 73 65 28 22 64 65 66 61 75 6c 74 2d 22 2b 72 29 5d 3d 6e 5b 75 5d 3d 21 31 3a 69 2e 61 74 74 72 28 6e 2c 72 2c 22 22 29 2c 6e 2e 72 Data Ascii: bute(r,u+""),u):(i.removeAttr(n,r),t))},removeAttr:function(n,t){var r,u,e=0,f=t&&t.match(s);if(f&&1===n.nodeType)while(r=f[e++])u=i.propFix[r]\|\|r,i.expr.match.bool.test(r)?ht&&a\|\|!ri.test(r)?n[u]=!1:n[i.camelCase("default-"+r)]=n[u]=!1:i.attr(n,r,""),n.r
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 73 69 64 65 7c 61 75 64 69 6f 7c 62 64 69 7c 63 61 6e 76 61 73 7c 64 61 74 61 7c 64 61 74 61 6c 69 73 74 7c 64 65 74 61 69 6c 73 7c 66 69 67 63 61 70 74 69 6f 6e 7c 66 69 67 75 72 65 7c 66 6f 6f 74 65 72 7c 68 65 61 64 65 72 7c 68 67 72 6f 75 70 7c 6d 61 72 6b 7c 6d 65 74 65 72 7c 6e 61 76 7c 6f 75 74 70 75 74 7c 70 72 6f 67 72 65 73 73 7c 73 65 63 74 69 6f 6e 7c 73 75 6d 6d 61 72 79 7c 74 69 6d 65 7c 76 69 64 65 6f 22 2c 63 65 3d 2f 20 6a 51 75 65 72 79 5c 64 2b 3d 22 28 3f 3a 6e 75 6c 6c 7c 5c 64 2b 29 22 2f 67 2c 70 72 3d 52 65 67 45 78 70 28 22 3c 28 3f 3a 22 2b 79 72 2b 22 29 5b 5c 5c 73 2f 3e 5d 22 2c 22 69 22 29 2c 65 69 3d 2f 5e 5c 73 2b 2f 2c 77 72 3d 2f 3c 28 3f 21 61 72 65 61 7c 62 72 7c 63 6f 6c 7c 65 6d 62 65 64 7c 68 72 7c 69 6d 67 7c 69 6e Data Ascii: side\|audio\|bdi\|canvas\|data\|datalist\|details\|figcaption\|figure\|footer\|header\|hgroup\|mark\|meter\|nav\|output\|progress\|section\|summary\|time\|video",ce=/ jQuery\d+="(?:null\|\d+)"/g,pr=RegExp("<(?:"+yr+")[\\s/>]","i"),ei=/^\s+/,wr=/<(?!area\|br\|col\|embed\|hr\|img\|in
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 68 28 73 29 7c 7c 5b 22 22 5d 2c 6e 75 6c 6c 3d 3d 75 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 6c 3d 77 75 2e 65 78 65 63 28 75 2e 75 72 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 75 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3d 21 28 21 6c 7c 7c 6c 5b 31 5d 3d 3d 3d 77 5b 31 5d 26 26 6c 5b 32 5d 3d 3d 3d 77 5b 32 5d 26 26 28 6c 5b 33 5d 7c 7c 28 22 68 74 74 70 3a 22 3d 3d 3d 6c 5b 31 5d 3f 22 38 30 22 3a 22 34 34 33 22 29 29 3d 3d 3d 28 77 5b 33 5d 7c 7c 28 22 68 74 74 70 3a 22 3d 3d 3d 77 5b 31 5d 3f 22 38 30 22 3a 22 34 34 33 22 29 29 29 29 2c 75 2e 64 61 74 61 26 26 75 2e 70 72 6f 63 65 73 73 44 61 74 61 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 75 2e 64 61 74 61 26 26 28 75 2e 64 61 74 61 3d 69 2e 70 61 72 61 6d 28 75 2e 64 61 74 Data Ascii: h(s)\|\|[""],null==u.crossDomain&&(l=wu.exec(u.url.toLowerCase()),u.crossDomain=!(!l\|\|l[1]===w[1]&&l[2]===w[2]&&(l[3]\|\|("http:"===l[1]?"80":"443"))===(w[3]\|\|("http:"===w[1]?"80":"443")))),u.data&&u.processData&&"string"!=typeof u.data&&(u.data=i.param(u.dat
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 3b 65 2b 3d 32 29 22 6d 61 72 67 69 6e 22 3d 3d 3d 72 26 26 28 6f 2b 3d 69 2e 63 73 73 28 6e 2c 72 2b 70 5b 65 5d 2c 21 30 2c 66 29 29 2c 75 3f 28 22 63 6f 6e 74 65 6e 74 22 3d 3d 3d 72 26 26 28 6f 2d 3d 69 2e 63 73 73 28 6e 2c 22 70 61 64 64 69 6e 67 22 2b 70 5b 65 5d 2c 21 30 2c 66 29 29 2c 22 6d 61 72 67 69 6e 22 21 3d 3d 72 26 26 28 6f 2d 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 70 5b 65 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 29 3a 28 6f 2b 3d 69 2e 63 73 73 28 6e 2c 22 70 61 64 64 69 6e 67 22 2b 70 5b 65 5d 2c 21 30 2c 66 29 2c 22 70 61 64 64 69 6e 67 22 21 3d 3d 72 26 26 28 6f 2b 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 70 5b 65 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 Data Ascii: ;e+=2)"margin"===r&&(o+=i.css(n,r+p[e],!0,f)),u?("content"===r&&(o-=i.css(n,"padding"+p[e],!0,f)),"margin"!==r&&(o-=i.css(n,"border"+p[e]+"Width",!0,f))):(o+=i.css(n,"padding"+p[e],!0,f),"padding"!==r&&(o+=i.css(n,"border"+p[e]+"Width",!0,f)));return o}fu
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 6f 5d 3d 7b 7d 29 2c 28 73 3d 63 5b 72 5d 29 26 26 73 5b 30 5d 3d 3d 3d 6c 29 7b 69 66 28 28 68 3d 73 5b 31 5d 29 3d 3d 3d 21 30 7c 7c 68 3d 3d 3d 68 74 29 72 65 74 75 72 6e 20 68 3d 3d 3d 21 30 7d 65 6c 73 65 20 69 66 28 73 3d 63 5b 72 5d 3d 5b 6c 5d 2c 73 5b 31 5d 3d 6e 28 74 2c 69 2c 65 29 7c 7c 68 74 2c 73 5b 31 5d 3d 3d 3d 21 30 29 72 65 74 75 72 6e 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 69 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 31 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 66 6f 72 28 76 61 72 20 75 3d 6e 2e 6c 65 6e 67 74 68 3b 75 2d 2d 3b 29 69 66 28 21 6e 5b 75 5d 28 74 2c 69 2c 72 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3a 6e 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 62 74 28 6e 2c 74 2c 69 2c 72 Data Ascii: o]={}),(s=c[r])&&s[0]===l){if((h=s[1])===!0\|\|h===ht)return h===!0}else if(s=c[r]=[l],s[1]=n(t,i,e)\|\|ht,s[1]===!0)return!0}}function ei(n){return n.length>1?function(t,i,r){for(var u=n.length;u--;)if(!n[u](t,i,r))return!1;return!0}:n[0]}function bt(n,t,i,r
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 7d 2c 66 69 72 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 63 7d 7d 3b 72 65 74 75 72 6e 20 68 7d 3b 69 2e 65 78 74 65 6e 64 28 7b 44 65 66 65 72 72 65 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 75 3d 5b 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 69 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 73 6f 6c 76 65 64 22 5d 2c 5b 22 72 65 6a 65 63 74 22 2c 22 66 61 69 6c 22 2c 69 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 6a 65 63 74 65 64 22 5d 2c 5b 22 6e 6f 74 69 66 79 22 2c 22 70 72 6f 67 72 65 73 73 22 2c 69 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 5d 5d 2c 66 3d 22 70 65 6e 64 69 6e 67 22 2c 72 3d 7b 73 74 61 Data Ascii: },fired:function(){return!!c}};return h};i.extend({Deferred:function(n){var u=[["resolve","done",i.Callbacks("once memory"),"resolved"],["reject","fail",i.Callbacks("once memory"),"rejected"],["notify","progress",i.Callbacks("memory")]],f="pending",r={sta
2024-04-18 19:29:51 UTC	16384	IN	Data Raw: 20 69 2e 45 76 65 6e 74 28 68 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 75 26 26 75 29 2c 75 2e 69 73 54 72 69 67 67 65 72 3d 6f 3f 32 3a 33 2c 75 2e 6e 61 6d 65 73 70 61 63 65 3d 79 2e 6a 6f 69 6e 28 22 2e 22 29 2c 75 2e 6e 61 6d 65 73 70 61 63 65 5f 72 65 3d 75 2e 6e 61 6d 65 73 70 61 63 65 3f 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 22 2b 79 2e 6a 6f 69 6e 28 22 5c 5c 2e 28 3f 3a 2e 2a 5c 5c 2e 7c 29 22 29 2b 22 28 5c 5c 2e 7c 24 29 22 29 3a 6e 75 6c 6c 2c 75 2e 72 65 73 75 6c 74 3d 74 2c 75 2e 74 61 72 67 65 74 7c 7c 28 75 2e 74 61 72 67 65 74 3d 65 29 2c 66 3d 6e 75 6c 6c 3d 3d 66 3f 5b 75 5d 3a 69 2e 6d 61 6b 65 41 72 72 61 79 28 66 2c 5b 75 5d 29 2c 6c 3d 69 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 68 5d 7c 7c 7b 7d 2c 6f 7c 7c Data Ascii: i.Event(h,"object"==typeof u&&u),u.isTrigger=o?2:3,u.namespace=y.join("."),u.namespace_re=u.namespace?RegExp("(^\|\\.)"+y.join("\\.(?:.*\\.\|)")+"(\\.\|$)"):null,u.result=t,u.target\|\|(u.target=e),f=null==f?[u]:i.makeArray(f,[u]),l=i.event.special[h]\|\|{},o\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:50 UTC	664	OUT	GET /Content/Js/UpdateBrowserNotify.js HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:50 UTC	531	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:49 GMT Content-Type: application/javascript Content-Length: 8338 Connection: close Cache-Control: max-age=86400 Last-Modified: Tue, 27 Feb 2024 12:28:13 GMT Accept-Ranges: bytes ETag: "6910c86e7869da1:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:50 UTC	8338	IN	Data Raw: ef bb bf 76 61 72 20 42 72 6f 77 73 65 72 44 65 74 65 63 74 20 3d 20 7b 0d 0a 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 62 72 6f 77 73 65 72 20 3d 20 74 68 69 73 2e 73 65 61 72 63 68 53 74 72 69 6e 67 28 74 68 69 73 2e 64 61 74 61 42 72 6f 77 73 65 72 29 20 7c 7c 20 22 41 6e 20 75 6e 6b 6e 6f 77 6e 20 62 72 6f 77 73 65 72 22 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 20 3d 20 74 68 69 73 2e 73 65 61 72 63 68 56 65 72 73 69 6f 6e 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 20 7c 7c 20 74 68 69 73 2e 73 65 61 72 63 68 56 65 72 73 69 6f 6e 28 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 29 20 7c 7c 20 22 61 6e 20 75 6e 6b 6e 6f 77 6e 20 76 65 72 73 69 6f 6e Data Ascii: var BrowserDetect = { init: function () { this.browser = this.searchString(this.dataBrowser) \|\| "An unknown browser"; this.version = this.searchVersion(navigator.userAgent) \|\| this.searchVersion(navigator.appVersion) \|\| "an unknown version

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:50 UTC	701	OUT	GET /bundles/modal-bootstrap?v=rHzxfH54gahafGK9DFP6lEs3QUY6B_as_gyYDJX3Io41 HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:50 UTC	570	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 3840 Connection: close Cache-Control: public Expires: Fri, 18 Apr 2025 19:29:50 GMT Last-Modified: Thu, 18 Apr 2024 19:29:50 GMT Vary: User-Agent X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:50 UTC	3840	IN	Data Raw: 2b 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 69 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 6e 28 74 29 3b 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 3d 74 68 69 73 2e 69 73 53 68 6f 77 6e 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6c 6f 61 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 29 7d 2c 69 3b 74 2e 44 45 46 41 55 4c 54 53 3d 7b 62 61 63 6b 64 72 6f 70 3a 21 30 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 68 6f 77 3a 21 30 7d 3b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 Data Ascii: +function(n){"use strict";var t=function(t,i){this.options=i;this.$element=n(t);this.$backdrop=this.isShown=null;this.options.remote&&this.$element.load(this.options.remote)},i;t.DEFAULTS={backdrop:!0,keyboard:!0,show:!0};t.prototype.toggle=function(n){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	23.36.68.63	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 19:29:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=214437 Date: Thu, 18 Apr 2024 19:29:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	104.21.235.214	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:51 UTC	654	OUT	GET /icons/google/chrome/48/Google-Chrome-icon.png HTTP/1.1 Host: icons.iconarchive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:52 UTC	691	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:29:52 GMT Content-Type: image/png Content-Length: 2309 Connection: close Last-Modified: Tue, 07 Feb 2023 10:11:44 GMT ETag: "63e223e0-905" Cache-Control: max-age=5356800 CF-Cache-Status: HIT Age: 711 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tu8yWmuDGth8i1HqDVdglzLuAn6KVqcmHVv8hJFkABxcmzBK3fet39XZTgdBX2ib0hZvrYwh%2BnLBbKEcVd0gILlnuGN5PJmuTpKU9hqqM7x%2FX7UYLHk%2F9BOlSUg%2FJt68Mwwdks4ziEM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876710ecaf6b0803-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:29:52 UTC	678	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 03 00 50 4c 54 45 47 70 4c 00 00 00 bf 32 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf 97 21 00 00 00 ca 23 23 d7 43 39 00 00 00 00 00 00 3d 9c 3b 51 3b 0d 91 68 18 1f 59 29 e5 60 4f da 3a 33 e1 4f 42 e0 45 3b 6e 80 1b dd 35 30 cc 2d 2a 43 a7 40 3d 95 3d 2c 6c 2e 3a 8e 3d d7 1e 22 c4 1d 20 21 58 27 a7 80 14 23 5e 29 da a7 19 14 36 18 97 70 16 8c 67 15 c0 8a 20 2a 77 36 00 00 00 41 a1 3e de 5b 4b e9 bf 08 e2 58 49 e5 bb 07 d7 b1 05 dc 52 44 e4 61 50 70 58 0b d4 a8 10 3b 90 3a 1f 4a 1f bb 93 10 33 7d 33 ed c5 05 e0 b3 10 44 ad 41 d9 b4 05 d9 aa 15 36 85 39 62 7e 34 cd 9c 1a d9 48 1a d1 1b 20 2d 78 36 32 85 3b 2e Data Ascii: PNGIHDR00`PLTEGpL2,!##C9=;Q;hY)`O:3OBE;n50-C@==,l.:=" !X'#^)6pg w6A>[KXIRDaPpX;:J3}3DA69b~4H -x62;.
2024-04-18 19:29:52 UTC	1369	IN	Data Raw: ec cb ad b6 25 78 ad 32 f5 e8 ac 95 cb 94 b1 c5 d5 5f 80 33 13 5d 98 9c 4c 2b 91 b5 2f 5a 94 3d e1 c0 1a cb db ea 9f b7 ca ed ca cb 12 5d 98 43 7f b1 51 8b ba 75 a4 cd b4 25 1f 65 9a c6 5b a5 53 6c 68 2f b9 cd de 8d 6d 53 9d 2b 1d c5 d6 e6 d0 35 39 e3 61 65 ce 4d 50 ef e2 b0 e9 c3 52 ec c0 22 af cd e8 e7 ca 0e 65 9e 3c 60 95 c0 94 b2 28 d6 da c1 b9 d1 bc b8 a2 2c 44 81 b3 59 b0 59 bf 00 00 80 8b 0c 8d 00 00 01 00 74 52 4e 53 00 1b 25 04 11 24 0d 01 08 14 05 32 fe 3e 69 65 26 38 72 53 90 92 d2 c4 d2 e2 2f f1 57 d7 db 82 ee f1 59 7b 82 8a ee 50 89 7b de de 27 bb 75 d8 b3 bb 7f 75 b3 42 c1 c1 42 8b 8b d6 da e4 6c db d0 c6 d0 e4 c6 d2 f4 e9 e9 d2 59 c7 c7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: %x2_3]L+/Z=]CQu%e[Slh/mS+59aeMPR"e<`(,DYYtRNS%$2>ie&8rS/WY{P{'uuBBlY
2024-04-18 19:29:52 UTC	262	IN	Data Raw: 82 24 91 5c 7f 66 77 8c 07 c4 21 9f 94 a9 eb 5b cf b1 de c8 08 92 e7 06 86 1a 2b 52 6f 90 a4 4a f9 b8 47 0a ac 8e 96 cf d2 35 ae e3 91 97 6f ae 7c 47 b7 e2 b6 52 ac 28 e5 20 e9 f5 ef f8 e0 74 52 66 66 56 73 e3 3a 47 fe 95 db 37 df 71 d5 d3 c5 3b 91 02 8e 5e af 1a 7d 2f 11 d2 49 99 59 b0 bc c3 fa ab f2 c8 e0 ad 7d aa b5 6d 27 38 85 6a b5 ba f0 34 2c 8d d2 cd 7d 87 9e 73 e1 f1 a7 3b 82 48 8e bd db 33 ad c5 6d 75 20 95 fe aa cb d2 e9 74 cd cd 8d 07 9f 75 b5 e7 90 d3 1f 72 76 5c 9e 93 db c6 d6 d6 e2 e2 b6 b6 bf 9a fb fa 1a 0f 1d 74 d8 e0 ea c4 e3 da 5d f3 1c 25 05 3c fb e7 6f 7c 71 63 eb 79 07 60 c3 0b ae 2e f6 3c 01 39 e3 49 4d 72 39 9b ec 9d 6e c0 38 d9 6f e2 70 c9 eb fe 0b d8 92 7c ae 00 c3 e5 93 b6 c4 7f fe 17 f9 17 b3 e5 85 d7 f3 ab 4d fd 00 00 00 00 49 Data Ascii: $\fw![+RoJG5o\|GR( tRffVs:G7q;^}/IY}m'8j4,}s;H3mu turv\t]%<o\|qcy`.<9IMr9n8op\|MI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	208.80.154.240	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:51 UTC	665	OUT	GET /wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:52 UTC	1082	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 04:19:49 GMT server: ATS/9.1.4 etag: W/22e028c10766d6b06bf71e22c4b03a10 content-type: image/svg+xml x-object-meta-sha1base36: qvr9g69y5obrs52y2bz2ah3awxb8j4r last-modified: Sun, 29 Oct 2023 00:26:05 GMT vary: Accept-Encoding age: 54602 x-cache: cp1105 hit, cp1105 hit/1257 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp1105" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 81.181.57.52 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes content-length: 3814 connection: close
2024-04-18 19:29:52 UTC	3814	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 36 20 32 35 36 22 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 62 22 20 63 78 3d 22 31 36 31 2e 38 22 20 63 79 3d 22 36 38 2e 39 22 20 72 3d 22 39 35 2e 34 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 20 30 20 30 20 2d 2e 39 35 20 30 20 32 34 38 2e 38 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 37 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 39 22 20 73 74 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256"><defs><radialGradient id="b" cx="161.8" cy="68.9" r="95.4" gradientTransform="matrix(1 0 0 -.95 0 248.8)" gradientUnits="userSpaceOnUse"><stop offset=".7" stop-opacity="0"/><stop offset=".9" st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:52 UTC	776	OUT	GET /Content/Images/loginicons.jpg HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/bundles/mainCss?v=Ooa5At86l5X3WqQryTmy0L1v8ZvhQci4CCODkN2LgXg1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:52 UTC	518	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:51 GMT Content-Type: image/jpeg Content-Length: 708 Connection: close Cache-Control: max-age=86400 Last-Modified: Tue, 27 Feb 2024 12:28:13 GMT Accept-Ranges: bytes ETag: "cb14c66e7869da1:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:52 UTC	708	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 20 20 20 20 20 20 20 20 20 20 ff db 00 43 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 00 64 00 28 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 06 07 05 01 08 ff c4 00 30 10 00 01 03 04 01 02 02 07 09 00 00 00 00 00 00 00 01 00 02 03 04 05 06 11 12 13 21 31 41 07 16 42 51 72 81 d1 22 23 32 55 61 71 93 a2 b1 Data Ascii: JFIFHHC C d(0!1ABQr"#2Uaq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	44.236.48.31	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:52 UTC	655	OUT	GET /product-identity/firefox/firefox/firefox-logo.png HTTP/1.1 Host: design.firefox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:52 UTC	359	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 18 Apr 2024 19:29:52 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://acorn.firefox.com/product-identity/firefox/firefox/firefox-logo.png Strict-Transport-Security: max-age=60; includeSubDomains X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'none'
2024-04-18 19:29:52 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	23.36.68.63	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 19:29:52 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=214434 Date: Thu, 18 Apr 2024 19:29:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 19:29:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	208.80.154.240	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:52 UTC	401	OUT	GET /wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:52 UTC	1082	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 04:19:49 GMT server: ATS/9.1.4 etag: W/22e028c10766d6b06bf71e22c4b03a10 content-type: image/svg+xml x-object-meta-sha1base36: qvr9g69y5obrs52y2bz2ah3awxb8j4r last-modified: Sun, 29 Oct 2023 00:26:05 GMT vary: Accept-Encoding age: 54603 x-cache: cp1105 hit, cp1105 hit/1258 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp1105" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 81.181.57.52 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes content-length: 3814 connection: close
2024-04-18 19:29:52 UTC	3814	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 36 20 32 35 36 22 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 62 22 20 63 78 3d 22 31 36 31 2e 38 22 20 63 79 3d 22 36 38 2e 39 22 20 72 3d 22 39 35 2e 34 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 20 30 20 30 20 2d 2e 39 35 20 30 20 32 34 38 2e 38 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 37 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 39 22 20 73 74 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256"><defs><radialGradient id="b" cx="161.8" cy="68.9" r="95.4" gradientTransform="matrix(1 0 0 -.95 0 248.8)" gradientUnits="userSpaceOnUse"><stop offset=".7" stop-opacity="0"/><stop offset=".9" st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	104.21.235.213	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:52 UTC	390	OUT	GET /icons/google/chrome/48/Google-Chrome-icon.png HTTP/1.1 Host: icons.iconarchive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:52 UTC	687	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:29:52 GMT Content-Type: image/png Content-Length: 2309 Connection: close Last-Modified: Tue, 07 Feb 2023 10:11:44 GMT ETag: "63e223e0-905" Cache-Control: max-age=5356800 CF-Cache-Status: HIT Age: 711 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1pbB6L0LkOUEDZjK0H9dWjyHLJTbHngOB5sE2CmRh40yFgzAwixK8ieoZuYRvLglgJ0Svl%2FQK%2FZXxNJdsYZctbPUkkNTfLvjYHLZgeNkkSj6x5JOE2kIJONuBnKw1XMQlf8VLsv9iI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876710f07cf76764-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:29:52 UTC	682	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 03 00 50 4c 54 45 47 70 4c 00 00 00 bf 32 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf 97 21 00 00 00 ca 23 23 d7 43 39 00 00 00 00 00 00 3d 9c 3b 51 3b 0d 91 68 18 1f 59 29 e5 60 4f da 3a 33 e1 4f 42 e0 45 3b 6e 80 1b dd 35 30 cc 2d 2a 43 a7 40 3d 95 3d 2c 6c 2e 3a 8e 3d d7 1e 22 c4 1d 20 21 58 27 a7 80 14 23 5e 29 da a7 19 14 36 18 97 70 16 8c 67 15 c0 8a 20 2a 77 36 00 00 00 41 a1 3e de 5b 4b e9 bf 08 e2 58 49 e5 bb 07 d7 b1 05 dc 52 44 e4 61 50 70 58 0b d4 a8 10 3b 90 3a 1f 4a 1f bb 93 10 33 7d 33 ed c5 05 e0 b3 10 44 ad 41 d9 b4 05 d9 aa 15 36 85 39 62 7e 34 cd 9c 1a d9 48 1a d1 1b 20 2d 78 36 32 85 3b 2e Data Ascii: PNGIHDR00`PLTEGpL2,!##C9=;Q;hY)`O:3OBE;n50-C@==,l.:=" !X'#^)6pg w6A>[KXIRDaPpX;:J3}3DA69b~4H -x62;.
2024-04-18 19:29:52 UTC	1369	IN	Data Raw: 25 78 ad 32 f5 e8 ac 95 cb 94 b1 c5 d5 5f 80 33 13 5d 98 9c 4c 2b 91 b5 2f 5a 94 3d e1 c0 1a cb db ea 9f b7 ca ed ca cb 12 5d 98 43 7f b1 51 8b ba 75 a4 cd b4 25 1f 65 9a c6 5b a5 53 6c 68 2f b9 cd de 8d 6d 53 9d 2b 1d c5 d6 e6 d0 35 39 e3 61 65 ce 4d 50 ef e2 b0 e9 c3 52 ec c0 22 af cd e8 e7 ca 0e 65 9e 3c 60 95 c0 94 b2 28 d6 da c1 b9 d1 bc b8 a2 2c 44 81 b3 59 b0 59 bf 00 00 80 8b 0c 8d 00 00 01 00 74 52 4e 53 00 1b 25 04 11 24 0d 01 08 14 05 32 fe 3e 69 65 26 38 72 53 90 92 d2 c4 d2 e2 2f f1 57 d7 db 82 ee f1 59 7b 82 8a ee 50 89 7b de de 27 bb 75 d8 b3 bb 7f 75 b3 42 c1 c1 42 8b 8b d6 da e4 6c db d0 c6 d0 e4 c6 d2 f4 e9 e9 d2 59 c7 c7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: %x2_3]L+/Z=]CQu%e[Slh/mS+59aeMPR"e<`(,DYYtRNS%$2>ie&8rS/WY{P{'uuBBlY
2024-04-18 19:29:52 UTC	258	IN	Data Raw: 7f 66 77 8c 07 c4 21 9f 94 a9 eb 5b cf b1 de c8 08 92 e7 06 86 1a 2b 52 6f 90 a4 4a f9 b8 47 0a ac 8e 96 cf d2 35 ae e3 91 97 6f ae 7c 47 b7 e2 b6 52 ac 28 e5 20 e9 f5 ef f8 e0 74 52 66 66 56 73 e3 3a 47 fe 95 db 37 df 71 d5 d3 c5 3b 91 02 8e 5e af 1a 7d 2f 11 d2 49 99 59 b0 bc c3 fa ab f2 c8 e0 ad 7d aa b5 6d 27 38 85 6a b5 ba f0 34 2c 8d d2 cd 7d 87 9e 73 e1 f1 a7 3b 82 48 8e bd db 33 ad c5 6d 75 20 95 fe aa cb d2 e9 74 cd cd 8d 07 9f 75 b5 e7 90 d3 1f 72 76 5c 9e 93 db c6 d6 d6 e2 e2 b6 b6 bf 9a fb fa 1a 0f 1d 74 d8 e0 ea c4 e3 da 5d f3 1c 25 05 3c fb e7 6f 7c 71 63 eb 79 07 60 c3 0b ae 2e f6 3c 01 39 e3 49 4d 72 39 9b ec 9d 6e c0 38 d9 6f e2 70 c9 eb fe 0b d8 92 7c ae 00 c3 e5 93 b6 c4 7f fe 17 f9 17 b3 e5 85 d7 f3 ab 4d fd 00 00 00 00 49 45 4e 44 ae Data Ascii: fw![+RoJG5o\|GR( tRffVs:G7q;^}/IY}m'8j4,}s;H3mu turv\t]%<o\|qcy`.<9IMr9n8op\|MIEND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:53 UTC	449	OUT	GET /Content/Images/loginicons.jpg HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:53 UTC	518	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:52 GMT Content-Type: image/jpeg Content-Length: 708 Connection: close Cache-Control: max-age=86400 Last-Modified: Tue, 27 Feb 2024 12:28:13 GMT Accept-Ranges: bytes ETag: "cb14c66e7869da1:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:53 UTC	708	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 20 20 20 20 20 20 20 20 20 20 ff db 00 43 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 00 64 00 28 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 06 07 05 01 08 ff c4 00 30 10 00 01 03 04 01 02 02 07 09 00 00 00 00 00 00 00 01 00 02 03 04 05 06 11 12 13 21 31 41 07 16 42 51 72 81 d1 22 23 32 55 61 71 93 a2 b1 Data Ascii: JFIFHHC C d(0!1ABQr"#2Uaq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	34.246.128.183	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:53 UTC	654	OUT	GET /product-identity/firefox/firefox/firefox-logo.png HTTP/1.1 Host: acorn.firefox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:53 UTC	492	IN	HTTP/1.1 302 Found Server: nginx/1.25.0 Date: Thu, 18 Apr 2024 19:29:53 GMT Content-Length: 0 Connection: close strict-transport-security: max-age=31536000; includeSubDomains location: //acorn.firefox.com/latest/product-identity/firefox/firefox/firefox-logo.png Reason: Different%20effective%20URL set-cookie: docs.sid=Ol5tXEF_9WKBFEdWNCGgyB-XyV6Z6DAqwL_t8nNNf7g; Domain=acorn.firefox.com; Path=/; Expires=Mon, 17 Jun 2024 19:29:53 GMT; HttpOnly Apigw-Requestid: Wb8rxhm5DoEEP_g=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	34.246.128.183	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:54 UTC	661	OUT	GET /latest/product-identity/firefox/firefox/firefox-logo.png HTTP/1.1 Host: acorn.firefox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:55 UTC	466	IN	HTTP/1.1 302 Found Server: nginx/1.25.0 Date: Thu, 18 Apr 2024 19:29:55 GMT Content-Length: 0 Connection: close location: https://default.supernova-docs.io/auth/login?state=1d86a31c-4069-458b-be1a-11fa68fbad79 strict-transport-security: max-age=31536000; includeSubDomains set-cookie: docs.sid=1HQleUXTKNPdTnucu0Qb4n86iTfY8R93xiVCOqRwzok; Domain=acorn.firefox.com; Path=/; Expires=Mon, 17 Jun 2024 19:29:55 GMT; HttpOnly Apigw-Requestid: Wb8sBgNbDoEEPhQ=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	52.30.252.71	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:55 UTC	666	OUT	GET /auth/login?state=1d86a31c-4069-458b-be1a-11fa68fbad79 HTTP/1.1 Host: default.supernova-docs.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:56 UTC	628	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 19:29:56 GMT Content-Length: 0 Connection: close location: https://auth.supernova.io/oauth2/authorize?response_type=code&redirect_uri=https://default.supernova-docs.io/auth/callback&state=1d86a31c-4069-458b-be1a-11fa68fbad79&code_challenge_method=S256&code_challenge=OZGjSbzjIFp1bhMgUxSjJ5C_HI0FO3sZpY5Xje3PU7I&initial_tab=signin strict-transport-security: max-age=31536000; includeSubDomains set-cookie: docs.sid=qSJJd4y0LHq3f0V83cBmnp2xBlFqb7r1Xcv9W-Mfr7g; Domain=.supernova-docs.io; Path=/; Expires=Mon, 17 Jun 2024 19:29:56 GMT; HttpOnly Apigw-Requestid: Wb8sNgteDoEEJ5A=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	18.244.202.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:56 UTC	849	OUT	GET /oauth2/authorize?response_type=code&redirect_uri=https://default.supernova-docs.io/auth/callback&state=1d86a31c-4069-458b-be1a-11fa68fbad79&code_challenge_method=S256&code_challenge=OZGjSbzjIFp1bhMgUxSjJ5C_HI0FO3sZpY5Xje3PU7I&initial_tab=signin HTTP/1.1 Host: auth.supernova.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:29:57 UTC	2036	IN	HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Content-Length: 280 Connection: close Date: Thu, 18 Apr 2024 19:29:57 GMT Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; style-src 'self' https://fonts.googleapis.com https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css https://cdn-assets.supernova.io; img-src https://cdn-assets.supernova.io https://.google-analytics.com https://.googletagmanager.com https://.analytics.google.com https://.google.com https://.google.cz https://.google.ie; script-src 'self' https://cdn-assets.supernova.io https://www.googletagmanager.com; script-src-attr 'none'; connect-src https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.google.ie https://stats.g.doubleclick.net; frame-src 'self' https://*.doubleclick.net; upgrade-insecure-requests Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: DENY X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Location: /login?response_type=code&redirect_uri=https%3A%2F%2Fdefault.supernova-docs.io%2Fauth%2Fcallback&state=1d86a31c-4069-458b-be1a-11fa68fbad79&code_challenge_method=S256&code_challenge=OZGjSbzjIFp1bhMgUxSjJ5C_HI0FO3sZpY5Xje3PU7I&email_hint=&email_readonly=false Vary: Accept X-Cache: Miss from cloudfront Via: 1.1 30e680d51817854d1418152dc862dcfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: 4POelD9ETLYc897tbiWmk720oZ_T5Dlxl-PJJMGdsH49YriYBRz82A== Feature-Policy: accelerometer 'none'; camera 'none'; display-capture 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'; screen-wake-lock 'none' Vary: Origin
2024-04-18 19:29:57 UTC	280	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 6c 6f 67 69 6e 3f 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 66 61 75 6c 74 2e 73 75 70 65 72 6e 6f 76 61 2d 64 6f 63 73 2e 69 6f 25 32 46 61 75 74 68 25 32 46 63 61 6c 6c 62 61 63 6b 26 73 74 61 74 65 3d 31 64 38 36 61 33 31 63 2d 34 30 36 39 2d 34 35 38 62 2d 62 65 31 61 2d 31 31 66 61 36 38 66 62 61 64 37 39 26 63 6f 64 65 5f 63 68 61 6c 6c 65 6e 67 65 5f 6d 65 74 68 6f 64 3d 53 32 35 36 26 63 6f 64 65 5f 63 68 61 6c 6c 65 6e 67 65 3d 4f 5a 47 6a 53 62 7a 6a 49 46 70 31 62 68 4d 67 55 78 53 6a 4a 35 43 5f 48 49 30 46 4f 33 73 5a 70 59 35 58 6a 65 33 50 55 37 49 26 65 6d 61 69 6c 5f 68 Data Ascii: Found. Redirecting to /login?response_type=code&redirect_uri=https%3A%2F%2Fdefault.supernova-docs.io%2Fauth%2Fcallback&state=1d86a31c-4069-458b-be1a-11fa68fbad79&code_challenge_method=S256&code_challenge=OZGjSbzjIFp1bhMgUxSjJ5C_HI0FO3sZpY5Xje3PU7I&email_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:57 UTC	717	OUT	GET /Content/Images/favicon.ico HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/entrar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:58 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:56 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Cache-Control: max-age=86400 Last-Modified: Tue, 27 Feb 2024 12:28:13 GMT Accept-Ranges: bytes ETag: "8c78c56e7869da1:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:58 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 56 00 1c a6 56 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 56 00 2e a6 56 00 8e a6 56 00 df a6 56 00 d3 a6 56 00 2d 00 00 00 00 00 00 00 00 00 00 00 00 a6 56 00 68 a6 56 00 ad a6 56 00 a7 a6 56 00 aa a6 56 00 92 a6 56 00 45 a6 56 00 13 a6 56 00 48 a6 56 00 60 a6 56 00 3b a6 56 00 25 a6 56 00 4d a6 56 00 b3 a6 56 00 29 00 00 00 00 a6 56 00 b7 a6 56 00 b1 a6 56 00 15 00 00 00 00 a6 56 00 0e a6 56 00 5e a6 56 00 b7 a6 56 00 d4 a6 56 00 6b 00 00 00 00 a6 56 00 0a 00 00 00 00 00 00 00 00 a6 56 00 21 a6 56 00 b0 a6 56 00 08 a6 Data Ascii: h( VVV.VVVV-VhVVVVVEVVHV`V;V%VMVV)VVVVV^VVVkVV!VV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49762	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:29:59 UTC	446	OUT	GET /Content/Images/favicon.ico HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:29:59 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:29:58 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Cache-Control: max-age=86400 Last-Modified: Tue, 27 Feb 2024 12:28:13 GMT Accept-Ranges: bytes ETag: "8c78c56e7869da1:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:29:59 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 56 00 1c a6 56 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 56 00 2e a6 56 00 8e a6 56 00 df a6 56 00 d3 a6 56 00 2d 00 00 00 00 00 00 00 00 00 00 00 00 a6 56 00 68 a6 56 00 ad a6 56 00 a7 a6 56 00 aa a6 56 00 92 a6 56 00 45 a6 56 00 13 a6 56 00 48 a6 56 00 60 a6 56 00 3b a6 56 00 25 a6 56 00 4d a6 56 00 b3 a6 56 00 29 00 00 00 00 a6 56 00 b7 a6 56 00 b1 a6 56 00 15 00 00 00 00 a6 56 00 0e a6 56 00 5e a6 56 00 b7 a6 56 00 d4 a6 56 00 6b 00 00 00 00 a6 56 00 0a 00 00 00 00 00 00 00 00 a6 56 00 21 a6 56 00 b0 a6 56 00 08 a6 Data Ascii: h( VVV.VVVV-VhVVVVVEVVHV`V;V%VMVV)VVVVV^VVVkVV!VV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	186.250.92.55	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:01 UTC	725	OUT	GET /entrar HTTP/1.1 Host: dinamicconsultores.app.questorpublico.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=1fynspdh3uidem3rfzl5uho5
2024-04-18 19:30:02 UTC	488	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 11222 Connection: close Cache-Control: private X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: https://formulariocontratacao.app.questorpublico.com.br Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token Access-Control-Allow-Methods: GET, POST
2024-04-18 19:30:02 UTC	11222	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 51 75 65 73 74 6f 72 20 5a 65 6e 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 62 75 6e 64 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 63 73 73 3f 76 Data Ascii: <!DOCTYPE html><html><head> <title>Questor Zen - Login</title> <link href="/Content/Images/favicon.ico" rel="shortcut icon" /> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="/bundles/bootstrapcss?v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	34.246.128.183	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:03 UTC	654	OUT	GET /product-identity/firefox/firefox/firefox-logo.png HTTP/1.1 Host: acorn.firefox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:03 UTC	492	IN	HTTP/1.1 302 Found Server: nginx/1.25.0 Date: Thu, 18 Apr 2024 19:30:03 GMT Content-Length: 0 Connection: close location: //acorn.firefox.com/latest/product-identity/firefox/firefox/firefox-logo.png Reason: Different%20effective%20URL strict-transport-security: max-age=31536000; includeSubDomains set-cookie: docs.sid=rfVC332ST8Ei7uEKokZhRTiXnQFU8am638jyKtB5WRQ; Domain=acorn.firefox.com; Path=/; Expires=Mon, 17 Jun 2024 19:30:03 GMT; HttpOnly Apigw-Requestid: Wb8tXjTuDoEEMJw=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	34.246.128.183	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:04 UTC	661	OUT	GET /latest/product-identity/firefox/firefox/firefox-logo.png HTTP/1.1 Host: acorn.firefox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:04 UTC	466	IN	HTTP/1.1 302 Found Server: nginx/1.25.0 Date: Thu, 18 Apr 2024 19:30:04 GMT Content-Length: 0 Connection: close location: https://default.supernova-docs.io/auth/login?state=e7462017-ee9c-4fb1-85b2-628528237b17 strict-transport-security: max-age=31536000; includeSubDomains set-cookie: docs.sid=ABky5y2G1fj4oiJj5SrYheQBTBuWq96UX7vVDvwU8zw; Domain=acorn.firefox.com; Path=/; Expires=Mon, 17 Jun 2024 19:30:04 GMT; HttpOnly Apigw-Requestid: Wb8tigeRjoEEMtg=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	52.30.252.71	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:05 UTC	666	OUT	GET /auth/login?state=e7462017-ee9c-4fb1-85b2-628528237b17 HTTP/1.1 Host: default.supernova-docs.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:06 UTC	628	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 19:30:06 GMT Content-Length: 0 Connection: close strict-transport-security: max-age=31536000; includeSubDomains location: https://auth.supernova.io/oauth2/authorize?response_type=code&redirect_uri=https://default.supernova-docs.io/auth/callback&state=e7462017-ee9c-4fb1-85b2-628528237b17&code_challenge_method=S256&code_challenge=Pr-oG13SqGjk-SLom682pClpdLYNA8BO8Xh0G3u_bEE&initial_tab=signin set-cookie: docs.sid=UdCeZ8mrzHmUJ9AXfZdHkLgIkN5jU-bIKgV73EKVWtI; Domain=.supernova-docs.io; Path=/; Expires=Mon, 17 Jun 2024 19:30:06 GMT; HttpOnly Apigw-Requestid: Wb8tvh6rDoEEJYQ=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49774	18.244.202.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:06 UTC	849	OUT	GET /oauth2/authorize?response_type=code&redirect_uri=https://default.supernova-docs.io/auth/callback&state=e7462017-ee9c-4fb1-85b2-628528237b17&code_challenge_method=S256&code_challenge=Pr-oG13SqGjk-SLom682pClpdLYNA8BO8Xh0G3u_bEE&initial_tab=signin HTTP/1.1 Host: auth.supernova.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dinamicconsultores.app.questorpublico.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:07 UTC	2036	IN	HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Content-Length: 280 Connection: close Date: Thu, 18 Apr 2024 19:30:07 GMT Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; style-src 'self' https://fonts.googleapis.com https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css https://cdn-assets.supernova.io; img-src https://cdn-assets.supernova.io https://.google-analytics.com https://.googletagmanager.com https://.analytics.google.com https://.google.com https://.google.cz https://.google.ie; script-src 'self' https://cdn-assets.supernova.io https://www.googletagmanager.com; script-src-attr 'none'; connect-src https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.google.ie https://stats.g.doubleclick.net; frame-src 'self' https://*.doubleclick.net; upgrade-insecure-requests Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: DENY X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Location: /login?response_type=code&redirect_uri=https%3A%2F%2Fdefault.supernova-docs.io%2Fauth%2Fcallback&state=e7462017-ee9c-4fb1-85b2-628528237b17&code_challenge_method=S256&code_challenge=Pr-oG13SqGjk-SLom682pClpdLYNA8BO8Xh0G3u_bEE&email_hint=&email_readonly=false Vary: Accept X-Cache: Miss from cloudfront Via: 1.1 93c7f54907396218467f0aa700588688.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: hgLy7FRGowoM_RxeDRUHVD061A20m-D2-7QylJafQHaAguyA1xyYCQ== Feature-Policy: accelerometer 'none'; camera 'none'; display-capture 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'; screen-wake-lock 'none' Vary: Origin
2024-04-18 19:30:07 UTC	280	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 6c 6f 67 69 6e 3f 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 66 61 75 6c 74 2e 73 75 70 65 72 6e 6f 76 61 2d 64 6f 63 73 2e 69 6f 25 32 46 61 75 74 68 25 32 46 63 61 6c 6c 62 61 63 6b 26 73 74 61 74 65 3d 65 37 34 36 32 30 31 37 2d 65 65 39 63 2d 34 66 62 31 2d 38 35 62 32 2d 36 32 38 35 32 38 32 33 37 62 31 37 26 63 6f 64 65 5f 63 68 61 6c 6c 65 6e 67 65 5f 6d 65 74 68 6f 64 3d 53 32 35 36 26 63 6f 64 65 5f 63 68 61 6c 6c 65 6e 67 65 3d 50 72 2d 6f 47 31 33 53 71 47 6a 6b 2d 53 4c 6f 6d 36 38 32 70 43 6c 70 64 4c 59 4e 41 38 42 4f 38 58 68 30 47 33 75 5f 62 45 45 26 65 6d 61 69 6c 5f 68 Data Ascii: Found. Redirecting to /login?response_type=code&redirect_uri=https%3A%2F%2Fdefault.supernova-docs.io%2Fauth%2Fcallback&state=e7462017-ee9c-4fb1-85b2-628528237b17&code_challenge_method=S256&code_challenge=Pr-oG13SqGjk-SLom682pClpdLYNA8BO8Xh0G3u_bEE&email_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49775	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:09 UTC	674	OUT	GET /politicas-de-cookies/questor-zen/ HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:10 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.17 Link: <https://www.questor.com.br/wp-json/>; rel="https://api.w.org/" Link: <https://www.questor.com.br/wp-json/wp/v2/pages/10406>; rel="alternate"; type="application/json" Link: <https://www.questor.com.br/?p=10406>; rel=shortlink
2024-04-18 19:30:10 UTC	2405	IN	Data Raw: 39 35 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a Data Ascii: 95e<!doctype html><html lang="pt-BR"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, nofollow' />
2024-04-18 19:30:10 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 70 6f 6c 69 74 69 63 61 73 2d 64 65 2d 63 6f 6f 6b 69 65 73 2f 71 75 65 73 74 6f 72 2d 7a 65 6e 2f 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 49 6e c3 ad 63 69 6f 22 2c 22 69 74 65 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 50 6f 6c c3 ad 74 69 63 61 73 20 64 65 20 63 6f 6f 6b 69 65 73 22 2c 22 69 74 65 6d 22 3a 22 68 74 74 Data Ascii: 1000//www.questor.com.br/politicas-de-cookies/questor-zen/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Incio","item":"https://www.questor.com.br/"},{"@type":"ListItem","position":2,"name":"Polticas de cookies","item":"htt
2024-04-18 19:30:10 UTC	1394	IN	Data Raw: 35 36 62 0d 0a 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 Data Ascii: 56bn(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=ty
2024-04-18 19:30:11 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 3c 2f 73 74 79 Data Ascii: aecportant;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0.07em !important;vertical-align: -0.1em !important;background: none !important;padding: 0 !important;}</sty
2024-04-18 19:30:11 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 30 25 2c 72 67 62 28 35 31 2c 31 36 37 2c 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 Data Ascii: 100092) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126
2024-04-18 19:30:11 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 69 64 2d 61 6d 62 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: 1000id-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-c
2024-04-18 19:30:11 UTC	4087	IN	Data Raw: 66 66 30 0d 0a 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 6e 69 6d 61 74 65 64 2d 74 79 70 69 6e 67 2d 65 66 66 65 63 74 2f 61 73 73 65 74 73 2f 63 73 73 2f 63 75 72 73 6f 72 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 32 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 62 6f 6f 74 73 74 72 61 70 63 73 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 35 2e 32 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 Data Ascii: ff0w.questor.com.br/wp-content/plugins/animated-typing-effect/assets/css/cursor.css?ver=6.5.2' type='text/css' media='all' /><link rel='stylesheet' id='bootstrapcss-css' href='https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css?ver
2024-04-18 19:30:11 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 30 69 74 61 6c 69 63 26 23 30 33 38 3b 64 69 73 70 6c 61 79 3d 61 75 74 6f 26 23 30 33 38 3b 76 65 72 3d 36 2e 35 2e 32 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 37 2e 31 Data Ascii: aec0italic&display=auto&ver=6.5.2' type='text/css' media='all' /><link rel="preconnect" href="https://fonts.gstatic.com/" crossorigin><script type="text/javascript" src="https://www.questor.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
2024-04-18 19:30:11 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 74 2d 69 6e 64 75 73 74 72 69 65 73 20 2e 69 6e 64 75 73 2d 69 74 65 6d 20 2e 69 74 65 6d 2d 69 6e 6e 65 72 20 2e 6f 76 65 72 6c 61 79 3a 61 66 74 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 63 34 77 70 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 20 2e 73 75 62 73 63 72 69 62 65 2d 69 6e 6e 65 72 2d 66 6f 72 6d 20 2e 73 75 62 73 63 72 69 62 65 2d 62 74 6e 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 39 35 31 31 64 3b 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 42 6f 72 64 65 72 20 43 6f 6c 6f 72 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 6f 73 74 2d 62 6f 78 20 2e 62 74 6e 2d 70 6c 61 79 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 20 2e 70 6f 73 74 2d 62 6f 78 20 Data Ascii: aecr, .ot-industries .indus-item .item-inner .overlay:after, .mc4wp-form-fields .subscribe-inner-form .subscribe-btn-icon{background:#e9511d;} /Border Color/ .post-box .btn-play:hover:before, .post-box
2024-04-18 19:30:11 UTC	3899	IN	Data Raw: 66 33 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 63 34 77 70 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 20 2e 73 75 62 73 63 72 69 62 65 2d 69 6e 6e 65 72 2d 66 6f 72 6d 20 2e 73 75 62 73 63 72 69 62 65 2d 62 74 6e 2d 69 63 6f 6e 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 23 62 61 63 6b 2d 74 6f 2d 74 6f 70 7b 63 6f 6c 6f 72 3a 20 23 65 39 35 31 31 64 3b 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 70 63 66 37 20 2e 6d 61 69 6e 2d 66 6f 72 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 65 39 35 31 31 64 20 30 25 2c 23 66 66 38 33 34 62 20 31 30 30 25 29 3b 7d 0a 09 09 09 0a 0a 09 09 2f 2a 2a 2a 2a 53 65 63 6f 6e 64 20 43 6f 6c 6f 72 2a 2a 2a 2a 2f 0a Data Ascii: f34 .mc4wp-form-fields .subscribe-inner-form .subscribe-btn-icon:hover, #back-to-top{color: #e9511d;} .wpcf7 .main-form{background-image: linear-gradient(90deg,#e9511d 0%,#ff834b 100%);}/**Second Color**/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49776	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	631	OUT	GET /wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.4.3 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:11 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:11 GMT Content-Type: text/css Content-Length: 74700 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:52 GMT ETag: "661e9358-123cc" Accept-Ranges: bytes
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 2c 0a 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 66 69 65 6c 64 5f 5f 63 6f 6e 74 65 6e 74 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 Data Ascii: .jet-listing .slick-slider,.jet-listing-dynamic-field__content .slick-slider { position: relative; display: block !important; -webkit-box-sizing: border-box; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 66 69 65 6c 64 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 66 69 65 6c 64 5f 5f 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 31 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 31 20 30 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 6a 65 74 2d 65 6e 67 69 6e 65 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 Data Ascii: -listing-dynamic-field > .elementor-widget-container > .jet-listing-dynamic-field__content { -webkit-box-flex: 1; -ms-flex: 1 0 auto; flex: 1 0 auto;}.jet-engine-gallery-grid { display: -webkit-box; display: -ms-flexbox; display
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 61 72 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 35 22 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 36 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 2d 33 30 70 78 20 30 20 30 20 2d 33 30 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 7a Data Ascii: ar; content: "\f055"; font-family: FontAwesome; font-size: 20px; width: 60px; height: 60px; line-height: 60px; font-size: 30px; text-align: center; opacity: 0; left: 50%; top: 50%; margin: -30px 0 0 -30px; position: absolute; z
2024-04-18 19:30:11 UTC	294	IN	Data Raw: 20 32 29 3b 0a 7d 0a 2e 62 72 78 65 2d 6a 65 74 2d 65 6e 67 69 6e 65 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 66 69 65 6c 64 20 2e 6a 65 74 2d 65 6e 67 69 6e 65 2d 67 61 6c 6c 65 72 79 2d 73 6c 69 64 65 72 20 2e 6a 65 74 2d 65 6e 67 69 6e 65 2d 61 72 72 6f 77 20 73 76 67 20 7b 0a 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 65 6d 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 65 6d 3b 0a 7d 0a 2e 62 72 78 65 2d 6a 65 74 2d 65 6e 67 69 6e 65 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 66 69 65 6c 64 20 2e 6a 65 74 2d 65 6e 67 69 6e 65 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 20 7b 0a 20 20 2d 2d 67 61 70 3a 20 32 30 70 78 3b 0a 20 20 67 61 70 3a 20 76 61 72 28 2d 2d 67 61 70 29 3b 0a 20 20 6d 61 72 67 69 Data Ascii: 2);}.brxe-jet-engine-listing-dynamic-field .jet-engine-gallery-slider .jet-engine-arrow svg { max-height: none; width: 1em; height: 1em;}.brxe-jet-engine-listing-dynamic-field .jet-engine-gallery-grid { --gap: 20px; gap: var(--gap); margi
2024-04-18 19:30:11 UTC	2796	IN	Data Raw: 63 2d 66 69 65 6c 64 20 2e 6a 65 74 2d 65 6e 67 69 6e 65 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 5f 5f 69 74 65 6d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 63 61 6c 63 28 28 31 30 30 25 20 2d 20 28 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 73 29 20 2d 20 31 29 20 2a 20 76 61 72 28 2d 2d 67 61 70 29 29 20 2f 20 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 73 29 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 20 30 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 63 61 6c 63 28 28 31 30 30 25 20 2d 20 28 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 73 29 20 2d 20 31 29 20 2a 20 76 61 72 28 2d 2d 67 61 70 29 29 20 2f 20 76 61 72 28 2d 2d 63 6f 6c 75 6d 6e 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: c-field .jet-engine-gallery-grid__item { padding: 0; max-width: calc((100% - (var(--columns) - 1) * var(--gap)) / var(--columns)); -webkit-box-flex: 0; -ms-flex: 0 0 calc((100% - (var(--columns) - 1) * var(--gap)) / var(--columns));
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 3a 20 62 6f 72 64 65 72 2d 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 Data Ascii: : border-box !important; box-sizing: border-box !important; display: -webkit-box !important; display: -ms-flexbox !important; display: flex !important; -webkit-box-align: center !important; -ms-flex-align: center !important;
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 74 2d 65 6e 67 69 6e 65 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 74 65 72 6d 73 20 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 64 79 6e 61 6d 69 63 2d 74 65 72 6d 73 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 20 20 67 61 70 3a 20 76 61 72 28 2d 2d 6a 65 2d 74 65 72 6d 73 2d 67 61 70 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 68 6f 72 69 7a 6f 6e 74 61 6c 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f Data Ascii: t-engine-listing-dynamic-terms .jet-listing-dynamic-terms { display: -webkit-box; display: -ms-flexbox; display: flex; -ms-flex-wrap: wrap; flex-wrap: wrap; gap: var(--je-terms-gap); -webkit-box-orient: horizontal; -webkit-box-directio
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 75 6d 6e 73 3a 20 33 3b 0a 7d 0a 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 67 72 69 64 5f 5f 69 74 65 6d 73 2e 67 72 69 64 2d 63 6f 6c 2d 64 65 73 6b 2d 34 20 7b 0a 20 20 2d 2d 63 6f 6c 75 6d 6e 73 3a 20 34 3b 0a 7d 0a 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 67 72 69 64 5f 5f 69 74 65 6d 73 2e 67 72 69 64 2d 63 6f 6c 2d 64 65 73 6b 2d 35 20 7b 0a 20 20 2d 2d 63 6f 6c 75 6d 6e 73 3a 20 35 3b 0a 7d 0a 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 67 72 69 64 5f 5f 69 74 65 6d 73 2e 67 72 69 64 2d 63 6f 6c 2d 64 65 73 6b 2d 36 20 7b 0a 20 20 2d 2d 63 6f 6c 75 6d 6e 73 3a 20 36 3b 0a 7d 0a 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 67 72 69 64 5f 5f 69 74 65 6d 73 2e 67 72 69 64 2d 63 6f 6c 2d 64 65 73 6b 2d 37 20 7b 0a 20 20 2d 2d 63 6f 6c 75 6d 6e 73 3a 20 37 3b 0a 7d 0a Data Ascii: umns: 3;}.jet-listing-grid__items.grid-col-desk-4 { --columns: 4;}.jet-listing-grid__items.grid-col-desk-5 { --columns: 5;}.jet-listing-grid__items.grid-col-desk-6 { --columns: 6;}.jet-listing-grid__items.grid-col-desk-7 { --columns: 7;}
2024-04-18 19:30:11 UTC	4096	IN	Data Raw: 63 6b 2d 61 72 72 6f 77 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 77 69 64 74 68 3a 20 35 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 31 31 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 35 70 78 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 30 3b 0a 20 20 64 69 73 70 6c 61 79 3a Data Ascii: ck-arrow { position: absolute; top: 50%; width: 50px; height: 50px; line-height: 50px; font-size: 30px; color: #fff; background-color: #111; left: 0; margin-top: -25px; cursor: pointer; text-align: center; z-index: 90; display:
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 65 74 5f 65 78 74 72 61 20 3e 20 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 67 72 69 64 5f 5f 69 74 65 6d 73 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 0a 62 6f 64 79 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 64 65 76 69 63 65 2d 6d 6f 64 65 3d 74 61 62 6c 65 74 5d 20 2e 6a 65 74 2d 6c 69 73 74 69 6e 67 2d 67 72 69 64 5f 5f 73 63 72 6f 6c 6c 2d 73 6c 69 64 65 72 2d 74 61 62 6c 65 74 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 61 75 74 6f 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 20 74 6f 75 63 68 3b 0a 20 20 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 2d 6d 73 Data Ascii: et_extra > .jet-listing-grid__items { -ms-flex-wrap: nowrap; flex-wrap: nowrap;}body[data-elementor-device-mode=tablet] .jet-listing-grid__scroll-slider-tablet { overflow-x: auto; -webkit-overflow-scrolling: touch; -ms-overflow-style: -ms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49785	104.18.10.207	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	589	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css?ver=6.5.2 HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/04/2024 23:51:13 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: a377a4c26168e24f843a33b15dadb211 CDN-Cache: HIT CF-Cache-Status: HIT Age: 767074 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87671168bd5d452d-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:30:12 UTC	414	IN	Data Raw: 37 62 66 35 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7bf5/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 Data Ascii: ray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 Data Ascii: xt-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-b
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 Data Ascii: uto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[typ
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 Data Ascii: ,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.disp
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 38 63 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a Data Ascii: 8c;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-siz
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 Data Ascii: col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-au
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 Data Ascii: ex:0 0 50%;flex:0 0 50%;max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 8
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 Data Ascii: x-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 Data Ascii: irst{-ms-flex-order:-1;order:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;orde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49782	104.18.10.207	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	573	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js?ver=6.5.2 HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:11 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:05:28 CDN-EdgeStorageId: 1070 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 771087c355443373c59f69a76a8e73f1 CDN-Cache: HIT CF-Cache-Status: HIT Age: 767073 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87671168bf294514-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:30:12 UTC	400	IN	Data Raw: 37 62 65 38 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7be8/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f Data Ascii: efine(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.co
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 6f 7c 7c 73 3f 28 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e Data Ascii: Float(i);return o\|\|s?(n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("tran
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 6e 74 2e 73 70 65 63 69 61 6c 5b 61 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 Data Ascii: nt.special[a.TRANSITION_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.pr
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 2e 35 2e 32 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 Data Ascii: .5.2"}}]),t}();e(document).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){fu
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 74 61 72 67 65 74 2c 69 3d 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e Data Ascii: n(t){var n=t.target,i=n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 Data Ascii: al:"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPause
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 Data Ascii: Visible:this.next).bind(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f Data Ascii: (e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.to
2024-04-18 19:30:12 UTC	1369	IN	Data Raw: 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e Data Ascii: tItemIndex=function(t){return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	641	OUT	GET /wp-content/plugins/animated-typing-effect/assets/css/cursor.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	225	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css Content-Length: 476 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:08 GMT ETag: "65807084-1dc" Accept-Ranges: bytes
2024-04-18 19:30:12 UTC	476	IN	Data Raw: 2e 74 79 70 65 64 2d 63 75 72 73 6f 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6c 69 6e 6b 20 30 2e 37 73 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6c 69 6e 6b 20 30 2e 37 73 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6c 69 6e 6b 20 30 2e 37 73 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d Data Ascii: .typed-cursor { opacity: 1; -webkit-animation: blink 0.7s infinite; -moz-animation: blink 0.7s infinite; animation: blink 0.7s infinite;}@-moz-keyframes blink { 0% { opacity: 1; } 50% { opacity: 0; } 100% { opacity: 1; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49778	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	635	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css Content-Length: 2894 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:23 GMT ETag: "661e933b-b4e" Accept-Ranges: bytes
2024-04-18 19:30:12 UTC	2796	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo
2024-04-18 19:30:12 UTC	98	IN	Data Raw: 09 64 69 73 70 6c 61 79 3a 20 6c 69 73 74 2d 69 74 65 6d 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 77 70 63 66 37 2d 72 65 66 6c 65 63 74 69 6f 6e 20 3e 20 6f 75 74 70 75 74 5b 68 69 64 64 65 6e 5d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a Data Ascii: display: list-item;list-style: none;}.wpcf7-reflection > output[hidden] {display: none;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	611	OUT	GET /wp-includes/css/dashicons.min.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css Content-Length: 59016 Connection: close Last-Modified: Wed, 03 Mar 2021 21:16:22 GMT ETag: "603ffca6-e688" Accept-Ranges: bytes
2024-04-18 19:30:12 UTC	2796	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:applicati
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 49 64 46 72 6b 39 33 57 75 51 39 63 35 64 46 50 6d 64 33 57 37 35 47 30 7a 32 6d 62 69 38 2f 61 68 2f 31 66 52 52 68 36 67 44 56 38 35 74 36 51 59 70 6d 55 31 64 49 30 63 2f 55 48 31 4b 30 6d 44 70 46 69 76 36 6d 6e 70 46 69 67 4b 6c 37 70 47 67 31 39 5a 45 55 62 61 61 4f 6b 6d 4b 51 71 62 65 6b 47 47 7a 71 4d 69 6d 47 6d 50 70 4e 69 71 47 6d 7a 70 4e 69 6d 4b 6b 48 70 52 68 75 36 6b 59 70 52 70 6a 36 55 6f 71 52 70 67 36 56 6f 74 33 55 71 31 4a 30 6d 4c 70 57 69 74 47 6d 2f 70 56 69 6a 4b 6d 54 70 52 68 72 36 6d 6b 70 78 70 6d 36 57 34 72 78 70 6a 36 58 59 6f 4b 70 34 36 57 59 61 4f 70 39 4b 53 61 5a 75 6d 43 4b 54 6c 4d 2f 54 4e 46 6c 36 6f 77 70 4a 70 74 36 5a 49 6f 70 70 6d 36 5a 59 71 72 78 70 4d 5a 70 46 71 72 76 78 58 51 4c 31 66 64 69 68 6f 58 71 Data Ascii: IdFrk93WuQ9c5dFPmd3W75G0z2mbi8/ah/1fRRh6gDV85t6QYpmU1dI0c/UH1K0mDpFiv6mnpFigKl7pGg19ZEUbaaOkmKQqbekGGzqMimGmPpNiqGmzpNimKkHpRhu6kYpRpj6UoqRpg6Vot3Uq1J0mLpWitGm/pVijKmTpRhr6mkpxpm6W4rxpj6XYoKp46WYaOp9KSaZumCKTlM/TNFl6owpJpt6ZIoppm6ZYqrxpMZpFqrvxXQL1fdihoXq
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 4d 4d 44 42 4a 54 56 39 59 2f 5a 7a 62 62 39 4c 38 72 6e 4e 33 58 6c 72 6a 76 76 4b 75 31 38 47 68 73 45 2f 55 7a 7a 2b 52 6c 59 39 78 78 59 36 78 6c 55 4a 51 32 79 44 6a 4f 35 73 2b 6c 37 43 64 6a 48 58 55 44 62 42 54 71 44 71 2b 52 69 47 7a 42 33 68 42 6a 48 30 43 53 42 53 77 6d 57 30 37 4d 74 50 67 55 54 51 6a 57 63 43 34 56 4f 4f 56 65 72 48 72 76 2f 57 4c 57 61 4b 37 5a 4c 79 4e 59 56 57 37 65 30 5a 72 35 63 7a 6a 63 31 53 37 63 56 2f 64 78 36 74 5a 50 66 77 52 49 76 69 72 79 45 64 77 72 74 79 67 53 66 66 77 48 71 75 77 58 48 4a 6d 45 30 43 4b 49 4c 6d 38 59 55 32 51 48 4a 49 46 67 57 6c 78 43 42 72 39 74 6f 48 55 30 75 7a 49 34 41 76 6a 2b 6a 2b 32 6e 6a 6b 57 32 54 34 31 4b 61 76 36 5a 78 6f 73 77 35 6d 6c 6c 57 58 6a 6c 35 53 62 74 76 4c 53 33 73 Data Ascii: MMDBJTV9Y/Zzbb9L8rnN3XlrjvvKu18GhsE/Uzz+RlY9xxY6xlUJQ2yDjO5s+l7CdjHXUDbBTqDq+RiGzB3hBjH0CSBSwmW07MtPgUTQjWcC4VOOVerHrv/WLWaK7ZLyNYVW7e0Zr5czjc1S7cV/dx6tZPfwRIviryEdwrtygSffwHquwXHJmE0CKILm8YU2QHJIFgWlxCBr9toHU0uzI4Avj+j+2njkW2T41Kav6Zxosw5mllWXjl5SbtvLS3s
2024-04-18 19:30:12 UTC	1594	IN	Data Raw: 52 66 52 4c 7a 48 33 4d 41 38 78 54 7a 44 50 4d 53 38 79 33 38 46 38 41 4e 41 47 55 65 4b 74 49 34 64 30 73 4a 45 49 76 64 73 54 2b 4e 55 6c 67 78 4e 61 43 4e 71 44 44 74 46 6f 6f 68 31 4a 6a 76 46 41 6a 6d 38 67 34 39 37 7a 77 38 6e 53 32 5a 33 51 54 61 4c 46 4a 41 4d 44 68 68 47 4d 45 7a 38 65 4c 58 45 53 7a 4a 50 4f 35 4e 79 66 69 36 4e 66 38 46 62 50 2b 4b 49 71 70 53 56 62 49 70 79 41 70 49 72 2b 6d 56 58 50 64 4e 49 31 6c 71 38 45 65 6c 50 69 79 4a 6f 4d 61 30 30 4c 76 69 54 4b 53 61 45 57 56 44 6d 32 6d 67 75 75 53 53 59 5a 39 41 2f 46 53 2f 4e 35 48 74 59 6d 2b 4b 61 34 67 48 75 4e 78 4f 33 43 4a 42 64 32 42 66 7a 49 4c 74 47 35 6b 4b 42 45 63 51 67 4a 2f 73 62 66 57 66 57 31 5a 74 34 31 52 59 55 58 56 4e 46 30 63 77 33 4e 58 39 33 78 5a 55 31 65 Data Ascii: RfRLzH3MA8xTzDPMS8y38F8ANAGUeKtI4d0sJEIvdsT+NUlgxNaCNqDDtFooh1JjvFAjm8g497zw8nS2Z3QTaLFJAMDhhGMEz8eLXESzJPO5Nyfi6Nf8FbP+KIqpSVbIpyApIr+mVXPdNI1lq8EelPiyJoMa00LviTKSaEWVDm2mguuSSYZ9A/FS/N5HtYm+Ka4gHuNxO3CJBd2BfzILtG5kKBEcQgJ/sbfWfW1Zt41RYUXVNF0cw3NX93xZU1e
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 73 66 75 32 4b 32 34 31 56 43 76 51 62 31 77 4d 77 61 42 2f 41 35 79 33 71 4d 57 77 4e 53 62 6e 33 30 64 37 66 55 65 35 58 44 67 2b 7a 56 2b 67 66 4d 7a 63 66 52 6f 6c 4e 44 57 42 6e 47 4a 39 30 45 73 54 79 67 57 36 55 6d 68 72 56 44 4f 35 57 44 56 4d 5a 50 36 75 59 68 6e 70 33 72 78 39 52 49 64 34 70 6d 4f 48 71 2b 44 65 55 64 46 70 42 61 36 6f 5a 6a 51 39 4f 50 58 67 4b 50 76 50 32 49 73 53 57 68 74 6a 62 6b 58 70 59 4e 56 78 7a 75 78 50 62 70 6d 45 50 44 61 35 46 67 32 75 6c 31 64 55 7a 71 36 73 49 79 44 61 4d 76 71 42 31 4f 45 70 4d 78 68 4b 62 44 66 52 74 67 4b 68 58 36 46 78 69 47 6b 36 69 38 4f 7a 57 31 6c 68 43 74 57 73 54 64 45 77 62 4e 49 72 44 75 42 30 72 56 4d 48 6d 54 35 6c 4d 74 41 4d 74 43 41 31 34 65 52 47 76 37 56 54 44 34 7a 68 74 46 78 Data Ascii: sfu2K241VCvQb1wMwaB/A5y3qMWwNSbn30d7fUe5XDg+zV+gfMzcfRolNDWBnGJ90EsTygW6UmhrVDO5WDVMZP6uYhnp3rx9RId4pmOHq+DeUdFpBa6oZjQ9OPXgKPvP2IsSWhtjbkXpYNVxzuxPbpmEPDa5Fg2ul1dUzq6sIyDaMvqB1OEpMxhKbDfRtgKhX6FxiGk6i8OzW1lhCtWsTdEwbNIrDuB0rVMHmT5lMtAMtCA14eRGv7VTD4zhtFx
2024-04-18 19:30:12 UTC	2894	IN	Data Raw: 63 34 48 65 33 35 6e 62 39 53 68 63 61 7a 77 65 45 6a 36 4d 32 44 69 75 59 38 44 67 66 4f 48 6d 79 33 43 38 2f 4d 65 34 2f 41 59 63 34 6a 6f 59 51 52 2f 63 2f 4d 59 62 6a 58 76 6e 45 43 51 69 65 51 50 31 4a 66 47 71 4c 39 39 46 59 5a 6b 4c 6b 58 67 49 6d 77 6e 53 4b 35 71 6c 51 44 32 59 62 45 61 2f 48 57 6e 6d 41 78 63 78 47 6c 4e 61 58 39 6c 2f 58 73 4f 77 48 50 2f 43 41 62 54 59 65 32 33 64 56 55 37 51 69 39 45 33 64 39 6b 59 74 6c 34 50 31 71 42 71 75 76 2b 62 65 2b 32 35 62 44 79 74 77 70 69 75 47 57 64 6c 6f 64 30 6c 57 2f 4c 51 75 52 4e 34 64 37 35 30 46 6e 73 4b 74 51 61 5a 68 46 2f 4f 6b 4c 6e 37 4b 78 31 43 35 43 71 6c 6c 65 44 41 63 44 76 5a 4b 78 35 39 45 7a 6c 37 70 79 65 4f 6c 36 74 61 54 70 66 45 49 6f 6c 76 45 32 72 68 66 65 76 4c 45 37 66 Data Ascii: c4He35nb9ShcazweEj6M2DiuY8DgfOHmy3C8/Me4/AYc4joYQR/c/MYbjXvnECQieQP1JfGqL99FYZkLkXgImwnSK5qlQD2YbEa/HWnmAxcxGlNaX9l/XsOwHP/CAbTYe23dVU7Qi9E3d9kYtl4P1qBquv+be+25bDytwpiuGWdlod0lW/LQuRN4d750FnsKtQaZhF/OkLn7Kx1C5CqlleDAcDvZKx59Ezl7pyeOl6taTpfEIolvE2rhfevLE7f
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 4a 34 69 30 66 6f 52 37 54 41 41 69 41 5a 56 51 68 50 76 43 57 54 62 61 49 6b 6c 58 70 49 63 59 45 36 75 55 71 76 47 46 6f 54 43 38 4f 4e 45 63 38 52 78 33 2f 2b 75 6c 4b 79 67 4c 37 38 6f 72 76 6e 2f 78 58 50 46 62 79 46 48 33 37 33 37 7a 31 39 51 4d 4d 38 69 64 50 4c 6a 48 49 75 6c 32 58 79 36 52 6e 6d 6e 4c 4a 58 6b 51 56 5a 51 65 38 69 49 62 49 63 69 30 68 31 69 30 2b 54 35 62 77 42 61 63 47 7a 38 6f 38 65 2b 39 43 4d 38 70 31 6a 69 2b 37 38 48 70 2b 55 55 6a 34 5a 72 58 31 79 44 7a 78 2b 38 68 7a 4d 4e 6c 6e 2f 44 47 33 6a 57 4d 44 6c 6d 70 72 63 69 62 55 70 38 70 42 43 4c 35 78 76 73 4d 33 48 4e 6e 62 6e 43 69 6e 7a 73 75 38 52 31 57 44 64 73 2b 30 63 73 4e 54 39 48 4e 6f 6f 56 58 56 33 74 39 35 76 4e 33 64 32 67 32 51 53 30 56 2f 53 75 45 69 4d 62 Data Ascii: J4i0foR7TAAiAZVQhPvCWTbaIklXpIcYE6uUqvGFoTC8ONEc8Rx3/+ulKygL78orvn/xXPFbyFH3737z19QMM8idPLjHIul2Xy6RnmnLJXkQVZQe8iIbIci0h1i0+T5bwBacGz8o8e+9CM8p1ji+78Hp+UUj4ZrX1yDzx+8hzMNln/DG3jWMDlmprcibUp8pBCL5xvsM3HNnbnCinzsu8R1WDds+0csNT9HNooVXV3t95vN3d2g2QS0V/SuEiMb
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 72 57 4a 4e 56 30 6a 43 76 32 4b 57 38 45 31 6e 32 56 36 38 52 76 47 66 33 48 6c 30 67 46 35 79 53 4e 58 4c 71 47 41 35 48 48 31 61 74 54 2f 4b 4f 54 44 54 4d 70 48 66 52 49 70 56 4c 35 57 49 4e 67 49 38 47 33 55 42 76 61 31 35 6a 65 67 72 47 54 72 72 55 38 31 70 79 47 38 2b 6d 41 7a 62 59 65 6e 7a 71 2f 64 68 6a 34 4d 58 58 6b 34 67 6a 77 47 64 4f 50 7a 6f 47 59 37 6e 64 74 50 50 50 52 70 77 49 36 49 4f 59 79 67 33 59 65 33 66 44 38 4d 70 47 34 4e 71 49 38 4c 51 4b 56 52 41 52 49 50 68 62 64 4a 61 37 53 4a 6b 68 5a 39 61 50 50 69 62 61 73 58 74 6b 4c 62 47 72 38 4c 33 67 4e 76 69 33 71 37 57 5a 4c 42 51 77 2b 64 75 4c 33 6a 32 4c 63 64 45 68 77 59 58 57 64 36 42 34 64 7a 74 6c 43 45 52 79 31 54 6c 46 34 6b 75 2f 61 6f 55 72 34 62 49 77 6f 79 65 4b 76 45 Data Ascii: rWJNV0jCv2KW8E1n2V68RvGf3Hl0gF5ySNXLqGA5HH1atT/KOTDTMpHfRIpVL5WINgI8G3UBva15jegrGTrrU81pyG8+mAzbYenzq/dhj4MXXk4gjwGdOPzoGY7ndtPPPRpwI6IOYyg3Ye3fD8MpG4NqI8LQKVRARIPhbdJa7SJkhZ9aPPibasXtkLbGr8L3gNvi3q7WZLBQw+duL3j2LcdEhwYXWd6B4dztlCERy1TlF4ku/aoUr4bIwoyeKvE
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 4e 46 66 4a 39 4f 70 52 30 4a 69 53 6b 6e 45 66 63 4c 63 44 30 69 69 4b 2b 52 48 53 36 39 6b 7a 75 78 6b 4f 52 4a 37 68 33 58 4d 30 30 54 50 65 34 63 49 4b 2f 73 37 73 4f 37 68 64 35 44 66 52 4c 49 30 37 35 68 31 78 56 38 70 70 6c 4b 53 49 41 4a 55 6b 44 68 68 41 2f 31 73 39 74 79 35 7a 4b 63 79 6c 75 46 78 6d 58 50 6e 73 69 39 5a 6f 69 4b 49 2f 68 6e 2f 4a 57 79 34 2b 43 58 36 68 76 51 78 54 30 30 4c 73 6d 68 39 79 74 74 5a 51 59 6a 59 69 6e 6e 45 47 54 37 4c 54 75 54 42 38 5a 35 32 73 6d 4f 2b 43 70 68 78 6b 7a 6b 4a 61 32 58 69 63 59 76 73 33 62 59 77 48 63 67 31 73 73 33 44 39 57 50 62 50 66 70 7a 52 34 6d 37 6b 67 69 57 56 65 4c 48 49 6e 6e 6b 46 51 64 57 53 6a 77 59 6f 64 34 66 4f 36 59 54 72 4a 6e 4f 4d 33 6d 6e 58 72 63 4c 6a 30 66 41 72 76 62 47 Data Ascii: NFfJ9OpR0JiSknEfcLcD0iiK+RHS69kzuxkORJ7h3XM00TPe4cIK/s7sO7hd5DfRLI075h1xV8pplKSIAJUkDhhA/1s9ty5zKcyluFxmXPnsi9ZoiKI/hn/JWy4+CX6hvQxT00Lsmh9yttZQYjYinnEGT7LTuTB8Z52smO+CphxkzkJa2XicYvs3bYwHcg1ss3D9WPbPfpzR4m7kgiWVeLHInnkFQdWSjwYod4fO6YTrJnOM3mnXrcLj0fArvbG
2024-04-18 19:30:12 UTC	3090	IN	Data Raw: 6f 57 38 31 74 62 69 4b 2f 53 31 31 43 61 79 36 66 68 59 31 74 74 34 47 44 4b 2f 64 4f 49 75 66 54 53 4d 53 58 4f 58 34 35 55 31 30 4b 35 67 38 66 79 4b 30 32 6a 73 43 48 65 6b 31 4c 30 62 7a 57 36 2f 2f 54 5a 36 6e 4e 6f 73 69 6d 43 39 41 33 32 59 32 69 66 47 2f 48 77 43 32 2f 63 35 50 79 74 56 62 73 44 46 4b 62 52 71 70 62 41 57 44 4d 5a 4e 6e 50 6f 4c 73 71 6b 48 67 6b 34 59 39 39 55 4f 50 32 4c 6e 7a 48 4f 58 7a 70 6b 35 2b 78 48 30 4f 4d 52 74 63 36 79 67 30 51 51 4a 33 63 33 57 52 78 5a 76 55 50 66 4d 7a 65 31 52 62 31 68 6b 74 75 4c 74 36 6a 35 65 42 6d 56 74 4c 2b 73 69 35 78 72 54 6e 45 64 4d 45 39 55 68 43 2f 4d 57 44 36 68 47 37 74 30 68 73 75 51 51 31 59 6c 37 47 64 4d 4b 4e 6d 6c 4e 52 46 72 41 46 47 54 5a 4a 5a 30 41 55 77 55 75 49 64 75 74 Data Ascii: oW81tbiK/S11Cay6fhY1tt4GDK/dOIufTSMSXOX45U10K5g8fyK02jsCHek1L0bzW6//TZ6nNosimC9A32Y2ifG/HwC2/c5PytVbsDFKbRqpbAWDMZNnPoLsqkHgk4Y99UOP2LnzHOXzpk5+xH0OMRtc6yg0QQJ3c3WRxZvUPfMze1Rb1hktuLt6j5eBmVtL+si5xrTnEdME9UhC/MWD6hG7t0hsuQQ1Yl7GdMKNmlNRFrAFGTZJZ0AUwUuIdut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	620	OUT	GET /wp-content/themes/engitech/css/bootstrap.css?ver=4.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css Content-Length: 12229 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-2fc5" Accept-Ranges: bytes
2024-04-18 19:30:12 UTC	3861	IN	Data Raw: 20 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 2f 2a 21 0d 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 3c 6e 6f 6e 65 3e 29 0d 0a 20 2a 20 43 6f 6e 66 69 67 20 73 61 76 65 64 20 74 6f 20 63 6f 6e 66 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! * Generated using the Bootstrap Customizer (<none>) * Config saved to conf
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 69 6e 65 72 7b 77 69 64 74 68 3a 37 35 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 37 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 33 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 32 30 30 70 78 7d 7d 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 7d 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 Data Ascii: iner{width:750px}}@media (min-width:992px){.container{width:970px}}@media (min-width:1230px){.container{width:1200px}}.row{margin-left:-15px;margin-right:-15px}.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.c
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d Data Ascii: {margin-left:25%}.col-sm-offset-2{margin-left:16.66666667%}.col-sm-offset-1{margin-left:8.33333333%}.col-sm-offset-0{margin-left:0}}@media (min-width:992px){.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-
2024-04-18 19:30:12 UTC	176	IN	Data Raw: 69 6e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 74 65 78 74 2d 68 69 64 65 7b 66 6f 6e 74 3a 30 2f 30 20 61 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 66 66 69 78 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d Data Ascii: invisible{visibility:hidden}.text-hide{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}.hidden{display:none!important}.affix{position:fixed}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49781	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:11 UTC	629	OUT	GET /wp-content/themes/engitech/css/font-awesome.min.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:12 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css Content-Length: 57130 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-df2a" Accept-Ranges: bytes
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 32 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 0d 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 Data Ascii: /! Font Awesome Free 5.12.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-w
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 62 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 39 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 30 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 31 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 32 22 7d 2e 66 61 2d 61 6e Data Ascii: a-android:before{content:"\f17b"}.fa-angellist:before{content:"\f209"}.fa-angle-double-down:before{content:"\f103"}.fa-angle-double-left:before{content:"\f100"}.fa-angle-double-right:before{content:"\f101"}.fa-angle-double-up:before{content:"\f102"}.fa-an
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 36 62 37 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 36 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 38 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 72 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 61 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 65 22 7d 2e 66 61 2d 62 6f 6f 74 73 74 72 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 33 36 22 7d 2e 66 61 2d 62 6f 72 64 65 72 2d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 63 22 7d 2e 66 61 2d 62 6f 72 64 65 72 2d 6e 6f 6e Data Ascii: ntent:"\f6b7"}.fa-book-medical:before{content:"\f7e6"}.fa-book-open:before{content:"\f518"}.fa-book-reader:before{content:"\f5da"}.fa-bookmark:before{content:"\f02e"}.fa-bootstrap:before{content:"\f836"}.fa-border-all:before{content:"\f84c"}.fa-border-non
2024-04-18 19:30:12 UTC	294	IN	Data Raw: 22 5c 66 30 37 38 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 33 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 34 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 37 22 7d 2e 66 61 2d 63 68 69 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 65 22 7d 2e 66 61 2d 63 68 72 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 38 22 7d 2e 66 61 2d 63 68 72 6f 6d 65 63 61 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 33 38 22 7d 2e 66 61 2d 63 68 75 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: "\f078"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-chevron-up:before{content:"\f077"}.fa-child:before{content:"\f1ae"}.fa-chrome:before{content:"\f268"}.fa-chromecast:before{content:"\f838"}.fa-church:before{conte
2024-04-18 19:30:12 UTC	1398	IN	Data Raw: 66 31 31 31 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6e 6f 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 65 22 7d 2e 66 61 2d 63 69 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 66 22 7d 2e 66 61 2d 63 6c 69 6e 69 63 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 66 32 22 7d 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 32 38 22 7d 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 63 22 7d 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 64 22 7d 2e 66 61 2d 63 6c 6f 63 6b 3a 62 65 66 Data Ascii: f111"}.fa-circle-notch:before{content:"\f1ce"}.fa-city:before{content:"\f64f"}.fa-clinic-medical:before{content:"\f7f2"}.fa-clipboard:before{content:"\f328"}.fa-clipboard-check:before{content:"\f46c"}.fa-clipboard-list:before{content:"\f46d"}.fa-clock:bef
2024-04-18 19:30:12 UTC	2796	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 66 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 62 33 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 36 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 2d 64 6f 6c 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 35 33 22 7d 2e 66 61 2d 63 6f 6d 70 61 63 74 2d 64 69 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 66 22 7d 2e 66 61 2d 63 6f 6d 70 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 65 22 7d 2e 66 61 2d 63 6f 6d 70 72 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 36 22 7d 2e Data Ascii: before{content:"\f7f5"}.fa-comment-slash:before{content:"\f4b3"}.fa-comments:before{content:"\f086"}.fa-comments-dollar:before{content:"\f653"}.fa-compact-disc:before{content:"\f51f"}.fa-compass:before{content:"\f14e"}.fa-compress:before{content:"\f066"}.
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 37 22 7d 2e 66 61 2d 64 69 63 65 2d 74 77 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 38 22 7d 2e 66 61 2d 64 69 67 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 36 22 7d 2e 66 61 2d 64 69 67 69 74 61 6c 2d 6f 63 65 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 31 22 7d 2e 66 61 2d 64 69 67 69 74 61 6c 2d 74 61 63 68 6f 67 72 61 70 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 36 36 22 7d 2e 66 61 2d 64 69 72 65 63 74 69 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 62 22 7d 2e 66 61 2d 64 69 73 63 6f 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 32 22 7d 2e 66 61 2d 64 Data Ascii: efore{content:"\f527"}.fa-dice-two:before{content:"\f528"}.fa-digg:before{content:"\f1a6"}.fa-digital-ocean:before{content:"\f391"}.fa-digital-tachograph:before{content:"\f566"}.fa-directions:before{content:"\f5eb"}.fa-discord:before{content:"\f392"}.fa-d
2024-04-18 19:30:12 UTC	1496	IN	Data Raw: 5c 66 31 63 31 22 7d 2e 66 61 2d 66 69 6c 65 2d 70 6f 77 65 72 70 6f 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 34 22 7d 2e 66 61 2d 66 69 6c 65 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 32 22 7d 2e 66 61 2d 66 69 6c 65 2d 73 69 67 6e 61 74 75 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 33 22 7d 2e 66 61 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 34 22 7d 2e 66 61 2d 66 69 6c 65 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 38 22 7d 2e 66 61 2d 66 69 6c 65 2d 77 6f 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 32 22 7d 2e 66 61 2d Data Ascii: \f1c1"}.fa-file-powerpoint:before{content:"\f1c4"}.fa-file-prescription:before{content:"\f572"}.fa-file-signature:before{content:"\f573"}.fa-file-upload:before{content:"\f574"}.fa-file-video:before{content:"\f1c8"}.fa-file-word:before{content:"\f1c2"}.fa-
2024-04-18 19:30:12 UTC	4096	IN	Data Raw: 63 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 30 22 7d 2e 66 61 2d 66 6f 6e 74 69 63 6f 6e 73 2d 66 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 32 22 7d 2e 66 61 2d 66 6f 6f 74 62 61 6c 6c 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 34 65 22 7d 2e 66 61 2d 66 6f 72 74 2d 61 77 65 73 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 36 22 7d 2e 66 61 2d 66 6f 72 74 2d 61 77 65 73 6f 6d 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 61 33 22 7d 2e 66 61 2d 66 6f 72 75 6d 62 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 31 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: cons:before{content:"\f280"}.fa-fonticons-fi:before{content:"\f3a2"}.fa-football-ball:before{content:"\f44e"}.fa-fort-awesome:before{content:"\f286"}.fa-fort-awesome-alt:before{content:"\f3a3"}.fa-forumbee:before{content:"\f211"}.fa-forward:before{content
2024-04-18 19:30:12 UTC	2894	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 61 22 7d 2e 66 61 2d 68 61 6e 64 2d 72 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 35 22 7d 2e 66 61 2d 68 61 6e 64 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 37 22 7d 2e 66 61 2d 68 61 6e 64 2d 73 70 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 39 22 7d 2e 66 61 2d 68 61 6e 64 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 63 32 22 7d 2e 66 61 2d 68 61 6e 64 73 2d 68 65 6c 70 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 63 34 22 7d 2e 66 61 2d 68 61 6e 64 73 68 61 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 35 22 7d 2e 66 61 2d 68 61 6e 75 Data Ascii: ore{content:"\f25a"}.fa-hand-rock:before{content:"\f255"}.fa-hand-scissors:before{content:"\f257"}.fa-hand-spock:before{content:"\f259"}.fa-hands:before{content:"\f4c2"}.fa-hands-helping:before{content:"\f4c4"}.fa-handshake:before{content:"\f2b5"}.fa-hanu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49788	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:12 UTC	621	OUT	GET /wp-content/themes/engitech/css/flaticon.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:12 GMT Content-Type: text/css Content-Length: 3816 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-ee8" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	2796	IN	Data Raw: 20 20 2f 2a 0d 0a 20 20 20 20 46 6c 61 74 69 63 6f 6e 20 69 63 6f 6e 20 66 6f 6e 74 3a 20 46 6c 61 74 69 63 6f 6e 0d 0a 20 20 20 20 43 72 65 61 74 69 6f 6e 20 64 61 74 65 3a 20 32 31 2f 31 32 2f 32 30 31 39 20 30 38 3a 34 33 0d 0a 20 20 20 20 2a 2f 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 46 6c 61 74 69 63 6f 6e 22 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 46 6c 61 74 69 63 6f 6e 2e 65 6f 74 22 29 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 46 6c 61 74 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 0d 0a 20 20 20 20 20 20 20 75 72 6c 28 22 2e 2e 2f Data Ascii: /* Flaticon icon font: Flaticon Creation date: 21/12/2019 08:43 */@font-face { font-family: "Flaticon"; src: url("../fonts/Flaticon.eot"); src: url("../fonts/Flaticon.eot?#iefix") format("embedded-opentype"), url("../
2024-04-18 19:30:13 UTC	1020	IN	Data Raw: 6e 74 3a 20 22 5c 66 31 32 37 22 3b 20 7d 0d 0a 2e 66 6c 61 74 69 63 6f 6e 2d 70 68 6f 6e 65 2d 31 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 38 22 3b 20 7d 0d 0a 2e 66 6c 61 74 69 63 6f 6e 2d 64 61 74 61 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 39 22 3b 20 7d 0d 0a 2e 66 6c 61 74 69 63 6f 6e 2d 70 68 70 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 61 22 3b 20 7d 0d 0a 2e 66 6c 61 74 69 63 6f 6e 2d 65 6c 65 63 74 72 6f 6e 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 62 22 3b 20 7d 0d 0a 2e 66 6c 61 74 69 63 6f 6e 2d 6a 61 76 61 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 63 22 3b 20 7d 0d 0a 2e 66 6c 61 74 69 63 6f Data Ascii: nt: "\f127"; }.flaticon-phone-1:before { content: "\f128"; }.flaticon-data:before { content: "\f129"; }.flaticon-php:before { content: "\f12a"; }.flaticon-electron:before { content: "\f12b"; }.flaticon-java:before { content: "\f12c"; }.flatico

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49789	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:12 UTC	618	OUT	GET /wp-content/themes/engitech/css/slick.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:13 GMT Content-Type: text/css Content-Length: 1794 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-702" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	1794	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; -webkit-touch-callout:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49790	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:12 UTC	624	OUT	GET /wp-content/themes/engitech/css/slick-theme.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:13 GMT Content-Type: text/css Content-Length: 2481 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-9b1" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	1398	IN	Data Raw: 2f 2a 20 41 72 72 6f 77 73 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 0a 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e Data Ascii: /* Arrows */.slick-prev,.slick-next{ font-size: 0; line-height: 0; position: absolute; top: 50%; display: block; width: 20px; height: 20px; padding: 0; -webkit-transform: translate(0, -50%); -ms-transform: tran
2024-04-18 19:30:13 UTC	1083	IN	Data Raw: 86 90 27 3b 0a 7d 0a 0a 2f 2a 20 44 6f 74 73 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 64 6f 74 74 65 64 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 36 30 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 6c 69 Data Ascii: ';}/* Dots */.slick-dotted.slick-slider{ margin-bottom: 30px;}.slick-dots{ position: absolute; bottom: -60px; display: block; width: 100%; padding: 0; margin: 0; list-style: none; text-align: center;}.sli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49791	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:12 UTC	627	OUT	GET /wp-content/themes/engitech/css/magnific-popup.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:13 GMT Content-Type: text/css Content-Length: 6367 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-18df" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	1398	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 55 70 20 43 53 53 2a 2f 0d 0a 2e 6d 66 70 2d 62 67 2c 2e 6d 66 70 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6d 66 70 2d 62 67 2c 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 66 70 2d 77 72 61 70 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 2e 6d 66 70 2d 66 69 67 75 72 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 7d 2e 6d 66 70 2d 62 67 7b 7a 2d 69 6e 64 65 78 3a 31 30 34 32 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 62 30 62 30 62 3b 6f 70 61 63 69 74 79 3a 2e 38 3b 66 69 6c 74 65 72 3a 61 6c Data Ascii: /! Magnific PopUp CSS/.mfp-bg,.mfp-wrap{position:fixed;left:0;top:0}.mfp-bg,.mfp-container,.mfp-wrap{height:100%;width:100%}.mfp-container:before,.mfp-figure:after{content:''}.mfp-bg{z-index:1042;overflow:hidden;background:#0b0b0b;opacity:.8;filter:al
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 38 65 6d 3b 6c 65 66 74 3a 38 70 78 3b 72 69 67 68 74 3a 38 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 34 7d 2e 6d 66 70 2d 70 72 65 6c 6f 61 64 65 72 20 61 7b 63 6f 6c 6f 72 3a 23 63 63 63 7d 2e 6d 66 70 2d 63 6c 6f 73 65 2c 2e 6d 66 70 2d 70 72 65 6c 6f 61 64 65 72 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6d 66 70 2d 73 2d 65 72 72 6f 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 2e 6d 66 70 2d 73 2d 72 65 61 64 79 20 2e 6d 66 70 2d 70 72 65 6c 6f 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2e 6d 66 70 2d 61 72 72 6f 77 2c 62 75 74 74 6f 6e 2e 6d 66 70 2d 63 6c 6f 73 65 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 63 75 72 73 6f 72 Data Ascii: dth:auto;margin-top:-.8em;left:8px;right:8px;z-index:1044}.mfp-preloader a{color:#ccc}.mfp-close,.mfp-preloader a:hover{color:#fff}.mfp-s-error .mfp-content,.mfp-s-ready .mfp-preloader{display:none}button.mfp-arrow,button.mfp-close{overflow:visible;cursor
2024-04-18 19:30:13 UTC	873	IN	Data Raw: 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 7d 2e 6d 66 70 2d 61 72 72 6f 77 2d 72 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 31 30 30 25 7d 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 70 78 7d 7d 2e 6d 66 70 2d 69 65 37 20 2e 6d 66 70 2d 69 6d 67 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 6d 66 70 2d 69 65 37 20 2e 6d 66 70 2d 62 6f 74 74 6f 6d 2d 62 61 72 7b 77 69 64 74 68 3a 36 30 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 30 70 78 3b 6d Data Ascii: it-transform-origin:0;transform-origin:0}.mfp-arrow-right{-webkit-transform-origin:100%;transform-origin:100%}.mfp-container{padding-left:6px;padding-right:6px}}.mfp-ie7 .mfp-img{padding:0}.mfp-ie7 .mfp-bottom-bar{width:600px;left:50%;margin-left:-300px;m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49792	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:13 UTC	614	OUT	GET /wp-content/themes/engitech/style.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:13 GMT Content-Type: text/css Content-Length: 166835 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-28bb3" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	1398	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 45 6e 67 69 74 65 63 68 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 70 64 65 6d 6f 2e 61 72 63 68 69 77 70 2e 63 6f 6d 2f 65 6e 67 69 74 65 63 68 0a 41 75 74 68 6f 72 3a 20 4f 63 65 61 6e 54 68 65 6d 65 73 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 6f 63 65 61 6e 74 68 65 6d 65 73 2e 6e 65 74 2f 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 45 6e 67 69 74 65 63 68 20 69 73 20 61 20 57 6f 72 64 50 72 65 73 73 20 74 68 65 6d 65 20 66 6f 72 20 49 54 20 53 6f 6c 75 74 69 6f 6e 20 61 6e 64 20 53 65 72 76 69 63 65 73 20 43 6f 6d 70 61 6e 79 2e 20 45 6e 67 69 74 65 63 68 20 69 73 20 65 61 73 79 20 74 6f 20 75 73 65 2c 20 69 74 20 70 72 Data Ascii: @charset "UTF-8";/*Theme Name: EngitechTheme URI: http://wpdemo.archiwp.com/engitechAuthor: OceanThemesAuthor URI: http://oceanthemes.net/Description: Engitech is a WordPress theme for IT Solution and Services Company. Engitech is easy to use, it pr
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 2f 2a 20 44 6f 63 75 6d 65 6e 74 0a 09 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6c 69 6e 65 20 68 65 69 67 68 74 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 20 32 2e 20 50 72 Data Ascii: ------------------------//! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css // Document ========================================================================== //* * 1. Correct the line height in all browsers. * 2. Pr
2024-04-18 19:30:13 UTC	1496	IN	Data Raw: 73 65 74 60 20 65 6c 65 6d 65 6e 74 73 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 2f 0a 6c 65 67 65 6e 64 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2f 2a 20 31 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 2f 2a 20 32 20 2a 2f 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 2f 2a 20 31 20 2a 2f 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 2f 2a 20 31 20 2a 2f 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 2f 2a 20 33 20 2a 2f 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 2f 2a 20 31 20 2a 2f 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 76 65 72 74 69 63 61 Data Ascii: set` elements in all browsers. /legend { box-sizing: border-box; / 1 / color: inherit; / 2 / display: table; / 1 / max-width: 100%; / 1 / padding: 0; / 3 / white-space: normal; / 1 /}/* * Add the correct vertica
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 20 64 69 73 70 6c 61 79 20 69 6e 20 45 64 67 65 2c 20 49 45 20 31 30 2b 2c 20 61 6e 64 20 46 69 72 65 66 6f 78 2e 0a 20 2a 2f 0a 64 65 74 61 69 6c 73 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 0a 20 2a 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 64 69 73 70 6c 61 79 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 2f 0a 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6c 69 73 74 2d 69 74 65 6d 3b 0a 7d 0a 0a 2f 2a 20 4d 69 73 63 0a 09 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 Data Ascii: display in Edge, IE 10+, and Firefox. /details { display: block;}/ * Add the correct display in all browsers. /summary { display: list-item;}/ Misc ========================================================================== //* *
2024-04-18 19:30:13 UTC	1496	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 6c 69 6e 65 61 72 3b 0a 7d 0a 0a 2e 67 61 70 73 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 67 61 70 73 2e 73 69 7a 65 2d 32 78 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 61 72 72 6f 77 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6c 65 66 74 3a 20 2d 35 37 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 37 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 Data Ascii: transition: all 0.3s linear;}.gaps { clear: both; height: 20px; display: block;}.gaps.size-2x { height: 40px;}.slick-arrow { z-index: 1; position: absolute; top: 50%; left: -57px; margin-top: -17px; background: none; color: #
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 72 6f 75 6e 64 20 63 6f 6c 6f 72 20 64 65 66 69 6e 65 64 2e 20 2a 2f 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 35 65 6d 3b 0a 7d 0a 0a 75 6c 2c 0a 6f 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 75 6c 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 64 69 73 63 3b 0a 7d 0a 0a 6f 6c 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 64 65 63 69 6d 61 6c 3b 0a 7d 0a 0a 6c 69 20 3e 20 75 6c Data Ascii: round color defined. */ overflow-x: hidden;}hr { background-color: #ccc; border: 0; height: 1px; margin-bottom: 1.5em;}ul,ol { margin: 0 0 20px; padding-left: 18px;}ul { list-style: disc;}ol { list-style: decimal;}li > ul
2024-04-18 19:30:13 UTC	1496	IN	Data Raw: 43 68 72 6f 6d 65 2f 4f 70 65 72 61 2f 53 61 66 61 72 69 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 64 36 64 36 64 3b 0a 7d 0a 0a 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 2f 2a 20 46 69 72 65 66 6f 78 20 31 39 2b 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 64 36 64 36 64 3b 0a 7d 0a 0a 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 2f 2a 20 49 45 20 31 30 2b 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 64 36 64 36 64 3b 0a 7d 0a 0a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 2f 2a 20 46 69 72 65 66 6f 78 20 31 38 2d 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 64 36 64 36 64 3b 0a 7d 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: Chrome/Opera/Safari / color: #6d6d6d;}::-moz-placeholder { / Firefox 19+ / color: #6d6d6d;}:-ms-input-placeholder { / IE 10+ / color: #6d6d6d;}:-moz-placeholder { / Firefox 18- / color: #6d6d6d;}/-------------------------
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 2d 70 72 69 6d 61 72 79 20 29 3b 0a 7d 0a 0a 2e 73 6f 63 69 61 6c 2d 6c 69 73 74 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 70 78 3b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 6f 63 69 61 6c 2d 6c 69 73 74 20 6c 69 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 38 70 78 3b 0a 7d 0a 2e 73 6f 63 69 61 6c 2d 6c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 70 78 3b 0a 7d 0a 2e 73 6f 63 69 61 6c 2d 6c 69 73 74 20 6c 69 20 61 20 7b Data Ascii: -primary );}.social-list { list-style: none; padding: 0px; margin: 0px; margin-left: 25px; float: right;}.social-list li { display: inline-block; margin: 0px 8px;}.social-list li:last-child { margin-right: 0px;}.social-list li a {
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 6c 6f 67 6f 2d 73 74 61 74 69 63 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 23 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 2e 6c 6f 67 6f 2d 73 63 72 6f 6c 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 69 73 2d 73 74 75 63 6b 20 23 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 2e 6c 6f 67 6f 2d 73 74 61 74 69 63 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 69 73 2d 73 74 75 63 6b 20 23 73 69 74 65 2d 6c 6f 67 6f 20 69 6d 67 2e 6c 6f 67 6f 2d 73 63 72 6f 6c 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: logo-static { display: block;}#site-logo img.logo-scroll { display: none;}.is-stuck #site-logo img.logo-static { display: none;}.is-stuck #site-logo img.logo-scroll { display: block;}/*----------------------------------------------------
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 74 65 72 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 61 31 62 31 65 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 20 30 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 20 30 73 3b 0a 7d 0a 2e 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 3a 68 Data Ascii: ter; outline: none; color: #1a1b1e; white-space: nowrap; -webkit-transition: all 0.2s ease-out 0s; -moz-transition: all 0.2s ease-out 0s; -o-transition: all 0.2s ease-out 0s; transition: all 0.2s ease-out 0s;}.main-navigation ul > li > a:h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49793	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:13 UTC	644	OUT	GET /wp-content/themes/engitech/inc/backend/css/simple-likes-public.css?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:13 GMT Content-Type: text/css Content-Length: 2310 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-906" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	1398	IN	Data Raw: 2f 2a 20 57 72 61 70 70 65 72 20 2a 2f 0d 0a 2e 73 6c 2d 77 72 61 70 70 65 72 7b 0d 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 2e 73 6c 2d 77 72 61 70 70 65 72 20 61 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 35 64 35 64 35 3b 0d 0a 7d 0d 0a 2e 73 6c 2d 77 72 61 70 70 65 72 20 61 3a 68 6f 76 65 72 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 32 66 32 66 3b 0d 0a 7d 0d 0a 2e 73 6c 2d 62 75 74 74 6f 6e 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0d 0a 09 66 6f 6e 74 2d Data Ascii: /* Wrapper */.sl-wrapper{ float: right;}.sl-wrapper a {border-bottom: 0 !important;text-decoration: none !important; color: #d5d5d5;}.sl-wrapper a:hover{ color: #ff2f2f;}.sl-button {font-size: 1em;line-height: 1;font-
2024-04-18 19:30:13 UTC	912	IN	Data Raw: 62 65 66 6f 72 65 2c 0d 0a 2e 6c 6f 61 64 65 72 3a 61 66 74 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0d 0a 7d 0d 0a 2e 6c 6f 61 64 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 6c 65 66 74 3a 20 2d 2e 33 37 35 65 6d 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 30 2e 33 32 73 3b 0d 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 30 2e 33 32 73 3b 0d 0a 7d 0d 0a 2e 6c 6f 61 64 65 72 20 7b 0d 0a 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 2d 39 39 39 39 39 39 65 6d 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 70 6f 73 69 74 69 6f Data Ascii: before,.loader:after { position: absolute; top: 0; content: '';}.loader:before { left: -.375em; -webkit-animation-delay: -0.32s; animation-delay: -0.32s;}.loader { text-indent: -999999em; display: inline-block; positio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49794	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:13 UTC	644	OUT	GET /wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1710847526 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:13 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:13 GMT Content-Type: text/css Content-Length: 118753 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:26 GMT ETag: "65f97626-1cfe1" Accept-Ranges: bytes
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 67 2d 64 65 66 61 75 6c 74 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 64 69 61 6c 6f 67 2d 6d 65 73 73 61 67 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e Data Ascii: .dialog-widget-content{background-color:var(--e-a-bg-default);position:absolute;border-radius:3px;box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{line-height:1.5;box-sizing:border-box}.dialog-close-button{cursor:pointer;position
2024-04-18 19:30:13 UTC	1496	IN	Data Raw: 6c 6f 72 2d 74 78 74 2d 68 6f 76 65 72 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 3a 64 69 73 61 62 6c 65 64 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 3a 64 69 73 61 62 6c 65 64 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 3a 64 69 73 61 62 6c 65 64 Data Ascii: lor-txt-hover)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button.dialog-cancel:disabled,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-btn-txt:disabled,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-cancel:disabled
2024-04-18 19:30:13 UTC	4096	IN	Data Raw: 63 63 65 73 73 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 73 75 63 63 65 73 73 2d 68 6f 76 65 72 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 6f 6b 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d Data Ascii: ccess:focus,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.elementor-button-success:hover{background-color:var(--e-a-btn-bg-success-hover)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button.dialog-ok,.dialog-type-alert .dialog-buttons-
2024-04-18 19:30:14 UTC	2894	IN	Data Raw: 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 6f 6b 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 2e 64 69 61 6c 6f 67 2d 6f 6b 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 2e 64 69 61 6c 6f 67 2d 6f 6b 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 Data Ascii: apper .dialog-button.dialog-ok.dialog-cancel:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-btn-txt.dialog-ok:focus,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-btn-txt.dialog-ok:hover,.dialog-type-confirm .dialog-but
2024-04-18 19:30:14 UTC	1398	IN	Data Raw: 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 69 6e 66 6f 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 69 6e 66 6f 2d 68 6f 76 65 72 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 Data Ascii: m .dialog-buttons-wrapper .dialog-button.elementor-button-info:focus,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.elementor-button-info:hover{background-color:var(--e-a-btn-bg-info-hover)}.dialog-type-alert .dialog-buttons-wrapper .dialog-b
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 74 74 6f 6e 2d 64 61 6e 67 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 64 61 6e 67 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 64 61 6e 67 65 72 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c Data Ascii: tton-danger,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-danger,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.elementor-button-danger{background-color:var(--e-a-btn-bg-danger)}.dialog-type-alert .dialog-buttons-wrapper .dial
2024-04-18 19:30:14 UTC	98	IN	Data Raw: 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 7b 70 6f 73 69 74 69 Data Ascii: elementor-element.elementor-fixed,.elementor-widget-wrap>.elementor-element.elementor-fixed{positi
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 6f 6e 3a 66 69 78 65 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 5f 5f 77 69 64 74 68 2d 61 75 74 6f 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 5f 5f 77 69 64 74 68 2d 69 6e 69 74 69 61 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 Data Ascii: on:fixed}.elementor-widget-wrap .elementor-element.elementor-widget__width-auto,.elementor-widget-wrap .elementor-element.elementor-widget__width-initial{max-width:100%}@media (max-width:1024px){.elementor-widget-wrap .elementor-element.elementor-widget-t
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 6e 74 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 Data Ascii: nter .elementor-button{width:auto}.elementor-tablet-align-right{text-align:right}.elementor-tablet-align-right .elementor-button{width:auto}.elementor-tablet-align-left{text-align:left}.elementor-tablet-align-left .elementor-button{width:auto}.elementor-t
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 31 30 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 31 30 22 5d 7b 77 69 64 74 68 3a 31 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 31 31 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 31 31 22 5d 7b 77 69 64 74 68 3a 31 31 2e 31 31 31 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 31 32 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 63 6f 6c 3d 22 31 32 22 5d 7b 77 69 64 74 68 3a 31 32 2e 35 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c Data Ascii: n.elementor-col-10,.elementor-column[data-col="10"]{width:10%}.elementor-column.elementor-col-11,.elementor-column[data-col="11"]{width:11.111%}.elementor-column.elementor-col-12,.elementor-column[data-col="12"]{width:12.5%}.elementor-column.elementor-col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49795	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:13 UTC	643	OUT	GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:14 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:14 GMT Content-Type: text/css Content-Length: 12876 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-324c" Accept-Ranges: bytes
2024-04-18 19:30:14 UTC	2796	IN	Data Raw: 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 66 69 67 75 72 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 67 68 74 62 6f 78 2d 63 6f 6e 74 65 6e 74 2d 73 6f 75 72 63 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6e 6f 2d 66 6c 65 78 62 6f 78 20 2e 73 77 69 70 65 72 2d 73 6c Data Ascii: .swiper-container{margin-left:auto;margin-right:auto;position:relative;overflow:hidden;z-index:1}.swiper-container .swiper-slide figure{line-height:0}.swiper-container .elementor-lightbox-content-source{display:none}.swiper-container-no-flexbox .swiper-sl
2024-04-18 19:30:14 UTC	2796	IN	Data Raw: 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 32 37 20 34 34 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 32 37 20 32 32 4c 35 20 34 34 6c 2d 32 2e 31 2d 32 2e 31 4c 32 32 2e 38 20 32 32 20 32 2e 39 20 32 2e 31 20 35 20 30 6c 32 32 20 32 32 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 77 68 69 74 65 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2e 73 77 69 70 65 72 2d Data Ascii: age/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 27 44'%3E%3Cpath d='M27 22L5 44l-2.1-2.1L22.8 22 2.9 2.1 5 0l22 22z'/%3E%3C/svg%3E")}.swiper-button-next.swiper-button-white,.swiper-container-rtl .swiper-button-prev.swiper-
2024-04-18 19:30:14 UTC	1398	IN	Data Raw: 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 Data Ascii: .swiper-slide-shadow-right,.swiper-container-3d .swiper-slide-shadow-top,.swiper-container-3d .swiper-wrapper{transform-style:preserve-3d}.swiper-container-3d .swiper-slide-shadow-bottom,.swiper-container-3d .swiper-slide-shadow-left,.swiper-container-3d
2024-04-18 19:30:14 UTC	1398	IN	Data Raw: 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 69 70 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 Data Ascii: .swiper-slide-active,.swiper-container-flip .swiper-slide-active .swiper-slide-active{pointer-events:auto}.swiper-container-cube .swiper-slide-shadow-bottom,.swiper-container-cube .swiper-slide-shadow-left,.swiper-container-cube .swiper-slide-shadow-righ
2024-04-18 19:30:14 UTC	2796	IN	Data Raw: 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 61 64 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 73 77 69 70 65 72 2d 7a 6f 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 77 69 70 65 72 2d 7a 6f 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 3e 63 61 6e 76 61 73 2c 2e 73 77 69 70 65 72 2d 7a 6f 6f 6d 2d 63 6f 6e 74 61 69 6e Data Ascii: ,.swiper-container-fade .swiper-slide-active .swiper-slide-active{pointer-events:auto}.swiper-zoom-container{width:100%;height:100%;display:flex;justify-content:center;align-items:center;text-align:center}.swiper-zoom-container>canvas,.swiper-zoom-contain
2024-04-18 19:30:14 UTC	1692	IN	Data Raw: 74 61 74 65 28 31 35 30 20 36 30 20 36 30 29 27 2f 25 33 45 25 33 43 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 25 32 33 61 27 20 6f 70 61 63 69 74 79 3d 27 2e 33 37 27 20 74 72 61 6e 73 66 6f 72 6d 3d 27 72 6f 74 61 74 65 28 31 38 30 20 36 30 20 36 30 29 27 2f 25 33 45 25 33 43 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 25 32 33 61 27 20 6f 70 61 63 69 74 79 3d 27 2e 34 36 27 20 74 72 61 6e 73 66 6f 72 6d 3d 27 72 6f 74 61 74 65 28 32 31 30 20 36 30 20 36 30 29 27 2f 25 33 45 25 33 43 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 25 32 33 61 27 20 6f 70 61 63 69 74 79 3d 27 2e 35 36 27 20 74 72 61 6e 73 66 6f 72 6d 3d 27 72 6f 74 61 74 65 28 32 34 30 20 36 30 20 36 30 29 27 2f 25 33 45 25 33 43 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 Data Ascii: tate(150 60 60)'/%3E%3Cuse xlink:href='%23a' opacity='.37' transform='rotate(180 60 60)'/%3E%3Cuse xlink:href='%23a' opacity='.46' transform='rotate(210 60 60)'/%3E%3Cuse xlink:href='%23a' opacity='.56' transform='rotate(240 60 60)'/%3E%3Cuse xlink:href='

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49796	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:13 UTC	629	OUT	GET /wp-content/uploads/elementor/css/post-3073.css?ver=1710847526 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:14 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:14 GMT Content-Type: text/css Content-Length: 1380 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:26 GMT ETag: "65f97626-564" Accept-Ranges: bytes
2024-04-18 19:30:14 UTC	1380	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 33 30 37 33 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 45 39 35 31 31 44 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 45 39 35 31 31 44 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 33 39 33 42 34 33 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 33 39 33 42 34 33 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 66 36 38 31 35 64 32 3a 23 46 46 46 46 46 46 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 66 61 33 62 61 31 65 3a 23 45 39 35 31 31 44 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d Data Ascii: .elementor-kit-3073{--e-global-color-primary:#E9511D;--e-global-color-secondary:#E9511D;--e-global-color-text:#393B43;--e-global-color-accent:#393B43;--e-global-color-f6815d2:#FFFFFF;--e-global-color-fa3ba1e:#E9511D00;--e-global-typography-secondary-font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49797	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:13 UTC	648	OUT	GET /wp-content/uploads/elementor/css/custom-pro-frontend-lite.min.css?ver=1710847526 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:14 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:14 GMT Content-Type: text/css Content-Length: 11009 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:26 GMT ETag: "65f97626-2b01" Accept-Ranges: bytes
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 69 6e 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 6f 75 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 6f 75 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 65 6c Data Ascii: .elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg,.elementor-bg-transform-zoom-out .elementor-bg{transform:scale(1.2)}.elementor-bg-transform-zoom-out:hover .elementor-bg{transform:scale(1)}.el
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 6c 65 66 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 72 69 67 68 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 74 6f 70 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 Data Ascii: content:focus .elementor-animated-item--exit-to-left,.elementor-animated-content:focus .elementor-animated-item--exit-to-right,.elementor-animated-content:focus .elementor-animated-item--exit-to-top,.elementor-animated-content:hover .elementor-animated-it
2024-04-18 19:30:14 UTC	1594	IN	Data Raw: 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 6c 6f 62 61 6c 2d 77 69 64 67 65 74 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 65 2d 70 2d 62 6f 72 64 65 72 2d 67 6c 6f 62 61 6c 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 64 69 74 6f 72 2d 61 63 74 69 76 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 64 69 74 2d 6d 6f 64 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 6c 6f 62 61 6c 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 64 69 74 6f 72 2d 77 69 64 67 65 74 2d 73 65 74 74 69 6e 67 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 70 2d 62 6f 72 64 65 72 2d 67 6c 6f 62 61 6c 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: mentor-widget.elementor-global-widget:hover{outline:1px solid var(--e-p-border-global)}.elementor-editor-active .elementor.elementor-edit-mode .elementor-global-widget .elementor-editor-widget-settings{background-color:var(--e-p-border-global)}.elementor-
2024-04-18 19:30:14 UTC	1223	IN	Data Raw: 69 61 6c 6f 67 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 72 69 67 68 74 3a 32 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 6c 6c 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 73 76 67 7b 66 69 6c 6c 3a 23 31 66 32 31 32 34 3b 68 65 69 67 68 74 3a 31 65 6d 3b 77 69 64 74 68 3a 31 65 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 Data Ascii: ialog-header{display:none}.elementor-popup-modal .dialog-close-button{display:none;top:20px;margin-top:0;right:20px;opacity:1;z-index:9999;pointer-events:all}.elementor-popup-modal .dialog-close-button svg{fill:#1f2124;height:1em;width:1em}.elementor-popu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49798	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:14 UTC	626	OUT	GET /wp-content/uploads/elementor/css/global.css?ver=1710847527 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:14 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:14 GMT Content-Type: text/css Content-Length: 46055 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:27 GMT ETag: "65f97627-b3e7" Accept-Ranges: bytes
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 6d 61 67 65 20 2e 77 69 64 67 65 74 Data Ascii: .elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-image .widget
2024-04-18 19:30:14 UTC	1496	IN	Data Raw: 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 6d 61 67 65 2d 67 61 6c 6c 65 72 79 20 2e 67 61 6c 6c 65 72 79 2d 69 74 65 6d 20 2e 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 Data Ascii: --e-global-typography-text-font-weight );}.elementor-widget-image-gallery .gallery-item .gallery-caption{font-family:var( --e-global-typography-accent-font-family ), Sans-serif;font-weight:var( --e-global-typography-accent-font-weight );}.elementor-widge
2024-04-18 19:30:14 UTC	1398	IN	Data Raw: 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 70 72 6f 67 72 65 73 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 20 2e 65 6c Data Ascii: primary );}.elementor-widget-progress .elementor-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-testimonial .el
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 61 62 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 63 Data Ascii: ntor-widget-tabs .elementor-tab-content{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-accordion .elementor-accordion-ic
2024-04-18 19:30:14 UTC	1496	IN	Data Raw: 67 65 74 2d 65 61 65 6c 2d 66 61 6e 63 79 2d 74 65 78 74 20 2e 74 79 70 65 64 2d 63 75 72 73 6f 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 61 65 6c 2d 66 61 6e 63 79 2d 74 65 78 74 20 2e 65 61 65 6c 2d 66 61 6e 63 79 2d 74 65 78 74 2d 73 75 66 66 69 78 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d Data Ascii: get-eael-fancy-text .typed-cursor{font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-eael-fancy-text .eael-fancy-text-suffix{font-family:var( --e-global-
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 61 65 6c 2d 66 69 6c 74 65 72 61 62 6c 65 2d 67 61 6c 6c 65 72 79 20 2e 66 67 2d 63 61 70 74 69 6f 6e 2d 68 65 61 64 20 2e 66 67 2d 69 74 65 6d 2d 70 72 69 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 Data Ascii: :var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-eael-filterable-gallery .fg-caption-head .fg-item-price{font-family:var( --e-global-typography-text-font-family ), Sans
2024-04-18 19:30:14 UTC	1496	IN	Data Raw: 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 68 65 6d 65 2d 61 72 63 68 69 76 65 2d 74 69 74 6c 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 Data Ascii: -weight:var( --e-global-typography-text-font-weight );}.elementor-widget-theme-archive-title .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-globa
2024-04-18 19:30:14 UTC	2796	IN	Data Raw: 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 72 63 68 69 76 65 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 69 6e 61 74 69 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 72 63 68 69 76 65 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 Data Ascii: t-font-weight );}.elementor-widget-archive-posts .elementor-pagination{font-family:var( --e-global-typography-secondary-font-family ), Sans-serif;font-weight:var( --e-global-typography-secondary-font-weight );}.elementor-widget-archive-posts .elementor-bu
2024-04-18 19:30:14 UTC	4096	IN	Data Raw: 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 Data Ascii: ary-font-weight );}.elementor-widget-posts .elementor-button{font-family:var( --e-global-typography-accent-font-family ), Sans-serif;font-weight:var( --e-global-typography-accent-font-weight );background-color:var( --e-global-color-accent );}.elementor-wi
2024-04-18 19:30:14 UTC	1496	IN	Data Raw: 67 72 65 73 73 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 20 29 3b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2d 70 72 6f 67 72 65 73 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2d 70 72 6f 67 72 65 73 73 2d 6d 65 74 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 66 6f 72 6d 20 2e 65 2d 66 6f 72 6d 5f 5f 69 6e 64 69 63 61 74 6f 72 73 5f 5f 69 6e 64 69 63 61 74 6f 72 5f 5f 70 Data Ascii: gress-color:var( --e-global-color-accent );--e-form-steps-indicator-progress-background-color:var( --e-global-color-text );--e-form-steps-indicator-progress-meter-color:var( --e-global-color-text );}.elementor-widget-form .e-form__indicators__indicator__p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49799	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:14 UTC	675	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.15 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:15 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:14 GMT Content-Type: text/css Content-Length: 3758 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:43 GMT ETag: "661e934f-eae" Accept-Ranges: bytes
2024-04-18 19:30:15 UTC	2796	IN	Data Raw: 2e 63 6c 65 61 72 66 69 78 3a 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 61 65 6c 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 65 61 65 6c 2d 74 65 61 6d 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 74 65 61 6d 2d 73 6c 69 64 65 72 2e 6e 61 76 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 65 61 65 6c 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 2e 6e 61 76 2d 74 6f 70 2d 6c 65 66 74 2c 2e 65 61 65 6c 2d 6c 6f 67 6f Data Ascii: .clearfix::before,.clearfix::after{content:" ";display:table;clear:both}.eael-testimonial-slider.nav-top-left,.eael-testimonial-slider.nav-top-right,.eael-team-slider.nav-top-left,.eael-team-slider.nav-top-right,.eael-logo-carousel.nav-top-left,.eael-logo
2024-04-18 19:30:15 UTC	962	IN	Data Raw: 66 6f 72 6d 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 61 65 6c 2d 77 65 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 65 61 65 6c 2d 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 61 6c 69 67 6e 2d 72 69 67 68 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 61 65 6c 2d 77 65 66 6f 72 6d 2e 65 61 65 6c 2d 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 61 65 6c 2d 77 65 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 61 75 74 6f 7d 2e 65 61 65 6c 2d 66 6f 72 63 65 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 61 65 6c 2d 64 2d 6e 6f 6e 65 7b 64 69 73 Data Ascii: form-align-center .eael-weform-container{float:none;margin:0 auto}.eael-contact-form-align-right,.elementor-widget-eael-weform.eael-contact-form-align-right .eael-weform-container{margin:0 0 0 auto}.eael-force-hide{display:none !important}.eael-d-none{dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49800	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:14 UTC	599	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:15 UTC	258	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 87553 Connection: close Last-Modified: Mon, 28 Aug 2023 17:14:23 GMT ETag: "64ecd5ef-15601" Accept-Ranges: bytes
2024-04-18 19:30:15 UTC	1398	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-18 19:30:15 UTC	4096	IN	Data Raw: 2e 66 6e 3d 63 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 74 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 63 65 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 61 65 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 Data Ascii: .fn=ce.prototype={jquery:t,constructor:ce,length:0,toArray:function(){return ae.call(this)},get:function(e){return null==e?ae.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=ce.merge(this.constructor(),e);return t.prevObject=this,t
2024-04-18 19:30:15 UTC	1496	IN	Data Raw: 2b 22 2b 22 2c 22 67 22 29 2c 79 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 2c 22 2b 67 65 2b 22 2a 22 29 2c 6d 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 67 65 2b 22 29 22 2b 67 65 2b 22 2a 22 29 2c 78 3d 6e 65 77 20 52 65 67 45 78 70 28 67 65 2b 22 7c 3e 22 29 2c 6a 3d 6e 65 77 20 52 65 67 45 78 70 28 67 29 2c 41 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 74 2b 22 24 22 29 2c 44 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 74 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 74 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 74 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 Data Ascii: +"+","g"),y=new RegExp("^"+ge+","+ge+""),m=new RegExp("^"+ge+"([>+~]\|"+ge+")"+ge+""),x=new RegExp(ge+"\|>"),j=new RegExp(g),A=new RegExp("^"+t+"$"),D={ID:new RegExp("^#("+t+")"),CLASS:new RegExp("^\\.("+t+")"),TAG:new RegExp("^("+t+"\|[*])"),ATTR:new Re
2024-04-18 19:30:15 UTC	4096	IN	Data Raw: 2c 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6b 2e 63 61 6c 6c 28 6e 2c 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 5b 33 5d 29 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c 6e 7d 69 66 28 21 28 68 5b 74 2b 22 20 22 5d 7c 7c 64 26 26 64 2e 74 Data Ascii: ,a),n}else if(f&&(a=f.getElementById(i))&&I.contains(e,a)&&a.id===i)return k.call(n,a),n}else{if(u[2])return k.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&e.getElementsByClassName)return k.apply(n,e.getElementsByClassName(i)),n}if(!(h[t+" "]\|\|d&&d.t
2024-04-18 19:30:15 UTC	1496	IN	Data Raw: 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 6c 65 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 3d 54 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 79 65 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 79 65 2c 65 29 3f 2d 31 3a 74 3d 3d 3d 54 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 79 65 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 79 65 2c 74 29 3f 31 3a 6f 3f 73 65 2e 63 61 6c 6c 28 6f 2c 65 29 2d 73 65 2e 63 61 6c 6c 28 6f 2c 74 29 3a 30 3a 34 26 6e 3f 2d 31 3a 31 29 7d 29 2c 54 7d 66 6f 72 28 65 20 69 6e 20 49 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 49 28 65 2c 6e 75 6c 6c 2c 6e Data Ascii: osition(t):1)\|\|!le.sortDetached&&t.compareDocumentPosition(e)===n?e===T\|\|e.ownerDocument==ye&&I.contains(ye,e)?-1:t===T\|\|t.ownerDocument==ye&&I.contains(ye,t)?1:o?se.call(o,e)-se.call(o,t):0:4&n?-1:1)}),T}for(e in I.matches=function(e,t){return I(e,null,n
2024-04-18 19:30:15 UTC	2796	IN	Data Raw: 43 61 73 65 28 29 2c 22 6e 74 68 22 3d 3d 3d 65 5b 31 5d 2e 73 6c 69 63 65 28 30 2c 33 29 3f 28 65 5b 33 5d 7c 7c 49 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 5b 34 5d 3d 2b 28 65 5b 34 5d 3f 65 5b 35 5d 2b 28 65 5b 36 5d 7c 7c 31 29 3a 32 2a 28 22 65 76 65 6e 22 3d 3d 3d 65 5b 33 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 65 5b 33 5d 29 29 2c 65 5b 35 5d 3d 2b 28 65 5b 37 5d 2b 65 5b 38 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 65 5b 33 5d 29 29 3a 65 5b 33 5d 26 26 49 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 21 65 5b 36 5d 26 26 65 5b 32 5d 3b 72 65 74 75 72 6e 20 44 2e 43 48 49 4c 44 2e 74 65 73 74 28 65 5b 30 5d 29 3f 6e 75 6c 6c 3a 28 65 5b 33 5d 3f 65 5b 32 5d 3d 65 5b 34 5d 7c 7c Data Ascii: Case(),"nth"===e[1].slice(0,3)?(e[3]\|\|I.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]\|\|1):2*("even"===e[3]\|\|"odd"===e[3])),e[5]=+(e[7]+e[8]\|\|"odd"===e[3])):e[3]&&I.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return D.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]\|\|
2024-04-18 19:30:15 UTC	1398	IN	Data Raw: 67 22 29 29 72 65 74 75 72 6e 28 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3d 3d 3d 6e 7c 7c 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 6e 2b 22 2d 22 29 7d 77 68 69 6c 65 28 28 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 65 2e 6c 6f 63 61 74 69 6f 6e 26 26 69 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 73 6c 69 63 65 28 31 29 3d 3d 3d 65 2e 69 64 7d 2c 72 6f 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7d 2c 66 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 66 75 6e Data Ascii: g"))return(t=t.toLowerCase())===n\|\|0===t.indexOf(n+"-")}while((e=e.parentNode)&&1===e.nodeType);return!1}}),target:function(e){var t=ie.location&&ie.location.hash;return t&&t.slice(1)===e.id},root:function(e){return e===r},focus:function(e){return e===fun
2024-04-18 19:30:15 UTC	2796	IN	Data Raw: 65 63 6b 62 6f 78 3a 21 30 2c 66 69 6c 65 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 69 6d 61 67 65 3a 21 30 7d 29 62 2e 70 73 65 75 64 6f 73 5b 65 5d 3d 42 28 65 29 3b 66 6f 72 28 65 20 69 6e 7b 73 75 62 6d 69 74 3a 21 30 2c 72 65 73 65 74 3a 21 30 7d 29 62 2e 70 73 65 75 64 6f 73 5b 65 5d 3d 5f 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 63 5b 65 2b 22 20 22 5d 3b 69 66 28 6c 29 72 65 74 75 72 6e 20 74 3f 30 3a 6c 2e 73 6c 69 63 65 28 30 29 3b 61 3d 65 2c 73 3d 5b 5d 2c 75 3d 62 2e 70 72 65 46 69 6c 74 65 72 3b 77 68 69 6c 65 28 61 29 7b 66 6f 72 28 6f 20 69 6e 20 6e 26 26 21 28 72 3d 79 2e 65 78 65 63 28 61 29 29 7c 7c 28 72 26 26 Data Ascii: eckbox:!0,file:!0,password:!0,image:!0})b.pseudos[e]=B(e);for(e in{submit:!0,reset:!0})b.pseudos[e]=_(e);function G(){}function Y(e,t){var n,r,i,o,a,s,u,l=c[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=y.exec(a))\|\|(r&&
2024-04-18 19:30:15 UTC	4096	IN	Data Raw: 3d 45 2b 3d 6e 75 6c 6c 3d 3d 70 3f 31 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 7c 2e 31 2c 67 3d 64 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 69 26 26 28 77 3d 74 3d 3d 54 7c 7c 74 7c 7c 69 29 3b 6c 21 3d 3d 67 26 26 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 6c 5d 29 3b 6c 2b 2b 29 7b 69 66 28 78 26 26 6f 29 7b 61 3d 30 2c 74 7c 7c 6f 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 54 7c 7c 28 56 28 6f 29 2c 6e 3d 21 43 29 3b 77 68 69 6c 65 28 73 3d 76 5b 61 2b 2b 5d 29 69 66 28 73 28 6f 2c 74 7c 7c 54 2c 6e 29 29 7b 6b 2e 63 61 6c 6c 28 72 2c 6f 29 3b 62 72 65 61 6b 7d 69 26 26 28 45 3d 68 29 7d 6d 26 26 28 28 6f 3d 21 73 26 26 6f 29 26 26 75 2d 2d 2c 65 26 26 63 2e 70 75 73 68 28 6f 29 29 7d 69 66 28 75 2b 3d 6c 2c 6d 26 26 6c 21 3d 3d 75 29 7b 61 3d 30 3b 77 68 Data Ascii: =E+=null==p?1:Math.random()\|\|.1,g=d.length;for(i&&(w=t==T\|\|t\|\|i);l!==g&&null!=(o=d[l]);l++){if(x&&o){a=0,t\|\|o.ownerDocument==T\|\|(V(o),n=!C);while(s=v[a++])if(s(o,t\|\|T,n)){k.call(r,o);break}i&&(E=h)}m&&((o=!s&&o)&&u--,e&&c.push(o))}if(u+=l,m&&l!==u){a=0;wh
2024-04-18 19:30:15 UTC	2894	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 6a 71 75 65 72 79 3f 65 5b 30 5d 3a 65 29 3a 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 74 68 69 73 2e 66 69 72 73 74 28 29 2e 70 72 65 76 41 6c 6c 28 29 2e 6c 65 6e 67 74 68 3a 2d 31 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 28 63 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 67 65 74 28 29 2c 63 65 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 Data Ascii: e.call(this,e.jquery?e[0]:e):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){return this.pushStack(ce.uniqueSort(ce.merge(this.get(),ce(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49801	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:14 UTC	607	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:15 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13577 Connection: close Last-Modified: Fri, 09 Jun 2023 05:49:24 GMT ETag: "6482bd64-3509" Accept-Ranges: bytes
2024-04-18 19:30:15 UTC	1398	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-04-18 19:30:15 UTC	4096	IN	Data Raw: 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 6e 2c 6f 29 2c 72 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 6e 2c 6f 29 2c 72 3d 65 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 26 26 75 28 6e 2c 6f 29 2c 28 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 Data Ascii: rateTrace&&r.trace&&r.trace()))}function r(e,t,r,n,o){Object.defineProperty(e,t,{configurable:!0,enumerable:!0,get:function(){return u(n,o),r},set:function(e){u(n,o),r=e}})}function a(e,t,r,n,o){var a=e[t];e[t]=function(){return o&&u(n,o),(s.migrateIsPatc
2024-04-18 19:30:15 UTC	4096	IN	Data Raw: 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 69 28 73 2e 66 6e 2c 22 72 65 6d 6f 76 65 41 74 74 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 72 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 31 21 3d 3d 73 28 74 68 69 73 29 2e 70 72 6f 70 28 74 29 29 72 65 74 75 72 6e 21 28 6e 3d 21 30 29 7d 29 2c 6e 26 26 28 75 28 22 72 65 6d 6f 76 65 41 74 74 72 Data Ascii: turn e.replace(/-([a-z])/g,function(e,t){return t.toUpperCase()})}i(s.fn,"removeAttr",function(e){var r=this,n=!1;return s.each(e.match(w),function(e,t){s.expr.match.bool.test(t)&&r.each(function(){if(!1!==s(this).prop(t))return!(n=!0)}),n&&(u("removeAttr
2024-04-18 19:30:15 UTC	3987	IN	Data Raw: 61 6e 64 20 72 65 6d 6f 76 65 64 3a 20 22 2b 72 29 2c 28 6f 3d 6e 2e 70 72 6f 70 73 29 26 26 6f 2e 6c 65 6e 67 74 68 29 29 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 74 3d 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6e 26 26 6e 2e 66 69 6c 74 65 72 3f 6e 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 74 7d 2c 22 65 76 65 6e 74 2d 6f 6c 64 2d 70 61 74 63 68 22 29 2c 69 28 73 2e 65 76 65 6e 74 2c 22 61 64 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6c 6f 61 64 2d 61 66 Data Ascii: and removed: "+r),(o=n.props)&&o.length))while(o.length)s.event.addProp(o.pop());return t=O.call(this,e),n&&n.filter?n.filter(t,e):t},"event-old-patch"),i(s.event,"add",function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("load-af

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49802	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:15 UTC	626	OUT	GET /wp-content/themes/engitech/inc/backend/js/simple-likes-public.js?ver=0.5 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:15 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1354 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-54a" Accept-Ranges: bytes
2024-04-18 19:30:15 UTC	1354	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0d 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 27 2e 73 6c 2d 62 75 74 74 6f 6e 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 76 61 72 20 62 75 74 74 6f 6e 20 3d 20 24 28 74 68 69 73 29 3b 0d 0a 09 09 76 61 72 20 70 6f 73 74 5f 69 64 20 3d 20 62 75 74 74 6f 6e 2e 61 74 74 72 28 27 64 61 74 61 2d 70 6f 73 74 2d 69 64 27 29 3b 0d 0a 09 09 76 61 72 20 73 65 63 75 72 69 74 79 20 3d 20 62 75 74 74 6f 6e 2e 61 74 74 72 28 27 64 61 74 61 2d 6e 6f 6e 63 65 27 29 3b 0d 0a 09 09 76 61 72 20 69 73 63 6f 6d 6d 65 6e 74 20 3d 20 62 75 74 74 6f 6e 2e 61 74 74 72 28 27 64 61 74 61 2d 69 73 63 6f 6d 6d 65 6e 74 27 29 3b 0d 0a 09 09 Data Ascii: (function( $ ) {'use strict';$(document).on('click', '.sl-button', function() {var button = $(this);var post_id = button.attr('data-post-id');var security = button.attr('data-nonce');var iscomment = button.attr('data-iscomment');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:15 UTC	620	OUT	GET /wp-content/plugins/animated-typing-effect/assets/js/typed.js?ver=1 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:15 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 15615 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:08 GMT ETag: "65807084-3cff" Accept-Ranges: bytes
2024-04-18 19:30:15 UTC	3832	IN	Data Raw: 2f 2f 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 0a 2f 2f 20 54 79 70 65 64 2e 6a 73 20 7c 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4d 61 74 74 20 42 6f 6c 64 74 20 7c 20 77 77 77 2e 6d 61 74 74 62 6f 6c 64 74 2e 63 6f 6d 0a 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 2f 2f 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 2f 2f 20 Data Ascii: // The MIT License (MIT)// Typed.js \| Copyright (c) 2014 Matt Boldt \| www.mattboldt.com// Permission is hereby granted, free of charge, to any person obtaining a copy// of this software and associated documentation files (the "Software"), to deal//
2024-04-18 19:30:15 UTC	4096	IN	Data Raw: 75 69 6c 64 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 73 65 72 74 20 63 75 72 73 6f 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 68 6f 77 43 75 72 73 6f 72 20 3d 3d 3d 20 74 72 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 75 72 73 6f 72 20 3d 20 24 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 74 79 70 65 64 2d 63 75 72 73 6f 72 5c 22 3e 22 20 2b 20 74 68 69 73 2e 63 75 72 73 6f 72 43 68 61 72 20 2b 20 22 3c 2f 73 70 61 6e 3e 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 6c 2e 61 66 74 65 72 28 74 68 69 73 2e 63 75 72 Data Ascii: uild: function() { var self = this; // Insert cursor if (this.showCursor === true) { this.cursor = $("<span class=\"typed-cursor\">" + this.cursorChar + "</span>"); this.el.after(this.cur
2024-04-18 19:30:15 UTC	3256	IN	Data Raw: 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 62 61 63 6b 73 70 61 63 65 28 63 75 72 53 74 72 69 6e 67 2c 20 63 75 72 53 74 72 50 6f 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 73 65 6c 66 2e 62 61 63 6b 44 65 6c 61 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 63 61 6c 6c 20 62 65 66 6f 72 65 20 66 75 6e 63 74 69 6f 6e 73 20 69 66 20 61 70 70 6c 69 63 61 62 6c 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: out = setTimeout(function() { self.backspace(curString, curStrPos); }, self.backDelay); } else { /* call before functions if applicable */
2024-04-18 19:30:15 UTC	1398	IN	Data Raw: 6e 67 2e 73 75 62 73 74 72 28 30 2c 20 63 75 72 53 74 72 50 6f 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 65 6c 66 2e 61 74 74 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 65 6c 2e 61 74 74 72 28 73 65 6c 66 2e 61 74 74 72 2c 20 6e 65 78 74 53 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 65 6c 66 2e 69 73 49 6e 70 75 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 65 6c 2e 76 61 6c 28 6e 65 78 74 53 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 Data Ascii: ng.substr(0, curStrPos); if (self.attr) { self.el.attr(self.attr, nextString); } else { if (self.isInput) { self.el.val(nextString); } else
2024-04-18 19:30:15 UTC	3033	IN	Data Raw: 69 74 65 28 73 65 6c 66 2e 73 74 72 69 6e 67 73 5b 73 65 6c 66 2e 73 65 71 75 65 6e 63 65 5b 73 65 6c 66 2e 61 72 72 61 79 50 6f 73 5d 5d 2c 20 63 75 72 53 74 72 50 6f 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 68 75 6d 61 6e 69 7a 65 64 20 76 61 6c 75 65 20 66 6f 72 20 74 79 70 69 6e 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 68 75 6d 61 6e 69 7a 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 53 68 75 66 66 6c 65 73 20 74 68 65 20 6e 75 6d 62 65 72 73 20 69 6e 20 74 68 65 20 67 69 76 65 6e 20 61 72 72 61 79 2e 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 41 72 72 61 79 7d 20 61 72 72 Data Ascii: ite(self.strings[self.sequence[self.arrayPos]], curStrPos); } // humanized value for typing }, humanize); } /** * Shuffles the numbers in the given array. * @param {Array} arr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:15 UTC	623	OUT	GET /wp-content/plugins/animated-typing-effect/assets/js/typed.fe.js?ver=1 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:16 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 729 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:08 GMT ETag: "65807084-2d9" Accept-Ranges: bytes
2024-04-18 19:30:16 UTC	729	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 20 20 24 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 20 27 2e 74 79 70 65 64 2d 6d 65 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 7b 7d 2c 20 73 74 72 69 6e 67 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 66 6f 72 28 20 76 61 72 20 6b 65 79 20 69 6e 20 74 68 69 73 2e 64 61 74 61 73 65 74 20 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 28 20 6b 65 79 2e 73 75 62 73 74 72 28 20 30 2c 20 36 20 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 20 3d 20 74 68 69 73 2e 64 61 74 61 73 65 74 5b 20 6b 65 79 20 5d 2e Data Ascii: (function( $ ) { $( document ).ready( function() { $( '.typed-me' ).each( function() { var options = {}, strings = []; for( var key in this.dataset ) { if( key.substr( 0, 6 ) == "string" ) { var v = this.dataset[ key ].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49805	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:16 UTC	610	OUT	GET /wp-content/plugins/cidades-ajax/js/mobwe_js.js?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:16 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1360 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:09 GMT ETag: "65807085-550" Accept-Ranges: bytes
2024-04-18 19:30:16 UTC	1360	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 27 2e 61 62 72 69 72 2d 6d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 61 63 74 69 6f 6e 27 3a 20 27 6c 6f 61 64 5f 70 6f 73 74 5f 62 79 5f 61 6a 61 78 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 69 64 27 3a 20 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 69 64 27 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 73 65 63 75 72 69 74 79 27 3a 20 62 6c 6f 67 2e 73 65 63 75 72 69 74 79 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 24 2e 70 6f 73 74 28 62 6c 6f 67 2e 61 6a 61 78 75 72 6c Data Ascii: jQuery(function($) { $('body').on('click', '.abrir-modal', function() { var data = { 'action': 'load_post_by_ajax', 'id': $(this).data('id'), 'security': blog.security }; $.post(blog.ajaxurl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49807	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:16 UTC	622	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:16 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 11513 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:23 GMT ETag: "661e933b-2cf9" Accept-Ranges: bytes
2024-04-18 19:30:16 UTC	1398	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 69 29 3d 3e 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 69 29 74 2e 6f 28 69 2c 73 29 26 26 21 74 2e 6f 28 65 2c 73 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 73 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 5b 73 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 Data Ascii: (()=>{"use strict";var t={d:(e,i)=>{for(var s in i)t.o(i,s)&&!t.o(e,s)&&Object.defineProperty(e,s,{enumerable:!0,get:i[s]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,S
2024-04-18 19:30:16 UTC	4096	IN	Data Raw: 62 65 72 3a 28 29 3d 3e 79 2c 6e 75 6d 62 65 72 3a 28 29 3d 3e 63 2c 72 65 71 75 69 72 65 64 3a 28 29 3d 3e 6e 2c 72 65 71 75 69 72 65 64 66 69 6c 65 3a 28 29 3d 3e 61 2c 74 65 6c 3a 28 29 3d 3e 6c 2c 74 69 6d 65 3a 28 29 3d 3e 64 2c 75 72 6c 3a 28 29 3d 3e 70 7d 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 65 65 2e 65 6e 74 72 69 65 73 28 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 65 65 2e 67 65 74 28 74 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 68 69 73 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e Data Ascii: ber:()=>y,number:()=>c,required:()=>n,requiredfile:()=>a,tel:()=>l,time:()=>d,url:()=>p}),i.prototype.entries=function(){return this.tree.entries()},i.prototype.get=function(t){return this.tree.get(t)},i.prototype.getAll=function(t){if(!this.has(t))return
2024-04-18 19:30:16 UTC	1496	IN	Data Raw: 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 74 66 22 29 2c 74 2e 73 65 74 28 22 6a 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 29 2c 74 2e 73 65 74 28 22 70 64 66 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 29 2c 74 2e 73 65 74 28 22 73 77 66 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 29 2c 74 2e 73 65 74 28 22 63 6c 61 73 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 22 29 2c 74 2e 73 65 74 28 22 74 61 72 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 74 61 72 22 29 2c 74 2e 73 65 74 28 22 7a 69 70 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 7a 69 70 22 29 2c 74 2e 73 65 74 28 22 67 7a 7c 67 7a 69 70 22 2c 22 61 70 70 6c 69 63 61 74 69 Data Ascii: application/rtf"),t.set("js","application/javascript"),t.set("pdf","application/pdf"),t.set("swf","application/x-shockwave-flash"),t.set("class","application/java"),t.set("tar","application/x-tar"),t.set("zip","application/zip"),t.set("gz\|gzip","applicati
2024-04-18 19:30:16 UTC	1398	IN	Data Raw: 72 6d 61 74 73 2d 6f 66 66 69 63 65 64 6f 63 75 6d 65 6e 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 6d 6c 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 29 2c 74 2e 73 65 74 28 22 70 70 74 6d 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 6d 61 63 72 6f 45 6e 61 62 6c 65 64 2e 31 32 22 29 2c 74 2e 73 65 74 28 22 70 70 73 78 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6f 70 65 6e 78 6d 6c 66 6f 72 6d 61 74 73 2d 6f 66 66 69 63 65 64 6f 63 75 6d 65 6e 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 6d 6c 2e 73 6c 69 64 65 73 68 6f 77 22 29 2c 74 2e 73 65 74 28 22 70 70 73 6d 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e Data Ascii: rmats-officedocument.presentationml.presentation"),t.set("pptm","application/vnd.ms-powerpoint.presentation.macroEnabled.12"),t.set("ppsx","application/vnd.openxmlformats-officedocument.presentationml.slideshow"),t.set("ppsm","application/vnd.ms-powerpoin
2024-04-18 19:30:16 UTC	3125	IN	Data Raw: 29 28 22 2a 22 3d 3d 3d 73 26 26 6e 2e 73 74 61 72 74 73 57 69 74 68 28 74 2b 22 2f 22 29 7c 7c 6e 3d 3d 3d 69 5b 30 5d 29 26 26 65 2e 70 75 73 68 28 2e 2e 2e 6f 2e 73 70 6c 69 74 28 22 7c 22 29 29 7d 72 65 74 75 72 6e 20 65 7d 29 28 65 29 2e 73 6f 6d 65 28 28 65 3d 3e 28 65 3d 22 2e 22 2b 65 2e 74 72 69 6d 28 29 2c 74 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 65 6e 64 73 57 69 74 68 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 29 29 29 29 29 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 74 68 69 73 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 2e 65 76 65 72 79 28 28 74 3d 3e 74 68 69 73 2e 61 63 63 65 70 74 3f 2e 73 6f 6d 65 28 28 65 3d 3e 74 3d 3d 3d 53 Data Ascii: )("*"===s&&n.startsWith(t+"/")\|\|n===i[0])&&e.push(...o.split("\|"))}return e})(e).some((e=>(e="."+e.trim(),t.name.toLowerCase().endsWith(e.toLowerCase())))))))))throw new o(this)},h=function(t){if(!t.getAll(this.field).every((t=>this.accept?.some((e=>t===S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49808	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:16 UTC	618	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:16 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13054 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:23 GMT ETag: "661e933b-32fe" Accept-Ranges: bytes
2024-04-18 19:30:16 UTC	4096	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 60 77 70 63 66 37 24 7b 74 7d 60 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 61 7d 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 2c 61 3d 28 65 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 6f 6e 5f 66 61 69 Data Ascii: (()=>{"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},a=(e,a)=>{const n=new Map([["init","init"],["validation_fai
2024-04-18 19:30:16 UTC	4096	IN	Data Raw: 28 61 29 2c 65 2e 63 6c 6f 73 65 73 74 28 22 2e 75 73 65 2d 66 6c 6f 61 74 69 6e 67 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 74 69 70 22 29 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 28 65 3d 3e 7b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 29 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 65 3d 3e 7b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 29 7d 29 29 29 7d 29 29 7d 29 29 7d 2c 73 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 60 24 7b 65 2e 77 70 63 66 37 3f 2e 75 6e 69 74 54 61 67 7d 2d 76 65 2d 24 7b 74 7d 60 2e 72 Data Ascii: (a),e.closest(".use-floating-validation-tip")&&(e.addEventListener("focus",(e=>{t.setAttribute("style","display: none")})),t.addEventListener("click",(e=>{t.setAttribute("style","display: none")})))}))}))},s=(e,t)=>{const a=`${e.wpcf7?.unitTag}-ve-${t}`.r
2024-04-18 19:30:16 UTC	2992	IN	Data Raw: 7b 61 7d 22 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 76 61 6c 75 65 3d 72 5b 31 5d 7d 29 29 7d 7d 2c 66 3d 28 65 2c 74 29 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 61 20 69 6e 20 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 5b 61 5d 5b 30 5d 2c 72 3d 74 5b 61 5d 5b 31 5d 3b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 5b 64 61 74 61 2d 6e 61 6d 65 3d 22 24 7b 61 7d 22 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 24 7b 61 7d 22 5d 60 29 2e 76 61 6c 75 65 3d 22 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 77 70 63 66 37 2d 71 75 69 7a 2d 6c 61 62 65 6c 22 29 2e Data Ascii: {a}"]`).forEach((e=>{e.value=r[1]}))}},f=(e,t)=>{for(const a in t){const n=t[a][0],r=t[a][1];e.querySelectorAll(`.wpcf7-form-control-wrap[data-name="${a}"]`).forEach((e=>{e.querySelector(`input[name="${a}"]`).value="",e.querySelector(".wpcf7-quiz-label").
2024-04-18 19:30:16 UTC	1870	IN	Data Raw: 65 73 65 74 28 74 29 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 28 65 3d 3e 7b 77 70 63 66 37 2e 73 75 62 6d 69 74 28 74 2c 7b 73 75 62 6d 69 74 74 65 72 3a 65 2e 73 75 62 6d 69 74 74 65 72 7d 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 70 63 66 37 73 75 62 6d 69 74 22 2c 28 65 3d 3e 7b 65 2e 64 65 74 61 69 6c 2e 61 70 69 52 65 73 70 6f 6e 73 65 2e 63 61 70 74 63 68 61 26 26 75 28 74 2c 65 2e 64 65 74 61 69 6c 2e 61 70 69 52 65 73 70 6f 6e 73 65 2e 63 61 70 74 63 68 61 29 2c 65 2e 64 65 74 61 69 6c 2e 61 70 69 52 65 73 70 6f 6e 73 65 2e 71 75 69 7a 26 26 66 28 74 2c 65 2e 64 65 74 61 69 6c 2e 61 70 69 52 65 73 70 Data Ascii: eset(t)})),t.addEventListener("submit",(e=>{wpcf7.submit(t,{submitter:e.submitter}),e.preventDefault()})),t.addEventListener("wpcf7submit",(e=>{e.detail.apiResponse.captcha&&u(t,e.detail.apiResponse.captcha),e.detail.apiResponse.quiz&&f(t,e.detail.apiResp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49806	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:16 UTC	633	OUT	GET /wp-content/plugins/form-masks-for-elementor/assets/lib/jquery.mask.js?ver=1.6.4 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:16 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 8326 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:45 GMT ETag: "661e9351-2086" Accept-Ranges: bytes
2024-04-18 19:30:16 UTC	2796	IN	Data Raw: 2f 2f 20 6a 51 75 65 72 79 20 4d 61 73 6b 20 50 6c 75 67 69 6e 20 76 31 2e 31 34 2e 31 36 0a 2f 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0a 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 66 69 6e 64 49 6e 74 65 72 6e 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 6e 2c 66 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 3d 53 74 72 69 6e 67 28 61 29 29 3b 66 6f 72 28 76 61 72 20 70 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 30 3b 6b 3c 70 3b 6b 2b 2b 29 7b 76 61 72 20 62 3d 61 5b 6b 5d 3b 69 66 28 6e 2e 63 61 6c 6c 28 66 2c 62 2c 6b 2c 61 29 29 72 65 74 75 Data Ascii: // jQuery Mask Plugin v1.14.16// github.com/igorescobar/jQuery-Mask-Pluginvar $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.findInternal=function(a,n,f){a instanceof String&&(a=String(a));for(var p=a.length,k=0;k<p;k++){var b=a[k];if(n.call(f,b,k,a))retu
2024-04-18 19:30:16 UTC	4096	IN	Data Raw: 72 6e 3a 63 7d 29 3a 61 2e 70 75 73 68 28 65 7c 7c 62 3f 63 2b 22 3f 22 3a 63 29 29 3a 61 2e 70 75 73 68 28 64 2e 63 68 61 72 41 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 5b 2d 5c 2f 5c 5c 5e 24 2a 2b 3f 2e 28 29 7c 5b 5c 5d 7b 7d 5d 2f 67 2c 22 5c 5c 24 26 22 29 29 3b 61 3d 61 2e 6a 6f 69 6e 28 22 22 29 3b 74 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 22 2b 74 2e 64 69 67 69 74 2b 22 28 2e 2a 22 2b 74 2e 64 69 67 69 74 2b 22 29 3f 29 22 29 2c 22 28 24 31 29 3f 22 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 74 2e 64 69 67 69 74 2c 22 67 22 29 2c 74 2e 70 61 74 74 65 72 6e 29 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 61 29 7d 2c 64 65 73 74 72 6f 79 45 76 65 6e 74 73 3a 66 75 6e Data Ascii: rn:c}):a.push(e\|\|b?c+"?":c)):a.push(d.charAt(f).replace(/[-\/\\^$+?.()\|[\]{}]/g,"\\$&"));a=a.join("");t&&(a=a.replace(new RegExp("("+t.digit+"(."+t.digit+")?)"),"($1)?").replace(new RegExp(t.digit,"g"),t.pattern));return new RegExp(a)},destroyEvents:fun
2024-04-18 19:30:16 UTC	1434	IN	Data Raw: 7b 7d 3b 76 61 72 20 65 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2c 63 3d 61 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2c 66 3d 63 2e 77 61 74 63 68 49 6e 74 65 72 76 61 6c 3b 63 3d 64 2e 77 61 74 63 68 49 6e 70 75 74 73 7c 7c 63 2e 77 61 74 63 68 49 6e 70 75 74 73 3b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 70 28 74 68 69 73 2c 62 2c 64 29 29 72 65 74 75 72 6e 20 61 28 74 68 69 73 29 2e 64 61 74 61 28 22 6d 61 73 6b 22 2c 6e 65 77 20 6e 28 74 68 69 73 2c 62 2c 64 29 29 7d 3b 61 28 74 68 69 73 29 2e 65 61 63 68 28 6b 29 3b 65 26 26 22 22 21 3d 3d 65 26 26 63 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 61 2e 6d 61 73 6b 57 61 74 63 68 65 72 73 5b 65 5d 29 2c 61 2e 6d 61 73 6b 57 61 74 63 68 65 72 73 5b 65 5d 3d 73 65 74 49 6e 74 65 Data Ascii: {};var e=this.selector,c=a.jMaskGlobals,f=c.watchInterval;c=d.watchInputs\|\|c.watchInputs;var k=function(){if(p(this,b,d))return a(this).data("mask",new n(this,b,d))};a(this).each(k);e&&""!==e&&c&&(clearInterval(a.maskWatchers[e]),a.maskWatchers[e]=setInte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49809	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:16 UTC	635	OUT	GET /wp-content/plugins/form-masks-for-elementor/assets/js/elementor-mask.js?ver=1.6.4 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:16 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1323 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:45 GMT ETag: "661e9351-52b" Accept-Ranges: bytes
2024-04-18 19:30:16 UTC	1323	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 09 76 61 72 20 66 6d 65 4d 61 73 6b 73 20 3d 20 7b 0a 09 09 27 65 76 2d 74 65 6c 27 3a 20 27 30 30 30 30 2d 30 30 30 30 27 2c 0a 09 09 27 65 76 2d 74 65 6c 2d 64 64 64 27 3a 20 27 28 30 30 29 20 30 30 30 30 2d 30 30 30 30 27 2c 0a 09 09 27 65 76 2d 74 65 6c 2d 64 64 64 39 27 3a 20 27 28 30 30 29 20 30 30 30 30 30 2d 30 30 30 30 27 2c 0a 09 09 27 65 76 2d 74 65 6c 2d 75 73 27 3a 20 27 28 30 30 30 29 20 30 30 30 2d 30 30 30 30 27 2c 0a 09 09 27 65 76 2d 63 70 66 27 3a 20 27 30 30 30 2e 30 30 30 2e 30 30 30 2d 30 30 27 2c 0a 09 09 27 65 76 2d 63 6e 70 6a 27 3a 20 27 30 30 2e 30 30 30 2e 30 30 30 2f 30 30 30 30 2d 30 30 27 2c 0a 09 09 27 65 76 2d 6d 6f 6e 65 79 27 3a 20 27 30 30 30 2e 30 30 30 2e 30 30 30 2e 30 30 Data Ascii: (function($) {var fmeMasks = {'ev-tel': '0000-0000','ev-tel-ddd': '(00) 0000-0000','ev-tel-ddd9': '(00) 00000-0000','ev-tel-us': '(000) 000-0000','ev-cpf': '000.000.000-00','ev-cnpj': '00.000.000/0000-00','ev-money': '000.000.000.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49810	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:16 UTC	598	OUT	GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:17 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 5520 Connection: close Last-Modified: Fri, 11 Aug 2023 18:18:26 GMT ETag: "64d67b72-1590" Accept-Ranges: bytes
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 35 2e 30 2e 30 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 74 2e 45 76 45 6d 69 74 74 65 72 3d 65 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: /! This file is auto-generated //! imagesLoaded PACKAGED v5.0.0 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=
2024-04-18 19:30:17 UTC	1424	IN	Data Raw: 72 72 6f 72 22 2c 74 68 69 73 29 2c 74 68 69 73 2e 70 72 6f 78 79 49 6d 61 67 65 2e 73 72 63 3d 74 68 69 73 2e 69 6d 67 2e 63 75 72 72 65 6e 74 53 72 63 7c 7c 74 68 69 73 2e 69 6d 67 2e 73 72 63 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 73 49 6d 61 67 65 43 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6d 67 2e 63 6f 6d 70 6c 65 74 65 26 26 74 68 69 73 2e 69 6d 67 2e 6e 61 74 75 72 61 6c 57 69 64 74 68 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 72 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 69 73 4c 6f 61 64 65 64 3d 74 3b 6c 65 74 7b 70 61 72 65 6e 74 4e 6f 64 65 3a 69 7d 3d 74 68 69 73 2e 69 6d 67 2c 73 3d 22 50 49 43 54 55 52 45 22 3d 3d 3d 69 2e 6e 6f 64 Data Ascii: rror",this),this.proxyImage.src=this.img.currentSrc\|\|this.img.src)},h.prototype.getIsImageComplete=function(){return this.img.complete&&this.img.naturalWidth},h.prototype.confirm=function(t,e){this.isLoaded=t;let{parentNode:i}=this.img,s="PICTURE"===i.nod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49811	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:17 UTC	625	OUT	GET /wp-content/themes/engitech/js/jquery.magnific-popup.min.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:17 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 20947 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-51d3" Accept-Ranges: bytes
2024-04-18 19:30:17 UTC	1398	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 39 20 2d 20 32 30 31 33 2d 31 32 2d 32 37 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 6f 2c 72 2c 61 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 Data Ascii: /! Magnific Popup - v0.9.9 - 2013-12-27 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,n,i,o,r,a,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 3d 53 28 29 2c 74 2e 70 72 6f 62 61 62 6c 79 4d 6f 62 69 6c 65 3d 74 2e 69 73 41 6e 64 72 6f 69 64 7c 7c 74 2e 69 73 49 4f 53 7c 7c 2f 28 4f 70 65 72 61 20 4d 69 6e 69 29 7c 4b 69 6e 64 6c 65 7c 77 65 62 4f 53 7c 42 6c 61 63 6b 42 65 72 72 79 7c 28 4f 70 65 72 61 20 4d 6f 62 69 29 7c 28 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 29 7c 49 45 4d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 6f 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 74 2e 70 6f 70 75 70 73 43 61 63 68 65 3d 7b 7d 7d 2c 6f 70 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 7c 7c 28 69 3d 65 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 29 3b 76 61 72 20 72 3b 69 66 28 6e 2e 69 73 4f 62 6a 3d 3d 3d 21 31 29 7b 74 2e 69 74 65 6d 73 3d 6e 2e 69 Data Ascii: =S(),t.probablyMobile=t.isAndroid\|\|t.isIOS\|\|/(Opera Mini)\|Kindle\|webOS\|BlackBerry\|(Opera Mobi)\|(Windows Phone)\|IEMobile/i.test(navigator.userAgent),o=e(document),t.popupsCache={}},open:function(n){i\|\|(i=e(document.body));var r;if(n.isObj===!1){t.items=n.i
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 6d 66 70 2d 22 2b 72 2b 22 2d 68 6f 6c 64 65 72 22 29 3b 76 61 72 20 61 3d 74 5b 22 67 65 74 22 2b 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 5d 28 6e 2c 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 69 5d 29 3b 74 2e 61 70 70 65 6e 64 43 6f 6e 74 65 6e 74 28 61 2c 69 29 2c 6e 2e 70 72 65 6c 6f 61 64 65 64 3d 21 30 2c 54 28 6d 2c 6e 29 2c 72 3d 6e 2e 74 79 70 65 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 72 65 70 65 6e 64 28 74 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 29 2c 54 28 22 41 66 74 65 72 43 68 61 6e 67 65 22 29 7d 2c 61 70 70 65 6e 64 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 63 6f 6e 74 65 6e 74 3d 65 2c 65 3f 74 2e 73 74 2e 73 68 6f 77 43 6c Data Ascii: mfp-"+r+"-holder");var a=t["get"+i.charAt(0).toUpperCase()+i.slice(1)](n,t.currTemplate[i]);t.appendContent(a,i),n.preloaded=!0,T(m,n),r=n.type,t.container.prepend(t.contentContainer),T("AfterChange")},appendContent:function(e,n){t.content=e,e?t.st.showCl
2024-04-18 19:30:17 UTC	2992	IN	Data Raw: 67 3a 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 7d 7d 2c 65 2e 66 6e 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 5f 28 29 3b 76 61 72 20 69 3d 65 28 74 68 69 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 69 66 28 22 6f 70 65 6e 22 3d 3d 3d 6e 29 7b 76 61 72 20 6f 2c 72 3d 62 3f 69 2e 64 61 74 61 28 22 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 22 29 3a 69 5b 30 5d 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2c 61 3d 70 61 72 73 65 49 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 31 30 29 7c 7c 30 3b 72 2e 69 74 65 6d 73 3f 6f 3d 72 2e 69 74 65 6d 73 5b 61 5d 3a 28 6f 3d 69 2c 72 2e 64 65 6c 65 67 61 74 65 26 26 28 6f 3d 6f 2e 66 69 6e 64 28 72 2e 64 65 6c 65 67 61 74 65 29 29 2c 6f 3d 6f 2e 65 71 28 Data Ascii: g:"Loading..."}},e.fn.magnificPopup=function(n){_();var i=e(this);if("string"==typeof n)if("open"===n){var o,r=b?i.data("magnificPopup"):i[0].magnificPopup,a=parseInt(arguments[1],10)\|\|0;r.items?o=r.items[a]:(o=i,r.delegate&&(o=o.find(r.delegate)),o=o.eq(
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 6d 67 26 26 28 65 2e 68 61 73 53 69 7a 65 3d 21 30 2c 6a 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6a 29 2c 65 2e 69 73 43 68 65 63 6b 69 6e 67 49 6d 67 53 69 7a 65 3d 21 31 2c 54 28 22 49 6d 61 67 65 48 61 73 53 69 7a 65 22 2c 65 29 2c 65 2e 69 6d 67 48 69 64 64 65 6e 26 26 28 74 2e 63 6f 6e 74 65 6e 74 26 26 74 2e 63 6f 6e 74 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6d 66 70 2d 6c 6f 61 64 69 6e 67 22 29 2c 65 2e 69 6d 67 48 69 64 64 65 6e 3d 21 31 29 29 7d 2c 66 69 6e 64 49 6d 61 67 65 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 30 2c 69 3d 65 2e 69 6d 67 5b 30 5d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6a 29 2c 6a 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 Data Ascii: mg&&(e.hasSize=!0,j&&clearInterval(j),e.isCheckingImgSize=!1,T("ImageHasSize",e),e.imgHidden&&(t.content&&t.content.removeClass("mfp-loading"),e.imgHidden=!1))},findImageSize:function(e){var n=0,i=e.img[0],o=function(r){j&&clearInterval(j),j=setInterval(f
2024-04-18 19:30:17 UTC	98	IN	Data Raw: 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 21 3d 3d 6e 26 26 28 74 3d 3d 3d 5a 3f 44 28 29 3a 6e 3d 3d 3d 5a 26 26 44 28 21 30 29 29 7d 29 2c 78 28 6c 2b 22 2e 22 2b 5a 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 44 28 29 7d 29 7d 2c 67 65 74 49 66 72 61 6d 65 3a 66 75 6e Data Ascii: hange",function(e,t,n){t!==n&&(t===Z?D():n===Z&&D(!0))}),x(l+"."+Z,function(){D()})},getIframe:fun
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 63 74 69 6f 6e 28 6e 2c 69 29 7b 76 61 72 20 6f 3d 6e 2e 73 72 63 2c 72 3d 74 2e 73 74 2e 69 66 72 61 6d 65 3b 65 2e 65 61 63 68 28 72 2e 70 61 74 74 65 72 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 69 6e 64 65 78 29 3e 2d 31 3f 28 74 68 69 73 2e 69 64 26 26 28 6f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 69 64 3f 6f 2e 73 75 62 73 74 72 28 6f 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 74 68 69 73 2e 69 64 29 2b 74 68 69 73 2e 69 64 2e 6c 65 6e 67 74 68 2c 6f 2e 6c 65 6e 67 74 68 29 3a 74 68 69 73 2e 69 64 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 29 2c 6f 3d 74 68 69 73 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 22 25 69 64 25 22 2c 6f 29 2c 21 31 29 3a 76 6f 69 64 20 30 7d Data Ascii: ction(n,i){var o=n.src,r=t.st.iframe;e.each(r.patterns,function(){return o.indexOf(this.index)>-1?(this.id&&(o="string"==typeof this.id?o.substr(o.lastIndexOf(this.id)+this.id.length,o.length):this.id.call(this,o)),o=this.src.replace("%id%",o),!1):void 0}
2024-04-18 19:30:17 UTC	75	IN	Data Raw: 26 49 2e 6f 66 66 28 22 74 6f 75 63 68 6d 6f 76 65 22 2b 72 2b 22 20 74 6f 75 63 68 65 6e 64 22 2b 72 29 7d 7d 28 29 2c 5f 28 29 7d 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 7c 7c 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 3b Data Ascii: &I.off("touchmove"+r+" touchend"+r)}}(),_()})(window.jQuery\|\|window.Zepto);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49812	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:17 UTC	618	OUT	GET /wp-content/themes/engitech/js/jquery.isotope.min.js?ver=20190829 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:17 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 35631 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-8b2f" Accept-Ranges: bytes
2024-04-18 19:30:17 UTC	3832	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 49 73 6f 74 6f 70 65 20 50 41 43 4b 41 47 45 44 20 76 32 2e 30 2e 30 0d 0a 20 2a 20 46 69 6c 74 65 72 20 26 20 73 6f 72 74 20 6d 61 67 69 63 61 6c 20 6c 61 79 6f 75 74 73 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 69 73 6f 74 6f 70 65 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0d 0a 20 2a 2f 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 70 74 69 6f 6e 7c 7c 28 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 65 29 26 26 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 74 2e 65 78 74 65 6e 64 Data Ascii: /! Isotope PACKAGED v2.0.0 * Filter & sort magical layouts * http://isotope.metafizzy.co */(function(t){function e(){}function i(t){function i(e){e.prototype.option\|\|(e.prototype.option=function(e){t.isPlainObject(e)&&(this.options=t.extend
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 66 6f 72 28 6f 3d 69 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 29 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 69 5b 6f 5d 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 6e 3d 65 5b 6f 5d 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 2c 6e 29 3a 73 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 74 79 70 65 6f 66 20 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 45 76 65 6e 74 73 28 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 69 Data Ascii: e instanceof RegExp)for(o=i.length;o--;)r.call(this,e,i[o]);else for(o in e)e.hasOwnProperty(o)&&(n=e[o])&&("function"==typeof n?r.call(this,o,n):s.call(this,o,n));return this},o.removeEvent=function(t){var e,i=typeof t,o=this._getEvents();if("string"===i
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 76 61 72 20 73 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 72 65 74 75 72 6e 22 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 22 77 65 62 6b 69 74 22 2c 22 6d 6f 7a 22 2c 22 6d 73 22 2c 22 6f 22 5d 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3e 69 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 69 5d 2c 72 3d 6e 2b 22 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 22 3b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 72 7d 7d 28 29 3b 69 66 28 61 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 70 3d 69 28 75 2c 22 64 69 76 22 29 3b 73 3d 70 3f 69 3a 72 7d 65 6c 73 65 20 73 3d 6e 3b 22 66 75 6e 63 Data Ascii: var s,a=function(){if(e.matchesSelector)return"matchesSelector";for(var t=["webkit","moz","ms","o"],i=0,o=t.length;o>i;i++){var n=t[i],r=n+"MatchesSelector";if(e[r])return r}}();if(a){var u=document.createElement("div"),p=i(u,"div");s=p?i:r}else s=n;"func
2024-04-18 19:30:17 UTC	558	IN	Data Raw: 74 69 6f 6e 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 74 61 72 67 65 74 3d 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 74 72 61 6e 73 6e 2c 6f 3d 67 5b 74 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 7c 7c 74 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 3b 69 66 28 64 65 6c 65 74 65 20 65 2e 69 6e 67 50 72 6f 70 65 72 74 69 65 73 5b 6f 5d 2c 69 28 65 2e 69 6e 67 50 72 6f 70 65 72 74 69 65 73 29 26 26 74 68 69 73 2e 64 69 73 61 62 6c 65 54 72 61 6e 73 69 74 69 6f 6e 28 29 2c 6f 20 69 6e 20 65 2e 63 6c 65 61 6e 26 26 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 74 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 22 22 2c 64 65 6c 65 74 65 20 65 2e 63 6c 65 61 6e 5b 6f 5d 29 2c 6f 20 69 6e 20 65 Data Ascii: tionend=function(t){if(t.target===this.element){var e=this._transn,o=g[t.propertyName]\|\|t.propertyName;if(delete e.ingProperties[o],i(e.ingProperties)&&this.disableTransition(),o in e.clean&&(this.element.style[t.propertyName]="",delete e.clean[o]),o in e
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 3d 22 22 3b 74 68 69 73 2e 63 73 73 28 65 29 7d 3b 76 61 72 20 76 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 3a 22 22 2c 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 22 22 7d 3b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 53 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 73 73 28 76 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 45 6c 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 65 6d 69 74 45 76 65 6e 74 28 22 72 65 6d 6f 76 65 22 2c 5b 74 68 69 73 5d 29 7d 2c 61 2e 70 Data Ascii: ="";this.css(e)};var v={transitionProperty:"",transitionDuration:""};return a.prototype.removeTransitionStyles=function(){this.css(v)},a.prototype.removeElem=function(){this.element.parentNode.removeChild(this.element),this.emitEvent("remove",[this])},a.p
2024-04-18 19:30:17 UTC	1496	IN	Data Raw: 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 6f 2e 65 6d 69 74 45 76 65 6e 74 28 22 6c 61 79 6f 75 74 43 6f 6d 70 6c 65 74 65 22 2c 5b 6f 2c 74 5d 29 7d 76 61 72 20 6f 3d 74 68 69 73 3b 69 66 28 21 74 7c 7c 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 29 2c 76 6f 69 64 20 30 3b 74 68 69 73 2e 5f 69 74 65 6d 73 4f 6e 28 74 2c 22 6c 61 79 6f 75 74 22 2c 69 29 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 73 3e 72 3b 72 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 72 5d 2c 75 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 4c 61 79 6f 75 74 50 6f 73 69 74 69 6f 6e 28 61 29 3b 75 2e 69 74 65 6d 3d 61 2c 75 2e 69 73 49 6e 73 74 61 6e 74 3d 65 7c 7c 61 2e 69 73 4c 61 79 6f 75 74 49 6e 73 74 61 6e 74 2c 6e 2e 70 75 73 68 Data Ascii: e){function i(){o.emitEvent("layoutComplete",[o,t])}var o=this;if(!t\|\|!t.length)return i(),void 0;this._itemsOn(t,"layout",i);for(var n=[],r=0,s=t.length;s>r;r++){var a=t[r],u=this._getItemLayoutPosition(a);u.item=a,u.isInstant=e\|\|a.isLayoutInstant,n.push
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 29 7b 74 68 69 73 2e 73 74 61 6d 70 73 3d 74 68 69 73 2e 73 74 61 6d 70 73 2e 63 6f 6e 63 61 74 28 74 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 69 3e 65 3b 65 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 65 5d 3b 74 68 69 73 2e 69 67 6e 6f 72 65 28 6f 29 7d 7d 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 74 61 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 3d 74 68 69 73 2e 5f 66 69 6e 64 28 74 29 29 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 69 3e 65 3b 65 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 65 5d 3b 6e 28 6f 2c 74 68 69 73 2e 73 74 61 6d 70 73 29 2c 74 68 69 73 2e 75 6e 69 67 6e 6f 72 65 28 6f 29 7d 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: ){this.stamps=this.stamps.concat(t);for(var e=0,i=t.length;i>e;e++){var o=t[e];this.ignore(o)}}},m.prototype.unstamp=function(t){if(t=this._find(t))for(var e=0,i=t.length;i>e;e++){var o=t[e];n(o,this.stamps),this.unignore(o)}},m.prototype._find=function(t
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6e 6f 64 65 4e 61 6d 65 7d 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 64 65 78 4f 66 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3e 69 3b 69 2b 2b 29 69 66 28 74 5b 69 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 69 3b 72 65 74 75 72 6e 2d 31 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 Data Ascii: (t){return t&&"object"==typeof t&&1===t.nodeType&&"string"==typeof t.nodeName},d=Array.prototype.indexOf?function(t,e){return t.indexOf(e)}:function(t,e){for(var i=0,o=t.length;o>i;i++)if(t[i]===e)return i;return-1};"function"==typeof define&&define.amd?d
2024-04-18 19:30:17 UTC	196	IN	Data Raw: 2e 73 6c 69 63 65 28 6f 2c 6f 2b 74 29 3b 65 5b 6f 5d 3d 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 6e 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6d 61 6e 61 67 65 53 74 61 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 65 28 74 29 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 4f 66 66 73 65 74 28 74 29 2c 6e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 4f 72 69 67 69 6e 4c 65 66 74 3f 6f 2e 6c 65 66 74 3a 6f 2e 72 69 67 68 74 2c 72 3d 6e 2b 69 2e 6f 75 74 65 72 57 69 64 74 68 2c 73 3d 4d 61 74 68 2e 66 Data Ascii: .slice(o,o+t);e[o]=Math.max.apply(Math,n)}return e},o.prototype._manageStamp=function(t){var i=e(t),o=this._getElementOffset(t),n=this.options.isOriginLeft?o.left:o.right,r=n+i.outerWidth,s=Math.f
2024-04-18 19:30:17 UTC	1398	IN	Data Raw: 6c 6f 6f 72 28 6e 2f 74 68 69 73 2e 63 6f 6c 75 6d 6e 57 69 64 74 68 29 3b 73 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 73 29 3b 76 61 72 20 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 74 68 69 73 2e 63 6f 6c 75 6d 6e 57 69 64 74 68 29 3b 61 2d 3d 72 25 74 68 69 73 2e 63 6f 6c 75 6d 6e 57 69 64 74 68 3f 30 3a 31 2c 61 3d 4d 61 74 68 2e 6d 69 6e 28 74 68 69 73 2e 63 6f 6c 73 2d 31 2c 61 29 3b 66 6f 72 28 76 61 72 20 75 3d 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 4f 72 69 67 69 6e 54 6f 70 3f 6f 2e 74 6f 70 3a 6f 2e 62 6f 74 74 6f 6d 29 2b 69 2e 6f 75 74 65 72 48 65 69 67 68 74 2c 70 3d 73 3b 61 3e 3d 70 3b 70 2b 2b 29 74 68 69 73 2e 63 6f 6c 59 73 5b 70 5d 3d 4d 61 74 68 2e 6d 61 78 28 75 2c 74 68 69 73 2e 63 6f 6c 59 73 5b 70 5d 29 7d 2c 6f 2e 70 72 6f Data Ascii: loor(n/this.columnWidth);s=Math.max(0,s);var a=Math.floor(r/this.columnWidth);a-=r%this.columnWidth?0:1,a=Math.min(this.cols-1,a);for(var u=(this.options.isOriginTop?o.top:o.bottom)+i.outerHeight,p=s;a>=p;p++)this.colYs[p]=Math.max(u,this.colYs[p])},o.pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49813	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:17 UTC	609	OUT	GET /wp-content/themes/engitech/js/slick.min.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:17 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 42863 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-a76f" Accept-Ranges: bytes
2024-04-18 19:30:17 UTC	1398	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 69 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 7c 7c 7b 7d 3b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 Data Ascii: !function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 24 70 72 65 76 41 72 72 6f 77 3a 6e 75 6c 6c 2c 73 63 72 6f 6c 6c 69 6e 67 3a 21 31 2c 73 6c 69 64 65 43 6f 75 6e 74 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 24 73 6c 69 64 65 54 72 61 63 6b 3a 6e 75 6c 6c 2c 24 73 6c 69 64 65 73 3a 6e 75 6c 6c 2c 73 6c 69 64 69 6e 67 3a 21 31 2c 73 6c 69 64 65 4f 66 66 73 65 74 3a 30 2c 73 77 69 70 65 4c 65 66 74 3a 6e 75 6c 6c 2c 73 77 69 70 69 6e 67 3a 21 31 2c 24 6c 69 73 74 3a 6e 75 6c 6c 2c 74 6f 75 63 68 4f 62 6a 65 63 74 3a 7b 7d 2c 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 3a 21 31 2c 75 6e 73 6c 69 63 6b 65 64 3a 21 31 7d 2c 69 2e 65 78 74 65 6e 64 28 6e 2c 6e 2e 69 6e 69 74 69 61 6c 73 29 2c 6e 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 3d 6e 75 6c 6c 2c 6e 2e 61 6e 69 Data Ascii: $prevArrow:null,scrolling:!1,slideCount:null,slideWidth:null,$slideTrack:null,$slides:null,sliding:!1,slideOffset:0,swipeLeft:null,swiping:!1,$list:null,touchObject:{},transformsEnabled:!1,unslicked:!1},i.extend(n,n.initials),n.activeBreakpoint=null,n.ani
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 6c 28 69 2e 61 75 74 6f 50 6c 61 79 49 74 65 72 61 74 6f 72 2c 69 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 6f 70 6c 61 79 53 70 65 65 64 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 61 75 74 6f 50 6c 61 79 54 69 6d 65 72 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 2e 61 75 74 6f 50 6c 61 79 54 69 6d 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 6f 50 6c 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 65 3d 69 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2b 69 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3b 69 2e 70 61 75 73 65 64 7c 7c 69 2e 69 6e 74 65 72 Data Ascii: l(i.autoPlayIterator,i.options.autoplaySpeed))},e.prototype.autoPlayClear=function(){var i=this;i.autoPlayTimer&&clearInterval(i.autoPlayTimer)},e.prototype.autoPlayIterator=function(){var i=this,e=i.currentSlide+i.options.slidesToScroll;i.paused\|\|i.inter
2024-04-18 19:30:17 UTC	2992	IN	Data Raw: 69 6e 61 6c 53 65 74 74 69 6e 67 73 2c 21 30 3d 3d 3d 65 26 26 28 72 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 72 2e 6f 70 74 69 6f 6e 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 29 2c 72 2e 72 65 66 72 65 73 68 28 65 29 2c 6c 3d 73 29 2c 65 7c 7c 21 31 3d 3d 3d 6c 7c 7c 72 2e 24 73 6c 69 64 65 72 2e 74 72 69 67 67 65 72 28 22 62 72 65 61 6b 70 6f 69 6e 74 22 2c 5b 72 2c 6c 5d 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 2c 73 2c 6e 2c 72 3d 74 68 69 73 2c 6c 3d 69 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 3b 73 77 69 74 63 68 28 6c 2e 69 73 28 22 61 22 29 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 2e 69 73 28 22 6c 69 22 29 7c 7c Data Ascii: inalSettings,!0===e&&(r.currentSlide=r.options.initialSlide),r.refresh(e),l=s),e\|\|!1===l\|\|r.$slider.trigger("breakpoint",[r,l])}},e.prototype.changeSlide=function(e,t){var o,s,n,r=this,l=i(e.currentTarget);switch(l.is("a")&&e.preventDefault(),l.is("li")\|\|
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 28 29 2c 74 2e 74 6f 75 63 68 4f 62 6a 65 63 74 3d 7b 7d 2c 74 2e 63 6c 65 61 6e 55 70 45 76 65 6e 74 73 28 29 2c 69 28 22 2e 73 6c 69 63 6b 2d 63 6c 6f 6e 65 64 22 2c 74 2e 24 73 6c 69 64 65 72 29 2e 64 65 74 61 63 68 28 29 2c 74 2e 24 64 6f 74 73 26 26 74 2e 24 64 6f 74 73 2e 72 65 6d 6f 76 65 28 29 2c 74 2e 24 70 72 65 76 41 72 72 6f 77 26 26 74 2e 24 70 72 65 76 41 72 72 6f 77 2e 6c 65 6e 67 74 68 26 26 28 74 2e 24 70 72 65 76 41 72 72 6f 77 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 6c 69 63 6b 2d 64 69 73 61 62 6c 65 64 20 73 6c 69 63 6b 2d 61 72 72 6f 77 20 73 6c 69 63 6b 2d 68 69 64 64 65 6e 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 Data Ascii: tion(e){var t=this;t.autoPlayClear(),t.touchObject={},t.cleanUpEvents(),i(".slick-cloned",t.$slider).detach(),t.$dots&&t.$dots.remove(),t.$prevArrow&&t.$prevArrow.length&&(t.$prevArrow.removeClass("slick-disabled slick-arrow slick-hidden").removeAttr("ari
2024-04-18 19:30:17 UTC	1496	IN	Data Raw: 6f 75 6e 74 3c 3d 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 3f 6e 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 6e 2e 73 6c 69 64 65 57 69 64 74 68 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 2f 32 2d 6e 2e 73 6c 69 64 65 57 69 64 74 68 2a 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 2f 32 3a 21 30 3d 3d 3d 6e 2e 6f 70 74 69 6f 6e 73 2e 63 65 6e 74 65 72 4d 6f 64 65 26 26 21 30 3d 3d 3d 6e 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 3f 6e 2e 73 6c 69 64 65 4f 66 66 73 65 74 2b 3d 6e 2e 73 6c 69 64 65 57 69 64 74 68 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2f 32 29 2d 6e 2e 73 6c 69 64 65 57 69 64 74 68 3a 21 30 3d 3d 3d Data Ascii: ount<=n.options.slidesToShow?n.slideOffset=n.slideWidthMath.floor(n.options.slidesToShow)/2-n.slideWidthn.slideCount/2:!0===n.options.centerMode&&!0===n.options.infinite?n.slideOffset+=n.slideWidth*Math.floor(n.options.slidesToShow/2)-n.slideWidth:!0===
2024-04-18 19:30:17 UTC	2796	IN	Data Raw: 65 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 3b 72 65 74 75 72 6e 20 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 6c 69 64 65 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 3d 21 30 3d 3d 3d 6f 2e 6f 70 74 69 6f 6e 73 2e 63 65 6e 74 65 72 4d 6f 64 65 3f 6f 2e 73 6c 69 64 65 57 69 64 74 68 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 6f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2f 32 29 3a 30 2c 21 30 3d 3d 3d 6f 2e 6f 70 74 69 6f 6e 73 2e 73 77 69 70 65 54 6f 53 6c 69 64 65 3f 28 6f 2e 24 73 6c 69 64 65 54 Data Ascii: e.options.slidesToShow;return s},e.prototype.getSlick=function(){return this},e.prototype.getSlideCount=function(){var e,t,o=this;return t=!0===o.options.centerMode?o.slideWidth*Math.floor(o.options.slidesToShow/2):0,!0===o.options.swipeToSlide?(o.$slideT
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 73 6c 69 63 6b 22 2c 69 2e 70 72 6f 78 79 28 65 2e 69 6e 74 65 72 72 75 70 74 2c 65 2c 21 31 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 53 6c 69 64 65 45 76 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 6f 70 74 69 6f 6e 73 2e 70 61 75 73 65 4f 6e 48 6f 76 65 72 26 26 28 65 2e 24 6c 69 73 74 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 73 6c 69 63 6b 22 2c 69 2e 70 72 6f 78 79 28 65 2e 69 6e 74 65 72 72 75 70 74 2c 65 2c 21 30 29 29 2c 65 2e 24 6c 69 73 74 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 73 6c 69 63 6b 22 2c 69 2e 70 72 6f 78 79 28 65 2e 69 6e 74 65 72 72 75 70 74 2c 65 2c 21 31 29 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e Data Ascii: on("mouseleave.slick",i.proxy(e.interrupt,e,!1))},e.prototype.initSlideEvents=function(){var e=this;e.options.pauseOnHover&&(e.$list.on("mouseenter.slick",i.proxy(e.interrupt,e,!0)),e.$list.on("mouseleave.slick",i.proxy(e.interrupt,e,!1)))},e.prototype.in
2024-04-18 19:30:17 UTC	1496	IN	Data Raw: 65 72 43 68 61 6e 67 65 22 2c 5b 74 2c 65 5d 29 2c 74 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 74 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 74 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 74 2e 73 65 74 50 6f 73 69 74 69 6f 6e 28 29 2c 74 2e 73 77 69 70 65 4c 65 66 74 3d 6e 75 6c 6c 2c 74 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 6f 70 6c 61 79 26 26 74 2e 61 75 74 6f 50 6c 61 79 28 29 2c 21 30 3d 3d 3d 74 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 26 26 28 74 2e 69 6e 69 74 41 44 41 28 29 2c 74 2e 6f 70 74 69 6f 6e 73 2e 66 6f 63 75 73 4f 6e 43 68 61 6e 67 65 26 26 69 28 74 2e 24 73 6c 69 64 65 73 2e 67 65 74 28 74 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 29 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2e Data Ascii: erChange",[t,e]),t.animating=!1,t.slideCount>t.options.slidesToShow&&t.setPosition(),t.swipeLeft=null,t.options.autoplay&&t.autoPlay(),!0===t.options.accessibility&&(t.initADA(),t.options.focusOnChange&&i(t.$slides.get(t.currentSlide)).attr("tabindex",0).
2024-04-18 19:30:17 UTC	4096	IN	Data Raw: 6e 74 53 6c 69 64 65 3a 74 7d 29 2c 73 2e 69 6e 69 74 28 29 2c 65 7c 7c 73 2e 63 68 61 6e 67 65 53 6c 69 64 65 28 7b 64 61 74 61 3a 7b 6d 65 73 73 61 67 65 3a 22 69 6e 64 65 78 22 2c 69 6e 64 65 78 3a 74 7d 7d 2c 21 31 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 67 69 73 74 65 72 42 72 65 61 6b 70 6f 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6f 2c 73 3d 74 68 69 73 2c 6e 3d 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 7c 7c 6e 75 6c 6c 3b 69 66 28 22 61 72 72 61 79 22 3d 3d 3d 69 2e 74 79 70 65 28 6e 29 26 26 6e 2e 6c 65 6e 67 74 68 29 7b 73 2e 72 65 73 70 6f 6e 64 54 6f 3d 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 64 54 6f 7c 7c 22 77 69 6e 64 6f 77 22 3b 66 6f 72 28 65 20 69 6e 20 6e 29 69 66 28 Data Ascii: ntSlide:t}),s.init(),e\|\|s.changeSlide({data:{message:"index",index:t}},!1)},e.prototype.registerBreakpoints=function(){var e,t,o,s=this,n=s.options.responsive\|\|null;if("array"===i.type(n)&&n.length){s.respondTo=s.options.respondTo\|\|"window";for(e in n)if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49814	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:17 UTC	616	OUT	GET /wp-content/themes/engitech/js/easypiechart.min.js?ver=20190829 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:17 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3691 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-e6b" Accept-Ranges: bytes
2024-04-18 19:30:17 UTC	3691	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 65 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 6f 29 7b 76 61 72 20 6e 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 3b 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 22 6f Data Ascii: !function(t){"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e)}):"object"==typeof exports?module.exports=t(require("jquery")):t(jQuery)}(function(n){function o(e,o){var n,t=document.createElement("canvas");e.appendChild(t),"o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49815	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:17 UTC	620	OUT	GET /wp-content/themes/engitech/js/jquery.countdown.min.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:17 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1310 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-51e" Accept-Ranges: bytes
2024-04-18 19:30:17 UTC	1310	IN	Data Raw: 2f 2f 20 43 6f 75 6e 74 44 6f 77 6e 20 43 6c 6f 63 6b 0a 2f 2f 20 56 65 72 73 69 6f 6e 20 20 20 3a 20 31 2e 30 2e 31 0a 2f 2f 20 44 65 76 65 6c 6f 70 65 72 20 3a 20 45 6b 72 65 6d 20 4b 41 59 41 0a 2f 2f 20 57 65 62 73 69 74 65 20 20 20 3a 20 68 74 74 70 3a 2f 2f 65 2d 70 69 6b 73 65 6c 2e 63 6f 6d 0a 2f 2f 20 47 69 74 48 75 62 20 20 20 20 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 65 70 69 6b 73 65 6c 2f 63 6f 75 6e 74 64 6f 77 6e 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 66 6e 2e 63 6f 75 6e 74 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 72 2e 64 61 74 65 29 2c 65 3d 73 28 29 2c 6f 3d 74 2d 65 3b 69 66 28 30 3e 6f 29 72 65 74 75 Data Ascii: // CountDown Clock// Version : 1.0.1// Developer : Ekrem KAYA// Website : http://e-piksel.com// GitHub : https://github.com/epiksel/countdown!function(t){t.fn.countdown=function(e,n){function o(){var t=new Date(r.date),e=s(),o=t-e;if(0>o)retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49816	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:17 UTC	609	OUT	GET /wp-content/themes/engitech/js/elementor.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:18 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 28374 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-6ed6" Accept-Ranges: bytes
2024-04-18 19:30:18 UTC	2796	IN	Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 20 72 74 6c 20 63 68 65 63 6b 20 2a 2f 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 74 6c 5f 69 73 6f 74 6f 70 28 29 7b 0d 0a 20 20 20 20 69 66 20 28 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 7d 7d 3b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 74 6c 5f 73 6c 69 63 6b 28 29 7b 0d 0a 20 20 20 20 69 66 20 28 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c Data Ascii: ( function( $ ) { 'use strict'; /* rtl check */ function rtl_isotop(){ if ($('body').hasClass("rtl")) { return false; } else { return true; }}; function rtl_slick(){ if ($('body').hasClass("rtl
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 09 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 65 50 72 6f 67 72 65 73 73 28 29 20 7b 0d 0a 09 09 24 28 27 2e 6f 74 2d 70 72 6f 67 72 65 73 73 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 76 61 72 20 70 6f 73 5f 79 20 3d 20 24 28 74 68 69 73 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0d 0a 09 09 09 76 61 72 20 76 61 6c 75 65 20 3d 20 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 22 29 2e 64 61 74 61 28 27 70 65 72 63 65 6e 74 27 29 3b 0d 0a 09 09 09 76 61 72 20 74 6f 70 4f 66 57 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c Data Ascii: ----------------------------------------------*/function lineProgress() {$('.ot-progress').each(function() {var pos_y = $(this).offset().top;var value = $(this).find(".progress-bar").data('percent');var topOfWindow = $(window).scroll
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 63 72 6f 6c 6c 2d 74 61 62 6c 65 74 27 29 20 3f 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 63 72 6f 6c 6c 2d 74 61 62 6c 65 74 27 29 20 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6d 73 63 72 6f 20 20 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 63 72 6f 6c 6c 2d 6d 6f 62 69 6c 65 27 29 20 3f 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 63 72 6f 6c 6c 2d 6d 6f 62 69 6c 65 27 29 20 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 67 61 70 73 20 20 20 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 67 61 70 73 27 29 20 21 3d 3d 20 27 27 20 3f 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 67 61 70 73 27 29 20 3a 20 31 34 30 2c 0d 0a 20 20 20 20 20 20 20 Data Ascii: croll-tablet') ? $selector.data('scroll-tablet') : 1, $mscro = $selector.data('scroll-mobile') ? $selector.data('scroll-mobile') : 1, $gaps = $selector.data('gaps') !== '' ? $selector.data('gaps') : 140,
2024-04-18 19:30:18 UTC	1594	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 68 6f 77 20 20 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 68 6f 77 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 72 6f 20 20 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 63 72 6f 6c 6c 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 61 72 72 20 20 20 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 61 72 72 6f 77 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 64 6f 74 73 20 20 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 64 6f 74 73 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6d 73 68 6f 77 20 20 20 20 3d 20 24 73 68 6f 77 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: $show = $selector.data('show'), $scro = $selector.data('scroll'), $arr = $selector.data('arrow'), $dots = $selector.data('dots'), $mshow = $show;
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 70 6f 69 6e 74 3a 20 31 30 32 34 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 74 69 6e 67 73 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 20 32 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 72 6f 77 73 3a 20 Data Ascii: }, { breakpoint: 1024, settings: { slidesToShow: 2, slidesToScroll: 1, arrows:
2024-04-18 19:30:18 UTC	1496	IN	Data Raw: 69 6e 66 69 6e 69 74 65 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 2a 20 70 72 6f 6a 65 63 74 73 20 66 69 6c 74 65 72 20 69 73 6f 74 6f 70 65 0d 0a 09 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: infinite: true, } } ] }); }); }; /* --------------------------------------------------* projects filter isotope* ---------------------------------------
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 20 20 20 20 76 61 72 20 70 6f 72 74 66 6f 6c 69 6f 53 6c 69 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 24 73 63 6f 70 65 20 2c 20 24 20 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 2e 70 72 6f 6a 65 63 74 2d 73 6c 69 64 65 72 27 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 73 65 6c 65 63 74 6f 72 20 3d 20 24 28 74 68 69 73 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 65 6e 74 65 72 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 63 65 6e 74 65 72 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 68 6f 77 20 20 20 3d 20 24 73 65 6c 65 63 74 6f 72 2e 64 61 Data Ascii: -----------*/ var portfolioSlider = function ( $scope , $ ) { $scope.find('.project-slider').each( function(){ var $selector = $(this), $center = $selector.data('center'), $show = $selector.da
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 70 6f 69 6e 74 3a 20 37 36 37 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 74 69 6e 67 73 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 72 6f 77 73 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 74 73 Data Ascii: { breakpoint: 767, settings: { slidesToShow: 1, slidesToScroll: 1, arrows: false, dots
2024-04-18 19:30:18 UTC	2008	IN	Data Raw: 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 69 69 6d 61 67 65 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 61 67 65 43 61 72 6f 75 73 65 6c 0d 0a 20 20 20 20 20 20 20 20 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2a 69 6d 61 67 65 20 63 61 72 6f 75 73 65 6c 2a 2f 0d 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 69 64 6f 6d 61 69 6e 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 6d 61 69 6e 4c 69 73 74 0d 0a 20 20 20 20 20 20 20 Data Ascii: rontend/element_ready/iimagecarousel.default", imageCarousel ); /image carousel/ elementorFrontend.hooks.addAction( "frontend/element_ready/idomaincarousel.default", domainList

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49817	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:18 UTC	616	OUT	GET /wp-content/themes/engitech/js/elementor-header.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:18 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3763 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-eb3" Accept-Ranges: bytes
2024-04-18 19:30:18 UTC	3763	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 20 20 20 20 2a 20 73 74 69 63 6b 79 20 68 65 61 64 65 72 0d 0a 20 20 20 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 20 20 20 20 24 28 27 2e 68 65 61 64 65 72 2d 73 74 61 74 69 63 20 2e 69 73 2d 66 69 78 65 64 27 29 2e 70 61 72 65 6e 74 28 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 6c 6f 6e 65 22 3e 3c Data Ascii: (function($) { "use strict"; /* -------------------------------------------------- * sticky header * --------------------------------------------------*/ $('.header-static .is-fixed').parent().append('<div class="header-clone"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49818	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:18 UTC	607	OUT	GET /wp-content/themes/engitech/js/scripts.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:18 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 8005 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-1f45" Accept-Ranges: bytes
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 20 72 74 6c 20 63 68 65 63 6b 20 2a 2f 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 74 6c 5f 69 73 6f 74 6f 70 28 29 7b 0d 0a 20 20 20 20 69 66 20 28 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 7d 7d 3b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 74 6c 5f 73 6c 69 63 6b 28 29 7b 0d 0a 20 20 20 20 69 66 20 28 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c 22 Data Ascii: (function( $ ) { "use strict"; /* rtl check */ function rtl_isotop(){ if ($('body').hasClass("rtl")) { return false; } else { return true; }}; function rtl_slick(){ if ($('body').hasClass("rtl"
2024-04-18 19:30:18 UTC	2894	IN	Data Raw: 73 74 2c 20 2e 74 61 62 2d 74 69 74 6c 65 73 2d 32 20 2e 74 69 74 6c 65 2d 69 74 65 6d 2d 32 3a 66 69 72 73 74 27 29 2e 74 72 69 67 67 65 72 28 27 63 6c 69 63 6b 27 29 3b 0d 0a 0d 0a 09 2f 2a 47 61 6c 6c 65 72 79 20 50 6f 73 74 2a 2f 0d 0a 20 20 20 20 24 28 27 2e 67 61 6c 6c 65 72 79 2d 70 6f 73 74 27 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 73 6c 69 63 6b 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 69 6e 69 74 65 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 72 Data Ascii: st, .tab-titles-2 .title-item-2:first').trigger('click');/Gallery Post/ $('.gallery-post').each( function () { $(this).slick({ infinite: true, slidesToShow: 1, slidesToScroll: 1, arr
2024-04-18 19:30:18 UTC	1015	IN	Data Raw: 67 2d 6c 69 6e 65 20 6c 69 6e 65 2d 63 72 69 67 68 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 64 6f 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 6c 69 6e 65 20 6c 69 6e 65 2d 72 69 67 68 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 2d 64 6f 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 72 65 70 65 6e 64 28 6c 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 0d 0a 20 20 20 20 42 61 63 6b 20 54 6f 20 54 6f 70 0d 0a 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: g-line line-cright"><span class="g-dot"></span></span><span class="g-line line-right"><span class="g-dot"></span></span></div>'); $(this).prepend(l); }); /* ========================================== Back To Top ===========

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49819	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:18 UTC	613	OUT	GET /wp-content/themes/engitech/js/header-mobile.js?ver=20180910 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:18 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 749 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-2ed" Accept-Ranges: bytes
2024-04-18 19:30:18 UTC	749	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 0d 0a 09 48 65 61 64 65 72 20 4d 6f 62 69 6c 65 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 09 2f 2f 20 6d 6f 62 69 6c 65 5f 6d 61 69 6e 6d 65 6e 75 20 63 72 65 61 74 65 20 73 70 61 6e 0d 0a 09 24 28 27 2e 63 6f 6c 6c 61 70 73 65 20 2e 6d 6f 62 69 6c 65 5f 6d 61 69 6e 6d 65 6e 75 20 6c 69 3a 68 61 73 28 75 6c 29 27 29 2e 70 72 65 70 65 6e 64 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 72 72 6f 77 22 3e Data Ascii: (function($) { "use strict"; /* ========================================== Header Mobile========================================== */// mobile_mainmenu create span$('.collapse .mobile_mainmenu li:has(ul)').prepend('<span class="arrow">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49820	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:18 UTC	659	OUT	GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.15 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:18 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 10287 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:43 GMT ETag: "661e934f-282f" Accept-Ranges: bytes
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-18 19:30:18 UTC	4096	IN	Data Raw: 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 68 61 73 46 69 6c 74 65 72 3d 73 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 41 6c 6c 41 63 74 69 6f 6e 73 3d 61 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 2c 21 30 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 41 6c 6c 46 69 6c 74 65 72 73 3d 61 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 2c 21 30 29 2c 74 68 69 73 2e 64 6f 41 63 74 69 6f 6e 3d 63 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 61 70 70 6c 79 46 69 6c 74 65 72 73 3d 63 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 2c 21 30 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 41 63 74 69 6f 6e 3d 6c 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 46 69 6c Data Ascii: s,"actions"),this.hasFilter=s(this,"filters"),this.removeAllActions=a(this,"actions",!0),this.removeAllFilters=a(this,"filters",!0),this.doAction=c(this,"actions"),this.applyFilters=c(this,"filters",!0),this.currentAction=l(this,"actions"),this.currentFil
2024-04-18 19:30:18 UTC	2095	IN	Data Raw: 6e 6e 74 70 3a 22 2c 22 66 65 65 64 3a 22 2c 22 74 65 6c 6e 65 74 3a 22 2c 22 6d 6d 73 3a 22 2c 22 72 74 73 70 3a 22 2c 22 73 6d 73 3a 22 2c 22 73 76 6e 3a 22 2c 22 74 65 6c 3a 22 2c 22 66 61 78 3a 22 2c 22 78 6d 70 70 3a 22 2c 22 77 65 62 63 61 6c 3a 22 2c 22 75 72 6e 3a 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 2e 70 72 6f 74 6f 63 6f 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 72 6f 74 6f 63 6f 6c 22 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 28 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 73 61 6e 69 74 69 7a 69 6e 67 20 55 52 4c 3a 22 2c 65 2e 6d 65 73 73 61 67 65 29 2c 22 23 22 7d 7d 3b 76 61 72 20 74 3d 21 30 3b 77 69 6e 64 Data Ascii: nntp:","feed:","telnet:","mms:","rtsp:","sms:","svn:","tel:","fax:","xmpp:","webcal:","urn:"].includes(t.protocol))throw new Error("Invalid protocol");return t.toString()}catch(e){return console.error("Error sanitizing URL:",e.message),"#"}};var t=!0;wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49821	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:18 UTC	598	OUT	GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:19 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1499 Connection: close Last-Modified: Fri, 08 Apr 2022 20:07:18 GMT ETag: "625095f6-5db" Accept-Ranges: bytes
2024-04-18 19:30:19 UTC	1398	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 6a 51 75 65 72 79 26 26 21 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 26 26 65 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 22 75 73 65 Data Ascii: /! This file is auto-generated /!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof module&&module.exports?module.exports=e(require("jquery")):jQuery&&!jQuery.fn.hoverIntent&&e(jQuery)}(function(f){"use
2024-04-18 19:30:19 UTC	101	IN	Data Raw: 65 2c 73 65 6c 65 63 74 6f 72 3a 74 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 7b 22 6d 6f 75 73 65 65 6e 74 65 72 2e 68 6f 76 65 72 49 6e 74 65 6e 74 22 3a 6f 2c 22 6d 6f 75 73 65 6c 65 61 76 65 2e 68 6f 76 65 72 49 6e 74 65 6e 74 22 3a 6f 7d 2c 64 2e 73 65 6c 65 63 74 6f 72 29 7d 7d 29 3b Data Ascii: e,selector:t});return this.on({"mouseenter.hoverIntent":o,"mouseleave.hoverIntent":o},d.selector)}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49822	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:18 UTC	609	OUT	GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.3.1 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:19 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 33450 Connection: close Last-Modified: Fri, 23 Feb 2024 14:08:00 GMT ETag: "65d8a6c0-82aa" Accept-Ranges: bytes
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 2f 2a 6a 73 6c 69 6e 74 20 62 72 6f 77 73 65 72 3a 20 74 72 75 65 2c 20 77 68 69 74 65 3a 20 74 72 75 65 2c 20 74 68 69 73 3a 20 74 72 75 65 2c 20 6c 6f 6e 67 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 67 6c 6f 62 61 6c 20 63 6f 6e 73 6f 6c 65 2c 6a 51 75 65 72 79 2c 6d 65 67 61 6d 65 6e 75 2c 77 69 6e 64 6f 77 2c 6e 61 76 69 67 61 74 6f 72 2a 2f 0a 0a 2f 2a 21 20 4d 61 78 20 4d 65 67 61 20 4d 65 6e 75 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 20 24 20 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 24 2e 6d 61 78 6d 65 67 61 6d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6d 65 6e 75 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 75 67 69 6e 20 3d 20 Data Ascii: /jslint browser: true, white: true, this: true, long: true //global console,jQuery,megamenu,window,navigator//! Max Mega Menu jQuery Plugin /(function ( $ ) { "use strict"; $.maxmegamenu = function(menu, options) { var plugin =
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 65 6e 20 73 69 62 6c 69 6e 67 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 68 69 64 65 50 61 6e 65 6c 28 24 28 74 68 69 73 29 2c 20 69 6d 6d 65 64 69 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 69 73 44 65 73 6b 74 6f 70 56 69 65 77 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 69 64 74 68 20 3d 20 4d 61 74 68 2e 6d 61 78 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 20 7c 7c 20 30 2c 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 7c 7c 20 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 Data Ascii: en siblings plugin.hidePanel($(this), immediate); }); }; plugin.isDesktopView = function() { var width = Math.max(document.documentElement.clientWidth \|\| 0, window.innerWidth \|\| 0); retu
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 67 6c 65 2d 6f 6e 22 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 63 6c 6f 73 65 5f 70 61 6e 65 6c 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 61 64 64 41 6e 69 6d 61 74 69 6e 67 43 6c 61 73 73 28 61 6e 63 68 6f 72 2e 70 61 72 65 6e 74 28 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 63 61 6c 63 75 6c 61 74 65 44 79 6e 61 6d 69 63 53 75 62 6d 65 6e 75 57 69 64 74 68 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 6e 63 68 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 70 70 6c 79 20 64 79 6e 61 6d 69 63 20 77 69 64 74 68 20 61 6e 64 20 73 75 62 20 6d 65 6e 75 20 70 6f 73 69 74 69 6f 6e 20 28 6f 6e 6c 79 20 74 6f 20 74 6f 70 20 6c 65 76 65 6c 20 6d 65 67 61 20 6d Data Ascii: gle-on").triggerHandler("close_panel"); plugin.addAnimatingClass(anchor.parent()); }; plugin.calculateDynamicSubmenuWidths = function(anchor) { // apply dynamic width and sub menu position (only to top level mega m
2024-04-18 19:30:19 UTC	294	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 72 61 67 67 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 75 67 69 6e 2e 69 73 4d 6f 62 69 6c 65 56 69 65 77 28 29 20 26 26 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 28 22 6d 65 67 61 2d 68 69 64 65 2d 73 75 62 2d 6d 65 6e 75 2d 6f 6e 2d 6d 6f 62 69 6c 65 22 29 29 20 7b 0a 20 Data Ascii: return; } } if (dragging) { return; } if (plugin.isMobileView() && $(this).parent().hasClass("mega-hide-sub-menu-on-mobile")) {
2024-04-18 19:30:19 UTC	1398	IN	Data Raw: 20 63 6c 69 63 6b 73 20 6f 6e 20 70 61 72 65 6e 74 20 69 74 65 6d 73 20 77 68 65 6e 20 73 75 62 20 6d 65 6e 75 20 69 73 20 68 69 64 64 65 6e 20 6f 6e 20 6d 6f 62 69 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 70 6c 75 67 69 6e 2e 73 65 74 74 69 6e 67 73 2e 73 65 63 6f 6e 64 5f 63 6c 69 63 6b 20 3d 3d 3d 20 22 67 6f 22 20 7c 7c 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 28 22 6d 65 67 61 2d 63 6c 69 63 6b 2d 63 6c 69 63 6b 2d 67 6f 22 29 29 20 26 26 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 73 65 63 6f 6e 64 20 63 6c 69 63 6b 0a Data Ascii: clicks on parent items when sub menu is hidden on mobile } if ((plugin.settings.second_click === "go" \|\| $(this).parent().hasClass("mega-click-click-go")) && $(this).attr("href") !== undefined) { // check for second click
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 65 6e 75 22 20 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 75 6e 62 69 6e 64 43 6c 69 63 6b 45 76 65 6e 74 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 20 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 6d 65 67 61 2d 74 6f 67 67 6c 65 2d 6f 6e 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 73 68 6f 77 50 61 6e 65 6c 28 24 28 74 68 69 73 29 2e 63 68 69 6c 64 72 65 6e 28 22 61 2e 6d 65 67 61 2d 6d 65 6e 75 2d 6c 69 6e 6b 22 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 Data Ascii: enu" : function() { plugin.unbindClickEvents(); if (! $(this).hasClass("mega-toggle-on")) { plugin.showPanel($(this).children("a.mega-menu-link")); } },
2024-04-18 19:30:19 UTC	98	IN	Data Raw: 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 2e 6d 65 67 61 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 2d 62 6c 6f 63 6b 2c 20 62 75 74 74 6f 6e 2e 6d 65 67 61 2d 74 6f 67 67 6c 65 2d 61 6e 69 6d 61 74 65 64 22 2c 20 24 74 6f 67 67 6c 65 5f 62 61 72 29 Data Ascii: (); $(".mega-menu-toggle-block, button.mega-toggle-animated", $toggle_bar)
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 2e 66 69 72 73 74 28 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 73 70 61 63 65 5f 6b 65 79 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 61 63 74 69 76 65 5f 6c 69 6e 6b 2e 69 73 28 22 2e 6d 65 67 61 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 2d 62 6c 6f 63 6b 2c 20 2e 6d 65 67 61 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 2d 61 6e 69 6d 61 74 65 64 2d 62 6c 6f 63 6b 20 62 75 74 74 6f 6e 22 29 20 Data Ascii: .first().focus(); } } if ( keyCode === space_key ) { e.preventDefault(); if ( active_link.is(".mega-menu-toggle-block, .mega-menu-toggle-animated-block button")
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 6d 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 20 28 20 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 6c 65 66 74 5f 61 72 72 6f 77 5f 6b 65 79 20 26 26 20 70 6c 75 67 69 6e 2e 69 73 44 65 73 6b 74 6f 70 56 69 65 77 28 29 20 29 20 7c 7c 20 28 20 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 75 70 5f 61 72 72 6f 77 5f 6b 65 79 20 26 26 20 70 6c 75 67 69 6e 2e 69 73 4d 6f 62 69 6c 65 56 69 65 77 28 29 20 29 20 29 20 26 26 20 24 6d 65 6e 75 2e 68 61 73 43 6c 61 73 73 28 22 6d 65 67 61 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a Data Ascii: m.focus(); } if ( ( ( keyCode === left_arrow_key && plugin.isDesktopView() ) \|\| ( keyCode === up_arrow_key && plugin.isMobileView() ) ) && $menu.hasClass("mega-menu-horizontal") ) { e.preventDefault();
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 21 20 24 28 22 62 6f 64 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c 22 29 20 26 26 20 24 6d 65 6e 75 2e 68 61 73 43 6c 61 73 73 28 22 6d 65 67 61 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6d 65 6e 75 2e 61 70 70 65 6e 64 28 24 6d 65 6e 75 2e 63 68 69 6c 64 72 65 6e 28 22 6c 69 2e 6d 65 67 61 2d 69 74 65 6d 2d 61 6c 69 67 6e 2d 72 69 67 68 74 22 29 2e 67 65 74 28 29 2e 72 65 76 65 72 73 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 70 6c 75 67 69 6e 2e 61 64 64 43 6c 65 61 72 43 6c 61 73 73 65 73 54 6f 4d 6f 62 69 6c 65 49 74 65 6d 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 Data Ascii: ! $("body").hasClass("rtl") && $menu.hasClass("mega-menu-horizontal") ) { $menu.append($menu.children("li.mega-item-align-right").get().reverse()); } }; plugin.addClearClassesToMobileItems = function() {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49824	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:19 UTC	634	OUT	GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:19 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 5825 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:39 GMT ETag: "661e934b-16c1" Accept-Ranges: bytes
2024-04-18 19:30:19 UTC	3833	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 61 2c 63 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 61 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 Data Ascii: /! elementor-pro - v3.21.0 - 15-04-2024 /(()=>{"use strict";var e,r,a,c={},n={};function __webpack_require__(e){var r=n[e];if(void 0!==r)return r.exports;var a=n[e]={exports:{}};return c[e].call(a.exports,a,a.exports,__webpack_require__),a.exports}__we
2024-04-18 19:30:19 UTC	1992	IN	Data Raw: 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 63 29 2c 5f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 61 2b 6e 29 2c 5f 2e 73 72 63 3d 65 29 2c 72 5b 65 5d 3d 5b 63 5d 3b 76 61 72 20 6f 6e 53 63 72 69 70 74 43 6f 6d 70 6c 65 74 65 3d 28 61 2c 63 29 3d 3e 7b 5f 2e 6f 6e 65 72 72 6f 72 3d 5f 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 29 3b 76 61 72 20 6e 3d 72 5b 65 5d 3b 69 66 28 64 65 6c 65 74 65 20 72 5b 65 5d 2c 5f 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 5f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 5f 29 2c 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 28 63 29 29 29 2c 61 29 72 65 74 75 72 6e 20 61 28 63 29 7d 2c 64 3d Data Ascii: __webpack_require__.nc),_.setAttribute("data-webpack",a+n),_.src=e),r[e]=[c];var onScriptComplete=(a,c)=>{_.onerror=_.onload=null,clearTimeout(d);var n=r[e];if(delete r[e],_.parentNode&&_.parentNode.removeChild(_),n&&n.forEach((e=>e(c))),a)return a(c)},d=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49826	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:19 UTC	626	OUT	GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:19 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4997 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-1385" Accept-Ranges: bytes
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 5f 2c 74 2c 61 2c 69 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 65 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 5f 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 Data Ascii: /! elementor - v3.21.0 - 15-04-2024 /(()=>{"use strict";var e,r,_,t,a,i={},n={};function __webpack_require__(e){var r=n[e];if(void 0!==r)return r.exports;var _=n[e]={exports:{}};return i[e].call(_.exports,_,_.exports,__webpack_require__),_.exports}__we
2024-04-18 19:30:19 UTC	98	IN	Data Raw: 5d 3d 5b 5f 2c 61 5d 29 29 3b 5f 2e 70 75 73 68 28 74 5b 32 5d 3d 61 29 3b 76 61 72 20 69 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 70 2b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 75 28 72 29 2c 6e 3d 6e 65 77 20 45 72 72 6f 72 3b 5f 5f 77 65 62 70 61 63 Data Ascii: ]=[_,a]));_.push(t[2]=a);var i=__webpack_require__.p+__webpack_require__.u(r),n=new Error;__webpac
2024-04-18 19:30:19 UTC	803	IN	Data Raw: 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6c 28 69 2c 28 5f 3d 3e 7b 69 66 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 65 2c 72 29 26 26 28 30 21 3d 3d 28 74 3d 65 5b 72 5d 29 26 26 28 65 5b 72 5d 3d 76 6f 69 64 20 30 29 2c 74 29 29 7b 76 61 72 20 61 3d 5f 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 5f 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 5f 2e 74 79 70 65 29 2c 69 3d 5f 26 26 5f 2e 74 61 72 67 65 74 26 26 5f 2e 74 61 72 67 65 74 2e 73 72 63 3b 6e 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 72 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 61 2b 22 3a 20 22 2b 69 2b 22 29 22 2c 6e 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 6e 2e 74 79 70 65 3d 61 2c 6e 2e 72 65 71 75 65 73 74 Data Ascii: k_require__.l(i,(_=>{if(__webpack_require__.o(e,r)&&(0!==(t=e[r])&&(e[r]=void 0),t)){var a=_&&("load"===_.type?"missing":_.type),i=_&&_.target&&_.target.src;n.message="Loading chunk "+r+" failed.\n("+a+": "+i+")",n.name="ChunkLoadError",n.type=a,n.request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49823	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:19 UTC	627	OUT	GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:19 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 63265 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:31 GMT ETag: "661e9343-f721" Accept-Ranges: bytes
2024-04-18 19:30:19 UTC	1398	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 34 5d 2c 7b 33 38 31 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 28 65 2c 74 29 3d 3e 7b 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 3a 5b 74 5d 3b 66 6f 72 28 63 6f 6e 73 Data Ascii: /! elementor - v3.21.0 - 15-04-2024 /(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[354],{381:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=(e,t)=>{t=Array.isArray(t)?t:[t];for(cons
2024-04-18 19:30:19 UTC	2796	IN	Data Raw: 22 2c 74 68 69 73 2e 6f 6e 53 65 74 74 69 6e 67 73 43 68 61 6e 67 65 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 29 29 3a 74 68 69 73 2e 72 75 6e 45 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 73 28 29 7d 6f 6e 53 65 74 74 69 6e 67 73 43 68 61 6e 67 65 28 29 7b 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 5f 64 65 66 61 75 6c 74 7d 2c 36 37 35 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 33 32 30 33 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 69 28 6e 28 33 30 39 30 29 29 3b 63 6c 61 73 73 20 4e 65 73 74 65 64 54 69 74 6c 65 4b 65 79 62 6f 61 Data Ascii: ",this.onSettingsChange.bind(this))})):this.runElementsHandlers()}onSettingsChange(){}}t.default=_default},6752:(e,t,n)=>{"use strict";var i=n(3203);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var r=i(n(3090));class NestedTitleKeyboa
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 69 73 2e 67 65 74 54 69 74 6c 65 49 6e 64 65 78 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 3b 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 2e 24 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 28 22 65 6c 65 6d 65 6e 74 6f 72 2f 6e 65 73 74 65 64 2d 65 6c 65 6d 65 6e 74 73 2f 61 63 74 69 76 61 74 65 2d 62 79 2d 6b 65 79 62 6f 61 72 64 22 2c 7b 77 69 64 67 65 74 49 64 3a 74 68 69 73 2e 67 65 74 49 44 28 29 2c 74 69 74 6c 65 49 6e 64 65 78 3a 74 7d 29 7d 65 6c 73 65 22 45 73 63 61 70 65 22 3d 3d 3d 65 2e 6b 65 79 26 26 74 68 69 73 2e 68 61 6e 64 6c 65 54 69 74 6c 65 45 73 63 61 70 65 4b 65 79 45 76 65 6e 74 73 28 65 29 7d 68 61 6e 64 65 54 69 74 6c 65 4c 69 6e 6b 45 6e 74 65 72 4f 72 53 70 61 63 65 45 76 65 6e 74 28 65 29 Data Ascii: is.getTitleIndex(e.currentTarget);elementorFrontend.elements.$window.trigger("elementor/nested-elements/activate-by-keyboard",{widgetId:this.getID(),titleIndex:t})}else"Escape"===e.key&&this.handleTitleEscapeKeyEvents(e)}handeTitleLinkEnterOrSpaceEvent(e)
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 74 68 69 73 2e 68 61 6e 64 6c 65 45 6c 65 6d 65 6e 74 48 61 6e 64 6c 65 72 73 28 29 7d 2c 69 6e 69 74 3a 28 29 3d 3e 7b 74 68 69 73 2e 61 31 31 79 53 65 74 57 69 64 67 65 74 41 72 69 61 44 65 74 61 69 6c 73 28 29 2c 74 68 69 73 2e 61 31 31 79 53 65 74 50 61 67 69 6e 61 74 69 6f 6e 54 61 62 69 6e 64 65 78 28 29 2c 74 68 69 73 2e 61 31 31 79 53 65 74 53 6c 69 64 65 41 72 69 61 48 69 64 64 65 6e 28 22 69 6e 69 74 69 61 6c 69 73 61 74 69 6f 6e 22 29 7d 7d 2c 74 68 69 73 2e 61 70 70 6c 79 4f 66 66 73 65 74 53 65 74 74 69 6e 67 73 28 65 2c 73 2c 74 29 2c 73 7d 67 65 74 4f 66 66 73 65 74 57 69 64 74 68 28 29 7b 63 6f 6e 73 74 20 65 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 67 65 74 43 75 72 72 65 6e 74 44 65 76 69 63 65 4d 6f 64 65 28 29 3b 72 65 Data Ascii: this.handleElementHandlers()},init:()=>{this.a11ySetWidgetAriaDetails(),this.a11ySetPaginationTabindex(),this.a11ySetSlideAriaHidden("initialisation")}},this.applyOffsetSettings(e,s,t),s}getOffsetWidth(){const e=elementorFrontend.getCurrentDeviceMode();re
2024-04-18 19:30:19 UTC	196	IN	Data Raw: 45 61 63 68 28 28 65 3d 3e 7b 65 2e 63 6c 61 73 73 4c 69 73 74 3f 2e 63 6f 6e 74 61 69 6e 73 28 74 29 7c 7c 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7d 29 29 3b 63 6f 6e 73 74 20 6e 3d 22 41 72 72 6f 77 4c 65 66 74 22 3d 3d 3d 65 76 65 6e 74 3f 2e 63 6f 64 65 7c 7c 22 41 72 72 6f 77 52 69 67 68 74 22 3d 3d 3d 65 76 65 6e 74 3f 2e 63 6f 64 65 3b 65 76 65 6e 74 3f 2e 74 61 72 67 65 74 3f 2e 63 6c 61 73 73 4c 69 73 74 3f 2e 63 6f 6e 74 61 69 6e 73 28 65 29 26 26 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 60 2e 24 7b Data Ascii: Each((e=>{e.classList?.contains(t)\|\|e.removeAttribute("tabindex")}));const n="ArrowLeft"===event?.code\|\|"ArrowRight"===event?.code;event?.target?.classList?.contains(e)&&n&&this.$element.find(`.${
2024-04-18 19:30:19 UTC	1398	IN	Data Raw: 74 7d 60 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 67 65 74 53 77 69 70 65 72 57 72 61 70 70 65 72 54 72 61 6e 66 6f 72 6d 58 56 61 6c 75 65 28 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 73 77 69 70 65 72 57 72 61 70 70 65 72 5b 30 5d 3f 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3b 72 65 74 75 72 6e 20 65 3d 65 2e 72 65 70 6c 61 63 65 28 22 74 72 61 6e 73 6c 61 74 65 33 64 28 22 2c 22 22 29 2c 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 65 3d 70 61 72 73 65 49 6e 74 28 65 5b 30 5d 2e 72 65 70 6c 61 63 65 28 22 70 78 22 2c 22 22 29 29 2c 65 7c 7c 30 7d 61 31 31 79 53 65 74 53 6c 69 64 65 41 72 69 61 48 69 64 64 65 6e 28 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 28 22 69 6e 69 74 69 61 6c Data Ascii: t}`).trigger("focus")}getSwiperWrapperTranformXValue(){let e=this.elements.$swiperWrapper[0]?.style.transform;return e=e.replace("translate3d(",""),e=e.split(","),e=parseInt(e[0].replace("px","")),e\|\|0}a11ySetSlideAriaHidden(){if("number"!=typeof("initial
2024-04-18 19:30:19 UTC	2796	IN	Data Raw: 73 65 73 2e 6b 65 6e 42 75 72 6e 73 41 63 74 69 76 65 29 2c 74 68 69 73 2e 61 63 74 69 76 65 49 74 65 6d 49 6e 64 65 78 3d 74 68 69 73 2e 73 77 69 70 65 72 3f 74 68 69 73 2e 73 77 69 70 65 72 2e 61 63 74 69 76 65 49 6e 64 65 78 3a 74 68 69 73 2e 67 65 74 49 6e 69 74 69 61 6c 53 6c 69 64 65 28 29 2c 74 68 69 73 2e 73 77 69 70 65 72 3f 74 68 69 73 2e 24 61 63 74 69 76 65 49 6d 61 67 65 42 67 3d 6a 51 75 65 72 79 28 74 68 69 73 2e 73 77 69 70 65 72 2e 73 6c 69 64 65 73 5b 74 68 69 73 2e 61 63 74 69 76 65 49 74 65 6d 49 6e 64 65 78 5d 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 22 2b 65 2e 63 6c 61 73 73 65 73 2e 73 6c 69 64 65 42 61 63 6b 67 72 6f 75 6e 64 29 3a 74 68 69 73 2e 24 61 63 74 69 76 65 49 6d 61 67 65 42 67 3d 6a 51 75 65 72 79 28 74 68 69 73 2e 65 6c Data Ascii: ses.kenBurnsActive),this.activeItemIndex=this.swiper?this.swiper.activeIndex:this.getInitialSlide(),this.swiper?this.$activeImageBg=jQuery(this.swiper.slides[this.activeItemIndex]).children("."+e.classes.slideBackground):this.$activeImageBg=jQuery(this.el
2024-04-18 19:30:19 UTC	1398	IN	Data Raw: 6e 67 73 28 65 29 7b 6c 65 74 20 74 3d 7b 7d 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 67 65 74 4d 6f 64 65 6c 43 49 44 28 29 3b 69 66 28 74 68 69 73 2e 69 73 45 64 69 74 26 26 6e 29 7b 63 6f 6e 73 74 20 65 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f 6e 66 69 67 2e 65 6c 65 6d 65 6e 74 73 2e 64 61 74 61 5b 6e 5d 2c 69 3d 65 2e 61 74 74 72 69 62 75 74 65 73 3b 6c 65 74 20 72 3d 69 2e 77 69 64 67 65 74 54 79 70 65 7c 7c 69 2e 65 6c 54 79 70 65 3b 69 2e 69 73 49 6e 6e 65 72 26 26 28 72 3d 22 69 6e 6e 65 72 2d 22 2b 72 29 3b 6c 65 74 20 73 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f 6e 66 69 67 2e 65 6c 65 6d 65 6e 74 73 2e 6b 65 79 73 5b 72 5d 3b 73 7c 7c 28 73 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 Data Ascii: ngs(e){let t={};const n=this.getModelCID();if(this.isEdit&&n){const e=elementorFrontend.config.elements.data[n],i=e.attributes;let r=i.widgetType\|\|i.elType;i.isInner&&(r="inner-"+r);let s=elementorFrontend.config.elements.keys[r];s\|\|(s=elementorFrontend.c
2024-04-18 19:30:19 UTC	2796	IN	Data Raw: 69 7a 65 22 2c 74 68 69 73 2e 73 74 72 65 74 63 68 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 61 64 64 4c 69 73 74 65 6e 65 72 4f 6e 63 65 28 65 2c 22 73 74 69 63 6b 79 3a 73 74 69 63 6b 22 2c 74 68 69 73 2e 73 74 72 65 74 63 68 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 61 64 64 4c 69 73 74 65 6e 65 72 4f 6e 63 65 28 65 2c 22 73 74 69 63 6b 79 3a 75 6e 73 74 69 63 6b 22 2c 74 68 69 73 2e 73 74 72 65 74 63 68 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 26 26 28 74 68 69 73 2e 6f 6e 4b 69 74 43 68 61 6e 67 65 53 74 72 65 74 63 68 43 6f 6e 74 61 69 6e 65 72 43 68 61 6e 67 65 3d 74 68 69 73 Data Ascii: ize",this.stretch),elementorFrontend.addListenerOnce(e,"sticky:stick",this.stretch,this.$element),elementorFrontend.addListenerOnce(e,"sticky:unstick",this.stretch,this.$element),elementorFrontend.isEditMode()&&(this.onKitChangeStretchContainerChange=this
2024-04-18 19:30:19 UTC	2796	IN	Data Raw: 6f 72 73 2e 63 6f 6e 74 61 69 6e 65 72 29 29 2c 74 68 69 73 2e 72 65 73 65 74 28 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 65 6c 65 6d 65 6e 74 2c 69 3d 74 2e 69 6e 6e 65 72 57 69 64 74 68 28 29 2c 72 3d 6e 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 73 3d 22 66 69 78 65 64 22 3d 3d 3d 6e 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 2c 6f 3d 73 3f 30 3a 72 2c 61 3d 77 69 6e 64 6f 77 3d 3d 3d 74 5b 30 5d 3b 69 66 28 21 61 29 7b 76 61 72 20 6c 3d 74 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 3b 73 26 26 28 6f 3d 6c 29 2c 72 3e 6c 26 26 28 6f 3d 72 2d 6c 29 7d 69 66 28 65 2e 63 6f 6e 73 69 64 65 72 53 63 72 6f 6c 6c 62 61 72 26 26 61 29 7b 6f 2d 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2d 69 7d 73 7c 7c 28 65 6c 65 Data Ascii: ors.container)),this.reset();var n=this.elements.$element,i=t.innerWidth(),r=n.offset().left,s="fixed"===n.css("position"),o=s?0:r,a=window===t[0];if(!a){var l=t.offset().left;s&&(o=l),r>l&&(o=r-l)}if(e.considerScrollbar&&a){o-=window.innerWidth-i}s\|\|(ele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49825	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:19 UTC	615	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:19 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 8171 Connection: close Last-Modified: Wed, 18 Jan 2023 11:16:33 GMT ETag: "63c7d511-1feb" Accept-Ranges: bytes
2024-04-18 19:30:19 UTC	1398	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 7c 7c 21 64 65 66 69 6e 65 2e 61 6d 64 3f 65 28 29 3a 64 65 66 69 6e 65 28 22 69 6e 65 72 74 22 2c 65 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 6f 2c 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 61 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 61 28 65 2c 6e 29 2c 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 Data Ascii: !function(e){"object"==typeof exports&&"undefined"!=typeof module\|\|"function"!=typeof define\|\|!define.amd?e():define("inert",e)}((function(){"use strict";var e,t,n,i,o,r,s=function(e,t,n){return t&&a(e.prototype,t),n&&a(e,n),e};function a(e,t){for(var n=0
2024-04-18 19:30:19 UTC	4096	IN	Data Raw: 7c 65 2e 62 6f 64 79 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2c 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 65 2e 72 65 61 64 79 53 74 61 74 65 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 68 69 73 2e 5f 6f 6e 44 6f 63 75 6d 65 6e 74 4c 6f 61 64 65 64 2e 62 69 6e 64 28 74 68 69 73 29 29 3a 74 68 69 73 2e 5f 6f 6e 44 6f 63 75 6d 65 6e 74 4c 6f 61 64 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 7b 76 61 72 20 69 3d 65 3b 69 66 28 73 3d 28 74 26 26 74 28 69 29 2c 69 2e 73 68 61 64 6f 77 52 6f 6f 74 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 63 28 73 2c Data Ascii: \|e.body\|\|e.documentElement),"loading"===e.readyState?e.addEventListener("DOMContentLoaded",this._onDocumentLoaded.bind(this)):this._onDocumentLoaded()}function c(e,t,n){if(e.nodeType==Node.ELEMENT_NODE){var i=e;if(s=(t&&t(i),i.shadowRoot))return void c(s,
2024-04-18 19:30:19 UTC	2677	IN	Data Raw: 62 61 62 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 74 68 69 73 2e 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 28 65 3d 74 68 69 73 2e 6e 6f 64 65 2c 74 2e 63 61 6c 6c 28 65 2c 6e 29 3f 2d 31 3d 3d 3d 65 2e 74 61 62 49 6e 64 65 78 26 26 74 68 69 73 2e 68 61 73 53 61 76 65 64 54 61 62 49 6e 64 65 78 7c 7c 28 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 26 26 28 74 68 69 73 2e 5f 73 61 76 65 64 54 61 62 49 6e 64 65 78 3d 65 2e 74 61 62 49 6e 64 65 78 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 2c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f Data Ascii: bable",value:function(){var e;this.node.nodeType===Node.ELEMENT_NODE&&(e=this.node,t.call(e,n)?-1===e.tabIndex&&this.hasSavedTabIndex\|\|(e.hasAttribute("tabindex")&&(this._savedTabIndex=e.tabIndex),e.setAttribute("tabindex","-1"),e.nodeType===Node.ELEMENT_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49827	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:19 UTC	618	OUT	GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 6625 Connection: close Last-Modified: Tue, 19 Sep 2023 19:30:24 GMT ETag: "6509f6d0-19e1" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 76 61 72 20 72 75 6e 74 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 28 77 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 29 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 61 3d 77 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 63 3d 77 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c Data Ascii: var runtime=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i=(w="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",a=w.asyncIterator\|\|"@@asyncIterator",c=w.toStringTag\|\|
2024-04-18 19:30:20 UTC	2529	IN	Data Raw: 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 4f 62 6a 65 63 74 28 74 29 2c 6e 3d 5b 5d 3b 66 6f 72 28 65 20 69 6e 20 72 29 6e 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 6e 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 6e 2e 70 6f 70 28 29 3b 69 66 28 65 20 69 6e 20 72 29 72 65 74 75 72 6e 20 74 2e 76 61 6c 75 65 3d 65 2c 74 2e 64 6f 6e 65 3d 21 31 2c 74 7d 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3d 21 30 2c 74 7d 7d 2c 74 2e 76 61 6c 75 65 73 3d 6b 2c 4f 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 4f 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 Data Ascii: ator]"})),t.keys=function(t){var e,r=Object(t),n=[];for(e in r)n.push(e);return n.reverse(),function t(){for(;n.length;){var e=n.pop();if(e in r)return t.value=e,t.done=!1,t}return t.done=!0,t}},t.values=k,O.prototype={constructor:O,reset:function(t){if(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49828	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:19 UTC	610	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 38590 Connection: close Last-Modified: Wed, 03 Apr 2024 03:46:21 GMT ETag: "660cd10d-96be" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	1398	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 2c 6e 3b 65 3d 7b 7d 2c 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 29 2e 6d 3d 74 3d 5b 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 65 28 31 29 2c 65 28 37 30 29 2c 65 28 37 37 29 2c 65 28 38 30 29 2c 65 28 38 31 29 2c 65 28 38 33 29 2c 65 28 39 35 29 2c 65 28 39 36 29 2c 65 28 39 38 29 2c 65 28 31 Data Ascii: !function(r){"use strict";var t,e,n;e={},(n=function(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}).m=t=[function(r,t,e){e(1),e(70),e(77),e(80),e(81),e(83),e(95),e(96),e(98),e(1
2024-04-18 19:30:20 UTC	2796	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 28 29 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 29 2c 6f 3d 65 28 37 29 2c 61 3d 65 28 39 29 2c 63 3d 65 28 31 30 29 2c 69 3d 65 28 31 31 29 2c 75 3d 65 28 31 37 29 2c 66 3d 65 28 33 37 29 2c 73 3d 65 28 34 30 29 2c 70 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 74 2e 66 3d 6e 3f 70 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 69 66 28 72 3d 69 28 72 29 2c 74 3d 75 28 74 29 2c 73 29 74 72 79 7b 72 65 74 75 72 6e 20 70 28 72 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 7d 69 66 28 66 28 72 2c 74 29 29 72 65 74 75 72 6e 20 63 28 21 6f 28 61 Data Ascii: on(){return this}()\|\|Function("return this")()},function(r,t,e){var n=e(5),o=e(7),a=e(9),c=e(10),i=e(11),u=e(17),f=e(37),s=e(40),p=Object.getOwnPropertyDescriptor;t.f=n?p:function(r,t){if(r=i(r),t=u(t),s)try{return p(r,t)}catch(r){}if(f(r,t))return c(!o(a
2024-04-18 19:30:20 UTC	2796	IN	Data Raw: 72 61 74 6f 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 36 29 2c 6f 3d 65 28 36 29 2c 61 3d 65 28 33 29 2e 53 74 72 69 6e 67 3b 72 2e 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 53 79 6d 62 6f 6c 28 22 73 79 6d 62 6f 6c 20 64 65 74 65 63 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 21 61 28 72 29 7c 7c 21 28 4f 62 6a 65 63 74 28 72 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 6e 26 26 6e 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 2c 6f 2c 61 3d 65 28 33 29 2c 63 3d 65 28 32 37 29 3b Data Ascii: rator},function(r,t,e){var n=e(26),o=e(6),a=e(3).String;r.exports=!!Object.getOwnPropertySymbols&&!o((function(){var r=Symbol("symbol detection");return!a(r)\|\|!(Object(r)instanceof Symbol)\|\|!Symbol.sham&&n&&n<41}))},function(r,t,e){var n,o,a=e(3),c=e(27);
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 79 2c 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 70 3d 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 6c 3d 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 2c 79 3d 22 77 72 69 74 61 62 6c 65 22 3b 74 2e 66 3d 6e 3f 61 3f 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 63 28 72 29 2c 74 3d 69 28 74 29 2c 63 28 65 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 22 70 72 6f 74 6f 74 79 70 65 22 3d 3d 3d 74 26 26 22 76 61 6c 75 65 22 69 6e 20 65 26 26 79 20 69 6e 20 65 26 26 21 65 5b 79 5d 26 26 28 6e 3d 73 28 72 2c 74 29 29 26 26 6e 5b 79 5d 26 26 28 72 5b 74 5d 3d 65 2e 76 61 6c 75 65 2c 65 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 28 6c 20 69 6e Data Ascii: y,s=Object.getOwnPropertyDescriptor,p="enumerable",l="configurable",y="writable";t.f=n?a?function(r,t,e){var n;return c(r),t=i(t),c(e),"function"==typeof r&&"prototype"===t&&"value"in e&&y in e&&!e[y]&&(n=s(r,t))&&n[y]&&(r[t]=e.value,e={configurable:(l in
2024-04-18 19:30:20 UTC	1496	IN	Data Raw: 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 63 29 7b 76 61 72 20 69 2c 75 3d 6e 28 74 29 2c 66 3d 61 28 75 29 2c 73 3d 6f 28 63 2c 66 29 3b 69 66 28 72 26 26 65 21 3d 65 29 7b 66 6f 72 28 3b 73 3c 66 3b 29 69 66 28 28 69 3d 75 5b 73 2b 2b 5d 29 21 3d 69 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 73 3c 66 3b 73 2b 2b 29 69 66 28 28 72 7c 7c 73 20 69 6e 20 75 29 26 26 75 5b 73 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 72 7c 7c 73 7c 7c 30 3b 72 65 74 75 72 6e 21 72 26 26 2d 31 7d 7d 3b 72 2e 65 78 70 6f 72 74 73 3d 7b 69 6e 63 6c 75 64 65 73 3a 65 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 65 28 21 31 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 36 30 29 2c 6f 3d 4d 61 74 68 2e 6d 61 78 2c 61 3d 4d Data Ascii: turn function(t,e,c){var i,u=n(t),f=a(u),s=o(c,f);if(r&&e!=e){for(;s<f;)if((i=u[s++])!=i)return!0}else for(;s<f;s++)if((r\|\|s in u)&&u[s]===e)return r\|\|s\|\|0;return!r&&-1}};r.exports={includes:e(!0),indexOf:e(!1)}},function(r,t,e){var n=e(60),o=Math.max,a=M
2024-04-18 19:30:20 UTC	2796	IN	Data Raw: 3d 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 31 34 29 3b 72 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 6e 28 72 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 54 79 70 65 45 72 72 6f 72 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 3c 72 29 74 68 72 6f 77 20 6e 28 22 4d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 69 6e 64 65 78 20 65 78 63 65 65 64 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 29 2c 6f 3d 65 28 37 31 Data Ascii: =t}},function(r,t,e){var n=e(14);r.exports=Array.isArray\|\|function(r){return"Array"===n(r)}},function(r,t,e){var n=TypeError;r.exports=function(r){if(9007199254740991<r)throw n("Maximum allowed index exceeded");return r}},function(r,t,e){var n=e(2),o=e(71
2024-04-18 19:30:20 UTC	2796	IN	Data Raw: 29 7b 76 61 72 20 69 3d 6e 28 72 29 2c 75 3d 28 65 3d 6f 28 65 29 29 3c 30 3f 69 2b 65 3a 65 3b 69 66 28 69 3c 3d 75 7c 7c 75 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 61 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 64 65 78 22 29 3b 66 6f 72 28 76 61 72 20 66 3d 6e 65 77 20 74 28 69 29 2c 73 3d 30 3b 73 3c 69 3b 73 2b 2b 29 66 5b 73 5d 3d 73 3d 3d 3d 75 3f 63 3a 72 5b 73 5d 3b 72 65 74 75 72 6e 20 66 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 29 2c 6f 3d 65 28 31 33 29 2c 61 3d 65 28 32 39 29 2c 63 3d 65 28 31 35 29 2c 69 3d 65 28 38 34 29 2c 75 3d 65 28 39 34 29 2c 66 3d 28 65 3d 65 28 33 34 29 2c 75 2e 4d 61 70 29 2c 73 3d 75 2e 68 61 73 2c 70 3d 75 2e 67 65 74 2c 6c 3d 75 2e 73 65 74 2c 79 3d 6f 28 5b 5d 2e 70 75 73 Data Ascii: ){var i=n(r),u=(e=o(e))<0?i+e:e;if(i<=u\|\|u<0)throw new a("Incorrect index");for(var f=new t(i),s=0;s<i;s++)f[s]=s===u?c:r[s];return f}},function(r,t,e){var n=e(2),o=e(13),a=e(29),c=e(15),i=e(84),u=e(94),f=(e=e(34),u.Map),s=u.has,p=u.get,l=u.set,y=o([].pus
2024-04-18 19:30:20 UTC	1398	IN	Data Raw: 2e 70 75 73 68 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 7d 2c 7b 67 72 6f 75 70 42 79 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 69 28 72 29 2c 63 28 74 29 3b 76 61 72 20 65 3d 73 28 6e 75 6c 6c 29 2c 6e 3d 30 3b 72 65 74 75 72 6e 20 66 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 75 28 74 28 72 2c 6e 2b 2b 29 29 3b 6f 20 69 6e 20 65 3f 70 28 65 5b 6f 5d 2c 72 29 3a 65 5b 6f 5d 3d 5b 72 5d 7d 29 29 2c 65 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 29 2c 6f 3d 65 28 39 37 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 50 72 6f 6d 69 73 65 22 2c 73 74 61 74 3a 21 30 7d 2c 7b 77 69 74 68 52 65 73 6f 6c 76 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: .push);n({target:"Object",stat:!0},{groupBy:function(r,t){i(r),c(t);var e=s(null),n=0;return f(r,(function(r){var o=u(t(r,n++));o in e?p(e[o],r):e[o]=[r]})),e}})},function(r,t,e){var n=e(2),o=e(97);n({target:"Promise",stat:!0},{withResolvers:function(){va
2024-04-18 19:30:20 UTC	2796	IN	Data Raw: 65 53 65 74 73 26 26 28 74 2b 3d 22 76 22 29 2c 72 2e 73 74 69 63 6b 79 26 26 28 74 2b 3d 22 79 22 29 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 29 2c 6f 3d 65 28 31 33 29 2c 61 3d 65 28 31 35 29 2c 63 3d 65 28 31 30 32 29 2c 69 3d 6f 28 22 22 2e 63 68 61 72 43 6f 64 65 41 74 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 7d 2c 7b 69 73 57 65 6c 6c 46 6f 72 6d 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 63 28 61 28 74 68 69 73 29 29 2c 74 3d 72 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 74 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 69 28 72 2c 65 29 3b 69 66 28 35 35 32 39 36 3d 3d 28 36 33 34 38 38 26 6e 29 26 26 28 35 36 33 32 30 3c 3d 6e 7c 7c 2b Data Ascii: eSets&&(t+="v"),r.sticky&&(t+="y"),t}},function(r,t,e){var n=e(2),o=e(13),a=e(15),c=e(102),i=o("".charCodeAt);n({target:"String",proto:!0},{isWellFormed:function(){for(var r=c(a(this)),t=r.length,e=0;e<t;e++){var n=i(r,e);if(55296==(63488&n)&&(56320<=n\|\|+
2024-04-18 19:30:20 UTC	2796	IN	Data Raw: 72 79 7b 64 65 6c 65 74 65 20 6f 5b 72 5d 7d 63 61 74 63 68 28 72 29 7b 7d 69 66 28 5f 5b 72 5d 26 26 21 65 29 72 65 74 75 72 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 28 5f 2c 72 2c 21 65 26 26 4d 26 26 5f 5b 72 5d 7c 7c 74 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 66 6f 72 28 6e 20 69 6e 20 6b 29 21 28 6f 3d 73 5b 6e 5d 29 7c 7c 6f 5b 72 5d 26 26 21 65 7c 7c 64 28 6f 2c 72 2c 74 29 7d 7d 2c 67 65 74 54 79 70 65 64 41 72 72 61 79 43 6f 6e 73 74 72 75 63 74 6f 72 3a 55 2c 69 73 56 69 65 77 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 21 21 6c 28 72 29 26 26 28 22 44 61 74 61 56 69 65 77 22 3d 3d 3d 28 72 3d 68 28 72 29 29 7c 7c 79 28 6b 2c 72 29 7c 7c 79 28 43 2c 72 29 29 7d 2c 69 73 54 79 70 65 64 41 72 72 61 79 3a 6f 2c 54 79 70 65 64 41 72 72 Data Ascii: ry{delete o[r]}catch(r){}if(_[r]&&!e)return;try{return d(_,r,!e&&M&&_[r]\|\|t)}catch(r){}}for(n in k)!(o=s[n])\|\|o[r]&&!e\|\|d(o,r,t)}},getTypedArrayConstructor:U,isView:function(r){return!!l(r)&&("DataView"===(r=h(r))\|\|y(k,r)\|\|y(C,r))},isTypedArray:o,TypedArr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49829	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:20 UTC	611	OUT	GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4307 Connection: close Last-Modified: Wed, 03 Apr 2024 03:46:20 GMT ETag: "660cd10c-10d3" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 74 2e 6f 28 6e 2c 72 29 26 26 21 74 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: /! This file is auto-generated /(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toS
2024-04-18 19:30:20 UTC	98	IN	Data Raw: 79 2c 72 65 6d 6f 76 65 41 6c 6c 41 63 74 69 6f 6e 73 3a 46 2c 72 65 6d 6f 76 65 41 6c 6c 46 69 6c 74 65 72 73 3a 67 2c 64 6f 41 63 74 69 6f 6e 3a 62 2c 61 70 70 6c 79 46 69 6c 74 65 72 73 3a 6b 2c 63 75 72 72 65 6e 74 41 63 74 69 6f 6e 3a 77 2c 63 75 72 72 65 6e 74 46 69 6c 74 65 72 3a 49 2c Data Ascii: y,removeAllActions:F,removeAllFilters:g,doAction:b,applyFilters:k,currentAction:w,currentFilter:I,
2024-04-18 19:30:20 UTC	113	IN	Data Raw: 64 6f 69 6e 67 41 63 74 69 6f 6e 3a 78 2c 64 6f 69 6e 67 46 69 6c 74 65 72 3a 54 2c 64 69 64 41 63 74 69 6f 6e 3a 4f 2c 64 69 64 46 69 6c 74 65 72 3a 6a 2c 61 63 74 69 6f 6e 73 3a 53 2c 66 69 6c 74 65 72 73 3a 7a 7d 3d 66 3b 28 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 29 2e 68 6f 6f 6b 73 3d 65 7d 29 28 29 3b Data Ascii: doingAction:x,doingFilter:T,didAction:O,didFilter:j,actions:S,filters:z}=f;(window.wp=window.wp\|\|{}).hooks=e})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49830	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:20 UTC	610	OUT	GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9141 Connection: close Last-Modified: Wed, 03 Apr 2024 03:46:21 GMT ETag: "660cd10d-23b5" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	3833	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 32 30 35 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 7b 6e 6f 74 5f 73 74 72 69 6e 67 3a 2f 5b 5e 73 5d 2f 2c 6e 6f 74 5f 62 6f 6f 6c 3a 2f 5b 5e 74 5d 2f 2c 6e 6f 74 5f 74 79 70 65 3a 2f 5b 5e 54 5d 2f 2c 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 3a 2f 5b 5e 76 5d 2f 2c 6e 75 6d 62 65 72 3a 2f 5b 64 69 65 66 67 5d 2f 2c 6e 75 6d 65 72 69 63 5f 61 72 67 3a 2f 5b 62 63 64 69 65 66 67 75 78 58 5d 2f 2c 6a 73 6f 6e 3a 2f 5b 6a 5d 2f 2c 6e 6f 74 5f 6a 73 6f 6e 3a 2f 5b 5e 6a 5d 2f 2c 74 65 78 74 3a 2f 5e 5b 5e 5c 78 32 Data Ascii: /! This file is auto-generated /(()=>{var t={2058:(t,e,r)=>{var n;!function(){"use strict";var i={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/[bcdiefguxX]/,json:/[j]/,not_json:/[^j]/,text:/^[^\x2
2024-04-18 19:30:20 UTC	3157	IN	Data Raw: 65 5b 6e 5d 7d 29 7d 2c 72 2e 6f 3d 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 2e 72 3d 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 3b 76 61 72 20 6e 3d 7b 7d 3b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: e[n]})},r.o=(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r.r=t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})};var n={};(()=>{"use strict"
2024-04-18 19:30:20 UTC	2151	IN	Data Raw: 73 3b 72 65 74 75 72 6e 20 61 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 30 3a 74 68 69 73 2e 67 65 74 50 6c 75 72 61 6c 46 6f 72 6d 28 74 2c 69 29 2c 6f 3d 72 2c 65 26 26 28 6f 3d 65 2b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 78 74 44 65 6c 69 6d 69 74 65 72 2b 72 29 2c 28 73 3d 74 68 69 73 2e 64 61 74 61 5b 74 5d 5b 6f 5d 29 26 26 73 5b 61 5d 3f 73 5b 61 5d 3a 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 4d 69 73 73 69 6e 67 4b 65 79 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 4d 69 73 73 69 6e 67 4b 65 79 28 72 2c 74 29 2c 30 3d 3d 3d 61 3f 72 3a 6e 29 7d 3b 63 6f 6e 73 74 20 68 3d 7b 70 6c 75 72 61 6c 5f 66 6f 72 6d 73 3a 74 3d 3e 31 3d 3d 3d 74 3f 30 3a 31 7d 2c 67 3d 2f 5e 69 31 38 6e 5c 2e 28 6e 3f 67 65 74 74 65 78 74 7c 68 61 73 Data Ascii: s;return a=void 0===i?0:this.getPluralForm(t,i),o=r,e&&(o=e+this.options.contextDelimiter+r),(s=this.data[t][o])&&s[a]?s[a]:(this.options.onMissingKey&&this.options.onMissingKey(r,t),0===a?r:n)};const h={plural_forms:t=>1===t?0:1},g=/^i18n\.(n?gettext\|has

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49831	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:20 UTC	623	OUT	GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25066 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:38 GMT ETag: "661e934a-61ea" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	3832	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 39 5d 2c 7b 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6e 28 33 32 30 33 29 3b 6e 28 34 32 34 32 29 3b 76 61 72 20 69 3d 73 28 6e 28 34 37 37 34 29 29 2c 6f 3d 73 28 6e 28 39 35 37 35 29 29 2c 72 3d 73 28 6e 28 36 32 35 34 29 29 2c 61 3d 73 28 6e 28 35 31 36 31 29 29 2c 6c 3d 73 28 6e 28 35 30 33 39 29 29 2c 63 3d 73 28 6e 28 39 32 31 30 29 29 2c 64 Data Ascii: /! elementor-pro - v3.21.0 - 15-04-2024 /(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[819],{2:(e,t,n)=>{"use strict";var s=n(3203);n(4242);var i=s(n(4774)),o=s(n(9575)),r=s(n(6254)),a=s(n(5161)),l=s(n(5039)),c=s(n(9210)),d
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 5f 64 65 66 61 75 6c 74 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 4d 6f 64 75 6c 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 2e 61 74 74 61 63 68 48 61 6e 64 6c 65 72 28 22 63 6f 64 65 2d 68 69 67 68 6c 69 67 68 74 22 2c 28 28 29 3d 3e 6e 2e 65 28 37 31 34 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 38 36 30 34 29 29 29 29 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 5f 64 65 66 61 75 6c 74 7d 2c 34 37 37 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 Data Ascii: le",{value:!0}),t.default=void 0;class _default extends elementorModules.Module{constructor(){super(),elementorFrontend.elementsHandler.attachHandler("code-highlight",(()=>n.e(714).then(n.bind(n,8604))))}}t.default=_default},4774:(e,t,n)=>{"use strict";va
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 2e 6d 61 74 63 68 28 22 2e 2a 3f 28 6d 6f 74 69 6f 6e 5f 66 78 7c 5f 74 72 61 6e 73 66 6f 72 6d 29 22 29 3b 69 66 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 5b 30 5d 2e 6d 61 74 63 68 28 22 28 5f 74 72 61 6e 73 66 6f 72 6d 29 22 29 3f 22 6d 6f 74 69 6f 6e 5f 66 78 22 3a 74 5b 30 5d 3b 74 68 69 73 2e 72 65 66 72 65 73 68 49 6e 73 74 61 6e 63 65 28 65 29 2c 74 68 69 73 5b 65 5d 7c 7c 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 65 29 7d 2f 5e 5f 70 6f 73 69 74 69 6f 6e 2f 2e 74 65 73 74 28 65 29 26 26 5b 22 6d 6f 74 69 6f 6e 5f 66 78 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 6d 6f 74 69 6f 6e 5f 66 78 22 5d 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 74 68 69 73 2e 72 65 66 72 65 73 68 49 6e 73 74 61 6e 63 65 28 65 29 7d 29 29 7d 6f 6e 44 65 73 74 72 6f 79 28 29 7b Data Ascii: .match(".*?(motion_fx\|_transform)");if(t){const e=t[0].match("(_transform)")?"motion_fx":t[0];this.refreshInstance(e),this[e]\|\|this.activate(e)}/^_position/.test(e)&&["motion_fx","background_motion_fx"].forEach((e=>{this.refreshInstance(e)}))}onDestroy(){
2024-04-18 19:30:20 UTC	558	IN	Data Raw: 74 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 56 69 65 77 4d 6f 64 75 6c 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 22 6f 6e 49 6e 73 69 64 65 56 69 65 77 70 6f 72 74 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 72 75 6e 28 29 2c 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 52 65 71 75 65 73 74 3d 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 74 68 69 73 2e 6f 6e 49 6e 73 69 64 65 56 69 65 77 70 6f 72 74 29 7d 29 29 7d 5f 5f 63 6f 6e 73 74 72 75 63 74 28 65 29 7b 74 68 69 73 2e 6d 6f 74 69 6f 6e 46 58 3d 65 2e 6d 6f 74 69 6f 6e 46 58 2c 74 68 69 73 2e 69 6e 74 65 72 73 65 63 Data Ascii: t extends elementorModules.ViewModule{constructor(){super(...arguments),(0,i.default)(this,"onInsideViewport",(()=>{this.run(),this.animationFrameRequest=requestAnimationFrame(this.onInsideViewport)}))}__construct(e){this.motionFX=e.motionFX,this.intersec
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 2e 24 62 6f 64 79 5b 30 5d 3a 74 68 69 73 2e 6d 6f 74 69 6f 6e 46 58 2e 65 6c 65 6d 65 6e 74 73 2e 24 70 61 72 65 6e 74 5b 30 5d 3b 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 65 29 7d 72 75 6e 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 63 61 6c 6c 62 61 63 6b 22 29 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 6d 6f 76 65 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 29 7b 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 26 26 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 75 6e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 6d Data Ascii: orFrontend.elements.$body[0]:this.motionFX.elements.$parent[0];this.intersectionObserver.observe(e)}runCallback(){this.getSettings("callback")(...arguments)}removeIntersectionObserver(){this.intersectionObserver&&this.intersectionObserver.unobserve(this.m
2024-04-18 19:30:20 UTC	1496	IN	Data Raw: 3a 65 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 6c 65 6d 65 6e 74 54 6f 70 3a 74 2e 74 6f 70 2c 65 6c 65 6d 65 6e 74 4c 65 66 74 3a 74 2e 6c 65 66 74 7d 3b 6e 2e 65 6c 65 6d 65 6e 74 52 61 6e 67 65 3d 6e 2e 65 6c 65 6d 65 6e 74 48 65 69 67 68 74 2b 69 6e 6e 65 72 48 65 69 67 68 74 2c 74 68 69 73 2e 73 65 74 53 65 74 74 69 6e 67 73 28 22 64 69 6d 65 6e 73 69 6f 6e 73 22 2c 6e 29 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3d 3d 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 74 79 70 65 22 29 26 26 74 68 69 73 2e 64 65 66 69 6e 65 42 61 63 6b 67 72 6f 75 6e 64 4c 61 79 65 72 44 69 6d 65 6e 73 69 6f 6e 73 28 29 7d 64 65 66 69 6e 65 42 61 63 6b 67 72 6f 75 6e 64 4c 61 79 65 72 44 69 6d 65 6e 73 69 6f 6e 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 Data Ascii: :e.outerWidth(),elementTop:t.top,elementLeft:t.left};n.elementRange=n.elementHeight+innerHeight,this.setSettings("dimensions",n),"background"===this.getSettings("type")&&this.defineBackgroundLayerDimensions()}defineBackgroundLayerDimensions(){const e=this
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 79 70 65 22 29 26 26 28 74 68 69 73 2e 75 70 64 61 74 65 42 61 63 6b 67 72 6f 75 6e 64 4c 61 79 65 72 53 69 7a 65 28 29 2c 74 68 69 73 2e 64 65 66 69 6e 65 42 61 63 6b 67 72 6f 75 6e 64 4c 61 79 65 72 44 69 6d 65 6e 73 69 6f 6e 73 28 29 29 2c 74 68 69 73 2e 61 63 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 28 29 2c 74 68 69 73 2e 64 65 73 74 72 6f 79 49 6e 74 65 72 61 63 74 69 6f 6e 73 28 29 2c 74 68 69 73 2e 72 75 6e 49 6e 74 65 72 61 63 74 69 6f 6e 73 28 29 7d 64 65 73 74 72 6f 79 28 29 7b 74 68 69 73 2e 64 65 73 74 72 6f 79 49 6e 74 65 72 61 63 74 69 6f 6e 73 28 29 2c 74 68 69 73 2e 61 63 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 28 29 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e Data Ascii: ype")&&(this.updateBackgroundLayerSize(),this.defineBackgroundLayerDimensions()),this.actions.refresh(),this.destroyInteractions(),this.runInteractions()}destroy(){this.destroyInteractions(),this.actions.refresh();const e=this.getSettings();this.$element.
2024-04-18 19:30:20 UTC	98	IN	Data Raw: 63 74 69 76 61 74 65 28 29 7d 65 6c 73 65 20 74 68 69 73 2e 64 65 61 63 74 69 76 61 74 65 28 29 7d 2c 72 65 61 63 74 69 76 61 74 65 4f 6e 52 65 73 69 7a 65 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 64 65 62 6f 75 6e 63 65 64 52 65 61 63 74 69 76 61 74 65 29 2c 74 68 69 73 Data Ascii: ctivate()}else this.deactivate()},reactivateOnResize(){clearTimeout(this.debouncedReactivate),this
2024-04-18 19:30:20 UTC	2698	IN	Data Raw: 2e 64 65 62 6f 75 6e 63 65 64 52 65 61 63 74 69 76 61 74 65 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 43 6f 6e 66 69 67 28 29 3b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 21 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 66 69 67 29 26 26 74 68 69 73 2e 72 75 6e 28 21 30 29 7d 29 2c 33 30 30 29 7d 2c 72 65 61 63 74 69 76 61 74 65 28 29 7b 74 68 69 73 2e 64 65 61 63 74 69 76 61 74 65 28 29 2c 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 29 7d 2c 6f 6e 45 6c 65 6d 65 6e 74 43 68 61 6e 67 65 28 65 29 7b 2d 31 21 3d 3d 5b 22 73 74 69 63 6b 79 22 2c 22 73 74 69 63 6b 79 5f 6f 6e 22 5d 2e 69 6e 64 65 78 4f 66 28 65 29 26 26 74 68 69 73 2e 72 75 6e Data Ascii: .debouncedReactivate=setTimeout((()=>{const e=this.getConfig();JSON.stringify(e)!==JSON.stringify(this.currentConfig)&&this.run(!0)}),300)},reactivate(){this.deactivate(),this.activate()},onElementChange(e){-1!==["sticky","sticky_on"].indexOf(e)&&this.run

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49832	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:20 UTC	630	OUT	GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 12198 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-2fa6" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	3832	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 57 61 79 70 6f 69 6e 74 28 6f 70 74 69 6f 6e 73 29 7b 69 66 28 21 6f 70 74 69 6f 6e 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 65 6c 65 6d 65 6e 74 20 6f 70 74 69 6f 6e 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 68 61 Data Ascii: !function(){"use strict";function Waypoint(options){if(!options)throw new Error("No options passed to Waypoint constructor");if(!options.element)throw new Error("No element option passed to Waypoint constructor");if(!options.handler)throw new Error("No ha
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 69 73 2e 65 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 3b 68 6f 72 69 7a 6f 6e 74 61 6c 45 6d 70 74 79 26 26 76 65 72 74 69 63 61 6c 45 6d 70 74 79 26 26 21 69 73 57 69 6e 64 6f 77 26 26 28 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 66 66 28 22 2e 77 61 79 70 6f 69 6e 74 73 22 29 2c 64 65 6c 65 74 65 20 63 6f 6e 74 65 78 74 73 5b 74 68 69 73 2e 6b 65 79 5d 29 7d 2c 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 28 29 7b 73 65 6c 66 2e 68 61 6e 64 6c 65 52 65 73 69 7a 65 28 29 2c 73 65 6c 66 2e 64 69 64 52 65 73 69 7a 65 3d 21 31 7d 76 61 72 20 73 65 6c 66 3d 74 68 69 73 Data Ascii: is.element.window;horizontalEmpty&&verticalEmpty&&!isWindow&&(this.adapter.off(".waypoints"),delete contexts[this.key])},Context.prototype.createThrottledResizeHandler=function(){function resizeHandler(){self.handleResize(),self.didResize=!1}var self=this
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 65 64 42 61 63 6b 77 61 72 64 3f 28 77 61 79 70 6f 69 6e 74 2e 71 75 65 75 65 54 72 69 67 67 65 72 28 61 78 69 73 2e 62 61 63 6b 77 61 72 64 29 2c 74 72 69 67 67 65 72 65 64 47 72 6f 75 70 73 5b 77 61 79 70 6f 69 6e 74 2e 67 72 6f 75 70 2e 69 64 5d 3d 77 61 79 70 6f 69 6e 74 2e 67 72 6f 75 70 29 3a 21 66 72 65 73 68 57 61 79 70 6f 69 6e 74 26 26 74 72 69 67 67 65 72 65 64 46 6f 72 77 61 72 64 3f 28 77 61 79 70 6f 69 6e 74 2e 71 75 65 75 65 54 72 69 67 67 65 72 28 61 78 69 73 2e 66 6f 72 77 61 72 64 29 2c 74 72 69 67 67 65 72 65 64 47 72 6f 75 70 73 5b 77 61 79 70 6f 69 6e 74 2e 67 72 6f 75 70 2e 69 64 5d 3d 77 61 79 70 6f 69 6e 74 2e 67 72 6f 75 70 29 3a 66 72 65 73 68 57 61 79 70 6f 69 6e 74 26 26 61 78 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 3e 3d 77 61 79 Data Ascii: edBackward?(waypoint.queueTrigger(axis.backward),triggeredGroups[waypoint.group.id]=waypoint.group):!freshWaypoint&&triggeredForward?(waypoint.queueTrigger(axis.forward),triggeredGroups[waypoint.group.id]=waypoint.group):freshWaypoint&&axis.oldScroll>=way
2024-04-18 19:30:20 UTC	174	IN	Data Raw: 61 79 70 6f 69 6e 74 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 26 26 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2e 66 6e 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 3d 63 72 65 61 74 65 45 78 74 65 6e 73 69 6f 6e 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 29 2c 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 26 26 28 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 2e 66 6e 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 3d 63 72 65 61 74 65 45 78 74 65 6e 73 69 6f 6e 28 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 29 7d 28 29 3b Data Ascii: aypoint;window.jQuery&&(window.jQuery.fn.elementorWaypoint=createExtension(window.jQuery)),window.Zepto&&(window.Zepto.fn.elementorWaypoint=createExtension(window.Zepto))}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49833	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:20 UTC	601	OUT	GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:20 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21438 Connection: close Last-Modified: Thu, 02 Feb 2023 16:36:32 GMT ETag: "63dbe690-53be" Accept-Ranges: bytes
2024-04-18 19:30:20 UTC	1398	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-04-18 19:30:20 UTC	4096	IN	Data Raw: 6e 20 4c 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 78 2e 63 73 73 28 74 2c 65 29 2c 31 30 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 78 2e 75 69 3d 78 2e 75 69 7c 7c 7b 7d 2c 78 2e 75 69 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 31 33 2e 32 22 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 3a 64 61 74 61 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 Data Ascii: n L(t,e){return parseInt(x.css(t,e),10)\|\|0}function N(t){return null!=t&&t===t.window}x.ui=x.ui\|\|{},x.ui.version="1.13.2",/! jQuery UI :data 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 68 69 73 2e 65 71 28 30 29 2e 70 61 72 65 6e 74 73 28 22 6c 61 62 65 6c 22 29 2c 28 74 3d 74 68 69 73 2e 61 74 74 72 28 22 69 64 22 29 29 26 26 28 69 3d 28 69 3d 74 68 69 73 2e 65 71 28 30 29 2e 70 61 72 65 6e 74 73 28 29 2e 6c 61 73 74 28 29 29 2e 61 64 64 28 28 69 2e 6c 65 6e 67 74 68 3f 69 3a 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 29 29 2c 74 3d 22 6c 61 62 65 6c 5b 66 6f 72 3d 27 22 2b 78 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 74 29 2b 22 27 5d 22 2c 65 3d 65 2e 61 64 64 28 69 2e 66 69 6e 64 28 74 29 2e 61 64 64 42 61 63 6b 28 74 29 29 29 2c 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 65 29 29 3a 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 5b 5d 29 7d 2c 78 2e 75 69 2e 70 6c 75 67 69 6e 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: his.eq(0).parents("label"),(t=this.attr("id"))&&(i=(i=this.eq(0).parents().last()).add((i.length?i:this).siblings()),t="label[for='"+x.escapeSelector(t)+"']",e=e.add(i.find(t).addBack(t))),this.pushStack(e)):this.pushStack([])},x.ui.plugin={add:function(t
2024-04-18 19:30:21 UTC	2992	IN	Data Raw: 29 29 3f 73 2e 69 6d 70 6f 72 74 61 6e 74 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 73 2e 69 6d 70 6f 72 74 61 6e 74 3d 22 76 65 72 74 69 63 61 6c 22 2c 66 2e 75 73 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 73 29 7d 29 2c 72 2e 6f 66 66 73 65 74 28 78 2e 65 78 74 65 6e 64 28 68 2c 7b 75 73 69 6e 67 3a 74 7d 29 29 7d 29 29 3a 68 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 78 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 3d 7b 66 69 74 3a 7b 6c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 65 2e 77 69 74 68 69 6e 2c 6f 3d 6e 2e 69 73 57 69 6e 64 6f 77 3f 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 6e 3d 6e 2e 77 69 64 74 68 2c 73 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f Data Ascii: ))?s.important="horizontal":s.important="vertical",f.using.call(this,t,s)}),r.offset(x.extend(h,{using:t}))})):h.apply(this,arguments)},x.ui.position={fit:{left:function(t,e){var i,n=e.within,o=n.isWindow?n.scrollLeft:n.offset.left,n=n.width,s=t.left-e.co
2024-04-18 19:30:21 UTC	1398	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 78 2e 61 74 74 72 28 74 2c 22 74 61 62 69 6e 64 65 78 22 29 2c 69 3d 6e 75 6c 6c 21 3d 65 3b 72 65 74 75 72 6e 28 21 69 7c 7c 30 3c 3d 65 29 26 26 78 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 28 74 2c 69 29 7d 7d 29 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 55 6e 69 71 75 65 20 49 44 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e Data Ascii: nction(t){var e=x.attr(t,"tabindex"),i=null!=e;return(!i\|\|0<=e)&&x.ui.focusable(t,i)}}),/! jQuery UI Unique ID 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 69 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 72 5b 65 5d 3d 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 3f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 74 68 69 73 2e 5f 73 75 70 65 72 2c 69 3d 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 65 72 3d 6f 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 73 2c 74 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 Data Ascii: (e,n){function o(){return i.prototype[e].apply(this,arguments)}function s(t){return i.prototype[e].apply(this,t)}r[e]="function"!=typeof n?n:function(){var t,e=this._super,i=this._superApply;return this._super=o,this._superApply=s,t=n.apply(this,arguments
2024-04-18 19:30:21 UTC	98	IN	Data Raw: 5f 73 65 74 4f 70 74 69 6f 6e 73 28 7b 64 69 73 61 62 6c 65 64 3a 21 31 7d 29 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 73 28 7b 64 69 73 61 62 6c 65 64 3a 21 30 7d 29 7d 2c 5f 63 6c 61 73 73 65 73 3a 66 75 Data Ascii: _setOptions({disabled:!1})},disable:function(){return this._setOptions({disabled:!0})},_classes:fu
2024-04-18 19:30:21 UTC	2796	IN	Data Raw: 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 73 3d 5b 5d 2c 72 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 3d 72 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 74 5b 6e 5d 5d 7c 7c 78 28 29 2c 69 3d 6f 2e 61 64 64 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 6f 2e 65 6c 65 6d 65 6e 74 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 78 2e 6d 61 70 28 72 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 28 65 29 7d 29 7c 7c 69 2e 70 Data Ascii: nction(o){var s=[],r=this;function t(t,e){for(var i,n=0;n<t.length;n++)i=r.classesElementLookup[t[n]]\|\|x(),i=o.add?(function(){var i=[];o.element.each(function(t,e){x.map(r.classesElementLookup,function(t){return t}).some(function(t){return t.is(e)})\|\|i.p
2024-04-18 19:30:21 UTC	468	IN	Data Raw: 29 7c 7c 65 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7d 7d 2c 78 2e 65 61 63 68 28 7b 73 68 6f 77 3a 22 66 61 64 65 49 6e 22 2c 68 69 64 65 3a 22 66 61 64 65 4f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 73 2c 72 29 7b 78 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5b 22 5f 22 2b 73 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 6f 3d 28 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 65 66 66 65 63 74 3a 74 7d 3a 74 29 3f 21 30 21 3d 3d 74 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 65 66 66 65 63 74 7c 7c 72 3a 73 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 74 7c 7c 7b 7d 29 3f 74 3d 7b 64 75 72 61 74 69 6f 6e 3a 74 7d 3a 21 30 3d 3d 3d Data Ascii: )\|\|e.isDefaultPrevented())}},x.each({show:"fadeIn",hide:"fadeOut"},function(s,r){x.Widget.prototype["_"+s]=function(e,t,i){var n,o=(t="string"==typeof t?{effect:t}:t)?!0!==t&&"number"!=typeof t&&t.effect\|\|r:s;"number"==typeof(t=t\|\|{})?t={duration:t}:!0===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49834	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:21 UTC	619	OUT	GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:21 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 39972 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:31 GMT ETag: "661e9343-9c24" Accept-Ranges: bytes
2024-04-18 19:30:21 UTC	1398	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 31 39 5d 2c 7b 39 32 32 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 33 32 30 33 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 6f 28 6e 28 38 31 33 35 29 29 3b 63 6c 61 73 73 20 5f 64 65 66 61 75 6c 74 20 65 78 Data Ascii: /! elementor - v3.21.0 - 15-04-2024 /"use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[819],{9220:(e,t,n)=>{var o=n(3203);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=o(n(8135));class _default ex
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 73 73 2e 64 65 66 61 75 6c 74 22 3a 28 29 3d 3e 6e 2e 65 28 31 39 32 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 31 33 35 31 29 29 2c 22 74 61 62 73 2e 64 65 66 61 75 6c 74 22 3a 28 29 3d 3e 6e 2e 65 28 35 32 30 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 39 34 35 39 29 29 2c 22 74 6f 67 67 6c 65 2e 64 65 66 61 75 6c 74 22 3a 28 29 3d 3e 6e 2e 65 28 31 38 31 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 32 29 29 2c 22 76 69 64 65 6f 2e 64 65 66 61 75 6c 74 22 3a 28 29 3d 3e 6e 2e 65 28 37 39 31 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 35 33 36 33 29 29 2c 22 69 6d 61 67 65 2d 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 3a 28 29 3d 3e 6e 2e 65 28 32 36 38 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 35 39 31 34 29 29 2c 22 74 65 Data Ascii: ss.default":()=>n.e(192).then(n.bind(n,1351)),"tabs.default":()=>n.e(520).then(n.bind(n,9459)),"toggle.default":()=>n.e(181).then(n.bind(n,2)),"video.default":()=>n.e(791).then(n.bind(n,5363)),"image-carousel.default":()=>n.e(268).then(n.bind(n,5914)),"te
2024-04-18 19:30:21 UTC	1496	IN	Data Raw: 7d 67 65 74 50 61 67 65 53 65 74 74 69 6e 67 73 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 3f 65 6c 65 6d 65 6e 74 6f 72 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 2e 6d 6f 64 65 6c 2e 61 74 74 72 69 62 75 74 65 73 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 74 65 6d 73 28 74 2c 65 29 7d 67 65 74 47 65 6e 65 72 61 6c 53 65 74 74 69 6e 67 73 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 26 26 70 61 72 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 44 65 76 54 6f 6f 6c 73 2e 64 65 70 72 65 63 61 74 69 6f 6e 2e 64 65 70 72 65 63 61 74 65 64 28 22 67 65 74 47 65 6e 65 72 61 6c 53 65 74 74 69 6e 67 73 28 Data Ascii: }getPageSettings(e){const t=this.isEditMode()?elementor.settings.page.model.attributes:this.config.settings.page;return this.getItems(t,e)}getGeneralSettings(e){return this.isEditMode()&&parent.elementorDevTools.deprecation.deprecated("getGeneralSettings(
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 72 6f 6c 73 3a 6e 65 77 20 76 2e 64 65 66 61 75 6c 74 7d 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 73 3d 7b 53 74 72 65 74 63 68 45 6c 65 6d 65 6e 74 3a 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 74 6f 6f 6c 73 2e 53 74 72 65 74 63 68 45 6c 65 6d 65 6e 74 2c 4d 61 73 6f 6e 72 79 3a 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 75 74 69 6c 73 2e 4d 61 73 6f 6e 72 79 7d 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 2e 69 6e 69 74 28 29 2c 74 68 69 73 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 3f 65 6c 65 6d 65 6e 74 6f 72 2e 6f 6e 63 65 28 22 64 6f 63 75 6d 65 6e 74 3a 6c 6f 61 64 65 64 22 2c 28 28 29 3d 3e 74 68 69 73 2e 6f 6e 44 6f 63 75 6d 65 6e 74 4c 6f 61 64 65 64 28 29 29 29 3a 74 68 69 73 2e 6f 6e 44 6f Data Ascii: rols:new v.default},this.modules={StretchElement:elementorModules.frontend.tools.StretchElement,Masonry:elementorModules.utils.Masonry},this.elementsHandler.init(),this.isEditMode()?elementor.once("document:loaded",(()=>this.onDocumentLoaded())):this.onDo
2024-04-18 19:30:21 UTC	1496	IN	Data Raw: 2e 73 77 69 70 65 72 57 72 61 70 70 65 72 7d 29 2c 73 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 73 6c 69 64 65 73 68 6f 77 5f 6b 65 6e 5f 62 75 72 6e 73 2c 72 3d 22 79 65 73 22 3d 3d 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 73 6c 69 64 65 73 68 6f 77 5f 6c 61 7a 79 6c 6f 61 64 3b 6c 65 74 20 61 3d 65 2e 73 6c 69 64 65 42 61 63 6b 67 72 6f 75 6e 64 3b 69 66 28 73 29 7b 61 2b 3d 22 20 22 2b 65 2e 6b 65 6e 42 75 72 6e 73 3b 63 6f 6e 73 74 20 6e 3d 22 69 6e 22 3d 3d 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 73 6c 69 64 65 73 68 6f 77 5f 6b 65 6e 5f 62 75 72 6e 73 5f 7a 6f 6f 6d 5f 64 69 72 65 63 74 69 6f 6e 3f 22 6b 65 6e 42 75 72 6e 73 49 6e 22 3a 22 6b 65 6e 42 75 72 6e 73 4f 75 74 22 3b 61 2b 3d 22 20 22 2b 65 5b 6e 5d 7d 72 26 26 28 61 2b 3d 22 20 73 77 Data Ascii: .swiperWrapper}),s=t.background_slideshow_ken_burns,r="yes"===t.background_slideshow_lazyload;let a=e.slideBackground;if(s){a+=" "+e.kenBurns;const n="in"===t.background_slideshow_ken_burns_zoom_direction?"kenBurnsIn":"kenBurnsOut";a+=" "+e[n]}r&&(a+=" sw
2024-04-18 19:30:21 UTC	1398	IN	Data Raw: 6e 45 6c 65 6d 65 6e 74 43 68 61 6e 67 65 28 65 29 7b 22 62 61 63 6b 67 72 6f 75 6e 64 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3d 3d 3d 65 26 26 74 68 69 73 2e 72 75 6e 28 29 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 42 61 63 6b 67 72 6f 75 6e 64 53 6c 69 64 65 73 68 6f 77 7d 2c 39 35 30 31 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 42 61 63 6b 67 72 6f 75 6e 64 56 69 64 65 6f 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 6c 65 72 73 2e 42 61 73 65 7b 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e Data Ascii: nElementChange(e){"background_background"===e&&this.run()}}t.default=BackgroundSlideshow},9501:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class BackgroundVideo extends elementorModules.frontend.handlers.Base{getDefaultSettin
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 64 65 6f 4c 6f 6f 70 28 65 29 7b 69 66 28 21 74 68 69 73 2e 70 6c 61 79 65 72 2e 67 65 74 49 66 72 61 6d 65 28 29 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 29 2c 6e 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 76 69 64 65 6f 5f 73 74 61 72 74 7c 7c 30 2c 6f 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 76 69 64 65 6f 5f 65 6e 64 3b 69 66 28 21 74 2e 62 61 63 6b 67 72 6f 75 6e 64 5f 70 6c 61 79 5f 6f 6e 63 65 7c 7c 65 29 7b 69 66 28 74 68 69 73 2e 70 6c 61 79 65 72 2e 73 65 65 6b 54 6f 28 6e 29 2c 6f 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 74 68 69 73 2e 73 74 61 72 74 56 69 64 65 6f 4c 6f 6f 70 28 21 31 29 7d 29 2c 31 65 33 2a Data Ascii: deoLoop(e){if(!this.player.getIframe().contentWindow)return;const t=this.getElementSettings(),n=t.background_video_start\|\|0,o=t.background_video_end;if(!t.background_play_once\|\|e){if(this.player.seekTo(n),o){setTimeout((()=>{this.startVideoLoop(!1)}),1e3*
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 74 5d 3b 74 2e 64 65 66 61 75 6c 74 3d 69 7d 2c 34 39 38 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 5b 28 29 3d 3e 6e 2e 65 28 34 31 33 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 32 39 32 39 29 29 2c 28 29 3d 3e 6e 2e 65 28 34 31 33 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 33 34 33 29 29 2c 28 29 3d 3e 6e 2e 65 28 34 31 33 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 38 30 37 33 29 29 5d 3b 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 36 33 39 37 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 Data Ascii: t];t.default=i},4985:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=[()=>n.e(413).then(n.bind(n,2929)),()=>n.e(413).then(n.bind(n,343)),()=>n.e(413).then(n.bind(n,8073))];t.default=o},6397:(e,t)=>{Object.defineProperty(t
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 29 2c 74 68 69 73 2e 73 65 74 4e 65 67 61 74 69 76 65 28 6e 5b 31 5d 29 29 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 53 68 61 70 65 73 7d 2c 32 38 30 34 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 53 74 72 65 74 63 68 65 64 53 65 63 74 69 6f 6e 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 6c 65 72 73 2e 53 74 72 65 74 63 68 65 64 45 6c 65 6d 65 6e 74 7b 67 65 74 53 74 72 65 74 63 68 65 64 43 6c 61 73 73 28 29 7b 72 65 74 75 72 6e 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 73 74 72 Data Ascii: ),this.setNegative(n[1]))}}t.default=Shapes},2804:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class StretchedSection extends elementorModules.frontend.handlers.StretchedElement{getStretchedClass(){return"elementor-section-str
2024-04-18 19:30:21 UTC	294	IN	Data Raw: 63 72 69 70 74 22 2c 22 73 68 61 72 65 2d 6c 69 6e 6b 22 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 65 2c 74 2c 6f 5d 29 2e 74 68 65 6e 28 28 28 29 3d 3e 65 29 29 7d 67 65 74 44 65 66 61 75 6c 74 53 65 74 74 69 6e 67 73 28 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 6c 69 6e 6b 73 3a 22 61 2c 20 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6c 69 67 68 74 62 6f 78 5d 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 72 65 74 75 72 6e 7b 24 6c 69 6e 6b 73 3a 6a 51 75 65 72 79 28 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 22 73 65 6c 65 63 74 6f 72 73 2e 6c 69 6e 6b 73 22 29 29 7d 7d 69 73 4c 69 67 68 74 62 6f 78 4c 69 6e 6b 28 65 29 7b 69 66 28 22 61 22 3d 3d 3d 65 2e 74 61 67 4e 61 Data Ascii: cript","share-link");return Promise.all([e,t,o]).then((()=>e))}getDefaultSettings(){return{selectors:{links:"a, [data-elementor-lightbox]"}}}getDefaultElements(){return{$links:jQuery(this.getSettings("selectors.links"))}}isLightboxLink(e){if("a"===e.tagNa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49835	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:21 UTC	632	OUT	GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:21 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 38282 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:39 GMT ETag: "661e934b-958a" Accept-Ranges: bytes
2024-04-18 19:30:21 UTC	1398	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 37 5d 2c 7b 37 39 39 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 73 3d 6e 28 33 32 30 33 29 2c 6f 3d 73 28 6e 28 34 30 34 32 29 29 2c 72 3d 73 28 6e 28 38 35 32 38 29 29 2c 69 3d 73 28 6e 28 37 38 35 37 29 29 2c 6c 3d 73 28 6e 28 33 31 38 34 29 29 2c 61 3d 73 28 6e 28 37 30 34 33 29 29 2c 64 3d 73 28 6e 28 34 32 32 33 29 29 2c 75 3d 73 28 6e 28 34 32 33 31 Data Ascii: /! elementor-pro - v3.21.0 - 15-04-2024 /"use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[437],{7996:(e,t,n)=>{var s=n(3203),o=s(n(4042)),r=s(n(8528)),i=s(n(7857)),l=s(n(3184)),a=s(n(7043)),d=s(n(4223)),u=s(n(4231
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 65 2d 6c 6f 61 64 69 6e 67 2d 6f 76 65 72 6c 61 79 22 29 7d 7d 7d 2c 38 31 31 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 73 3d 6e 28 33 32 30 33 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 63 6c 6f 73 65 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 6f 3d 6e 65 77 28 73 28 6e 28 34 35 31 39 29 29 2e 64 65 66 61 75 6c 74 29 28 22 65 69 63 6f 6e 22 29 3b 74 2e 63 6c 6f 73 65 3d 7b 67 65 74 20 65 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 6f 2e 63 72 65 61 74 65 53 76 67 45 6c 65 6d 65 6e 74 28 22 63 6c 6f 73 65 22 2c 7b 70 61 74 68 3a 22 4d 37 34 32 20 31 36 37 4c 35 30 30 20 34 Data Ascii: t.classList.remove("e-loading-overlay")}}},8115:(e,t,n)=>{var s=n(3203);Object.defineProperty(t,"__esModule",{value:!0}),t.close=void 0;const o=new(s(n(4519)).default)("eicon");t.close={get element(){return o.createSvgElement("close",{path:"M742 167L500 4
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 74 7d 2c 33 31 38 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 5f 64 65 66 61 75 6c 74 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 4d 6f 64 75 6c 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 2c 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 48 61 6e 64 6c 65 72 2e 61 74 74 61 63 68 48 61 6e 64 6c 65 72 28 22 68 6f 74 73 70 6f 74 22 2c 28 28 29 3d 3e 6e 2e 65 28 38 38 38 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 31 30 31 36 29 29 29 29 7d 7d 74 2e 64 65 66 61 Data Ascii: t},3184:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class _default extends elementorModules.Module{constructor(){super(),elementorFrontend.elementsHandler.attachHandler("hotspot",(()=>n.e(888).then(n.bind(n,1016))))}}t.defa
2024-04-18 19:30:21 UTC	2992	IN	Data Raw: 64 46 69 6c 74 65 72 73 28 65 29 2c 73 3d 74 68 69 73 2e 67 65 74 46 69 6c 74 65 72 48 65 6c 70 65 72 41 74 74 72 69 62 75 74 65 73 28 74 29 2c 6f 3d 7b 70 6f 73 74 5f 69 64 3a 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f 6e 66 69 67 2e 70 6f 73 74 2e 69 64 7c 7c 74 68 69 73 2e 67 65 74 43 6c 6f 73 65 73 74 44 61 74 61 45 6c 65 6d 65 6e 74 6f 72 49 64 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 24 7b 65 7d 60 29 29 2c 77 69 64 67 65 74 5f 66 69 6c 74 65 72 73 3a 6e 2c 77 69 64 67 65 74 5f 69 64 3a 65 2c 70 61 67 69 6e 61 74 69 6f 6e 5f 62 61 73 65 5f 75 72 6c 3a 73 2e 62 61 73 65 55 72 6c 7d 3b 69 66 28 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 Data Ascii: dFilters(e),s=this.getFilterHelperAttributes(t),o={post_id:elementorFrontend.config.post.id\|\|this.getClosestDataElementorId(document.querySelector(`.elementor-element-${e}`)),widget_filters:n,widget_id:e,pagination_base_url:s.baseUrl};if(elementorFrontend
2024-04-18 19:30:21 UTC	2796	IN	Data Raw: 64 65 6c 65 74 65 20 74 68 69 73 2e 67 65 74 57 69 64 67 65 74 28 65 29 2e 66 69 6c 74 65 72 73 5b 74 5d 7d 67 65 74 46 69 6c 74 65 72 54 65 72 6d 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 46 69 6c 74 65 72 28 65 2c 74 29 2e 66 69 6c 74 65 72 44 61 74 61 2e 74 65 72 6d 73 3f 3f 5b 5d 7d 73 65 74 46 69 6c 74 65 72 54 65 72 6d 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 46 69 6c 74 65 72 28 65 2c 74 29 2e 66 69 6c 74 65 72 44 61 74 61 2e 74 65 72 6d 73 3d 6e 7d 67 65 74 43 6f 6e 73 6f 6c 69 64 61 74 65 64 46 69 6c 74 65 72 73 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 57 69 64 67 65 74 28 65 29 2e 63 6f 6e 73 6f 6c 69 64 61 74 65 64 46 69 6c 74 65 72 73 7d 73 65 74 43 6f 6e 73 6f 6c 69 64 61 74 65 64 46 69 6c 74 Data Ascii: delete this.getWidget(e).filters[t]}getFilterTerms(e,t){return this.getFilter(e,t).filterData.terms??[]}setFilterTerms(e,t,n){this.getFilter(e,t).filterData.terms=n}getConsolidatedFilters(e){return this.getWidget(e).consolidatedFilters}setConsolidatedFilt
2024-04-18 19:30:21 UTC	2796	IN	Data Raw: 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 73 28 6e 28 32 36 33 35 29 29 2c 72 3d 73 28 6e 28 33 34 36 37 29 29 2c 69 3d 6e 28 38 31 31 35 29 3b 63 6c 61 73 73 20 5f 64 65 66 61 75 6c 74 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 44 6f 63 75 6d 65 6e 74 7b 62 69 6e 64 45 76 65 6e 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 44 6f 63 75 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 22 6f 70 65 6e 5f 73 65 6c 65 63 74 6f 72 22 29 3b 65 26 26 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 65 6c 65 6d 65 6e 74 73 2e 24 62 6f 64 79 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 65 2c 74 68 69 73 2e Data Ascii: _esModule",{value:!0}),t.default=void 0;var o=s(n(2635)),r=s(n(3467)),i=n(8115);class _default extends elementorModules.frontend.Document{bindEvents(){const e=this.getDocumentSettings("open_selector");e&&elementorFrontend.elements.$body.on("click",e,this.
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 74 2c 5b 6e 2c 74 68 69 73 5d 29 2c 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 64 65 74 61 69 6c 3a 7b 69 64 3a 6e 2c 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 7d 7d 29 29 7d 3b 6c 65 74 20 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 22 3b 74 2e 63 6c 61 73 73 65 73 26 26 28 73 2b 3d 22 20 22 2b 74 2e 63 6c 61 73 73 65 73 29 3b 63 6f 6e 73 74 20 6f 3d 7b 69 64 3a 22 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 2d 22 2b 6e 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 3a 21 30 2c 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 3a 74 2e 70 72 65 76 65 6e 74 5f 73 63 72 6f 6c 6c 2c 6f Data Ascii: ment.trigger(t,[n,this]),window.dispatchEvent(new CustomEvent(t,{detail:{id:n,instance:this}}))};let s="elementor-popup-modal";t.classes&&(s+=" "+t.classes);const o={id:"elementor-popup-modal-"+n,className:s,closeButton:!0,preventScroll:t.prevent_scroll,o
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 75 6c 65 73 2e 4d 6f 64 75 6c 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 74 69 6d 69 6e 67 43 6c 61 73 73 65 73 3d 7b 70 61 67 65 5f 76 69 65 77 73 3a 6f 2e 64 65 66 61 75 6c 74 2c 73 65 73 73 69 6f 6e 73 3a 72 2e 64 65 66 61 75 6c 74 2c 75 72 6c 3a 69 2e 64 65 66 61 75 6c 74 2c 73 6f 75 72 63 65 73 3a 6c 2e 64 65 66 61 75 6c 74 2c 6c 6f 67 67 65 64 5f 69 6e 3a 61 2e 64 65 66 61 75 6c 74 2c 64 65 76 69 63 65 73 3a 64 2e 64 65 66 61 75 6c 74 2c 74 69 6d 65 73 3a 75 2e 64 65 66 61 75 6c 74 2c 62 72 6f 77 73 65 72 73 3a 63 2e 64 65 66 61 75 6c 74 2c 73 63 68 65 64 75 6c 65 3a 6d 2e 64 65 66 61 75 6c 74 7d 7d 63 68 65 63 6b 28 29 7b 63 6f 6e 73 74 20 65 3d Data Ascii: ules.Module{constructor(e,t){super(e),this.document=t,this.timingClasses={page_views:o.default,sessions:r.default,url:i.default,sources:l.default,logged_in:a.default,devices:d.default,times:u.default,browsers:c.default,schedule:m.default}}check(){const e=
2024-04-18 19:30:21 UTC	196	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 22 69 6e 74 65 72 6e 61 6c 22 29 3a 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 65 78 74 65 72 6e 61 6c 22 29 7c 7c 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 73 65 61 72 63 68 22 29 26 26 2f 5e 28 67 6f 6f 67 6c 65 7c 79 61 68 6f 6f 7c 62 69 6e 67 7c 79 61 6e 64 65 78 7c 62 61 69 64 75 29 5c 2e 2f 2e 74 65 73 74 28 74 29 7d 7d 74 2e 64 65 66 61 75 6c 74 3d 5f 64 65 66 61 75 6c 74 7d 2c 36 32 33 37 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c Data Ascii: .indexOf("internal"):-1!==e.indexOf("external")\|\|-1!==e.indexOf("search")&&/^(google\|yahoo\|bing\|yandex\|baidu)\./.test(t)}}t.default=_default},6237:(e,t)=>{Object.defineProperty(t,"__esModule",{val
2024-04-18 19:30:21 UTC	4096	IN	Data Raw: 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 20 54 69 6d 65 73 55 74 69 6c 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 75 6e 69 71 75 65 49 64 3d 65 2e 75 6e 69 71 75 65 49 64 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2e 73 65 74 74 69 6e 67 73 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 65 2e 73 74 6f 72 61 67 65 7d 67 65 74 54 69 6d 65 46 72 61 6d 65 73 49 6e 53 65 63 6f 75 6e 64 73 28 65 29 7b 72 65 74 75 72 6e 7b 64 61 79 3a 38 36 34 30 30 2c 77 65 65 6b 3a 36 30 34 38 30 30 2c 6d 6f 6e 74 68 3a 32 36 32 38 32 38 38 7d 5b 65 5d 7d 73 65 74 45 78 70 69 72 61 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 67 65 74 28 Data Ascii: ue:!0}),t.default=void 0;t.default=class TimesUtils{constructor(e){this.uniqueId=e.uniqueId,this.settings=e.settings,this.storage=e.storage}getTimeFramesInSecounds(e){return{day:86400,week:604800,month:2628288}[e]}setExpiration(e,t,n){if(this.storage.get(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49839	31.13.65.7	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:22 UTC	539	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:22 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-18 19:30:22 UTC	1511	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-18 19:30:22 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-18 19:30:22 UTC	14817	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-18 19:30:22 UTC	16384	IN	Data Raw: 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 Data Ascii: (a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&
2024-04-18 19:30:22 UTC	16384	IN	Data Raw: 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 Data Ascii: Utils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("Signa
2024-04-18 19:30:22 UTC	16384	IN	Data Raw: 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 Data Ascii: a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c
2024-04-18 19:30:22 UTC	1566	IN	Data Raw: 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 Data Ascii: ull(b.string()),eventNames:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn"
2024-04-18 19:30:22 UTC	14818	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-18 19:30:22 UTC	16384	IN	Data Raw: 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 Data Ascii: =h.trigger(b);if(l(f,function(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegister
2024-04-18 19:30:22 UTC	16384	IN	Data Raw: 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 26 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c Data Ascii: 0;c<t;c++)q.call(a,s[c])&&b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;whil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49840	172.67.75.61	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:22 UTC	547	OUT	GET /neurolead/neurolead.min.js HTTP/1.1 Host: cdn.leadster.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:22 UTC	1148	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:22 GMT Content-Type: text/javascript Content-Length: 491967 Connection: close x-guploader-uploadid: ABPtcPrxBYz81zFsIrEzLbUkEoQd8loNS7zHMPbZ_2sUvzNKL6xH45xjDo1pGnIstRWnXyqrxQ expires: Thu, 18 Apr 2024 19:25:14 GMT Cache-Control: public, max-age=43200 last-modified: Fri, 12 Apr 2024 13:02:18 GMT etag: "480ac1ae63ba903513c3bccd4e12203e" x-goog-generation: 1712926938246932 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 491967 x-goog-hash: crc32c=ynKvjA== x-goog-hash: md5=SArBrmO6kDUTw7zNThIgPg== x-goog-storage-class: MULTI_REGIONAL access-control-allow-origin: * access-control-expose-headers: * CF-Cache-Status: HIT Age: 2397 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJ2PcOOSkvbCyJH4U1XCahfvhbj3nL46sW6viMQUCbYWxb4w%2FJDfjxLHqkLIT2Be6NjovH%2Bf3ytBrAOIH1c6UIVYGP%2BtC7rzECzFnpc31GVAZJJmcwlkt8UoV7AORyMxaavGKvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876711a93ca4ad74-ATL
2024-04-18 19:30:22 UTC	221	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6e 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 Data Ascii: ,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 61 5d 3a 73 5b 61 5d 3d 65 5b 61 5d 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 73 2e 63 68 69 6c 64 72 65 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 72 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3a 6e 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 74 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 61 20 69 6e 20 74 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 76 6f 69 64 20 30 3d 3d 3d 73 5b 61 5d 26 26 28 73 5b 61 5d 3d 74 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 28 74 2c 73 2c 69 2c 6f 2c 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 2c 65 2c 6e 2c 72 2c 61 29 7b 76 61 72 20 73 3d 7b 74 79 70 65 3a 74 Data Ascii: a]:s[a]=e[a];if(arguments.length>2&&(s.children=arguments.length>3?r.call(arguments,2):n),"function"==typeof t&&null!=t.defaultProps)for(a in t.defaultProps)void 0===s[a]&&(s[a]=t.defaultProps[a]);return b(t,s,i,o,null)}function b(t,e,n,r,a){var s={type:t
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 5f 5f 76 2e 5f 5f 62 2d 65 2e 5f 5f 76 2e 5f 5f 62 7d 29 29 29 3b 6b 2e 5f 5f 72 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 6c 2c 63 29 7b 76 61 72 20 70 2c 66 2c 68 2c 67 2c 6d 2c 76 2c 77 2c 78 3d 72 26 26 72 2e 5f 5f 6b 7c 7c 64 2c 6b 3d 78 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6e 2e 5f 5f 6b 3d 5b 5d 2c 70 3d 30 3b 70 3c 65 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 67 3d 6e 2e 5f 5f 6b 5b 70 5d 3d 6e 75 6c 6c 3d 3d 28 67 3d 65 5b 70 5d 29 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 22 62 69 67 69 6e 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: __v.__b-e.__v.__b})));k.__r=0}function S(t,e,n,r,i,o,a,s,l,c){var p,f,h,g,m,v,w,x=r&&r.__k\|\|d,k=x.length;for(n.__k=[],p=0;p<e.length;p++)if(null!=(g=n.__k[p]=null==(g=e[p])\|\|"boolean"==typeof g?null:"string"==typeof g\|\|"number"==typeof g\|\|"bigint"==typeof
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 64 3d 76 6f 69 64 20 30 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 69 21 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 69 2e 70 61 72 65 6e 74 4e 6f 64 65 29 74 3a 69 66 28 6e 75 6c 6c 3d 3d 6f 7c 7c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 3d 74 29 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2c 61 3d 6e 75 6c 6c 3b 65 6c 73 65 7b 66 6f 72 28 73 3d 6f 2c 6c 3d 30 3b 28 73 3d 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 26 26 6c 3c 72 2e 6c 65 6e 67 74 68 3b 6c 2b 3d 31 29 69 66 28 73 3d 3d 69 29 62 72 65 61 6b 20 74 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 69 2c 6f 29 2c 61 3d 6f 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 69 2e 6e 65 78 74 53 69 62 6c 69 6e 67 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 Data Ascii: d=void 0;else if(null==n\|\|i!=o\|\|null==i.parentNode)t:if(null==o\|\|o.parentNode!==t)t.appendChild(i),a=null;else{for(s=o,l=0;(s=s.nextSibling)&&l<r.length;l+=1)if(s==i)break t;t.insertBefore(i,o),a=o}return void 0!==a?a:i.nextSibling}function C(t){var e,n,r
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 6f 6e 20 49 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 5b 74 2e 74 79 70 65 2b 21 30 5d 28 69 2e 65 76 65 6e 74 3f 69 2e 65 76 65 6e 74 28 74 29 3a 74 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 61 2c 73 2c 6c 2c 63 29 7b 76 61 72 20 75 2c 64 2c 70 2c 68 2c 67 2c 62 2c 6d 2c 5f 2c 77 2c 78 2c 6b 2c 41 2c 4f 2c 6a 2c 43 2c 54 3d 65 2e 74 79 70 65 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 6e 2e 5f 5f 68 26 26 28 63 3d 6e 2e 5f 5f 68 2c 6c 3d 65 2e 5f 5f 65 3d 6e 2e 5f 5f 65 2c 65 2e 5f 5f 68 3d 6e 75 6c 6c 2c 61 3d 5b 6c 5d 29 2c 28 75 3d 69 2e 5f 5f 62 29 26 26 75 28 65 29 3b 74 72 79 7b 74 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: on I(t){return this.l[t.type+!0](i.event?i.event(t):t)}function R(t,e,n,r,o,a,s,l,c){var u,d,p,h,g,b,m,_,w,x,k,A,O,j,C,T=e.type;if(void 0!==e.constructor)return null;null!=n.__h&&(c=n.__h,l=e.__e=n.__e,e.__h=null,a=[l]),(u=i.__b)&&u(e);try{t:if("function"
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 5f 5f 73 2c 78 29 2c 6e 75 6c 6c 21 3d 64 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 26 26 64 2e 5f 5f 68 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 28 68 2c 67 2c 62 29 7d 29 29 7d 69 66 28 64 2e 63 6f 6e 74 65 78 74 3d 78 2c 64 2e 70 72 6f 70 73 3d 5f 2c 64 2e 5f 5f 50 3d 74 2c 41 3d 69 2e 5f 5f 72 2c 4f 3d 30 2c 22 70 72 6f 74 6f 74 79 70 65 22 69 6e 20 54 26 26 54 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 29 7b 66 6f 72 28 64 2e 73 74 61 74 65 3d 64 2e 5f 5f 73 2c 64 2e 5f 5f 64 3d 21 31 2c 41 26 26 41 28 65 29 2c 75 3d 64 2e 72 65 6e 64 65 72 28 64 2e 70 72 6f 70 73 2c 64 2e 73 74 61 74 65 2c 64 2e 63 6f 6e 74 65 78 74 29 2c 6a 3d 30 3b 6a 3c 64 2e 5f 73 62 Data Ascii: __s,x),null!=d.componentDidUpdate&&d.__h.push((function(){d.componentDidUpdate(h,g,b)}))}if(d.context=x,d.props=_,d.__P=t,A=i.__r,O=0,"prototype"in T&&T.prototype.render){for(d.state=d.__s,d.__d=!1,A&&A(e),u=d.render(d.props,d.state,d.context),j=0;j<d._sb
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 76 67 22 2c 62 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2c 67 2e 69 73 26 26 67 29 2c 61 3d 6e 75 6c 6c 2c 6c 3d 21 31 7d 69 66 28 6e 75 6c 6c 3d 3d 3d 62 29 66 3d 3d 3d 67 7c 7c 6c 26 26 74 2e 64 61 74 61 3d 3d 3d 67 7c 7c 28 74 2e 64 61 74 61 3d 67 29 3b 65 6c 73 65 7b 69 66 28 61 3d 61 26 26 72 2e 63 61 6c 6c 28 74 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 64 3d 28 66 3d 6e 2e 70 72 6f 70 73 7c 7c 75 29 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 70 3d 67 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 21 6c 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 66 6f 72 28 66 3d 7b 7d 2c 6d 3d 30 3b 6d 3c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 Data Ascii: vg",b):document.createElement(b,g.is&&g),a=null,l=!1}if(null===b)f===g\|\|l&&t.data===g\|\|(t.data=g);else{if(a=a&&r.call(t.childNodes),d=(f=n.props\|\|u).dangerouslySetInnerHTML,p=g.dangerouslySetInnerHTML,!l){if(null!=a)for(f={},m=0;m<t.attributes.length;m++)
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 28 72 5b 6f 5d 2c 65 2c 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 74 79 70 65 29 3b 6e 7c 7c 6e 75 6c 6c 3d 3d 74 2e 5f 5f 65 7c 7c 68 28 74 2e 5f 5f 65 29 2c 74 2e 5f 5f 3d 74 2e 5f 5f 65 3d 74 2e 5f 5f 64 3d 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 2c 61 2c 73 3b 69 2e 5f 5f 26 26 69 2e 5f 5f 28 74 2c 65 29 2c 61 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 3f 6e 75 6c 6c 3a 6e 26 26 6e 2e 5f 5f 6b 7c 7c 65 2e 5f 5f 6b 2c 73 3d 5b 5d 2c 52 28 65 2c 74 3d 28 21 6f 26 26 6e 7c 7c 65 29 2e 5f 5f 6b 3d 67 28 79 Data Ascii: (r[o],e,n\|\|"function"!=typeof t.type);n\|\|null==t.__e\|\|h(t.__e),t.__=t.__e=t.__d=void 0}function N(t,e,n){return this.constructor(t,n)}function U(t,e,n){var o,a,s;i.__&&i.__(t,e),a=(o="function"==typeof n)?null:n&&n.__k\|\|e.__k,s=[],R(e,t=(!o&&n\|\|e).__k=g(y
2024-04-18 19:30:22 UTC	1369	IN	Data Raw: 6e 65 6e 74 44 69 64 43 61 74 63 68 28 74 2c 72 7c 7c 7b 7d 29 2c 61 3d 69 2e 5f 5f 64 29 2c 61 29 72 65 74 75 72 6e 20 69 2e 5f 5f 45 3d 69 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 74 68 72 6f 77 20 74 7d 7d 2c 6f 3d 30 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 6e 3d 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 5f 73 26 26 74 68 69 73 2e 5f 5f 73 21 3d 3d 74 68 69 73 2e 73 74 61 74 65 3f 74 68 69 73 2e 5f 5f 73 3a 74 68 69 73 2e 5f 5f 73 3d 66 28 7b 7d 2c 74 68 69 73 2e 73 74 61 74 65 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 74 28 66 28 7b 7d 2c 6e 29 2c 74 68 69 73 2e 70 72 6f 70 73 29 29 2c 74 26 26 66 28 6e 2c 74 29 2c 6e 75 6c 6c 21 3d Data Ascii: nentDidCatch(t,r\|\|{}),a=i.__d),a)return i.__E=i}catch(e){t=e}throw t}},o=0,v.prototype.setState=function(t,e){var n;n=null!=this.__s&&this.__s!==this.state?this.__s:this.__s=f({},this.state),"function"==typeof t&&(t=t(f({},n),this.props)),t&&f(n,t),null!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49838	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:22 UTC	602	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:22 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 18726 Connection: close Last-Modified: Wed, 03 Apr 2024 03:46:20 GMT ETag: "660cd10c-4926" Accept-Ranges: bytes
2024-04-18 19:30:22 UTC	3832	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:funct
2024-04-18 19:30:22 UTC	4096	IN	Data Raw: 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c Data Ascii: c\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83e\uddd1\ud83c[\udffb\udffd-\udfff]\|\ud83e\uddd1\ud83c\udffd\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83e\uddd1\ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\uddd1\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\
2024-04-18 19:30:22 UTC	4096	IN	Data Raw: 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 Data Ascii: [\udffb\udffc\udffe\udfff]\|\ud83e\udef1\ud83c\udffe\u200d\ud83e\udef2\ud83c[\udffb-\udffd\udfff]\|\ud83e\udef1\ud83c\udfff\u200d\ud83e\udef2\ud83c[\udffb-\udffe]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud83d[\u
2024-04-18 19:30:22 UTC	558	IN	Data Raw: 33 64 5b 5c 75 64 63 34 32 5c 75 64 63 34 33 5c 75 64 63 34 36 2d 5c 75 64 63 35 30 5c 75 64 63 36 36 2d 5c 75 64 63 36 39 5c 75 64 63 36 65 5c 75 64 63 37 30 2d 5c 75 64 63 37 38 5c 75 64 63 37 63 5c 75 64 63 38 31 2d 5c 75 64 63 38 33 5c 75 64 63 38 35 2d 5c 75 64 63 38 37 5c 75 64 63 61 61 5c 75 64 64 37 61 5c 75 64 64 39 35 5c 75 64 64 39 36 5c 75 64 65 34 35 2d 5c 75 64 65 34 37 5c 75 64 65 34 62 2d 5c 75 64 65 34 66 5c 75 64 65 61 33 5c 75 64 65 62 34 2d 5c 75 64 65 62 36 5c 75 64 65 63 30 5c 75 64 65 63 63 5d 7c 5c 75 64 38 33 65 5b 5c 75 64 64 30 63 5c 75 64 64 30 66 5c 75 64 64 31 38 2d 5c 75 64 64 31 63 5c 75 64 64 31 65 5c 75 64 64 31 66 5c 75 64 64 32 36 5c 75 64 64 33 30 2d 5c 75 64 64 33 39 5c 75 64 64 33 64 5c 75 64 64 33 65 5c 75 64 64 37 Data Ascii: 3d[\udc42\udc43\udc46-\udc50\udc66-\udc69\udc6e\udc70-\udc78\udc7c\udc81-\udc83\udc85-\udc87\udcaa\udd7a\udd95\udd96\ude45-\ude47\ude4b-\ude4f\udea3\udeb4-\udeb6\udec0\udecc]\|\ud83e[\udd0c\udd0f\udd18-\udd1c\udd1e\udd1f\udd26\udd30-\udd39\udd3d\udd3e\udd7
2024-04-18 19:30:22 UTC	1398	IN	Data Raw: 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 37 37 5c 75 64 62 34 30 5c 75 64 63 36 63 5c 75 64 62 34 30 5c 75 64 63 37 33 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 64 65 36 5c 75 64 38 33 63 5b 5c 75 64 64 65 38 2d 5c 75 64 64 65 63 5c 75 64 64 65 65 5c 75 64 64 66 31 5c 75 64 64 66 32 5c 75 64 64 66 34 5c 75 64 64 66 36 2d 5c 75 64 64 66 61 5c 75 64 64 66 63 5c 75 64 64 66 64 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 37 5c 75 64 38 33 63 5b 5c 75 64 64 65 36 5c 75 64 64 65 37 5c 75 64 64 65 39 2d 5c 75 64 64 65 66 5c 75 64 64 66 31 2d 5c 75 64 64 66 34 5c 75 64 64 66 36 2d 5c 75 64 64 66 39 5c 75 64 64 66 62 5c 75 64 64 66 63 5c Data Ascii: d83c\udff4\udb40\udc67\udb40\udc62\udb40\udc77\udb40\udc6c\udb40\udc73\udb40\udc7f\|\ud83c\udde6\ud83c[\udde8-\uddec\uddee\uddf1\uddf2\uddf4\uddf6-\uddfa\uddfc\uddfd\uddff]\|\ud83c\udde7\ud83c[\udde6\udde7\udde9-\uddef\uddf1-\uddf4\uddf6-\uddf9\uddfb\uddfc\
2024-04-18 19:30:22 UTC	4096	IN	Data Raw: 5c 75 64 64 66 62 5c 75 64 64 66 63 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 64 38 33 63 5b 5c 75 64 64 65 36 5c 75 64 64 65 63 5c 75 64 64 66 32 5c 75 64 64 66 33 5c 75 64 64 66 38 5c 75 64 64 66 65 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 62 5c 75 64 38 33 63 5b 5c 75 64 64 65 36 5c 75 64 64 65 38 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 65 5c 75 64 64 66 33 5c 75 64 64 66 61 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 63 5c 75 64 38 33 63 5b 5c 75 64 64 65 62 5c 75 64 64 66 38 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 64 5c 75 64 38 33 63 5c 75 64 64 66 30 7c 5c 75 64 38 33 63 5c 75 64 64 66 65 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 66 39 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 66 5c 75 64 38 33 63 Data Ascii: \uddfb\uddfc\uddff]\|\ud83c\uddfa\ud83c[\udde6\uddec\uddf2\uddf3\uddf8\uddfe\uddff]\|\ud83c\uddfb\ud83c[\udde6\udde8\uddea\uddec\uddee\uddf3\uddfa]\|\ud83c\uddfc\ud83c[\uddeb\uddf8]\|\ud83c\uddfd\ud83c\uddf0\|\ud83c\uddfe\ud83c[\uddea\uddf9]\|\ud83c\uddff\ud83c
2024-04-18 19:30:22 UTC	650	IN	Data Raw: 74 46 6c 61 67 26 26 21 2f 5e 31 66 31 28 3f 3a 65 5b 36 2d 39 61 2d 66 5d 7c 66 5b 30 2d 39 61 2d 66 5d 29 2d 31 66 31 28 3f 3a 65 5b 36 2d 39 61 2d 66 5d 7c 66 5b 30 2d 39 61 2d 66 5d 29 24 2f 2e 74 65 73 74 28 75 29 26 26 21 2f 5e 28 31 66 33 66 33 2d 66 65 30 66 2d 32 30 30 64 2d 31 66 33 30 38 7c 31 66 33 66 34 2d 32 30 30 64 2d 32 36 32 30 2d 66 65 30 66 29 24 2f 2e 74 65 73 74 28 75 29 29 26 26 22 22 2e 63 6f 6e 63 61 74 28 65 2e 62 61 73 65 2c 75 2c 65 2e 65 78 74 29 7d 2c 61 74 74 72 69 62 75 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 72 6f 6c 65 3a 22 69 6d 67 22 7d 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: tFlag&&!/^1f1(?:e[6-9a-f]\|f[0-9a-f])-1f1(?:e[6-9a-f]\|f[0-9a-f])$/.test(u)&&!/^(1f3f3-fe0f-200d-1f308\|1f3f4-200d-2620-fe0f)$/.test(u))&&"".concat(e.base,u,e.ext)},attributes:function(){return{role:"img"}},onerror:function(){n.parentNode&&(this.setAttribute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49842	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:22 UTC	639	OUT	GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:22 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1360 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-550" Accept-Ranges: bytes
2024-04-18 19:30:22 UTC	1360	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 37 5d 2c 7b 31 33 32 37 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 54 65 78 74 45 64 69 74 6f 72 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 Data Ascii: /! elementor - v3.21.0 - 15-04-2024 /"use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[357],{1327:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class TextEditor extends elementorModules.frontend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49843	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:22 UTC	652	OUT	GET /wp-content/themes/engitech/fonts/Flaticon.woff2 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.questor.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.questor.com.br/wp-content/themes/engitech/css/flaticon.css?ver=6.5.2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:22 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:22 GMT Content-Type: font/woff2 Content-Length: 11896 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:25 GMT ETag: "65807095-2e78" Accept-Ranges: bytes
2024-04-18 19:30:22 UTC	4096	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2e 78 00 0d 00 00 00 00 5a e0 00 00 2e 1d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 06 60 00 82 4a 08 04 11 08 0a 81 a2 64 81 84 04 0b 81 04 00 01 36 02 24 03 81 0c 04 20 05 83 3f 07 86 7f 1b 19 4a 45 46 86 8d 03 80 a0 f0 58 51 94 6c 52 37 fb ff 94 40 87 0c a1 bf 0d c0 a6 61 43 45 c7 00 e3 20 ec 05 51 64 62 86 09 e3 cd ce 2d 5c 87 43 90 7a 2d 70 ba 19 a4 fd 98 cd 37 fb b9 75 84 0f aa 67 4a 1d 2b 16 45 58 15 b4 53 77 bc c3 66 77 dc 57 f0 f5 11 55 a3 88 f9 93 7f f8 f4 11 1a fb 24 77 78 5e 37 ff cf 4d ee 38 f7 26 e4 de 73 13 42 48 64 e4 86 80 84 9d 1b a2 15 54 20 37 6c 05 42 2e ae 96 a9 01 c7 46 82 13 1c 48 5c ab 35 74 e2 26 74 da be 56 89 2d b6 5a 27 76 2c 27 b6 76 7e fb df 43 bb Data Ascii: wOF2.xZ.?FFTM`Jd6$ ?JEFXQlR7@aCE Qdb-\Cz-p7ugJ+EXSwfwWU$wx^7M8&sBHdT 7lB.FH\5t&tV-Z'v,'v~C
2024-04-18 19:30:22 UTC	4096	IN	Data Raw: 3a 71 bf b3 fe 6a 2b 6a 1f 7b 27 da 72 bd 73 fc cd d6 c6 5c b3 b3 f9 62 6b e7 5b ed 5f 0c 08 6a 32 69 a9 9d e9 c9 c7 69 93 33 f1 29 ff 8b 46 bf ae b8 7d 3c a7 a9 12 39 ea 83 ed 38 c1 20 20 90 2a a4 8c 0e b3 62 4b 1f 0b ab 74 e0 10 ec 33 fc 97 88 3a d2 61 ad ab 3a ae 31 c0 97 ec 33 13 a2 ff 9b 50 14 86 48 12 0d 48 4d b9 95 f2 76 60 a7 47 75 49 bc b2 d9 73 16 83 a7 a9 64 45 56 14 96 01 cf 5e f4 ee 76 f3 f5 1b bb 3b eb 3f 86 62 62 15 ab 5d e5 9e c5 91 07 f6 e8 63 50 44 18 c8 16 b0 00 54 88 d8 d1 da cc d3 9c 8e 19 e5 4e 58 ac 06 28 ac ca de c4 ab c9 cc 78 43 64 59 53 a5 13 86 3d 5b 3c 1e ca 7c 9d a7 5e 98 d1 94 2a 8f c7 ac 38 4b b3 26 52 7e 05 49 6e b3 3c 86 69 ce f5 4f 3b c5 82 a7 e7 a3 cf d4 27 e1 64 42 de bd b8 66 61 b9 bd d7 0b 5e 8e 26 3e 51 2d 3f 33 de Data Ascii: :qj+j{'rs\bk[_j2ii3)F}<98 bKt3:a:13PHHMv`GuIsdEV^v;?bb]cPDTNX(xCdYS=[<\|^8K&R~In<iO;'dBfa^&>Q-?3
2024-04-18 19:30:22 UTC	196	IN	Data Raw: 9c fc 7b 9a 97 57 72 5c 04 ee b5 1e 3b 9f 28 0c 4a 38 f9 72 31 57 fc f2 c9 04 25 ef 8d e0 38 d8 9b 78 fe 98 15 9a d3 7e 9f 3c be a2 62 c9 72 ea 6b 26 eb cb 7c cd cd be 90 ad da 41 d5 53 8e 72 ba 30 db 50 2e 94 a7 0e 9c e3 3f 8f d7 77 1b b2 0b d7 45 ab 72 1d e2 ca cd ca cf dc 97 06 d7 fa ca b2 b5 cd 9a 3b 78 c9 fd ad e6 b9 75 6e ae 72 ae f5 ac fd b4 f1 74 01 b7 41 07 97 df 60 37 30 0a 17 a6 dd 11 12 42 fd 3e 9d cf 6d e9 c7 ec 58 bf 3c 29 b9 7f 6a 7f 78 34 9a bf d7 06 42 cb 07 42 c2 b9 01 ce ce 0d d0 23 f7 0e 4c 1d 28 24 ba 26 08 25 cc 2b 43 50 1e 18 58 b7 6e 40 24 38 cf 04 c1 6a 16 Data Ascii: {Wr\;(J8r1W%8x~<brk&\|ASr0P.?wEr;xunrtA`70B>mX<)jx4BB#L($&%+CPXn@$8j
2024-04-18 19:30:22 UTC	3508	IN	Data Raw: f9 10 c7 e1 54 80 8a 8f 10 22 76 d3 37 76 d0 f1 97 bf 11 7e 13 aa 85 f1 1c 84 e3 21 e4 4e 18 29 02 00 7d 6a f2 81 2a 1c 77 ca 59 0a 40 7d ba 07 45 70 2c 7c 30 a8 a0 10 bc de cc 31 c3 cc 43 4e a3 8e 4a be af 0b 5c 18 1e 0a c6 d7 7f 10 c7 3d e4 7a 2b 83 a6 a0 7f d9 81 56 46 23 aa ff 8c c3 4c 9a f9 29 7d ac 34 72 17 93 d8 20 2b 89 f9 18 92 1a 3b 20 07 c5 db 9f 52 a1 bd c4 84 c2 c1 fa e9 23 31 05 87 8d b7 fa f1 40 d9 35 06 14 11 58 ac c0 40 53 12 17 9e 7d da bf a0 11 3e c9 0a 81 38 3f e4 60 3d 6f 0a 86 8b 35 a2 c6 e2 d2 08 a2 0c ac 14 9d be b0 f7 5c f5 4e 6f 93 db dd 94 db 58 d8 b4 bc 28 a7 fe ae 64 c1 8b 5a f1 33 54 90 b2 08 6a 07 86 92 23 ef 46 86 f5 c3 91 0f 98 b1 77 96 a9 c2 9e cb 8d 84 db e0 81 28 86 59 fe 87 5e f4 11 8d 68 09 22 e8 32 b7 40 f8 1f 33 eb Data Ascii: T"v7v~!N)}j*wY@}Ep,\|01CNJ\=z+VF#L)}4r +; R#1@5X@S}>8?`=o5\NoX(dZ3Tj#Fw(Y^h"2@3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49846	172.67.74.112	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:23 UTC	583	OUT	GET /public_api/banner/style/vXME11817141.css?t=1 HTTP/1.1 Host: cdn.privacytools.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:23 UTC	749	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:23 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 9446 Connection: close Cache-Control: public, max-age=14400 X-Robots-Tag: noindex CF-Cache-Status: EXPIRED Last-Modified: Thu, 18 Apr 2024 09:07:48 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r4k0L6MONNdo5cjCv8g%2FVYHRwgMLgwRBjalEthVy0uDoFInorjpkkGCuIo3G1q1FMkU0hyBpyr%2Fl5vP%2BGGaJnYtvYTvFSUZ9qfCdspj3jOkuryMw%2FsgvcoGySvQq0eM0PfjIIbeTdanu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000 Server: cloudflare CF-RAY: 876711afffae7ba2-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:30:23 UTC	620	IN	Data Raw: 2e 63 63 2d 77 69 6e 64 6f 77 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 20 65 61 73 65 7d 2e 63 63 2d 77 69 6e 64 6f 77 2e 63 63 2d 69 6e 76 69 73 69 62 6c 65 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 63 63 2d 61 6e 69 6d 61 74 65 2e 63 63 2d 72 65 76 6f 6b 65 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 31 73 20 65 61 73 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 31 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 31 73 20 65 61 Data Ascii: .cc-window{opacity:1;-webkit-transition:opacity 1s ease;transition:opacity 1s ease}.cc-window.cc-invisible{opacity:0}.cc-animate.cc-revoke{-webkit-transition:transform 1s ease;-webkit-transition:-webkit-transform 1s ease;transition:-webkit-transform 1s ea
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 2e 63 63 2d 61 6e 69 6d 61 74 65 2e 63 63 2d 72 65 76 6f 6b 65 2e 63 63 2d 61 63 74 69 76 65 2e 63 63 2d 62 6f 74 74 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 2e 63 63 2d 72 65 76 6f 6b 65 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 2e 63 63 2d 67 72 6f 77 65 72 7b 6d 61 78 2d 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 74 20 31 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: .cc-animate.cc-revoke.cc-active.cc-bottom{-webkit-transform:translateY(0);transform:translateY(0)}.cc-revoke:hover{-webkit-transform:translateY(0);transform:translateY(0)}.cc-grower{max-height:0;overflow:hidden;-webkit-transition:max-height 1s;transition:
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 63 63 2d 68 69 67 68 6c 69 67 68 74 20 2e 63 63 2d 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 66 6f 63 75 73 2c 2e 63 63 2d 68 69 67 68 6c 69 67 68 74 20 2e 63 63 2d 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 63 63 2d 63 6c 6f 73 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2e 35 65 6d 3b 72 Data Ascii: n:first-child{background-color:transparent;border-color:transparent}.cc-highlight .cc-btn:first-child:focus,.cc-highlight .cc-btn:first-child:hover{background-color:transparent;text-decoration:underline}.cc-close{display:block;position:absolute;top:.5em;r
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 62 65 74 77 65 65 6e 7d 2e 63 63 2d 66 6c 6f 61 74 69 6e 67 20 2e 63 63 2d 63 6f 6d 70 6c 69 61 6e 63 65 3e 2e 63 63 2d 62 74 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 7d 2e 63 63 2d 62 74 6e 2b 2e 63 63 2d 62 74 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 65 6d 7d 0a 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 63 63 2d 72 65 76 6f 6b 65 2c 2e 63 63 2d 77 69 6e 64 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 63 63 2d 62 74 6e 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 Data Ascii: between}.cc-floating .cc-compliance>.cc-btn{-webkit-box-flex:1;-ms-flex:1;flex:1}.cc-btn+.cc-btn{margin-left:.5em}@media print{.cc-revoke,.cc-window{display:none}}@media screen and (max-width:900px){.cc-btn{white-space:normal}}@media screen and (max-widt
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 73 61 67 65 7b 6d 61 72 67 69 6e 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 65 6d 7d 2e 63 63 2d 62 61 6e 6e 65 72 2e 63 63 2d 74 68 65 6d 65 2d 65 64 67 65 6c 65 73 73 20 2e 63 63 2d 62 74 6e 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 2e 38 65 6d 20 31 2e 38 65 6d 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 63 63 2d 62 61 6e 6e 65 72 2e 63 63 2d 74 68 65 6d 65 2d 65 64 67 65 6c 65 73 73 20 2e 63 63 2d 6d 65 73 73 61 67 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 65 6d 7d 2e 63 63 2d 66 6c 6f 61 74 69 6e 67 2e 63 63 2d 74 68 65 6d 65 2d 65 64 67 65 6c 65 73 73 20 2e 63 63 2d 62 74 6e 2b 2e 63 63 2d 62 74 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 0a 23 64 70 5f 63 6f 6e 74 65 6e 74 5f 6f 62 6a 32 7b 2d 77 65 62 6b Data Ascii: sage{margin:2em;margin-bottom:1.5em}.cc-banner.cc-theme-edgeless .cc-btn{margin:0;padding:.8em 1.8em;height:100%}.cc-banner.cc-theme-edgeless .cc-message{margin-left:1em}.cc-floating.cc-theme-edgeless .cc-btn+.cc-btn{margin-left:0}#dp_content_obj2{-webk
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 6f 78 2d 61 6c 69 67 6e 3a 20 6e 6f 6e 65 3b 7d 0a 2e 63 63 2d 63 6f 6d 70 6c 69 61 6e 63 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 75 6e 73 65 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 63 63 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 20 30 65 6d 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 6c 65 66 74 3a 20 30 3b 7d 0a 2e 63 63 2d 72 65 76 6f 6b 65 7b 77 69 64 74 68 3a 20 69 6e 69 74 69 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 Data Ascii: ox-align: none;}.cc-compliance{-webkit-box-flex:unset !important;-ms-flex:none !important;flex: none !important;}.cc-bottom{bottom: 0em;width: 100%;left: 0;}.cc-revoke{width: initial !important; -webkit-transform: translateY(0);transform: translateY(0)
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 7d 0a 20 20 20 20 2e 64 70 2d 62 61 72 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 0a 20 20 20 20 2e 63 63 2d 62 74 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 20 30 2e 35 65 6d 20 31 2e 35 65 6d 3b 20 68 65 69 67 68 74 3a 20 34 30 70 78 7d 0a 20 20 20 20 2e 63 63 2d 64 69 73 6d 69 73 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 7d 0a 20 20 20 20 2e 63 63 2d 63 6f 6d 70 6c 69 61 6e 63 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 7d 0a 0a 20 20 20 20 2e 63 63 2d 77 69 6e 64 6f 77 2e 63 63 2d 66 6c 6f 61 74 69 6e 67 2e 63 63 2d 72 69 67 68 74 2d 6c 65 66 74 20 2e 64 70 2d 62 61 72 Data Ascii: 5px;padding-left: 20px;} .dp-bar-button{width:100%} .cc-btn{margin-right:5px;display:flex;padding: 0.5em 1.5em; height: 40px} .cc-dismiss{margin-right:0px} .cc-compliance{margin-right:5px;} .cc-window.cc-floating.cc-right-left .dp-bar
2024-04-18 19:30:23 UTC	612	IN	Data Raw: 61 6e 6e 65 72 2d 63 6f 6e 73 65 6e 74 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0a 7d 0a 0a 2e 63 63 2d 72 69 67 68 74 2e 63 63 2d 72 69 67 68 74 2d 6c 65 66 74 23 70 72 69 76 61 63 79 74 6f 6f 6c 73 2d 62 61 6e 6e 65 72 2d 63 6f 6e 73 65 6e 74 20 7b 0a 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 63 63 2d 6c 65 66 74 2e 63 63 2d 72 69 67 68 74 2d 6c 65 66 74 23 70 72 69 76 61 63 79 74 6f 6f 6c 73 2d 62 61 6e 6e 65 72 2d 63 6f 6e 73 65 6e 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 63 63 2d 72 69 67 68 74 2d 6c 65 66 74 20 2e 70 72 69 76 61 63 79 2d 74 6f Data Ascii: anner-consent{ margin-top: 5px; max-height: 200px;}.cc-right.cc-right-left#privacytools-banner-consent { left: auto; right: 10px;}.cc-left.cc-right-left#privacytools-banner-consent { left: 10px; right: auto;}.cc-right-left .privacy-to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49848	172.67.74.112	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:23 UTC	576	OUT	GET /public_api/banner/script/bottom/vXME11817141.js?t=1 HTTP/1.1 Host: cdn.privacytools.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:23 UTC	811	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:23 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 70532 Connection: close cache-control: public, max-age=14400, s-maxage=86400, must-revalidate, proxy-revalidate X-Robots-Tag: noindex CF-Cache-Status: EXPIRED Last-Modified: Wed, 17 Apr 2024 16:50:44 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zjRHCDcl1m4er1qAcum76%2Fn8cbJ70VQBBH%2BJK4T8pLxYLhH8xBbCAOVNbqweRkFO9IA67EGULjcVeu4hgpJ1McrrpuchzItv96wHaj6Y0lWRrEUW%2BYZonFMASmAn%2Fq3Jq%2BD%2FErHDREeb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000 Server: cloudflare CF-RAY: 876711b018d97bcc-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:30:23 UTC	558	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 64 63 66 38 37 36 28 29 7b 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 2e 69 6e 69 74 69 61 6c 69 73 65 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 62 6f 74 74 6f 6d 22 2c 63 6f 6e 74 61 69 6e 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 70 5f 63 6f 6e 74 65 6e 74 5f 6f 62 6a 32 22 29 2c 6c 61 79 6f 75 74 3a 22 70 72 69 76 61 63 79 2d 74 6f 6f 6c 73 2d 6c 61 79 6f 75 74 22 2c 6c 61 79 6f 75 74 73 3a 7b 22 70 72 69 76 61 63 79 2d 74 6f 6f 6c 73 2d 6c 61 79 6f 75 74 22 3a 27 7b 7b 63 6c 6f 73 65 7d 7d 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 74 6f 6f 6c 73 2d 6c 61 79 6f 75 74 22 3e 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 70 2d 62 Data Ascii: function dcf876(){window.cookieconsent.initialise({position:"bottom",container:document.getElementById("dp_content_obj2"),layout:"privacy-tools-layout",layouts:{"privacy-tools-layout":'{{close}}<div class="privacy-tools-layout"> <div class="dp-b
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 72 22 3e 7b 7b 68 65 61 64 65 72 7d 7d 3c 2f 73 70 61 6e 3e 27 2c 6d 65 73 73 61 67 65 3a 27 3c 73 70 61 6e 20 69 64 3d 22 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 3a 64 65 73 63 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 20 63 6c 61 73 73 3d 22 63 63 2d 6d 65 73 73 61 67 65 22 3e 4e c3 b3 73 20 63 6f 6c 65 74 61 6d 6f 73 20 63 6f 6f 6b 69 65 73 20 70 61 72 61 20 6f 66 65 72 65 63 65 72 20 75 6d 20 73 65 72 76 69 c3 a7 6f 20 70 65 72 73 6f 6e 61 6c 69 7a 61 64 6f 2e 20 55 74 69 6c 69 7a 65 20 61 73 20 6f 70 c3 a7 c3 b5 65 73 20 61 62 61 69 78 6f 20 70 61 72 61 20 63 6f 6e 66 69 67 75 72 61 72 20 73 75 61 73 20 70 72 65 66 65 72 c3 aa 6e 63 69 61 73 20 71 75 61 6e 74 6f 20 c3 a0 20 63 6f 6c 65 Data Ascii: r">{{header}}</span>',message:'<span id="cookieconsent:desc" style="color: #FFFFFF !important;" class="cc-message">Ns coletamos cookies para oferecer um servio personalizado. Utilize as opes abaixo para configurar suas preferncias quanto cole
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 61 62 69 6e 64 65 78 3d 22 30 22 20 63 6c 61 73 73 3d 22 63 63 2d 6c 69 6e 6b 20 64 70 2d 61 64 64 2d 6c 69 73 74 65 6e 65 72 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 6e 75 6c 6c 29 22 20 74 69 74 6c 65 3d 22 50 72 65 66 65 72 c3 aa 6e 63 69 61 73 22 3e 50 72 65 66 65 72 c3 aa 6e 63 69 61 73 3c 2f 61 3e 3c 2f 64 69 76 3e 27 2c 63 6c 6f 73 65 3a 27 3c 73 70 61 6e 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 64 69 73 6d 69 73 73 20 63 6f 6f 6b 69 65 20 6d 65 73 73 61 67 65 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 65 39 35 31 31 64 22 20 6f 6e 63 6c 69 63 6b 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 63 6c 73 42 6e 6e 65 72 50 72 65 66 28 29 3b 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 63 6c 61 73 73 3d 22 63 63 2d 63 6c 6f Data Ascii: abindex="0" class="cc-link dp-add-listener" href="javascript:void(null)" title="Preferncias">Preferncias</a></div>',close:'<span aria-label="dismiss cookie message" style="color: #e9511d" onclick="javascript:clsBnnerPref();" tabindex="0" class="cc-clo
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 73 45 5f 5f 62 61 72 5f 5f 66 64 55 45 53 70 67 77 50 54 65 62 57 69 68 4a 32 78 43 36 52 52 36 75 4d 7a 51 55 48 51 5f 5f 65 71 75 61 6c 5f 5f 5f 5f 65 71 75 61 6c 5f 5f 22 2c 22 22 2c 22 59 53 43 22 2c 65 29 2c 68 61 6e 64 6c 65 45 78 65 63 75 74 65 53 63 72 69 70 74 35 31 28 21 31 2c 22 67 38 61 4c 5a 58 5f 5f 70 6c 75 73 5f 5f 6c 6a 54 75 52 5f 5f 70 6c 75 73 5f 5f 66 5a 5f 5f 62 61 72 5f 5f 57 6e 47 6c 66 71 52 43 6a 36 4b 32 41 35 69 56 47 57 72 42 4b 32 4b 70 7a 50 32 71 79 5f 5f 70 6c 75 73 5f 5f 6b 5f 5f 62 61 72 5f 5f 36 48 30 4b 79 5a 62 35 54 69 46 5f 5f 62 61 72 5f 5f 79 6f 34 6a 6f 48 67 74 72 70 6f 72 50 68 42 51 48 5f 5f 70 6c 75 73 5f 5f 44 5f 5f 62 61 72 5f 5f 45 33 36 58 72 77 5f 5f 65 71 75 61 6c 5f 5f 5f 5f 65 71 75 61 6c 5f 5f 22 2c Data Ascii: sE__bar__fdUESpgwPTebWihJ2xC6RR6uMzQUHQ__equal____equal__","","YSC",e),handleExecuteScript51(!1,"g8aLZX__plus__ljTuR__plus__fZ__bar__WnGlfqRCj6K2A5iVGWrBK2KpzP2qy__plus__k__bar__6H0KyZb5TiF__bar__yo4joHgtrporPhBQH__plus__D__bar__E36Xrw__equal____equal__",
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 37 34 68 47 79 64 4e 66 50 62 68 4a 4e 41 34 6c 46 32 5f 5f 70 6c 75 73 5f 5f 68 71 30 6d 41 71 47 32 4b 6c 44 6d 79 51 5f 5f 65 71 75 61 6c 5f 5f 5f 5f 65 71 75 61 6c 5f 5f 22 2c 22 22 2c 22 5f 67 69 64 22 2c 65 29 2c 68 61 6e 64 6c 65 45 78 65 63 75 74 65 53 63 72 69 70 74 35 31 28 21 31 2c 22 42 73 42 77 5f 5f 62 61 72 5f 5f 4c 58 67 34 33 68 37 5f 5f 62 61 72 5f 5f 63 73 6b 43 6b 49 66 79 64 65 65 37 70 32 49 47 64 34 50 52 49 75 79 6e 38 44 47 64 35 6d 37 71 55 31 35 71 53 45 33 50 47 4d 69 5f 5f 62 61 72 5f 5f 63 54 31 57 4f 78 54 6a 49 55 66 6b 51 7a 5a 57 61 53 33 58 6d 32 62 76 63 41 53 50 41 5f 5f 65 71 75 61 6c 5f 5f 5f 5f 65 71 75 61 6c 5f 5f 22 2c 22 22 2c 22 5f 67 61 74 22 2c 65 29 2c 68 61 6e 64 6c 65 45 78 65 63 75 74 65 53 63 72 69 70 74 Data Ascii: 74hGydNfPbhJNA4lF2__plus__hq0mAqG2KlDmyQ__equal____equal__","","_gid",e),handleExecuteScript51(!1,"BsBw__bar__LXg43h7__bar__cskCkIfydee7p2IGd4PRIuyn8DGd5m7qU15qSE3PGMi__bar__cT1WOxTjIUfkQzZWaS3Xm2bvcASPA__equal____equal__","","_gat",e),handleExecuteScript
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 69 64 4a 74 4f 6e 65 73 62 35 31 6b 41 5f 5f 65 71 75 61 6c 5f 5f 5f 5f 65 71 75 61 6c 5f 5f 22 2c 22 22 2c 22 5f 67 63 6c 5f 61 75 22 2c 65 29 2c 68 61 6e 64 6c 65 45 78 65 63 75 74 65 53 63 72 69 70 74 35 31 28 21 31 2c 22 69 48 4e 41 66 68 45 41 73 36 65 52 33 73 61 6f 58 4a 52 37 6d 6b 4f 4c 54 56 6c 59 68 64 54 79 34 48 6f 34 61 4b 6e 72 30 44 42 65 31 74 62 67 46 77 38 42 56 36 34 36 5a 53 6f 33 62 4c 59 44 59 4c 69 4b 45 71 6e 6e 4c 7a 56 4d 43 54 67 7a 71 77 4a 43 4f 77 5f 5f 65 71 75 61 6c 5f 5f 5f 5f 65 71 75 61 6c 5f 5f 22 2c 22 22 2c 22 74 65 73 74 5f 63 6f 6f 6b 69 65 22 2c 65 29 2c 68 61 6e 64 6c 65 45 78 65 63 75 74 65 53 63 72 69 70 74 35 31 28 21 31 2c 22 47 6d 34 64 4a 5a 43 6f 43 39 36 42 6f 6a 6f 41 4b 5f 5f 62 61 72 5f 5f 41 6e 4e 54 Data Ascii: idJtOnesb51kA__equal____equal__","","_gcl_au",e),handleExecuteScript51(!1,"iHNAfhEAs6eR3saoXJR7mkOLTVlYhdTy4Ho4aKnr0DBe1tbgFw8BV646ZSo3bLYDYLiKEqnnLzVMCTgzqwJCOw__equal____equal__","","test_cookie",e),handleExecuteScript51(!1,"Gm4dJZCoC96BojoAK__bar__AnNT
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 3d 22 73 65 6e 64 4b 65 79 5f 22 2b 65 2b 6f 2b 74 2c 70 54 6f 6f 6c 73 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 2e 67 65 74 70 63 28 5f 29 26 26 22 74 72 75 65 22 3d 3d 70 54 6f 6f 6c 73 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 2e 67 65 74 70 63 28 5f 29 7c 7c 28 28 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 69 76 61 63 79 74 6f 6f 6c 73 2e 63 6f 6d 2e 62 72 2f 70 75 62 6c 69 63 5f 61 70 69 2f 62 61 6e 6e 65 72 2f 6c 6f 67 2f 62 74 7a 31 41 46 49 6e 43 63 44 59 45 64 39 70 70 6d 51 4c 67 77 5f 5f 62 61 72 5f 5f 53 77 51 43 72 33 52 5a 4c 34 52 46 73 43 6c 55 5f 5f 70 6c 75 73 5f 5f 30 42 31 56 38 4e 52 42 5f 5f 70 6c 75 73 5f 5f 4b 4f 5f 5f 62 61 72 5f 5f Data Ascii: ="sendKey_"+e+o+t,pToolsCookieManager.getpc(_)&&"true"==pToolsCookieManager.getpc(_)\|\|((a=new XMLHttpRequest).open("POST","https://cdn.privacytools.com.br/public_api/banner/log/btz1AFInCcDYEd9ppmQLgw__bar__SwQCr3RZL4RFsClU__plus__0B1V8NRB__plus__KO__bar__
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 74 70 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 6d 79 43 61 63 68 65 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 6f 7c 7c 28 6f 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 65 29 2c 74 68 69 73 2e 6d 79 43 61 63 68 65 2e 73 65 74 28 65 2c 6f 29 2c 6f 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 70 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 74 68 69 73 2e 6d 79 43 61 63 68 65 2e 73 65 74 28 65 2c 6f 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 65 2c 6f 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 70 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6d 79 43 61 63 68 65 2e 64 65 6c 65 74 65 28 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e Data Ascii: tpc=function(e){var o=this.myCache.get(e);return o\|\|(o=localStorage.getItem(e),this.myCache.set(e,o),o)},e.prototype.setpc=function(e,o){this.myCache.set(e,o),localStorage.setItem(e,o)},e.prototype.removepc=function(e){this.myCache.delete(e),localStorage.
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 2b 65 29 2c 61 26 26 74 2e 70 75 73 68 28 22 73 65 63 75 72 65 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 2e 6a 6f 69 6e 28 22 3b 22 29 7d 2c 64 65 65 70 45 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6f 29 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 28 74 20 69 6e 20 65 26 26 74 68 69 73 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 65 5b 74 5d 29 26 26 74 68 69 73 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6f 5b 74 5d 29 3f 74 68 69 73 2e 64 65 65 70 45 78 74 65 6e 64 28 65 5b 74 5d 2c 6f 5b 74 5d 29 3a 65 5b 74 5d 3d 6f 5b 74 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 74 68 72 6f 74 74 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 3d 21 31 3b 72 Data Ascii: +e),a&&t.push("secure"),document.cookie=t.join(";")},deepExtend:function(e,o){for(var t in o)o.hasOwnProperty(t)&&(t in e&&this.isPlainObject(e[t])&&this.isPlainObject(o[t])?this.deepExtend(e[t],o[t]):e[t]=o[t]);return e},throttle:function(e,o){var t=!1;r
2024-04-18 19:30:23 UTC	1369	IN	Data Raw: 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 3d 7b 74 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 6d 73 54 3a 22 4d 53 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 57 65 62 6b 69 74 54 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 7d 3b 66 6f 72 28 65 20 69 6e 20 74 29 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 2e 73 74 79 6c 65 5b 65 2b 22 72 61 6e 73 69 74 69 6f 6e 22 5d 29 72 65 74 75 72 6e 20 74 5b 65 5d 3b 72 65 74 75 72 6e 22 22 7d 28 29 2c 6c 2e 68 61 73 54 72 61 6e 73 69 74 69 6f 6e 3d 21 21 6c 2e 74 72 61 6e 73 Data Ascii: nt.createElement("div"),t={t:"transitionend",OT:"oTransitionEnd",msT:"MSTransitionEnd",MozT:"transitionend",WebkitT:"webkitTransitionEnd"};for(e in t)if(t.hasOwnProperty(e)&&void 0!==o.style[e+"ransition"])return t[e];return""}(),l.hasTransition=!!l.trans

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49850	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:23 UTC	594	OUT	GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:23 UTC	604	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3863 Connection: close Last-Modified: Thu, 21 Dec 2023 11:41:45 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: TE0H92uWvbxvP5WbDnKffpRjpMGxk2Jl Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 19:30:24 GMT Cache-Control: no-cache ETag: "c6ea8d8e630f57d377818da4c8bd1b8c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 48e362f9d96bab90e1b38019f6003660.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: lxn7G2lsOoFJo_x8MOWHTWEbm1gN2Kpsih1hp2C58xaZN2mpDo4uBg==
2024-04-18 19:30:23 UTC	3863	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 52 44 53 74 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 77 69 6e 64 6f 77 4c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 77 69 6e 64 6f 77 4c 6f 61 64 65 64 3d 21 30 7d 29 2c 74 7d 28 29 2c 52 44 43 6f 6f 6b 69 65 43 6f 6e 74 72 6f 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 61 6e 61 6c 79 74 69 63 73 3a 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 72 64 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 5f 61 6c 6c 6f 77 5f 61 6e 61 6c 79 74 69 63 73 22 2c 74 72 61 63 6b 3a 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 61 6c 3a 7b 65 76 65 6e 74 4e Data Ascii: "use strict";var RDStation=function(){var t={windowLoaded:!1};return window.addEventListener("load",function(){t.windowLoaded=!0}),t}(),RDCookieControl=function(){var t={analytics:{eventName:"rd_cookie_consent_allow_analytics",track:!0},functional:{eventN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49851	13.107.246.41	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:23 UTC	544	OUT	GET /tag/uet/343080441?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:23 UTC	528	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:23 GMT Content-Type: application/x-javascript Content-Length: 858 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; expires=Fri, 18 Apr 2025 19:30:23 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:593e4080-f032-4d00-a652-e17f01252a9d x-azure-ref: 20240418T193023Z-r1f585c6b65b4rm4gtddvcdsd0000000073g000000000mmu X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-18 19:30:23 UTC	858	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);a[c]("metadata",(function(){a[c]("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49852	31.13.65.7	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:23 UTC	1315	OUT	GET /signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:23 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-18 19:30:23 UTC	1512	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-18 19:30:23 UTC	23	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 Data Ascii: /*** Copyright (c) 201
2024-04-18 19:30:23 UTC	1500	IN	Data Raw: 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e 64 Data Ascii: 7-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services and
2024-04-18 19:30:23 UTC	1500	IN	Data Raw: 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a Data Ascii: ypeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype:
2024-04-18 19:30:23 UTC	1500	IN	Data Raw: 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 Data Ascii: bject.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbevent
2024-04-18 19:30:23 UTC	1500	IN	Data Raw: 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d 29 5b 30 5d 7d 3b 72 65 74 75 72 6e Data Ascii: ctUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e})[0]};return
2024-04-18 19:30:23 UTC	711	IN	Data Raw: 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 2b 6e 2e 74 61 67 4e 61 6d 65 2b Data Ascii: l)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""+n.tagName+
2024-04-18 19:30:23 UTC	1500	IN	Data Raw: 65 2c 63 3d 35 30 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 Data Ascii: e,c=500;function d(){var a=h.querySelector("title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsFeatureCounter",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(
2024-04-18 19:30:24 UTC	1500	IN	Data Raw: 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 64 3d 61 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 26 26 61 2e 70 75 73 68 28 62 29 29 2c 62 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 28 62 3d 6e 75 6c 6c 29 29 3b 63 28 61 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 61 72 74 3b 61 3d 61 2e 65 6e 64 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 64 3d 64 2e 73 6c 69 63 65 28 30 2c 62 29 2b 22 40 22 2b Data Ascii: {var b=null,d=a;a=[];for(var e=0;e<d.length;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d.length)&&a.push(b)),b.end!=null&&(b=null));c(a.reverse(),function(a){var b=a.start;a=a.end;if(a==null)return;d=d.slice(0,b)+"@"+
2024-04-18 19:30:24 UTC	1500	IN	Data Raw: 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 66 69 72 65 64 3b 62 2e 70 69 69 41 75 74 6f 6d 61 74 63 68 65 64 3b 76 61 72 20 64 3d 62 2e 70 69 69 43 6f 6e 66 6c 69 63 74 69 6e 67 2c 6d 3d 62 2e 65 78 74 72 61 63 74 50 69 69 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 6e 3d 62 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 Data Ascii: (){"use strict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.fired;b.piiAutomatched;var d=b.piiConflicting,m=b.extractPii;b=f.getFbeventsModules("SignalsFBEventsShared");var n=b.signalsConver

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49856	64.233.177.156	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	1400	OUT	GET /td/rul/1027983844?random=1713468622572&cv=11&fst=1713468622572&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 19:45:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:25 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 19:30:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49858	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	574	OUT	GET /js/lead-tracking/stable/lead-tracking.min.js HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	546	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2058 Connection: close Last-Modified: Mon, 17 Aug 2020 12:56:23 GMT x-amz-version-id: VK74Y_629OBaxeWwwoiBIyYa.m4SxWD5 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 10:13:11 GMT ETag: "361325c86c17ebc03ff0f4d88d267a83" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 be223caebbe42db21970a1fec649bbf2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: 0x2sDYd4gg9bcVjWJqq16WG1pDmsgUDszC6ER758awzQjXfHpU_eCg== Age: 33435
2024-04-18 19:30:25 UTC	2058	IN	Data Raw: 2f 2a 21 20 52 65 73 75 6c 74 61 64 6f 73 20 44 69 67 69 74 61 69 73 20 32 30 32 30 2d 30 38 2d 31 37 20 2a 2f 0a 76 61 72 20 4c 65 61 64 54 72 61 63 6b 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 62 2c 63 2c 64 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 76 69 65 77 2d 6e 6f 74 69 66 79 2e 72 64 73 74 61 74 69 6f 6e 2e 63 6f 6d 2e 62 72 2f 73 65 6e 64 22 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 3d 62 2c 66 28 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 29 3f 68 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 68 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d Data Ascii: /! Resultados Digitais 2020-08-17 /var LeadTracking=function(){"use strict";var a,b,c,d="https://pageview-notify.rdstation.com.br/send",e=function(b){a=b,f()},f=function(){g()?h():window.addEventListener("load",h)},g=function(){return"complete"===docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49861	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	590	OUT	GET /js/traffic-source-cookie/stable/traffic-source-cookie.min.js HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	584	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1983 Connection: close Last-Modified: Mon, 09 Jan 2023 17:04:37 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QfrmjXJN9imPm0CvR.Kk8uxg0RnubrVf Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 13:14:34 GMT ETag: "dae3ed517b23abad11d0bd6b79f24080" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 91e5ead182287ac864afde78fc51be60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: avZPR7DE5Oeg904kBHEI17c6WCx64NA6axrU-K4eEqMSo4LMUal_Fg== Age: 22552
2024-04-18 19:30:25 UTC	1983	IN	Data Raw: 2f 2a 21 20 52 65 73 75 6c 74 61 64 6f 73 20 44 69 67 69 74 61 69 73 20 32 30 32 33 2d 30 31 2d 30 39 20 2a 2f 0a 76 61 72 20 54 72 61 66 66 69 63 53 6f 75 72 63 65 43 6f 6f 6b 69 65 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 72 2c 69 2c 6f 2c 75 2c 63 2c 61 2c 73 2c 6e 2c 66 2c 6c 2c 64 2c 6d 2c 67 2c 68 2c 70 2c 76 2c 77 2c 5f 2c 54 3b 76 6f 69 64 20 30 3d 3d 3d 54 72 61 66 66 69 63 53 6f 75 72 63 65 43 6f 6f 6b 69 65 26 26 28 74 3d 22 3e 3e 22 2c 72 3d 22 65 6e 63 6f 64 65 64 5f 22 2c 69 3d 2f 72 64 73 74 5f 73 72 63 69 64 2f 2c 6f 3d 22 28 6e 6f 6e 65 29 22 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 28 29 29 72 65 74 75 72 6e 20 33 30 3c 28 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 Data Ascii: /! Resultados Digitais 2023-01-09 /var TrafficSourceCookie;!function(){"use strict";var t,r,i,o,u,c,a,s,n,f,l,d,m,g,h,p,v,w,_,T;void 0===TrafficSourceCookie&&(t=">>",r="encoded_",i=/rdst_srcid/,o="(none)",s=function(){if(n())return 30<((new Date).getTi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49859	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	1276	OUT	GET /pagead/viewthroughconversion/1027983844/?random=1713468622572&cv=11&fst=1713468622572&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 19:45:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:25 UTC	413	IN	Data Raw: 39 33 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 937(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 19:30:25 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-18 19:30:25 UTC	698	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 6a 67 32 4d 6a 49 31 4e 7a 49 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 31 30 32 37 39 38 33 38 34 34 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 33 34 36 38 36 32 32 35 37 32 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 33 34 36 36 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 6a 65 34 34 66 30 76 38 37 34 39 34 30 33 36 31 7a 38 38 35 34 37 36 37 35 35 34 7a 61 32 30 30 5c 78 32 36 67 63 64 Data Ascii: (this);;s.ss_(window,'OjE3MTM0Njg2MjI1NzI',['https://www.google.com/pagead/1p-user-list/1027983844/?random\x3d1713468622572\x26cv\x3d11\x26fst\x3d1713466800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45je44f0v874940361z8854767554za200\x26gcd
2024-04-18 19:30:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49857	13.107.246.41	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	600	OUT	GET /s/0.7.31/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418
2024-04-18 19:30:25 UTC	640	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:25 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 62389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 18 Apr 2024 10:16:12 GMT ETag: "0x8DC5F909305D519" x-ms-request-id: a6dbd24c-101e-0028-1497-914f73000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240418T193025Z-r1f585c6b654lfdz8btpvqgdt800000007r0000000004ruw Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-18 19:30:25 UTC	15744	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 33 31 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 71 61 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 48 61 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.31: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Ua},get start(){return qa},get stop(){return Fa},get track(){return Ha}}),e=Object.freeze({__pro
2024-04-18 19:30:25 UTC	16384	IN	Data Raw: 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2b 3d 6f 5b 74 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 3b 76 61 72 20 6c 3d 7a 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 72 2e 70 72 69 76 61 63 79 3d 22 49 4e 50 55 54 22 3d 3d 3d 75 26 26 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e 3d 30 3f 69 Data Ascii: ,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="";Object.keys(o).forEach((function(t){return s+=o[t].toLowerCase()}));var l=zt.some((function(t){return s.indexOf(t)>=0}));r.privacy="INPUT"===u&&Ht.indexOf(c)>=0?i
2024-04-18 19:30:26 UTC	16384	IN	Data Raw: 3e 3d 30 7c 7c 72 2e 69 6e 64 65 78 4f 66 28 22 70 6f 73 74 69 6e 67 22 29 3e 3d 30 3f 22 61 72 74 69 63 6c 65 22 3a 72 29 7b 63 61 73 65 22 61 72 74 69 63 6c 65 22 3a 63 61 73 65 22 72 65 63 69 70 65 22 3a 49 72 28 35 2c 74 5b 61 5d 29 2c 49 72 28 38 2c 74 2e 63 72 65 61 74 6f 72 29 2c 49 72 28 31 38 2c 74 2e 68 65 61 64 6c 69 6e 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 6f 64 75 63 74 22 3a 49 72 28 35 2c 74 5b 61 5d 29 2c 49 72 28 31 30 2c 74 2e 6e 61 6d 65 29 2c 49 72 28 31 32 2c 74 2e 73 6b 75 29 2c 74 2e 62 72 61 6e 64 26 26 49 72 28 36 2c 74 2e 62 72 61 6e 64 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 67 67 72 65 67 61 74 65 72 61 74 69 6e 67 22 3a 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 26 26 28 57 28 31 31 2c 72 61 28 74 2e 72 Data Ascii: >=0\|\|r.indexOf("posting")>=0?"article":r){case"article":case"recipe":Ir(5,t[a]),Ir(8,t.creator),Ir(18,t.headline);break;case"product":Ir(5,t[a]),Ir(10,t.name),Ir(12,t.sku),t.brand&&Ir(6,t.brand.name);break;case"aggregaterating":t.ratingValue&&(W(11,ra(t.r
2024-04-18 19:30:26 UTC	13877	IN	Data Raw: 61 74 61 2e 61 63 74 69 76 69 74 79 54 69 6d 65 29 2c 65 2e 70 75 73 68 28 6e 2e 64 61 74 61 2e 73 63 72 6f 6c 6c 54 69 6d 65 29 2c 55 61 28 65 2c 21 31 29 29 2c 78 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 35 3a 65 2e 70 75 73 68 28 52 2e 67 61 70 29 2c 55 61 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 35 3a 65 2e 70 75 73 68 28 61 72 2e 63 68 65 63 6b 29 2c 55 61 28 65 2c 21 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 65 2e 70 75 73 68 28 74 74 2e 6b 65 79 29 2c 55 61 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 65 2e 70 75 73 68 28 48 61 2e 73 65 71 75 65 6e 63 65 29 2c 65 2e 70 75 73 68 28 48 61 2e 61 74 74 65 6d 70 74 73 29 2c 65 2e 70 75 73 68 28 48 61 2e 73 74 61 74 75 73 29 2c 55 61 28 65 2c 21 31 29 3b 62 72 65 61 6b 3b 63 61 73 Data Ascii: ata.activityTime),e.push(n.data.scrollTime),Ua(e,!1)),x();break;case 25:e.push(R.gap),Ua(e);break;case 35:e.push(ar.check),Ua(e,!1);break;case 3:e.push(tt.key),Ua(e);break;case 2:e.push(Ha.sequence),e.push(Ha.attempts),e.push(Ha.status),Ua(e,!1);break;cas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49863	74.125.138.156	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	804	OUT	POST /g/collect?v=2&tid=G-WZY91LD4XC&cid=990543739.1713468623&gtm=45je44f0v874940361z8854767554za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.questor.com.br Date: Thu, 18 Apr 2024 19:30:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49862	216.239.36.181	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	1271	OUT	POST /g/collect?v=2&tid=G-WZY91LD4XC&gtm=45je44f0v874940361z8854767554za200&_p=1713468614526&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=990543739.1713468623&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713468622&sct=1&seg=0&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&dt=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=14871 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.questor.com.br Date: Thu, 18 Apr 2024 19:30:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49865	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:25 UTC	876	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:25 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=6, ullat=2 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49866	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:26 UTC	968	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:26 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:26 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:26 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 19:30:26 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49868	142.251.15.103	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:26 UTC	1163	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468622572&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq2loY7UDUNovyKkzFnTkGrxGYpA8jyw&random=3133616513&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:26 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49870	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:27 UTC	638	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:27 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=112, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49873	172.67.75.61	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:27 UTC	786	OUT	POST /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468625&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:28 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:28 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate access-control-allow-origin: * vary: Origin access-control-max-age: 1728000 x-request-id: 136724d4-1ef4-48df-bbe4-79167c3f729f access-control-allow-methods: GET, PUT, POST, OPTIONS etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.029449 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hRjytcfRnrCjvsWsCt%2BoqxwmfCWWWjRAGQWyZ82og9n3jdK2GWX5BJjhXcoRuc2ZBDdPXXTBsDa4zsD7mX56e%2BfQH%2BmfwdllJOyS%2BXG%2FiwG3jvBs3I0g%2FG1K6a5piSjbhBJ8P48%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876711cd4cca452d-ATL
2024-04-18 19:30:28 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:30:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49877	172.67.74.112	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:27 UTC	624	OUT	GET /public_api/banner/pop/vXME11817141.html?t=1&m=0&c=1,705,326,596,201 HTTP/1.1 Host: cdn.privacytools.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:28 UTC	870	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:28 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 7824 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * ETag: "Mon Jan 15 10:49:58 GMT-03:00 2024" Cache-Control: public, max-age=2678400 X-Robots-Tag: noindex CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kVHPKxqcHYX7ulfVsGyMCGAGfvdcEUCbrNsDGzsJM%2F5n9Es4ONeWfmfNgbp%2F7YHU0IxezJ%2B4YmaJKa8JXS3%2BSDNsdAqd5iJjwOkWexysD0XeOF0oeEOFTq1KiXXfohUzN4ESBbE%2BNwAX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000 Server: cloudflare CF-RAY: 876711cd5aa61d80-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:30:28 UTC	499	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 23 6f 76 5f 7a 33 34 39 38 34 30 33 30 30 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 39 39 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 Data Ascii: <style type="text/css"> #ov_z349840300 { display:none; position: fixed; left: 0px; top: 0px; width: 100%; height: 100%; text-align: center; z-index: 99999999; background-color:#00
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 69 6e 69 74 69 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 7d 0a 0a 20 Data Ascii: font-family: Arial, Helvetica, sans-serif; font-size: 14px; background-color: #FFFFFF; box-sizing: initial !important; -webkit-box-sizing: border-box;box-sizing: border-box;-webkit-font-smoothing: antialiased; }
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 20 31 2e 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 74 61 62 73 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 74 61 62 2d 69 74 65 6d 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 20 38 70 78 20 Data Ascii: 1.5em; font-weight: bold; text-align: center; width: 100%; margin-top: 20px; } .dp-tabs { width: 100%; height: 24px; display: flex; } .dp-tab-item { border-radius: 8px 8px
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 39 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 38 45 37 45 37 3b 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 Data Ascii: margin-bottom: 15px; padding-right: 25px; } .dp-tab-content { overflow: auto; max-height: 290px; } .dp-cookie-content { border-bottom: 1px solid #E8E7E7; overflow: auto; max-height: 2
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 34 41 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 64 65 76 65 6c 6f 70 65 64 2d 62 79 20 61 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 6f 6c 69 63 69 65 73 20 7b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e Data Ascii: xt-decoration: none; color: #26264A } #dp-preferences-footer .developed-by a { font-weight: bold; } #dp-preferences-footer .policies { text-align: left; padding: 12px; font-size: 1.2em; fon
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 38 70 78 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 31 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 48 69 64 65 20 64 65 66 61 75 6c 74 20 48 54 4d 4c 20 63 68 65 63 6b 62 6f 78 20 2a 2f 0a 20 20 20 20 2e 64 70 2d 73 77 69 74 63 68 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f Data Ascii: position: relative; display: inline-block; width: 48px; height: 21px; } /* Hide default HTML checkbox */ .dp-switch input { opacity: 0; width: 0; height: 0; } .dp-slider-text { padding-to
2024-04-18 19:30:28 UTC	480	IN	Data Raw: 65 58 28 32 37 70 78 29 3b 0a 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 37 70 78 29 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 39 70 78 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 52 6f 75 6e 64 65 64 20 73 6c 69 64 65 72 73 20 2a 2f 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 2e 72 6f 75 6e 64 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 2e 72 6f 75 6e 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d Data Ascii: eX(27px); transform: translateX(27px); height: 19px; width: 19px; border: none; bottom: 1px; } /* Rounded sliders */ .dp-slider.round { border-radius: 8px; } .dp-slider.round:before { border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49879	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:27 UTC	675	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468624041&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468621537&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:28 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:28 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:28 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49880	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	656	OUT	POST /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive Content-Length: 202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:28 UTC	202	OUT	Data Raw: 75 72 6c 3d 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 70 6f 6c 69 74 69 63 61 73 2d 64 65 2d 63 6f 6f 6b 69 65 73 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 26 74 6f 6b 65 6e 3d 38 38 32 38 66 66 39 30 38 64 35 30 30 36 39 65 61 39 31 32 31 32 62 30 64 38 33 36 62 62 31 65 26 74 69 74 6c 65 3d 51 75 65 73 74 6f 72 2d 5a 65 6e 25 32 30 2d 25 32 30 51 75 65 73 74 6f 72 25 32 30 2d 25 32 30 73 69 73 74 65 6d 61 73 25 32 30 63 6f 6e 74 25 43 33 25 41 31 62 65 69 73 25 32 43 25 32 30 65 6d 70 72 65 73 61 72 69 61 69 73 25 32 30 65 25 32 30 63 6f 72 70 6f 72 61 74 69 76 6f 73 Data Ascii: url=www.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&token=8828ff908d50069ea91212b0d836bb1e&title=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos
2024-04-18 19:30:28 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:28 GMT Content-Type: text/html;charset=utf-8 Content-Length: 36 Connection: close Access-Control-Allow-Origin: https://www.questor.com.br Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: *, Content-Type, Accept, AUTHORIZATION, Cache-Control Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1728000 Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma Set-Cookie: _rdtrk=53b33b18-bcee-43ee-b003-f4993221269f; domain=.rdstation.com.br; expires=Sun, 01 Jan 2034 00:00:00 -0000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15724800; includeSubDomains X-Robots-Tag: noindex, nofollow
2024-04-18 19:30:28 UTC	36	IN	Data Raw: 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: 53b33b18-bcee-43ee-b003-f4993221269f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49881	142.250.105.104	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	925	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468622572&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq2loY7UDUNovyKkzFnTkGrxGYpA8jyw&random=3133616513&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49878	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	1164	OUT	GET /wp-content/uploads/2023/07/cropped-favicon_questor-32x32.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/politicas-de-cookies/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569
2024-04-18 19:30:28 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:28 GMT Content-Type: image/png Content-Length: 982 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-3d6" Accept-Ranges: bytes
2024-04-18 19:30:28 UTC	982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 88 49 44 41 54 58 85 ed 97 4d 6c 54 55 14 c7 7f e7 75 3a 56 69 48 ad 88 f3 f1 da 50 6a c6 85 09 11 52 63 13 34 18 22 d5 da 40 67 74 25 f8 99 34 46 57 84 85 2b 43 ba d0 a8 1b 0c 89 0b 23 c6 85 c4 88 31 9a 19 5a 30 16 02 28 82 90 46 09 89 c9 04 89 21 76 f2 66 06 1a 20 e5 43 3b ca cc 3b 2e 3a 0d 9d 37 77 3e 1e 62 ba f1 24 6f 73 ee ff 9c f3 7b f7 9d 7b e7 8c 00 16 8b 68 8b 5a 1c 20 70 2b 41 7d 9d 41 f6 ac bd b7 ad 55 08 fe 7a ed c6 f5 27 8f 4c bb b7 0a 20 34 b9 0b 4e dc 0e b5 08 cf 0b 0c 02 0f 01 1d e5 a5 22 f0 1b 70 54 95 3d 07 2f 14 8e be 78 e2 e2 ed 03 98 1a 8e 76 04 2d 79 4b 60 04 08 36 Data Ascii: PNGIHDR szzpHYs+IDATXMlTUu:ViHPjRc4"@gt%4FW+C#1Z0(F!vf C;;.:7w>b$os{{hZ p+A}AUz'L 4N"pT=/xv-yK`6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49885	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	583	OUT	GET /js/rdstation-popups/bricks/rdstation-popup.min.js?v=1 HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:29 UTC	590	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 57363 Connection: close Date: Thu, 18 Apr 2024 19:30:30 GMT Last-Modified: Tue, 16 Apr 2024 18:56:23 GMT ETag: "10b6883a771a55bcb6b5749d0515f172" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: bXw_6DEbP4cvD1251Yhm.RnfFb6kzmD7 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 67dc0c961896015f4fb8ce107f281104.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: omdj2Cd3Ss74D2MgXp5r8eiXp0L9adNl24_lJSZfxoJNnTg_w7SkrA==
2024-04-18 19:30:29 UTC	6396	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 77 5b 59 76 18 f8 3d bf 02 82 6b c9 b8 2d 80 ba ef 07 d9 68 86 a2 5e 2c 89 94 5a a4 ea 05 a1 65 14 79 25 a1 9b 02 68 00 54 95 2c d0 ab bc 32 93 71 9c 89 c7 71 e2 8c 93 0f 33 d5 8e 1d c7 5e 49 6c c7 af d8 53 3d b3 96 eb 63 8f 3b 5e 59 c9 78 6a 55 26 ae 74 7e 40 fd 85 d9 af 73 ee b9 2f 00 64 55 3b dd b6 dd 2e ea e2 de f3 dc 67 9f 7d f6 fb 5c fd ca 57 fe 56 a3 f1 95 c6 83 74 7a 7a 3c 1b 1c 8d a7 8d eb c3 a7 c3 d9 60 38 6d 74 1a fe 55 27 bc ea da ae df 6e 84 eb 41 b8 ee 3a 8d fb bb 54 fe 6f 4f 74 85 23 29 7f f5 64 7c 72 7a 32 ed 1c 1e 0f d3 d1 0c 6a 6f f3 c3 7d 7a dd 78 9a 8e d2 c9 60 36 1c 8f 1a d3 c3 c9 f0 64 d6 78 6f 38 7b a6 be ce d2 e7 27 c7 83 59 3a 5d e3 e6 5f a4 93 29 16 7d e1 ac d9 6b 36 bf 3b 1e 8e be d5 78 36 Data Ascii: kw[Yv=k-h^,Zey%hT,2qq3^IlS=c;^YxjU&t~@s/dU;.g}\WVtzz<`8mtU'nA:ToOt#)d\|rz2jo}zx`6dxo8{'Y:]_)}k6;x6
2024-04-18 19:30:29 UTC	1186	IN	Data Raw: 45 de c8 53 f6 01 b2 01 04 44 e1 51 99 0c 00 62 6d 28 49 0d 95 42 43 50 6f 48 74 42 e9 87 da 90 e3 8a 5b 31 30 05 15 e8 cb 56 95 7a 20 c0 9f 59 b4 01 5e c3 73 ec 5a 49 7b ea fa ee ea 7b d9 cb ef 65 a8 ab 99 6f 6a fd 80 a8 ba f6 22 42 25 96 e2 a8 33 32 40 8a 81 b8 b0 d9 16 39 7d 90 45 30 42 1b 4c 95 07 d8 4a 64 d5 21 5e 3a 12 1a 41 a2 7d a8 8f 89 c4 e6 55 11 ad 19 f2 0a 39 0a 6b 8e d6 5c 44 93 3a 24 55 88 59 26 54 95 33 a8 9f bb 1a f0 db e4 3d 84 70 8d 1d ed 3e e4 f2 b9 e6 cd 7d 54 7a bb da d3 4f ac 08 22 e7 90 b3 16 1d fc bc 55 59 3b ef e0 de 66 23 9a 14 d4 d5 b1 6c 92 b1 6d 86 c8 14 28 ff af bc 14 94 db db 35 8e 90 31 e9 0e 9a 71 63 21 4b 5b c1 76 54 56 2c 1a c7 cb 82 ab 43 da 63 27 24 8d 96 da 9e 64 13 74 69 f6 1e ed 1d cf 17 b3 39 19 cd cd 3a 24 13 91 Data Ascii: ESDQbm(IBCPoHtB[10Vz Y^sZI{{eoj"B%32@9}E0BLJd!^:A}U9k\D:$UY&T3=p>}TzO"UY;f#lm(51qc!K[vTV,Cc'$dti9:$
2024-04-18 19:30:29 UTC	16384	IN	Data Raw: c1 f5 88 34 93 62 59 59 19 70 cc 49 1b b0 53 08 1a 07 38 51 41 cb 80 40 fa 57 1e 76 fe 17 06 5e 61 1b 1b 40 fc 1b 28 9e 13 8a 4b a9 dd 42 45 b7 8f 44 ca ae e0 04 ea 99 07 24 b8 2d 76 29 63 91 d1 91 13 bf bd f8 13 cb e2 15 05 48 c7 26 94 dc b1 2a 39 89 d5 c3 6b 14 bb 22 67 94 92 72 33 b4 71 09 de 5e 4f 87 ad 28 af 7f 4f 39 e0 f9 ac 3b b6 c9 3d 82 e3 5a 08 37 c4 c1 b9 83 fe 79 b8 ee be 92 aa 49 d7 8f 4e d0 1e 75 13 b3 69 84 4d 08 a4 46 55 71 0d 8e 87 21 c9 26 f9 65 23 4d 10 90 56 27 b2 58 20 5f 30 e3 cc d9 41 29 91 cf c5 2e c5 f6 82 b6 17 a8 ef bc 8e 19 d5 7a ae ba ac fe 5c ac c2 ae a8 6a f8 5e 19 dd e6 fc 2b 17 33 3f 96 a1 57 24 85 f0 36 99 f9 22 65 e3 62 1a e2 f7 fd 79 10 62 18 46 94 68 8e 82 28 8e 04 82 ce 25 92 20 13 79 0a bc 7f a5 e1 cf 11 d1 0c 3d f8 Data Ascii: 4bYYpIS8QA@Wv^a@(KBED$-v)cH&*9k"gr3q^O(O9;=Z7yINuiMFUq!&e#MV'X _0A).z\j^+3?W$6"ebybFh(% y=
2024-04-18 19:30:29 UTC	16384	IN	Data Raw: b4 4f f8 5c 1b 68 27 a2 d1 19 4d 6f a3 d2 d9 67 67 c4 6e 27 48 88 9e 9f cc 1a b3 71 e3 28 65 5f ab d3 49 da 18 8d 47 1d 9a 21 20 b7 f6 1d 6a 9a d2 e3 4f 65 c7 b9 42 11 f5 00 c0 48 01 b7 95 4e e6 ea 37 66 e9 f1 fa d5 76 13 fe e9 02 a5 51 bc d6 06 39 6e fc f0 d1 07 35 3e 18 6b 7b da 7d d8 3a 6a bb 56 1b 4e 13 d8 a1 ed c3 2e 79 16 ca fe 38 95 3d 01 13 43 91 f0 70 83 5b a4 77 a8 a0 5f 1f e5 df 11 b3 d0 39 1c 8f 66 f4 95 59 b6 43 68 17 59 d5 ee e1 15 d4 39 23 81 de c1 b3 87 57 f1 d5 19 d1 8a e3 ee 2b f6 2f 5a 9f 9d 69 bf 46 a8 75 8c 02 79 17 58 d4 e3 6c 17 ff 64 b6 32 c0 b0 50 2d 62 71 a1 24 fb 67 28 a2 d4 dc 60 be 11 31 11 06 51 62 8c 7e 5c 94 c4 0f 6e 6e 7b 49 18 b6 2c f4 fb 3a 81 9d 34 6d 34 b9 dd 26 e2 cd bb 88 21 8d 1b 6b 4e e8 37 b8 c2 da 8f 2b 5f 0e 04 Data Ascii: O\h'Moggn'Hq(e_IG! jOeBHN7fvQ9n5>k{}:jVN.y8=Cp[w_9fYChY9#W+/ZiFuyXld2P-bq$g(`1Qb~\nn{I,:4m4&!kN7+_
2024-04-18 19:30:29 UTC	13040	IN	Data Raw: ab e8 f6 50 57 6d dc b1 48 d5 46 57 7f 49 aa ea 12 d9 a1 28 e1 1f 21 c2 b7 72 48 c6 94 ce 77 4a f4 e1 fb fd 83 0a 05 bc 70 65 97 14 ed ac 95 7a 9e e3 22 28 7a c3 61 60 64 36 21 18 2d c0 4e 58 89 b8 af 4e ee d5 ab 28 81 c0 37 dc 59 d2 3b 75 77 d2 2a 97 7a e0 97 eb 94 4b 91 cd e5 c4 c4 44 67 95 74 5c 8b ad 9a cb 76 bd 2b 7e db 0f a0 b6 d1 26 19 2a de 89 be 8d a8 99 cb ab e8 45 d1 90 71 f0 d1 56 05 17 68 55 b4 de 32 1b 1e c6 72 80 29 a4 bd 95 52 44 85 7e cb 9f 5e 63 b9 e9 9d 12 45 c3 d4 f6 50 3b 71 52 75 4e 42 e8 79 80 33 79 68 55 64 c8 12 63 a9 8c f2 8c 5d 33 3a 27 74 10 b5 a2 fe 14 38 a9 28 a0 d9 6c 21 ba c2 a9 a8 88 a8 45 83 6c cc e1 9f 04 d1 62 41 6a 62 bc 86 4e 14 99 02 61 37 bd c4 96 97 9d ca 07 14 77 63 77 b7 22 6c df 4e 95 89 f4 08 58 a8 af 59 a3 cb Data Ascii: PWmHFWI(!rHwJpez"(za`d6!-NXN(7Y;uwzKDgt\v+~&EqVhU2r)RD~^cEP;qRuNBy3yhUdc]3:'t8(l!ElbAjbNa7wcw"lNXY
2024-04-18 19:30:29 UTC	3973	IN	Data Raw: cf 58 2d 39 1a c0 dd c3 61 03 f6 95 14 a5 15 88 bc 7a a2 eb b4 90 92 14 2c 41 f2 3e 03 e3 54 5a 3a b3 b6 64 3b 56 81 7a ed ac 08 b1 5a 65 09 f5 9b ae b7 85 42 4d 4f 3c fa 34 f7 e4 69 07 bf cd 1c a0 70 d9 5d d5 69 4a 1a 7e 95 94 92 0a 23 dd ab bb 4f cb 85 95 fb 21 66 b9 b3 82 00 08 7e a4 69 df 5b e4 e5 c8 d1 9e d2 a7 86 75 ae d8 79 55 58 2b 61 57 ad bc a4 66 23 d4 5c 9d 4f 99 9c b1 87 df 46 de 5e d1 d6 56 e4 cf b7 60 56 15 58 0d 5e 8e ad ec 50 e3 d2 2d f1 bb 8a 21 cd 83 5b 91 bf 3a b8 a6 02 65 2c bc ab 90 58 8f 69 25 f9 73 f4 18 bf cd 42 df 6d aa a4 1e 4a 1b 32 02 88 f5 2b aa 44 f5 f2 dc 75 43 ac 30 b8 f6 f6 6e 02 74 84 ff d8 e5 0d 44 b6 90 6f 3d 17 b7 14 81 9b 86 df 2c 2b 36 6d a7 cc bd 8b 42 5e b2 ed 1a ca 22 81 11 f8 f1 e8 6b 98 b5 f2 87 ad 74 9c c4 b3 Data Ascii: X-9az,A>TZ:d;VzZeBMO<4ip]iJ~#O!f~i[uyUX+aWf#\OF^V`VX^P-![:e,Xi%sBmJ2+DuC0ntDo=,+6mB^"kt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49886	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	579	OUT	GET /js/integration/2.0.0/rd-js-integration.min.js?v=1 HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:29 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 9976 Connection: close Date: Thu, 18 Apr 2024 19:30:30 GMT Last-Modified: Wed, 29 Mar 2023 14:01:04 GMT ETag: "a101060a6ec593b54e9c4227f96e2695" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400, must-revalidate Content-Encoding: gzip x-amz-version-id: 3dngmS.4H4nxkAQ1dQ4Zed.bkb2I4WUy Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1869eba6fac634e14dd509dcdf0e4554.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: oREUa10y_jX0PogvEbIgf3nlD1Xzug-79lIeUxo4CkAjwmWKdkU8Lg==
2024-04-18 19:30:29 UTC	9976	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 7d fd 76 db 46 92 ef ff fb 14 14 26 c3 00 66 13 22 65 67 26 01 8d 70 65 59 4e 9c b5 65 1f 49 ce ce 86 66 74 21 b0 49 21 06 01 06 68 e8 23 14 f7 65 ee a3 dc 17 bb 55 d5 dd 40 03 04 25 3b 3b bb 67 7d 7c 24 a0 d1 df 5d 5d f5 ab 8f 6e ed 3f d9 eb 9c be ec 9c 89 40 44 69 d2 f9 f9 a0 d3 ef fc 3b 9f 75 de 06 59 e7 e0 bb ce c1 e0 e0 69 67 f8 cc 1b 0c e1 7f e7 87 b7 e7 bd 01 fc eb d8 1f ce 8f 9c ce 93 fd 7f b9 86 6c a7 b3 5c 96 7e 95 66 cb fc 75 22 f8 22 a3 77 7f 5e 24 21 3e d8 dc 59 63 4e e1 af 37 23 9d d8 49 ec cc 59 47 73 5b 4c b2 a9 93 71 51 64 49 07 9f 5d 7e bb 4a 33 91 8f b0 48 ea 63 92 bf 8e bc 8c c5 de de 90 a9 8f de 7a b3 19 a9 42 1c 0b 85 41 1c db a9 2e cb 52 56 3d 27 0e bc c4 fe de a0 4a db a8 a2 89 bb f4 39 4b dc d0 17 Data Ascii: }vF&f"eg&peYNeIft!I!h#eU@%;;g}\|$]]n?@Di;uYigl\~fu""w^$!>YcN7#IYGs[LqQdI]~J3HczBA.RV='J9K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49889	104.26.10.91	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	414	OUT	GET /public_api/banner/pop/vXME11817141.html?t=1&m=0&c=1,705,326,596,201 HTTP/1.1 Host: cdn.privacytools.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:28 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:28 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2678400 X-Robots-Tag: noindex CF-Cache-Status: HIT Age: 11917 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0GP553X6%2Bi48eX3ORrGSjcUOY%2FnTI6LLvutfROEaQkuu0KLKjpHy5AiesfPgLaj4uPNEprAH5V3jHwz%2FU21KvmG4N6J4OOr2bCi7HqoEi5Faea0FfY%2BUi0NGhq8%2Bggm%2BWG4dOpS9IKSX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000 Server: cloudflare CF-RAY: 876711d298a76776-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 19:30:28 UTC	646	IN	Data Raw: 31 65 39 30 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 23 6f 76 5f 7a 33 34 39 38 34 30 33 30 30 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 39 39 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 1e90<style type="text/css"> #ov_z349840300 { display:none; position: fixed; left: 0px; top: 0px; width: 100%; height: 100%; text-align: center; z-index: 99999999; background-col
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 3a 3a 61 66 74 65 72 2c 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 3a 3a 62 65 66 6f 72 65 2c 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 20 2a 2c 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 20 2a 3a 3a 61 66 74 65 72 2c 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 20 2a 3a 3a 62 65 66 6f 72 65 20 7b 0a Data Ascii: rtant; -webkit-box-sizing: border-box;box-sizing: border-box;-webkit-font-smoothing: antialiased; } #dp-preferences::after, #dp-preferences::before, #dp-preferences , #dp-preferences ::after, #dp-preferences *::before {
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 74 61 62 2d 69 74 65 6d 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 20 38 70 78 20 30 70 78 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 30 45 30 45 30 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 70 78 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 73 65 6c 65 63 74 65 64 Data Ascii: idth: 100%; height: 24px; display: flex; } .dp-tab-item { border-radius: 8px 8px 0px 0px; background-color: #E0E0E0; margin-right: 2px; width: 100%; padding-top: 5px; } .dp-selected
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 0a 0a 20 20 20 20 2e 64 70 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 38 45 37 45 37 3b 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 67 72 6f 75 70 2d 63 6f 6f 6b 69 65 2d 61 63 74 69 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 Data Ascii: .dp-cookie-content { border-bottom: 1px solid #E8E7E7; overflow: auto; max-height: 230px; padding-right: 25px; margin-bottom: 30px; } .dp-group-cookie-action { display: flex; height: 3
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 6f 6c 69 63 69 65 73 20 7b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 43 6f 75 72 69 65 72 20 6e 65 77 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 64 70 2d 70 72 65 66 65 72 65 6e 63 65 73 2d 66 6f 6f 74 65 72 20 2e 70 6f 6c 69 63 69 65 73 20 61 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f Data Ascii: ferences-footer .policies { text-align: left; padding: 12px; font-size: 1.2em; font-family: "Courier new", sans-serif; width:100%; } #dp-preferences-footer .policies a { font-size: 0.8em; fo
2024-04-18 19:30:28 UTC	1369	IN	Data Raw: 2d 73 77 69 74 63 68 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 70 78 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 54 68 65 20 73 6c 69 64 65 72 20 2a 2f 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 20 7b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 63 75 Data Ascii: -switch input { opacity: 0; width: 0; height: 0; } .dp-slider-text { padding-top: 2px; text-align: right; font-weight: bold; } /* The slider */ .dp-slider { position: absolute; cu
2024-04-18 19:30:28 UTC	341	IN	Data Raw: 64 65 64 20 73 6c 69 64 65 72 73 20 2a 2f 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 2e 72 6f 75 6e 64 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 64 70 2d 73 6c 69 64 65 72 2e 72 6f 75 6e 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 32 36 32 36 34 41 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 7d 0a 20 20 Data Ascii: ded sliders */ .dp-slider.round { border-radius: 8px; } .dp-slider.round:before { border-radius: 50%; height: 18px; width: 18px; border-color: #26264A; border-width: 2px; border-style: solid; }
2024-04-18 19:30:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49888	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	360	OUT	GET /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:29 UTC	129	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 19:30:28 GMT Content-Type: / Transfer-Encoding: chunked Connection: close
2024-04-18 19:30:29 UTC	2371	IN	Data Raw: 39 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 0a 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 0a 20 20 20 20 20 20 7d 29 3b 20 76 61 72 20 66 20 3d 20 64 Data Ascii: 937<!DOCTYPE html><html><head> <meta charset="UTF-8"> ... Google Tag Manager --> <script>(function (w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49890	104.26.10.199	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:28 UTC	526	OUT	GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468625&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:29 UTC	817	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:29 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate vary: Origin x-request-id: 52bef90c-0ad2-492a-a3e9-c058a4de630f etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.021956 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MISM%2BQMO4c7PxQCfhkLMkeNKw1fTeQ4dPd40NUqDbm5Xf3DqHdHnP3hgVoeKkwXZ0hz7XTpDlwSugn2atmr0ULQV8TKjI7LtYVxdCtPcacFeGAji%2BO7y76VSKkBpgvYsKK9id%2F0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876711d308d7adb3-ATL
2024-04-18 19:30:29 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:30:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49892	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:29 UTC	1021	OUT	GET /wp-content/uploads/2023/07/cropped-favicon_questor-32x32.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D
2024-04-18 19:30:29 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:29 GMT Content-Type: image/png Content-Length: 982 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-3d6" Accept-Ranges: bytes
2024-04-18 19:30:29 UTC	982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 88 49 44 41 54 58 85 ed 97 4d 6c 54 55 14 c7 7f e7 75 3a 56 69 48 ad 88 f3 f1 da 50 6a c6 85 09 11 52 63 13 34 18 22 d5 da 40 67 74 25 f8 99 34 46 57 84 85 2b 43 ba d0 a8 1b 0c 89 0b 23 c6 85 c4 88 31 9a 19 5a 30 16 02 28 82 90 46 09 89 c9 04 89 21 76 f2 66 06 1a 20 e5 43 3b ca cc 3b 2e 3a 0d 9d 37 77 3e 1e 62 ba f1 24 6f 73 ee ff 9c f3 7b f7 9d 7b e7 8c 00 16 8b 68 8b 5a 1c 20 70 2b 41 7d 9d 41 f6 ac bd b7 ad 55 08 fe 7a ed c6 f5 27 8f 4c bb b7 0a 20 34 b9 0b 4e dc 0e b5 08 cf 0b 0c 02 0f 01 1d e5 a5 22 f0 1b 70 54 95 3d 07 2f 14 8e be 78 e2 e2 ed 03 98 1a 8e 76 04 2d 79 4b 60 04 08 36 Data Ascii: PNGIHDR szzpHYs+IDATXMlTUu:ViHPjRc4"@gt%4FW+C#1Z0(F!vf C;;.:7w>b$os{{hZ p+A}AUz'L 4N"pT=/xv-yK`6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49898	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:30 UTC	691	OUT	GET /popup/show.json?account_id=703230&uniq=_n6fyeulem&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:30 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:30:30 GMT Connection: close
2024-04-18 19:30:30 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49900	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:30 UTC	641	OUT	GET / HTTP/1.1 Host: www.questor.net.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:31 UTC	207	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 18 Apr 2024 19:30:31 GMT Content-Length: 0 Connection: close Location: https://www.questor.com.br/questor-zen/ Strict-Transport-Security: max-age=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49901	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:30 UTC	481	OUT	GET /popup/show.json?account_id=703230&uniq=_n6fyeulem&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:31 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:30:31 GMT Connection: close
2024-04-18 19:30:31 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49903	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:31 UTC	1326	OUT	GET /questor-zen/ HTTP/1.1 Host: www.questor.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:32 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.17 Link: <https://www.questor.com.br/wp-json/>; rel="https://api.w.org/" Link: <https://www.questor.com.br/wp-json/wp/v2/pages/15279>; rel="alternate"; type="application/json" Link: <https://www.questor.com.br/?p=15279>; rel=shortlink
2024-04-18 19:30:32 UTC	2405	IN	Data Raw: 39 35 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 Data Ascii: 95e<!doctype html><html lang="pt-BR"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='index, follow, max-ima
2024-04-18 19:30:32 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 22 7d 2c 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 31 2f 5a 65 6e 2d 4e 6f 76 61 2d 4d 61 72 63 61 2d 30 32 2d 65 31 36 37 33 35 32 32 34 34 31 34 39 36 2d 32 37 32 78 33 30 30 2e 70 6e 67 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 33 2d 30 37 2d 31 39 54 31 31 3a 31 30 3a 31 35 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 31 35 54 31 38 3a 35 39 3a 30 36 2b 30 30 3a 30 30 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d Data Ascii: aec"},"thumbnailUrl":"https://www.questor.com.br/wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png","datePublished":"2023-07-19T11:10:15+00:00","dateModified":"2024-04-15T18:59:06+00:00","breadcrumb":{"@id":"https://www.questor.com
2024-04-18 19:30:32 UTC	2694	IN	Data Raw: 61 37 66 0d 0a 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d Data Ascii: a7fttps:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.questor.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=
2024-04-18 19:30:32 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 2c 22 66 6c 61 67 22 21 3d 3d 74 26 26 28 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 29 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 6e 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 6e 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: aecupports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady=!1,n.readyCallback=function(){
2024-04-18 19:30:32 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 Data Ascii: aecadient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,4
2024-04-18 19:30:32 UTC	1405	IN	Data Raw: 35 37 36 0d 0a 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 Data Ascii: 576 .is-layout-grid{display: grid;}body .is-layout-grid > *{margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-pos
2024-04-18 19:30:32 UTC	1201	IN	Data Raw: 34 61 61 0d 0a 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 Data Ascii: 4aayan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(
2024-04-18 19:30:32 UTC	1405	IN	Data Raw: 35 37 36 0d 0a 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 Data Ascii: 576der-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !importa
2024-04-18 19:30:32 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 Data Ascii: 1000--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-viv
2024-04-18 19:30:32 UTC	2697	IN	Data Raw: 61 38 32 0d 0a 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 63 73 73 2f 63 75 73 74 6f 6d 2d 66 72 6f 6e 74 65 6e 64 2d 6c 69 74 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 37 31 30 38 34 37 35 32 36 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 77 69 70 65 72 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 73 77 69 70 65 72 2f 63 73 73 2f 73 77 69 70 Data Ascii: a82uestor.com.br/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1710847526' type='text/css' media='all' /><link rel='stylesheet' id='swiper-css' href='https://www.questor.com.br/wp-content/plugins/elementor/assets/lib/swiper/css/swip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49905	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:33 UTC	1282	OUT	GET /wp-content/uploads/elementor/css/post-15279.css?ver=1713207547 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:33 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:33 GMT Content-Type: text/css Content-Length: 34939 Connection: close Last-Modified: Mon, 15 Apr 2024 18:59:07 GMT ETag: "661d78fb-887b" Accept-Ranges: bytes
2024-04-18 19:30:33 UTC	4096	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 32 38 34 33 61 31 34 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 37 34 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 32 38 34 33 61 31 34 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 Data Ascii: .elementor-15279 .elementor-element.elementor-element-2843a14 > .elementor-container{max-width:1174px;}.elementor-15279 .elementor-element.elementor-element-2843a14 > .elementor-container > .elementor-column > .elementor-widget-wrap{align-content:center;a
2024-04-18 19:30:33 UTC	4096	IN	Data Raw: 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 37 38 33 66 38 63 30 37 20 2e 69 63 6f 6e 2d 6d 61 69 6e 20 69 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 37 38 33 66 38 63 30 37 20 2e 69 63 6f 6e 2d 6d 61 69 6e 20 73 70 61 6e 3a 62 65 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e Data Ascii: margin:0px 0px 0px 0px;}.elementor-15279 .elementor-element.elementor-element-783f8c07 .icon-main i, .elementor-15279 .elementor-element.elementor-element-783f8c07 .icon-main span:before{font-size:50px;}.elementor-15279 .elementor-element.elementor-elemen
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 31 32 30 61 36 35 64 34 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 76 65 72 6c 61 79 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 30 2e 33 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 33 73 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 36 33 36 31 61 34 34 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 20 3e Data Ascii: mentor-element.elementor-element-120a65d4 > .elementor-background-overlay{transition:background 0.3s, border-radius 0.3s, opacity 0.3s;}.elementor-15279 .elementor-element.elementor-element-46361a44:not(.elementor-motion-effects-element-type-background) >
2024-04-18 19:30:34 UTC	1692	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 33 42 34 33 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 62 62 62 34 36 32 61 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 30 2e 33 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 33 73 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 33 30 70 78 20 31 35 70 78 20 33 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 Data Ascii: ground-color:#393B43;}.elementor-15279 .elementor-element.elementor-element-3bbb462a > .elementor-element-populated{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;padding:15px 30px 15px 30px;}.elementor-15279 .elementor-eleme
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 72 2d 65 6c 65 6d 65 6e 74 2d 35 31 31 34 30 37 61 61 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 6d 6f 6e 74 73 65 72 72 61 74 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 35 31 31 34 30 37 61 61 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a Data Ascii: r-element-511407aa .elementor-heading-title{color:#FFFFFF;font-family:"montserrat", Sans-serif;font-weight:bold;text-shadow:0px 0px 10px rgba(0, 0, 0, 0);}.elementor-15279 .elementor-element.elementor-element-511407aa > .elementor-widget-container{margin:
2024-04-18 19:30:34 UTC	1496	IN	Data Raw: 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 65 30 31 31 36 30 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 65 30 31 31 36 30 34 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 Data Ascii: -top:30px;margin-bottom:0px;}.elementor-15279 .elementor-element.elementor-element-e011604 .elementor-button{background-color:var( --e-global-color-primary );}.elementor-15279 .elementor-element.elementor-element-e011604 > .elementor-widget-container{marg
2024-04-18 19:30:34 UTC	1398	IN	Data Raw: 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 30 61 64 61 63 30 31 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 31 25 20 30 25 20 30 25 20 30 25 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 61 31 37 32 34 62 38 7b 2d 2d 64 69 76 69 64 65 72 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 2d 2d 64 69 76 69 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 33 42 34 33 3b 2d 2d 64 69 76 69 64 65 72 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 Data Ascii: ;}.elementor-15279 .elementor-element.elementor-element-0adac01 > .elementor-widget-container{padding:01% 0% 0% 0%;}.elementor-15279 .elementor-element.elementor-element-a1724b8{--divider-border-style:solid;--divider-color:#393B43;--divider-border-width:1
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 66 33 33 61 37 62 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 20 32 30 70 78 20 32 30 70 78 20 32 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 66 33 33 61 37 62 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 20 30 2e 33 73 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 30 2e 33 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 33 73 3b 70 61 64 64 69 6e 67 3a 30 33 25 20 30 25 20 30 25 20 Data Ascii: ment.elementor-element-4f33a7b > .elementor-background-overlay{border-radius:20px 20px 20px 20px;}.elementor-15279 .elementor-element.elementor-element-4f33a7b{transition:background 0.3s, border 0.3s, border-radius 0.3s, box-shadow 0.3s;padding:03% 0% 0%
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 39 65 61 62 34 32 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 32 30 70 78 20 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 35 32 37 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 65 33 36 34 65 33 7b 6d Data Ascii: --e-global-color-text );background-color:#FFFFFF;}.elementor-15279 .elementor-element.elementor-element-49eab42 > .elementor-widget-container{margin:0px 0px 20px 0px;padding:15px 0px 0px 0px;}.elementor-15279 .elementor-element.elementor-element-4e364e3{m
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 65 6c 65 6d 65 6e 74 2d 31 61 65 66 63 64 33 37 7b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 73 2d 73 70 61 63 69 6e 67 3a 32 30 70 78 3b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2d 70 61 64 64 69 6e 67 3a 33 30 70 78 3b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2d 69 6e 61 63 74 69 76 65 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2d 61 63 74 69 76 65 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 2d 2d 65 2d 66 6f 72 6d 2d 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2d 63 6f 6d 70 6c 65 74 65 64 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f Data Ascii: element-1aefcd37{--e-form-steps-indicators-spacing:20px;--e-form-steps-indicator-padding:30px;--e-form-steps-indicator-inactive-secondary-color:#ffffff;--e-form-steps-indicator-active-secondary-color:#ffffff;--e-form-steps-indicator-completed-secondary-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49906	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:33 UTC	1299	OUT	GET /wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1710847529 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:34 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:33 GMT Content-Type: text/css Content-Length: 9888 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:29 GMT ETag: "65f97629-26a0" Accept-Ranges: bytes
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 2d 6c 61 79 6f 75 74 2d 69 6e 6c 69 6e 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 73 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 73 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: .elementor-widget.elementor-icon-list--layout-inline .elementor-widget-container{overflow:hidden}.elementor-widget .elementor-icon-list-items.elementor-inline-items{margin-right:-8px;margin-left:-8px}.elementor-widget .elementor-icon-list-items.elementor-
2024-04-18 19:30:34 UTC	2894	IN	Data Raw: 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 61 70 74 6f 70 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 20 61 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 61 70 74 6f 70 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 61 70 74 6f 70 2d 61 6c 69 67 6e 2d 63 65 6e Data Ascii: ntor-icon-list-item,.elementor-widget.elementor-laptop-align-center .elementor-icon-list-item a{justify-content:center}.elementor-widget.elementor-laptop-align-center .elementor-icon-list-item:after{margin:auto}.elementor-widget.elementor-laptop-align-cen
2024-04-18 19:30:34 UTC	2796	IN	Data Raw: 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 73 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 6c 65 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 20 61 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 65 6c Data Ascii: align-left .elementor-inline-items{justify-content:flex-start}.elementor-widget.elementor-tablet-align-right .elementor-icon-list-item,.elementor-widget.elementor-tablet-align-right .elementor-icon-list-item a{justify-content:flex-end;text-align:right}.el
2024-04-18 19:30:34 UTC	102	IN	Data Raw: 72 7b 6c 65 66 74 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 62 69 6c 65 2d 61 6c 69 67 6e 2d 6c 65 66 74 29 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 3a 61 66 74 65 72 7b 72 69 67 68 74 3a 30 7d 7d Data Ascii: r{left:0}.elementor-widget:not(.elementor-mobile-align-left) .elementor-icon-list-item:after{right:0}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49907	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:33 UTC	1337	OUT	GET /wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:34 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:33 GMT Content-Type: image/png Content-Length: 40414 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:45 GMT ETag: "658070a9-9dde" Accept-Ranges: bytes
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 01 2c 08 06 00 00 00 0b b2 ec c3 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 7f b0 65 57 75 df f9 59 b7 ba ba ba ba ba ba 7a 34 3d ba f7 bd bc a7 52 29 4c 8f 4a 45 b0 ac 51 18 0d 06 82 01 63 59 06 d3 97 60 9b df d8 fd 8c 0d 66 64 1b 63 42 08 51 54 2e 85 50 04 13 8c 31 c6 0e 7e cd 6f 82 c1 f0 da 06 1b c6 c1 b2 8c 65 2c 13 05 13 45 d6 30 8a 46 a3 d1 7b 79 ef 5e 8d a6 47 d5 a5 ea ea ea ea ba 6b fe 38 3f ee be eb ae b5 cf be b7 bb 05 99 ca ea 7a 7d cf d9 7b ed ef 5a fb d7 da 6b ef b3 cf 3e 42 45 3d 60 52 ff 62 ae 3d 9a 24 e9 a2 b0 06 c3 fb c5 f0 5a 6c 1b 1e 61 d8 eb 88 3f 0a eb ca 8f 27 6b 51 dc 45 30 ec b5 a5 1c df c5 62 78 f5 97 de 5b 8c Data Ascii: PNGIHDR,pHYs+ IDATxeWuYz4=R)LJEQcY`fdcBQT.P1~oe,E0F{y^Gk8?z}{Zk>BE=`Rb=$Zla?'kQE0bx[
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 06 de 0c fc 49 bd e9 cb ea 9b 92 67 60 19 0f d7 7b c0 61 d0 b7 02 3f 03 32 48 e6 1b 17 80 ef 00 5f 55 d5 3f 17 91 07 80 9d da 43 c8 95 47 2b 6f 34 5c 43 90 23 c0 d5 c0 0d 28 3f 84 f0 7c e0 0a 47 c7 96 54 f5 41 84 77 a1 f2 d9 c1 a9 ed 0b 41 b9 cc e4 c5 cb fb de c6 60 00 bc 07 78 45 b5 bd 9e 07 44 79 03 22 f7 ac 54 7b 5e a2 f2 8e 0c 6d 6e 60 5b c4 e3 58 96 16 f5 6c fe 8b a5 74 0d 04 e2 c2 2e ad b0 28 2e c5 20 b9 4f 29 e7 f1 94 36 16 0a c2 72 8d 31 d2 c5 86 7b f9 61 f7 c4 e0 5a 81 8f 23 3c 13 98 a0 7c 0c e1 ed 2b 9b a3 c7 33 fa 66 1b fb 78 b8 be 9f aa 63 bd 8b ca 4b 68 e8 5b c0 e7 eb b5 89 fb 1c 5d 8b f0 99 af 27 00 c6 c3 f5 03 c0 f3 80 57 aa f2 63 22 1c 69 23 d3 c5 92 6a 3e 74 8f c2 db 06 a7 b6 ef 5e 36 9f 7b 27 06 3d d0 97 29 7c 50 44 06 c0 93 0a ef 00 fd Data Ascii: Ig`{a?2H_U?CG+o4\C#(?\|GTAwA`xEDy"T{^mn`[Xlt.(. O)6r1{aZ#<\|+3fxcKh[]'Wc"i#j>t^6{'=)\|PD
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 50 38 a8 aa 6f a9 3b c9 6f ae 6e 8e 1f 0d d2 a6 f2 bb 0c 96 57 0e 51 43 ca 55 9a cd 57 0f 60 74 7c fd 1a e0 2b 28 cf 6b 1e c2 26 db c3 4e 02 6f e9 6f ed 9c 0b 74 f4 46 dd 96 fa 5b 3b 08 fb cf 14 7b 00 00 20 00 49 44 41 54 dc 03 0c 81 c7 d1 f6 ad 5d 04 0e 0b 6c d6 8f 5e f7 99 7c da f2 b1 ba b7 71 83 ad ed 89 a2 bf d7 3c cf 9d 3e 01 e2 d9 a3 e9 3b 32 5e bd 59 4a eb 28 6d b7 bd 95 6a 41 f5 7d 54 e7 b3 5e 87 ea ab 9c b4 e9 b5 a7 3b cc e7 2f 22 5b 96 de a8 6f 75 b5 bc 29 4e c4 e3 95 89 e7 c9 78 7a 44 6d d6 e2 e4 f2 3c 53 4e a5 46 c0 33 28 91 5b d4 4b c2 72 05 6e 71 ec 75 14 17 61 46 6e 61 d6 7d 14 78 1d 70 8d 28 bb aa fa e1 20 ad 67 00 a1 bb 83 5a bd 73 c6 d5 33 8e 73 9d 6f 3c 5c 3f 26 e8 57 54 f5 e9 ed d1 5f d3 2f d3 7d 16 f4 cd f5 e1 40 8b 96 7f 5b 6f f5 6b Data Ascii: P8o;onWQCUW`t\|+(k&NootF[;{ IDAT]l^\|q<>;2^YJ(mjA}T^;/"[ou)NxzDm<SNF3([KrnquaFna}xp( gZs3so<\?&WT_/}@[ok
2024-04-18 19:30:34 UTC	1692	IN	Data Raw: 52 9d 49 92 d6 4d 2e 2f ed af a2 b7 50 7d f8 89 c4 94 9d 17 d5 bb 0a 31 a2 72 cb c5 25 f1 fa 38 f0 84 08 07 98 7f ed 60 92 f0 a7 d7 25 53 02 cb 1f 75 5e 0f df 76 e0 34 ce 4b 9b cb bb ad 0b af 6f d8 b8 9c f1 70 65 36 91 a1 9b 99 dc 7b ee 5d f4 e7 f1 5b ea 72 c1 52 39 11 86 a7 8f 35 34 13 a9 0e 0e 5a ad 6e e5 61 27 5d ee 3e d2 d1 b3 f0 56 8f af 28 ec 53 f8 e9 64 c3 97 e7 5d 45 f9 9e a9 30 51 b9 53 a5 de e6 5d 6f 53 9f 7e 9c 49 9f ad aa 3f 3b 1e b6 a7 08 4c 54 78 00 78 83 a2 e7 eb bc 27 4f 71 ea 09 4b bd b5 5d d1 af 29 f2 ce e4 44 77 c6 c3 f5 ab 40 ef a8 5e d9 af 0f 34 6c f7 9b 29 a0 5f ef 6f 6d 37 d3 c1 ae bc 34 d7 f5 61 4b f2 ea f6 79 90 68 b3 6d e5 21 15 b9 bf 04 c3 09 2b 89 4b da 84 9c 46 f5 4c ed 01 5d 95 c4 61 f8 53 3c fb 97 93 95 fe 5a f9 5e 9e ac 07 Data Ascii: RIM./P}1r%8`%Su^v4Kope6{][rR954Zna']>V(Sd]E0QS]oS~I?;LTxx'OqK])Dw@^4l)_om74aKyhm!+KFL]aS<Z^
2024-04-18 19:30:34 UTC	2796	IN	Data Raw: fc 02 7e 9b af 48 9e 97 87 12 23 95 1b d0 73 b2 72 ce 42 56 90 e7 2e d9 fb d0 4d 0d 28 c7 97 c6 e5 46 94 92 d1 ce f7 40 1a 37 5c 67 78 73 38 39 f2 ca a0 13 a3 bf b5 fd 84 2a b7 d5 b7 ab c0 47 aa f3 30 e6 d2 78 23 51 8b 37 d8 da 9e a0 7c 72 f6 e9 0b 4d 4f 48 02 a6 97 53 de 7a 31 b4 fd 84 43 ed 59 a8 d6 9e 45 b2 e6 a1 b3 69 a6 5e 88 02 7a 27 d5 7e 9a 68 f4 6d f3 32 1e ae ef 13 78 bf aa 5e d3 7e 3c 6a aa ea e7 98 fd 2e 8f e7 6e db 36 e9 f1 59 3d bc 81 70 be 9e 66 97 77 72 5e ce 22 53 90 12 8c ae b6 e3 95 43 4e a6 87 91 b6 23 cf 21 88 30 22 2f c4 e5 89 0a de 13 12 51 2e 23 a9 1c 3b 52 79 05 dd 35 b2 e4 5c 52 9b a6 6d 38 a2 3c 51 f7 83 43 5a 2d 12 46 16 dd c3 b0 72 ac 1e 1e bf 8b 21 c2 29 55 fe b0 36 68 cf 03 de 33 9a 9f ca a4 18 76 14 9c 00 28 fa 75 44 1e 4a Data Ascii: ~H#srBV.M(F@7\gxs89*G0x#Q7\|rMOHSz1CYEi^z'~hm2x^~<j.n6Y=pfwr^"SCN#!0"/Q.#;Ry5\Rm8<QCZ-Fr!)U6h3v(uDJ
2024-04-18 19:30:34 UTC	2796	IN	Data Raw: a9 e3 d2 4f 38 54 e7 7f 34 f7 d5 f6 f2 c6 5c 54 9e 47 b2 fb cb a4 6d 17 66 a7 3b 54 4f 03 bf 21 f0 7d aa f2 1b f5 d1 8d 5e e3 f6 3a 7c 69 5d a6 e5 e4 0d 5a 5e 99 59 b9 73 75 25 c8 73 a4 3a 68 fb 5b 2b 9b a3 b3 46 86 a7 77 ae 0e 6d be 3c bd bc 3c 95 f2 58 ec 2e 59 39 bd 3d 79 5e 1d e5 fa eb 0c ae fd e4 62 d7 a8 60 85 17 5b aa cc bd e7 ce 46 de 81 0d 8b bc 93 39 57 ab 22 bd 1f e4 71 44 8e 6a f5 98 d4 6e 6c f2 f4 f2 0a d7 c3 b7 46 d5 ea 65 2b c5 e6 c3 1b 7d 27 00 83 53 db 50 ed 96 7c db 78 b8 f6 21 55 5e 27 d5 07 a3 d6 9a 75 8f d6 c3 80 76 fb 78 4a cd da 88 36 8f 72 a5 7d aa 4b ea 81 34 87 10 b5 25 56 25 9b 4e 5c 54 77 11 f9 84 28 9b 08 0f f7 4f ed 78 5e a8 6d 33 5e 9c bd f6 1a 6b e4 cd 76 8d b4 91 d7 d7 ec 40 7d 5e f5 16 33 7f e6 f0 a4 e9 bc 3a b1 b8 51 1e Data Ascii: O8T4\TGmf;TO!}^:\|i]Z^Ysu%s:h[+Fwm<<X.Y9=y^b`[F9W"qDjnlFe+}'SP\|x!U^'uvxJ6r}K4%V%N\Tw(Ox^m3^kv@}^3:Q
2024-04-18 19:30:34 UTC	2796	IN	Data Raw: ba e6 2d de 6a 85 a4 35 36 8f 0b fc 4f fd ad ed 47 92 2c 06 7a ac ed 57 65 50 7f fd ef 1a 55 fd ef 05 b9 ae 3e 7f f4 4a 85 23 02 bd 76 8d 56 a6 b2 aa 73 4c 04 94 07 11 fd 91 c1 d6 ce c3 4e 3d b5 b2 f0 eb 1d a0 b7 b7 31 b8 16 f4 af 15 39 24 f0 e6 95 cd d1 6f 19 be a8 3d e6 b0 2f f6 f7 52 62 7d 2f c8 04 e8 79 1e 88 a5 c8 58 d8 e9 48 64 20 d2 f8 5c c6 4a c2 22 59 39 bd bd 86 e7 1a a1 dd 13 fd 9f 42 e4 a3 a2 9c 55 e1 05 ab 9b a3 6f 66 74 0b 0d d9 78 b8 fe 4c 55 fd 6b 68 37 64 b5 af c9 4f a7 0f ed 71 60 34 bd 77 7a e4 60 bb a0 b9 0b f2 c7 c0 87 80 fb ea 8f 33 59 59 3d e0 55 a0 1f 05 d9 37 3d 66 ac c1 90 e9 e2 69 73 df 68 a0 75 07 96 e9 ab fe ed aa aa ce 58 9d 3b 11 5e 9a 7c 14 bb d5 a3 96 7f 08 78 1d f0 6a 94 1b 11 dd 67 bd 1c ad df f2 4b 4f 40 6b 32 99 1e b5 Data Ascii: -j56OG,zWePU>J#vVsLN=19$o=/Rb}/yXHd \J"Y9BUoftxLUkh7dOq`4wz`3YY=U7=fishuX;^\|xjgKO@k2
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: c6 c8 a6 7a bc dc a8 85 3a 42 dc 88 94 6d 90 51 bc de a7 c5 df c3 58 e4 3f f1 c0 f9 0b 20 fe 63 02 dd c5 d3 0b 89 7e f8 ce 87 af 7f 71 04 03 c0 ee fa fd 77 df 44 c0 4f 00 f8 20 03 b7 c9 ca 75 f3 52 ac 16 ca 32 00 4c 35 22 60 9a 89 c4 96 c6 fa 1b b8 12 43 02 97 7d 11 94 d5 8f de e7 9c ea 1b 81 4e 03 6e 4b 25 19 d5 48 1d 40 38 65 c6 e7 09 78 cf 1d 9f fe e6 57 8d 36 d1 69 51 fe c4 a5 f3 37 13 f0 10 03 ef a6 e9 dd 26 bf 4e c0 fb ef 7c f8 fa 0b 99 fa 03 65 51 79 76 b2 3c 8b 88 a2 47 3b 12 7d 67 75 b1 30 34 cf 53 6b 58 64 0d 2e 13 99 64 8c b8 a7 7c 4f 1e 4f c9 92 ac f0 4c f2 1b 95 f5 14 c0 ee 89 4b e7 5f 4b c0 bf 65 e0 95 04 be 0e a6 1f bc f3 91 eb 57 0c da 48 c6 53 00 bb a7 ee bf fb b5 0c 3c 44 8b df ea d5 4b 83 f6 c9 dc 36 51 e5 72 04 f0 96 3a eb a4 57 3a cd Data Ascii: z:BmQX? c~qwDO uR2L5"`C}NnK%H@8exW6iQ7&N\|eQyv<G;}gu04SkXd.d\|OOLK_KeWHS<DK6Qr:W:
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: 1d 7d ed 85 58 51 b9 ce b7 f2 2c da 6c 67 f4 b0 75 be 95 b7 6f 7d 5d 16 e9 96 e1 ef d5 eb 8d 8d ad bc 46 64 ca 18 44 2f 42 c9 8c f9 5e 9f 78 7d af cb 7a 63 7f 0b ef 43 62 a4 da 74 64 26 f2 ca 32 8d d1 4b 96 f1 8f 60 44 32 44 d8 3d 2f 7d 23 31 32 0e ae 57 96 e9 93 2d 74 87 c0 18 95 d7 2a 3b 84 ce 56 19 92 65 1e 5d 54 96 31 f0 ac a1 ef 43 b3 55 de ae 2e a3 9e 3a c2 e8 09 a9 3b 3b cb 67 c4 09 8d d4 8b e4 d8 c7 b9 46 b4 23 3a 6f d5 7b 94 ef 68 7f 8f a6 9e b1 58 74 3d da 1e bf 4c d9 96 c9 ce a3 cb 1a f3 59 f5 a9 d7 76 5b da 30 c3 7f 17 09 33 02 94 a5 cf e2 8c 38 96 2c ff 91 fc ad ce d3 ba df ea 9c be 1b e9 46 c9 74 08 3e fb f6 91 cc 7b a9 f4 c5 56 67 96 a5 dd 77 02 71 69 46 80 b7 78 de 2d 82 47 4e a4 e7 d9 a3 eb 11 5a 6b 80 8d d4 f3 e8 ad fc 28 32 eb d1 7a d7 Data Ascii: }XQ,lguo}]FdD/B^x}zcCbtd&2K`D2D=/}#12W-t*;Ve]T1CU.:;;gF#:o{hXt=LYv[038,Ft>{VgwqiFx-GNZk(2z
2024-04-18 19:30:34 UTC	4096	IN	Data Raw: c1 d2 d9 92 c3 d2 79 c6 a6 c5 a7 cc a7 f2 49 8b 47 c6 2e 16 d6 7d 2d e5 f0 fa d2 33 90 5e 24 b9 72 58 cb d7 04 48 ad a4 2e e5 1c 0e 44 04 d0 0c bd d6 a4 f5 37 ac 99 f9 47 09 fc 6e 47 8e 55 34 a2 5f 51 20 9d 75 9d 18 44 27 ab c7 b8 56 5b 58 6d ab 53 36 b2 b0 22 18 cf 4e ad b2 2c be a6 8f c6 eb 8a 5e 47 0d bd 19 5a 86 b5 9e 97 b5 52 af 81 bd c1 de 8b 66 32 1d a7 0d c0 32 22 00 c0 bd 17 ef bb 99 81 8f 12 f0 46 a0 ac 8f 69 e1 28 ea e7 e2 b0 13 c0 8c df 63 f0 af 5f bd 7c 22 21 47 e4 58 39 53 2b 7c 6e 2f 08 60 33 5f e1 97 6b 6b 80 68 39 3d 87 e0 8d 03 2b ca b3 30 84 3e 93 a4 4d 66 3b cd ba 3c 07 e0 39 f9 52 04 87 6e c2 6e e7 63 1e bc f7 c2 f1 9b 3a 72 9d 16 79 8a 4c 72 55 54 9d f3 62 af 45 bf 3e c1 1d 97 d2 b0 ad b6 f6 ec 25 9b bf 8a 98 9d 7a a5 6e 24 47 c6 76 Data Ascii: yIG.}-3^$rXH.D7GnGU4_Q uD'V[XmS6"N,^GZRf22"Fi(c_\|"!GX9S+\|n/`3_kkh9=+0>Mf;<9Rnnc:ryLrUTbE>%zn$Gv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49908	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:33 UTC	1304	OUT	GET /wp-content/uploads/2020/09/questor.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:34 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:34 GMT Content-Type: image/png Content-Length: 2116 Connection: close Last-Modified: Mon, 18 Dec 2023 16:18:04 GMT ETag: "658070bc-844" Accept-Ranges: bytes
2024-04-18 19:30:34 UTC	1398	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cc 00 00 00 36 08 06 00 00 00 8b 2b 76 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 07 e6 49 44 41 54 78 da ec 5d 3b 72 e3 46 10 85 54 9b 2f 1c 38 36 55 e5 dc d0 09 04 9e 40 64 a8 48 64 e4 50 e4 09 44 9e 80 54 e8 88 74 a4 50 dc 13 90 3a 81 a8 dc 55 e2 c6 0e 0c 9f 60 dd 2d 37 56 58 68 3e 3d 83 01 40 52 fd aa a6 54 4b 12 40 63 a6 df f4 6f 66 36 8a 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 75 e0 a4 8e 9b fe fd fb af 1d f8 93 42 bb 84 96 40 eb 28 7e 96 41 db 42 7b 84 b6 fa f9 8f bf b6 32 1c 82 0f 45 18 20 0a 92 e4 06 5a cf e3 f2 1d b4 29 10 67 29 c3 22 38 6a c2 90 45 59 90 55 a9 0a 24 ce 18 88 b3 92 e1 11 Data Ascii: PNGIHDR6+vtEXtSoftwareAdobe ImageReadyqe<IDATx];rFT/86U@dHdPDTtP:U`-7VXh>=@RTK@cof6@ @ @ uB@(~AB{2E Z)g)"8jEYU$
2024-04-18 19:30:34 UTC	718	IN	Data Raw: 03 3a 77 31 75 ad 19 d1 aa 61 55 ff ef 6a 58 17 f7 da 7f 3e 71 9e 13 61 28 a8 e7 cc 1c 1d 8a 69 5e 70 e3 19 1d 21 fb 03 49 90 50 d0 30 6b f1 42 16 84 93 41 49 2d 71 52 66 98 6d 6d e8 39 66 6e f6 c1 65 cb c8 a2 2d 5b 7a fe ce e0 2e cd b8 2b 8e 29 c1 31 ab 1a 90 53 3f 74 0b 4d 67 ed 07 be 45 60 9f 4a bf 8b 2f 9d 77 04 1e 93 f4 2d 6f d1 ff eb 79 16 05 25 1d 98 48 43 1b c6 66 91 fd c8 a5 8d a1 83 12 cf 01 db b4 49 0a e6 7e 8d 36 b7 f9 de 99 92 0f 36 d2 50 df 3f 18 5c cb 3b 07 59 be 52 dc 97 b7 b9 81 70 0b 9f 2d 04 ce 84 29 ec 8a 0c 3d 48 4a d2 10 59 d6 e5 81 50 91 86 16 19 ea cc f7 5a a5 7c f4 d9 93 c1 1d 68 95 30 34 b0 2f 3a e2 d0 44 30 68 c8 ef 57 59 99 a5 61 02 fd be 49 ab ac 9c 85 9d 99 4f 06 f7 71 1a c0 1d d3 e9 2a 12 d5 79 a3 9b d7 e2 4b dc af 02 0a db Data Ascii: :w1uaUjX>qa(i^p!IP0kBAI-qRfmm9fne-[z.+)1S?tMgE`J/w-oy%HCfI~66P?\;YRp-)=HJYPZ\|h04/:D0hWYaIOq*yK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49909	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:34 UTC	1324	OUT	GET /wp-content/uploads/2023/07/chatbot-zen-celular-601x520.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: image/png Content-Length: 232881 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-38db1" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 59 00 00 02 08 08 06 00 00 00 5d 2a fb 15 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 6b b0 65 c7 55 26 f8 65 ee 7d 1e f7 fd a8 52 a9 1e 52 a9 54 a5 92 2c 59 6f d9 b2 31 20 3f 68 4c 83 1b 83 87 30 43 cc 74 cc d0 4d 33 41 f7 4c 07 0d 13 d3 30 3c 82 1f 30 7f f8 c3 04 dd 33 dd 01 31 03 3d 13 03 9e 69 08 0c 43 18 1a 1b db d8 58 b6 25 59 b2 6c 49 a5 77 49 aa e7 ad c7 ad aa 7b 6f dd 7b cf 39 7b 67 ce 8f bd 73 9f 3c 59 6b 65 e6 de e7 dc aa 32 43 2a 4a 67 ef cc f5 ca 95 99 6b 7d 37 f7 0b 00 24 8a 22 ad 7f b0 7e e1 b4 53 75 d2 a9 e3 e8 63 64 71 f4 2e 8d 04 6d 33 d7 07 ce 2e 57 8e cb cb d1 72 b6 73 fd a0 e4 72 f2 28 b9 9c 8c 26 f4 9c 7d 94 3c b7 9d f3 35 Data Ascii: PNGIHDRY]pHYs+ IDATxkeU&e}RRT,Yo1 ?hL0CtM3AL0<031=iCX%YlIwI{o{9{gs<Yke2CJgk}7$"~Sucdq.m3.Wrsr(&}<5
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 1d 7e 97 77 12 63 50 b7 3f 4d fb 10 5a 8f 31 32 28 fe 71 c7 c1 e5 ab 33 16 9c 8c 18 1e 2e 1e d4 e9 83 2f 26 36 e1 8f 89 79 20 e8 c6 5d 07 4d 65 8d 33 17 c6 5d 8b be d8 1a bb 8e c6 59 07 2e fd 24 e3 09 25 3b c6 06 aa 3e 46 bf 6b 4b 1d 7e 92 d9 a7 20 46 46 68 52 c6 38 29 64 4f 8c e3 62 03 3b c7 ef 93 eb b6 85 06 22 e4 17 8a 7f dc 09 1e 2a 31 be 0b e9 ac 43 17 f3 bb 13 65 92 b2 27 35 9f 26 ad 3b 66 ad c4 f0 ee e4 38 4c 42 7f 93 3e 8d 5b 26 e5 9f 1b e1 db 71 4b 93 18 da 44 47 9d fa eb 59 6e 06 1b 7c e5 66 b7 8f 2b 4d 01 cf 24 74 c5 d8 31 96 3d 75 01 90 4f b1 6f 01 4e 32 19 b9 49 bc 2e a2 e5 e8 42 a0 92 aa 8b 05 07 9c 1f 63 74 52 a0 8b b3 c3 a7 3b c6 be 50 19 47 67 d3 e4 3e 8e fd 3e c0 cb c9 0e 81 c4 9d 18 8b 71 c7 2f c6 2e 1f cf a4 6d 69 c2 73 a3 ed e7 c6 7a Data Ascii: ~wcP?MZ12(q3./&6y ]Me3]Y.$%;>FkK~ FFhR8)dOb;"*1Ce'5&;f8LB>[&qKDGYn\|f+M$t1=uOoN2I.BctR;PGg>>q/.misz
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 68 30 18 dc 3f 3f 3f 7f 74 76 76 f6 ee 99 99 99 3d 52 ca 65 ad 75 7b 30 18 c8 3c cf a5 52 4a 0a 21 a4 10 42 02 80 10 c2 4d da 23 80 c0 e8 d2 5a 03 5a c3 a4 6d 03 4a 46 da ad 42 c9 b4 40 b9 d0 e3 8b 00 00 20 00 49 44 41 54 8e cb 53 01 0d 8a 97 3b 36 f4 a6 ce d8 6b 01 31 28 a5 aa 7f 25 f8 40 9e e7 c8 f3 5c 39 e7 d5 0e 9d bd 63 67 f8 f2 3c 47 96 65 d0 5a ab f2 58 95 6d 06 68 c1 00 46 03 72 8c 7c 63 53 92 24 10 42 40 4a 89 34 4d 95 94 72 08 4a f3 5c 29 ad 95 69 cb f3 1c 42 08 25 a5 54 52 08 a0 e0 ab c0 a2 d9 85 94 52 aa 72 0c 95 10 42 19 40 5c da 9e d9 e0 0d 80 82 d6 0a c3 31 37 48 78 53 08 b1 dd db de be a0 b5 5e 55 b9 3a 01 e8 d3 02 38 79 e6 cc 99 cb cf 7f fb db ab df fa d6 b7 b6 d7 d6 d7 dd 44 64 97 d8 24 5f 07 04 b8 6b ce e6 f7 ad 45 6a bd 72 6d a1 75 16 Data Ascii: h0???tvv=Reu{0<RJ!BM#ZZmJFB@ IDATS;6k1(%@\9cg<GeZXmhFr\|cS$B@J4MrJ\)iB%TRRrB@\17HxS^U:8yDd$_kEjrmu
2024-04-18 19:30:35 UTC	1692	IN	Data Raw: 57 37 7b 78 e3 f8 71 fc e9 a7 ff 04 f9 a0 87 1f f8 e8 47 71 e4 ae a3 d8 b5 6b 17 36 36 36 b0 b2 b2 82 e9 a9 a9 73 5f f8 c2 17 7e e1 5f ff c2 2f fc f9 fa fa ba bb de 7d bf 31 40 cc 3d 76 4b 6c c2 8c a9 83 d3 c6 d5 c5 82 34 aa ce 97 98 29 bb 28 79 21 7b 7c 79 96 93 1d a2 6b ea 5f d7 66 db 4e 1f af db 67 9f 3c 2a 6e 87 e8 9a f8 35 24 cf 67 5f 0c 20 93 00 90 38 8d 9a f8 67 0b 1a b9 e5 d3 6a 57 4e bd b0 da b5 c5 67 e8 05 71 ae 2c 3e 57 8e fb 67 aa 22 78 25 c3 c3 b5 b9 7a 5c 3a 1f 9f 1d 85 29 3b dc 3a b7 3f 8a 91 27 1d 5a ca 06 7b 00 ed 73 bb ce 96 61 8a 6b 1b 1c 3a 9f bf 6c 5a 8e cf 6e 8f 19 47 ca 47 92 68 b3 7d 6d ec 77 e7 27 37 cf 4c 7f 6c f8 21 9c 3a ed d4 0b 87 46 3b 75 f6 7c 17 bf f1 1b bf d1 79 fc f1 c7 ff f9 c1 83 07 7f 4d 6b 3d ab 94 c2 f9 73 e7 f0 ce Data Ascii: W7{xqGqk666s_~_/}1@=vKl4)(y!{\|yk_fNg<*n5$g_ 8gjWNgq,>Wg"x%z\:);:?'Z{sak:lZnGGh}mw'7Ll!:F;u\|yMk=s
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 18 ea 43 d0 66 81 b8 0e fb 06 a2 49 1d 07 3e 28 27 52 e7 5c 89 01 51 3e 3b 63 16 57 5d b9 21 40 e7 da ed 03 4c 21 80 e1 b3 b7 6e a0 70 eb 7c ba 62 8e 5d 3b 7c 3c ae de 18 10 59 a7 c4 cc 69 af ae 4f 7d ea 53 7b 9e 78 e2 89 7f b7 b8 b8 f8 a3 4a 29 f9 dc b3 cf e2 e9 a7 9f c2 2b 2f bf 84 bf f9 9b bf c5 e5 2b eb b8 ba bd 5d ec 70 94 00 2b c1 f0 1b 7c 1a 1a 32 6d 61 6e 69 37 76 dd 7e 27 66 17 16 d1 e9 4e 21 49 44 01 9c 4a f0 24 80 0a 90 08 69 8e 05 a4 ac f6 92 0a 3a 29 d1 12 12 50 79 79 d3 b4 1c 79 d5 b0 4c 12 5c bd 74 11 af 3c fd 55 0c b2 fe f0 3d 50 28 c0 c5 f0 9e af a2 ae fa 93 4e 57 77 70 0d eb 2b 80 51 18 64 7f 7a 87 fa a3 75 b8 9b 03 a8 dc f0 96 c0 04 ba 02 6b e6 a5 a3 32 4d 86 9f d2 51 ba 02 32 06 d0 19 f9 e6 5e a5 4a a3 05 c0 0c 8f 01 a5 66 f7 ca a5 1b Data Ascii: CfI>('R\Q>;cW]!@L!np\|b];\|<YiO}S{xJ)+/+]p+\|2mani7v~'fN!IDJ$i:)PyyyL\t<U=P(NWwp+Qdzuk2MQ2^Jf
2024-04-18 19:30:35 UTC	98	IN	Data Raw: 78 f8 c1 07 f1 dc d3 4f e1 ea d5 8d aa 87 c2 01 13 16 f2 42 01 a0 46 dd 3d dc c7 29 7b 63 bd aa 40 63 f4 8d f5 e6 5d 4f 56 97 87 3a 84 ae 3e 21 24 a4 04 84 ac de 05 26 aa d7 28 48 a0 a4 29 78 64 a9 57 96 6f b1 97 10 22 a9 c0 51 01 7a 0a d0 2a a5 a8 be ff 38 d4 2f 46 66 99 d9 65 b2 2f eb 8d de Data Ascii: xOBF=){c@c]OV:>!$&(H)xdWo"Qz*8/Ffe/
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 63 65 fa 8a e1 43 01 c2 78 63 f4 86 78 d3 27 5b ce f0 c6 79 51 dd cb 75 e4 de 07 20 92 16 ce 5f 5c c5 c9 53 a7 b1 76 75 03 ef 9c 3e 8d 73 17 2e e0 f2 95 2b b8 7a 75 13 69 ab 85 b5 ab 9b 38 75 66 05 27 cf 9e c3 e6 e6 36 96 96 96 b0 bc b8 80 e5 c5 45 74 d2 04 df 7e e1 18 7a 79 0e 2d 80 d3 2b 2b 38 79 fa 0c 8e bf fd 36 2e af ad a1 d3 ed e2 d9 e7 bf 8d 8d ed 2d 9c 3d 7f 1e 17 2e 5e c4 da 95 35 98 f7 86 4d cd cd 43 29 85 2b 17 ce 55 7e c9 cb 3f 0a 76 2d 2d a2 33 35 83 77 de 79 07 53 dd 0e ee b9 fb 6e cc cf 2f 60 6d 7d 6d fe f8 9b c7 8f bd fe fa eb 6f 83 df 89 92 55 f7 af fd b5 d7 b9 bb 7e 4d 71 63 02 c5 63 f3 da eb db 9c bb 79 48 39 75 6e 3c b2 ed a0 ec a2 72 83 1d f3 39 79 46 b7 f9 b5 ed b3 e5 ba 32 b8 3c c2 15 2e 77 b9 75 b6 3d 5c 0c b7 6d 30 be b2 ed f7 e9 Data Ascii: ceCxcx'[yQu _\Svu>s.+zui8uf'6Et~zy-++8y6.-=.^5MC)+U~?v--35wySn/`m}moU~MqccyH9un<r9yF2<.wu=\m0
2024-04-18 19:30:35 UTC	2894	IN	Data Raw: 5c 13 8a 83 5c 0c e3 92 2d d5 17 2e e6 86 f4 85 72 64 48 0e d5 4e d9 cd c9 89 29 6e be a1 72 88 4b 4f d9 13 ca 59 ee 31 07 d4 42 b8 a5 ae df 5c db ed 39 43 e5 7b 80 1e a3 11 bb 52 fb 24 c2 10 6f 22 02 ef 40 6e 72 53 60 87 1b 88 18 a7 f8 da b8 c9 e8 f2 fb 40 a1 4f 2f 37 d1 6c 99 dc 24 e4 6c f5 d9 c0 4d 3c 4e 76 0c 02 a7 16 3d 9c 5f 6e 0e 70 01 22 c6 46 d7 3f 94 ad dc 1c e5 16 28 37 87 28 dd 9c fd a6 5e e6 79 3e df 6a b5 da 52 0a 6c 5d dd c6 d6 e6 16 ae 5c 59 2b 80 41 f9 92 49 51 3e 19 07 14 f9 2f 49 5b ce ee 89 f5 bd 3f 73 f9 c7 ba e9 5b 08 40 e7 39 de 75 f4 30 fe 87 7f f1 df e0 f6 03 fb f0 99 cf 7c 0e bf ff 7f fc 3f 48 3b 6d cc cf cf e1 d8 b1 97 f1 cc d3 cf e1 bf fd 17 3f 85 9f ff e7 3f 85 fb ef bb 1b ff f6 7f fb 3f 91 29 55 dd a7 54 de 3e 55 dc 00 5f 2a Data Ascii: \\-.rdHN)nrKOY1B\9C{R$o"@nrS`@O/7l$lM<Nv=_np"F?(7(^y>jRl]\Y+AIQ>/I[?s[@9u0\|?H;m???)UT>U_*
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: a4 86 22 82 36 d6 e0 56 55 85 43 87 0f e1 f5 4f be 81 95 e5 65 9c bf 70 11 4b 4d 8d 53 27 8e e3 a1 fb ef c5 1f 7c fc 13 78 cb c3 0f e2 d6 ad 2d bc fb 5d 6f c3 2b 2f bd 82 aa 52 f8 81 f7 bf 0f db 3b db d8 bf b6 8a cf 7c ee f3 b8 ff ee 7b f0 da 99 b3 b8 71 e3 3a 5e 7a e9 65 fc d4 df 7e 12 67 ce 9e c5 f6 ce 1e 7e f2 27 7e 0c 7f f8 47 9f c0 7b de f1 76 fc e2 2f fd 4b 4c a7 53 30 1b 4c ea 1a 47 0f 1d c4 cf fd cc 87 f1 d1 5f ff 18 36 37 b7 40 6c f0 7d df fb 3d 78 fc ad 6f c5 c5 8b 17 f1 99 cf 7c 16 5b 37 6f e1 ec b9 37 f0 fe f7 7d 97 dd 18 2f f6 42 f9 33 f9 e4 79 80 e1 27 f5 fb b1 e4 17 84 fd 07 04 bd d7 88 22 af 0d 8b 5f 3e 42 ba d8 64 ce e8 c1 59 e2 ca ea 03 79 fa 90 12 14 fa de c6 2c 33 e1 f8 1b bf ef 0a 42 b6 f0 81 80 1b 13 7e b0 c5 d0 dc 82 36 c3 fe ac 48 Data Ascii: "6VUCOepKMS'\|x-]o+/R;\|{q:^ze~g~'~G{v/KLS0LG_67@l}=xo\|[7o7}/B3y'"_>BdYy,3B~6H
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 5a 69 c4 78 30 6e 89 ca 84 16 39 9d 88 91 63 2e ea 8b 0f 9d bc 79 1e 6b 67 bf 86 03 17 2f e2 8e 5b 17 f1 d8 a4 c5 ac 22 5c 9e 12 a8 62 74 4b 0a da d8 cd c2 aa 22 dc a7 76 b1 e4 06 8f 01 d0 42 61 07 0a 5b a8 b1 0d 85 16 84 09 1b 3b 70 83 b6 00 aa 6a 9c bb 70 09 ff cb ff f6 7f e2 89 fb ef c1 bb df f6 56 1c 3b 7e 12 35 75 d8 99 b6 78 ee f9 e7 f1 95 af be 88 b3 e7 ce db 9a 4a c1 38 af 4b 3f d0 85 89 16 83 d5 7a 28 ac 07 c8 06 f0 74 fe 1d 37 b6 6d 04 7b 92 a3 a9 1f 0d c2 f8 1b 30 5c 51 b7 74 e8 41 84 38 74 99 08 c6 70 38 8e 87 05 11 b9 c7 29 c4 1b 73 08 c3 03 1a ef 5b 49 3d 63 32 36 96 f4 5e c9 24 c1 d6 e0 be 03 8d ec f7 42 91 50 93 bf 96 17 82 4e bc 07 4f 2c 0b 92 f0 3c 45 5e 22 ee 71 af ab 1f 9e 12 b6 9a 0e 41 4a 15 42 bc 30 79 54 4e da ae 80 31 85 1c fe 2e Data Ascii: Zix0n9c.ykg/["\btK"vBa[;pjpV;~5uxJ8K?z(t7m{0\QtA8tp8)s[I=c26^$BPNO,<E^"qAJB0yTN1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49910	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1327	OUT	GET /wp-content/uploads/2023/07/001-culos-de-realidade-virtual.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: image/svg+xml Content-Length: 2952 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-b88" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	2796	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 34 20 31 32 34 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 124 124" style="enable-backgroun
2024-04-18 19:30:35 UTC	156	IN	Data Raw: 2d 35 2e 33 36 39 63 30 2d 32 2e 39 36 20 32 2e 34 31 32 2d 35 2e 33 36 38 20 35 2e 33 37 35 2d 35 2e 33 36 38 53 31 31 33 20 38 35 2e 33 35 35 20 31 31 33 20 38 38 2e 33 31 35 61 35 2e 33 38 20 35 2e 33 38 20 30 20 30 20 31 2d 35 2e 33 37 35 20 35 2e 33 37 7a 22 20 66 69 6c 6c 3d 22 23 65 39 35 31 31 64 22 20 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 3d 22 23 30 30 30 30 30 30 22 20 6f 70 61 63 69 74 79 3d 22 31 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: -5.369c0-2.96 2.412-5.368 5.375-5.368S113 85.355 113 88.315a5.38 5.38 0 0 1-5.375 5.37z" fill="#e9511d" data-original="#000000" opacity="1"/> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49911	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1302	OUT	GET /wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1710847529 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: text/css Content-Length: 26857 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:29 GMT ETag: "65f97629-68e9" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	3861	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 73 69 74 65 2d 6d 61 69 6e 20 2e 6d 65 6e 75 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 61 66 74 65 72 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 38 2c 2e 33 2c 2e 30 30 35 2c 31 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 3a 6e 6f 74 28 3a 66 6f 63 Data Ascii: @charset "UTF-8";.site-main .menu-navigation-container{overflow:visible}.elementor-item:after,.elementor-item:before{display:block;position:absolute;transition:.3s;transition-timing-function:cubic-bezier(.58,.3,.005,1)}.elementor-item:not(:hover):not(:foc
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 3a 68 6f 76 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 64 6f 75 62 6c 65 2d 6c 69 6e 65 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 64 6f 75 62 6c 65 2d 6c 69 6e 65 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 62 65 66 6f 72 65 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 64 6f 75 62 6c 65 2d 6c 69 6e 65 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 66 6f 63 75 73 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 64 6f 75 62 6c 65 2d 6c 69 6e 65 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 68 6f 76 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 6f 76 65 72 6c 69 6e 65 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 6f 76 65 72 Data Ascii: :hover,.e--pointer-double-line.e--animation-none:after,.e--pointer-double-line.e--animation-none:before,.e--pointer-double-line.e--animation-none:focus,.e--pointer-double-line.e--animation-none:hover,.e--pointer-overline.e--animation-none,.e--pointer-over
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 73 2c 77 69 64 74 68 20 2e 31 73 20 2e 31 73 7d 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 2d 61 63 74 69 76 65 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 2e 68 69 67 68 6c 69 67 68 74 65 64 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 66 6f 63 75 73 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 Data Ascii: s,width .1s .1s}.e--pointer-framed.e--animation-draw .elementor-item-active:after,.e--pointer-framed.e--animation-draw .elementor-item.highlighted:after,.e--pointer-framed.e--animation-draw .elementor-item:focus:after,.e--pointer-framed.e--animation-draw
2024-04-18 19:30:35 UTC	529	IN	Data Raw: 74 65 64 29 3a 62 65 66 6f 72 65 7b 72 69 67 68 74 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 7d 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 75 74 74 65 72 2d 69 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 75 74 74 65 72 2d 69 6e 2d 76 65 72 74 69 63 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 61 66 74 65 72 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 66 34 34 34 62 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 65 2d 2d 70 6f Data Ascii: ted):before{right:50%;left:50%}.e--pointer-background.e--animation-shutter-in-horizontal .elementor-item:after,.e--pointer-background.e--animation-shutter-in-vertical .elementor-item:after{top:0;left:0;right:0;bottom:0;background:#3f444b;z-index:-1}.e--po
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: 65 2d 2d 70 6f 69 6e 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 75 74 74 65 72 2d 69 6e 2d 76 65 72 74 69 63 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 2e 68 69 67 68 6c 69 67 68 74 65 64 3a 62 65 66 6f 72 65 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 75 74 74 65 72 2d 69 6e 2d 76 65 72 74 69 63 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 75 74 74 65 72 2d 69 6e 2d 76 65 72 74 69 63 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 68 6f 76 65 72 3a 62 65 Data Ascii: e--pointer-background.e--animation-shutter-in-vertical .elementor-item.highlighted:before,.e--pointer-background.e--animation-shutter-in-vertical .elementor-item:focus:before,.e--pointer-background.e--animation-shutter-in-vertical .elementor-item:hover:be
2024-04-18 19:30:36 UTC	2894	IN	Data Raw: 64 6f 77 6e 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 6d 61 69 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 20 73 70 61 6e 2e 73 63 72 6f 6c 6c 2d 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 6d 61 69 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 20 73 70 61 6e 2e 73 63 72 6f 6c 6c 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 6d 61 69 6e 20 2e Data Ascii: down,.elementor-nav-menu--main .elementor-nav-menu span.scroll-up{position:absolute;display:none;visibility:hidden;overflow:hidden;background:#fff;height:20px}.elementor-nav-menu--main .elementor-nav-menu span.scroll-down-arrow,.elementor-nav-menu--main .
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: 2d 73 74 61 72 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 61 75 74 6f 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 61 6c 69 67 6e 2d 73 74 61 72 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 6c 61 79 6f 75 74 2d 76 65 72 74 69 63 61 6c 3e 75 6c 3e 6c 69 3e 61 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 61 6c 69 67 6e 2d 65 6e 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 61 75 Data Ascii: -start .elementor-nav-menu{margin-inline-end:auto;justify-content:flex-start}.elementor-nav-menu__align-start .elementor-nav-menu--layout-vertical>ul>li>a{justify-content:flex-start}.elementor-nav-menu__align-end .elementor-nav-menu{margin-inline-start:au
2024-04-18 19:30:36 UTC	3189	IN	Data Raw: 75 2d 69 63 6f 6e 2d 63 6f 6c 6f 72 2c 63 75 72 72 65 6e 74 43 6f 6c 6f 72 29 7d 73 70 61 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 5f 5f 69 63 6f 6e 2d 2d 63 6c 6f 73 65 2c 73 70 61 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 5f 5f 69 63 6f 6e 2d 2d 6f 70 65 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 2d 6e 6f 6e 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 Data Ascii: u-icon-color,currentColor)}span.elementor-menu-toggle__icon--close,span.elementor-menu-toggle__icon--open{line-height:1}.elementor-nav-menu--dropdown{background-color:#fff;font-size:13px}.elementor-nav-menu--dropdown-none .elementor-menu-toggle,.elementor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49912	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1281	OUT	GET /wp-content/uploads/elementor/css/post-2840.css?ver=1710847529 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: text/css Content-Length: 9597 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:29 GMT ETag: "65f97629-257d" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	2796	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 34 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 62 61 63 37 30 62 35 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 34 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 62 61 63 37 30 62 35 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 6c 61 79 65 72 7b 62 61 63 Data Ascii: .elementor-2840 .elementor-element.elementor-element-4bac70b5:not(.elementor-motion-effects-element-type-background), .elementor-2840 .elementor-element.elementor-element-4bac70b5 > .elementor-motion-effects-container > .elementor-motion-effects-layer{bac
2024-04-18 19:30:35 UTC	2796	IN	Data Raw: 72 2d 32 38 34 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 36 32 63 37 39 64 66 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 63 6f 6c 75 6d 6e 22 5d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 34 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: r-2840 .elementor-element.elementor-element-62c79dfe.elementor-column.elementor-element[data-element_type="column"] > .elementor-widget-wrap.elementor-element-populated{align-content:center;align-items:center;}.elementor-2840 .elementor-element.elementor-
2024-04-18 19:30:35 UTC	4005	IN	Data Raw: 34 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 35 32 63 64 37 66 30 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 34 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 35 32 63 64 37 66 30 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 65 6c 65 6d 65 6e 74 5f 74 79 70 65 3d 22 63 6f 6c 75 6d 6e 22 5d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 Data Ascii: 40 .elementor-element.elementor-element-52cd7f0e.elementor-column .elementor-widget-wrap{align-items:center;}.elementor-2840 .elementor-element.elementor-element-52cd7f0e.elementor-column.elementor-element[data-element_type="column"] > .elementor-widget-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49913	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1281	OUT	GET /wp-content/uploads/elementor/css/post-2854.css?ver=1710847529 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	226	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: text/css Content-Length: 3142 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:29 GMT ETag: "65f97629-c46" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	1398	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 35 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 35 35 32 31 32 31 39 38 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 35 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 35 35 32 31 32 31 39 38 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 6c 61 79 65 72 7b 62 61 63 Data Ascii: .elementor-2854 .elementor-element.elementor-element-55212198:not(.elementor-motion-effects-element-type-background), .elementor-2854 .elementor-element.elementor-element-55212198 > .elementor-motion-effects-container > .elementor-motion-effects-layer{bac
2024-04-18 19:30:35 UTC	1744	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 35 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 30 65 66 61 30 35 61 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 32 38 35 34 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 30 65 66 61 30 35 61 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 Data Ascii: background-color:var( --e-global-color-text );}.elementor-2854 .elementor-element.elementor-element-0efa05a.elementor-view-framed .elementor-icon, .elementor-2854 .elementor-element.elementor-element-0efa05a.elementor-view-default .elementor-icon{color:va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49914	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1281	OUT	GET /wp-content/uploads/elementor/css/post-3897.css?ver=1712669208 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: text/css Content-Length: 14617 Connection: close Last-Modified: Tue, 09 Apr 2024 13:26:48 GMT ETag: "66154218-3919" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	2796	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 37 63 38 33 30 35 66 64 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 37 63 38 33 30 35 66 64 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 6c 61 79 65 72 7b 62 61 63 Data Ascii: .elementor-3897 .elementor-element.elementor-element-7c8305fd:not(.elementor-motion-effects-element-type-background), .elementor-3897 .elementor-element.elementor-element-7c8305fd > .elementor-motion-effects-container > .elementor-motion-effects-layer{bac
2024-04-18 19:30:35 UTC	2796	IN	Data Raw: 37 33 66 62 63 66 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 20 73 76 67 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 6c 20 30 2e 33 73 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 32 37 33 66 62 63 66 7b 2d 2d 65 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 2d 73 69 7a 65 3a 31 31 70 78 3b 2d 2d 69 63 6f 6e 2d 76 65 72 74 69 63 61 6c 2d 6f 66 66 73 65 74 3a 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 32 37 33 66 62 63 66 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e Data Ascii: 73fbcf .elementor-icon-list-icon svg{transition:fill 0.3s;}.elementor-3897 .elementor-element.elementor-element-4273fbcf{--e-icon-list-icon-size:11px;--icon-vertical-offset:0px;}.elementor-3897 .elementor-element.elementor-element-4273fbcf .elementor-icon
2024-04-18 19:30:35 UTC	2796	IN	Data Raw: 2d 33 33 35 61 61 63 34 66 7b 2d 2d 65 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 2d 73 69 7a 65 3a 31 31 70 78 3b 2d 2d 69 63 6f 6e 2d 76 65 72 74 69 63 61 6c 2d 6f 66 66 73 65 74 3a 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 33 35 61 61 63 34 66 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 33 35 61 61 63 34 66 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 Data Ascii: -335aac4f{--e-icon-list-icon-size:11px;--icon-vertical-offset:0px;}.elementor-3897 .elementor-element.elementor-element-335aac4f .elementor-icon-list-icon{padding-right:0px;}.elementor-3897 .elementor-element.elementor-element-335aac4f .elementor-icon-lis
2024-04-18 19:30:36 UTC	2796	IN	Data Raw: 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 64 36 30 63 66 37 66 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 64 36 30 63 66 37 66 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 74 65 78 74 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 64 36 30 63 66 37 66 20 2e 65 6c Data Ascii: ent.elementor-element-d60cf7f .elementor-icon-list-icon{padding-right:0px;}.elementor-3897 .elementor-element.elementor-element-d60cf7f .elementor-icon-list-item > .elementor-icon-list-text, .elementor-3897 .elementor-element.elementor-element-d60cf7f .el
2024-04-18 19:30:36 UTC	2796	IN	Data Raw: 30 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 74 65 78 74 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 37 36 66 34 38 30 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 74 65 6d 20 3e 20 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 70 78 3b 7d 2e 65 6c 65 Data Ascii: 03 .elementor-icon-list-item > .elementor-icon-list-text, .elementor-3897 .elementor-element.elementor-element-76f4803 .elementor-icon-list-item > a{font-family:"Roboto", Sans-serif;font-size:17px;font-weight:400;line-height:1.5em;letter-spacing:0px;}.ele
2024-04-18 19:30:36 UTC	637	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 61 35 30 66 36 63 39 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 33 30 70 78 20 30 70 78 3b 2d 2d 65 2d 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 3b 2d 2d 65 2d 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 38 39 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 61 35 30 37 66 35 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 Data Ascii: ementor-3897 .elementor-element.elementor-element-a50f6c9 > .elementor-element-populated{margin:0px 0px 30px 0px;--e-column-margin-right:0px;--e-column-margin-left:0px;}.elementor-3897 .elementor-element.elementor-element-3a507f5 > .elementor-element-popu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49916	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1086	OUT	GET /wp-content/uploads/2023/01/Zen-Nova-Marca-02-e1673522441496-272x300.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: image/png Content-Length: 40414 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:45 GMT ETag: "658070a9-9dde" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	3860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 01 2c 08 06 00 00 00 0b b2 ec c3 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 7f b0 65 57 75 df f9 59 b7 ba ba ba ba ba ba 7a 34 3d ba f7 bd bc a7 52 29 4c 8f 4a 45 b0 ac 51 18 0d 06 82 01 63 59 06 d3 97 60 9b df d8 fd 8c 0d 66 64 1b 63 42 08 51 54 2e 85 50 04 13 8c 31 c6 0e 7e cd 6f 82 c1 f0 da 06 1b c6 c1 b2 8c 65 2c 13 05 13 45 d6 30 8a 46 a3 d1 7b 79 ef 5e 8d a6 47 d5 a5 ea ea ea ea ba 6b fe 38 3f ee be eb ae b5 cf be b7 bb 05 99 ca ea 7a 7d cf d9 7b ed ef 5a fb d7 da 6b ef b3 cf 3e 42 45 3d 60 52 ff 62 ae 3d 9a 24 e9 a2 b0 06 c3 fb c5 f0 5a 6c 1b 1e 61 d8 eb 88 3f 0a eb ca 8f 27 6b 51 dc 45 30 ec b5 a5 1c df c5 62 78 f5 97 de 5b 8c Data Ascii: PNGIHDR,pHYs+ IDATxeWuYz4=R)LJEQcY`fdcBQT.P1~oe,E0F{y^Gk8?z}{Zk>BE=`Rb=$Zla?'kQE0bx[
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: fd 2e a3 5f 14 b6 c8 0c e0 b2 ea 91 4e 61 72 9d b5 89 5f c6 f5 cf b9 7a 39 59 96 ac 9c 9c 3b e8 b9 6a 5d bf a5 72 6c 5e e6 f8 6a 97 fd e5 0a ef ab a7 0f e7 51 3e a6 a2 77 ac 6e 8e 77 1d 3c 9b e7 70 ca 35 1e ae af 02 27 14 36 44 b9 aa b1 0c cd 36 74 81 33 2a f2 18 aa 0f 8b c8 23 a0 ff 19 64 a4 e8 79 41 4e 57 a3 be 1e 11 91 43 28 2b 2a 5c 05 7a 8d 20 6b c0 51 85 fd ad 11 aa 69 66 94 51 2e 20 3c 00 fa 01 85 2f 0e b6 76 ce 64 f2 91 2d b7 dd 8d c1 7e 54 5f 26 22 ef 02 ae 01 ce 03 9f 51 78 db ea e6 e8 b4 53 26 e0 b7 b9 d2 4e 1b e9 59 da 06 73 fc 5d 69 2c f6 22 ed 32 77 6d 69 19 c3 d9 35 35 0a 65 5b 0f 64 99 11 3a 52 b4 d4 0d 5d d8 0d 2e e4 f1 0c 56 49 e5 70 31 18 7b 27 06 87 55 78 97 28 3f af 68 4f 44 1e 06 de 0c fc 49 bd e9 cb ea 9b 92 67 60 19 0f d7 7b c0 61 Data Ascii: ._Nar_z9Y;j]rl^jQ>wnw<p5'6D6t3#dyANWC(+\z kQifQ. </vd-~T_&"QxS&NYs]i,"2wmi55e[d:R].VIp1{'Ux(?hODIg`{a
2024-04-18 19:30:35 UTC	4096	IN	Data Raw: 07 bc dc ea 11 e4 a1 e7 84 cf e1 3b f9 4b e3 7a 0e 7f 97 fe 56 86 d5 a3 a4 9d 59 6c ab 47 a4 7f ae 9c 3b f5 88 2c 2d 26 cc c6 2f 63 ad 3d cb 66 f1 23 39 39 5d 9a 0c 79 38 1e 6e 4a cd 67 17 4f a8 c8 31 41 4e 2b fa 9e d5 f8 f3 0b 39 9d 17 e1 4d f5 b6 ba 97 c8 98 8c 87 eb 6b c0 96 8a be aa 39 52 50 9a 7f c2 6f 82 be c9 f9 92 9c c5 77 f4 d0 3f 06 f9 11 41 1e 97 f6 e4 21 05 61 a0 b0 35 1a ae bf aa f6 44 98 a6 e9 ac db 99 bc 68 b5 16 72 77 b5 a7 4d 9a 3d 6e 28 bc 3a c8 7b ae 0c a3 fb fb 44 f8 58 1d 7e db ee c6 e0 00 b3 9d ca c3 4b eb 62 92 84 83 df c6 7a 01 5f 7a 6f cb d9 ea ea d5 4f 97 1e 91 ee 5d 7a 58 99 51 19 7a 79 76 d3 78 05 6a 1b 85 8d f3 1a 7d 0e 2f 4d 87 f3 6b d3 13 c4 7b 05 1b 75 8e f4 3e 67 e0 50 38 a8 aa 6f a9 3b c9 6f ae 6e 8e 1f 0d d2 a6 f2 bb 0c Data Ascii: ;KzVYlG;,-&/c=f#99]y8nJgO1AN+9Mk9RPow?A!a5DhrwM=n(:{DX~Kbz_zoO]zXQzyvxj}/Mk{u>gP8o;on
2024-04-18 19:30:35 UTC	530	IN	Data Raw: 44 e4 a0 a8 dc 62 e4 7f 0e d5 6f 34 37 4d 97 4f 1f f1 a6 db d8 6b 73 70 41 94 db fb a7 76 1a 83 80 c0 21 85 17 4f 8d 4d fd d8 b6 4a 30 51 e1 f7 ea 8f 41 45 e5 66 f3 35 01 18 0f d7 af 12 e1 06 ea 4d 69 cd 0a 0f 22 7f 5e 50 1e 9e ac 94 d7 b6 cb b9 f6 ab f0 b0 88 5c 60 7a 74 80 37 30 59 ac 9c 4e 96 3f d7 7f 3c 7e 4f 86 cd 47 d4 06 3d 03 e4 f5 cd 5c be 3c 2f c4 c6 cd e9 62 dd 13 0f 38 27 d0 fe 96 b8 7d 25 61 39 bd 3c 8b 6b dd 3e 92 eb de ee c6 a0 27 22 d7 00 08 fc 27 47 4e 97 4c 8b 6b 0b 74 0e 63 50 8d a2 77 02 c7 40 6f c2 2f 17 2f bd d5 ab 25 15 fd bd e9 bb 30 52 6f 1c 6d 9f bd be be 5e 4c ed 01 0c b6 b6 cf 82 fc 9c c0 99 86 41 da 64 09 46 05 5c 87 e9 6f 22 f2 35 a3 c7 cd a2 3a 68 13 6b f3 b8 55 00 46 52 9d 49 92 d6 4d 2e 2f ed af a2 b7 50 7d f8 89 c4 94 9d Data Ascii: Dbo47MOkspAv!OMJ0QAEf5Mi"^P\`zt70YN?<~OG=\</b8'}%a9<k>'"'GNLktcPw@o//%0Rom^LAdF\o"5:hkUFRIM./P}
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: c4 77 99 ad 24 db f0 5d 0c c3 6f 1b 83 c7 37 01 ee 15 18 a1 f2 72 aa 35 0a ab 77 64 f5 3d 2c 10 1e 12 38 3d 5d fa ac a8 3a d9 5c 7a 22 f2 6e 45 5e d3 9c 94 3e a8 3e cf f0 fb 22 f2 36 e0 5c bd 67 63 ba 37 a4 dd 79 c1 d7 05 79 75 e5 b5 54 34 1a ae af 81 7e 81 76 33 9c d4 3b 45 d3 f5 0a f9 2b a3 63 2e 2f 49 9e f5 5a 54 9f 05 cd 54 a8 79 fa c3 97 07 5b db e7 83 74 06 a3 73 b4 cc ea b1 b2 39 3a 57 7f 33 06 90 41 86 bf 6b e0 8a 74 5d 24 5d 57 b8 67 58 a2 74 25 ed a9 8b 8a 75 f7 dc 2f 8f 31 67 e1 53 1e 3b 72 5a 5c db 79 8a 94 34 f8 9e 31 c2 09 6b 31 04 d9 87 c8 51 60 82 f2 58 c0 17 19 81 14 3f 72 e7 bc b0 5e 7f 6b fb 71 55 fd 9a a0 87 81 13 26 1f 9e 8c 54 8f 39 37 b4 5f 7d e0 7a b7 79 72 31 7b 9e 07 00 07 a5 3a 61 ed 75 a3 e4 48 c5 fe d6 f6 6f a8 ea 57 a7 db d5 Data Ascii: w$]o7r5wd=,8=]:\z"nE^>>"6\gc7yyuT4~v3;E+c./IZTTy[ts9:W3Akt]$]WgXt%u/1gS;rZ\y41k1Q`X?r^kqU&T97_}zyr1{:auHoW
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: 57 da d1 73 18 39 d9 de 40 94 bb cf 79 31 5d b2 3c 8c 48 a7 39 20 2f 51 e4 4d a4 fc 3d 73 6d 79 d2 74 39 2c cf 25 b5 b4 cc b4 60 46 8e 20 7f 09 80 ea b3 eb 17 eb 22 3d 43 8c 8e 34 cd bd 1d 1d 3d 4f c5 c3 b7 32 7a fd ad ed 73 28 bf 8d f0 fd 08 bf 26 c8 e3 40 b5 35 1c 68 de 9c 15 91 03 e9 0e 53 a9 e3 d2 4f 38 54 e7 7f 34 f7 d5 f6 f2 c6 5c 54 9e 47 b2 fb cb a4 6d 17 66 a7 3b 54 4f 03 bf 21 f0 7d aa f2 1b f5 d1 8d 5e e3 f6 3a 7c 69 5d a6 e5 e4 0d 5a 5e 99 59 b9 73 75 25 c8 73 a4 3a 68 fb 5b 2b 9b a3 b3 46 86 a7 77 ae 0e 6d be 3c bd bc 3c 95 f2 58 ec 2e 59 39 bd 3d 79 5e 1d e5 fa eb 0c ae fd e4 62 d7 a8 60 85 17 5b aa cc bd e7 ce 46 de 81 0d 8b bc 93 39 57 ab 22 bd 1f e4 71 44 8e 6a f5 98 d4 6e 6c f2 f4 f2 0a d7 c3 b7 46 d5 ea 65 2b c5 e6 c3 1b 7d 27 00 83 53 Data Ascii: Ws9@y1]<H9 /QM=smyt9,%`F "=C4=O2zs(&@5hSO8T4\TGmf;TO!}^:\|i]Z^Ysu%s:h[+Fwm<<X.Y9=y^b`[F9W"qDjnlFe+}'S
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: e9 37 5f 1a 5d 24 f5 7c 9a 29 8f 36 06 a0 81 6f d2 4d f3 d5 78 42 9a 1a 04 49 b0 9b 74 32 c5 6c 3c a3 66 ef 7c f5 b9 cc 26 ce be b3 c3 05 d0 b7 f4 b7 b6 1f b6 75 92 94 b5 bd ef 09 7a 0b f0 ce da f1 ba 5d e1 9e 34 de c1 f1 da a5 f7 1b 85 79 3c b6 2f 58 4f 29 27 d3 b6 4b 4f 66 3a 58 e5 f4 c8 e5 b7 97 e1 89 f0 6c d8 cc 7d 8f 79 50 6f a4 ee 52 ba 94 52 ac 45 32 e5 e9 eb e9 6a 71 23 39 13 7c b9 6d d8 ca e6 f8 11 85 37 09 9c 47 39 0e bc 63 b7 da 5f e0 c9 9f d3 bd bf b5 7d 5a 90 d7 82 ee 9a 87 0e cd 7f b3 23 75 e3 2d 4c 87 7d 2a ce e6 e9 45 ed fa 27 8b 9c 6d 27 15 92 03 81 ea c8 9a b7 35 09 33 a7 b0 4f a7 4d cd e5 cc cb 73 e9 a2 4a 13 d7 98 9c 99 97 ec a6 7a 36 6b 29 ed 96 f9 74 02 d4 78 41 ad cd 4a 3c b2 a9 a0 09 f0 6b c0 a7 6c 59 26 34 57 f6 7b 27 fa c7 50 3e Data Ascii: 7_]$\|)6oMxBIt2l<f\|&uz]4y</XO)'KOf:Xl}yPoRRE2jq#9\|m7G9c_}Z#u-L}*E'm'53OMsJz6k)txAJ<klY&4W{'P>
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: d1 f4 68 f6 ed 00 7e 10 8c ff 1c c0 2d f5 8b f5 d3 37 5d bf c8 c0 15 02 5d 05 f0 15 30 9e b8 f3 91 eb fa b4 6b 8a 5f 44 37 bf c8 e7 3c c0 f7 00 78 03 98 8e 00 fe 5e 80 5e c1 e0 f9 97 f7 e8 14 c4 5f 03 e8 31 30 3e c6 84 2f 10 f0 82 f1 b2 9f 0c ef bd e4 dd 33 ed c3 7b 54 9e ad f2 1f 42 ef 83 e9 39 f2 18 b7 e7 a9 47 8d 6f 6b da 12 52 ee 13 ca 46 b3 44 a6 de 3e 72 e0 c9 4b e7 cf 81 f9 55 00 de 04 d0 f7 03 b8 97 09 af 00 f8 5c fb fd 5c 3c 0f e0 3b 60 7e 9c 88 be 0a e0 ab 60 fe 0f 4c 74 1d e0 6f 11 e8 5b 00 bf 08 d0 ea 11 2c 03 3b 02 df 34 3f 1d b9 1d c0 79 66 bc 92 80 ff 08 84 d7 00 78 0d 80 db 19 b8 95 80 9d f8 d2 dd 33 20 fe 4b 66 7c 9e 88 fe 04 e0 2f ab e3 fa 87 0c a1 a3 b4 25 a2 3d f4 b8 bc 51 e3 7f 24 ba b9 21 72 90 60 5a 52 14 ce 66 23 82 15 23 07 53 e2 Data Ascii: h~-7]]0k_D7<x^^_10>/3{TB9GokRFD>rKU\\<;`~`Lto[,;4?yfx3 Kf\|/%=Q$!r`ZRf##S
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: de 8c 98 ac f5 99 05 5e 92 e5 d9 ad 7c 4f 70 2b ca e9 75 80 8f 51 a7 68 ae ff 00 b1 8f 39 ad f2 97 4b 07 6a a1 f2 72 d8 ce 51 82 c6 28 cb 16 79 16 80 da 12 40 2e 81 aa 0c 6c 61 d0 33 60 fc 92 a1 bb df b9 2c 96 0e bc 5c 5e a0 ca 54 e4 20 a1 ef 52 a7 ba 4c a9 4f 53 84 99 b2 d6 7d 0e e7 db 7a 4c 2d 75 da df 1c ab 14 42 4b 17 b5 bf 63 b9 a2 a5 9c 6d 09 3a eb c5 4d ba b9 bd ef 65 e6 07 8f 2e 1e cb 43 90 da 71 78 21 ba 8e 52 80 da 76 a8 e1 94 9c 92 a8 3c e2 6e 79 dd a8 18 f1 d8 f6 ea 67 56 01 92 d6 e2 61 39 93 43 60 78 13 de ee 9c 10 3a b5 64 50 74 bd bd 8c 4c 94 a1 eb 48 ba 30 34 63 f0 ef 13 e8 cf da 7e 41 31 0e b1 6c e0 79 86 2b 7b 11 65 99 51 8c ac 2c 37 44 ac 22 0f b9 ab 47 b5 77 11 f0 07 0c ba a5 ec 97 c8 bd 96 45 9c c3 f2 9e 5e 64 e0 3d 44 78 2c 68 0f 9d Data Ascii: ^\|Op+uQh9KjrQ(y@.la3`,\^T RLOS}zL-uBKcm:Me.Cqx!Rv<nygVa9C`x:dPtLH04c~A1ly+{eQ,7D"GwE^d=Dx,h
2024-04-18 19:30:36 UTC	1888	IN	Data Raw: 32 2a 87 b5 0c 5a 5c 9f 83 1f de 64 3c d0 88 27 8d f2 ac 75 9e 67 74 91 13 d1 75 71 74 f1 f8 15 cc f8 63 80 5f 05 94 cd c0 79 88 51 59 29 34 6b 6d 87 12 f9 94 18 ff d3 b5 2b 8f 7d d2 c2 55 b2 f5 66 64 53 36 a3 ae 28 2f a1 75 4b 24 96 35 ed cb 63 55 f2 27 00 fc 67 d7 96 2f 55 f6 92 b5 6c ec 2d 43 23 5d 7a 18 ad cf 66 1d 16 8b 84 aa 4b dd 45 85 61 b3 ab 71 72 ed f2 c9 5f 1c 5d 3c fe 69 00 1f 03 e3 dc 62 19 47 f2 9d 29 32 bf c8 4b bf 05 e0 1b 25 73 fa 2e 4c f9 7e ef ec 36 b8 dc cd 9b b4 6b bd 74 1b 58 b6 63 95 67 ae f7 c1 d0 75 ce 0c c3 72 1e 5e e4 50 e8 2d 46 56 68 ae f3 75 ca 86 4f d1 ac a6 8d 6f e1 21 e7 1f 20 fa 28 80 37 2c 4e 54 a1 85 aa 25 b1 0a fb 09 f4 4f 40 f8 c7 81 0c 32 59 cb 40 5d e6 45 7b b2 8e 88 d2 e4 1e cd 3a e9 27 8a 8a 32 9a 09 bd e8 4e ca Data Ascii: 2*Z\d<'ugtuqtc_yQY)4km+}UfdS6(/uK$5cU'g/Ul-C#]zfKEaqr_]<ibG)2K%s.L~6ktXcgur^P-FVhuOo! (7,NT%O@2Y@]E{:'2N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49915	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:35 UTC	1053	OUT	GET /wp-content/uploads/2020/09/questor.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:35 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:35 GMT Content-Type: image/png Content-Length: 2116 Connection: close Last-Modified: Mon, 18 Dec 2023 16:18:04 GMT ETag: "658070bc-844" Accept-Ranges: bytes
2024-04-18 19:30:35 UTC	1398	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cc 00 00 00 36 08 06 00 00 00 8b 2b 76 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 07 e6 49 44 41 54 78 da ec 5d 3b 72 e3 46 10 85 54 9b 2f 1c 38 36 55 e5 dc d0 09 04 9e 40 64 a8 48 64 e4 50 e4 09 44 9e 80 54 e8 88 74 a4 50 dc 13 90 3a 81 a8 dc 55 e2 c6 0e 0c 9f 60 dd 2d 37 56 58 68 3e 3d 83 01 40 52 fd aa a6 54 4b 12 40 63 a6 df f4 6f 66 36 8a 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 08 04 75 e0 a4 8e 9b fe fd fb af 1d f8 93 42 bb 84 96 40 eb 28 7e 96 41 db 42 7b 84 b6 fa f9 8f bf b6 32 1c 82 0f 45 18 20 0a 92 e4 06 5a cf e3 f2 1d b4 29 10 67 29 c3 22 38 6a c2 90 45 59 90 55 a9 0a 24 ce 18 88 b3 92 e1 11 Data Ascii: PNGIHDR6+vtEXtSoftwareAdobe ImageReadyqe<IDATx];rFT/86U@dHdPDTtP:U`-7VXh>=@RTK@cof6@ @ @ uB@(~AB{2E Z)g)"8jEYU$
2024-04-18 19:30:35 UTC	718	IN	Data Raw: 03 3a 77 31 75 ad 19 d1 aa 61 55 ff ef 6a 58 17 f7 da 7f 3e 71 9e 13 61 28 a8 e7 cc 1c 1d 8a 69 5e 70 e3 19 1d 21 fb 03 49 90 50 d0 30 6b f1 42 16 84 93 41 49 2d 71 52 66 98 6d 6d e8 39 66 6e f6 c1 65 cb c8 a2 2d 5b 7a fe ce e0 2e cd b8 2b 8e 29 c1 31 ab 1a 90 53 3f 74 0b 4d 67 ed 07 be 45 60 9f 4a bf 8b 2f 9d 77 04 1e 93 f4 2d 6f d1 ff eb 79 16 05 25 1d 98 48 43 1b c6 66 91 fd c8 a5 8d a1 83 12 cf 01 db b4 49 0a e6 7e 8d 36 b7 f9 de 99 92 0f 36 d2 50 df 3f 18 5c cb 3b 07 59 be 52 dc 97 b7 b9 81 70 0b 9f 2d 04 ce 84 29 ec 8a 0c 3d 48 4a d2 10 59 d6 e5 81 50 91 86 16 19 ea cc f7 5a a5 7c f4 d9 93 c1 1d 68 95 30 34 b0 2f 3a e2 d0 44 30 68 c8 ef 57 59 99 a5 61 02 fd be 49 ab ac 9c 85 9d 99 4f 06 f7 71 1a c0 1d d3 e9 2a 12 d5 79 a3 9b d7 e2 4b dc af 02 0a db Data Ascii: :w1uaUjX>qa(i^p!IP0kBAI-qRfmm9fne-[z.+)1S?tMgE`J/w-oy%HCfI~66P?\;YRp-)=HJYPZ\|h04/:D0hWYaIOq*yK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49918	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:36 UTC	1282	OUT	GET /wp-content/uploads/elementor/css/post-11299.css?ver=1710847529 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:36 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:36 GMT Content-Type: text/css Content-Length: 5292 Connection: close Last-Modified: Tue, 19 Mar 2024 11:25:29 GMT ETag: "65f97629-14ac" Accept-Ranges: bytes
2024-04-18 19:30:36 UTC	2796	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 31 32 39 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 32 65 65 32 31 62 36 64 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 76 68 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 31 32 39 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 32 65 65 32 31 62 36 64 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 Data Ascii: .elementor-11299 .elementor-element.elementor-element-2ee21b6d > .elementor-container{min-height:60vh;}.elementor-11299 .elementor-element.elementor-element-2ee21b6d > .elementor-container > .elementor-column > .elementor-widget-wrap{align-content:space-b
2024-04-18 19:30:36 UTC	2496	IN	Data Raw: 6e 74 6f 72 2d 31 31 32 39 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 62 31 65 30 36 62 38 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 3a 33 37 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 31 32 39 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 62 31 65 30 36 62 38 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 20 73 76 67 7b 68 65 69 67 68 74 3a 32 32 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 31 32 39 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 62 31 Data Ascii: ntor-11299 .elementor-element.elementor-element-4b1e06b8 .elementor-icon{font-size:22px;padding:37px;}.elementor-11299 .elementor-element.elementor-element-4b1e06b8 .elementor-icon svg{height:22px;}.elementor-11299 .elementor-element.elementor-element-4b1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49919	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:36 UTC	1300	OUT	GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.21.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:36 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:36 GMT Content-Type: text/css Content-Length: 18468 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-4824" Accept-Ranges: bytes
2024-04-18 19:30:36 UTC	4096	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 32 30 25 2c 35 33 25 2c 38 30 25 2c 66 72 6f 6d 2c 74 6f 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 34 30 25 2c 34 33 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 30 2c 2e 38 35 35 2c 2e 30 36 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 7d 37 30 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 Data Ascii: @keyframes bounce{20%,53%,80%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{animation-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{animation-timing-function:c
2024-04-18 19:30:36 UTC	2894	IN	Data Raw: 73 20 62 6f 75 6e 63 65 49 6e 55 70 7b 36 30 25 2c 37 35 25 2c 39 30 25 2c 66 72 6f 6d 2c 74 6f 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 33 30 30 30 70 78 2c 30 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 70 78 2c 30 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 70 78 2c 30 29 7d 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 35 70 78 2c 30 Data Ascii: s bounceInUp{60%,75%,90%,from,to{animation-timing-function:cubic-bezier(.215,.61,.355,1)}from{opacity:0;transform:translate3d(0,3000px,0)}60%{opacity:1;transform:translate3d(0,-20px,0)}75%{transform:translate3d(0,10px,0)}90%{transform:translate3d(0,-5px,0
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 30 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 35 35 2c 2e 36 37 35 2c 2e 31 39 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 7d 7d 2e 7a 6f 6f 6d 49 6e 4c 65 66 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 7a 6f 6f 6d 49 6e 4c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 49 6e 52 69 67 68 74 7b 66 72 6f 6d Data Ascii: 0,0);animation-timing-function:cubic-bezier(.55,.055,.675,.19)}60%{opacity:1;transform:scale3d(.475,.475,.475) translate3d(10px,0,0);animation-timing-function:cubic-bezier(.175,.885,.32,1)}}.zoomInLeft{animation-name:zoomInLeft}@keyframes zoomInRight{from
2024-04-18 19:30:37 UTC	1496	IN	Data Raw: 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 72 6f 74 61 74 65 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 72 6f 74 61 74 65 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 64 65 67 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 67 72 6f 77 2d 72 6f 74 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 67 72 6f 77 2d 72 6f 74 61 74 65 3a 61 63 74 69 76 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 67 72 6f 77 2d 72 6f 74 61 74 65 3a 66 6f 63 75 73 2c 2e 65 Data Ascii: mentor-animation-rotate:focus,.elementor-animation-rotate:hover{transform:rotate(4deg)}.elementor-animation-grow-rotate{transition-duration:.3s;transition-property:transform}.elementor-animation-grow-rotate:active,.elementor-animation-grow-rotate:focus,.e
2024-04-18 19:30:37 UTC	1398	IN	Data Raw: 28 38 70 78 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 68 61 6e 67 2d 73 69 6e 6b 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 38 70 78 29 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 68 61 6e 67 3a 61 63 74 69 76 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 68 61 6e 67 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 68 61 6e 67 3a 68 6f 76 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 68 61 6e 67 2d 73 69 6e 6b 2c 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 68 61 6e 67 3b 61 6e 69 6d 61 74 69 6f Data Ascii: (8px)}}@keyframes elementor-animation-hang-sink{100%{transform:translateY(8px)}}.elementor-animation-hang:active,.elementor-animation-hang:focus,.elementor-animation-hang:hover{animation-name:elementor-animation-hang-sink,elementor-animation-hang;animatio
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 65 59 28 30 29 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 77 6f 62 62 6c 65 2d 76 65 72 74 69 63 61 6c 3a 61 63 74 69 76 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 77 6f 62 62 6c 65 2d 76 65 72 74 69 63 61 6c 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 77 6f 62 62 6c 65 2d 76 65 72 74 69 63 61 6c 3a 68 6f 76 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 77 6f 62 62 6c 65 2d 76 65 72 74 69 63 61 6c 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 Data Ascii: eY(0)}}.elementor-animation-wobble-vertical:active,.elementor-animation-wobble-vertical:focus,.elementor-animation-wobble-vertical:hover{animation-name:elementor-animation-wobble-vertical;animation-duration:1s;animation-timing-function:ease-in-out;animati
2024-04-18 19:30:37 UTC	392	IN	Data Raw: 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 28 31 64 65 67 29 7d 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 70 78 29 20 72 6f 74 61 74 65 28 2d 31 64 65 67 29 7d 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 70 78 29 20 72 6f 74 61 74 65 28 30 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 70 78 29 20 72 6f 74 61 74 65 28 30 29 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 62 75 7a 7a 2d 6f 75 74 3a 61 63 74 69 76 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 62 75 7a 7a 2d 6f 75 74 3a 66 6f 63 75 73 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 62 75 7a 7a 2d 6f 75 Data Ascii: nslateX(2px) rotate(1deg)}80%{transform:translateX(-2px) rotate(-1deg)}90%{transform:translateX(1px) rotate(0)}100%{transform:translateX(-1px) rotate(0)}}.elementor-animation-buzz-out:active,.elementor-animation-buzz-out:focus,.elementor-animation-buzz-ou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49924	151.101.0.217	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:36 UTC	667	OUT	GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:36 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 995 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "8065dad5718a22d965d99cc05c237215" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 891854 Date: Thu, 18 Apr 2024 19:30:36 GMT X-Served-By: cache-dfw-kdal2120096-DFW, cache-pdk-kfty2130026-PDK X-Cache: HIT, HIT X-Cache-Hits: 4, 0 X-Timer: S1713468637.650564,VS0,VE2 Vary: Accept
2024-04-18 19:30:36 UTC	995	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 02 c9 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 50 00 00 00 2d 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 00 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispeP-pixiav1Ccolrnclx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49922	151.101.14.109	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:36 UTC	573	OUT	GET /p/4.29.7/js/vendor.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:36 UTC	455	IN	HTTP/1.1 200 OK Connection: close Content-Length: 435999 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:30:36 GMT Age: 90393 X-Served-By: cache-iad-kiad7000097-IAD, cache-pdk-katl1840057-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713468637.650879,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 37 20 2d 20 32 30 32 34 2d 30 34 2d 31 37 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 28 6e 29 29 7d 7d 28 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 4f Data Ascii: /* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,O
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 69 6f 6e 5d 22 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 50 72 6f 78 79 5d 22 3d 3d 74 7d 2c 79 3d 75 5b 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 5d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 5b 5e 2e 5d 2b 24 2f 2e 65 78 65 63 28 79 26 26 79 2e 6b 65 79 73 26 26 79 2e 6b 65 79 73 2e 49 45 5f 50 52 4f 54 4f 7c 7c 22 22 29 3b 72 65 74 75 72 6e 20 65 3f 22 53 79 6d 62 6f 6c 28 73 72 63 29 5f 31 2e 22 2b 65 3a 22 22 7d 28 29 2c 54 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 63 Data Ascii: ion]"==t\|\|"[object AsyncFunction]"==t\|\|"[object Proxy]"==t},y=u["__core-js_shared__"],E=function(){var e=/[^.]+$/.exec(y&&y.keys&&y.keys.IE_PROTO\|\|"");return e?"Symbol(src)_1."+e:""}(),T=Function.prototype.toString,S=function(e){if(null!=e){try{return T.c
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 65 74 75 72 6e 20 58 28 65 29 26 26 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 6d 28 65 29 7d 2c 47 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 57 3d 47 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 4b 3d 47 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 59 3d 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 28 65 29 26 26 57 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 4b 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 7d 2c 24 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 Data Ascii: eturn X(e)&&"[object Arguments]"==m(e)},G=Object.prototype,W=G.hasOwnProperty,K=G.propertyIsEnumerable,Y=q(function(){return arguments}())?q:function(e){return X(e)&&W.call(e,"callee")&&!K.call(e,"callee")},$=Array.isArray,z=function(e){return"number"==ty
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 26 26 21 21 5a 5b 6d 28 65 29 5d 7d 2c 72 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 7a 28 65 2e 6c 65 6e 67 74 68 29 26 26 21 67 28 65 29 7d 28 65 29 26 26 28 24 28 65 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 70 6c 69 63 65 7c 7c 4a 28 65 29 7c 7c 6e 65 28 65 29 7c 7c 59 28 65 29 29 29 72 65 74 75 72 6e 21 65 2e 6c 65 6e 67 74 68 3b 76 61 72 20 69 3d 48 28 65 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 Data Ascii: &&!!Z[m(e)]},re=Object.prototype.hasOwnProperty,ie=function(e){if(null==e)return!0;if(function(e){return null!=e&&z(e.length)&&!g(e)}(e)&&($(e)\|\|"string"==typeof e\|\|"function"==typeof e.splice\|\|J(e)\|\|ne(e)\|\|Y(e)))return!e.length;var i=H(e);if("[object Map
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6c 65 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 65 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 6c 65 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?le(Object(n),!0).forEach((function(t){ce(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):le(Object(n)).forEach((function(
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 6f 6e 22 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 69 66 28 74 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 2e 67 65 74 28 65 29 3b 74 2e 73 65 74 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6d 65 28 65 2c 61 72 67 75 6d 65 6e 74 73 2c 66 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 5f 65 28 6e 2c 65 29 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 2c Data Ascii: on");if(void 0!==t){if(t.has(e))return t.get(e);t.set(e,n)}function n(){return me(e,arguments,fe(this).constructor)}return n.prototype=Object.create(e.prototype,{constructor:{value:n,enumerable:!1,writable:!0,configurable:!0}}),_e(n,e)})(e)}function ge(e,
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 7c 7c 6e 75 6c 6c 3d 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 6e 3d 54 65 28 65 29 29 7c 7c 74 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b Data Ascii: 0}}function Se(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function be(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=Te(e))\|\|t&&e&&"number"==typeof e.length){
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 6f 72 45 61 63 68 28 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 65 5b 6e 5d 2c 69 3d 74 5b 6e 5d 3b 72 26 26 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 65 5b 6e 5d 3d 28 72 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 69 29 3a 28 65 3d 3e 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 28 69 29 3f 65 5b 6e 5d 3d 4e 65 28 7b 7d 2c 72 2c 69 29 3a 65 5b 6e 5d 3d 69 29 7d 29 2c 65 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 29 7b 6c 65 74 20 65 2c 74 2c 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 65 3d 6e 2c 74 3d 72 7d 29 29 3b 72 65 74 75 72 6e 20 6e 2e 72 65 73 6f 6c 76 65 3d 65 2c 6e 2e 72 65 6a 65 63 74 3d 74 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 Data Ascii: orEach(n=>{const r=e[n],i=t[n];r&&void 0===i\|\|(Array.isArray(i)?e[n]=(r\|\|[]).concat(i):(e=>e&&"object"==typeof e)(i)?e[n]=Ne({},r,i):e[n]=i)}),e),e)}function xe(){let e,t,n=new Promise((function(n,r){e=n,t=r}));return n.resolve=e,n.reject=t,n}function Ue(
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 30 5d 3b 63 6f 6e 73 74 20 72 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 3f 22 29 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 72 5b 30 5d 3b 63 6f 6e 73 74 20 69 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 23 22 29 3b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 3e 31 3f 69 5b 30 5d 3a 74 5b 31 5d 7d 63 6f 6e 73 74 20 57 65 3d 28 65 2c 74 29 3d 3e 28 2e 2e 2e 6e 29 3d 3e 7b 5b 60 25 63 24 7b 65 7d 60 2c 74 5d 2e 63 6f 6e 63 61 74 28 6e 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 65 28 65 2c 74 29 7b 74 68 69 73 2e 68 65 61 64 65 72 73 3d 7b 7d 2c 74 68 69 73 2e 70 65 72 66 54 69 6d 69 6e 67 73 3d 7b 7d 2c 4e 65 28 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 6f 6b 3d 32 3d 3d 28 74 68 69 73 2e 73 74 61 74 75 73 2f 31 30 30 7c 30 29 2c 74 68 69 73 2e 62 Data Ascii: 0];const r=t[1].split("?");if(r.length>1)return r[0];const i=t[1].split("#");return i.length>1?i[0]:t[1]}const We=(e,t)=>(...n)=>{[`%c${e}`,t].concat(n)};function Ke(e,t){this.headers={},this.perfTimings={},Ne(this,t),this.ok=2==(this.status/100\|0),this.b
2024-04-18 19:30:36 UTC	1371	IN	Data Raw: 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 63 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 3f 29 3a 5b 5e 5c 53 5c 6e 5d 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 24 2f 67 6d 2c 28 74 2c 6e 2c 72 29 3d 3e 7b 65 5b 6e 5d 3d 65 5b 6e 5d 3f 60 24 7b 65 5b 6e 5d 7d 2c 24 7b 72 7d 60 3a 72 7d 29 3b 6c 65 74 20 74 3d 7b 7d 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 Data Ascii: ))return;const e={};c.getAllResponseHeaders().replace(/^(.?):[^\S\n]([\s\S]*?)$/gm,(t,n,r)=>{e[n]=e[n]?`${e[n]},${r}`:r});let t={};if(window.performance&&void 0!==window.performance.getEntriesByType){const e=window.performance.getEntriesByType("resource

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49921	151.101.14.109	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:36 UTC	573	OUT	GET /p/4.29.7/js/player.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:36 UTC	455	IN	HTTP/1.1 200 OK Connection: close Content-Length: 586757 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:30:36 GMT Age: 90393 X-Served-By: cache-iad-kcgs7200104-IAD, cache-pdk-katl1840039-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713468637.650742,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 37 20 2d 20 32 30 32 34 2d 30 34 2d 31 37 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 69 6d 70 6f 72 74 7b 5f 20 61 73 20 65 2c 64 20 61 73 20 74 2c 61 20 61 73 20 6e 2c 69 2c 73 20 61 73 20 6f 2c 43 20 61 73 20 72 2c 63 20 61 73 20 61 2c 62 20 61 73 20 73 2c 65 20 61 73 20 6c 2c 4c 20 61 73 20 63 2c 67 20 61 73 20 64 2c 66 20 61 73 20 75 2c 78 20 61 73 20 70 2c 68 20 61 73 20 5f 2c 6a 20 61 73 20 76 2c 56 20 61 73 20 6d 2c 74 20 61 73 20 66 2c 6b 20 61 73 20 68 2c 72 20 61 73 20 67 2c 6d 20 61 73 20 62 2c 70 20 61 73 20 45 2c 50 20 61 73 20 79 2c 54 20 61 73 20 43 2c 6c 20 61 73 20 54 2c 6e 20 61 73 20 77 Data Ascii: /* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,r as g,m as b,p as E,P as y,T as C,l as T,n as w
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 79 44 6f 77 6e 3a 74 3d 3e 7b 22 45 6e 74 65 72 22 3d 3d 3d 74 2e 6b 65 79 26 26 65 28 74 29 7d 7d 29 2c 70 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 72 79 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 29 7d 63 61 74 63 68 28 52 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 52 65 29 7d 7d 7d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 63 6c 69 70 62 6f 61 72 64 41 50 49 3f 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: yDown:t=>{"Enter"===t.key&&e(t)}}),pn=function(e){return function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];try{return Promise.resolve(e.apply(this,t))}catch(Re){return Promise.reject(Re)}}}((function(e){return o.clipboardAPI?function(t,
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 74 61 72 74 65 64 22 2c 65 2e 65 6e 64 65 64 3d 22 65 6e 64 65 64 22 7d 28 6e 6f 7c 7c 28 6e 6f 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 6f 6f 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 2c 74 2c 6e 5d 3d 22 34 2e 32 39 2e 37 22 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 7b 66 75 6c 6c 3a 22 34 2e 32 39 2e 37 22 2c 6d 61 6a 6f 72 3a 65 2c 6d 69 6e 6f 72 3a 74 2c 70 61 74 63 68 3a 6e 7d 7d 2c 72 6f 3d 6f 2e 69 50 68 6f 6e 65 7c 7c 6f 2e 6d 6f 62 69 6c 65 41 6e 64 72 6f 69 64 7c 7c 6f 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 7c 7c 6f 2e 62 72 6f 77 73 65 72 2e 62 62 31 30 3b 66 75 6e 63 74 69 6f 6e 20 61 6f 28 29 7b 6c 65 74 20 65 3d 22 64 65 73 6b 74 6f 70 22 3b 72 65 74 75 72 6e 20 6f 2e 69 50 61 64 3f 65 3d 22 74 61 62 6c 65 74 22 3a 72 6f 26 26 28 65 3d Data Ascii: tarted",e.ended="ended"}(no\|\|(no={}));const oo=()=>{const[e,t,n]="4.29.7".split(".");return{full:"4.29.7",major:e,minor:t,patch:n}},ro=o.iPhone\|\|o.mobileAndroid\|\|o.windowsPhone\|\|o.browser.bb10;function ao(){let e="desktop";return o.iPad?e="tablet":ro&&(e=
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 69 6f 6e 2c 74 6f 74 61 6c 5f 76 69 64 65 6f 5f 64 75 72 61 74 69 6f 6e 3a 64 2e 64 75 72 61 74 69 6f 6e 2c 76 69 64 65 6f 5f 74 69 6d 65 73 74 61 6d 70 3a 79 74 28 6a 6f 2c 32 29 7c 7c 30 7d 3b 63 61 73 65 20 71 6f 2e 41 43 54 49 4f 4e 3a 72 65 74 75 72 6e 7b 66 65 61 74 75 72 65 3a 22 70 6c 61 79 65 72 22 2c 61 63 74 69 6f 6e 5f 74 79 70 65 3a 6f 2e 74 6f 75 63 68 3f 22 74 61 70 22 3a 22 63 6c 69 63 6b 22 7d 3b 63 61 73 65 20 71 6f 2e 56 49 45 57 3a 72 65 74 75 72 6e 7b 66 65 61 74 75 72 65 3a 22 70 6c 61 79 65 72 22 2c 76 69 65 77 5f 74 79 70 65 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 7d 3b 63 61 73 65 20 71 6f 2e 4c 49 56 45 3a 72 65 74 75 72 6e 7b 72 65 63 75 72 72 69 6e 67 5f 6c 69 76 65 5f 65 76 65 6e 74 5f 69 64 3a 60 24 7b 64 2e 6c 69 76 65 5f 65 Data Ascii: ion,total_video_duration:d.duration,video_timestamp:yt(jo,2)\|\|0};case qo.ACTION:return{feature:"player",action_type:o.touch?"tap":"click"};case qo.VIEW:return{feature:"player",view_type:"impression"};case qo.LIVE:return{recurring_live_event_id:`${d.live_e
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 6f 6e 74 65 78 74 45 76 65 6e 74 54 79 70 65 2e 43 41 53 54 5f 53 54 41 54 45 5f 43 48 41 4e 47 45 44 2c 74 68 69 73 2e 5f 6f 6e 43 61 73 74 53 74 61 74 65 43 68 61 6e 67 65 64 29 7d 2c 74 2e 61 64 64 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 6d 72 2e 63 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 3b 65 26 26 65 2e 61 64 64 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 28 22 75 72 6e 3a 78 2d 63 61 73 74 3a 63 6f 6d 2e 76 69 6d 65 6f 2e 63 61 73 74 2e 6d 65 64 69 61 22 2c 74 68 69 73 2e 5f 6f 6e 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 29 7d 2c 74 2e 6f 6e 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 4d 45 44 49 41 5f 46 49 4e 49 53 48 45 44 22 3d Data Ascii: ontextEventType.CAST_STATE_CHANGED,this._onCastStateChanged)},t.addMessageListener=function(){const e=mr.currentSession;e&&e.addMessageListener("urn:x-cast:com.vimeo.cast.media",this._onMessageReceived)},t.onMessageReceived=function(e,t){"MEDIA_FINISHED"=
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 69 64 74 68 22 2c 22 22 29 2c 6e 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3d 22 22 7d 2c 67 65 74 54 68 75 6d 62 6e 61 69 6c 3a 61 2c 6c 6f 61 64 54 68 75 6d 62 6e 61 69 6c 3a 63 2c 74 68 75 6d 62 6e 61 69 6c 50 72 6f 6d 69 73 65 3a 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 21 55 72 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 22 6f 70 61 63 69 74 79 22 3d 3d 3d 65 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 65 3d 69 28 29 3b 76 61 72 20 74 3b 65 26 26 28 6b 28 65 29 2e 6f 66 66 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 6e 29 2c 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 74 2e 72 65 6d 6f 76 65 Data Ascii: idth",""),n.style.backgroundImage=""},getThumbnail:a,loadThumbnail:c,thumbnailPromise:i}}function zr(e){const t=!Ur(e);function n(e){if("opacity"===e.propertyName){const e=i();var t;e&&(k(e).off("transitionend",n),null==e\|\|null==(t=e.parentNode)\|\|t.remove
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 30 26 26 21 61 2e 70 61 75 73 65 64 26 26 21 65 2e 63 6f 6e 66 69 67 2e 65 6d 62 65 64 2e 73 65 74 74 69 6e 67 73 2e 62 61 63 6b 67 72 6f 75 6e 64 7c 7c 64 29 26 26 28 64 3d 21 31 2c 72 2e 66 69 72 65 28 57 74 2e 5f 70 61 75 73 65 42 75 74 74 6f 6e 50 72 65 73 73 65 64 29 29 7d 29 29 2c 72 2e 6f 6e 28 6d 2e 45 52 52 4f 52 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 41 28 74 29 26 26 21 54 29 7b 69 66 28 65 2e 63 6f 6e 66 69 67 2e 65 6d 62 65 64 2e 61 75 74 6f 70 6c 61 79 3d 30 2c 61 2e 70 61 75 73 65 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 29 72 65 74 75 72 6e 20 4a 28 65 2e 73 74 61 72 74 54 69 6d 65 29 2c 76 6f 69 64 20 72 2e 66 69 72 65 28 57 74 2e 5f 70 61 75 73 65 64 2c 61 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 3b 69 66 28 30 3d 3d 3d 61 2e Data Ascii: 0&&!a.paused&&!e.config.embed.settings.background\|\|d)&&(d=!1,r.fire(Wt._pauseButtonPressed))})),r.on(m.ERROR,(function(t){if(A(t)&&!T){if(e.config.embed.autoplay=0,a.pause(),e.startTime)return J(e.startTime),void r.fire(Wt._paused,a.currentTime);if(0===a.
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2d 22 29 26 26 53 28 22 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 22 29 7d 29 29 2e 6f 6e 28 57 74 2e 5f 63 61 70 74 69 6f 6e 73 43 68 61 6e 67 65 64 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 7c 7c 28 65 3f 53 28 22 74 65 78 74 5f 74 72 61 63 6b 5f 63 68 61 6e 67 65 22 2c 7b 74 65 78 74 54 72 61 63 6b 4c 61 6e 67 75 61 67 65 3a 65 2e 6c 61 6e 67 75 61 67 65 2c 74 65 78 74 54 72 61 63 6b 4b 69 6e 64 3a 65 2e 6b 69 6e 64 7d 29 3a 53 28 22 74 65 78 74 5f 74 72 61 63 6b 5f 63 68 61 6e 67 65 22 29 29 7d 29 29 2e 6f 6e 28 57 74 2e 5f 62 61 64 67 65 50 72 65 73 73 65 64 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 31 21 3d 3d 65 26 26 31 32 21 3d 3d 65 7c 7c 53 28 Data Ascii: function(e){0===e.indexOf("login-")&&S("login_attempt")})).on(Wt._captionsChanged,(function(e,t){t\|\|(e?S("text_track_change",{textTrackLanguage:e.language,textTrackKind:e.kind}):S("text_track_change"))})).on(Wt._badgePressed,(function(e){1!==e&&12!==e\|\|S(
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 2d 34 20 2d 34 20 31 38 20 31 38 27 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 27 66 69 6c 6c 27 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 64 3d 27 4d 31 30 2e 39 20 32 2e 39 6c 2d 2e 37 2d 2e 37 63 2d 2e 32 2d 2e 32 2d 2e 36 2d 2e 32 2d 2e 38 2d 2e 31 4c 35 20 36 2e 36 20 32 2e 36 20 34 2e 31 63 2d 2e 32 2d 2e 31 2d 2e 36 2d 2e 31 2d 2e 37 20 30 6c 2d 2e 38 2e 38 63 2d 2e 31 2e 31 2d 2e 31 2e 35 20 30 20 2e 37 6c 33 2e 31 20 33 2e 31 63 2e 34 2e 34 20 31 20 2e 34 20 31 2e 34 20 30 6c 35 2e 31 2d 35 2e 31 63 2e 33 2d 2e 32 2e 33 2d 2e 36 2e 32 2d 2e 37 7a 27 2f 3e 3c 2f 73 76 67 3e 22 7d 2c 74 2e 74 65 6d 70 6c 61 74 65 73 2e 69 63 6f 6e 5f 63 6c 6f 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 27 3c 73 76 67 20 63 6c 61 73 73 3d 22 77 Data Ascii: -4 -4 18 18'><path class='fill' fill='#ffffff' d='M10.9 2.9l-.7-.7c-.2-.2-.6-.2-.8-.1L5 6.6 2.6 4.1c-.2-.1-.6-.1-.7 0l-.8.8c-.1.1-.1.5 0 .7l3.1 3.1c.4.4 1 .4 1.4 0l5.1-5.1c.3-.2.3-.6.2-.7z'/></svg>"},t.templates.icon_clock=function(e){return'<svg class="w
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 22 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 20 72 65 71 75 69 72 65 64 20 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 64 72 6f 70 64 6f 77 6e 2d 27 2b 65 2e 66 69 65 6c 64 2e 69 64 2b 27 22 20 64 61 74 61 2d 69 64 3d 22 27 2b 65 2e 66 69 65 6c 64 2e 69 64 2b 27 22 20 64 61 74 61 2d 74 79 70 65 3d 22 27 2b 65 2e 66 69 65 6c 64 2e 66 69 65 6c 64 5f 74 79 70 65 2b 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 22 20 66 6f 72 3d 22 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2d 27 2b 65 2e 66 69 65 6c 64 2e 69 Data Ascii: class="vp-email-capture-form-custom-field required vp-email-capture-form-dropdown-'+e.field.id+'" data-id="'+e.field.id+'" data-type="'+e.field.field_type+'" aria-hidden="true"><label class="vp-email-capture-form-input-label" for="custom-field-'+e.field.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49923	151.101.14.109	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:36 UTC	551	OUT	GET /p/4.29.7/css/player.css HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:36 UTC	441	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210609 Content-Type: text/css Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:30:36 GMT Age: 90393 X-Served-By: cache-iad-kjyo7100091-IAD, cache-pdk-katl1840046-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713468637.650923,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 37 20 2d 20 32 30 32 34 2d 30 34 2d 31 37 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 70 78 29 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 4c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 31 30 70 78 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 74 68 72 6f 62 7b 30 25 2c 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 34 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 69 67 67 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: /* VimeoPlayer - v4.29.7 - 2024-04-17 */@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:tra
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 61 63 69 74 79 3a 30 3b 77 69 64 74 68 3a 31 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 32 35 25 29 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 73 75 62 74 69 74 6c 65 2d 2d 65 6d 62 65 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 31 2e 32 65 6d 20 31 65 6d 20 31 2e 35 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 31 37 35 70 78 29 7b 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 73 75 62 74 69 74 6c 65 2d 2d 65 6d 62 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 66 6f 6f 74 6e 6f 74 65 2d 2d 65 6d 62 Data Ascii: acity:0;width:150%;transform:translateX(125%)}.player .vp-share-subtitle--embed{font-size:1.4em!important;margin:1.2em 1em 1.5em;color:#fff!important}@media (max-height:175px){.player .vp-share-subtitle--embed{display:none}}.player .vp-share-footnote--emb
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 6c 67 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 73 6d 20 2e 76 70 2d 65 6d 61 69 6c 2d Data Ascii: re-form-custom-field,.player-lg .vp-email-capture-reg-full .vp-email-capture-form-custom-field,.player-md .vp-email-capture .vp-email-capture-form-custom-field,.player-md .vp-email-capture-reg-full .vp-email-capture-form-custom-field,.player-sm .vp-email-
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 70 6c 61 79 65 72 2d 6c 67 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2c 2e 70 6c 61 79 65 72 2d 6c 67 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 Data Ascii: 0;transition:transform .3s;border-radius:0}.player-lg .vp-email-capture .vp-email-capture-form-buttons .vp-email-capture-form-button,.player-lg .vp-email-capture-reg-full .vp-email-capture-form-buttons .vp-email-capture-form-button,.player-md .vp-email-ca
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 67 6f 2d 62 61 63 6b 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 62 79 70 61 73 73 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 67 6f 2d 62 61 63 6b 2c 2e 70 6c 61 79 65 72 2d 73 6d 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 Data Ascii: d .vp-email-capture button.vp-email-capture-reg-go-back,.player-md .vp-email-capture-reg-full button.vp-email-capture-reg-bypass,.player-md .vp-email-capture-reg-full button.vp-email-capture-reg-go-back,.player-sm .vp-email-capture button.vp-email-capture
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 64 6f 77 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 76 69 64 65 6f 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6d 65 74 65 72 2d 77 72 61 70 70 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 76 69 64 65 6f 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6d 65 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 76 69 64 65 6f 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6d 65 74 65 72 2d 2d 61 63 74 69 76 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 6c 6c 20 33 73 20 6c Data Ascii: down.vp-email-capture-video-countdown-meter-wrapper{overflow:hidden}.player .vp-email-capture-video-countdown-meter{border-radius:0;position:absolute;top:0;right:0;bottom:0;left:0}.player .vp-email-capture-video-countdown-meter--active{animation:fill 3s l
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 69 74 5d 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 77 69 64 74 68 3a 39 65 6d 3b 63 6f 6c 6f 72 3a 23 34 34 34 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 61 39 61 39 61 39 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2e 70 61 73 73 77 6f 72 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 20 2e 6c 6f 61 64 69 6e 67 7b 61 6e 69 6d 61 74 69 6f 6e Data Ascii: it]){border-radius:2px;width:9em;color:#444}.player .vp-overlay-wrapper .form input:not([type=submit])::placeholder{color:#a9a9a9}.player .vp-overlay-wrapper .form.password input[type=submit]{width:auto}.player .vp-overlay-wrapper .form .loading{animation
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 73 68 61 72 65 49 63 6f 6e 5f 5f 64 61 38 31 39 39 34 32 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 70 78 29 7d 2e 56 4f 44 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 76 6f 64 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 36 35 38 32 34 62 39 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 62 75 74 74 6f 6e 2e 56 4f 44 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 76 6f 64 42 75 74 74 6f 6e 5f 5f 36 35 38 32 34 62 39 65 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 38 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 62 75 74 74 6f 6e 2e 56 4f 44 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 76 6f 64 42 75 74 74 6f 6e 5f 5f 36 35 38 32 34 62 39 65 5b 64 61 Data Ascii: shareIcon__da819942{transform:translateX(-1px)}.VODButton_module_vodButtonContainer__65824b9e{display:flex;justify-content:end}button.VODButton_module_vodButton__65824b9e span{font-size:.88rem;font-weight:700}button.VODButton_module_vodButton__65824b9e[da
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 64 61 74 61 2d 74 69 6e 79 2d 70 6c 61 79 65 64 5d 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 77 6f 2d 6d 6f 6e 6f 63 68 72 6f 6d 65 29 7d 62 75 74 74 6f 6e 2e 50 6c 61 79 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 70 6c 61 79 42 75 74 74 6f 6e 5f 5f 66 63 36 62 65 63 35 37 3a 68 6f 76 65 72 20 5b 64 61 74 61 2d 74 69 6e 79 2d 6c 6f 61 64 65 64 5d 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 77 6f 2d 6d 6f 6e 6f 63 68 72 6f 6d 65 2d 6f 70 61 63 69 74 79 2d 74 77 65 6e 74 79 29 7d 62 75 74 74 6f 6e 2e 50 6c 61 79 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 70 6c 61 79 42 75 74 74 6f 6e 5f 5f 66 63 36 62 65 63 35 37 3a 68 6f 76 65 72 20 5b 64 61 74 61 2d 74 69 6e 79 2d 62 75 66 66 65 72 2d 70 61 74 74 65 72 6e 5d 20 6c 69 6e 65 7b 73 Data Ascii: data-tiny-played]{fill:var(--color-two-monochrome)}button.PlayButton_module_playButton__fc6bec57:hover [data-tiny-loaded]{fill:var(--color-two-monochrome-opacity-twenty)}button.PlayButton_module_playButton__fc6bec57:hover [data-tiny-buffer-pattern] line{s
2024-04-18 19:30:36 UTC	16384	IN	Data Raw: 35 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 2e 34 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 2e 36 65 6d 20 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 34 65 6d 7d 2e 50 72 6f 67 72 65 73 73 42 61 72 5f 6d 6f 64 75 6c 65 5f 70 72 6f 67 72 65 73 73 42 61 72 43 6f 6e 74 61 69 6e 65 72 5f 5f 34 63 39 31 37 38 38 35 20 2e 50 72 6f 67 72 65 73 73 42 61 72 5f 6d 6f 64 75 6c 65 5f 70 72 6f 67 72 65 73 73 42 61 72 5f 5f 34 63 39 31 37 38 38 35 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 3a 31 3b 68 65 69 67 68 74 3a 2e 34 65 6d 3b 70 6f 73 69 74 Data Ascii: 5{width:100%;height:.4em;display:flex;align-items:center;padding:1.6em 0;cursor:pointer;margin-right:.4em}.ProgressBar_module_progressBarContainer__4c917885 .ProgressBar_module_progressBar__4c917885{display:flex;align-items:center;flex:1;height:.4em;posit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49931	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	695	OUT	GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c6ea8d8e630f57d377818da4c8bd1b8c" If-Modified-Since: Thu, 21 Dec 2023 11:41:45 GMT
2024-04-18 19:30:38 UTC	494	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 19:30:38 GMT Last-Modified: Thu, 21 Dec 2023 11:41:45 GMT Cache-Control: no-cache x-amz-version-id: TE0H92uWvbxvP5WbDnKffpRjpMGxk2Jl Server: AmazonS3 ETag: "c6ea8d8e630f57d377818da4c8bd1b8c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 588ba2bf54e2eede4ead1c19f79098f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: BofCye-1j2vrOX2yG54C8iNzcTZ1YQA-MIS_DFb_a3_gnMrrq2jddQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49932	31.13.65.7	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1315	OUT	GET /signals/config/134545240619778?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:37 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-18 19:30:37 UTC	1513	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-04-18 19:30:37 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49925	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1295	OUT	GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:37 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 24109 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:39 GMT ETag: "661e934b-5e2d" Accept-Ranges: bytes
2024-04-18 19:30:37 UTC	3832	IN	Data Raw: 2f 2a 21 20 53 6d 61 72 74 4d 65 6e 75 73 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 32 2e 31 20 2d 20 4e 6f 76 65 6d 62 65 72 20 33 2c 20 32 30 32 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 6d 65 6e 75 73 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 56 61 73 69 6c 20 44 69 6e 6b 6f 76 2c 20 56 61 64 69 6b 6f 6d 20 57 65 62 20 4c 74 64 2e 20 68 74 74 70 3a 2f 2f 76 61 64 69 6b 6f 6d 2e 63 6f 6d 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: /! SmartMenus jQuery Plugin - v1.2.1 - November 3, 2022 http://www.smartmenus.org/ * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 64 61 74 61 2d 73 6d 61 72 74 6d 65 6e 75 73 2d 69 64 22 29 2e 72 65 6d 6f 76 65 44 61 74 61 53 4d 28 22 6c 65 76 65 6c 22 29 2e 6f 66 66 28 63 29 2c 63 2b 3d 74 68 69 73 2e 72 6f 6f 74 49 64 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 63 29 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 66 66 28 63 29 2c 74 68 69 73 2e 6f 70 74 73 2e 73 75 62 49 6e 64 69 63 61 74 6f 72 73 26 26 28 74 68 69 73 2e 24 73 75 62 41 72 72 6f 77 3d 6e 75 6c 6c 29 7d 74 68 69 73 2e 6d 65 6e 75 48 69 64 65 41 6c 6c 28 29 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 68 69 73 2e 24 72 6f 6f 74 2e 66 69 6e 64 28 22 75 6c 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 3b 62 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 Data Ascii: data-smartmenus-id").removeDataSM("level").off(c),c+=this.rootId,a(document).off(c),a(window).off(c),this.opts.subIndicators&&(this.$subArrow=null)}this.menuHideAll();var d=this;this.$root.find("ul").each(function(){var b=a(this);b.dataSM("scroll-arrows")
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 69 73 43 53 53 4f 6e 28 29 7d 2c 68 61 6e 64 6c 65 49 74 65 6d 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 45 76 65 6e 74 73 28 29 26 26 21 74 68 69 73 2e 69 73 4c 69 6e 6b 49 6e 4d 65 67 61 4d 65 6e 75 28 61 29 7d 2c 69 73 43 6f 6c 6c 61 70 73 69 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 73 74 61 74 69 63 22 3d 3d 74 68 69 73 2e 24 66 69 72 73 74 53 75 62 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 7d 2c 69 73 43 53 53 4f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 69 6e 6c 69 6e 65 22 21 3d 74 68 69 73 2e 24 66 69 72 73 74 4c 69 6e Data Ascii: function(){return!this.disabled&&this.isCSSOn()},handleItemEvents:function(a){return this.handleEvents()&&!this.isLinkInMegaMenu(a)},isCollapsible:function(){return"static"==this.$firstSub.css("position")},isCSSOn:function(){return"inline"!=this.$firstLin
2024-04-18 19:30:37 UTC	558	IN	Data Raw: 3a 22 66 61 6c 73 65 22 2c 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 22 74 72 75 65 22 7d 29 3b 76 61 72 20 64 3d 62 2e 64 61 74 61 53 4d 28 22 6c 65 76 65 6c 22 29 3b 74 68 69 73 2e 61 63 74 69 76 61 74 65 64 49 74 65 6d 73 2e 73 70 6c 69 63 65 28 64 2d 31 2c 31 29 2c 74 68 69 73 2e 76 69 73 69 62 6c 65 53 75 62 4d 65 6e 75 73 2e 73 70 6c 69 63 65 28 61 2e 69 6e 41 72 72 61 79 28 62 2c 74 68 69 73 2e 76 69 73 69 62 6c 65 53 75 62 4d 65 6e 75 73 29 2c 31 29 2c 74 68 69 73 2e 24 72 6f 6f 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 68 69 64 65 2e 73 6d 61 70 69 22 2c 62 5b 30 5d 29 7d 7d 2c 6d 65 6e 75 48 69 64 65 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 68 6f 77 54 69 6d 65 6f 75 74 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: :"false","aria-hidden":"true"});var d=b.dataSM("level");this.activatedItems.splice(d-1,1),this.visibleSubMenus.splice(a.inArray(b,this.visibleSubMenus),1),this.$root.triggerHandler("hide.smapi",b[0])}},menuHideAll:function(){this.showTimeout&&(clearTimeou
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 72 6f 6f 74 2e 68 69 64 65 28 74 68 69 73 2e 6f 70 74 73 2e 68 69 64 65 44 75 72 61 74 69 6f 6e 29 29 29 2c 74 68 69 73 2e 61 63 74 69 76 61 74 65 64 49 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 76 69 73 69 62 6c 65 53 75 62 4d 65 6e 75 73 3d 5b 5d 2c 74 68 69 73 2e 63 6c 69 63 6b 41 63 74 69 76 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 66 6f 63 75 73 41 63 74 69 76 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 7a 49 6e 64 65 78 49 6e 63 3d 30 2c 74 68 69 73 2e 24 72 6f 6f 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 68 69 64 65 41 6c 6c 2e 73 6d 61 70 69 22 29 7d 2c 6d 65 6e 75 48 69 64 65 53 75 62 4d 65 6e 75 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 74 68 69 73 2e 61 63 74 69 76 61 74 65 64 49 74 65 6d 73 2e 6c 65 6e 67 74 68 Data Ascii: root.hide(this.opts.hideDuration))),this.activatedItems=[],this.visibleSubMenus=[],this.clickActivated=!1,this.focusActivated=!1,this.zIndexInc=0,this.$root.triggerHandler("hideAll.smapi")},menuHideSubMenus:function(a){for(var b=this.activatedItems.length
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 7c 7c 32 3d 3d 6a 26 26 21 69 2e 68 61 73 43 6c 61 73 73 28 22 73 6d 2d 76 65 72 74 69 63 61 6c 22 29 2c 78 3d 74 68 69 73 2e 6f 70 74 73 2e 72 69 67 68 74 54 6f 4c 65 66 74 53 75 62 4d 65 6e 75 73 26 26 21 68 2e 69 73 28 22 5b 64 61 74 61 2d 73 6d 2d 72 65 76 65 72 73 65 5d 22 29 7c 7c 21 74 68 69 73 2e 6f 70 74 73 2e 72 69 67 68 74 54 6f 4c 65 66 74 53 75 62 4d 65 6e 75 73 26 26 68 2e 69 73 28 22 5b 64 61 74 61 2d 73 6d 2d 72 65 76 65 72 73 65 5d 22 29 2c 79 3d 32 3d 3d 6a 3f 74 68 69 73 2e 6f 70 74 73 2e 6d 61 69 6e 4d 65 6e 75 53 75 62 4f 66 66 73 65 74 58 3a 74 68 69 73 2e 6f 70 74 73 2e 73 75 62 4d 65 6e 75 73 53 75 62 4f 66 66 73 65 74 58 2c 7a 3d 32 3d 3d 6a 3f 74 68 69 73 2e 6f 70 74 73 2e 6d 61 69 6e 4d 65 6e 75 53 75 62 4f 66 66 73 65 74 59 3a Data Ascii: \|\|2==j&&!i.hasClass("sm-vertical"),x=this.opts.rightToLeftSubMenus&&!h.is("[data-sm-reverse]")\|\|!this.opts.rightToLeftSubMenus&&h.is("[data-sm-reverse]"),y=2==j?this.opts.mainMenuSubOffsetX:this.opts.subMenusSubOffsetX,z=2==j?this.opts.mainMenuSubOffsetY:
2024-04-18 19:30:38 UTC	98	IN	Data Raw: 6f 6c 6c 54 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 54 69 6d 65 6f 75 74 3d 30 2c 61 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 22 29 2e 73 74 65 70 3d 31 2c 21 30 7d 2c 6d 65 6e 75 53 63 72 6f 6c 6c 54 6f 75 63 68 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 69 66 28 64 3d Data Ascii: ollTimeout),this.scrollTimeout=0,a.dataSM("scroll").step=1,!0},menuScrollTouch:function(b,d){if(d=
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 64 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2c 63 28 64 29 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 54 6f 75 63 68 50 6f 69 6e 74 28 64 29 3b 69 66 28 74 68 69 73 2e 67 65 74 43 6c 6f 73 65 73 74 4d 65 6e 75 28 65 2e 74 61 72 67 65 74 29 3d 3d 62 5b 30 5d 29 7b 76 61 72 20 66 3d 62 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 22 29 3b 69 66 28 2f 28 73 74 61 72 74 7c 64 6f 77 6e 29 24 2f 69 2e 74 65 73 74 28 64 2e 74 79 70 65 29 29 74 68 69 73 2e 6d 65 6e 75 53 63 72 6f 6c 6c 53 74 6f 70 28 62 29 3f 28 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 24 74 6f 75 63 68 53 63 72 6f 6c 6c 69 6e 67 53 75 62 3d 62 29 3a 74 68 69 73 2e 24 74 6f 75 63 68 53 63 72 6f 6c 6c 69 6e 67 53 75 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 65 6e Data Ascii: d.originalEvent,c(d)){var e=this.getTouchPoint(d);if(this.getClosestMenu(e.target)==b[0]){var f=b.dataSM("scroll");if(/(start\|down)$/i.test(d.type))this.menuScrollStop(b)?(d.preventDefault(),this.$touchScrollingSub=b):this.$touchScrollingSub=null,this.men
2024-04-18 19:30:38 UTC	1839	IN	Data Raw: 6c 6c 61 70 73 69 62 6c 65 26 26 62 7c 7c 28 74 68 69 73 2e 61 63 74 69 76 61 74 65 64 49 74 65 6d 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 61 63 74 69 76 61 74 65 64 49 74 65 6d 73 5b 74 68 69 73 2e 61 63 74 69 76 61 74 65 64 49 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 5d 5b 30 5d 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 6d 65 6e 75 48 69 64 65 41 6c 6c 28 29 29 2c 74 68 69 73 2e 77 61 73 43 6f 6c 6c 61 70 73 69 62 6c 65 3d 62 7d 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 24 64 69 73 61 62 6c 65 4f 76 65 72 6c 61 79 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 66 66 73 65 74 28 29 3b 74 68 69 73 2e 24 64 69 73 61 62 6c 65 4f 76 65 72 6c 61 79 2e 63 73 73 28 7b 74 6f 70 3a 63 2e 74 6f 70 2c 6c 65 66 74 3a 63 2e 6c 65 66 74 2c 77 69 64 74 68 Data Ascii: llapsible&&b\|\|(this.activatedItems.length&&this.activatedItems[this.activatedItems.length-1][0].blur(),this.menuHideAll()),this.wasCollapsible=b}}else if(this.$disableOverlay){var c=this.$root.offset();this.$disableOverlay.css({top:c.top,left:c.left,width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49934	151.101.14.109	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	546	OUT	GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:37 UTC	457	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1862 Content-Type: application/javascript Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2430478 Date: Thu, 18 Apr 2024 19:30:37 GMT X-Served-By: cache-iad-kiad7000106-IAD, cache-pdk-katl1840094-PDK X-Cache: HIT, HIT X-Cache-Hits: 313, 0 X-Timer: S1713468638.617646,VS0,VE1 Vary: Accept-Encoding,x-http-method-override
2024-04-18 19:30:37 UTC	1371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 61 6c 73 65 2c 6e 2c 6f 2c 69 2c 72 3d 74 79 70 65 6f 66 20 74 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6d 65 6f 2e 63 6f 6d 2f 61 62 6c 69 6e 63 6f 6c 6e 2f 76 75 69 64 22 2c 61 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 32 31 34 37 34 38 33 36 34 37 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 7b 65 3d 30 3b 74 3d 66 28 29 7d 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 74 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 76 Data Ascii: (function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()*(t-e+1))+e}function d(t){v
2024-04-18 19:30:37 UTC	491	IN	Data Raw: 2b 22 2e 22 2b 28 28 67 28 29 5e 6c 28 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 26 32 31 34 37 34 38 33 36 34 37 29 3b 65 3d 74 72 75 65 7d 6f 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3e 32 29 7b 6f 2e 73 68 69 66 74 28 29 7d 73 28 22 76 75 69 64 22 2c 6e 2e 63 6f 6f 6b 69 65 2c 33 36 35 2a 32 2c 22 2f 22 2c 22 2e 22 2b 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 74 72 75 65 2c 22 4e 6f 6e 65 22 29 3b 69 66 28 65 26 26 73 28 22 76 75 69 64 22 29 29 7b 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 76 75 69 64 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 2e 5f 76 75 69 64 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c Data Ascii: +"."+((g()^l(t.navigator.userAgent)).toString()&2147483647);e=true}o=t.location.hostname.split(".");if(o.length>2){o.shift()}s("vuid",n.cookie,365*2,"/","."+o.join("."),true,"None");if(e&&s("vuid")){if(typeof t._vuid==="object"&&t._vuid.length){for(a=0;a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49927	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1306	OUT	GET /wp-content/uploads/2023/07/002-virar.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:37 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Type: image/svg+xml Content-Length: 2639 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-a4f" Accept-Ranges: bytes
2024-04-18 19:30:37 UTC	2639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49933	64.233.177.156	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1419	OUT	GET /td/rul/1027983844?random=1713468635861&cv=11&fst=1713468635861&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 19:30:37 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6; expires=Sat, 18-Apr-2026 19:30:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:37 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 19:30:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49926	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1318	OUT	GET /wp-content/uploads/2023/07/003-integrao-de-dados.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:37 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Type: image/svg+xml Content-Length: 4483 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-1183" Accept-Ranges: bytes
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-backgroun
2024-04-18 19:30:37 UTC	387	IN	Data Raw: 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 3d 22 23 30 30 30 30 30 30 22 20 6f 70 61 63 69 74 79 3d 22 31 22 20 63 6c 61 73 73 3d 22 22 2f 3e 0a 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 36 32 2e 35 22 20 63 79 3d 22 32 34 39 2e 35 22 20 72 3d 22 31 39 2e 30 39 32 22 20 73 74 79 6c 65 3d 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 35 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 65 39 35 31 31 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 35 22 Data Ascii: und" stroke-miterlimit="10" data-original="#000000" opacity="1" class=""/> <circle cx="162.5" cy="249.5" r="19.092" style="stroke-width:15;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;" fill="none" stroke="#e9511d" stroke-width="15"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49928	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1314	OUT	GET /wp-content/uploads/2023/07/004-conectividade.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:37 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Type: image/svg+xml Content-Length: 2289 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-8f1" Accept-Ranges: bytes
2024-04-18 19:30:37 UTC	2289	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 32 20 37 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 72 72" style="enable-background:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49929	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1301	OUT	GET /wp-content/uploads/2021/10/zen1.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:37 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Type: image/jpeg Content-Length: 338430 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:42 GMT ETag: "658070a6-529fe" Accept-Ranges: bytes
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: ff d8 ff e1 1a 32 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 32 3a 32 38 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 2ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:22:28 X"
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 5e 86 5f 5b 6d a4 ce e6 bb c6 25 b0 ba da b2 29 ab 65 56 54 0e 13 7d b6 33 92 18 7d af 3f d8 5c af 44 a3 2e 9e b3 50 7e 35 8d 60 24 8b 76 18 e2 36 ee 5d 5e c2 cd af 73 48 16 4c 82 38 33 c7 f6 93 80 8d f0 91 f3 0d 10 49 ab 07 62 d9 cb e9 f8 38 dd 3f 2a 9c 5a 99 55 45 9b 80 6f d1 9f cd 72 c8 ea 95 d5 87 f5 5b 20 b2 a1 53 ac ad 9b c8 33 b9 c4 fd 32 ac 65 65 5a ce 99 7e 2b 03 9e e6 80 2a 80 49 35 93 b6 34 ff 00 43 f4 3f a8 aa 7d 66 71 fd 89 56 39 6d 84 5a e0 1d b1 85 e4 06 8e ed 68 55 cc 24 26 23 fd 61 f8 33 f1 83 0b fe a9 73 9d b1 d8 3d 0e 38 6e 47 b4 fc d1 33 c0 ba af ac 34 78 16 d8 3e 40 28 8a df 5e 27 45 ab 63 dc 05 bb 8c b0 82 04 fe 7e 9e d4 ef 0f 39 9d 6c 7a 6e 87 56 60 ed 3a c7 ee a0 46 a7 c0 93 ff 00 8e aa f4 f3 00 7f e3 6a c6 25 dd 37 08 9e d5 c0 3e Data Ascii: ^_[m%)eVT}3}?\D.P~5`$v6]^sHL83Ib8?ZUEor[ S32eeZ~+I54C?}fqV9mZhU$&#a3s=8nG34x>@(^'Ec~9lznV`:Fj%7>
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 58 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 03 20 00 00 00 06 73 6c 69 63 65 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 05 73 6c 69 63 65 00 00 00 12 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 Data Ascii: oundsObjcRct1Top longLeftlongBtomlongXRghtlong slicesVlLsObjcslicesliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg
2024-04-18 19:30:38 UTC	1692	IN	Data Raw: da db 58 d0 d7 db bb da fd a3 6f a8 e6 b4 6f de ef ce f7 ad 1e 93 93 4e 5b 19 7b 4e e7 3c c3 81 e5 ae fc e6 15 c6 c6 84 79 0f c8 b7 fe a7 fa 86 eb 8f f8 36 9a dd fd a9 77 fd f3 e9 21 38 0a b0 bb 1e 49 71 00 75 7b 3c 1c 03 95 60 ac 4b 19 3e f7 01 a8 9e cd fe 53 d6 be 47 4e e9 4e 63 1b 66 1d 57 7a 5f cd 39 e0 cb 48 fc ea 9e c7 57 63 3f e3 37 ef 45 e9 34 7a 38 4d 7b 86 d7 3c ef 3f da fa 3f f8 1a 9b 86 e0 34 d6 07 e4 4e 86 31 18 df 59 6e c5 3c a6 79 08 bf 4c 76 ff 00 be 79 9e b7 f5 63 0b aa d9 65 f8 75 8c 5e aa 41 7b 36 99 ab 25 cd 1b 8d 56 b6 cd cf ab 2e df cc c8 ae cf d2 ff 00 86 67 f8 45 cc 62 e3 8b 3a c6 3d 16 02 cf 55 8e 0e 6b 84 10 43 4f b5 c1 77 b9 8c 75 76 4b 0c 3d b0 e1 e2 08 d5 72 ff 00 59 4b 71 fe b1 60 75 19 15 d3 90 1c e7 bb 50 37 c4 5c 36 fe 6f Data Ascii: XooN[{N<y6w!8Iqu{<`K>SGNNcfWz_9HWc?7E4z8M{<??4N1Yn<yLvyceu^A{6%V.gEb:=UkCOwuvK=rYKq`uP7\6o
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: bf 84 ef 77 ed 1f 4d a3 e9 56 ea cf a9 1f c9 fa 35 aa 99 99 7d 2f a6 90 3a 7e fb af 6f d2 b2 fe d3 a1 6d 75 06 b1 9e e6 a0 65 1e 86 fc 93 18 c8 ee 0c 47 f5 b4 4d fe 2f 3a 00 af a7 1e b1 90 df d3 67 4b 68 07 f3 68 61 db bb fe bf 73 7f cc a9 76 36 d2 d2 c6 d7 c3 27 73 fc e3 86 ac 7f ab 1d 42 9c 8e 87 4d 58 e0 34 e2 b9 d4 39 83 f3 61 de a3 3f ce aa c6 ad 5d cf 71 04 8d 3b 85 62 3f 28 a6 9c f4 91 07 7b 6b f5 77 01 4b 19 e2 d3 a2 c6 da df 52 9b 36 8d d5 1f a5 dc 35 c3 63 96 87 52 7d 86 c7 d8 f2 20 7b 5a 0f 00 2a 75 bd 8f f4 cb fd 93 ed 77 84 6a 52 22 ec 1e aa 06 a8 8d 68 b6 6d d5 8b 2e cf 66 4c 76 b0 7e 2d f7 7f e4 95 e1 68 8d 86 49 6e 93 1a 18 f0 54 33 b4 7d 4f f0 78 fc 7d ab 3e fd 40 f8 ba a4 5c 24 3b 87 ff d5 9e 4f 54 be 9c 3f b1 d2 d2 6d de f0 fd bf 48 b4 Data Ascii: wMV5}/:~omueGM/:gKhhasv6'sBMX49a?]q;b?({kwKR65cR} {Z*uwjR"hm.fLv~-hInT3}Ox}>@\$;OT?mH
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 31 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0e 80 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d Data Ascii: Adobe PhotoshopAdobe Photoshop 20218BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 00 00 00 24 6c 75 6d 69 00 00 03 f8 00 00 00 14 6d 65 61 73 00 00 04 0c 00 00 00 24 74 65 63 68 00 00 04 30 00 00 00 0c 72 54 52 43 00 00 04 3c 00 00 08 0c 67 54 52 43 00 00 04 3c 00 00 08 0c 62 54 52 43 00 00 04 3c 00 00 08 0c 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 31 39 39 38 20 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 43 6f 6d 70 61 6e 79 00 00 64 65 73 63 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 Data Ascii: $lumimeas$tech0rTRC<gTRC<bTRC<textCopyright (c) 1998 Hewlett-Packard CompanydescsRGB IEC61966-2.1sRGB IEC61966-2.1XYZ Q
2024-04-18 19:30:38 UTC	196	IN	Data Raw: 7b 7d 53 ee ec a8 f7 4f c9 bb ed 05 2c ce c4 29 db 5a 46 4b 61 d2 cf 03 d0 7c d6 39 70 c5 a5 be 59 7b eb 1d be 6d f7 7d 25 a6 2e 25 54 77 51 d3 2d 1d f5 66 67 2c d7 1e 8e 9d 35 6b 2c 9a ef 94 92 34 dd d6 96 75 3d aa 46 77 6e a8 93 5f 7c 32 5c a0 dc 5d 0f 0a 7b 67 74 f3 7b d9 f3 9d 8c 6c af b2 9b 9e dd 57 6d 9d 6d f7 b0 2a c4 b8 6e b1 20 74 1d 35 57 d7 47 02 be 5c d3 0a da e1 4b 4f 6d 63 6c 98 c7 bf 6d 87 38 eb 70 36 44 96 d9 83 e6 c3 a6 90 88 06 a4 51 83 04 75 db 42 6f 23 18 40 56 38 bb cf 3d 34 7e c6 99 7b d9 df 32 ef 80 60 88 a7 b4 3f d4 7c f7 e3 57 cf 48 32 66 69 08 8e 93 e8 d5 Data Ascii: {}SO,)ZFKa\|9pY{m}%.%TwQ-fg,5k,4u=Fwn_\|2\]{gt{lWmm*n t5WG\KOmclm8p6DQuBo#@V8=4~{2`?\|WH2fi
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 56 ef 08 80 43 c4 29 48 e8 78 9c 62 58 1d 93 bf 1e 5a bf b1 46 ba e7 d7 a9 28 55 c4 17 b8 6a 26 e7 ad eb 5e b0 3d a3 65 db 30 d3 00 35 a0 02 db 7c c7 ee 8a a2 a9 a3 49 56 ab 6d b6 ba 8a 22 e7 59 89 7e 02 d9 22 db 84 e1 bd 2c 53 16 9d 75 46 bd ae 9b 10 0a d0 29 db 32 a2 fa 1a 9b b0 4a a2 c5 6b ce 44 56 dd e7 54 49 98 f2 ee b8 80 9e 23 1c b7 71 74 34 15 c8 d6 33 17 18 ec 80 a6 92 ad 58 2b 23 19 af e8 ad eb 74 ad d3 94 51 de 58 4b 67 22 2a a2 63 cc e5 35 61 af a4 70 b6 8d 95 51 73 e3 32 26 8b 39 74 c6 87 b6 44 db 56 de da b4 55 d1 94 b3 74 97 5a 7e ce 33 67 7c fb 27 9f 4d f3 e7 1b d9 d9 53 6d d4 3d 95 6d f7 5f 53 ce 9c 79 e7 ed 9c 68 e5 79 2d 95 f4 f2 87 bd bc 9f b6 b3 b6 64 f1 fb 6c e3 53 c9 aa 6b d7 88 1c 91 a0 53 5b 31 6c 0a a5 e4 c2 5e 12 d3 13 b0 c1 a4 Data Ascii: VC)HxbXZF(Uj&^=e05\|IVm"Y~",SuF)2JkDVTI#qt43X+#tQXKg"*c5apQs2&9tDVUtZ~3g\|'MSm=m_Syhy-dlSkS[1l^
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 3e 88 81 18 0e 60 0e 8e 65 b2 6c 0e af c9 a3 d8 7c f1 28 da a0 e4 1f 5c 54 79 5d 6a 32 70 8d dc da 04 9b 89 28 e3 e1 b6 00 e6 93 2f 39 89 bd 38 71 ce dd 0e a6 ee 91 ab da c6 63 05 e0 29 11 68 06 65 cf 5f 50 d0 a3 01 90 db 69 ca 69 3b a2 9c a6 a9 7e f6 97 b1 78 b5 95 ac 99 89 1a 16 b6 a8 c9 99 9b fe db 6b cb ca 64 d5 34 ad 5f 31 1a 4b 30 62 25 75 a3 5f e5 8f 5b e3 07 fa 11 8f 11 1b ea 99 86 71 f2 99 af b3 a0 ca a7 b3 ea 28 d6 42 22 d8 aa be 90 2f 99 13 48 23 56 65 94 4d d7 80 a1 05 5f cc d5 9d 47 c1 92 e3 a8 ee 5b 6a b9 d5 69 35 bd 3c 47 7f 6d 95 bd ba fe 8a 39 76 c4 d7 0f 28 48 07 19 a2 4d 8e 92 71 73 4c e9 38 6d 07 6c 2f 6c d7 9d e1 d1 42 97 e5 79 6b cd d3 63 6e 3b 3e a4 9d 59 48 7b 66 f4 10 66 ac 0a 3e 59 76 45 30 f3 bd 3d 71 71 19 1e e6 d1 68 5b b0 6d Data Ascii: >`el\|(\Ty]j2p(/98qc)he_Pii;~xkd4_1K0b%u_[q(B"/H#VeM_G[ji5<Gm9v(HMqsL8ml/lBykcn;>YH{ff>YvE0=qqh[m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49935	151.101.0.217	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	670	OUT	GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=600&mh=338 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:37 UTC	589	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10092 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "88b7afc9c4f5a4b2feec9a183dabbb8f" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 865350 Date: Thu, 18 Apr 2024 19:30:37 GMT X-Served-By: cache-dfw-kdal2120041-DFW, cache-pdk-kfty2130072-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1713468638.636124,VS0,VE1 Vary: Accept
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 26 52 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 02 58 00 00 01 52 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 01 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD&R(iinfinfeav01ColorjiprpKipcoispeXRpixiav1Ccolrnclx
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: ad 8d c8 3f 0c c2 5e 9c 0d c3 a8 a3 b4 6c d1 31 a8 0c 59 fb 26 cf 5e 75 5f 10 ea dc 70 b2 47 c5 e2 cd 1f 41 c8 7e 5b c8 db 75 f4 65 fb bc a6 4d 63 94 00 39 8c 64 6c 0a 13 f2 f8 18 67 ae 6f ee 1b 0e 75 5c 68 51 11 8d 23 68 72 7d 77 08 22 f4 a9 8a 2b 13 39 24 df 20 db c6 25 4e f6 68 0a 2a 07 3d c5 9a 00 53 46 52 e9 f7 4b 18 c4 24 8e 89 24 16 1d 81 06 85 d8 af 6a b2 05 8f 9f 08 88 4f 95 64 ea 2e b9 70 ea 62 63 c9 7a 54 fd 31 79 55 7f ff 49 8d 90 36 1f 69 ba a8 13 d4 c7 85 69 f0 89 83 e2 e9 c1 2f 0d f0 fa 1c eb c5 01 65 b9 a8 96 08 af e2 30 79 58 21 0a 56 76 13 0f 29 98 43 8f 89 2d 09 d0 b2 be 7d ae 66 7d c8 f2 e9 31 dc a7 ea b0 42 c6 2f ba 30 78 28 09 b7 ac 5e e9 95 81 62 b8 03 d8 db 2b db c8 36 14 e0 55 53 9e 0b 21 14 9d 11 32 c1 6b 7c fb 57 4b 5b 22 4e 2b Data Ascii: ?^l1Y&^u_pGA~[ueMc9dlgou\hQ#hr}w"+9$ %Nh*=SFRK$$jOd.pbczT1yUI6ii/e0yX!Vv)C-}f}1B/0x(^b+6US!2k\|WK["N+
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: 61 f4 a6 9a 25 2d 97 0a 9a 0b 31 59 a5 fb 30 14 3c c4 50 b4 25 26 be 09 11 07 08 51 9d 4e f3 2a 78 1f ad 39 1b a7 36 f2 4a df c3 6d c3 a0 29 0f d4 48 f6 d9 ec 32 0a 4c 4b 1c 61 fc ee ef dc 76 bc 26 06 f1 ff 3c d9 07 65 d5 e1 d0 0f 7b 75 9a 38 9d 3b dd 1e 78 9b 53 93 fb 0c 9a 99 0e 27 a1 99 30 be 73 4b 90 7e 13 0d 62 76 0d 7c 59 63 ca 8a 4f c2 02 43 e5 27 7d 33 62 e9 98 72 5b 29 b3 78 44 02 6e 12 ef 10 13 58 a6 26 a3 d1 7e 0a 4e 4c 8e a7 26 34 a2 bd 2d 51 3b e6 29 35 2a 09 d8 6a 58 c8 6b 85 24 61 a2 7b bd 18 99 35 28 0b 8a 4f 18 5b 1e 06 80 cf 19 14 0e 54 31 01 3a 96 bf ef 56 f8 50 41 7e 65 88 9f da ce 82 56 fd 57 c5 1d 25 e5 c1 ec df 10 74 f6 e6 90 01 15 5e a1 af dd 55 3b 5f 46 75 e6 63 9d 83 14 ea c8 d3 7f 60 35 aa 5b 9b 92 aa 90 a8 e0 98 62 be d5 30 7a Data Ascii: a%-1Y0<P%&QNx96Jm)H2LKav&<e{u8;xS'0sK~bv\|YcOC'}3br[)xDnX&~NL&4-Q;)5jXk$a{5(O[T1:VPA~eVW%t^U;_Fuc`5[b0z
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: 0c 0e c0 a3 3d 13 c8 72 56 e7 7e f3 0b 6d f7 a5 59 5a 74 c4 c2 bc 5e f6 aa 77 37 18 28 ed 1c eb 92 cc 8a 66 5d 14 72 ef bd dc 65 a9 ab f2 53 8c 81 73 42 28 c3 76 1c 31 ac 5a 46 44 02 de 95 10 6b 47 0e a9 88 f2 37 88 60 13 b1 56 08 5d 5e 62 1f 1e ca 58 a7 20 c0 e4 b6 d6 34 ca 01 e2 c7 2a 45 f0 bc 5e 62 4e ef 93 bf e9 38 5c 31 83 5a 37 ea 95 13 e7 ba 37 ce 36 d3 21 4e de f3 dc 89 5e 70 fb 5a 7f ad 54 f0 36 fd 79 91 b9 69 ae 28 5b f0 54 c6 14 7c 56 61 23 4e ad d5 0c 9b 0d 65 97 df d8 3f 3c 2a bf 44 bd e4 1b ed 29 e7 4a 4b 8f 60 01 b1 08 a0 03 21 e3 9e ec 5d b1 b2 43 80 67 18 60 ab b6 a5 a2 ac f1 eb 4d 63 f9 47 a5 91 b0 fc b2 bb f6 94 61 b0 61 09 42 48 1c 92 33 7b 65 0a f4 a5 51 61 18 e1 a1 e3 c1 d0 8d 2e 05 a8 e7 77 fe 0a 53 40 ec f9 3d ac 6d 1d 3c fa e3 68 Data Ascii: =rV~mYZt^w7(f]reSsB(v1ZFDkG7`V]^bX 4E^bN8\1Z776!N^pZT6yi([T\|Va#Ne?<D)JK`!]Cg`McGaaBH3{eQa.wS@=m<h
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: 2a 2e 19 87 ca a4 54 d0 37 1f 5e c6 88 4c d0 f4 2f 37 c1 15 1b 30 e7 7d 43 f8 94 46 f8 03 73 c4 be b0 14 42 18 53 e1 87 76 05 5e 3f cd 72 8b b2 e0 d4 be a3 50 a9 98 7f 96 fc c3 1f 9d e0 28 d0 c4 6f 02 41 28 32 b5 95 38 3b 90 b8 30 5a 3b 0d 72 ff 23 79 8c ad 9a 65 4b 17 82 20 1e 47 64 83 1c 47 6b 8f aa 4b 9e e2 0b 9b 41 46 a0 24 17 74 87 9c 71 97 30 01 3f 0a e9 a3 2d 39 8b c6 a0 aa 8b 90 db cd a4 51 0e 77 e7 8b 11 fa 70 10 fa fd 79 db 26 b1 89 d8 d2 03 20 1b 76 89 34 82 c9 af 70 b9 19 e7 d2 32 86 33 b1 6a a4 c4 f2 42 b0 d6 da 5d 37 f4 28 25 95 9c d9 21 42 42 7f c8 a2 a0 04 1b 50 11 41 97 ac c3 4b ad e6 a2 68 6b ae a2 a7 e7 7e 59 63 3e 09 17 6e fc 67 c3 23 fd 75 d2 f5 2c ce 5b a7 79 9c 7d 2e 06 37 93 13 78 13 db d5 58 d9 6d d7 57 4f 98 78 1e 58 4e 19 2f de Data Ascii: *.T7^L/70}CFsBSv^?rP(oA(28;0Z;r#yeK GdGkKAF$tq0?-9Qwpy& v4p23jB]7(%!BBPAKhk~Yc>ng#u,[y}.7xXmWOxXN/
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: 8a 9d 44 37 34 71 db cd 73 d3 9f d8 74 59 db e2 d4 36 e3 47 25 57 17 1e 58 b4 6e 3f 32 a4 1c 5c 1f 65 98 96 19 ee db 8c 2f 85 b9 01 cc 98 c3 57 48 6e e3 14 5f d7 a4 30 83 60 44 8e 5f ef c6 5f 8d 99 6c 8f 86 3b b4 81 90 9f ae 21 fb fc 87 5f 76 da 9a 71 ec 67 81 ec a9 66 da bb bc a1 c4 83 95 0b 12 9e 9b d3 7b 4d 76 dd dd 06 0a 4e fc e7 cd 6b d5 18 0b 24 63 b9 a8 f7 5e 25 1c 86 fa 32 dd ba fd 00 81 f7 b6 f0 a5 19 5b de db 2d 55 90 20 f9 7d 9f de 47 d3 89 e5 31 18 de e2 aa 9a 6e d7 b9 a8 02 44 be c8 53 f5 c7 0e e3 0d 0d 8c fc a6 58 4c 86 52 d3 dc e1 57 fa 1c e1 b5 bf 76 24 59 7f 5c b0 a9 48 99 83 39 20 3a 88 00 01 4e 36 15 c5 bd 89 14 bb 3c 74 c0 9c 6c 3a a9 f5 ce 48 92 7e 44 64 a5 b0 bb 66 98 97 b2 8a fe cc 10 f6 c8 0d f0 7f 19 4f 28 df 40 28 ee 64 9b 95 0c Data Ascii: D74qstY6G%WXn?2\e/WHn_0`D__l;!_vqgf{MvNk$c^%2[-U }G1nDSXLRWv$Y\H9 :N6<tl:H~DdfO(@(d
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: fc 44 2e 86 46 e1 6e 32 81 b8 ef 4f f0 0f c8 d5 ce aa 12 f9 fa d9 be 27 2b 74 ae 19 8f a1 45 7e 91 44 28 f0 b5 e1 d6 2e 0b da 64 c9 1e 12 0d 88 12 a7 53 29 6c 2a b9 eb 7d c8 aa 73 92 68 b2 15 7b fe 00 3e 1f c5 5f b1 f9 ee 98 56 7f 66 51 c9 f4 69 32 b2 16 02 c8 09 12 78 f4 97 1c 67 d8 ac c1 4e bd e0 b5 27 7d ba cf c8 8f 22 a3 80 57 d3 b0 a2 da c2 f0 9b ce fe fd 47 d6 98 65 4c 8f fa 93 91 e0 ca cb e7 77 41 38 87 3f 1b 04 a4 fe 83 23 52 d0 50 c8 2b 79 a0 6e 49 15 7b d2 fa c6 dd d9 46 ba 0f 3f 53 3c 04 10 93 b4 33 a1 89 60 82 f6 6b b5 96 4e 82 35 48 36 22 f7 41 70 4b 81 6e e7 fc 10 70 03 49 91 09 36 63 87 7b 7d 16 aa 8c 1c ca cc 48 c4 b3 f3 51 7a f3 a5 31 20 91 3f fe e5 ad 37 f8 c5 43 e2 d5 fb 03 27 94 f3 4d 78 b2 ad e1 8f 39 73 6d 39 e4 19 59 8b 05 3f 44 80 Data Ascii: D.Fn2O'+tE~D(.dS)l*}sh{>_VfQi2xgN'}"WGeLwA8?#RP+ynI{F?S<3`kN5H6"ApKnpI6c{}HQz1 ?7C'Mx9sm9Y?D
2024-04-18 19:30:37 UTC	439	IN	Data Raw: b8 67 1f 6c 2f 26 e6 6c d0 05 69 52 38 72 a9 45 56 c2 69 e5 d8 c6 ec 0d ce 7d d0 2a b4 69 ac cc 91 55 d7 9b 84 3a f6 9d e5 5a c7 70 68 23 e1 4f cc cd a7 76 ba 3d 63 97 04 e6 fd 9b c1 d2 de 36 a4 43 5e da 8f 76 67 79 e5 43 3b e3 1c 6b bb 8d 23 bf 27 ac 06 ff 9d d9 2d 09 8f a7 6e 8a f0 52 98 d3 a7 63 77 b4 df 58 ed 49 96 42 77 28 5c 61 f3 83 95 88 94 8f c9 34 f2 2c 78 85 cf 7c ba f6 79 ff 96 8b ab 07 e4 5c 1c 4a 06 23 3e 9a f0 47 4a 8f be b4 ab 00 cf ba b7 08 29 21 4d 0a b5 5c 36 e1 13 cb 61 96 8e ae ec 3d d8 88 09 45 ec 6e 27 8f e7 a7 82 a2 19 e1 0d d1 61 2d fd b3 8b 99 6e 93 af 6e 3e 77 03 a4 77 7e ab 97 2a f7 81 88 3d ac 58 25 36 b1 ff 9c 72 5f b5 cb 9b f6 c9 5d fd 99 48 09 bd d2 b6 e0 78 1d 29 e8 89 41 1f e3 19 fb fc 71 59 88 46 aa 42 eb 30 95 ce 7f 7b Data Ascii: gl/&liR8rEVi}iU:Zph#Ov=c6C^vgyC;k#'-nRcwXIBw(\a4,x\|y\J#>GJ)!M\6a=En'a-nn>ww~=X%6r_]Hx)AqYFB0{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49930	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1320	OUT	GET /wp-content/uploads/2022/02/Questor_branco-1024x255.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga_WZY91LD4XC=GS1.1.1713468622.1.0.1713468622.60.0.0; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0
2024-04-18 19:30:37 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Type: image/png Content-Length: 62241 Connection: close Last-Modified: Mon, 18 Dec 2023 16:18:01 GMT ETag: "658070b9-f321" Accept-Ranges: bytes
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 00 ff 08 06 00 00 00 6f 96 a4 5c 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 7b d0 76 59 55 1f f8 5b a7 be ea e9 ea ea ea ea a2 18 aa ab a7 ab d3 c5 f4 74 18 86 e9 a1 10 09 2a 43 88 02 12 c3 30 48 68 c0 0e 12 23 5e 02 46 45 05 09 51 43 51 ea 10 24 0c 1a ef 62 8c 37 40 25 c4 a8 20 2a 17 15 05 85 41 50 82 88 97 74 94 30 3d 54 87 21 5d a4 87 38 3d 64 af f9 e3 79 ce fb ed 77 3d 6b ad bd f6 3e fb 3c 97 f7 db bf aa b7 9e 73 f6 5e 7b ad b5 d7 5e 97 73 7f 81 3e 98 b6 7f b2 4d f6 4b 1a 6d ac b6 7f 4c 28 e9 37 09 3a b9 af d1 1e 2b 3c fd 26 e3 0f 38 bd b9 7a 6b aa cd eb 98 fd d5 8a b1 7c db d2 b1 14 b3 87 9e 5b 0e cb c7 22 f1 77 cc f3 d2 50 93 5f Data Ascii: PNGIHDRo\pHYs+ IDATx{vYU[tC0Hh#^FEQCQ$b7@% APt0=T!]8=dyw=k><s^{^s>MKmL(7:+<&8zk\|["wP_
2024-04-18 19:30:37 UTC	4096	IN	Data Raw: f4 4a 54 69 1d 3c 1a af 7f a9 8f 2e d5 43 bb fa 57 a3 4b ad fd 5a af 04 96 f8 ec 83 a6 75 bc c7 ab 35 fe 6b 64 78 34 fb 94 55 d2 c3 a2 d3 6c a4 8d 6f d1 c9 b3 bf e7 9b 13 6c 9d 6b f9 d4 e8 b8 84 a6 34 7e 1f f1 af c9 5d 82 51 ff eb 74 5a cb 7f 7b f8 78 af f8 f7 30 ea bf 3d 7e d4 7f 9f a6 75 bc c7 6b d4 ff cb bf a3 fe af 4b 53 1a 7f d4 f5 bf f5 09 80 92 12 c7 74 d5 74 31 98 f9 81 00 9e 0c e0 0e 00 5f 24 fa 00 ec be ab 6f b5 1b fc 77 68 3d be de bb ff f9 d3 05 35 7c 4b fa 19 3c fe 0c c0 f7 00 f8 45 22 fa 68 81 cd be d6 7c a9 9c 43 f9 e6 29 c5 c4 29 e9 7a 11 71 91 ed 7f aa 73 6b d5 fb 54 e7 6b e1 c2 d5 ff 15 71 ec 76 d0 f4 3b 76 3f 1f f5 7f 7d 9c 92 ae 17 11 17 d9 fe a7 3a b7 63 cf 8b 2a e4 47 00 a3 1f 1a 68 fd a8 41 eb 07 1d 4a f4 ad 1f 6d 90 34 e7 f6 99 f9 Data Ascii: JTi<.CWKZu5kdx4Ulolk4~]QtZ{x0=~ukKStt1_$owh=5\|K<E"h\|C))zqskTkqv;v?}:c*GhAJm4
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 3b 34 f2 91 89 a3 00 33 bf 11 e2 e4 3f 7f 6f 3d ff 95 ef b3 5b d0 de 79 97 77 c3 bd f7 d5 b5 be b9 bd 74 57 dd d2 61 a6 f1 e6 20 4f d4 97 bc bb 6f 7d 9c af e6 ab fc d6 37 11 7a d1 78 b2 45 fd c2 5e 00 00 20 00 49 44 41 54 35 1e ca f8 87 30 f3 db 53 4a 37 ca 8e 81 81 95 11 29 00 87 2e be 87 96 7f 8a b8 28 eb 7a 68 1d f7 89 43 cf f5 d0 f2 4f 11 c3 66 03 a7 8c 53 c8 c1 87 96 7f 8a b8 28 eb ba 43 33 e1 f2 45 80 49 b4 cb fe 7c 5f 5e 38 d0 da 2c fe 26 2d 33 4f cc fc 8d f3 63 ff d6 c9 b1 f5 d8 bc a4 97 bf d6 17 fd e5 18 c9 c7 7b e5 40 93 a3 f1 f6 5e 29 d0 78 5b 3c f2 8b 06 9a 3d bc 93 6c 39 7f cd be a5 0b 12 39 8f c8 fa e4 b2 b5 d7 19 72 3e 96 2d 24 0f 4b e7 8c f6 61 00 de b2 fd 30 a0 e6 df c8 da 2c bf f7 e8 22 ed b2 df 8b 29 4f a6 a7 4b 31 a6 2a f4 d3 fa 5b f4 Data Ascii: ;43?o=[ywtWa Oo}7zxE^ IDAT50SJ7).(zhCOfS(C3EI\|_^8,&-3Oc{@^)x[<=l99r>-$Ka0,")OK1*[
2024-04-18 19:30:38 UTC	294	IN	Data Raw: 7d 15 f8 c6 8e b6 2c e1 d8 7d 21 c7 29 e9 7a 11 71 91 ed 7f aa 73 6b d5 fb 54 e7 6b e1 98 4e 9e 8e 1d c7 6e 87 45 f5 bf d3 b8 7d cb 39 d4 9a 1c bb 2f e4 38 25 5d 2f 22 2e b2 fd 4f 75 6e c7 9e 17 55 cc b7 42 27 d8 8f 49 58 7d 79 fb 04 20 a5 94 5e 0b e0 4e ed df f3 cd 60 e5 71 6d 09 6d 4c cd 23 ff 92 de 82 d0 f1 27 01 3c 97 88 3e 53 9a a7 b2 1d c5 a9 f1 8a f2 96 34 00 90 78 73 31 e5 65 00 be 75 26 cc d7 86 59 ff d7 8d 96 df 58 5f f2 d7 c6 4b fe 25 7f d2 f6 99 f9 a3 44 f4 57 89 48 3e 0d 12 b5 4b 14 51 fb 47 c6 2f a5 8b ca ef ed 67 51 7d 7a f1 8a c6 4f ad cd 5a 72 a9 47 53 1b e7 51 f9 6b da ac 27 af da f5 ef 52 cb 82 7d 35 32 5a 78 79 63 d6 e2 e5 8d 59 ca eb 0c cc 7c 23 80 5b d9 78 b2 6b 4b b3 d3 96 d1 bd 5b a9 d5 25 f9 fb b2 d9 45 e1 15 e5 ad d6 ff 02 5d 44 Data Ascii: },}!)zqskTkNnE}9/8%]/".OunUB'IX}y ^N`qmmL#'<>S4xs1eu&YX_K%DWH>KQG/gQ}zOZrGSQk'R}52ZxycY\|#[xkK[%E]D
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: cc f6 ff 80 88 3e b8 dd fe 93 69 9a ee 09 ea 32 ea ff f1 d7 9f 51 ff 63 63 ba f0 22 9c 4f d8 93 36 4a c1 0e 2d 33 df 06 e0 03 00 ae 0e f2 38 26 fc 38 80 e7 11 d1 fd 41 7a cd 56 35 f6 8b f2 ec 21 7f 6e cf fb 6b f5 97 63 a1 f0 52 c7 a7 94 26 22 7a 29 b2 8b 00 27 86 bf 4b 44 3f 2d da 5a ec 5f db 66 d9 5c da bf 24 5f c3 52 ff dd c7 fc 8f 59 be 46 9f c7 01 50 1f 6b 2d f3 2f c5 74 ab fc 92 2e 6b d8 bf 06 2d f1 63 e6 a8 80 4e 1e ef d2 f8 8b e8 ff e1 f1 bc f9 98 ea ed cc fc 59 44 74 23 80 c7 6d bb ae 03 70 7d 50 9e 86 8f 6d 65 82 99 7f 83 88 ee 06 f0 7f 03 f8 65 00 89 88 fe a4 56 d7 0a 8c fa 1f 8f ad b5 f2 6f 14 96 2c a0 1c d3 b5 3c af f8 fa cf cc 37 6e 63 fe 0b 89 e8 2a 00 4f df f6 df 54 c1 bf 06 9f 04 70 1f 80 8f 00 78 3f 33 ff 16 11 fd 39 80 bb b6 c7 f3 a3 fe Data Ascii: >i2Qcc"O6J-38&8AzV5!nkcR&"z)'KD?-Z_f\$_RYFPk-/t.k-cNYDt#mp}PmeeVo,<7nc*OTpx?39
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 8b 67 65 bc 5c 0b e0 9b 89 e8 5d 29 a5 1b b0 e7 fa 9f 5f 21 f0 1e 3f 92 fd 89 99 1f 06 20 bf 02 7e b4 60 e6 af 9c a6 e9 93 f0 1f af 9a b7 b5 13 39 d9 af 15 76 ed 31 9b 9c 3e 19 6d aa 7d 1d fd 34 48 de 28 e8 e7 9d 98 79 fa 6b fc d5 13 7b 47 ff 9d 22 c6 cc af d4 26 75 08 04 0e 20 be 04 bb 89 54 5b cf b9 0f 62 bb b4 3e 10 fd da da 36 eb bf 04 d9 89 0a e0 fb 97 e5 d3 91 fc a2 1d e4 c8 6d 69 5f 4d 76 6b 7c 2e 42 e9 6e 68 01 a5 f8 d5 da bc f8 f3 d6 42 c5 9a fe 13 c1 5a 27 16 fb 42 8b ec cc 67 b4 18 d7 62 48 3b f0 83 d8 2e f9 bf f4 8f 7f 48 44 af a8 56 fe ca c6 97 03 78 17 33 3f 15 2b d4 ff d6 5c b2 24 07 2d cc 5f dd 78 1c 0a 9d f3 cf 5a f5 5f 1e 63 94 8e df c1 cc b7 03 78 0b 80 17 c4 67 32 60 e0 36 00 ff 8e 99 bf 8e 99 2f 65 ed de f1 b4 b6 46 5e ae 5f bb fe ab Data Ascii: ge\])_!? ~`9v1>m}4H(yk{G"&u T[b>6mi_Mvk\|.BnhBZ'BgbH;.HDVx3?+\$-_xZ_cxg2`6/eF^_
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 06 f0 5c ba fc 1f 87 7a d7 ff 73 32 b5 83 45 cf a7 a2 f3 0f 1e 5b 99 e3 3d 1a cd 57 2c ff 69 d1 31 4a b7 42 fd df 69 57 e2 b9 6b fd df c6 f2 cb 88 e8 a1 51 9d 4b ed 4b 79 f4 88 bf 48 3e 6e 5d ff a5 35 a9 85 d6 d0 e3 46 de 7c 18 f0 6f 13 d1 67 b2 ae 83 d5 7f 39 a6 d6 fe a3 fe 77 ad ff 2e 9f 6c fb cb b0 f9 4f 33 f3 8d 6e b7 fe c3 c9 27 97 44 a7 9b 88 88 e8 31 39 57 ef 6a 9c 05 ed 0a c8 52 1e 02 ef de fe 5a 46 90 57 cc 00 ff c0 4b 6e 47 0f d2 34 68 fc 66 9e f2 4a af b6 2f 83 dd d2 c9 3a f0 28 f1 cb e7 a1 25 9f 52 31 8b da 40 e3 77 ee 0e 08 11 7d 0c c0 3d cc fc a0 a5 fe 22 c7 b5 f2 50 70 43 b6 6d f9 8e b7 56 35 eb a9 c9 70 61 5d 6d ad 99 bb 42 ef f9 8b e7 c3 de d8 7c db fa 2d c9 f7 62 b7 86 bf 8b 25 be a3 5d d5 dd 22 12 9f 11 7b 68 f1 64 ad 4d 17 fd 65 d1 f7 Data Ascii: \zs2E[=W,i1JBiWkQKKyH>n]5F\|og9w.lO3n'D19WjRZFWKnG4hfJ/:(%R1@w}="PpCmV5pa]mB\|-b%]"{hdMe
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 0e f8 1e e7 99 0e 35 fd 5a 2e b6 c6 e5 fe 79 e8 79 5e 89 f0 ea e7 dc ee 6d 5b 35 bf 54 ff 4f 11 d3 34 dd 37 4d d3 4b 00 fc 35 00 1f 01 ce e6 f2 61 00 df be 3d 71 b8 48 e8 52 ff 2d bf b1 7c 66 de 8f 6c 7b 35 ab 03 0e 7d fc 63 82 99 af 25 a2 27 97 8e 7b f7 55 ff 99 f9 63 00 9e 40 44 7f d2 71 9a 07 03 6d fe 83 c7 57 33 f3 4b 98 f9 2f f3 1b 48 fb ae ff 62 fb d9 cc 7c 53 c3 94 ba a1 74 cc d7 5a ff e7 5f 6d fb 94 8f 0d a6 69 4a cc fc 5c 66 be 4f cb 7d 80 5d 33 ad 73 0d 6d bf d0 f6 b7 9b f5 17 db f9 e3 78 72 1f c0 f9 c7 5e e4 23 30 f3 be 3c e0 b3 c6 68 e3 ad df dc 59 2c 5e ce dc ac 7d 6d fe 35 34 da be fc ad e5 21 75 8d ac 4b 2d 4f 0b 4b 6d a6 bd 7f 64 8d 49 46 ff 8e 5c cd 1f 22 fe a4 8d d5 b6 4b fe 98 f7 cd be 5d 7a ea 40 99 6f 74 5f b6 99 71 a8 6d 5b 7d b3 ce Data Ascii: 5Z.yy^m[5TO47MK5a=qHR-\|fl{5}c%'{Uc@DqmW3K/Hb\|StZ_miJ\fO}]3smxr^#0<hY,^}m54!uK-OKmdIF\"K]z@ot_qm[}
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: b9 a4 6c 91 fa 56 3d 29 9f 36 ce 35 d9 2c f9 2c bd 3d 5b c8 c9 26 65 91 d7 00 00 66 be 3f 33 ab 4f 1a 44 bd b0 2f c9 6b ad 4e 74 02 17 37 c4 d6 18 79 be e1 e5 7b c1 28 47 65 9c 32 0f 9d 5d 6f 0b e4 23 e3 6f 91 b5 60 93 ed 23 f3 49 e3 53 f3 ef 85 fc a8 bf 79 f5 86 f2 60 ec 8a e8 26 e5 8e c6 0a d5 a6 52 f6 da c6 6d 64 fe 0c 65 c1 f9 53 1b bf b1 71 da ab 6b 2d f8 22 3c e4 5c 94 37 56 35 1e 53 db 97 69 cb 3e da f8 ff bd c2 37 4c d2 2f e6 c0 7f 00 87 33 f3 1f 00 f8 3f 98 f9 3f e6 9c 1f cb cc 7b b0 a8 5f a9 47 69 33 6d b1 26 69 07 ff d7 8f ff 00 16 71 23 1a 23 bd 7a 15 1e 63 e6 8d d6 be 25 26 b4 8c 69 34 36 3d bd 4c 4c b5 59 59 37 80 ff fb 88 e8 9d b0 c7 bf 24 ef 26 ff 90 c1 ff 21 dd 6f 8a bc 5f 0a b4 02 fc 37 79 00 78 86 52 34 19 ff 8d 3c 73 8c e6 c2 7f ad 4c Data Ascii: lV=)65,,=[&ef?3OD/kNt7y{(Ge2]o#o`#ISy`&RmdeSqk-"<\7V5Si>7L/3??{_Gi3m&iq##zc%&i46=LLYY7$&!o_7yxR4<sL
2024-04-18 19:30:38 UTC	1888	IN	Data Raw: 37 13 d1 33 2b 75 42 f9 1b 8e ff ad 63 bc 17 c0 2b 89 e8 9f 98 f9 a2 fe 27 84 3b f8 df 16 4f 9b 28 b2 79 50 d6 2b f2 23 eb 8d b2 3c ba 7e d1 c8 b2 87 86 4f 35 f9 64 de c9 c0 3c 31 a6 35 9e 31 f3 f0 bb 61 19 6b a2 fe 01 e8 b6 3b a8 f1 5f 69 53 96 df ca cc f7 95 85 53 f1 7f 04 e6 cd 82 ff 4a de 42 db 75 e2 3f 0e 9c 6e 68 bd bf 28 c9 8a cf 9a cf d4 d6 57 66 fc cc 39 9f 04 e0 f3 00 2e 96 e5 53 6d 66 e5 69 d4 c7 c9 6f a7 94 6e 53 e4 f7 68 c1 3f 06 65 65 50 2b 2b 2e 95 13 d1 df 85 a4 dc 66 62 e6 a7 21 ee 18 c3 b5 16 c8 65 b9 c6 2f 2b 6d ca fa d9 c8 d3 ec af 05 3b 4d 1e ad 6f cb b9 bd 40 af f1 b2 64 95 fc ab 37 f6 82 9f 06 da 03 3d 16 c0 e1 8a 4c 6b a3 e0 04 fc 56 71 6d 8d e7 50 06 71 5d 1b 1f 88 72 6d 6c 4d 1a b9 a1 11 a2 9e 77 c4 bf 2c 9f 8e c4 17 cf 3f ac 45 Data Ascii: 73+uBc+';O(yP+#<~O5d<151ak;_iSSJBu?nh(Wf9.SmfionSh?eeP++.fb!e/+m;Mo@d7=LkVqmPq]rmlMw,?E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49941	34.120.202.204	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=89a629813d19c9021222e47484dfe8d4331afa951713468635 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1077 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:37 UTC	1077	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6c 69 70 5f 69 64 22 3a 32 31 35 36 39 36 36 39 36 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 36 31 39 30 38 39 37 39 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f Data Ascii: [{"autoplay":false,"background":false,"clip_id":215696696,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":false,"owner_id":61908979,"product":"vimeo-vod","referrer":"https://www.questor.co
2024-04-18 19:30:37 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Thu, 18 Apr 2024 19:30:37 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49943	151.101.128.217	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	431	OUT	GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:37 UTC	549	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1438 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "4c54e16ad697a1b1a2cc61ff43eac5ef" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 185156 Date: Thu, 18 Apr 2024 19:30:37 GMT X-Served-By: cache-dfw-kdal2120096-DFW, cache-pdk-kfty2130068-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713468638.870588,VS0,VE21 Vary: Accept
2024-04-18 19:30:37 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 2d 00 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 00 07 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 ff da 00 08 01 01 00 00 00 00 9a 34 f4 9f 49 18 af 87 ae 06 8c a5 f7 6b 93 72 9c 95 87 b5 5c ad 7d 33 2c b4 a7 9e 30 b5 58 2c 42 9d 94 3b 62 6b 9d 7f a3 66 8d Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}-P"4Ikr\}3,0X,B;bkf
2024-04-18 19:30:37 UTC	59	IN	Data Raw: db 39 53 9c 77 76 57 ad f7 a4 7f da 88 ec 45 75 14 fc 3a c9 95 95 6d 61 52 46 01 e5 ae d5 65 c0 ad 6d 1a 42 d8 98 30 1b 48 8a 71 51 41 04 19 31 40 91 e7 ae 85 0b 9c 7a 57 ff d9 Data Ascii: 9SwvWEu:maRFemB0HqQA1@zW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49940	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1076	OUT	GET /wp-content/uploads/2023/07/001-culos-de-realidade-virtual.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/svg+xml Content-Length: 2952 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-b88" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 34 20 31 32 34 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 124 124" style="enable-backgroun
2024-04-18 19:30:38 UTC	1554	IN	Data Raw: 2e 31 35 37 63 31 2e 37 31 36 20 31 2e 38 38 20 34 2e 31 37 38 20 33 2e 30 36 39 20 36 2e 39 31 39 20 33 2e 30 36 39 20 35 2e 31 36 39 20 30 20 39 2e 33 37 35 2d 34 2e 32 30 33 20 39 2e 33 37 35 2d 39 2e 33 36 39 20 30 2d 34 2e 34 38 2d 33 2e 31 36 34 2d 38 2e 32 33 2d 37 2e 33 37 35 2d 39 2e 31 34 39 7a 4d 36 32 2e 30 33 34 20 34 61 35 2e 33 37 37 20 35 2e 33 37 37 20 30 20 30 20 31 20 35 2e 33 37 35 20 35 2e 33 36 38 20 35 2e 33 37 38 20 35 2e 33 37 38 20 30 20 30 20 31 2d 35 2e 33 37 35 20 35 2e 33 36 39 20 35 2e 33 37 38 20 35 2e 33 37 38 20 30 20 30 20 31 2d 35 2e 33 37 36 2d 35 2e 33 36 39 41 35 2e 33 37 38 20 35 2e 33 37 38 20 30 20 30 20 31 20 36 32 2e 30 33 34 20 34 7a 6d 33 38 2e 31 38 33 20 37 38 2e 35 39 34 4c 37 30 2e 37 33 39 20 36 35 2e 33 Data Ascii: .157c1.716 1.88 4.178 3.069 6.919 3.069 5.169 0 9.375-4.203 9.375-9.369 0-4.48-3.164-8.23-7.375-9.149zM62.034 4a5.377 5.377 0 0 1 5.375 5.368 5.378 5.378 0 0 1-5.375 5.369 5.378 5.378 0 0 1-5.376-5.369A5.378 5.378 0 0 1 62.034 4zm38.183 78.594L70.739 65.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49942	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:37 UTC	1073	OUT	GET /wp-content/uploads/2023/07/chatbot-zen-celular-601x520.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/png Content-Length: 232881 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-38db1" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 59 00 00 02 08 08 06 00 00 00 5d 2a fb 15 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 6b b0 65 c7 55 26 f8 65 ee 7d 1e f7 fd a8 52 a9 1e 52 a9 54 a5 92 2c 59 6f d9 b2 31 20 3f 68 4c 83 1b 83 87 30 43 cc 74 cc d0 4d 33 41 f7 4c 07 0d 13 d3 30 3c 82 1f 30 7f f8 c3 04 dd 33 dd 01 31 03 3d 13 03 9e 69 08 0c 43 18 1a 1b db d8 58 b6 25 59 b2 6c 49 a5 77 49 aa e7 ad c7 ad aa 7b 6f dd 7b cf 39 7b 67 ce 8f bd 73 9f 3c 59 6b 65 e6 de e7 dc aa 32 43 2a 4a 67 ef cc f5 ca 95 99 6b 7d 37 f7 0b 00 24 8a 22 ad 7f b0 7e e1 b4 53 75 d2 a9 e3 e8 63 64 71 f4 2e 8d 04 6d 33 d7 07 ce 2e 57 8e cb cb d1 72 b6 73 fd a0 e4 72 f2 28 b9 9c 8c 26 f4 9c 7d 94 3c b7 9d f3 35 Data Ascii: PNGIHDRY]pHYs+ IDATxkeU&e}RRT,Yo1 ?hL0CtM3AL0<031=iCX%YlIwI{o{9{gs<Yke2CJgk}7$"~Sucdq.m3.Wrsr(&}<5
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: e5 8c 53 62 d7 64 88 ff ba ce f7 98 00 16 9b d4 7d f5 20 ea 63 7e 29 bd 9c bd 94 3e 5f 40 0c c9 0a 05 66 9f 0f ea d8 1b 03 96 7c b6 b9 bc 9c 3c 1f 1d a7 3b 96 87 b2 8d f2 43 c8 bf 9c 1e aa 4c 8a 26 b6 d4 95 e5 eb c7 8d 0a a6 37 32 88 4f a2 34 19 83 49 d0 8f e3 37 df 3a a8 23 e3 66 1d bb 49 80 92 a6 7d 0b e5 af 71 f5 84 e2 ff 38 b2 29 79 93 b4 7d a7 64 c4 e8 b8 9e e0 71 52 b2 c7 05 70 23 0c 6e 42 f3 09 ac 8b f8 42 60 24 d6 36 4a 76 1d 9d b1 32 42 b4 75 80 48 5d 79 4d 6c aa a3 33 c6 ef 75 83 14 47 17 33 97 38 19 93 5c 24 75 6d 18 37 41 8c b3 7e 76 2a 10 85 e4 72 eb bf c9 dc 8a 9d 3f b1 f3 d7 07 f2 dd df 98 38 e6 d6 35 59 13 31 73 8a 92 ed 5b 1f 75 6c 88 b5 87 d2 55 37 9e fb c6 36 b4 de 63 6d e2 ec 88 b5 75 1c bd be 12 9a cb 93 04 0f d7 2b 2e ec 04 b8 d9 29 Data Ascii: Sbd} c~)>_@f\|<;CL&72O4I7:#fI}q8)y}dqRp#nBB`$6Jv2BuH]yMl3uG38\$um7A~v*r?85Y1s[ulU76cmu+.)
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 82 23 8a b6 49 2e 1f c7 ae eb e1 d3 89 e8 88 f9 0b 8d eb 60 1d 20 c4 f1 53 e8 9c 02 66 9c 9d 21 1d b1 ba 7c b2 5d bf d4 05 8a 75 78 29 db 39 bb a8 fa 90 1c 9f 1d 4d 64 71 32 7d 7e 8c ed 3b a7 2b 64 df 24 4a 68 1d c4 ce c1 ba fa 76 8a de c7 1b 9a 63 93 d6 7b bd 7c ca e9 af 4b eb 4b c6 e3 d8 7c 23 e6 4f 2c b0 b0 eb 62 78 62 e3 3e 45 db 74 1d 8f 3b 57 77 72 ae d7 2d e3 ea aa 33 17 c7 e9 77 d3 35 34 e9 32 6e 3f eb ac 5b df 3c 65 65 f8 92 7e c8 b8 98 76 1f 5f 53 e7 84 00 00 55 17 72 4a 4c 60 f0 f9 a7 8e ff 62 eb 62 ca 24 16 52 5d fe 71 fa 54 77 5c dc ba 10 50 b4 cf 39 c0 10 02 7d 9c ac d8 85 e5 9b 4b 3e fb 43 36 c4 ea e5 ec 8e e9 5b 8c 9f 38 59 d4 6f 8c fd 5c 9f 43 b2 63 e9 63 6d 08 f1 c6 cc 01 d7 3f 21 db 7d e3 e3 da 51 c7 56 8e 87 2b 31 be a5 fa e6 ab 6b a2 Data Ascii: #I.` Sf!\|]ux)9Mdq2}~;+d$Jhvc{\|KK\|#O,bxb>Et;Wwr-3w542n?[<ee~v_SUrJL`bb$R]qTw\P9}K>C6[8Yo\Cccm?!}QV+1k
2024-04-18 19:30:38 UTC	2992	IN	Data Raw: 76 1b 79 ae a0 74 b9 0b 84 62 27 4b a3 b8 24 d9 6a b5 31 18 f4 d1 6e b7 51 5e d5 44 96 0d 0a 50 a8 14 a6 a7 a6 91 a4 09 8a 2b 98 aa 00 73 ad 16 d2 44 22 cf 55 b5 33 26 84 80 90 02 69 5a 80 1e b3 4b 67 76 a2 12 29 d1 ef f7 91 b6 5a 05 e0 10 40 22 0a 1d ad 56 ab da f9 49 cb be e7 79 8e 6e b7 8b 24 49 d0 ef f7 2b 1a 03 98 94 52 85 bc 92 be dd 6a 41 08 81 4e a7 83 7e bf 8f 76 a7 8d 3c cf 31 e8 0f 90 95 3b 65 ad 56 0b ad 34 2d fc 56 02 2a 29 25 f2 2c c3 20 cb 90 24 b2 04 5f 05 f8 34 76 cc ce ce 96 3b 95 7d 64 59 86 e9 e9 69 08 14 97 15 a7 a7 a7 ab dd c0 34 4d d1 ed 76 ab 3e b7 5a 2d cc cc cc a0 d3 e9 20 4d 53 b4 5a 2d 4c 4d 4d 21 4d 53 74 3a 9d c2 9e 56 0b 49 92 22 4d 93 6a b7 cb ec 8a 4a 59 00 e8 41 bf 7f e1 e2 85 0b 9f 7f fe db df fe 8f bf f5 5b bf f5 57 5f Data Ascii: vytb'K$j1nQ^DP+sD"U3&iZKgv)Z@"VIyn$I+RjAN~v<1;eV4-V*)%, $_4v;}dYi4Mv>Z- MSZ-LMM!MSt:VI"MjJYA[W_
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 53 5c 0e 13 e5 8d e8 c5 53 78 aa 7a b7 53 b5 eb 84 a2 0d 40 b5 03 53 dd 4c 6e 81 9a 62 47 ca d0 ea 6a 47 09 b0 df c1 54 f0 2b ad a1 a1 2a 1e 21 86 7c 16 cc aa 76 b9 cc fd 5f 5a 0f 01 58 a1 5b 55 1c 66 40 8c 6e 55 ee a3 99 7b c3 8c 0c 53 2a e0 87 e1 8b 49 4b e8 54 fc 0a 54 40 c8 de a1 b3 81 12 80 62 c7 4a 94 90 52 eb e2 66 7b 63 49 09 2c 4b 27 57 f4 c5 e5 58 e3 cf e1 ae 9a 2e 2f 81 9a 9b ee 35 34 54 ae 90 5b fe 53 ca f6 75 21 2f 2f 9f d0 cc ca b1 cf f2 1c 4a 6b e4 b9 ae 5e 7b 91 e5 0a 59 ae 91 ab e2 38 57 0a 83 f2 d7 9c ab 52 46 9e 6b 64 2a c7 20 cb 4a de 0c 59 a6 90 e5 39 fa 83 0c bd fe 00 eb 5b 3d 9c be 70 19 2f bd 7e 0a 5f 7a f2 1b f8 d2 17 ff 1a e7 8f 3f 8f f9 76 86 03 b7 1f c4 be 03 77 e0 c1 87 1e c2 e5 b5 ab f8 d3 3f fd 34 d2 a4 78 f8 c1 3c a5 b8 71 Data Ascii: S\SxzS@SLnbGjGT+!\|v_ZX[Uf@nU{SIKTT@bJRf{cI,K'WX./54T[Su!//Jk^{Y8WRFkd* JY9[=p/~_z?vw?4x<q
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 18 ea 43 d0 66 81 b8 0e fb 06 a2 49 1d 07 3e 28 27 52 e7 5c 89 01 51 3e 3b 63 16 57 5d b9 21 40 e7 da ed 03 4c 21 80 e1 b3 b7 6e a0 70 eb 7c ba 62 8e 5d 3b 7c 3c ae de 18 10 59 a7 c4 cc 69 af ae 4f 7d ea 53 7b 9e 78 e2 89 7f b7 b8 b8 f8 a3 4a 29 f9 dc b3 cf e2 e9 a7 9f c2 2b 2f bf 84 bf f9 9b bf c5 e5 2b eb b8 ba bd 5d ec 70 94 00 2b c1 f0 1b 7c 1a 1a 32 6d 61 6e 69 37 76 dd 7e 27 66 17 16 d1 e9 4e 21 49 44 01 9c 4a f0 24 80 0a 90 08 69 8e 05 a4 ac f6 92 0a 3a 29 d1 12 12 50 79 79 d3 b4 1c 79 d5 b0 4c 12 5c bd 74 11 af 3c fd 55 0c b2 fe f0 3d 50 28 c0 c5 f0 9e af a2 ae fa 93 4e 57 77 70 0d eb 2b 80 51 18 64 7f 7a 87 fa a3 75 b8 9b 03 a8 dc f0 96 c0 04 ba 02 6b e6 a5 a3 32 4d 86 9f d2 51 ba 02 32 06 d0 19 f9 e6 5e a5 4a a3 05 c0 0c 8f 01 a5 66 f7 ca a5 1b Data Ascii: CfI>('R\Q>;cW]!@L!np\|b];\|<YiO}S{xJ)+/+]p+\|2mani7v~'fN!IDJ$i:)PyyyL\t<U=P(NWwp+Qdzuk2MQ2^Jf
2024-04-18 19:30:38 UTC	98	IN	Data Raw: 78 f8 c1 07 f1 dc d3 4f e1 ea d5 8d aa 87 c2 01 13 16 f2 42 01 a0 46 dd 3d dc c7 29 7b 63 bd aa 40 63 f4 8d f5 e6 5d 4f 56 97 87 3a 84 ae 3e 21 24 a4 04 84 ac de 05 26 aa d7 28 48 a0 a4 29 78 64 a9 57 96 6f b1 97 10 22 a9 c0 51 01 7a 0a d0 2a a5 a8 be ff 38 d4 2f 46 66 99 d9 65 b2 2f eb 8d de Data Ascii: xOBF=){c@c]OV:>!$&(H)xdWo"Qz*8/Ffe/
2024-04-18 19:30:38 UTC	2796	IN	Data Raw: 63 65 fa 8a e1 43 01 c2 78 63 f4 86 78 d3 27 5b ce f0 c6 79 51 dd cb 75 e4 de 07 20 92 16 ce 5f 5c c5 c9 53 a7 b1 76 75 03 ef 9c 3e 8d 73 17 2e e0 f2 95 2b b8 7a 75 13 69 ab 85 b5 ab 9b 38 75 66 05 27 cf 9e c3 e6 e6 36 96 96 96 b0 bc b8 80 e5 c5 45 74 d2 04 df 7e e1 18 7a 79 0e 2d 80 d3 2b 2b 38 79 fa 0c 8e bf fd 36 2e af ad a1 d3 ed e2 d9 e7 bf 8d 8d ed 2d 9c 3d 7f 1e 17 2e 5e c4 da 95 35 98 f7 86 4d cd cd 43 29 85 2b 17 ce 55 7e c9 cb 3f 0a 76 2d 2d a2 33 35 83 77 de 79 07 53 dd 0e ee b9 fb 6e cc cf 2f 60 6d 7d 6d fe f8 9b c7 8f bd fe fa eb 6f 83 df 89 92 55 f7 af fd b5 d7 b9 bb 7e 4d 71 63 02 c5 63 f3 da eb db 9c bb 79 48 39 75 6e 3c b2 ed a0 ec a2 72 83 1d f3 39 79 46 b7 f9 b5 ed b3 e5 ba 32 b8 3c c2 15 2e 77 b9 75 b6 3d 5c 0c b7 6d 30 be b2 ed f7 e9 Data Ascii: ceCxcx'[yQu _\Svu>s.+zui8uf'6Et~zy-++8y6.-=.^5MC)+U~?v--35wySn/`m}moU~MqccyH9un<r9yF2<.wu=\m0
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 6e a9 42 0d 0a 07 96 b8 45 ec ea e7 16 26 e5 03 10 f5 3e 7a 9f 3f 6d 59 3e db 43 40 94 0a 72 dc 18 b8 3e b0 f9 e0 9c 37 e9 6f c5 3f 3d 3d 3d bd b9 b9 b9 27 cb 73 b4 93 04 89 14 b8 ba 71 15 b9 52 c8 b2 22 9f a8 f2 bb 84 26 57 4f 2f 2c 95 f7 69 e9 d1 0d 2b 6b d7 66 f4 72 9a ae ee ad 31 c7 1a 02 2a cb 91 eb ac b8 9c 24 35 d2 34 29 3f 18 6d 5f f9 32 4f fb a1 b8 c1 5c 18 80 54 24 d7 e2 d9 bc 62 67 43 57 db 1d 02 f3 b7 ec 41 77 76 0e 97 ce 9d c1 ea ca 19 6c ae af 21 cf 06 80 d9 f5 a9 4a 91 dc f3 ea 5b 7d a5 b3 72 3d 92 e8 cd 0e 96 81 7e 02 28 3e f0 ec 6e f6 94 20 cd d0 18 e4 a8 95 ae 76 78 cc b6 9f 0d fa 0c cd 08 ee b0 e0 2a 34 ca 4b 7a 05 81 02 46 ee 77 2b 3e 60 2d 86 bb 84 95 3d b6 8e e2 52 64 f1 7e ac e1 4e 53 f5 ca 07 5d 8e 8b d9 fd 33 be 35 dc 42 60 6a 66 Data Ascii: nBE&>z?mY>C@r>7o?==='sqR"&WO/,i+kfr1$54)?m_2O\T$bgCWAwvl!J[}r=~(>n vx4KzFw+>`-=Rd~NS]35B`jf
2024-04-18 19:30:38 UTC	2796	IN	Data Raw: d9 c0 4d 3c 4e 76 0c 02 a7 16 3d 9c 5f 6e 0e 70 01 22 c6 46 d7 3f 94 ad dc 1c e5 16 28 37 87 28 dd 9c fd a6 5e e6 79 3e df 6a b5 da 52 0a 6c 5d dd c6 d6 e6 16 ae 5c 59 2b 80 41 f9 92 49 51 3e 19 07 14 f9 2f 49 5b ce ee 89 f5 bd 3f 73 f9 c7 ba e9 5b 08 40 e7 39 de 75 f4 30 fe 87 7f f1 df e0 f6 03 fb f0 99 cf 7c 0e bf ff 7f fc 3f 48 3b 6d cc cf cf e1 d8 b1 97 f1 cc d3 cf e1 bf fd 17 3f 85 9f ff e7 3f 85 fb ef bb 1b ff f6 7f fb 3f 91 29 55 dd a7 54 de 3e 55 dc 00 5f 2a d7 b0 5e e7 50 d9 52 ea b5 2f c5 99 cb 61 e6 5e 30 03 39 cc 2e 98 95 b2 47 2f 5f 0d 5b 46 76 79 0c 5f b9 33 65 df 8b e5 02 4d 40 01 42 14 4f c2 59 db 4d 66 77 4c d8 37 54 55 f2 cb cb 6b 15 78 19 f6 63 b8 9f 53 58 2e 4b 5f 27 62 f8 82 50 73 ff 97 65 ac 35 4e 65 8f f4 10 98 56 f7 71 59 a0 ad ba Data Ascii: M<Nv=_np"F?(7(^y>jRl]\Y+AIQ>/I[?s[@9u0\|?H;m???)UT>U_*^PR/a^09.G/_[Fvy_3eM@BOYMfwL7TUkxcSX.K_'bPse5NeVqY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49944	151.101.128.217	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	434	OUT	GET /video/632475986-a051268101d88385656066d07a0d2c163610210aa40d7ec4d5927074487daf78-d?mw=600&mh=338 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:38 UTC	547	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20575 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "82eb850b10324d707f4f00b57e888070" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 19:30:38 GMT X-Served-By: cache-dfw-kdal2120041-DFW, cache-pdk-kfty2130058-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713468638.087431,VS0,VE328 Vary: Accept
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 52 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 03 05 06 02 07 08 ff da 00 08 01 01 00 00 00 00 df 61 94 09 5e a7 e1 30 0d 85 28 00 bd 46 20 0f 77 28 c0 94 b2 67 a6 10 2c ab 82 0d 86 be 60 13 92 c5 20 98 33 fb ac 01 6b 1e Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}RX"a^0(F w(g,` 3k
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: eb 8e c3 cb c7 d5 ba 8f cf 73 b5 fb d7 3b a2 e7 be 87 ee a7 8e ae b6 5c e4 80 44 9e 69 7e 57 e8 3a 9f b5 71 bf 24 09 6d 5a cf 00 dc 79 d9 5c b7 63 47 bf e5 ec db a7 b4 d4 5e ad bd e5 b4 0f aa 74 ff 00 9f 67 6d f7 9e 73 47 a1 fa 15 cd 56 3e ae bd 1a e9 94 a6 48 42 23 69 f9 57 a0 e9 7e d7 c8 7c 90 4a 36 ca b4 c4 c2 59 e7 07 99 21 2b 58 f0 91 f5 4e bb e7 6d 50 78 88 49 e0 1e c7 80 17 af 6c fb 9e 4b e4 70 4c 36 c8 d6 79 04 c3 61 41 09 81 ea ed 01 f5 5e d4 08 04 88 09 00 03 98 f9 0e 29 84 b6 a5 4a 80 16 bc d7 00 b9 83 11 f5 5e d4 00 00 00 00 39 3f 97 d2 84 a3 6c 79 d6 f9 26 04 df d7 89 82 7d 5b a4 75 bf 45 07 a8 10 5a ba 05 2a a4 84 07 9f 9c e8 ea 63 0d b0 a7 55 30 0b 78 b1 08 4c 2f 54 f2 01 7a 9f 90 7d 13 e8 a0 7c ef e7 42 6e d1 21 23 25 8a 41 b6 1e 35 b0 4c Data Ascii: s;\Di~W:q$mZy\cG^tgmsGV>HB#iW~\|J6Y!+XNmPxIlKpL6yaA^)J^9?ly&}[uEZ*cU0xL/Tz}\|Bn!#%A5L
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: 99 67 40 be c8 aa c3 1d c5 32 48 c7 71 8f 20 85 b4 86 d5 85 2e 29 60 ad c5 2e 22 b7 14 be 98 cd 98 63 bc 8a 5e 0a dc 55 65 6d 4b 8a 5f ff c4 00 54 10 00 01 02 04 02 03 07 0e 0b 06 05 03 04 03 00 00 01 02 03 00 04 05 11 06 12 21 31 41 10 13 14 15 30 51 92 07 16 17 20 32 35 52 53 55 71 74 91 b1 b2 22 33 36 54 56 57 61 72 a1 b3 d1 23 34 73 75 81 93 24 40 42 62 f0 25 37 44 50 63 64 82 43 65 c2 ff da 00 08 01 01 00 01 3f 00 79 19 16 79 8f 20 37 18 5e 74 14 1d 70 b4 94 28 83 c9 20 87 5a b6 db 41 16 36 e4 46 82 21 76 75 ab 8e 49 0a 28 50 30 f8 ce 80 a4 c5 8f 6b 6e d1 85 e4 58 e6 31 32 8d 4b dc b7 21 2e b0 95 10 4e b8 98 45 95 9b 9f 92 7d 01 c4 05 0d c1 c8 34 bc 8e 03 b2 26 51 70 14 39 29 75 65 5d b9 e2 61 16 39 86 de 43 6e e4 b2 c0 25 24 eb d5 0f 23 2a c9 b6 8e Data Ascii: g@2Hq .)`."c^UemK_T!1A0Q 25RSUqt"36TVWar#4su$@Bb%7DPcdCe?yy 7^tp( ZA6F!vuI(P0knX12K!.NE}4&Qp9)ue]a9Cn%$#*
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: b5 11 c4 c8 f1 4d c7 12 a3 c5 37 1c 4a 8f 14 dc 71 2a 3c 53 71 c4 a8 f1 4d c7 13 23 c5 37 1c 4a 8f 14 dc 71 2a 3c 53 71 c4 a8 f1 4d c7 12 a3 c5 37 1c 4a 8f 14 dc 71 2a 3c 53 71 c4 a8 f1 4d c7 12 a3 c5 37 1c 4a 8f 14 dc 71 2a 3c 53 71 c4 a8 f1 4d c7 12 a3 c5 37 1c 4a 8f 14 dc 71 2a 3c 53 71 c4 a8 f1 4d c7 12 a3 c5 37 1c 4a 8f 14 dc 71 2a 3c 53 71 c4 c8 f1 48 87 69 2c 34 82 b5 32 8b 42 65 a4 95 a1 2d 20 c0 01 20 24 0b 01 18 df bc c9 f4 84 7b 0c 4b af 32 4a 0c 3a 9c 8a b7 22 c2 f2 2c 0d 86 26 51 a7 3f 25 2c bd 25 1c f0 fb 79 57 7d 87 92 97 55 d2 52 61 c4 64 51 1b b8 1b bd 93 3e 90 7d d1 b8 50 0a d2 bd a0 11 19 06 70 ad b6 b4 6f 43 7c ce 4e db db ed 86 e7 5b 4a 12 92 92 48 8e 1c df 82 63 87 35 e0 98 e1 cd 73 18 e1 cd f8 26 38 73 7e 09 8e 1c d7 31 8e 1c d7 31 Data Ascii: M7Jq<SqM#7Jq<SqM7Jq<SqM7Jq<SqM7Jq<SqM7Jq<SqHi,42Be- ${K2J:",&Q?%,%yW}URadQ>}PpoC\|N[JHc5s&8s~11
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: c1 bc 4c 22 e9 0a 8d b1 81 bb d9 33 e9 07 dd 11 3f de ea 8f a2 bd ee 18 1a 86 e6 04 f9 49 39 e8 5f ff 00 42 1a db 1c 73 4c 13 aa 91 33 68 13 00 81 94 e8 d2 76 5e 26 67 e5 a4 cd 9e 59 06 d7 d0 09 8e 3c a6 58 9e 11 7b 1b 1b 24 c0 aa c8 90 a3 bf 6a 40 5d ac 6f 94 9c b0 e5 6a 9e d2 82 54 e2 b4 80 a0 42 49 16 22 f0 d3 8d bc d3 6e b6 6e 85 a4 29 27 ec 3b 8e ea dc 98 7e 7d 97 de 0d cd 35 94 aa e9 4a d0 74 0b 6c 22 38 65 53 e7 32 fa fc 59 d5 06 72 a2 4b 76 9a 60 00 91 9f f6 64 dc df cf 0a 9c a8 ef aa 29 9a 60 37 98 d8 6f 66 f9 76 0d 70 b9 da a2 96 32 cc 32 90 9f f6 12 15 08 9f 64 21 39 d4 4a ac 2f 61 a2 f1 c6 12 dc e7 d5 1c 61 2d ce 7d 51 c6 12 dc e7 d5 1c 61 2d ce 7d 51 c6 12 dc e7 d5 1c 61 2d ce 7d 51 c6 12 dc e7 d5 1c 61 2d ce 7d 51 c6 12 dc e7 d5 1c 61 2d ce Data Ascii: L"3?I9_BsL3hv^&gY<X{$j@]ojTBI"nn)';~}5Jtl"8eS2YrKv`d)`7ofvp22d!9J/aa-}Qa-}Qa-}Qa-}Qa-
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: a7 dd 30 d6 d8 cc 9c d9 73 0c d6 bd bb 77 7b 9d ca 4f fe 5f de 47 b3 fc 8a fe 2d cf b8 af 64 23 e2 51 f7 07 b2 1d 6f 7a 7d f4 ff 00 b9 27 d6 90 77 30 57 ca 5a 77 99 df 70 c3 9d d1 f3 c6 36 ef 32 7d 21 1e c3 1b 37 5a 50 71 bc a7 5c 28 14 a8 83 c8 cb 2f 5a 0c 3e 8c 8b fb 0e e5 af 0b 6d b7 53 91 c4 05 0b de c6 38 1c a7 cd d1 0a 6d 0a 41 42 92 0a 6d 6b 6c 83 2a c1 6c 36 5a 49 46 c4 c0 97 69 09 50 6d b0 09 04 44 de 22 45 4f 0b 53 68 4f d3 0b 66 54 33 77 14 b0 a0 bd ec 11 78 43 68 6c 65 42 02 47 30 86 64 e4 9c 52 94 a9 76 f3 1f b2 1f 96 6d 5f 01 c6 c2 80 37 00 c2 9a 43 88 c8 b4 02 9d 1a 0c 19 66 0e 40 5a 4d 91 dc e8 d5 0e b2 db c0 07 1b 0b 00 ed 84 a5 29 48 48 4f c1 02 c0 42 65 25 50 6e 99 74 0d 3c d0 a6 59 5a 82 d4 d2 4a 86 a3 da 53 67 9d 94 5a 1d 6c d8 8d 04 Data Ascii: 0sw{O_G-d#Qoz}'w0WZwp62}!7ZPq\(/Z>mS8mABmkl*l6ZIFiPmD"EOShOfT3wxChleBG0dRvm_7Cf@ZM)HHOBe%Pnt<YZJSgZl
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: 62 e9 c8 54 e2 8a 94 53 cc 49 86 d7 3b 22 d0 44 ad 52 75 a6 47 ff 00 8d 2f ac 26 1c 6f 7c 79 0f 87 5c 43 c9 37 4b a8 51 4a c7 f5 10 ec d4 f4 c2 72 cc d4 66 9f 16 b0 0e ba a5 81 fd 0c 22 66 71 12 a9 94 33 cf ae 59 21 21 0d 2d 65 48 4e 5d 56 07 b7 c0 bd eb 9a f4 93 ee 88 9f ef 75 47 d1 5e f7 0c 0d 43 73 00 ff 00 dc 1a 9f f2 44 7e 74 35 b6 11 29 2a d2 cb 88 96 69 2b d3 f0 82 40 3a 61 4d 36 b2 0a d0 92 7e d1 1c 1a 5c 6a 61 1d 11 1b cb 21 59 b7 b4 df cd 01 b6 d2 6e 94 00 6d 6d 1b ae f7 3b 94 9f fc bf bc 8f 67 6b 68 b1 8b 18 b1 8b 18 b1 8b 18 b1 8b 18 b1 8b 18 b1 85 a4 ef 6e 9e 64 2b d9 08 f8 a4 7d c1 18 73 f7 29 9f 4d 99 fc c3 b9 82 be 52 d3 bc ce fb 86 1c ee 8f 9e 31 b7 79 93 fc 74 46 cd de 68 06 c4 18 f8 d6 4f 3f 25 2e e5 c1 49 8a 2a eb 8d e1 8a f3 6d c8 4a Data Ascii: bTSI;"DRuG/&o\|y\C7KQJrf"fq3Y!!-eHN]VuG^CsD~t5)i+@:aM6~\ja!Ynmm;gkhnd+}s)MR1ytFhO?%.ImJ
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: 1d ee 77 17 2a 1e 4b 8e 25 a5 ad 49 5a 13 95 04 0d 04 5c 9d 47 4c 2d 95 00 32 d1 67 ca b4 6b 5b 76 f6 43 e8 6d 89 11 34 e4 94 c3 2a ce a1 bc b8 50 a5 2a c2 e2 d6 8e 3a 96 b2 bf e9 73 97 07 4f c0 44 1a e4 8d ca 44 84 d8 24 fc 1b b4 9b 18 4d 42 4d c4 6f 89 65 c4 80 95 dd 0b 6c 05 5d 36 b5 ad 7e 78 15 59 62 0f fd 3a 6e e0 78 b4 5b db 0d 55 a4 9e 74 34 24 a6 91 7b fe d1 6d 24 24 10 2f 0e d4 d8 6b 7b 02 4d f7 73 04 9c c8 42 0a 6c 40 24 fe 31 27 33 29 38 12 b4 b2 b4 0f 85 74 bc 80 85 68 b4 06 e5 bc 16 e3 7a 96 f0 5b 8d ea 5b c1 6e 37 a9 6f 05 b8 de a5 bc 16 e3 7a 96 f0 5b 8d ea 5b c1 6e 37 b9 6f 05 b8 b0 09 b0 16 16 8c 39 fb 8c c7 a6 cc fe 61 dc c1 5f 29 69 de 67 7d c3 0e 77 47 cf 18 db bc c3 f8 e8 ed 81 20 82 21 63 7d 68 11 ae dc 88 31 4d a9 d5 a5 25 27 64 19 Data Ascii: wK%IZ\GL-2gk[vCm4P*:sODD$MBMoel]6~xYb:nx[Ut4${m$$/k{MsBl@$1'3)8thz[[n7oz[[n7o9a_)ig}wG !c}h1M%'d
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: e9 4b 27 e0 80 60 d7 d0 0d d1 5a a8 8f eb 1c 7c 82 ed cd 66 a1 97 21 17 cd a6 f0 e5 59 87 d9 0d 3f 54 9d 58 20 15 24 9b a3 34 38 fd 28 25 7b dc cb e5 56 39 6e 81 68 e1 29 f0 a0 3f 98 80 93 72 76 08 c2 38 61 f9 2d ea a5 38 54 87 95 6d ed 90 6d 60 76 af f4 8a 4f 77 31 e7 1e cf f2 2e fc 5a a1 1f 16 8f ba 23 0e 7e e3 31 e9 93 3f 98 77 30 57 ca 5a 77 99 df 70 c3 9d d1 f3 c6 36 ef 32 7f 8e 88 d8 3b 60 4a 4d c4 38 82 85 91 c9 51 e7 1a 96 ab d0 9c 79 41 2d 09 e6 83 84 fe 1f 8c 75 48 92 9c 55 42 4e 68 b4 57 2e 58 c8 82 05 c2 54 0e 98 ea 73 26 f5 2e 99 5e 99 98 4a 9a 91 74 87 10 95 e8 4e 84 1c ea 02 27 90 67 fa 9a 51 97 2a 92 b4 b6 db 04 84 ec 09 24 18 ea 64 c3 ed 3f 5f 99 5b 6a 4b 2b 6d 84 85 91 60 72 e6 26 30 e4 d4 a3 18 12 79 f9 a9 55 4c 4b 09 99 c5 38 d2 05 ca Data Ascii: K'`Z\|f!Y?TX $48(%{V9nh)?rv8a-8Tmm`vOw1.Z#~1?w0WZwp62;`JM8QyA-uHUBNhW.XTs&.^JtN'gQ*$d?_[jK+m`r&0yULK8
2024-04-18 19:30:38 UTC	1379	IN	Data Raw: 4f 75 3c 9c 6d 87 1f a7 d4 18 9d 08 1a 52 8d 06 14 95 21 4a 4a 81 0a 06 ca 07 61 1b b8 17 bd 73 5e 92 7d d1 13 fd ee a8 fa 2b de e1 81 a8 6e 60 1f 97 95 2f e4 a8 fc d8 6b 6c 5f 45 a0 68 8b ee 5f 75 ee e7 72 93 dd cc 79 c7 b3 fc 8b bf 16 a8 47 c5 27 ee 88 c3 9f b8 cc 7a 64 cf e6 1d cc 15 f2 96 9d e6 77 dc 30 e7 74 7c f1 8d 7b cc 9f e3 a3 d8 7b 73 b9 32 8b a4 28 6c ed c8 04 10 46 83 1d 4f 18 65 ac 59 2b bd b4 94 de 52 66 f6 fe 91 89 9a 69 38 d5 f7 12 d2 42 d5 53 96 b9 1f 79 31 8c b0 7a b1 3c c4 93 9b eb 09 0d 34 a6 ec e5 ef a4 df 45 a3 11 96 a8 d4 2c 33 40 54 d1 98 99 6a 72 46 eb 3a f2 a1 cd 71 58 f9 7f 84 bd 12 6f d8 62 b8 30 00 c5 3b f5 4a 71 e6 ea 88 98 65 4a 19 54 10 16 00 cb 75 01 0e 26 79 38 f6 9c ec c9 6f 83 2a 99 34 89 6c bf 61 49 21 5f 6c 63 74 af Data Ascii: Ou<mR!JJas^}+n`/kl_Eh_uryG'zdw0t\|{{s2(lFOeY+Rfi8BSy1z<4E,3@TjrF:qXob0;JqeJTu&y8o*4laI!_lct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49860	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1333	OUT	GET /pagead/viewthroughconversion/1027983844/?random=1713468635861&cv=11&fst=1713468635861&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:38 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:38 UTC	552	IN	Data Raw: 39 33 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 934(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 19:30:38 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 19:30:38 UTC	556	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 36 36 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 6a 65 34 34 66 30 76 38 37 34 39 34 30 33 36 31 7a 38 38 35 34 37 36 37 35 35 34 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 Data Ascii: fst\x3d1713466800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45je44f0v874940361z8854767554za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F\x26frm\x3d0\x26tiba\x3
2024-04-18 19:30:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49949	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1055	OUT	GET /wp-content/uploads/2023/07/002-virar.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/svg+xml Content-Length: 2639 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-a4f" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-backgroun
2024-04-18 19:30:38 UTC	1241	IN	Data Raw: 20 31 33 2e 33 35 31 2d 31 32 2e 38 37 35 20 33 30 2e 39 38 35 2d 31 39 2e 37 36 33 20 34 39 2e 36 39 38 2d 31 39 2e 33 35 35 2e 30 35 33 2e 30 30 31 2e 31 30 36 2e 30 30 39 2e 31 36 2e 30 30 31 6c 33 39 2e 35 38 39 2d 2e 30 31 35 76 34 39 2e 35 31 38 61 37 2e 34 37 38 20 37 2e 34 37 38 20 30 20 30 20 30 20 31 32 2e 33 38 20 35 2e 36 34 39 6c 39 34 2e 35 37 35 2d 38 32 2e 30 33 38 61 37 2e 34 37 38 20 37 2e 34 37 38 20 30 20 30 20 30 20 30 2d 31 31 2e 32 39 37 7a 6d 2d 39 31 2e 39 39 36 20 37 31 2e 32 39 39 76 2d 34 30 2e 36 31 31 61 37 2e 34 38 20 37 2e 34 38 20 30 20 30 20 30 2d 37 2e 34 37 39 2d 37 2e 34 37 39 68 2d 2e 30 30 33 6c 2d 34 36 2e 39 39 32 2e 30 31 38 63 2d 32 32 2e 36 35 33 2d 2e 34 33 36 2d 34 34 2e 30 39 35 20 37 2e 39 30 34 2d 36 30 2e Data Ascii: 13.351-12.875 30.985-19.763 49.698-19.355.053.001.106.009.16.001l39.589-.015v49.518a7.478 7.478 0 0 0 12.38 5.649l94.575-82.038a7.478 7.478 0 0 0 0-11.297zm-91.996 71.299v-40.611a7.48 7.48 0 0 0-7.479-7.479h-.003l-46.992.018c-22.653-.436-44.095 7.904-60.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49950	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1301	OUT	GET /wp-content/uploads/2021/10/zen2.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/jpeg Content-Length: 364492 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:42 GMT ETag: "658070a6-58fcc" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: ff d8 ff e1 1b d9 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 34 3a 32 39 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:24:29 X"
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: af fb 71 15 ed a6 f2 d7 5c c0 e6 53 b8 1a 9b fa 36 cc b0 fe 8c 56 77 31 ce 63 b7 fb 94 10 90 18 ea eb fd f6 69 03 c7 75 6d 31 63 8b da 66 03 da 58 7e 47 d4 67 fd fd 6b 7d 5e c6 a7 ac 75 3b f3 f2 de d6 63 b5 ec b4 d2 e3 ad 9f e0 f1 29 74 ff 00 da 7a 99 4f d0 ff 00 0f ff 00 15 ea 6f ac ec 5c 00 43 db 8c df 51 9c 49 b1 c2 7b 3b d3 7d 8e af 77 f6 56 83 b2 b0 58 4d 4e a8 63 35 80 8f 4f d2 86 96 8d ac f5 ea da c2 cb 6b da e6 3b ed 35 a2 32 10 0f 0c 4c f5 17 c2 3f e7 2b 80 13 ac 84 34 35 c4 7f 06 a6 06 1d 98 d6 b9 96 52 ea eb 16 bd 8c 73 d8 58 2c 82 e2 d8 81 f4 9c df fc 9a 5d 4d 8c fd ac db 4b ce fb 29 69 67 bb 99 06 b7 b7 48 df fc d6 f5 75 b5 f4 d7 b9 a6 ab dc ed d2 e6 d4 cb cb 81 db f4 b6 54 7d 47 b3 fb 28 3d 43 3c be e7 74 c6 35 95 b0 d5 5b fd 47 34 3a c9 71 Data Ascii: q\S6Vw1cium1cfX~Ggk}^u;c)tzOo\CQI{;}wVXMNc5Ok;52L?+45RsX,]MK)igHuT}G(=C<t5[G4:q
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 02 38 42 49 4d 04 02 00 00 00 00 00 06 00 00 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 03 01 01 01 00 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 03 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d Data Ascii: Z5-8BIMp8BIM8BIM8BIM08BIM-8BIM@@8BIM
2024-04-18 19:30:39 UTC	1692	IN	Data Raw: 9e d4 7c 1c a6 64 e7 0b 99 fa 56 51 2c ad a0 89 3b bd b7 64 b3 f7 ff 00 d0 d5 ff 00 5d ff 00 48 b5 fa d6 7e 2d b8 95 f4 af 4d 97 39 8d 36 8b 1d 20 b2 c6 6e 7d 4f a7 4f 63 fd de e7 ff 00 61 29 4a a3 63 a2 80 1c 40 1e af 21 85 6d e3 d3 6d 4d 7d ac ac 02 0e b0 34 dc d1 66 df de fa 0b a0 e8 f9 99 95 64 e3 75 4b 7f 57 c1 63 c5 39 75 77 dd 66 ea ab 6b f7 6f 7f a7 b9 db eb da b9 66 67 64 f4 cc 9b ea 16 fd 9e e6 ce af 04 c3 5f ef ae c6 ed fe 76 9b 2b fe 6f 6a d8 c3 a7 a6 fa 18 62 fb 6f 7b dd 97 43 dc e7 7b 71 83 7d 46 b9 ad ad b3 fa 46 7e 7e c6 7e 62 6c 01 b1 e2 cd 33 13 8e 5d 68 5f d8 fa 4b 86 84 7c 92 03 81 e3 01 73 b6 7d 65 c9 ae d7 d7 6d 4c 25 a4 cb eb 32 3f cd 71 ff 00 bf ab 5d 2b eb 0b 33 2f bf 1f 23 6b 2c aa bf 5a b2 cd 37 b0 4f a9 01 c7 f9 ca f6 a9 cc 25 Data Ascii: \|dVQ,;d]H~-M96 n}OOca)Jc@!mmM}4fduKWc9uwfkofgd_v+ojbo{C{q}FF~~~bl3]h_K\|s}emL%2?q]+3/#k,Z7O%
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 5f df 75 75 ef 72 6c 92 db 6d ae 39 a8 1d b3 c0 9d 37 28 be c6 8b df 54 46 da ea 78 77 91 0e 64 7f e0 69 c9 63 29 a5 ed 1e eb a6 dd a7 9d 8c 05 e4 bb 77 fa 4d bb 3f b6 b2 e1 67 31 f0 b9 7f 07 4f 21 ae 5a 26 fe 60 23 ff 00 7d ff 00 35 bb 8d f6 5c ea 5d 83 95 4d 79 18 b2 43 99 6b 1a e0 5f c3 9c cf a2 ea b6 3b f3 d9 fe 11 63 33 a6 33 ea c7 d6 4c 6d ce b5 dd 37 31 c5 b8 af 69 2e 70 2e 1b 2c c5 c9 ff 00 4d e9 b5 fb ab b3 f9 eb 2b ff 00 88 b5 5b c0 cb c6 c7 35 b6 d7 96 b6 b0 1a 32 5d 3e 93 ad ff 00 0a ff 00 d1 87 7e 83 d5 dd b2 fb 1d ff 00 5b f4 ff 00 48 af fd 6b 63 ef e8 17 5b b4 0b 70 5b f6 da 6d e4 d7 66 3b 9a e7 59 5c 1d b6 6e c5 7d db 3f d2 2b bb 8a ef a3 4a 06 8e ae f6 26 e6 e3 56 38 20 10 7e 45 cd 50 bd be b9 b2 87 8f 51 96 56 e6 96 13 00 82 19 ed 9f cd Data Ascii: _uurlm97(TFxwdic)wM?g1O!Z&`#}5\]MyCk_;c33Lm71i.p.,M+[52]>~[Hkc[p[mf;Y\n}?+J&V8 ~EPQV
2024-04-18 19:30:39 UTC	1496	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 50 51 9b 51 e6 52 31 52 7c 52 c7 53 13 53 5f 53 aa 53 f6 54 42 54 8f 54 db 55 28 55 75 55 c2 56 0f 56 5c 56 a9 56 f7 57 44 57 92 57 e0 58 2f 58 7d 58 cb 59 1a 59 69 59 b8 5a 07 5a 56 5a a6 5a f5 5b 45 5b 95 5b e5 5c 35 5c 86 5c d6 5d 27 5d 78 5d c9 5e 1a 5e 6c 5e bd 5f 0f 5f 61 5f b3 60 05 60 57 60 aa 60 fc 61 4f 61 a2 61 f5 62 49 62 9c 62 f0 63 43 63 97 63 eb 64 40 64 94 64 e9 65 3d 65 92 65 e7 66 3d 66 92 66 e8 67 3d 67 93 67 e9 68 3f 68 96 68 ec 69 43 69 9a 69 f1 6a 48 6a 9f 6a f7 6b 4f 6b a7 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 Data Ascii: {GHHKHHIIcIIJ7J}JKKSKKL*LrLMMJMMN%NnNOOIOOP'PqPQQPQQR1R\|RSS_SSTBTTU(UuUVV\VVWDWWX/X}XYYiYZZVZZ[E[[\5\\]']x]^^l^__a_``W``aOaabIbbcCccd@dde=eef=ffg=ggh?hhiCiijHjjkOkklWlmm`mnnkn
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: ac d0 15 95 71 89 26 65 87 2c c7 02 d6 02 7c ed e9 28 30 e2 3d fd 35 b7 65 f7 64 ac 0f f6 70 5b 8d c8 2c 43 9e 11 63 0e f2 e1 aa 4b 8c a4 ce 63 a2 64 72 35 bd 6a cd 36 92 63 ba df 32 9a 9b 3c 42 15 7d 8f ab 5a ea 25 68 49 ab 59 7d 98 b3 32 ac 0a 81 58 0a 31 72 16 02 e4 74 65 44 aa 01 1d b5 cd 6c b4 83 73 3d 41 3d 4c bc ab 67 35 d9 a4 5c c5 02 b8 3a 02 e0 5c 8e 88 e8 0f 34 fc cf aa 37 0c fc c7 75 4b ba 12 ac bb 3b d9 d7 9e ae 68 f9 1e 6c 42 7b 2a f6 b7 0e 5b bc ad 7d 5a 2c 6b 25 e7 3d cd 7f 93 44 f8 b5 7c 97 49 0b 28 ac 62 c0 ac 0a 80 c4 15 01 70 28 0b 85 50 14 47 73 17 23 b0 11 49 ae e3 6b 0c a7 d5 47 e4 60 65 80 3c 0c b9 c9 49 a9 e4 d3 2c 1e e6 53 1a e8 d9 11 c4 5e ef 85 aa cf ca a2 69 5f cd ea 4c 77 90 41 90 dd f2 fa 04 b7 53 91 e0 99 09 59 4c f5 22 b6 Data Ascii: q&e,\|(0=5edp[,CcKcdr5j6c2<B}Z%hIY}2X1rteDls=A=Lg5\:\47uK;hlB{*[}Z,k%=D\|I(bp(PGs#IkG`e<I,S^i_LwASYL"
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 23 41 a7 88 21 2f 6a a0 d7 62 ef 32 5b 06 aa 92 0b 5e ff 00 4b 0e 0f 38 50 33 eb 2f 32 c5 77 5f ce 38 c6 d0 f1 22 34 31 3a 8c 9d 21 31 75 d6 b9 72 37 9d df fa b3 f3 4f 5c 69 5b cc 53 63 d2 55 ef 61 e3 64 72 73 79 cb b4 db 5d cd 8d 50 ac 9a d7 44 e6 b1 d7 7d a6 96 7e 6d 63 1d be 2a fa 0c b1 f8 27 de 8a 3d 83 48 f6 cb 09 12 5d 87 8a 32 ce d5 cb 16 ce 99 ca d2 fa 1d 5a c9 2e a1 da e9 b1 28 33 57 32 df a7 ca ca d5 b6 32 2b 7b 47 17 f5 fd f3 07 e9 65 01 ac db cc 9e c0 21 9f dd e0 82 dc 61 c8 56 e9 7a 09 cf 3f 93 b5 51 ff 00 e4 4f 69 bb 7c 96 c8 c8 da a3 8b 65 91 66 ba 6e 76 8c 6a 72 13 db c8 6d a3 ff 00 0d a3 0e d5 53 2e 9d 37 0c a3 6f f2 dc 2b 8e 80 50 de 33 5e 7f d1 8f 55 53 11 9d a6 4d 53 a7 bb 28 d7 d9 aa 3c df a6 2c f4 da 22 4c 95 4c 8c 08 3d 3c e7 61 21 Data Ascii: #A!/jb2[^K8P3/2w_8"41:!1ur7O\i[ScUadrsy]PD}~mc*'=H]2Z.(3W22+{Ge!aVz?QOi\|efnvjrmS.7o+P3^USMS(<,"LL=<a!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49951	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1067	OUT	GET /wp-content/uploads/2023/07/003-integrao-de-dados.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/svg+xml Content-Length: 4483 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-1183" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	2796	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 512 512" style="enable-backgroun
2024-04-18 19:30:38 UTC	1687	IN	Data Raw: 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 65 39 35 31 31 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 3d 22 23 30 30 30 30 30 30 22 20 6f 70 61 63 69 74 79 3d 22 31 22 20 63 6c 61 73 73 3d 22 22 2f 3e 0a 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 34 35 35 2e 36 32 38 22 20 63 79 3d 22 36 35 2e 30 38 36 22 20 72 3d 22 31 39 2e 30 39 32 22 20 73 74 79 6c 65 3d 22 73 74 72 Data Ascii: oin:round;stroke-miterlimit:10;" fill="none" stroke="#e9511d" stroke-width="15" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" data-original="#000000" opacity="1" class=""/> <circle cx="455.628" cy="65.086" r="19.092" style="str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49953	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1063	OUT	GET /wp-content/uploads/2023/07/004-conectividade.svg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/svg+xml Content-Length: 2289 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-8f1" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	1398	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 76 67 6a 73 3d 22 68 74 74 70 3a 2f 2f 73 76 67 6a 73 2e 63 6f 6d 2f 73 76 67 6a 73 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 35 31 32 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 32 20 37 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.com/svgjs" version="1.1" width="512" height="512" x="0" y="0" viewBox="0 0 72 72" style="enable-background:
2024-04-18 19:30:38 UTC	891	IN	Data Raw: 31 2e 32 20 30 20 32 2e 31 2e 39 20 32 2e 31 20 32 2e 31 73 2d 2e 39 20 32 2e 31 2d 32 2e 31 20 32 2e 31 2d 32 2e 31 2d 2e 39 2d 32 2e 31 2d 32 2e 31 20 31 2d 32 2e 31 20 32 2e 31 2d 32 2e 31 7a 4d 36 30 2e 38 20 31 35 76 2e 32 63 30 20 2e 35 2e 31 20 31 20 2e 33 20 31 2e 34 4c 34 33 2e 36 20 32 38 2e 33 43 34 32 2e 35 20 32 37 20 34 31 20 32 36 2e 32 20 33 39 2e 33 20 32 36 56 31 31 63 31 2e 31 2d 2e 33 20 31 2e 39 2d 2e 39 20 32 2e 35 2d 31 2e 38 7a 4d 33 38 2e 33 20 35 63 31 2e 32 20 30 20 32 2e 31 2e 39 20 32 2e 31 20 32 2e 31 73 2d 2e 39 20 32 2e 31 2d 32 2e 31 20 32 2e 31 2d 32 2e 31 2d 2e 39 2d 32 2e 31 2d 32 2e 31 2e 39 2d 32 2e 31 20 32 2e 31 2d 32 2e 31 7a 4d 35 20 39 2e 34 63 30 2d 31 2e 32 2e 39 2d 32 2e 31 20 32 2e 31 2d 32 2e 31 73 32 2e 31 Data Ascii: 1.2 0 2.1.9 2.1 2.1s-.9 2.1-2.1 2.1-2.1-.9-2.1-2.1 1-2.1 2.1-2.1zM60.8 15v.2c0 .5.1 1 .3 1.4L43.6 28.3C42.5 27 41 26.2 39.3 26V11c1.1-.3 1.9-.9 2.5-1.8zM38.3 5c1.2 0 2.1.9 2.1 2.1s-.9 2.1-2.1 2.1-2.1-.9-2.1-2.1.9-2.1 2.1-2.1zM5 9.4c0-1.2.9-2.1 2.1-2.1s2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49952	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1301	OUT	GET /wp-content/uploads/2021/10/zen5.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/jpeg Content-Length: 352632 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:43 GMT ETag: "658070a7-56178" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: ff d8 ff e1 17 c7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 35 3a 33 35 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:25:35 X"
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: cc 56 5b 5f 55 a5 f7 34 ed f4 dc e3 bb 59 70 1e 7f 4b f7 94 b8 71 0c 90 96 39 8a d4 6e 35 d5 8b 36 53 09 c7 24 0d e8 76 3e 9d 3f f4 67 a1 cd eb 58 f9 5d 3d 94 74 7b 06 66 44 56 19 8a c0 41 23 75 7e ad 77 7a 81 bb f2 2d 61 7f a5 8c df e6 bf d1 ff 00 a3 df fa b9 d2 ae c3 c6 ba fb d9 e8 5f 98 e0 e6 d7 03 7b 2a 0d 05 95 5b b8 7b 2d f5 9d 75 af af f3 17 13 99 7b 68 ba 9c ad e7 d1 ca 0c 65 a4 18 01 c3 d9 4d ed fe a7 fd 42 eb ad eb 59 37 7d 5f 75 a2 d6 d3 90 67 16 cc a2 09 73 6c 7f e8 ab c8 6d 63 6e f7 7a 76 7a ff 00 4b f3 1e 9d cc c2 58 f1 54 4d 83 2f 5f fd ca de 5f 20 c9 96 e4 28 81 e9 ff 00 ba 63 f5 93 2b 2f 05 94 bb 13 31 cd c9 73 8b bd 17 b9 a2 6b 00 87 59 15 d4 df 6b 5f fe 95 ea ab 85 cf 75 59 f9 38 3e 9e 3d f5 cb d8 c2 d7 5f 6b 8b 77 fa f6 bb f4 14 fa 4e Data Ascii: V[_U4YpKq9n56S$v>?gX]=t{fDVA#u~wz-a_{*[{-u{heMBY7}_ugslmcnzvzKXTM/__ (c+/1skYk_uY8>=_kwN
2024-04-18 19:30:38 UTC	2992	IN	Data Raw: 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 06 38 42 49 4d 04 0c 00 00 00 00 16 a9 00 00 00 01 00 00 00 a0 00 00 00 78 00 00 01 e0 00 00 e1 00 00 00 16 8d 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: topOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIMxAdobe_CMAdobed
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: 0d 84 c9 0e 2e b1 b5 89 ff 00 82 6a f6 0e 8a fd fd 1f 0f 59 2c a8 54 4f 9d 7f a1 ff 00 be 2e 4f eb 57 d5 1e 99 73 19 d5 f0 ad 38 b9 54 96 b9 fb c9 b9 8e 60 1e c7 3a ab 5d bd af a9 df b9 fe 62 d4 fa 8f d4 2f bf 02 fe 9f 96 18 32 b0 9e 5c 5d 5c ed 73 2c 31 bb 6b be 83 9b 63 3f d7 de ad e6 3c 78 e5 2a da 42 bf bb ea ff 00 d5 8d 1c 43 82 71 8f f5 4d ff 00 7b d3 ff 00 78 ee 5a a9 e4 ba b6 b0 87 b8 09 d0 03 c9 4b ac e5 e4 62 61 be dc 5a 5d 7d df 9a 03 5c f0 d1 dd f6 7a 61 de d5 8e c6 f5 1e a3 5d 5d 45 a5 8c 6d ed f7 d3 bc 4b 76 ee 6f 76 fb b1 f7 b3 db f9 eb 3b 98 cb 92 10 3e d4 3d c9 f6 e8 3f ac cf 29 6b 43 52 f4 3d 23 3a 9c 8f d1 35 8e 83 36 32 c2 62 60 7a 66 1a b4 f4 f0 fc 4a e7 3a 6e 27 5f be f6 ba 87 33 a6 e1 d4 3d 3b 2e 8a ac b5 fa 4e ca 2a 6f da 2a 6d 1b Data Ascii: .jY,TO.OWs8T`:]b/2\]\s,1kc?<xBCqM{xZKbaZ]}\za]]EmKvov;>=?)kCR=#:562b`zfJ:n'_3=;.No*m
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: f4 6c 5e 97 f5 5f ea fb f0 6c 66 66 6b da fc d6 b0 b2 b6 30 cb 2a 0f 20 de f0 ff 00 cf be dd 8d 66 f6 7b 2b af f4 75 ff 00 38 bc 21 24 33 71 fb 72 af 97 f4 bf 79 38 78 3d c1 77 c5 5e 9f dd 7e 9c 8f 33 f7 a9 02 ee ce 31 f1 2b e6 14 96 7b 79 fa 79 c4 91 ab 89 f9 95 54 99 a7 de f8 fd 23 c0 2e 05 de 1e 0e 0b e6 b4 90 95 51 bd 92 2e f4 7e 90 3e 97 fa 51 ff 00 6d bb ff 00 26 98 7d 97 56 d8 f0 f6 1f cd f4 c8 ff 00 bf 39 7c e0 92 60 e0 bd 37 ff 00 09 71 e2 ad 7f 63 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 31 00 00 00 Data Ascii: l^_lffk0* f{+u8!$3qry8x=w^~31+{yyT#.Q.~>Qm&}V9\|`7qc8BIM!WAdobe PhotoshopAdobe Photoshop 2021
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: <?xpacket end="w"?>XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: a3 53 8f 5d 78 a2 e3 d0 a0 ff 00 c1 57 fa ff 00 ad f5 bf bf 78 6b 4e 3d 7b c5 53 41 eb d7 62 34 1f d9 51 f5 b7 03 dd 0a 95 20 9a 75 71 9a 90 3a c8 11 3f d4 af fc 92 bf 8f 75 ea c3 af 78 d0 fd 51 0f fc 82 3f e2 9e fd d7 a9 eb d7 bc 68 3f b0 9f f2 48 ff 00 8a 7b f7 5e a7 cb ae f4 2f fa 85 ff 00 92 47 fc 53 df ba f5 3a ef 42 fd 74 af fc 92 3f e2 9e fd d6 fa ec 46 bf ea 17 fd b0 fe b6 3e fd d6 be 7d 71 31 a8 3f a1 7f af d0 7f c5 3d fb af 79 f5 d6 85 ff 00 50 bf ed 87 fc 53 df ba f7 5e f1 c7 fe a1 3f e4 91 ff 00 14 f7 ee bd 41 f9 75 ef 1c 7f f1 cd 3f e4 95 ff 00 8a 7b f7 5e eb de 38 ff 00 e3 9a 7f c9 2b ff 00 14 f7 ee bd 9e bd e3 8f fe 39 a7 fc 92 bf f1 4f 7e eb 7d 77 e3 4f f5 09 ff 00 24 8f f7 ab 7b d7 5e eb da 17 fd 42 ff 00 c9 23 fe 29 ef dd 7b ae f4 2f d3 Data Ascii: S]xWxkN={SAb4Q uq:?uxQ?h?H{^/GS:Bt?F>}q1?=yPS^?Au?{^8+9O~}wO${^B#){/
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: ed ef dd 78 75 dd be 83 8f cf fa ff 00 4f cf f4 f7 ee bd d7 12 3f e4 5f 9f 7e eb de bd 74 40 f7 ee b5 c2 b4 eb 88 1c fd 7f df 7e 0f bf 75 a2 01 23 d0 79 7f 83 ae 5c ff 00 be ff 00 7d f9 f7 ee ad 9f 4e b9 7b f7 5b 07 ae ff 00 df 7f c5 38 fa fb f7 5a a6 41 eb 9f 37 fa ff 00 bd 72 7f d6 fe 9e fd d6 ba c8 ab c7 fb ef af bf 75 be 1d 73 02 df f1 1f ed b9 ff 00 61 ef dd 68 d4 f5 e2 78 00 5a c7 fd f7 e7 df ba dd 3a e0 7f a5 ff 00 df 7f c4 fb f7 5b eb 81 b5 ff 00 e3 5f ef 8f bf 75 5f f0 75 c0 db f1 f8 3f 8b 7f bd fd 7d fb ad f0 e3 d7 02 7f a7 36 e6 c7 8e 3d fb fc 1d 7a bd 75 a8 1f a7 e4 5f fa 5b f0 41 1f 82 0f bd 85 24 f0 eb 55 c5 7c ba ef fd 8f fb ef f8 a7 bf 00 6b 4e bc 48 00 92 7a f1 36 ff 00 7d 7f 6e 84 c0 f5 1d 32 f2 e8 3a 46 47 fa b1 d7 7f ec 79 1f 8f 7e 08 Data Ascii: xuO?_~t@~u#y\}N{[8ZA7rusahxZ:[_u_u?}6=zu_[A$U\|kNHz6}n2:FGy~
2024-04-18 19:30:39 UTC	1790	IN	Data Raw: e8 1b fe 47 bf 12 4f 1e b5 c3 ae 25 bf a7 fc 8f fa ff 00 b0 f7 ae b7 4f 5e b8 96 ff 00 91 7f bd ff 00 8f bf 75 ec 7e 7d 78 31 1f 9f cf bd 82 6b d7 b1 d7 30 df e3 fe b1 ff 00 7d f4 3e df 1d 54 f0 34 eb 22 35 bf 3f 5f f5 b9 ff 00 61 ef 7d 32 a8 14 d4 b7 fb 3e 98 ea 42 d8 7e 47 36 fe 9f ed f9 fa 73 ef dd 6b 42 0a 82 45 0f 0f f3 f5 90 91 f8 fa 7d 3f 16 fc 7f bc fb f0 1d 52 56 04 80 bc 07 4d f9 1c a5 16 2a 9a 4a aa d9 e3 86 28 d4 b3 99 1d 50 05 1c 92 4b 10 14 7f af ee ea a5 88 00 74 d8 18 d4 70 3a 40 a7 6a ed e7 89 a7 46 2f 1e b2 88 cb 7b 49 a4 db 52 70 09 5f f1 fa 1f 6b 56 c2 46 a6 69 d7 bc aa 14 f5 da f6 ae 00 8b 85 7f ad ac 49 bf f8 8b 69 f7 6f dd b2 83 93 d6 ea 3f 80 d3 af ff d5 dd 2c 58 8f f8 af fb df b3 3e 22 9d 13 ff 00 93 ae 43 fd 85 87 e0 ff 00 c4 7f Data Ascii: GO%O^u~}x1k0}>T4"5?_a}2>B~G6skBE}?RVM*J(PKtp:@jF/{IRp_kVFiIio?,X>"C
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: ea e3 e9 f8 ff 00 61 c7 1f 5f e9 ef 5d 7b e7 d7 bf af fb c7 fb eb ff 00 bc 7b df 5e f4 eb af af e3 fd f7 fc 4f bd 75 bc f5 c4 fb f7 5a 3d 71 bd ef fe 1c 7f c4 fb df 5a 3d 71 b9 1f f2 2f a7 fc 8a fe fd d6 e9 5e b8 ea e7 9f f7 df f2 3f 7a eb d4 f2 eb da 8f f5 fa fb f7 5e f9 57 ae c3 9f f7 8b 0f 7e eb 60 90 30 7f e2 ba ec 3f f8 7b df 5e 1d 73 12 7f be 3f eb 7f af 6f 7a eb df 97 59 92 70 3e bf ef bf af f8 7b f7 57 8d f4 12 48 c1 ea 40 9e 35 1a 8b 05 00 72 4f 03 8f f5 fd b4 e3 89 e9 5a b0 20 50 f4 97 ce 6f 2a 4c 7a 34 34 c7 cb 35 88 01 6c 49 3f f1 03 dd 42 93 d3 6f 32 a9 d2 b9 6f e5 d0 3d 93 ca d5 64 a4 79 6a 65 2d f5 2b 18 27 42 fe 7e 9f 92 3d be 05 29 eb d2 43 92 58 f1 3d 0f fb 36 e7 01 42 7e a0 c6 bf e3 f8 1e d0 cd 4f 14 f4 63 6f fd 82 d3 8d 3a 5a 2a dd 45 Data Ascii: a_]{{^OuZ=qZ=q/^?z^W~`0?{^s?ozYp>{WH@5rOZ PoLz445lI?Bo2o=dyje-+'B~=)CX=6B~Oco:ZE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49954	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1301	OUT	GET /wp-content/uploads/2021/10/zen4.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:38 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/jpeg Content-Length: 347680 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:43 GMT ETag: "658070a7-54e20" Accept-Ranges: bytes
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: ff d8 ff e1 1a f0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 35 3a 31 30 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:25:10 X"
2024-04-18 19:30:38 UTC	4096	IN	Data Raw: 48 92 da c7 b8 b2 7f 48 df 59 de fd ff 00 d6 56 99 f5 b3 13 27 26 aa b7 93 63 de 06 c7 69 20 9d 9b bf b4 d7 b1 ea 4b 0c 7e d4 b7 7a 61 70 6d 65 e4 80 ef c8 4f 82 e7 fa a6 7b b2 1d f6 1c 53 15 03 37 58 38 73 bf f4 9d 7f f4 de 8b 99 73 db 4b e9 63 a0 b1 cd 67 c8 8d ad ff 00 a9 42 e8 b8 9e a3 dd 97 90 7f 43 49 3b 5b a7 bd ed e4 47 ee 55 bb de 91 ec 98 50 b9 1e 9b 36 b2 19 5f 4d c1 68 86 b5 cd 68 87 38 80 40 e7 f7 6c 77 d3 73 dc bc e7 ab 65 bb 3f 37 43 2c 07 43 ae ba f3 ee f7 2e 83 eb 7f 5b 7d 8e 75 0c 7c eb 0e 1a f3 fb ab 9c c4 63 59 39 17 ff 00 36 c8 2e f3 3f 9b 5b 7f af f4 51 46 bd 5d ee 96 d1 51 ab 1d a2 4b 58 6e b0 1d 06 bf a3 a5 8f 77 e6 b3 dc fb 2d ff 00 83 5b 55 39 fc 92 49 79 d7 b3 9c 7f 34 7e eb 3f e2 ff 00 9b c6 a7 fe 15 61 f4 bb 64 59 90 ff 00 a7 Data Ascii: HHYV'&ci K~zapmeO{S7X8ssKcgBCI;[GUP6_Mhh8@lwse?7C,C.[}u\|cY96.?[QF]QKXnw-[U9Iy4~?adY
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 4d 00 00 00 06 00 00 00 00 00 00 00 00 00 00 02 58 00 00 03 20 00 00 00 0c 00 53 00 65 00 6d 00 20 00 54 00 ed 00 74 00 75 00 6c 00 6f 00 2d 00 32 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 03 20 00 00 02 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 Data Ascii: @@8BIM8BIMMX Sem Ttulo-2 XnullboundsObjcRct1Top longLeftlong
2024-04-18 19:30:39 UTC	1692	IN	Data Raw: 77 5d 33 ec 38 46 e7 74 fa 2b c5 39 70 eb 3d 21 ed 24 6e d9 63 68 9d 8d fa 4e fe 6f d3 ad 49 5d 58 24 db c6 fa b7 8a c3 ea 64 13 73 c7 2e 71 dd ff 00 4d ea 3d 53 3b a4 74 fa 22 cb aa a4 09 92 4f 97 8f d2 7f fd 6d 72 df 5a b2 3e bb 35 ae b6 87 36 fc 06 ea 6e c3 05 cf 68 f1 b7 14 fe 92 ad bf e9 29 65 b5 ff 00 c2 ae 15 cf 7e 4b bd 6b ac 37 39 df 9e e3 b9 38 05 84 d3 ff d3 ee 6b 30 20 94 f6 d7 ea d4 fa 8b cd 62 c6 b9 9b db cb 77 0d bb db fd 55 2f b3 5a 0e ac 3a f9 22 b3 0a e3 c9 da 3c d1 5a f9 5e 7d 79 cc ea 37 d3 9d 0e cb ad e6 b3 1f 45 ad 1f 43 d3 fe 43 d9 fa 46 a2 d7 48 6b 40 89 27 9f 82 eb fe ba f4 12 71 db d5 e8 f7 5d 8c d1 5e 54 0f a5 4c fb 6c ff 00 d0 67 3b fe d8 ff 00 8b 5c ef 4f c1 bf 30 cd 63 6b 1b f4 ac 76 8c 6f f5 9e 9a 47 66 68 ca c5 97 b3 e8 79 Data Ascii: w]38Ft+9p=!$nchNoI]X$ds.qM=S;t"OmrZ>56nh)e~Kk798k0 bwU/Z:"<Z^}y7ECCFHk@'q]^TLlg;\O0ckvoGfhy
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: d2 ef 77 b9 9f 49 bf ba ac bf ad b8 6e f7 6a 4f e3 10 9d a2 2a 5d dd 66 e0 58 f6 5b fb 41 ec a9 ad b9 ae bc d6 f9 21 a2 1f e9 07 7e ff 00 e9 1b bd ff 00 41 8a bf 5d eb d4 57 8a ea a9 d9 4b e9 05 ad 68 fc c2 dd 3e 89 fc c7 7d 17 2c 2c de b0 e7 e6 5f 8e e9 f4 3a 9e 37 aa d3 3c 38 63 59 8b 73 3f ad f6 8c 7a d7 3e fb 6d cd 0c ca b1 de eb 1b fa c8 27 41 65 51 5d b6 7f 6f f9 c4 93 5d d9 58 f7 e6 64 3a fb 4e 82 49 73 b4 00 0f ce 72 a8 fc 96 e6 d8 29 a4 11 5d 26 6a 67 7b 3f 7e cd bf e9 3f 71 9f e8 54 32 72 f7 bb d1 af 4a 01 d7 c5 e4 7e 73 bf 93 fb 8c 55 5d 5b 9b 74 b1 e1 ae 69 e0 98 f8 39 91 f9 c9 28 3d 13 72 5d 41 fb 3b 81 6b ea 3b 1c d3 c8 23 e9 22 bb ae 51 84 f6 82 05 97 72 1b d9 be 04 8f de 59 99 6e bd 85 b9 96 0d e6 fa da e9 99 9b 1a 03 1d ea 4f e7 3b f9 c5 Data Ascii: wInjO*]fX[A!~A]WKh>},,_:7<8cYs?z>m'AeQ]o]Xd:NIsr)]&jg{?~?qT2rJ~sU][ti9(=r]A;k;#"QrYnO;
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: 32 2d 36 62 63 39 2d 35 34 34 65 2d 39 32 65 31 2d 61 64 37 65 64 62 38 39 32 65 66 63 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 32 34 31 31 38 33 32 2d 36 62 63 39 2d 35 34 34 65 2d 39 32 65 31 2d 61 64 37 65 64 62 38 39 32 65 66 63 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 Data Ascii: 2-6bc9-544e-92e1-ad7edb892efc" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:52411832-6bc9-544e-92e1-ad7edb892efc" stEvt:when="20
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 Data Ascii: <?xpacket end="w"?>XICC_PROFILEHLinomntrRGB XYZ 1acspMSFT
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 40 fe d0 f4 93 fd 4a df db 0a ad 9a 71 1d 30 ce 0e 14 67 a1 73 64 3c 39 04 8d 6a a8 29 5a 63 60 27 89 15 0b 1f cb 32 80 34 b0 1f 53 ed d5 73 a0 6a 38 eb c8 01 34 a7 6f 42 eb 6d aa 69 81 2c 9e a2 bc 30 e4 58 8f c5 c5 8e 9f 75 f1 33 91 db d3 be 18 15 c7 41 c6 e4 da 74 e2 f1 f8 d8 3b 5f 41 d3 a5 4b 30 d3 a5 88 b1 5e 3e 9f eb 7b d3 38 20 a8 51 4e b4 14 0a 63 3d 06 af b0 24 d3 27 90 48 03 13 eb bb 1e 4f d2 e4 1b 5a e7 f1 f8 f6 c6 80 0e 3a de 78 1c f4 10 ef 5a 3a dd b8 64 8e 49 e5 9e 95 a3 2a ba 75 36 8b 92 00 b8 e2 ca 7f d7 e7 de de a0 50 f0 3d 27 06 8c 69 c4 74 07 d1 9f 36 4d 65 49 a4 d4 19 43 28 76 17 fa d8 fd 78 e2 fe d9 f4 1d 29 8d 49 21 ab e5 d1 a8 da f8 ed 34 b1 ca 66 d0 c5 07 01 98 1e 54 11 76 fe 9a 7d be 05 00 eb 67 ac d9 3a 5a 9b 4d 28 72 a9 1e 9f 21 Data Ascii: @Jq0gsd<9j)Zc`'24Ssj84oBmi,0Xu3At;_AK0^>{8 QNc=$'HOZ:xZ:dI*u6P='it6MeIC(vx)I!4fTv}g:ZM(r!
2024-04-18 19:30:39 UTC	196	IN	Data Raw: 9f 61 e2 82 84 f4 24 88 fe 9a 1a e2 83 ae ee 1a 96 9d b4 58 3c 11 95 62 80 30 0c a0 f3 72 4b 6a 26 df f2 31 ef cc 6a 05 0f 56 a5 4f 41 e6 e1 8c b4 72 0e 6e 79 25 ae 48 b8 e4 b1 16 0e 3f 22 df 5f 6d 1f 3f 4a 74 a0 0a e9 a7 11 d1 3e df 0a 21 dd 18 5a 82 2d 6a c1 6b 00 bc 5c 06 06 f7 b5 83 71 fe c3 fa fb a4 58 62 07 1a f4 a6 e8 03 6f 16 a3 91 d5 d9 7c 37 a9 07 17 8f 17 36 31 40 41 b9 d4 7d 11 df 92 78 0f ab 57 f8 7b 38 b7 20 67 a0 bd c4 64 60 70 af 56 fd 8d 5f b8 db 19 48 b8 22 4c 55 6a 58 dc 8b 35 34 97 e0 7e 7d ae 1f 0f e5 d2 45 1d ca 0f af 54 3d d7 71 1a 5d eb bc a8 8a db c5 92 ce Data Ascii: a$X<b0rKj&1jVOArny%H?"_m?Jt>!Z-jk\qXbo\|761@A}xW{8 gd`pV_H"LUjX54~}ET=q]
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: 40 51 ae 00 68 32 35 aa 10 5a df 4d 36 fe 84 7b 0f b0 e0 6b 9e 84 03 29 19 f9 74 6f 7a 56 51 4b bc 85 c2 90 f4 c0 30 bd 89 50 fc 1f e9 ce a1 7f f5 bf d7 f7 b8 fe 23 f6 74 d4 e0 e8 af a7 56 31 86 ce 81 48 91 06 16 0b 65 24 80 45 f9 07 f1 f4 bf fb 7f 6b d5 aa 3a 46 2b 5c f4 d5 95 ca f9 a4 60 ac 0e 9d 5c 8f f0 b0 20 35 ad 6b 5f fd 87 ba 33 d0 d0 75 6a f4 f3 45 97 89 f1 ca 09 bf 89 58 15 fe d0 bf d5 48 1f 42 49 3e dc a8 a5 6b 8e bd 51 d1 6a ec ed c3 4d 2d 79 01 97 cb 0c 65 79 24 29 6f c2 9f ea 47 f4 fc 5f db 0f dc d8 ea 85 c0 a9 27 1d 06 78 5a d3 3d 40 64 17 46 65 3f 4b db 50 3c 0f e9 a4 73 6f a1 f7 ef 0c d0 9e aa b2 06 3d bc 3a 14 e8 b3 2f 45 a5 e2 6d 2e 7f b3 f4 26 df a4 fa 78 b9 d3 f9 f7 b8 f5 79 70 ea e4 d2 be bd 0d db 47 35 5f 93 60 b3 f9 4b 14 e0 46 6c Data Ascii: @Qh25ZM6{k)tozVQK0P#tV1He$Ek:F+\`\ 5k_3ujEXHBI>kQjM-yey$)oG_'xZ=@dFe?KP<so=:/Em.&xypG5_`KFl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49955	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1301	OUT	GET /wp-content/uploads/2021/10/zen3.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0
2024-04-18 19:30:39 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:38 GMT Content-Type: image/jpeg Content-Length: 301108 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:43 GMT ETag: "658070a7-49834" Accept-Ranges: bytes
2024-04-18 19:30:39 UTC	1398	IN	Data Raw: ff d8 ff e1 15 f6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 34 3a 35 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:24:52 X"
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: c8 10 76 b7 fb 4e fc df df 58 dd 63 22 ec ec de a7 63 2f 75 58 b7 fd 9f 1e 8b 01 d1 af 7d de 85 96 35 bb 7f d1 63 7a b5 bf ff 00 26 84 7e a9 62 37 1f 32 e6 5a e7 ba 8a cb a9 be c7 18 ae f2 fa dd 4b a9 de 46 e7 d2 ca ad 73 bf e3 bf 9c 55 78 a2 65 23 65 b6 23 21 18 c6 87 db d7 f4 5a dd 47 eb 13 ce 51 66 36 3d 61 a4 12 d6 5b 76 db 9e 00 99 65 2d 6e da dd fc 8b 1f bd 72 f9 00 b6 fb 49 6f a7 ea 91 71 aa 0b 7d 33 60 dd e9 fe eb bf b0 bb 3e 9b 83 8d 91 84 6b b2 96 fa ed 66 c7 da 1c d2 36 bf de f7 52 d8 16 7e 97 7e e6 7a 9e c6 7a 9e af e9 17 3f f5 a2 b6 b3 3e c2 d0 04 d3 5c 81 c0 21 fb 60 7f 65 c9 b0 94 44 80 03 e6 ea ba 70 91 81 32 27 d3 ad 3d 97 f8 bf ea 2f cb e8 6e c5 b0 cb f0 2c f4 81 ff 00 83 78 f5 69 ff 00 33 f4 95 ae a6 ae 4a e0 3f c5 a5 84 64 e7 57 f9 b6 Data Ascii: vNXc"c/uX}5cz&~b72ZKFsUxe#e#!ZGQf6=a[ve-nrIoq}3`>kf6R~~zz?>\!`eDp2'=/n,xi3J?dW
2024-04-18 19:30:39 UTC	1496	IN	Data Raw: d1 fb ad fd 1b 7f e8 b5 79 ca 48 62 f9 e5 7b 51 e1 fb 53 9f f9 b8 d6 f6 38 bf c5 7d 3b ea 55 ac ae db b1 6c 2c 6b 2f 1b d9 ea 68 4b 9b f9 8c fe ca dd fa c5 d6 5b 5e 1f a6 c7 80 e7 0d a1 ad e5 78 a2 4a 09 f0 fb c7 f7 74 e3 67 c7 c5 ec 0f de d7 83 c9 ed 9c ca 48 2e 70 93 cc ae cf eb e1 61 e9 d8 65 da 8d ed ff 00 a9 72 f1 64 95 a3 5a 53 52 37 52 bf 07 ad b9 d5 89 da 21 54 df ca e7 52 4d 4b ff d9 ff ed 1e 0c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 25 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 42 49 4d 04 3a 00 00 00 00 00 f9 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 Data Ascii: yHb{QS8};Ul,k/hK[^xJtgH.paerdZSR7R!TRMKPhotoshop 3.08BIM%8BIM:printOutputPstSboolInteenumInte
2024-04-18 19:30:39 UTC	1398	IN	Data Raw: 00 53 00 65 00 6d 00 20 00 54 00 ed 00 74 00 75 00 6c 00 6f 00 2d 00 32 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 03 20 00 00 02 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 58 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 03 20 00 00 00 06 73 6c 69 63 65 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 05 73 6c 69 63 65 00 00 00 Data Ascii: Sem Ttulo-2 XnullboundsObjcRct1Top longLeftlongBtomlongXRghtlong slicesVlLsObjcslice
2024-04-18 19:30:39 UTC	1398	IN	Data Raw: b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ed b3 e8 16 61 da d8 e5 a7 f2 2a ff 00 52 8c 61 56 cf dd 6d 95 9f ec 58 7f ef b6 2d 4b 6b 90 f6 7c 42 ca fa a8 3d 3b 2d ab f7 2f b4 7c 9e d6 db ff 00 7d 47 a2 cf d2 0f 4b 60 9a dc 3c 96 56 4e 0e 3d f9 55 58 fa da 6d 0d 73 59 61 1a b6 7c 0a d7 22 41 0a 83 84 3a b3 e0 52 0b 8b 5e b1 7e 3b 86 36 41 0e 78 82 c7 8e 1c 07 fd 4b 96 bf 20 15 5b 36 96 da c0 0e 84 6a d7 0e 41 52 c6 7b fd 36 b1 fa b8 69 bb c5 22 a1 a6 8d 5c e3 0e 70 1e 2b 95 eb d9 58 38 83 76 65 be 9b 9c 25 b5 b4 6e 79 fe cf e6 b7 fa eb a7 ea f6 3a 96 97 b3 6f ab 61 6b 2a df f4 77 bb f3 9f fc 8a da 3d 57 af 3b a7 a0 e6 fd 66 ca 7f 51 7d 85 9d 33 7b 9b 41 7c ef b4 03 0e bc b0 7f a6 fa 5f 4b fe 0d 36 59 44 74 4c Data Ascii: '7GWgw?aRaVmX-Kk\|B=;-/\|}GK`<VN=UXmsYa\|"A:R^~;6AxK [6jAR{6i"\p+X8ve%ny:oakw=W;fQ}3{A\|_K6YDtL
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: fb 96 bf 45 b0 39 85 a1 1f d1 58 0f ac ba b8 84 0b 2d 69 f1 9f bd 23 3e ab 40 d4 99 08 75 18 ca 70 e3 70 05 5a ae 1a 5c 7b c1 8f 96 a9 b4 c8 1c 4f ac 06 d6 51 eb 53 1e a0 63 76 18 9d c0 17 b6 e6 7f 67 d4 f5 7f b0 bc f9 f8 07 0b 1a dc fc 2b 01 79 76 db 2c 93 eb d0 cf cf b3 18 0f 6d 8c ca de ca df 67 f3 f5 7f c5 58 bd 0f 33 3b 1a da b2 b0 1a 5c 6e c6 68 73 bd ba 6e fa 50 df df fc dd ff 00 f1 8b 17 a6 7d 5d bc e4 bb 23 20 1a 43 c8 f5 e9 61 07 dc 04 6d 69 13 e8 fd 2f 7d 7f 4d 9f f6 da cf 99 23 2c 8c 3d 40 d6 db 71 7e e9 2e 8e 31 13 88 09 fa 48 ef bf 0f 93 6f a0 d8 cb 70 31 69 24 48 ad b2 df 08 1b 4b 7f b2 aa 75 bc a6 61 0b 72 20 43 5e e9 27 80 e0 df d5 d9 fd bf 7f fe 0a b7 6c a3 1f 1e fa b6 54 c1 65 c4 b1 a7 b8 86 97 6f 6b 7f 3f da cf 7a ab d6 3a 66 3e 56 05 Data Ascii: E9X-i#>@uppZ\{OQScvg+yv,mgX3;\nhsnP}]# Cami/}M#,=@q~.1Hop1i$HKuar C^'lTeok?z:f>V
2024-04-18 19:30:39 UTC	1398	IN	Data Raw: b0 36 35 fb d5 fe 8f d3 0d 55 3b a8 f5 03 ba db 49 75 6c 3c 31 9f 9a 14 04 ea 40 3b 1a 2c c0 68 09 1f 30 b0 d4 ea 9e 80 6b 23 da ed cd 88 fe b0 57 be b8 d1 5d 8d c6 2e d2 1d fc 0a ce c9 bb 07 3a f7 be cc 96 53 5d 4e 00 09 12 48 2b 63 eb 41 c2 f4 a8 39 96 fa 2c 9f 6b bc 4c 15 3e 2e 2a b3 d7 66 1c bc 26 c0 e9 bb e7 3d 68 d7 5b c5 6c f7 41 91 f1 5a 98 d9 ae 38 ed 75 91 25 89 f3 59 f5 45 cf 2e b7 26 c7 3b b6 d9 2a 0c cd fa ab 55 70 05 d6 47 12 0a 79 ea 58 87 40 ff 00 ff d6 b8 72 fd 36 fa 9b c5 6c 3c 13 d8 f8 28 d7 d5 e9 be c0 d6 4b a4 c1 7f 02 57 90 24 ac 9a ad 2b f6 b4 87 15 eb 7f b1 f5 be b6 f1 6f 4b c8 68 e4 37 70 f8 b4 ee 54 ba c5 f6 dd 5d 57 52 e8 36 55 5b ff 00 0d 57 98 a4 a3 ea bc db e9 1d 33 33 34 34 b5 d6 98 e6 15 fc d7 d5 6d 26 8b 40 70 b6 e6 39 ac Data Ascii: 65U;Iul<1@;,h0k#W].:S]NH+cA9,kL>.f&=h[lAZ8u%YE.&;UpGyX@r6l<(KW$+oKh7pT]WR6U[W3344m&@p9
2024-04-18 19:30:39 UTC	1398	IN	Data Raw: 37 54 31 35 3a 32 34 3a 35 32 2d 30 33 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 31 2d 31 30 2d 32 37 54 31 35 3a 32 34 3a 35 32 2d 30 33 3a 30 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 64 30 64 61 66 62 65 2d 31 65 31 35 2d 66 39 34 38 2d 62 61 34 62 2d 61 38 62 32 31 62 38 32 30 31 33 35 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 35 34 36 30 35 63 62 2d 33 34 61 38 2d 39 34 34 62 2d 61 64 30 66 2d 66 66 30 61 37 34 62 62 63 61 65 62 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 66 31 61 39 33 38 34 66 2d 64 34 35 35 2d 36 62 34 37 Data Ascii: 7T15:24:52-03:00" xmp:ModifyDate="2021-10-27T15:24:52-03:00" xmpMM:InstanceID="xmp.iid:5d0dafbe-1e15-f948-ba4b-a8b21b820135" xmpMM:DocumentID="adobe:docid:photoshop:d54605cb-34a8-944b-ad0f-ff0a74bbcaeb" xmpMM:OriginalDocumentID="xmp.did:f1a9384f-d455-6b47
2024-04-18 19:30:39 UTC	1398	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:39 UTC	2796	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49958	13.107.246.41	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	648	OUT	GET /tag/uet/343080441?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-18 19:30:39 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:39 GMT Content-Type: application/x-javascript Content-Length: 721 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78 x-azure-ref: 20240418T193038Z-r1f585c6b65wcbj7wbun4au900000000086g0000000008qy X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-18 19:30:39 UTC	721	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 43 6c 61 72 69 74 79 49 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 33 34 33 30 38 30 34 34 31 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","ClarityInsights")}),!1);a[c]("metadata",(function(){a[c]("set","_u","343080441")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49959	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1313	OUT	GET /wp-content/uploads/2023/07/Zen-Edoc-720x520.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
2024-04-18 19:30:39 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:39 GMT Content-Type: image/png Content-Length: 196125 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-2fe1d" Accept-Ranges: bytes
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 02 08 08 06 00 00 00 47 3a d9 de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 77 90 24 d9 7d df f9 f9 bd cc aa f6 3d dd 3d 3d de ec 98 dd 59 33 3b eb 77 b9 30 8b 25 00 c2 8a 02 49 e8 28 00 14 ee 64 78 bc a3 44 81 12 79 3a c3 8b d0 45 28 42 3a 86 82 22 2f a4 13 2f e4 88 93 4e 41 4a 24 21 0a 22 89 85 23 1c b1 14 b8 16 6b 30 8b f5 6e 76 66 67 c7 bb 36 55 95 f9 7e f7 47 66 56 67 65 67 55 57 f7 b4 a9 ee f9 7d 27 7a 2a 2b f3 f3 5e be f4 df f7 ea 97 ef 41 22 c7 d2 d5 4d da 5e 61 5c ee 33 ff 57 5c b6 11 98 a2 5c 61 da 98 de 66 8a bc 31 c6 18 d3 db 8c c9 64 ba 86 24 6d e6 3b c0 2f 90 b6 13 93 2d eb 26 9f b5 56 fe a6 d8 69 7b d6 1b 63 5a df 5a 0f Data Ascii: PNGIHDRG:pHYs+ IDATxw$}===Y3;w0%I(dxDy:E(B:"//NAJ$!"#k0nvfg6U~GfVgegUW}'z*+^A"M^a\3W\\af1d$m;/-&Vi{cZZ
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 4c df 0d 53 d4 6a 30 cd ef bb b6 ef be 7e 7c d3 a6 77 7f f9 a1 87 da 64 63 32 99 4c 26 93 c9 64 ca eb 1b df fa 26 5b 26 b7 fc 78 48 b8 b7 0d 72 b5 51 0a eb 82 69 d7 42 5b 36 0a 0b 85 65 57 cb 94 7d 5f 0d c6 01 fe ee 3b ef fd e8 ab af bc 3a 78 f2 e4 c9 92 a4 26 93 c9 b4 96 12 a0 ba d6 85 30 99 4c a6 79 7a fe 87 3f e4 ec b9 73 13 c4 fe fe 92 c5 c5 86 d9 32 6d 08 26 6f 2a db 4d c3 fc 96 e7 32 c3 ba 58 26 fb be da 8c 9f 1c df 1a de 74 f3 4d 0f 3e f1 c4 e3 25 c9 4c 26 93 69 ad 25 54 83 3e 12 23 6d 32 99 4c bd a3 28 8a 78 fe f9 e7 d9 b2 63 eb 03 e9 2c 97 fb 6b d7 70 ba e1 98 bc 41 2e fe 51 48 e0 0b 6c 99 f2 2f 24 76 13 62 d1 4e 2b c9 b8 23 77 1c 19 1b 1e 19 be fe 95 57 2c f6 d9 64 32 f5 a2 3c aa 33 74 d7 53 a7 c9 64 32 ad ae 5e 79 e5 65 36 8d 6d ba e5 a6 5b 6e Data Ascii: LSj0~\|wdc2L&d&[&xHrQiB[6eW}_;:x&0Lyz?s2m&o*M2X&tM>%L&i%T>#m2L(xc,kpA.QHl/$vbN+#wW,d2<3tSd2^ye6m[n
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: ad dc 75 fb ed 1c 3e 7c 2b 93 9b fa 69 44 33 cc ce 4c d3 68 34 88 b4 c1 50 66 ae a4 c2 cc 6c 4c 88 b0 69 68 80 a0 ee 71 11 d4 a2 3a 4e 2f 30 52 ed 67 3a 72 80 50 6f c4 d4 6a 75 d4 7b 40 80 90 3f 76 00 00 20 00 49 44 41 54 f0 b1 32 3b 3b 4b ad 56 23 fb d1 c6 23 44 02 0e 25 74 20 f1 34 7f f4 dd 63 dc 70 db 8f d0 1f 08 8d 99 59 42 75 44 08 04 a0 71 84 f3 31 4e 2a 9c 9a aa 53 9b 99 22 ae cf 02 c2 a5 99 59 66 1b 11 5e aa 6c 1f 1e 4c e2 7f 5d c8 70 20 a8 24 2f 3d 06 a2 d4 ea 35 ea b5 1a b5 99 59 1a 91 50 75 8e 6a 9f d0 27 24 3d 69 a8 a0 5e a8 04 01 81 80 6f 40 1f 10 7b 98 89 a6 f1 71 c4 e8 a6 71 b6 6c 9e e4 fc d9 d3 3c fe bd 47 88 6b f5 a6 81 ae 0e f6 73 e8 d0 8d dc 7d e4 4e ee bc e3 0e b6 6c 1d 47 44 19 a8 f4 21 22 04 be 42 b5 d6 60 72 d7 5e 46 fa 86 38 fa e7 Data Ascii: u>\|+iD3Lh4PflLihq:N/0Rg:rPoju{@?v IDAT2;;KV##D%t 4cpYBuDq1N*S"Yf^lL]p $/=5YPuj'$=i^o@{qql<Gks}NlGD!"B`r^F8
2024-04-18 19:30:39 UTC	1692	IN	Data Raw: 34 18 e6 82 08 77 dd 7c 03 75 51 4e 1e fd 01 9b b7 6c e1 86 eb ef e2 e1 a7 be 4b 38 3a cc c1 7a 9d 27 2e d4 b8 ef be 3b 99 7a f5 39 1e f9 c1 cb 7c e8 d3 9f 82 d7 be cf c3 cf 9e e0 c8 bb de c5 9e e1 31 76 6c 1e e7 e0 de 83 8c 0d 0e f2 d4 b3 4f 72 f4 e9 57 f9 d8 4f 7e 8c 81 d1 09 bc 06 88 c4 a8 d2 e2 7b 5a ce f1 85 1f 4d a5 f2 de 23 41 50 a1 7d 23 69 d9 f4 86 61 f2 b1 2b f9 cf 62 1c 74 5e 79 b6 ec cd 45 d7 05 d3 4d 3e 2b c5 24 03 a9 2c a5 17 0e 20 7f ce 95 e5 90 d5 ee 8a 9f ab cd 94 d5 34 cb be 1b d3 bb 4c 51 0b e5 61 8c 31 c6 ac 0e 53 34 d8 79 33 67 cc ea 30 d9 77 ef 3d b1 57 d4 7b 34 4e fe 1a d3 17 f8 dd 2f fc 27 7e ff 2b df e1 dc a9 cb 9c 3c f1 16 0f 7f f9 b7 f9 ca 1f 7f 85 f3 e7 a7 a9 87 43 6c df e6 78 e9 a5 b7 79 fd ed 97 b9 fe b6 07 79 e3 e5 37 78 f1 Data Ascii: 4w\|uQNlK8:z'.;z9\|1vlOrWO~{ZM#AP}#ia+bt^yEM>+$, 4LQa1S4y3g0w=W{4N/'~+<Clxyy7x
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 2c 02 0a 92 2e cd be 93 be 6f d5 48 73 4f d6 9c ac 4f 44 40 85 ed db 76 24 d3 3e 4a d7 1e 37 ff 17 0f 5e a2 64 fb bd d0 7c 7f 4b 93 bc 54 15 2f 92 9a 1d 07 d4 70 d0 92 8f 4f fd 41 1c c7 25 2f 0c 2e 3d 06 5a 55 09 83 e6 78 22 c5 c8 85 e2 f7 0d c7 84 05 a0 cc 75 67 2a 26 2e 53 2f b7 3c 37 25 a2 4b 7a 89 30 ad aa 91 b5 39 67 2d d0 c9 a2 f2 0b 3d 3f 7f 35 99 bc d6 ba 85 c0 98 c5 33 0b a9 17 cb 6c 8c 31 d7 02 53 6c c8 c8 37 5e b4 6b ec 30 66 79 99 6c 7e a6 fc 00 21 ed 8e 67 bb e3 57 64 da 3d 5f cb f2 c8 33 f9 e5 5d a5 cb cd 2b 76 2f b7 50 85 a2 6c 9d 79 1f 90 b5 34 17 b7 c9 7b df 3a 9a 72 9a cf 52 63 a0 e3 38 a6 12 86 c5 86 ca 76 ad b9 1b 8e b9 d6 06 52 f1 3b 76 ed 77 82 5b 5a 37 76 92 ff a9 43 d1 2c 78 43 b5 64 c8 cd f6 2d c7 d9 49 7d 35 4c 71 5d 73 65 5c fe Data Ascii: ,.oHsOOD@v$>J7^d\|KT/pOA%/.=ZUx"ug*&.S/<7%Kz09g-=?53l1Sl7^k0fyl~!gWd=_3]+v/Ply4{:rRc8vR;vw[Z7vC,xCd-I}5Lq]se\
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 98 b5 61 16 92 31 c6 ac 17 66 a9 12 71 ce 55 aa f9 59 3d d3 4b c6 4a 33 cb 3d 90 ca 62 a7 db ad 77 c5 98 4a 18 fc ff ec bd 67 90 1d c7 96 e7 f7 cb ac ba ae bd 01 ba e1 3d 48 90 20 e8 1e bd 7b 6f 9e 9b 7d ef cd bc 31 3b 1b 9a d5 68 a5 51 c4 28 62 f4 4d da 0f 0a 7d 9d 2f 8a 18 45 28 56 b1 df 56 8a 50 28 56 d2 ac a4 35 33 da dd 31 cf 1b 7a 07 92 20 48 10 86 00 08 8f 46 1b b4 bd a6 aa f2 e8 43 56 dd ae ae 2e 77 2f 40 3e f2 0d 33 a2 fb de 5b 79 f2 e4 c9 cc 93 27 ff 79 2a 0d 82 68 91 de f7 42 6a 15 1e 63 17 0f a1 62 c6 d5 33 32 b4 71 03 9c 0c 9f 05 4d 12 6c 47 b4 5f d2 7c 31 68 a2 90 6c f7 a8 bd f3 74 e3 4b 9a 2f 69 be a4 f9 74 68 a2 67 f1 cf 78 9a 2f 69 be a4 f9 22 d1 f4 eb 7d 06 7b 0a 87 d2 a2 eb 8d 4a d6 be b4 3c 3c f6 85 a7 49 bb c3 3c 2b 7c 1a a7 6f 7c e6 Data Ascii: a1fqUY=KJ3=bwJg=H {o}1;hQ(bM}/E(VVP(V531z HFCV.w/@>3[y'y*hBjcb32qMlG_\|1hltK/ithgx/i"}{J<<I<+\|o\|
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: c4 84 34 a1 57 3e 9a dc 24 1c 61 59 e5 4a 2f e3 66 da 8d 93 1a 85 f4 de 8d 6d 5a 63 40 69 ad 9d 52 be d8 cf 25 08 be 13 9a 5f f5 45 2a 69 69 3e 55 1a 57 57 74 1c 84 f6 12 22 a3 b0 3e 77 8d 66 ce b2 0e ac 13 c1 2a aa f5 dc 0a a6 3b db 55 c0 ed d9 19 66 ae 5d c5 98 80 93 1f 7c c0 c4 d8 28 c3 8d ba a5 95 75 90 4c cc d8 1a 63 f0 7d 9f 6b d7 ae b2 b6 b6 c2 e8 c8 04 3b 76 ec 06 d6 67 ea dd 59 6b 77 5a 6f 58 5a 5e e2 cd 77 4f b0 e7 d0 7d ec 9a 9e c0 75 1c 1c ed 10 84 46 54 69 07 50 04 c6 a7 ae ec 1a e7 ba e9 d0 d2 95 70 cd b3 06 e5 60 8c cf e5 6b d7 d9 31 39 46 a3 d1 a0 25 0e 4a 3c 8c 28 9c d8 92 90 5e 00 43 da f7 3c 9a b8 67 23 fe 19 d5 51 da f3 b2 20 2b e2 91 7c 9e e6 c5 48 f3 d2 25 d7 bd 27 41 4d a6 17 20 25 ae 08 f8 a7 c5 e5 79 52 b3 ca dd d5 eb 1e 41 74 51 Data Ascii: 4W>$aYJ/fmZc@iR%_Eii>UWWt">wf;Uf]\|(uLc}k;vgYkwZoXZ^wO}uFTiPp`k19F%J<(^C<g#Q +\|H%'AM %yRAtQ
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: a3 b2 27 4a 46 3c 2c c8 0e 30 81 c2 07 fc 20 08 6f 2f 0c 68 9b 80 c0 78 38 4a e1 61 a8 04 3e 1d 2a 54 7c 0f a3 1c c4 78 28 04 43 9d 20 58 43 49 85 a0 13 a0 14 18 e5 e3 1a 27 1c 10 b3 bd 85 45 75 95 f6 2c cf 1b d4 0b ff 3c 9e 65 d3 7d 9a cf f2 8c 7e f2 7b 3f 75 50 c6 bb 59 94 2e 2f be 17 50 51 04 20 7b c9 bf 6c 3e 45 74 bd c8 9e f7 56 20 17 30 16 3c cb 02 1d 77 b3 1c 49 ef e6 a7 dd 9f b2 7e 2b 8b 54 d0 d8 b3 8b 95 18 8c 09 f0 71 a8 57 5c ee 3b 72 3f 9d 76 87 40 81 a3 04 8c e0 1b df 9e 63 1f f1 ca b0 c4 65 ed 46 af 65 8d 42 99 3a ce f3 c4 47 3c b2 da 22 5b 5e 3b 9e f8 68 b4 d7 a4 a9 aa b8 d8 3a 53 be 3d 5e cd 00 81 b4 31 c6 c5 63 05 27 a8 b0 86 42 7b 41 b8 39 5d f0 8d 41 8b 6f 9d 31 10 6e 70 5f f7 a6 e5 c9 9f fc 9e 17 9f d6 f6 c9 05 16 a2 c0 17 20 b0 c7 e9 Data Ascii: 'JF<,0 o/hx8Ja>*T\|x(C XCI'Eu,<e}~{?uPY./PQ {l>EtV 0<wI~+TqW\;r?v@ceFeB:G<"[^;h:S=^1c'B{A9]Ao1np_
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: a3 d0 5a 85 86 2e 92 c1 1a 3e 11 83 31 12 5e 7e 62 af 76 45 c2 53 2e c5 84 87 da 13 82 19 fb e9 89 5d 1f a5 b1 97 1c a0 34 46 c2 03 ef 8d 87 c1 45 43 78 a6 b5 c1 1e 3d 65 50 26 fc 2e 9d 10 b0 da 3f 4f ac 61 d4 f8 28 ed 60 54 78 12 a9 48 08 20 15 41 08 66 b4 56 b8 ca 82 63 11 10 5c 84 00 b0 57 ba 06 21 0c 53 06 44 69 0b 63 15 a0 83 50 62 05 c6 d0 3d ea 4a 85 c0 5a 6b 0b 2c c3 d3 45 ed 80 a0 30 98 70 20 d7 28 63 db 55 4c 80 28 8d d1 6e e8 d5 37 d8 8b 0b 00 a5 40 3b f6 b9 18 94 51 18 1c 94 76 70 c2 49 84 c6 c1 03 5c d1 38 ca de a7 65 f0 42 70 a9 62 65 02 3b 11 31 21 3c c4 f2 22 00 63 10 b1 06 df 02 2b ab 17 be 58 fb 1f 98 00 3b 7d 09 07 02 63 6c 3d 08 f8 c6 40 10 e0 47 a0 44 81 52 f6 f6 2e 23 0a 2f d4 12 17 0b ac 94 c2 1e 8e 25 b6 4e b5 56 68 a5 51 38 04 4a Data Ascii: Z.>1^~bvES.]4FECx=eP&.?Oa(`TxH AfVc\W!SDicPb=JZk,E0p (cUL(n7@;QvpI\8eBpbe;1!<"c+X;}cl=@GDR.#/%NVhQ8J
2024-04-18 19:30:39 UTC	1888	IN	Data Raw: fe f0 3d 0e 1d dc ca ec cc 65 8e 3c f6 4d b6 ed 1e 45 3a cb cc 5c 3d cd f8 9e c3 3c f2 d0 fd 68 6f 8e bf fc f1 ab d4 9d ed 38 03 0d a6 b6 ed e2 f2 95 eb f8 7e 93 d5 76 93 ef 7c eb b7 19 08 ae f3 7f fe e8 2c 8d d6 3c fb 1f 78 8c e7 1e 38 cc c9 8f 4e b3 bc b2 4c c7 4c 53 71 35 5e c7 63 ef ae 7d 34 db 1e ab 9d 36 15 5c b6 6e 1b c2 f7 7d 7c aa 9c fb e0 55 0e 1d b8 9f df f8 ca 61 ce 9f 3f c7 99 53 1f e1 54 c6 d8 32 d2 a0 d1 18 65 f1 d2 25 3a 5e 0b 57 aa 6c dd bd 15 67 c6 61 e6 e6 1c 0d b7 c2 e3 5f 79 94 fd 07 f7 f2 d2 4b af f0 e1 95 cb 2c 5e 7c 9f af 7d ef 77 99 70 1c 96 d7 02 46 ea 2e 3f bf 7a 8d 89 5d db 38 77 e9 3a bb 1f 38 c0 bb 6f 9d e4 99 e7 bf ca a1 3d db 69 2e ad 52 ab 6b 3e 3a 7d 85 2d 13 e3 9c 38 73 8e 7b 0e ec e6 ca db 6f f0 d8 b3 cf f1 c0 b6 21 de Data Ascii: =e<ME:\=<ho8~v\|,<x8NLLSq5^c}46\n}\|Ua?ST2e%:^Wlga_yK,^\|}wpF.?z]8w:8o=i.Rk>:}-8s{o!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49960	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1069	OUT	GET /wp-content/uploads/2022/02/Questor_branco-1024x255.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
2024-04-18 19:30:39 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:39 GMT Content-Type: image/png Content-Length: 62241 Connection: close Last-Modified: Mon, 18 Dec 2023 16:18:01 GMT ETag: "658070b9-f321" Accept-Ranges: bytes
2024-04-18 19:30:39 UTC	3860	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 00 ff 08 06 00 00 00 6f 96 a4 5c 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 7b d0 76 59 55 1f f8 5b a7 be ea e9 ea ea ea ea a2 18 aa ab a7 ab d3 c5 f4 74 18 86 e9 a1 10 09 2a 43 88 02 12 c3 30 48 68 c0 0e 12 23 5e 02 46 45 05 09 51 43 51 ea 10 24 0c 1a ef 62 8c 37 40 25 c4 a8 20 2a 17 15 05 85 41 50 82 88 97 74 94 30 3d 54 87 21 5d a4 87 38 3d 64 af f9 e3 79 ce fb ed 77 3d 6b ad bd f6 3e fb 3c 97 f7 db bf aa b7 9e 73 f6 5e 7b ad b5 d7 5e 97 73 7f 81 3e 98 b6 7f b2 4d f6 4b 1a 6d ac b6 7f 4c 28 e9 37 09 3a b9 af d1 1e 2b 3c fd 26 e3 0f 38 bd b9 7a 6b aa cd eb 98 fd d5 8a b1 7c db d2 b1 14 b3 87 9e 5b 0e cb c7 22 f1 77 cc f3 d2 50 93 5f Data Ascii: PNGIHDRo\pHYs+ IDATx{vYU[tC0Hh#^FEQCQ$b7@% APt0=T!]8=dyw=k><s^{^s>MKmL(7:+<&8zk\|["wP_
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 16 1e 3d 7c 76 e9 7a 58 fc f7 b1 1e 56 de a9 b5 69 94 4e ce 2f 9a 8f 3c 1e 4b da 2c 3d f6 11 1f 2d b6 57 db cc 5b c3 05 4c b8 7c 45 a8 95 c6 eb 9f fb 22 72 5a e5 2f 46 4a e9 46 00 5f 44 44 77 00 b8 0d c0 2d 2c ee b8 5b fb b2 dd a2 2f f5 47 f8 58 db 41 79 9f 06 f0 7e 22 7a 33 33 bf 8d 88 3e 4c 44 9f 36 07 1c 0f 7a ac 7f 0f 3f ef 89 1e 31 b3 2f 1e c7 82 b5 fd 20 ca ff 58 ec 72 2c eb 7f 51 7c e8 58 62 e6 58 f2 50 94 e6 e4 eb 7f a5 9c 43 c7 4c c4 a6 c7 16 77 4b 30 ea ff 61 79 1c 0b 46 fd 3f 8f 63 59 ff 8b e2 43 c7 12 33 5d 6d a6 5d 35 88 f4 d5 d0 44 c6 47 f9 48 ba e8 d5 14 8b 46 bd 6a c2 cc 53 4a e9 1a 66 fe 2a 66 7e 6b 4a e9 3f 3b 77 d2 57 bb 4b bf 04 11 9d 0a ba ff 61 4a e9 95 cc fc 28 66 be ca b0 57 f4 4a 54 69 1d 3c 1a af 7f a9 8f 2e d5 43 bb fa 57 a3 4b Data Ascii: =\|vzXViN/<K,=-W[L\|E"rZ/FJF_DDw-,[/GXAy~"z33>LD6z?1/ Xr,Q\|XbXPCLwK0ayF?cYC3]m]5DGHFjSJf*f~kJ?;wWKaJ(fWJTi<.CWK
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: e4 dd e1 fc ae f3 dc 5f ba 13 2d 79 69 3c 24 7f 6f 5c de 3f b7 6b 3c 64 9b 76 42 2b fb 35 7e de f8 9a f6 bc 4f ca d7 e6 ae b5 4b d4 f2 90 f2 bd 35 2e f0 f8 10 80 2f 20 a2 7b 50 9f 8c ba fa 6f 25 d6 d2 29 ca e3 d0 f3 3f 04 4a 73 ae b1 49 8d af f5 42 e4 00 7f 5f 6b da 22 eb d4 7d ee 98 ec af a1 87 7f 1f ac fe 07 78 1e c2 be 3d 72 42 0d ed be f2 c7 5a e3 0f 59 7f 46 fd 1f f5 df c3 a8 ff eb e8 b2 e6 98 63 c2 31 d9 5f 43 c8 bf 8f f2 56 38 33 5f cf cc 3f 0f e0 71 ad 3c bc 13 66 8f 66 9f b2 a2 fa 78 7a 7a af 0b 44 65 e5 17 06 3c 39 4b 6c 15 19 5f a2 09 ea f0 11 22 fa eb db 8b 00 03 03 fb 44 cf 83 e2 b5 70 68 f9 a7 88 8b b2 ae 87 d6 71 9f 38 f4 5c 0f 2d ff 14 31 6c 36 70 ca 38 85 1c 7c 68 f9 a7 88 8b b2 ae 3b 34 f2 91 89 a3 00 33 bf 11 e2 e4 3f 7f 6f 3d ff 95 ef Data Ascii: _-yi<$o\?k<dvB+5~OK5./ {Po%)?JsIB_k"}x=rBZYFc1_CV83_?q<ffxzzDe<9Kl_"Dphq8\-1l6p8\|h;43?o=
2024-04-18 19:30:39 UTC	530	IN	Data Raw: b1 30 d6 fb 62 61 e4 fb 81 1c c3 1f 06 72 8c fa 7f 20 b4 5c 00 70 c7 30 f3 8b bc 13 b8 8c 0e 80 7e 12 6e 9d 98 6b db 1a bd 77 92 c7 c6 bb e5 19 7e 9a 99 bf 72 9a a6 bf 14 ed b5 8f 8f 58 34 1e 6d 6f 9a 88 3e 3d e8 ce 68 88 28 11 d1 8b 89 e8 9f 02 bb 6b 91 ef cf 7e 22 fb b5 0b 43 96 bf 58 be 56 e3 2f 1a 7f 22 7a 46 4a e9 92 3d e5 bd 5d 55 ec ed 5b bd f8 2c 95 15 45 2f 5f de 57 bc 9c 1a 9f 12 af 7d f8 56 44 46 6f 3e 11 19 4b 69 7a ca db 27 9f 43 cb a8 95 b7 cf 1c 31 ea ff c5 a7 d9 77 fc 2f 95 33 ea ff 32 9a 51 ff cb 7d a3 fe d7 d3 f4 94 b7 4f 3e 6d 48 29 dd c6 cc ff 49 3e 8a 6d 3d 96 6d 3d c2 dd f2 3f dd bd f1 1e 9d a0 7d 2d 33 ef d3 88 c7 fe 68 4a eb c1 0e 00 80 99 5f ee ad 71 69 fd b5 df 9a 6f 38 58 7d 15 f8 c6 8e b6 2c e1 d8 7d 21 c7 29 e9 7a 11 71 91 ed Data Ascii: 0bar \p0~nkw~rX4mo>=h(k~"CXV/"zFJ=]U[,E/_W}VDFo>Kiz'C1w/32Q}O>mH)I>m=m=?}-3hJ_qio8X},}!)zq
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: cc f6 ff 80 88 3e b8 dd fe 93 69 9a ee 09 ea 32 ea ff f1 d7 9f 51 ff 63 63 ba f0 22 9c 4f d8 93 36 4a c1 0e 2d 33 df 06 e0 03 00 ae 0e f2 38 26 fc 38 80 e7 11 d1 fd 41 7a cd 56 35 f6 8b f2 ec 21 7f 6e cf fb 6b f5 97 63 a1 f0 52 c7 a7 94 26 22 7a 29 b2 8b 00 27 86 bf 4b 44 3f 2d da 5a ec 5f db 66 d9 5c da bf 24 5f c3 52 ff dd c7 fc 8f 59 be 46 9f c7 01 50 1f 6b 2d f3 2f c5 74 ab fc 92 2e 6b d8 bf 06 2d f1 63 e6 a8 80 4e 1e ef d2 f8 8b e8 ff e1 f1 bc f9 98 ea ed cc fc 59 44 74 23 80 c7 6d bb ae 03 70 7d 50 9e 86 8f 6d 65 82 99 7f 83 88 ee 06 f0 7f 03 f8 65 00 89 88 fe a4 56 d7 0a 8c fa 1f 8f ad b5 f2 6f 14 96 2c a0 1c d3 b5 3c af f8 fa cf cc 37 6e 63 fe 0b 89 e8 2a 00 4f df f6 df 54 c1 bf 06 9f 04 70 1f 80 8f 00 78 3f 33 ff 16 11 fd 39 80 bb b6 c7 f3 a3 fe Data Ascii: >i2Qcc"O6J-38&8AzV5!nkcR&"z)'KD?-Z_f\$_RYFPk-/t.k-cNYDt#mp}PmeeVo,<7nc*OTpx?39
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 8b 67 65 bc 5c 0b e0 9b 89 e8 5d 29 a5 1b b0 e7 fa 9f 5f 21 f0 1e 3f 92 fd 89 99 1f 06 20 bf 02 7e b4 60 e6 af 9c a6 e9 93 f0 1f af 9a b7 b5 13 39 d9 af 15 76 ed 31 9b 9c 3e 19 6d aa 7d 1d fd 34 48 de 28 e8 e7 9d 98 79 fa 6b fc d5 13 7b 47 ff 9d 22 c6 cc af d4 26 75 08 04 0e 20 be 04 bb 89 54 5b cf b9 0f 62 bb b4 3e 10 fd da da 36 eb bf 04 d9 89 0a e0 fb 97 e5 d3 91 fc a2 1d e4 c8 6d 69 5f 4d 76 6b 7c 2e 42 e9 6e 68 01 a5 f8 d5 da bc f8 f3 d6 42 c5 9a fe 13 c1 5a 27 16 fb 42 8b ec cc 67 b4 18 d7 62 48 3b f0 83 d8 2e f9 bf f4 8f 7f 48 44 af a8 56 fe ca c6 97 03 78 17 33 3f 15 2b d4 ff d6 5c b2 24 07 2d cc 5f dd 78 1c 0a 9d f3 cf 5a f5 5f 1e 63 94 8e df c1 cc b7 03 78 0b 80 17 c4 67 32 60 e0 36 00 ff 8e 99 bf 8e 99 2f 65 ed de f1 b4 b6 46 5e ae 5f bb fe ab Data Ascii: ge\])_!? ~`9v1>m}4H(yk{G"&u T[b>6mi_Mvk\|.BnhBZ'BgbH;.HDVx3?+\$-_xZ_cxg2`6/eF^_
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 06 f0 5c ba fc 1f 87 7a d7 ff 73 32 b5 83 45 cf a7 a2 f3 0f 1e 5b 99 e3 3d 1a cd 57 2c ff 69 d1 31 4a b7 42 fd df 69 57 e2 b9 6b fd df c6 f2 cb 88 e8 a1 51 9d 4b ed 4b 79 f4 88 bf 48 3e 6e 5d ff a5 35 a9 85 d6 d0 e3 46 de 7c 18 f0 6f 13 d1 67 b2 ae 83 d5 7f 39 a6 d6 fe a3 fe 77 ad ff 2e 9f 6c fb cb b0 f9 4f 33 f3 8d 6e b7 fe c3 c9 27 97 44 a7 9b 88 88 e8 31 39 57 ef 6a 9c 05 ed 0a c8 52 1e 02 ef de fe 5a 46 90 57 cc 00 ff c0 4b 6e 47 0f d2 34 68 fc 66 9e f2 4a af b6 2f 83 dd d2 c9 3a f0 28 f1 cb e7 a1 25 9f 52 31 8b da 40 e3 77 ee 0e 08 11 7d 0c c0 3d cc fc a0 a5 fe 22 c7 b5 f2 50 70 43 b6 6d f9 8e b7 56 35 eb a9 c9 70 61 5d 6d ad 99 bb 42 ef f9 8b e7 c3 de d8 7c db fa 2d c9 f7 62 b7 86 bf 8b 25 be a3 5d d5 dd 22 12 9f 11 7b 68 f1 64 ad 4d 17 fd 65 d1 f7 Data Ascii: \zs2E[=W,i1JBiWkQKKyH>n]5F\|og9w.lO3n'D19WjRZFWKnG4hfJ/:(%R1@w}="PpCmV5pa]mB\|-b%]"{hdMe
2024-04-18 19:30:39 UTC	1692	IN	Data Raw: 0e f8 1e e7 99 0e 35 fd 5a 2e b6 c6 e5 fe 79 e8 79 5e 89 f0 ea e7 dc ee 6d 5b 35 bf 54 ff 4f 11 d3 34 dd 37 4d d3 4b 00 fc 35 00 1f 01 ce e6 f2 61 00 df be 3d 71 b8 48 e8 52 ff 2d bf b1 7c 66 de 8f 6c 7b 35 ab 03 0e 7d fc 63 82 99 af 25 a2 27 97 8e 7b f7 55 ff 99 f9 63 00 9e 40 44 7f d2 71 9a 07 03 6d fe 83 c7 57 33 f3 4b 98 f9 2f f3 1b 48 fb ae ff 62 fb d9 cc 7c 53 c3 94 ba a1 74 cc d7 5a ff e7 5f 6d fb 94 8f 0d a6 69 4a cc fc 5c 66 be 4f cb 7d 80 5d 33 ad 73 0d 6d bf d0 f6 b7 9b f5 17 db f9 e3 78 72 1f c0 f9 c7 5e e4 23 30 f3 be 3c e0 b3 c6 68 e3 ad df dc 59 2c 5e ce dc ac 7d 6d fe 35 34 da be fc ad e5 21 75 8d ac 4b 2d 4f 0b 4b 6d a6 bd 7f 64 8d 49 46 ff 8e 5c cd 1f 22 fe a4 8d d5 b6 4b fe 98 f7 cd be 5d 7a ea 40 99 6f 74 5f b6 99 71 a8 6d 5b 7d b3 ce Data Ascii: 5Z.yy^m[5TO47MK5a=qHR-\|fl{5}c%'{Uc@DqmW3K/Hb\|StZ_miJ\fO}]3smxr^#0<hY,^}m54!uK-OKmdIF\"K]z@ot_qm[}
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: d4 5d ce cd 3a 80 90 db 92 b7 dc ce e5 44 78 68 fc 24 0f 4d 8e 37 26 ef b3 0e 86 3c 3b 48 5d ad 22 a8 e9 a5 f1 93 b2 6b 6c b4 33 9e 88 fe a7 bc a1 e2 0a 98 09 eb 2a ed 42 94 6c e1 b5 d5 da d9 44 a7 0b 68 11 d4 f8 9f 36 46 16 79 cd 37 ac 3e ab 30 94 e4 7a be 16 42 6f bf c9 4e 8c b5 3f 2b ce e5 18 28 34 9e 8d 9a e6 be 04 4e 9e 96 fa 94 d6 51 da c4 ca e3 d6 f8 79 8c 55 eb 4a b9 6a d6 c1 d2 dd f2 35 cb bf 4b 6b 28 e7 e7 d9 ec 1c 4d 4b 2e b0 ee 14 ce 08 fa ff a3 99 f9 f1 b0 eb b0 dc 8e f6 69 36 d0 ea d4 a8 ff bb ed 1a 8d a6 6b 2e c3 ad 4b 2d b9 b0 34 66 41 7e f5 7c 44 d2 69 63 35 3e b2 5f e3 25 6d e4 ad bd d5 36 f3 f8 62 00 97 14 9a 30 3a d4 ff 4f 10 d1 d7 28 ed 5e bc e6 fb a5 b8 91 3e 2c e9 3c 1e 52 46 d7 fa 4f 44 77 01 78 89 6c cf b1 8f f3 9f ad 2e 2f c2 fa Data Ascii: ]:Dxh$M7&<;H]"kl3*BlDh6Fy7>0zBoN?+(4NQyUJj5Kk(MK.i6k.K-4fA~\|Dic5>_%m6b0:O(^>,<RFODwxl./
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 6a 75 96 fc 87 88 3e 09 e0 0d 00 1e a0 0a 1f d0 07 b0 37 05 86 b2 35 e2 ff a9 00 4e 45 77 03 75 07 80 cb 01 fc 2d 80 6b a9 fb 5b 56 0f 2b 07 da c1 ff c5 b6 a3 f0 df f3 09 49 d1 0d b8 40 ec f1 6c e0 c9 5c b6 95 e5 91 f6 2d f1 35 84 ff 44 f4 c8 4a 9d 2d 8a 62 77 03 fe 7f bd cf b6 fc 0f 4a f9 a1 8e ff 4b e3 46 44 f7 30 f3 55 cc fc 9b 22 7f 81 d1 18 fc b7 36 12 94 7b 9a 17 41 9f 9b 96 2e a3 fd 73 85 f8 6f f2 54 64 b1 c6 5c f3 97 31 fe 5b 96 45 fc cb 2a 03 3a 1c 3a 19 c0 a3 50 a1 c8 7d 46 6b 7d 22 fa 78 21 9b 35 27 d4 b1 8e 4c d4 ad bc 94 d2 3d cc 5c 3e d1 08 29 31 94 6b 0b 36 ab 8e 46 41 e7 3b 32 e7 7c 2c 16 07 ae e6 30 b2 4e 82 6f 3c 2f 6d 05 1c cd 21 3d a7 b4 1c b2 85 ac fa 96 43 d7 16 22 1a 8f 64 94 d7 e4 b2 74 4a fd 31 9a 27 69 0d 2d 1f 69 b9 69 1b db 5e Data Ascii: ju>75NEwu-k[V+I@l\-5DJ-bwJKFD0U"6{A.soTd\1[E*::P}Fk}"x!5'L=\>)1k6FA;2\|,0No</m!=C"dtJ1'i-ii^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49961	31.13.65.7	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:38 UTC	1483	OUT	GET /signals/config/413255480274437?v=2.9.154&r=stable&domain=www.questor.com.br&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C124%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C117%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:39 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-18 19:30:39 UTC	1510	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 Data Ascii: Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 Data Ascii: orts})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 Data Ascii: nction"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"sy
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 Data Ascii: )?b:a}function i(a,b){if(typeof b!=="function"&&b!==null)throw new TypeError("Super expression must either be null or a function, not "+typeof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b Data Ascii: &&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"symbol":typeof a};f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[
2024-04-18 19:30:39 UTC	1500	IN	Data Raw: 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 Data Ascii: ed("fbevents.plugins.prohibitedsources",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49963	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	853	OUT	GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:39 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=7, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49965	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	968	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:39 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:39 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 19:30:39 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49964	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	1050	OUT	GET /wp-content/uploads/2021/10/zen1.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
2024-04-18 19:30:39 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:39 GMT Content-Type: image/jpeg Content-Length: 338430 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:42 GMT ETag: "658070a6-529fe" Accept-Ranges: bytes
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: ff d8 ff e1 1a 32 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 32 3a 32 38 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 2ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:22:28 X"
2024-04-18 19:30:39 UTC	2894	IN	Data Raw: 5e 86 5f 5b 6d a4 ce e6 bb c6 25 b0 ba da b2 29 ab 65 56 54 0e 13 7d b6 33 92 18 7d af 3f d8 5c af 44 a3 2e 9e b3 50 7e 35 8d 60 24 8b 76 18 e2 36 ee 5d 5e c2 cd af 73 48 16 4c 82 38 33 c7 f6 93 80 8d f0 91 f3 0d 10 49 ab 07 62 d9 cb e9 f8 38 dd 3f 2a 9c 5a 99 55 45 9b 80 6f d1 9f cd 72 c8 ea 95 d5 87 f5 5b 20 b2 a1 53 ac ad 9b c8 33 b9 c4 fd 32 ac 65 65 5a ce 99 7e 2b 03 9e e6 80 2a 80 49 35 93 b6 34 ff 00 43 f4 3f a8 aa 7d 66 71 fd 89 56 39 6d 84 5a e0 1d b1 85 e4 06 8e ed 68 55 cc 24 26 23 fd 61 f8 33 f1 83 0b fe a9 73 9d b1 d8 3d 0e 38 6e 47 b4 fc d1 33 c0 ba af ac 34 78 16 d8 3e 40 28 8a df 5e 27 45 ab 63 dc 05 bb 8c b0 82 04 fe 7e 9e d4 ef 0f 39 9d 6c 7a 6e 87 56 60 ed 3a c7 ee a0 46 a7 c0 93 ff 00 8e aa f4 f3 00 7f e3 6a c6 25 dd 37 08 9e d5 c0 3e Data Ascii: ^_[m%)eVT}3}?\D.P~5`$v6]^sHL83Ib8?ZUEor[ S32eeZ~+I54C?}fqV9mZhU$&#a3s=8nG34x>@(^'Ec~9lznV`:Fj%7>
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 Data Ascii: builtinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub
2024-04-18 19:30:39 UTC	1496	IN	Data Raw: 00 03 e6 ba 7e be db 99 d2 b2 f2 1c d8 77 d9 c3 1d ac fb 9b d9 70 f9 79 3b 33 69 73 5c 5a 5d 50 12 09 06 7e 4b aa be f7 e4 7d 4b 7d a3 52 dc 77 07 13 e4 79 51 65 84 af 19 d3 86 c4 6a b5 fb 59 21 21 eb 1d 6a dc af aa 62 eb 72 72 aa 82 eb 2d c5 70 65 63 bb 89 d1 5e 7d 19 98 fd 13 3d d9 35 3a bb 7d 30 2c 98 fa 4d ed a2 a1 f5 57 23 75 b9 17 0d 3d 0c 57 bb 73 4f 7e ca ce 25 d6 e4 60 f5 26 5b 6b ad 68 c2 0f 76 e2 4f bc ee dc 75 fc f4 b2 c3 d7 2a ae 11 c1 7d d3 8e 5e 81 dc f1 2a ac cb 19 8b f5 76 aa bf 9c b6 cd e4 7c 53 75 3b da 30 fe b0 39 82 1b eb b1 9f 38 6e e5 06 16 d7 93 f5 64 16 fb 1c d1 af 9c 29 75 cb 0d 5d 17 3f da 0b 9f d4 1c 09 f1 12 13 04 47 14 74 f9 a5 ff 00 a9 bf f4 14 92 78 65 e0 3f f5 1b 5f a4 87 3b ea db 48 3b 4b b2 5d 0b 12 e2 1b 99 66 e3 13 6b Data Ascii: ~wpy;3is\Z]P~K}K}RwyQejY!!jbrr-pec^}=5:}0,MW#u=WsO~%`&[khvOu}^v\|Su;098nd)u]?Gtxe?_;H;K]fk
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 79 76 fd 0f e7 6e 6e d4 df b4 f1 0b 85 d5 da 1e c0 4d 8e 73 75 fc d0 d6 8f f3 b7 ad be b3 9b 45 54 87 6f 0f 90 4b dc d7 0d 41 d3 68 fd ed cb 33 6f 4e 1d 18 be d6 34 3f 29 f6 0a 88 68 dc 4b 46 f6 c3 da 37 23 96 88 8d 83 a5 81 f6 2c c5 62 52 a2 3d 54 4f 9d bc d7 53 b4 3b a3 e5 d8 5b 03 22 fa e3 e3 2a 8b 18 58 c7 58 21 b2 09 d5 69 75 4c 4c b7 74 4a 6b 65 0f b1 e6 e6 b9 ec 6b 64 81 e2 90 fa bd 99 9b 85 8e f9 d8 1a d7 1b 6b 7c b5 c2 3e 88 50 01 ea 91 3a 7a 8f fd cb 66 fd 20 6f e9 0e 57 46 ad b9 5d 5e 86 5f 5b 6d a4 ce e6 bb c6 25 b0 ba da b2 29 ab 65 56 54 0e 13 7d b6 33 92 18 7d af 3f d8 5c af 44 a3 2e 9e b3 50 7e 35 8d 60 24 8b 76 18 e2 36 ee 5d 5e c2 cd af 73 48 16 4c 82 38 33 c7 f6 93 80 8d f0 91 f3 0d 10 49 ab 07 62 d9 cb e9 f8 38 dd 3f 2a 9c 5a 99 55 45 Data Ascii: yvnnMsuEToKAh3oN4?)hKF7#,bR=TOS;["XX!iuLLtJkekdk\|>P:zf oWF]^_[m%)eVT}3}?\D.P~5`$v6]^sHL83Ib8?ZUE
2024-04-18 19:30:39 UTC	98	IN	Data Raw: 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a Data Ascii: reAgent="Adobe Photoshop 22.5 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 36 66 63 34 65 63 37 31 2d 65 30 39 62 2d 64 66 34 63 2d 39 66 39 31 2d 30 38 31 66 30 32 64 34 63 39 30 34 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 31 30 2d 32 37 54 31 35 3a 32 32 3a 32 38 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 31 41 36 43 34 41 41 30 32 30 30 35 39 36 32 44 39 38 41 44 35 43 33 42 44 41 41 Data Ascii: 6fc4ec71-e09b-df4c-9f91-081f02d4c904" stEvt:when="2021-10-27T15:22:28-03:00" stEvt:softwareAgent="Adobe Photoshop 22.5 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>9E1A6C4AA02005962D98AD5C3BDAA
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 0f b3 0f cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 Data Ascii: &Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!
2024-04-18 19:30:39 UTC	196	IN	Data Raw: fd 82 be 8a f0 69 48 72 ab 17 79 20 a6 2f ff 00 96 af 0b 52 a7 4f 28 ea d0 13 b1 c0 32 a9 c5 ae e4 36 fe 49 8f 5a ba 89 db d5 b5 b4 23 1f ca c6 35 65 62 bc 4b 47 a8 a5 8b d5 a1 2c f5 68 59 5a a9 b4 c5 7f 3d 89 b8 fa 94 b9 d0 35 3b 5c d6 88 8d 91 57 84 41 4d 84 34 4e 07 cf d7 a5 dd 5c d6 9d d9 5d 30 66 e2 3e 3f 63 2f ec 91 b5 5c 1b a4 c4 4a d6 45 d9 54 c4 d2 ad 23 f7 08 78 ce 1c ba ec be 8e d9 b1 b2 6f b4 40 db 0c a5 b5 4b db 47 3e 32 f4 6e a1 6c 30 65 33 c7 3e 08 cd 03 a2 d9 c8 07 ab 47 92 24 54 f3 7e 35 eb 1d cb 47 d2 bb 17 e8 3d 0d a4 62 05 49 68 3d 2d d3 de c6 ca f8 d9 c9 a6 ce Data Ascii: iHry /RO(26IZ#5ebKG,hYZ=5;\WAM4N\]0f>?c/\JET#xo@KG>2nl0e3>G$T~5G=bIh=-
2024-04-18 19:30:39 UTC	4096	IN	Data Raw: 0c f9 c5 aa 8b bb ec ad be 54 b4 f2 a7 b2 a1 ae f8 7d ed 3d b1 a8 b2 7e 76 c7 cf 6d 93 1e da c6 eb 1a e1 c9 be 5d 5a 63 ae 02 3e 7f 96 e1 66 82 8b 02 b4 13 ce eb e7 fc 24 ec 68 a2 af 81 f2 3b 1f e7 8e 9e 80 1a b8 bb bd 24 a3 09 c8 3e 44 68 db 9c 80 ad 2c 0e 7b ba 87 9e 06 93 08 53 5a b2 b1 b0 3a 48 22 b0 2b cf 7a 64 b4 03 3f 72 b6 71 01 91 0b ad 45 48 78 80 9d bc 3e 70 b7 6f 0a 80 b2 00 19 7d 0d ca c4 b4 cd 09 93 58 43 57 2c c4 30 e6 56 de 91 ae 48 30 f8 f2 05 92 41 0d a7 35 13 ba a2 37 49 4a 9d a5 42 49 8e e4 4c 2c cc 6f 26 b8 8b f6 12 bb 53 d1 eb 43 a8 3e 40 5a 31 85 9e 87 a5 6b 6e f6 af 2b 72 ec af 35 c8 61 7e cb c3 79 70 99 bd 53 1e a6 6a bd 3f 5f 95 0c 66 fd b2 62 89 2c 63 3b ba 7b f7 bd 89 3c b6 b6 c3 21 74 b4 36 d1 cd 8d e4 16 ee 0a a1 a3 08 64 8c Data Ascii: T}=~vm]Zc>f$h;$>Dh,{SZ:H"+zd?rqEHx>po}XCW,0VH0A57IJBIL,o&SC>@Z1kn+r5a~ypSj?_fb,c;{<!t6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49968	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	615	OUT	GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:39 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49967	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	1276	OUT	GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjI0NDcxfQ==; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6
2024-04-18 19:30:40 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 10777 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-2a19" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	3832	IN	Data Raw: 2f 2a 21 20 64 69 61 6c 6f 67 73 2d 6d 61 6e 61 67 65 72 20 76 34 2e 39 2e 33 20 7c 20 28 63 29 20 4b 6f 62 69 20 5a 61 6c 74 7a 62 65 72 67 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 6f 62 69 7a 7a 2f 64 69 61 6c 6f 67 73 2d 6d 61 6e 61 67 65 72 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 74 78 74 20 0a 20 32 30 32 33 2d 31 32 2d 32 38 20 31 37 3a 33 35 20 2a 2f 0a 20 21 66 75 6e 63 74 69 6f 6e 28 70 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 79 3d 7b 77 69 64 67 65 74 73 54 79 70 65 73 3a 7b 7d 2c 63 72 65 61 74 65 57 69 64 67 65 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 3d 6e 7c 7c 74 68 69 73 2e 57 69 64 67 65 74 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 6e 2e Data Ascii: /! dialogs-manager v4.9.3 \| (c) Kobi Zaltzberg \| https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt 2023-12-28 17:35 / !function(p,t){"use strict";var y={widgetsTypes:{},createWidgetType:function(t,e,n){n=n\|\|this.Widget;function i(){n.
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 69 66 72 61 6d 65 26 26 63 2e 61 64 64 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 2c 61 2e 69 66 72 61 6d 65 29 2c 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 26 26 28 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 43 6c 61 73 73 26 26 28 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 4f 70 74 69 6f 6e 73 2e 69 63 6f 6e 43 6c 61 73 73 3d 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 43 6c 61 73 73 29 2c 6e 3d 70 28 22 3c 61 3e 22 2c 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 4f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 73 29 2c 69 3d 70 28 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 4f 70 74 69 6f 6e 73 2e 69 63 6f 6e 45 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 61 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 4f 70 74 69 6f 6e 73 2e 69 63 6f 6e 43 6c 61 73 73 29 2c 6e 2e 61 70 70 Data Ascii: iframe&&c.addElement("iframe",a.iframe),a.closeButton&&(a.closeButtonClass&&(a.closeButtonOptions.iconClass=a.closeButtonClass),n=p("<a>",a.closeButtonOptions.attributes),i=p(a.closeButtonOptions.iconElement).addClass(a.closeButtonOptions.iconClass),n.app
2024-04-18 19:30:40 UTC	2849	IN	Data Raw: 65 6e 74 73 28 22 62 75 74 74 6f 6e 73 57 72 61 70 70 65 72 22 29 2e 61 70 70 65 6e 64 28 6f 29 2c 74 2e 66 6f 63 75 73 26 26 28 74 68 69 73 2e 66 6f 63 75 73 65 64 42 75 74 74 6f 6e 3d 6f 29 2c 6e 7d 2c 62 69 6e 64 48 6f 74 4b 65 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 28 22 77 69 6e 64 6f 77 22 29 2e 6f 6e 28 7b 6b 65 79 75 70 3a 74 68 69 73 2e 61 63 74 69 76 65 4b 65 79 55 70 2c 6b 65 79 64 6f 77 6e 3a 74 68 69 73 2e 61 63 74 69 76 65 4b 65 79 44 6f 77 6e 7d 29 7d 2c 62 75 69 6c 64 57 69 64 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 79 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 57 69 64 67 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 Data Ascii: ents("buttonsWrapper").append(o),t.focus&&(this.focusedButton=o),n},bindHotKeys:function(){this.getElements("window").on({keyup:this.activeKeyUp,keydown:this.activeKeyDown})},buildWidget:function(){y.Widget.prototype.buildWidget.apply(this,arguments);var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49969	142.251.15.103	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	1160	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468635861&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqx0nSSN4net9tcsfCE6tPkyIlzmlLS1B1j1gbufSW0B3S5f-E&random=1923464135&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:39 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49970	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:39 UTC	652	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468636566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:39 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:39 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49975	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	853	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:40 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49979	142.250.105.104	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	922	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468635861&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqx0nSSN4net9tcsfCE6tPkyIlzmlLS1B1j1gbufSW0B3S5f-E&random=1923464135&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49972	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1285	OUT	GET /wp-content/plugins/elementor/assets/js/video.d11c91c1b2b642a34601.bundle.min.js HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3171 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:32 GMT ETag: "661e9344-c63" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 31 5d 2c 7b 35 33 36 33 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 56 69 64 65 6f 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e 64 Data Ascii: /! elementor - v3.21.0 - 15-04-2024 /"use strict";(self.webpackChunkelementor=self.webpackChunkelementor\|\|[]).push([[791],{5363:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class Video extends elementorModules.frontend.hand
2024-04-18 19:30:40 UTC	375	IN	Data Raw: 61 64 79 28 28 65 3d 3e 74 68 69 73 2e 70 72 65 70 61 72 65 59 54 56 69 64 65 6f 28 65 29 29 29 29 7d 7d 29 2c 76 6f 69 64 20 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 76 69 64 65 6f 2e 70 61 72 65 6e 74 28 29 5b 30 5d 29 29 3a 76 6f 69 64 20 74 68 69 73 2e 61 70 69 50 72 6f 76 69 64 65 72 2e 6f 6e 41 70 69 52 65 61 64 79 28 28 65 3d 3e 74 68 69 73 2e 70 72 65 70 61 72 65 59 54 56 69 64 65 6f 28 65 29 29 29 7d 6f 6e 45 6c 65 6d 65 6e 74 43 68 61 6e 67 65 28 65 29 7b 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 6c 69 67 68 74 62 6f 78 5f 63 6f 6e 74 65 6e 74 5f 61 6e 69 6d 61 74 69 6f 6e 22 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 Data Ascii: ady((e=>this.prepareYTVideo(e))))}}),void this.intersectionObserver.observe(this.elements.$video.parent()[0])):void this.apiProvider.onApiReady((e=>this.prepareYTVideo(e)))}onElementChange(e){if(0===e.indexOf("lightbox_content_animation"))return void this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49973	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1050	OUT	GET /wp-content/uploads/2021/10/zen2.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: image/jpeg Content-Length: 364492 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:42 GMT ETag: "658070a6-58fcc" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: ff d8 ff e1 1b d9 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 34 3a 32 39 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:24:29 X"
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: af fb 71 15 ed a6 f2 d7 5c c0 e6 53 b8 1a 9b fa 36 cc b0 fe 8c 56 77 31 ce 63 b7 fb 94 10 90 18 ea eb fd f6 69 03 c7 75 6d 31 63 8b da 66 03 da 58 7e 47 d4 67 fd fd 6b 7d 5e c6 a7 ac 75 3b f3 f2 de d6 63 b5 ec b4 d2 e3 ad 9f e0 f1 29 74 ff 00 da 7a 99 4f d0 ff 00 0f ff 00 15 ea 6f ac ec 5c 00 43 db 8c df 51 9c 49 b1 c2 7b 3b d3 7d 8e af 77 f6 56 83 b2 b0 58 4d 4e a8 63 35 80 8f 4f d2 86 96 8d ac f5 ea da c2 cb 6b da e6 3b ed 35 a2 32 10 0f 0c 4c f5 17 c2 3f e7 2b 80 13 ac 84 34 35 c4 7f 06 a6 06 1d 98 d6 b9 96 52 ea eb 16 bd 8c 73 d8 58 2c 82 e2 d8 81 f4 9c df fc 9a 5d 4d 8c fd ac db 4b ce fb 29 69 67 bb 99 06 b7 b7 48 df fc d6 f5 75 b5 f4 d7 b9 a6 ab dc ed d2 e6 d4 cb cb 81 db f4 b6 54 7d 47 b3 fb 28 3d 43 3c be e7 74 c6 35 95 b0 d5 5b fd 47 34 3a c9 71 Data Ascii: q\S6Vw1cium1cfX~Ggk}^u;c)tzOo\CQI{;}wVXMNc5Ok;52L?+45RsX,]MK)igHuT}G(=C<t5[G4:q
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 02 38 42 49 4d 04 02 00 00 00 00 00 06 00 00 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 03 01 01 01 00 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 03 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d Data Ascii: Z5-8BIMp8BIM8BIM8BIM08BIM-8BIM@@8BIM
2024-04-18 19:30:40 UTC	294	IN	Data Raw: 9e d4 7c 1c a6 64 e7 0b 99 fa 56 51 2c ad a0 89 3b bd b7 64 b3 f7 ff 00 d0 d5 ff 00 5d ff 00 48 b5 fa d6 7e 2d b8 95 f4 af 4d 97 39 8d 36 8b 1d 20 b2 c6 6e 7d 4f a7 4f 63 fd de e7 ff 00 61 29 4a a3 63 a2 80 1c 40 1e af 21 85 6d e3 d3 6d 4d 7d ac ac 02 0e b0 34 dc d1 66 df de fa 0b a0 e8 f9 99 95 64 e3 75 4b 7f 57 c1 63 c5 39 75 77 dd 66 ea ab 6b f7 6f 7f a7 b9 db eb da b9 66 67 64 f4 cc 9b ea 16 fd 9e e6 ce af 04 c3 5f ef ae c6 ed fe 76 9b 2b fe 6f 6a d8 c3 a7 a6 fa 18 62 fb 6f 7b dd 97 43 dc e7 7b 71 83 7d 46 b9 ad ad b3 fa 46 7e 7e c6 7e 62 6c 01 b1 e2 cd 33 13 8e 5d 68 5f d8 fa 4b 86 84 7c 92 03 81 e3 01 73 b6 7d 65 c9 ae d7 d7 6d 4c 25 a4 cb eb 32 3f cd 71 ff 00 bf ab 5d 2b eb 0b 33 2f bf 1f 23 6b 2c aa bf 5a b2 cd 37 b0 4f a9 01 c7 f9 ca f6 a9 cc 25 Data Ascii: \|dVQ,;d]H~-M96 n}OOca)Jc@!mmM}4fduKWc9uwfkofgd_v+ojbo{C{q}FF~~~bl3]h_K\|s}emL%2?q]+3/#k,Z7O%
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 93 dc 00 aa b6 8f f3 bd ea 56 7e b9 92 fc b1 40 67 a9 67 a8 3d 37 3d fb 67 dc 77 fa 75 59 f4 ff 00 3f d9 e9 a0 7d 63 b6 97 e6 63 92 d0 07 a5 bc 3c 3b 73 1c 1e e3 f4 76 fd 0d 8e 63 b7 ab f8 c1 89 87 41 fc bd 2d 39 9b 12 ad 4f f2 d5 6b ef 3f a5 73 4e d6 55 53 eb 61 f1 73 c6 cf fa bf 6a 36 25 0d ab 27 29 d7 d9 e8 3a 9b 9b b1 bb 83 49 35 82 36 6b f4 eb 74 6e 75 7f 9e b3 2a 7b 2d cb aa 9d ed 8d c1 f6 07 4c 06 33 f4 93 a0 fd ef 4d 5e c4 65 ce 63 8b 5c ca 2c 7b 77 56 cb 41 24 37 70 71 b1 cd 6b ea 76 ef dc f7 a5 cd 8a e5 b2 d1 af 4f 6f d1 ea ae 52 be f5 84 48 7e 9f 7a d7 f4 7f e7 70 ba 1d 33 1b 36 96 3d 99 37 36 ea 9e 4b aa 21 ce 2e 0d 71 27 d3 b0 3d cf 6b bd bf 42 da fd 3b 3f d2 56 b8 be b9 83 9b 46 75 f6 39 84 e3 6f fd 15 ee 8e 63 f3 b5 ff 00 3b f3 17 65 86 f1 Data Ascii: V~@gg=7=gwuY?}cc<;svcA-9Ok?sNUSasj6%'):I56ktnu*{-L3M^ec\,{wVA$7pqkvOoRH~zp36=76K!.q'=kB;?VFu9oc;e
2024-04-18 19:30:40 UTC	1496	IN	Data Raw: 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 Data Ascii: M="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 22.5 (Windows)" xmp:Create
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:40 UTC	98	IN	Data Raw: ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 Data Ascii: ;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 50 51 9b 51 e6 52 31 52 7c 52 c7 53 13 53 5f 53 aa 53 f6 54 42 54 8f 54 db 55 28 55 75 55 c2 56 0f 56 5c 56 a9 56 f7 57 44 57 92 57 e0 58 2f 58 7d 58 cb 59 1a 59 69 59 b8 5a 07 5a 56 5a a6 5a f5 5b 45 5b 95 5b e5 5c 35 5c 86 5c d6 5d 27 5d 78 5d c9 5e 1a 5e 6c 5e bd 5f 0f 5f 61 5f b3 60 05 60 57 60 aa 60 fc 61 4f 61 a2 61 f5 62 49 62 9c 62 f0 63 43 63 97 63 eb 64 40 64 94 64 e9 65 3d 65 92 65 e7 66 3d 66 92 66 e8 67 3d 67 93 67 e9 68 3f 68 96 68 ec 69 43 69 9a 69 f1 6a 48 6a 9f 6a f7 6b 4f 6b a7 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 Data Ascii: {GHHKHHIIcIIJ7J}JKKSKKL*LrLMMJMMN%NnNOOIOOP'PqPQQPQQR1R\|RSS_SSTBTTU(UuUVV\VVWDWWX/X}XYYiYZZVZZ[E[[\5\\]']x]^^l^__a_``W``aOaabIbbcCccd@dde=eef=ffg=ggh?hhiCiijHjjkOkklWlmm`mnnkn
2024-04-18 19:30:40 UTC	2894	IN	Data Raw: ac d0 15 95 71 89 26 65 87 2c c7 02 d6 02 7c ed e9 28 30 e2 3d fd 35 b7 65 f7 64 ac 0f f6 70 5b 8d c8 2c 43 9e 11 63 0e f2 e1 aa 4b 8c a4 ce 63 a2 64 72 35 bd 6a cd 36 92 63 ba df 32 9a 9b 3c 42 15 7d 8f ab 5a ea 25 68 49 ab 59 7d 98 b3 32 ac 0a 81 58 0a 31 72 16 02 e4 74 65 44 aa 01 1d b5 cd 6c b4 83 73 3d 41 3d 4c bc ab 67 35 d9 a4 5c c5 02 b8 3a 02 e0 5c 8e 88 e8 0f 34 fc cf aa 37 0c fc c7 75 4b ba 12 ac bb 3b d9 d7 9e ae 68 f9 1e 6c 42 7b 2a f6 b7 0e 5b bc ad 7d 5a 2c 6b 25 e7 3d cd 7f 93 44 f8 b5 7c 97 49 0b 28 ac 62 c0 ac 0a 80 c4 15 01 70 28 0b 85 50 14 47 73 17 23 b0 11 49 ae e3 6b 0c a7 d5 47 e4 60 65 80 3c 0c b9 c9 49 a9 e4 d3 2c 1e e6 53 1a e8 d9 11 c4 5e ef 85 aa cf ca a2 69 5f cd ea 4c 77 90 41 90 dd f2 fa 04 b7 53 91 e0 99 09 59 4c f5 22 b6 Data Ascii: q&e,\|(0=5edp[,CcKcdr5j6c2<B}Z%hIY}2X1rteDls=A=Lg5\:\47uK;hlB{*[}Z,k%=D\|I(bp(PGs#IkG`e<I,S^i_LwASYL"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49974	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1050	OUT	GET /wp-content/uploads/2021/10/zen5.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: image/jpeg Content-Length: 352632 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:43 GMT ETag: "658070a7-56178" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: ff d8 ff e1 17 c7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 35 3a 33 35 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:25:35 X"
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 4a af d2 b5 a1 ff 00 d6 1f 91 5c 84 94 84 87 7e f1 43 78 77 ef 15 60 b5 0a c1 a2 2a 7f ff d1 f4 54 f2 99 24 e4 2f 29 4a 64 90 55 b2 4c 92 64 94 bc a4 35 20 77 29 a4 0d 5c 76 b4 6a e7 1e 00 1a b9 df e6 af 29 cd fa ef f5 97 ab dd 71 c3 c8 76 26 1d 8e 77 a3 8d 8e e6 d4 f0 c6 8d cd fd 68 b1 f7 ba df 4f 63 ec fd 23 19 ff 00 16 9f 0c 66 66 82 c9 cc 44 59 6e fd 7b ea 38 be 96 50 73 87 a8 2c 7b 59 07 5d c0 7b 36 ff 00 69 4b ea d5 d5 e5 d9 8f 66 4b ac fb 47 a6 dd 96 55 a3 89 21 a2 df fc cd 70 f7 36 ba f3 e9 c9 ce f5 8e 3d ee 3b 9f 61 de e1 3f ce b9 fa da ff 00 6e fd d6 2f 47 fa a9 d2 5f 81 8d 63 de 59 6d 06 b6 db 87 73 1c d7 82 07 b6 c6 87 33 73 5d ea 33 63 ff 00 af 5d 8a ae 6c 07 18 b2 6e 46 46 ff 00 63 73 95 cf c6 7d 3b 08 e9 af f8 25 27 d7 ce ab 6e 03 31 30 b1 Data Ascii: J\~Cxw`*T$/)JdULd5 w)\vj)qv&whOc#ffDYn{8Ps,{Y]{6iKfKGU!p6=;a?n/G_cYms3s]3c]lnFFcs};%'n10
2024-04-18 19:30:40 UTC	1496	IN	Data Raw: c1 b7 2b 7d 56 b7 fc 2e df 57 1e cf d3 57 fe 8e c9 db d5 7a 47 b0 67 8f 45 c4 0f 66 4d 16 43 4f e7 33 7d 94 7a 5e df de 59 43 47 53 75 74 2c 67 e3 f4 7c 76 3f e9 3d a2 c3 fd b1 bf fe fc ae 96 aa 4d eb d8 99 19 47 0b a7 03 98 ed 80 fa f8 ed f5 6b ad ce df b1 b9 10 ea 19 56 d6 b3 7f be fa bf d1 ab 14 b3 a8 34 b5 f9 b6 54 18 58 d1 e9 b1 90 e2 f8 fd 25 96 5d ea 3d 9f 4b e8 51 53 3f 47 fe 9e e4 d2 90 90 84 37 04 43 65 60 6a e1 f7 aa b9 99 75 51 5b 9e e2 0e d0 4c 4f 82 1a 25 ff d6 ed 98 00 52 b2 aa ef a9 f8 f6 7d 0b 9a ea dc 7c 03 c6 c9 fe cc af 9c 92 4e 5a fd 09 f5 73 3e fc fc 4c bb 72 0f e9 e9 ca 7e 3d ad 03 6e d7 d2 ca 6a 7f f5 b7 c7 ab bf f9 6b 4f 73 81 90 e7 03 f1 5f 34 24 82 5f a5 5e 4b be 91 2e f8 c1 fe 08 4e 7b c0 80 e2 07 82 f9 bd 24 94 fd 09 63 88 ec Data Ascii: +}V.WWzGgEfMCO3}z^YCGSut,g\|v?=MGkV4TX%]=KQS?G7Ce`juQ[LO%R}\|NZs>Lr~=njkOs_4$_^K.N{$c
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 2c 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 5a 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ,8BIM&?8BIMZ8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp
2024-04-18 19:30:40 UTC	1496	IN	Data Raw: 9d e3 0e fc 0e a7 60 7b 83 2f f4 b2 1b 59 8b 4b 5c d7 3a b7 d6 f9 6b 5f e9 59 5f a8 c5 d0 fe d3 e8 5d 77 a0 3b a8 bc 32 fa b1 6b 75 ad b6 d1 b5 f5 5d 53 77 bb 71 69 17 63 5d b9 be ef 7f e9 19 fb f5 a8 f0 4b d8 98 91 d6 24 70 b3 67 1f 78 c5 c2 34 94 4d d7 ed 7c a3 ae 07 63 d8 71 1c cd b6 3a b6 0d 84 c9 0e 2e b1 b5 89 ff 00 82 6a f6 0e 8a fd fd 1f 0f 59 2c a8 54 4f 9d 7f a1 ff 00 be 2e 4f eb 57 d5 1e 99 73 19 d5 f0 ad 38 b9 54 96 b9 fb c9 b9 8e 60 1e c7 3a ab 5d bd af a9 df b9 fe 62 d4 fa 8f d4 2f bf 02 fe 9f 96 18 32 b0 9e 5c 5d 5c ed 73 2c 31 bb 6b be 83 9b 63 3f d7 de ad e6 3c 78 e5 2a da 42 bf bb ea ff 00 d5 8d 1c 43 82 71 8f f5 4d ff 00 7b d3 ff 00 78 ee 5a a9 e4 ba b6 b0 87 b8 09 d0 03 c9 4b ac e5 e4 62 61 be dc 5a 5d 7d df 9a 03 5c f0 d1 dd f6 7a 61 Data Ascii: `{/YK\:k_Y_]w;2ku]Swqic]K$pgx4M\|cq:.jY,TO.OWs8T`:]b/2\]\s,1kc?<x*BCqM{xZKbaZ]}\za
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: cd 10 ed d5 dc da ec 6a 86 6f 44 e8 59 f6 ba fc 9c 26 3b 29 d1 39 4d 1b 2f 05 bf 41 cd ca a8 b2 ed ec db f4 b7 a9 ea 42 f5 5d 47 a1 fb 5d 06 bd af 68 70 e0 f8 a1 7a b5 59 77 d9 eb b1 8f ba 0b 8d 61 c0 90 07 d2 27 fc e5 1a 29 aa ac 66 e3 bc be e0 d1 1b de 1b b9 c3 f9 7b 61 9b bf aa d5 5b 17 a7 74 dc 2c d3 9d 8f 8e da ef 2c 75 65 cd 6b 5a 4b 5f b4 bb 76 cd bf b8 9f 69 7f ff d5 ec 7e bc d3 92 fe 87 eb e2 e4 b7 0e fc 4b ea b9 b9 0f 71 63 58 37 7a 36 39 ef 6b 5e ed be 9d ce fc c7 ef 5e 73 d4 ba dd dd 5f 0e aa ba 93 5c 5f 8a eb 09 c9 ae 2b f5 2c da 7d 2f d1 ff 00 32 cd 9e df f0 5e b5 95 7f a2 7a f5 6e a2 31 72 f0 ae c5 bc 0b ab b8 6d 75 7d 8e be 5f bb f4 97 2b 7f d4 de 93 eb d7 91 91 76 55 b8 db f6 bf 19 f6 34 54 c7 5b fa 26 64 d4 da eb 67 a5 e9 dc f6 7e 8f f9 Data Ascii: joDY&;)9M/AB]G]hpzYwa')f{a[t,,uekZK_vi~KqcX7z69k^^s_\_+,}/2^zn1rmu}_+vU4T[&dg~
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: f4 6c 5e 97 f5 5f ea fb f0 6c 66 66 6b da fc d6 b0 b2 b6 30 cb 2a 0f 20 de f0 ff 00 cf be dd 8d 66 f6 7b 2b af f4 75 ff 00 38 bc 21 24 33 71 fb 72 af 97 f4 bf 79 38 78 3d c1 77 c5 5e 9f dd 7e 9c 8f 33 f7 a9 02 ee ce 31 f1 2b e6 14 96 7b 79 fa 79 c4 91 ab 89 f9 95 54 99 a7 de f8 fd 23 c0 2e 05 de 1e 0e 0b e6 b4 90 95 51 bd 92 2e f4 7e 90 3e 97 fa 51 ff 00 6d bb ff 00 26 98 7d 97 56 d8 f0 f6 1f cd f4 c8 ff 00 bf 39 7c e0 92 60 e0 bd 37 ff 00 09 71 e2 ad 7f 63 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 31 00 00 00 Data Ascii: l^_lffk0* f{+u8!$3qry8x=w^~31+{yyT#.Q.~>Qm&}V9\|`7qc8BIM!WAdobe PhotoshopAdobe Photoshop 2021
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 62 35 34 66 2d 38 63 64 30 2d 65 30 64 36 33 34 62 34 33 66 61 33 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 31 30 2d 32 37 54 31 35 3a 32 35 3a 33 35 2d 30 33 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 65 30 35 63 66 66 36 2d 65 66 34 63 2d 37 62 34 61 2d 61 64 66 61 2d 37 32 66 32 66 37 66 39 37 37 38 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 31 30 2d 32 37 54 31 35 3a 32 35 3a 33 35 2d 30 33 3a 30 30 22 20 73 74 45 76 74 Data Ascii: b54f-8cd0-e0d634b43fa3" stEvt:when="2021-10-27T15:25:35-03:00" stEvt:softwareAgent="Adobe Photoshop 22.5 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:ee05cff6-ef4c-7b4a-adfa-72f2f7f97786" stEvt:when="2021-10-27T15:25:35-03:00" stEvt
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 Data Ascii: <?xpacket end="w"?>XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,
2024-04-18 19:30:40 UTC	98	IN	Data Raw: 92 47 fc 53 df ba f5 3a ef 42 fd 74 af fc 92 3f e2 9e fd d6 fa ec 46 bf ea 17 fd b0 fe b6 3e fd d6 be 7d 71 31 a8 3f a1 7f af d0 7f c5 3d fb af 79 f5 d6 85 ff 00 50 bf ed 87 fc 53 df ba f7 5e f1 c7 fe a1 3f e4 91 ff 00 14 f7 ee bd 41 f9 75 ef 1c 7f f1 cd 3f e4 95 ff 00 8a 7b f7 5e eb de 38 ff Data Ascii: GS:Bt?F>}q1?=yPS^?Au?{^8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49971	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1288	OUT	GET /wp-content/plugins/elementor-pro/assets/js/form.10bf1a6475f0741920ff.bundle.min.js HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	257	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19229 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:39 GMT ETag: "661e934b-4b1d" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 30 5d 2c 7b 32 36 37 39 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 63 6c 61 73 73 20 44 61 74 61 54 69 6d 65 46 69 65 6c 64 42 61 73 65 20 65 78 74 65 6e 64 73 20 65 6c 65 6d 65 6e Data Ascii: /! elementor-pro - v3.21.0 - 15-04-2024 /"use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[680],{2679:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;class DataTimeFieldBase extends elemen
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 73 61 67 65 2d 64 61 6e 67 65 72 20 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 2d 68 65 6c 70 2d 69 6e 6c 69 6e 65 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 27 2b 69 2b 22 3c 2f 73 70 61 6e 3e 22 29 2e 66 69 6e 64 28 22 3a 69 6e 70 75 74 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 2c 22 74 72 75 65 22 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 66 6f 72 6d 2e 74 72 69 67 67 65 72 28 22 65 72 72 6f 72 22 29 29 7d 29 29 7d 2c 62 65 66 6f 72 65 53 65 6e 64 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 66 6f 72 6d 3b 65 2e 61 6e 69 6d 61 74 65 28 7b 6f 70 61 63 69 74 79 3a 22 30 2e 34 35 22 7d 2c 35 30 30 29 2e 61 64 64 43 6c 61 73 Data Ascii: sage-danger elementor-help-inline elementor-form-help-inline" role="alert">'+i+"</span>").find(":input").attr("aria-invalid","true"),this.elements.$form.trigger("error"))}))},beforeSend(){const e=this.elements.$form;e.animate({opacity:"0.45"},500).addClas
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 2d 63 69 72 63 6c 65 22 2c 69 6e 64 69 63 61 74 6f 72 53 68 61 70 65 53 71 75 61 72 65 3a 22 65 2d 66 6f 72 6d 5f 5f 69 6e 64 69 63 61 74 6f 72 73 5f 5f 69 6e 64 69 63 61 74 6f 72 2d 2d 73 68 61 70 65 2d 73 71 75 61 72 65 22 2c 69 6e 64 69 63 61 74 6f 72 53 68 61 70 65 52 6f 75 6e 64 65 64 3a 22 65 2d 66 6f 72 6d 5f 5f 69 6e 64 69 63 61 74 6f 72 73 5f 5f 69 6e 64 69 63 61 74 6f 72 2d 2d 73 68 61 70 65 2d 72 6f 75 6e 64 65 64 22 2c 69 6e 64 69 63 61 74 6f 72 53 68 61 70 65 4e 6f 6e 65 3a 22 65 2d 66 6f 72 6d 5f 5f 69 6e 64 69 63 61 74 6f 72 73 5f 5f 69 6e 64 69 63 61 74 6f 72 2d 2d 73 68 61 70 65 2d 6e 6f 6e 65 22 7d 7d 7d 67 65 74 44 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 73 28 29 7b 63 6f 6e 73 74 7b 73 65 6c 65 63 74 6f 72 73 3a 65 7d 3d 74 68 69 73 2e Data Ascii: -circle",indicatorShapeSquare:"e-form__indicators__indicator--shape-square",indicatorShapeRounded:"e-form__indicators__indicator--shape-rounded",indicatorShapeNone:"e-form__indicators__indicator--shape-none"}}}getDefaultElements(){const{selectors:e}=this.
2024-04-18 19:30:40 UTC	1594	IN	Data Raw: 6d 70 6c 65 74 65 64 3a 65 3e 74 68 69 73 2e 73 74 61 74 65 2e 63 75 72 72 65 6e 74 53 74 65 70 3f 74 2e 69 6e 64 69 63 61 74 6f 72 49 6e 61 63 74 69 76 65 3a 74 2e 69 6e 64 69 63 61 74 6f 72 41 63 74 69 76 65 7d 67 65 74 49 6e 64 69 63 61 74 6f 72 53 68 61 70 65 43 6c 61 73 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 29 2c 7b 63 6c 61 73 73 65 73 3a 74 7d 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 3b 72 65 74 75 72 6e 20 74 5b 22 69 6e 64 69 63 61 74 6f 72 53 68 61 70 65 22 2b 74 68 69 73 2e 66 69 72 73 74 4c 65 74 74 65 72 54 6f 55 70 70 65 72 63 61 73 65 28 65 2e 73 74 65 70 5f 69 63 6f 6e 5f 73 68 61 70 65 29 5d 7d 66 69 72 73 74 4c 65 74 74 65 72 54 6f 55 70 70 65 72 63 61 Data Ascii: mpleted:e>this.state.currentStep?t.indicatorInactive:t.indicatorActive}getIndicatorShapeClass(){const e=this.getElementSettings(),{classes:t}=this.getSettings();return t["indicatorShape"+this.firstLetterToUppercase(e.step_icon_shape)]}firstLetterToUpperca
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 3d 65 2d 31 3f 74 68 69 73 2e 67 65 74 53 75 62 6d 69 74 42 75 74 74 6f 6e 28 29 3a 74 68 69 73 2e 67 65 74 53 74 65 70 42 75 74 74 6f 6e 28 22 6e 65 78 74 22 2c 74 29 29 3a 6e 3d 74 68 69 73 2e 67 65 74 53 74 65 70 42 75 74 74 6f 6e 28 22 6e 65 78 74 22 2c 74 29 2c 69 2e 61 70 70 65 6e 64 28 6e 29 2c 72 2e 61 70 70 65 6e 64 28 69 29 7d 29 29 7d 67 65 74 42 75 74 74 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 28 29 7b 63 6f 6e 73 74 7b 63 6c 61 73 73 65 73 3a 65 7d 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2c 74 3d 74 68 69 73 2e 67 65 74 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 28 29 2c 73 3d 5b 65 2e 62 75 74 74 6f 6e 73 2c 65 2e 63 6f 6c 75 6d 6e 2c 22 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 2d 22 2b 74 2e 62 75 74 74 6f 6e 5f 77 69 64 74 68 Data Ascii: =e-1?this.getSubmitButton():this.getStepButton("next",t)):n=this.getStepButton("next",t),i.append(n),r.append(i)}))}getButtonsContainer(){const{classes:e}=this.getSettings(),t=this.getElementSettings(),s=[e.buttons,e.column,"elementor-col-"+t.button_width
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: 6c 65 6d 65 6e 74 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 2e 6a 6f 69 6e 28 22 20 22 29 29 2e 6e 6f 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 65 71 28 30 29 29 2e 61 64 64 43 6c 61 73 73 28 65 2e 69 6e 64 69 63 61 74 6f 72 49 6e 61 63 74 69 76 65 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 65 71 28 30 29 2e 61 64 64 43 6c 61 73 73 28 65 2e 69 6e 64 69 63 61 74 6f 72 41 63 74 69 76 65 29 7d 75 70 64 61 74 65 49 6e 64 69 63 61 74 6f 72 73 53 74 61 74 65 28 65 29 7b 63 6f 6e 73 74 7b 63 6c 61 73 73 65 73 3a 74 7d 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2c 73 3d 7b 63 75 72 72 65 6e 74 3a 7b 72 65 6d 6f 76 65 3a 74 2e 69 Data Ascii: lements.$indicators.removeClass(t.join(" ")).not(this.elements.$indicators.eq(0)).addClass(e.indicatorInactive),this.elements.$indicators.eq(0).addClass(e.indicatorActive)}updateIndicatorsState(e){const{classes:t}=this.getSettings(),s={current:{remove:t.i
2024-04-18 19:30:40 UTC	2453	IN	Data Raw: 73 65 73 3a 73 7d 3d 74 68 69 73 2e 67 65 74 53 65 74 74 69 6e 67 73 28 29 2c 72 3d 73 2e 69 6e 64 69 63 61 74 6f 72 2b 22 2d 2d 73 68 61 70 65 2d 22 2c 69 3d 72 2b 74 68 69 73 2e 73 74 61 74 65 2e 73 74 65 70 73 53 68 61 70 65 2c 6e 3d 72 2b 65 2e 73 74 65 70 5f 69 63 6f 6e 5f 73 68 61 70 65 3b 6c 65 74 20 61 3d 22 22 3b 65 2e 73 74 65 70 5f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 63 6f 6e 22 29 3f 61 3d 22 69 63 6f 6e 22 3a 65 2e 73 74 65 70 5f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 28 22 6e 75 6d 62 65 72 22 29 26 26 28 61 3d 22 6e 75 6d 62 65 72 22 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 63 68 69 6c 64 72 65 6e 28 74 2e 69 6e 64 69 63 61 74 6f 72 2b 22 5f 5f 22 2b 61 29 2e 72 65 6d 6f 76 65 43 6c 61 Data Ascii: ses:s}=this.getSettings(),r=s.indicator+"--shape-",i=r+this.state.stepsShape,n=r+e.step_icon_shape;let a="";e.step_type.includes("icon")?a="icon":e.step_type.includes("number")&&(a="number"),this.elements.$indicators.children(t.indicator+"__"+a).removeCla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49976	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1289	OUT	GET /wp-content/plugins/elementor-pro/assets/js/popup.085c1727e36940b18f29.bundle.min.js HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/questor-zen/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 751 Connection: close Last-Modified: Tue, 16 Apr 2024 15:03:38 GMT ETag: "661e934a-2ef" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	751	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 31 2e 30 20 2d 20 31 35 2d 30 34 2d 32 30 32 34 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 6c 65 6d 65 6e 74 6f 72 5f 70 72 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 5d 2c 7b 38 38 37 32 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 65 6c 65 6d 65 6e 74 6f 72 4d 6f 64 75 6c 65 73 2e 66 72 6f 6e 74 65 6e 64 2e 68 61 6e Data Ascii: /! elementor-pro - v3.21.0 - 15-04-2024 /"use strict";(self.webpackChunkelementor_pro=self.webpackChunkelementor_pro\|\|[]).push([[50],{8872:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;t.default=elementorModules.frontend.han

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49977	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1050	OUT	GET /wp-content/uploads/2021/10/zen4.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: image/jpeg Content-Length: 347680 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:43 GMT ETag: "658070a7-54e20" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: ff d8 ff e1 1a f0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 35 3a 31 30 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:25:10 X"
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: d2 0c 74 b6 5d 57 1d ec a7 1d b2 00 bb 3f 0d a0 0f e4 dc cb 5d ff 00 9e d6 95 6d 71 b2 c2 5c 09 0e d6 78 2a 97 56 70 17 f4 ba dd cb ba 85 64 f9 86 55 93 6c ff 00 e0 6b 44 bc 36 a2 48 06 7b fc 51 42 db 1d e9 08 6b 4c 9e 3e 6a 61 d6 87 1f 6b 60 42 8f ab 10 cf a4 e1 10 61 3b 2d 92 e9 11 06 0f c5 25 3f ff d0 ec 6b c9 be 92 5a da 4b da 3c 79 50 75 c6 db c5 9b 1a 1d 60 da 43 87 04 78 28 ec bd a4 17 c9 81 ac 6a 50 72 ad dd b5 ed 04 39 a7 40 74 94 df 56 a9 d3 44 b9 78 9f ab 3e e0 47 d1 e7 48 90 86 e0 fb 0d 07 51 03 42 4f 80 fa 41 3d d9 17 7d 92 c0 ec 71 b0 b4 8e 61 d1 fb ca 1d 29 a6 da c5 9a ed 03 63 49 f0 1d 91 ed 68 6e 31 b5 11 ef bb 68 ee 09 d5 50 ea 1e 89 70 d8 78 24 6b 24 9f cf 6f b7 f3 7e 8a d2 0c a8 1f d2 02 20 f0 df c2 53 b5 98 c1 cd 27 dc 37 02 f1 1c 84 Data Ascii: t]W?]mq\x*VpdUlkD6H{QBkL>jak`Ba;-%?kZK<yPu`Cx(jPr9@tVDx>GHQBOA=}qa)cIhn1hPpx$k$o~ S'7
2024-04-18 19:30:40 UTC	4096	IN	Data Raw: 1c e4 39 da 3e ec 46 0d ae 3f f0 dd 5f 29 d5 d5 77 fe c6 64 d8 95 f8 dd 37 19 8d cb ea 6f 6d 81 87 db 93 d4 2c 0f 68 77 fc 05 57 6c c3 a9 ff 00 c9 c4 c6 ae c4 9d d4 b2 32 20 e1 e2 db 90 08 f6 e4 65 13 89 44 7f 23 d7 63 f3 ae 67 fc 46 0f a7 ff 00 0a 8a 12 96 75 0b 7f 9c b6 bc 36 9d 76 63 8f b4 5d ff 00 b1 39 4c 66 33 3f b1 81 77 fc 6a a9 96 7a 56 0d ec 76 5b 9a fc dd 0d 3e b9 76 56 59 f0 75 18 df a7 ba af fd 05 c7 a6 b5 37 63 e6 5d 3f 6c cd 7e d3 1f ab e0 83 8d 5f f5 1d 91 ba de a3 77 fe c5 62 ff 00 c5 20 bd dd 3b a5 8f b3 54 da f1 1f 6f bb ec d4 33 75 d6 7f 29 d5 52 db 32 ef ff 00 8d b7 fe dd 48 a5 a4 ce a7 f5 bb 0f d7 6f d5 fc 6a 6a c3 c9 b3 d5 77 db da d6 d8 cb 0b 43 6c 75 55 55 6f b2 97 ed 63 ff 00 59 67 ab ea 6f f6 21 9f fc 72 73 c3 99 6f 5a af 19 8e Data Ascii: 9>F?_)wd7om,hwWl2 eD#cgFu6vc]9Lf3?wjzVv[>vVYu7c]?l~_wb ;To3u)R2HojjwCluUUocYgo!rsoZ
2024-04-18 19:30:41 UTC	1594	IN	Data Raw: 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ef dd 40 f4 de 0c 4b 81 10 10 ab 15 db 8f 5e e0 1e 48 da 40 e7 c2 54 05 b7 6d 06 01 d3 93 ca 86 2e 40 a0 3e b7 08 7b 5c 4b 41 e3 69 f7 22 86 bf a6 03 1d 8e 1a 4b d8 5c 36 bb 43 1c 87 28 57 55 b6 35 ae 0f 32 ed 36 8f 05 65 d7 b3 79 7f a6 d3 46 40 1b 9c f2 04 3c 7f e4 d1 71 ea 6f a3 5d 3b 19 16 7b c5 82 78 1e ef 4f fb 28 29 cc f4 5e d2 09 f6 87 12 35 3e 1f 9d fd 54 fe b5 95 e8 f0 0b 41 d3 b8 fe cb 96 b7 d9 c1 d1 ec 0e 1a c4 e8 08 fe aa cf c8 6d Data Ascii: B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?@K^H@Tm.@>{\KAi"K\6C(WU526eyF@<qo];{xO()^5>TAm
2024-04-18 19:30:41 UTC	1398	IN	Data Raw: ea 6e c7 ff 00 dd 64 dd 27 f9 8c b6 f8 5e d3 f7 80 87 55 7e 8f d5 bd d2 2c 61 c4 0d 83 a1 32 42 a1 f5 8b a5 e2 df 65 39 d5 31 df b4 71 cf af 55 a1 cf 32 28 1b db 5f a6 d3 b7 fe 8a 27 49 7b c6 46 c1 a3 5d 23 42 7b 7b b5 57 0b 4d f9 d6 43 9c 1b 53 0d 4e 70 3a cb c7 bb 6b bf 35 22 2c 52 61 23 19 03 f6 f9 3e 7f d7 aa b7 29 ec ca da 6b fb 4b 45 be 89 3b 8b 09 25 af af 70 fa 5b 5c d5 cc f5 3c 7b 69 68 f5 04 03 a0 f8 af 57 ca fa b7 45 14 b4 74 fa dc fc b7 bc 6d b2 e7 1b 4c 43 fd 4f a7 fa 2f 6b fd 2f f0 6b 97 fa db d1 99 6e 3d 59 38 9a d7 63 bd 4a b7 0d a7 6b 81 6e b3 f4 79 55 ee 50 95 49 b6 4c 72 47 4e ba 3c 0b 41 90 7c 74 44 a9 ce 65 81 ed e4 7b db f2 fa 4d 56 c6 15 b4 d3 78 b5 84 3a b7 30 b0 f8 49 d6 b3 fd 9f 7a 86 2e 30 bf 26 8c 73 60 a9 af b7 6b ae 70 90 c6 Data Ascii: nd'^U~,a2Be91qU2(_'I{F]#B{{WMCSNp:k5",Ra#>)kKE;%p[\<{ihWEtmLCO/k/kn=Y8cJknyUPILrGN<A\|tDe{MVx:0Iz.0&s`kp
2024-04-18 19:30:41 UTC	1398	IN	Data Raw: f7 42 bd b4 75 9a f0 70 76 be bb 2a a9 f9 19 2f dc 4d 8d 7b 2e be b1 4d 6d da da 7d 3d 95 fa 5f ce 7b 2e b5 6a d9 d4 f2 8d a6 b6 96 b0 07 b5 b2 1b 26 0b ac af f3 f7 37 f3 18 9d 45 88 91 6d ea 7a 76 0d 3a b2 a0 4f 8b b5 ff 00 cc 51 ac 7b 98 cf d1 d6 6c 3d 98 d2 d6 8f bd e5 ad 58 d4 f5 3c 87 06 3a db 08 00 d2 e7 bb da 06 d3 bb d7 f5 5c 76 36 ba fd 9f 98 ad b7 ac e3 64 36 d6 62 b8 8b b6 bb ec fe a3 4b 37 3a 3f 46 f8 b4 57 fa 37 3b f3 ff 00 9b 42 46 b7 29 88 27 60 e3 75 7c 7e af 9f 94 dc 9b 1b 8f 5d 78 d5 5f 8c cc 7a 6d 36 d8 5d 7f a6 e7 3b 22 e7 d7 8f 4d 1e 93 b1 ab fd 13 7d 55 89 d3 6e ff 00 29 64 d4 41 6b cd 04 16 9d 08 2d 3c 2a 7d 5a 6c e9 54 67 e5 32 d7 fa ce 7f b5 97 1a 9f 45 15 39 d5 d7 b7 17 77 a5 91 7e 66 db 72 b2 6e b3 7b ff 00 48 a9 f4 4e b5 d1 6a Data Ascii: Bupv/M{.Mm}=_{.j&7Emzv:OQ{l=X<:\v6d6bK7:?FW7;BF)'`u\|~]x_zm6];"M}Un)dAk-<}ZlTg2E9w~frn{HNj
2024-04-18 19:30:41 UTC	4096	IN	Data Raw: d2 ef 77 b9 9f 49 bf ba ac bf ad b8 6e f7 6a 4f e3 10 9d a2 2a 5d dd 66 e0 58 f6 5b fb 41 ec a9 ad b9 ae bc d6 f9 21 a2 1f e9 07 7e ff 00 e9 1b bd ff 00 41 8a bf 5d eb d4 57 8a ea a9 d9 4b e9 05 ad 68 fc c2 dd 3e 89 fc c7 7d 17 2c 2c de b0 e7 e6 5f 8e e9 f4 3a 9e 37 aa d3 3c 38 63 59 8b 73 3f ad f6 8c 7a d7 3e fb 6d cd 0c ca b1 de eb 1b fa c8 27 41 65 51 5d b6 7f 6f f9 c4 93 5d d9 58 f7 e6 64 3a fb 4e 82 49 73 b4 00 0f ce 72 a8 fc 96 e6 d8 29 a4 11 5d 26 6a 67 7b 3f 7e cd bf e9 3f 71 9f e8 54 32 72 f7 bb d1 af 4a 01 d7 c5 e4 7e 73 bf 93 fb 8c 55 5d 5b 9b 74 b1 e1 ae 69 e0 98 f8 39 91 f9 c9 28 3d 13 72 5d 41 fb 3b 81 6b ea 3b 1c d3 c8 23 e9 22 bb ae 51 84 f6 82 05 97 72 1b d9 be 04 8f de 59 99 6e bd 85 b9 96 0d e6 fa da e9 99 9b 1a 03 1d ea 4f e7 3b f9 c5 Data Ascii: wInjO*]fX[A!~A]WKh>},,_:7<8cYs?z>m'AeQ]o]Xd:NIsr)]&jg{?~?qT2rJ~sU][ti9(=r]A;k;#"QrYnO;
2024-04-18 19:30:41 UTC	98	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:41 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:41 UTC	2894	IN	Data Raw: 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 6f 1e 6f 78 6f d1 70 2b 70 86 70 e0 71 3a 71 95 71 f0 72 4b 72 a6 73 01 73 5d 73 b8 74 14 74 70 74 cc 75 28 75 85 75 e1 76 3e 76 9b 76 f8 77 56 77 b3 78 11 78 6e 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c Data Ascii: klWlmm`mnnknooxop+ppq:qqrKrss]sttptu(uuv>vvwVwxxnxy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49980	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1050	OUT	GET /wp-content/uploads/2021/10/zen3.jpg HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: image/jpeg Content-Length: 301108 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:43 GMT ETag: "658070a7-49834" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: ff d8 ff e1 15 f6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 30 3a 32 37 20 31 35 3a 32 34 3a 35 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 20 a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 22.5 (Windows)2021:10:27 15:24:52 X"
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: c8 10 76 b7 fb 4e fc df df 58 dd 63 22 ec ec de a7 63 2f 75 58 b7 fd 9f 1e 8b 01 d1 af 7d de 85 96 35 bb 7f d1 63 7a b5 bf ff 00 26 84 7e a9 62 37 1f 32 e6 5a e7 ba 8a cb a9 be c7 18 ae f2 fa dd 4b a9 de 46 e7 d2 ca ad 73 bf e3 bf 9c 55 78 a2 65 23 65 b6 23 21 18 c6 87 db d7 f4 5a dd 47 eb 13 ce 51 66 36 3d 61 a4 12 d6 5b 76 db 9e 00 99 65 2d 6e da dd fc 8b 1f bd 72 f9 00 b6 fb 49 6f a7 ea 91 71 aa 0b 7d 33 60 dd e9 fe eb bf b0 bb 3e 9b 83 8d 91 84 6b b2 96 fa ed 66 c7 da 1c d2 36 bf de f7 52 d8 16 7e 97 7e e6 7a 9e c6 7a 9e af e9 17 3f f5 a2 b6 b3 3e c2 d0 04 d3 5c 81 c0 21 fb 60 7f 65 c9 b0 94 44 80 03 e6 ea ba 70 91 81 32 27 d3 ad 3d 97 f8 bf ea 2f cb e8 6e c5 b0 cb f0 2c f4 81 ff 00 83 78 f5 69 ff 00 33 f4 95 ae a6 ae 4a e0 3f c5 a5 84 64 e7 57 f9 b6 Data Ascii: vNXc"c/uX}5cz&~b72ZKFsUxe#e#!ZGQf6=a[ve-nrIoq}3`>kf6R~~zz?>\!`eDp2'=/n,xi3J?dW
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: e6 ef 67 bf 76 a0 0e 4a e7 29 ea 7b 7d 40 ea 2c b9 ef 74 9d ad dc 10 7f 6d dd 47 53 c7 c9 6b 2d a5 b5 98 73 5e d3 b4 83 a4 39 a8 1c de b2 00 d2 f7 08 18 bf 56 2c eb fb a5 dd 6b 72 ab 71 fb 3e 3b f7 1d 0e 91 f9 55 ce 99 83 d4 59 61 ba e7 06 8d db 9b 5f 26 3c 25 69 63 75 2c 3c aa 3d 60 43 1e d0 37 b0 9d 75 4f 66 76 35 3f ce 38 32 78 dc 61 19 12 4e ab a3 10 06 87 47 3f 33 a7 db 9b 96 db 2c 64 31 9f 47 5e ff 00 bc 9a da 3a 8e 13 77 50 ef 55 83 58 ef f7 2b 16 f5 de 95 4e b6 64 d4 c0 4c 09 78 1a fd ea 2f eb dd 35 bc dc ce 27 99 d1 30 c6 fc 17 89 57 57 ff d5 a0 ef ac 7d 5d ac 65 78 ac 6b 2a 73 7d 86 27 f2 2d be 85 93 d5 2f c6 7f db 2d 33 ba 44 7b 74 21 2e 9d d2 71 ab ab d1 fa 51 ee 61 3d 8a be c6 b6 b6 ed 1a 76 21 4d 76 08 2d 50 28 82 0e 88 fa be 56 66 4d 98 58 Data Ascii: gvJ){}@,tmGSk-s^9V,krq>;UYa_&<%icu,<=`C7uOfv5?82xaNG?3,d1G^:wPUX+NdLx/5'0WW}]exk*s}'-/-3D{t!.qQa=v!Mv-P(VfMX
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 65 da 8d ed ff 00 a9 72 f1 64 95 a3 5a 53 52 37 52 bf 07 ad b9 d5 89 da 21 54 df ca e7 52 4d 4b ff d9 ff ed 1e 0c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 25 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 42 49 4d 04 3a 00 00 00 00 00 f9 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 16 00 43 00 6f 00 6e 00 66 00 69 00 67 00 75 00 72 00 Data Ascii: erdZSR7R!TRMKPhotoshop 3.08BIM%8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTprintProofSetupObjcConfigur
2024-04-18 19:30:41 UTC	4096	IN	Data Raw: b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ed b3 e8 16 61 da d8 e5 a7 f2 2a ff 00 52 8c 61 56 cf dd 6d 95 9f ec 58 7f ef b6 2d 4b 6b 90 f6 7c 42 ca fa a8 3d 3b 2d ab f7 2f b4 7c 9e d6 db ff 00 7d 47 a2 cf d2 0f 4b 60 9a dc 3c 96 56 4e 0e 3d f9 55 58 fa da 6d 0d 73 59 61 1a b6 7c 0a d7 22 41 0a 83 84 3a b3 e0 52 0b 8b 5e b1 7e 3b 86 36 41 0e 78 82 c7 8e 1c 07 fd 4b 96 bf 20 15 5b 36 96 da c0 0e 84 6a d7 0e 41 52 c6 7b fd 36 b1 fa b8 69 bb c5 22 a1 a6 8d 5c e3 0e 70 1e 2b 95 eb d9 58 38 83 76 65 be 9b 9c 25 b5 b4 6e 79 fe cf e6 b7 fa eb a7 ea f6 3a 96 97 b3 6f ab 61 6b 2a df f4 77 bb f3 9f fc 8a da 3d 57 af 3b a7 a0 e6 fd 66 ca 7f 51 7d 85 9d 33 7b 9b 41 7c ef b4 03 0e bc b0 7f a6 fa 5f 4b fe 0d 36 59 44 74 4c Data Ascii: '7GWgw?aRaVmX-Kk\|B=;-/\|}GK`<VN=UXmsYa\|"A:R^~;6AxK [6jAR{6i"\p+X8ve%ny:oakw=W;fQ}3{A\|_K6YDtL
2024-04-18 19:30:41 UTC	98	IN	Data Raw: ec 7f 59 84 ed dc dd c3 79 27 74 fe 72 af 8f 73 6e c6 a2 eb 4c b9 8e 75 65 de 26 c0 e6 bb 77 f5 b6 b5 cb 2b ae f5 dc fe 94 19 8d 82 5a 00 66 e7 b9 c2 60 b8 bb 67 fd 05 3f 0f 16 8d 7e 31 11 6f 47 53 f1 ea 11 01 be 51 0a b6 5e 46 2b 84 1d ae 27 81 01 62 f4 2e a9 97 d4 69 76 5e 6e 43 1d 53 1a 77 Data Ascii: Yy'trsnLue&w+Zf`g?~1oGSQ^F+'b.iv^nCSw
2024-04-18 19:30:41 UTC	4096	IN	Data Raw: b0 36 35 fb d5 fe 8f d3 0d 55 3b a8 f5 03 ba db 49 75 6c 3c 31 9f 9a 14 04 ea 40 3b 1a 2c c0 68 09 1f 30 b0 d4 ea 9e 80 6b 23 da ed cd 88 fe b0 57 be b8 d1 5d 8d c6 2e d2 1d fc 0a ce c9 bb 07 3a f7 be cc 96 53 5d 4e 00 09 12 48 2b 63 eb 41 c2 f4 a8 39 96 fa 2c 9f 6b bc 4c 15 3e 2e 2a b3 d7 66 1c bc 26 c0 e9 bb e7 3d 68 d7 5b c5 6c f7 41 91 f1 5a 98 d9 ae 38 ed 75 91 25 89 f3 59 f5 45 cf 2e b7 26 c7 3b b6 d9 2a 0c cd fa ab 55 70 05 d6 47 12 0a 79 ea 58 87 40 ff 00 ff d6 b8 72 fd 36 fa 9b c5 6c 3c 13 d8 f8 28 d7 d5 e9 be c0 d6 4b a4 c1 7f 02 57 90 24 ac 9a ad 2b f6 b4 87 15 eb 7f b1 f5 be b6 f1 6f 4b c8 68 e4 37 70 f8 b4 ee 54 ba c5 f6 dd 5d 57 52 e8 36 55 5b ff 00 0d 57 98 a4 a3 ea bc db e9 1d 33 33 34 34 b5 d6 98 e6 15 fc d7 d5 6d 26 8b 40 70 b6 e6 39 ac Data Ascii: 65U;Iul<1@;,h0k#W].:S]NH+cA9,kL>.f&=h[lAZ8u%YE.&;UpGyX@r6l<(KW$+oKh7pT]WR6U[W3344m&@p9
2024-04-18 19:30:41 UTC	1496	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 19:30:41 UTC	1398	IN	Data Raw: 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 02 73 69 67 20 00 00 00 00 43 52 54 20 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 a4 00 a9 00 ae 00 b2 00 b7 00 bc 00 c1 00 c6 00 cb 00 d0 00 d5 00 db 00 e0 00 e5 00 eb 00 f0 00 f6 00 fb 01 01 01 07 01 0d 01 13 01 19 01 1f 01 25 01 2b 01 32 01 38 01 3e 01 45 01 4c 01 52 01 59 01 60 01 67 01 6e 01 75 01 7c 01 83 01 8b 01 92 01 9a 01 a1 01 a9 01 Data Ascii: \XYZ LVPWmeassig CRT curv#(-27;@EJOTY^chmrw\|%+28>ELRY`gnu\|
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 5c 35 5c 86 5c d6 5d 27 5d 78 5d c9 5e 1a 5e 6c 5e bd 5f 0f 5f 61 5f b3 60 05 60 57 60 aa 60 fc 61 4f 61 a2 61 f5 62 49 62 9c 62 f0 63 43 63 97 63 eb 64 40 64 94 64 e9 65 3d 65 92 65 e7 66 3d 66 92 66 e8 67 3d 67 93 67 e9 68 3f 68 96 68 ec 69 43 69 9a 69 f1 6a 48 6a 9f 6a f7 6b 4f 6b a7 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 6f 1e 6f 78 6f d1 70 2b 70 86 70 e0 71 3a 71 95 71 f0 72 4b 72 a6 73 01 73 5d 73 b8 74 14 74 70 74 cc 75 28 75 85 75 e1 76 3e 76 9b 76 f8 77 56 77 b3 78 11 78 6e 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 Data Ascii: \5\\]']x]^^l^__a_``W``aOaabIbbcCccd@dde=eef=ffg=ggh?hhiCiijHjjkOkklWlmm`mnnknooxop+ppq:qqrKrss]sttptu(uuv>vvwVwxxnxy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49981	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	1062	OUT	GET /wp-content/uploads/2023/07/Zen-Edoc-720x520.png HTTP/1.1 Host: www.questor.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; _clsk=7jxt0%7C1713468626633%7C1%7C1%7Cl.clarity.ms%2Fcollect; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==
2024-04-18 19:30:40 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:40 GMT Content-Type: image/png Content-Length: 196125 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:49 GMT ETag: "658070ad-2fe1d" Accept-Ranges: bytes
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 02 08 08 06 00 00 00 47 3a d9 de 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 77 90 24 d9 7d df f9 f9 bd cc aa f6 3d dd 3d 3d de ec 98 dd 59 33 3b eb 77 b9 30 8b 25 00 c2 8a 02 49 e8 28 00 14 ee 64 78 bc a3 44 81 12 79 3a c3 8b d0 45 28 42 3a 86 82 22 2f a4 13 2f e4 88 93 4e 41 4a 24 21 0a 22 89 85 23 1c b1 14 b8 16 6b 30 8b f5 6e 76 66 67 c7 bb 36 55 95 f9 7e f7 47 66 56 67 65 67 55 57 f7 b4 a9 ee f9 7d 27 7a 2a 2b f3 f3 5e be f4 df f7 ea 97 ef 41 22 c7 d2 d5 4d da 5e 61 5c ee 33 ff 57 5c b6 11 98 a2 5c 61 da 98 de 66 8a bc 31 c6 18 d3 db 8c c9 64 ba 86 24 6d e6 3b c0 2f 90 b6 13 93 2d eb 26 9f b5 56 fe a6 d8 69 7b d6 1b 63 5a df 5a 0f Data Ascii: PNGIHDRG:pHYs+ IDATxw$}===Y3;w0%I(dxDy:E(B:"//NAJ$!"#k0nvfg6U~GfVgegUW}'z*+^A"M^a\3W\\af1d$m;/-&Vi{cZZ
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 83 6d be ca 6f cc ad 79 34 b7 a6 e9 8f 0b 95 9b 34 a3 e6 7e 4f 1f 62 cd 47 4b 76 ef 76 2e 31 38 f9 63 2d a4 95 29 f0 d2 6a 42 9a 6b c8 6d f3 bc c7 54 ce fb 48 ea 38 34 b7 cf 0b 87 b1 25 3f 9a db 31 57 f5 4b b6 c5 51 dc 5b 5a cc 29 35 67 92 99 2a 6d 3d 3e 73 46 52 9a cb 25 5d de 9a d3 5c 55 28 e7 45 e6 ce cf ec 30 17 2a 8d 9d 2a 91 28 b8 74 1b 7c ee 5c 9d 6f af 72 2b 10 d2 63 93 33 f1 9a ee 0a 9f 3d 88 93 63 35 77 2e ce 4d fa dc 3e 6d 31 ad 92 5a 1c cd ad ab a0 62 85 b9 59 e9 cb d1 ce b9 79 f7 21 c9 ed a4 e4 3c 9e bb e6 f2 6a cd 3b 2b 47 6e fd 85 bd 91 6c 57 6a 4f 8b e7 79 ce ac 17 b7 a1 b5 4c cd 05 29 9f 6d 8d e6 4e 3f 69 96 2d 5f b1 6d ad 58 77 c8 3b b7 5e 5c 5a 81 6d ce 9b 3b ae cd ca a8 f7 49 39 44 51 2d 98 2d 5a 8f 4e f9 91 ca cc 6e 73 67 34 4d 65 73 Data Ascii: moy44~ObGKvv.18c-)jBkmTH84%?1WKQ[Z)5gm=>sFR%]\U(E0*(t\|\or+c3=c5w.M>m1ZbYy!<j;+GnlWjOyL)mN?i-_mXw;^\Zm;I9DQ--ZNnsg4Mes
2024-04-18 19:30:40 UTC	1398	IN	Data Raw: 13 21 28 11 10 e1 05 92 b6 52 8f f8 3a 1e 4f dc f4 bb 89 31 46 3d aa a9 41 f7 11 5e b3 d6 da 38 35 b1 2e 35 69 c9 b4 03 c2 d4 5b fa 96 30 84 56 f3 37 37 5b 52 a3 ef 71 1a a7 2d d8 89 f1 af 91 84 3e 88 f8 64 7b d4 e7 f2 ca d6 c9 5c cd 01 9a 96 39 4e 4a 88 e2 89 5b 42 1d f2 e9 f3 df 05 d1 64 7f 25 4b 24 2d 7f be cc 9a 7e cd 2a 1b 49 30 4b b3 32 93 a6 cf b6 3d a9 93 44 28 11 92 1a e3 a4 d5 3d c8 07 78 a4 e9 7c b3 44 8a 12 b8 19 2a 00 c4 38 02 2a 4e 93 fd 90 ae d8 a7 86 38 22 66 b6 65 7b e6 5a be 45 05 51 25 16 92 56 f3 25 a8 53 6b d8 42 2d 61 c6 18 63 cc ca 31 c5 0a 6f d1 9c 18 63 cc 7a 61 44 40 5c fb 6b a1 a3 54 a9 56 fb 32 1f 59 d6 6a 9b d7 86 63 c2 02 98 57 59 d3 75 31 8c a3 18 f2 e1 3b 7c 52 98 6e a7 15 67 c2 4a d5 79 5d 42 0b 34 73 96 b5 28 af e0 d2 f3 Data Ascii: !(R:O1F=A^85.5i[0V77[Rq->d{\9NJ[Bd%K$-~I0K2=D(=x\|D8*N8"fe{ZEQ%V%SkB-ac1oczaD@\kTV2YjcWYu1;\|RngJy]B4s(
2024-04-18 19:30:40 UTC	2796	IN	Data Raw: 63 83 ca f1 63 af 71 65 16 e2 c0 53 0d 47 d8 b9 6d 92 53 27 df e6 72 e4 e9 8b 2e 20 08 57 e2 88 e3 6f 9f 60 66 a6 41 1d 61 64 d3 26 46 fa 2b 9c 7f e7 04 ae 52 e5 cc 34 dc 72 68 3f 03 7d d5 a4 95 3a 3d 9e c9 14 2d e7 52 27 73 9d a9 9b d6 69 63 8c 31 c6 18 63 8c e9 ea d7 4c 71 48 10 74 66 da c9 7b aa 7d d5 85 a2 0f f2 46 74 43 31 dd 76 63 d7 ae 76 91 d7 7a 61 5c 50 09 c3 d9 99 46 b1 95 7d 41 89 08 b8 b9 97 08 f3 ad d0 09 90 cc 75 c4 38 05 f1 8a 53 c1 89 e0 35 a6 81 03 07 01 42 8c 6b e6 13 aa 72 fe ca 29 be fb f0 7f 65 d8 43 ff 60 95 1b 6e ff 11 0e ed 9c 04 09 f1 e9 0b 83 0d 49 8a 2c be 4e 7f 25 89 2e 7e e1 85 1f f2 dc e3 8f 72 f7 ed 77 70 e2 ed d3 3c fd ea 3b fc ec 67 7e 9c 2f fe 7f bf cd 7b 7e e2 a7 39 f1 da 4b f4 8f 8e f3 e0 07 3f c8 80 4b 5a dd 55 aa 00 Data Ascii: ccqeSGmS'r. Wo`fAad&F+R4rh?}:=-R'sic1cLqHtf{}FtC1vcvza\PF}Au8S5Bkr)eC`nI,N%.~rwp<;g~/{~9K?KZU
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 5b a8 f8 64 2f 7a a9 b1 77 ff 41 50 61 68 70 8c be e1 24 2c 62 df c1 fd 49 54 b6 56 18 b9 75 0c 27 82 78 87 d7 98 cd 5b 27 99 d8 ba 0d 87 4f 46 76 04 d0 88 a0 da cf 81 43 b7 70 03 9e d8 05 a8 57 9c 77 44 ae ce fe 4d 55 f0 20 43 03 6c 1b 18 05 62 82 c1 11 f6 5d 37 92 84 b2 78 cf be eb 0f 33 13 c2 f8 ce 1d 6c df b9 0d 07 38 ad 82 28 03 32 cc d8 a6 6d 04 28 35 97 fc f4 d5 b7 75 2b 5b b7 6d 83 6c c4 41 89 b8 e1 d0 7e d0 20 3d 05 a5 79 f2 64 a7 8f aa b6 4e 2f 70 e3 eb c6 5c 1b 63 8c 31 ab c3 64 d3 c5 cf 4e cb 8c 31 a6 57 99 a5 8e 44 18 86 21 2f bd f4 52 bb 77 df 7a a6 a5 78 a5 98 e2 cb 83 65 4e 3b fb ee 0b 4c 91 eb 94 b6 6c ba 9d 56 92 f1 00 ce 05 69 db eb e2 24 ce 95 ff d4 91 9d 8c 09 94 8e 46 a7 59 87 76 48 3a d4 b3 a0 44 aa 78 af 04 f8 74 e0 6c f0 ae 01 12 Data Ascii: [d/zwAPahp$,bITVu'x['OFvCpWwDMU Clb]7x3l8(2m(5u+[mlA~ =ydN/p\c1dN1WD!/RwzxeN;LlVi$FYvH:Dxtl
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 73 67 79 f5 87 4f f2 be 1f fb 30 b7 1e be 95 3d db c6 98 89 ab dc 79 db 9d 5c 3e 77 96 47 1e 7f 9c 3b ee bc 8b fd 7b f6 e2 34 c6 89 67 66 b6 c6 85 73 17 39 78 fd ad ec dd b6 8b 23 63 ca 89 d3 e7 78 fe 7b 0f f1 9e 8f fc 45 1a a7 9e e3 8b 47 8f b1 d9 8d 71 e3 c4 28 17 2b c2 bb 6f bd 8e 97 de 3a c5 1b 67 2e f2 a1 0f 3c c0 db af be c4 b1 8b b3 dc f1 c0 8f 10 d4 2f f2 f6 c5 59 8e dc 7e 17 17 5f fb 3e 5f f8 dd 3f 26 be 34 c4 a7 ff ca 87 f9 ca 1f fd 3e 97 7c 05 e2 06 71 ec d3 56 fa f9 ad d1 ce c9 92 bb 00 f4 de e3 82 79 31 d0 c5 88 85 bc 2f db 50 cc b5 39 90 8a 88 8b 97 d2 0b 47 fa 12 61 b3 b5 19 50 a5 a5 f6 56 ac 2d 2f 54 7b 5e 49 26 fb cc e6 15 bf 1b d3 bb 4c 5e 65 c7 3d ff 69 8c 31 c6 ac 2e 53 54 a7 65 c6 ac 1c d3 bc 67 7a 8f aa 4f 5e d4 43 08 fb fa b9 e7 de Data Ascii: sgyO0=y\>wG;{4gfs9x#cx{EGq(+o:g.</Y~_>_?&4>\|qVy1/P9GaPV-/T{^I&L^e=i1.STegzO^C
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 3f fe 71 66 66 66 70 ce 71 f0 e0 41 c6 c7 c7 b9 7c f9 32 bf fc cb bf cc a9 53 a7 70 ce 35 d9 2c e4 a3 97 6b e0 c6 2c 8e 29 5b 6e 32 99 7a 53 dd 5c af c6 5c 9b 0c e4 0c b5 00 68 1a b4 21 78 49 cc b3 a8 e2 d2 61 d9 bc 80 4b a3 37 14 c5 11 20 59 c8 c7 02 eb 69 d7 32 9d 2f c7 7c b3 0f 6e a9 03 a9 a8 22 6e 5e 3f d0 f3 b0 f4 73 c3 31 d7 da 40 2a b8 4a 88 88 b8 58 75 d1 55 2e 11 01 27 1c 3e 7c 98 c3 87 6f e5 a5 97 5e 86 d8 e3 82 90 38 8e b8 7c f9 32 0f 3c f0 00 77 dd 75 17 b5 5a 8d 2f 7e f1 8b 5c bc 78 11 55 e5 c8 91 23 00 7c f6 b3 9f 65 76 76 96 30 0c 09 c3 90 89 89 09 06 06 06 f8 da d7 be c6 07 3f f8 41 2a 95 0a b3 b3 b3 f4 f7 f7 d3 68 34 18 18 18 a0 56 ab 71 f1 e2 45 8e 1f 3f ce b3 cf 3e cb 63 8f 3d c6 d4 d4 54 5b 03 96 ff 39 67 5e f9 73 ac 31 bd cb 94 1d db Data Ascii: ?qfffpqA\|2Sp5,k,)[n2zS\\h!xIaK7 Yi2/\|n"n^?s1@JXuU.'>\|o^8\|2<wuZ/~\xU#\|evv0?Ah4VqE?>c=T[9g^s1
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 8a 50 28 56 d2 ac a4 35 33 da dd 31 cf 1b 7a 07 92 20 48 10 86 00 08 8f 46 1b b4 bd a6 aa f2 e8 43 56 dd ae ae 2e 77 2f 40 3e f2 0d 33 a2 fb de 5b 79 f2 e4 c9 cc 93 27 ff 79 2a 0d 82 68 91 de f7 42 6a 15 1e 63 17 0f a1 62 c6 d5 33 32 b4 71 03 9c 0c 9f 05 4d 12 6c 47 b4 5f d2 7c 31 68 a2 90 6c f7 a8 bd f3 74 e3 4b 9a 2f 69 be a4 f9 74 68 a2 67 f1 cf 78 9a 2f 69 be a4 f9 22 d1 f4 eb 7d 06 7b 0a 87 d2 a2 eb 8d 4a d6 be b4 3c 3c f6 85 a7 49 bb c3 3c 2b 7c 1a a7 6f 7c e6 b3 87 6a a5 8a 42 d1 97 07 3a bc ca 5b c5 f5 4d 59 0f b4 8a fd 6d 4a 95 88 ff 2c 68 32 4b 90 93 f6 4b 9a cf 17 4d 64 e8 92 34 69 c6 f0 4b 9a 2f 69 be a4 f9 6c 68 e2 60 3a 09 be bf a4 f9 92 e6 8b 46 43 1f b7 32 c7 83 56 9a 5a b5 5a 4c f8 6b 18 3e 97 eb 94 3f cd 70 f5 da 55 2d 22 7d 9d c2 81 b2 Data Ascii: P(V531z HFCV.w/@>3[y'y*hBjcb32qMlG_\|1hltK/ithgx/i"}{J<<I<+\|o\|jB:[MYmJ,h2KKMd4iK/ilh`:FC2VZZLk>?pU-"}
2024-04-18 19:30:41 UTC	4096	IN	Data Raw: 54 71 4c 9b 40 aa 28 02 02 14 c6 04 e1 2d 8e 81 e5 ab 08 07 ba f5 b2 6f a8 b1 1c 00 9a 45 17 af c7 64 48 1b 70 d2 80 77 1a 40 49 03 0a 79 40 a5 2c 00 cf 92 35 cf d0 15 7a 45 32 f2 cc ab a7 62 43 99 fe ba af 48 ee 48 be ac 3e 53 a6 8e e2 e5 4c 5b ae 52 46 47 b2 e4 cb 8a 4f f2 ca 6a e3 b8 2c 79 93 81 2c ba 22 3e 65 64 2e 93 ef c6 be 9f ed fd 2d 13 d2 74 3c c9 ab 8c 17 39 6b 62 56 46 47 2d 0c f1 ad f7 39 04 55 4a b4 85 cd a2 c2 b7 5d 80 52 28 31 28 25 d6 b6 c5 58 a7 d5 4b f4 3b 0f 00 17 d9 a9 e8 33 09 12 f3 fa 7e d1 44 ad a8 8e d2 f4 76 73 db da 7a 30 a2 81 00 31 e1 a7 02 b0 b6 db 11 83 a7 20 30 0a c7 31 04 44 40 31 94 41 62 79 4b 60 3f 32 9c 06 f1 90 56 17 69 e5 4d a3 ed d2 48 34 9e a9 d0 09 65 a1 70 d8 fa 16 8d 21 08 81 1d cd 43 be da 58 1d 08 b0 e3 9c 9d Data Ascii: TqL@(-oEdHpw@Iy@,5zE2bCHH>SL[RFGOj,y,">ed.-t<9kbVFG-9UJ]R(1(%XK;3~Dvsz01 01D@1AbyK`?2ViMH4ep!CX
2024-04-18 19:30:41 UTC	98	IN	Data Raw: e4 04 6a e7 4e de 7d eb 75 c6 dd 1a 53 83 03 ac 8d 6d 65 78 68 00 d7 77 18 1d a9 e3 04 b3 38 7a 88 9b 8b 57 b9 f4 83 33 1c da bd 97 86 ab 08 da 66 d3 44 a2 08 b0 66 01 bc b4 cf ac 19 74 de 7a ce b4 3c 7a 05 56 69 df 23 da b4 f5 91 69 9e 98 78 be 79 65 4e 3e cb f3 d0 e7 f1 cb fa 1d 4f db 0b c8 Data Ascii: jN}uSmexhw8zW3fDftz<zVi#ixyeN>O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49983	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	615	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:40 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49984	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:40 UTC	963	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:41 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:41 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:41 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 19:30:41 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49987	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:41 UTC	1334	OUT	GET /wp-content/uploads/2021/09/Montserrat-Bold.woff HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.questor.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.questor.com.br/wp-content/uploads/elementor/css/post-15279.css?ver=1713207547 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_43W2WYML5H=GS1.1.1713468627.1.0.1713468627.0.0.0; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==; _clsk=7jxt0%7C1713468639357%7C2%7C1%7Cl.clarity.ms%2Fcollect
2024-04-18 19:30:41 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:41 GMT Content-Type: font/woff Content-Length: 132532 Connection: close Last-Modified: Mon, 18 Dec 2023 16:17:44 GMT ETag: "658070a8-205b4" Accept-Ranges: bytes
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 02 05 b4 00 12 00 00 00 04 9d 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 02 05 98 00 00 00 1c 00 00 00 1c 81 ce 65 57 47 44 45 46 00 01 30 ac 00 00 00 c1 00 00 00 fa 78 a3 7f 53 47 50 4f 53 00 01 51 6c 00 00 b4 2a 00 01 e6 5e 57 63 db 81 47 53 55 42 00 01 31 70 00 00 1f fc 00 00 40 46 66 c8 66 39 4f 53 2f 32 00 00 02 10 00 00 00 52 00 00 00 60 56 e5 a6 55 63 6d 61 70 00 00 0d 50 00 00 04 4f 00 00 06 1e 63 c4 62 61 63 76 74 20 00 00 18 cc 00 00 00 66 00 00 00 e4 33 99 19 3d 66 70 67 6d 00 00 11 a0 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 01 30 a4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 27 e0 00 00 e2 d1 00 01 d6 44 ee 97 f6 f9 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFFFTMeWGDEF0xSGPOSQl*^WcGSUB1p@Fff9OS/2R`VUcmapPOcbacvt f3=fpgmpmM$\|gasp0glyf'Dhead
2024-04-18 19:30:41 UTC	1398	IN	Data Raw: 9b c6 a0 26 0d 1a ea b7 2a b8 60 ff 2a 1d 52 41 1c 69 cc 0c ee f0 c6 60 94 e4 5f 82 9d 8c 7d 15 60 b7 ca 28 45 13 0f f9 8f 24 27 ba 52 d8 2c 7d 4c 07 e6 bc dc 39 dc 4d dc f8 02 e7 27 04 67 a8 28 7c 1e e0 bd 10 bc 1b 7d 07 5a 47 da 95 d4 79 17 9e 35 3d 43 fe 35 71 b0 d7 b4 f0 d7 45 ca 6a a7 dd d1 c9 e5 d0 58 f9 be 94 06 0d f4 f3 5b 5f 0a e2 da d1 8d c2 58 62 c9 14 d8 31 e4 f0 6d c9 bb 76 63 57 b3 88 11 35 5f d6 fc 1f b8 f8 6c a6 74 8c c6 4f 97 c4 09 79 b4 3f 88 7f 79 4a 5a 24 fd ff f3 e4 49 07 c9 61 17 4a 3b f2 e2 72 7f 83 b4 f1 1f 64 6c e2 21 e2 9a 0c d7 36 12 fb d5 19 37 12 43 68 5f 97 c7 5c e0 ee 7d 58 86 9a 3e f8 da 3d d2 c5 e5 f5 1e fe e5 27 72 63 12 cb 88 a5 e7 91 17 ea 77 9e 6a 29 23 e6 2e 33 df 44 5f af c9 8d 3c 0f c3 ef 0e 23 fe 1d 81 7f 69 41 cc Data Ascii: &`RAi`_}`(E$'R,}L9M'g(\|}ZGy5=C5qEjX[_Xb1mvcW5_ltOy?yJZ$IaJ;rdl!67Ch_\}X>='rcwj)#.3D_<#iA
2024-04-18 19:30:41 UTC	2796	IN	Data Raw: 10 84 20 14 43 11 86 61 08 47 84 cc 9c 11 e0 18 29 7b 4d 83 8e 51 88 84 81 28 8c c6 18 8c 45 34 62 f0 14 c6 21 16 71 18 8f 78 4c 40 02 9e c6 44 4c 42 22 26 63 0a a6 62 1a a6 e3 19 3c 8b e7 30 03 cf 63 26 66 21 09 b3 31 07 73 31 0f f3 f1 02 5e 44 32 5e c2 cb 78 05 af e2 35 2c c0 42 2c c2 62 2c c1 eb 78 03 29 48 45 1a 96 62 19 d2 91 81 4c 2c 47 96 7c ff 07 28 42 09 76 a3 02 87 51 83 63 68 40 23 dc 38 8e 8f f1 09 4e e1 24 4e e3 0c ce e1 2c 9a d0 8c 16 5c c4 05 b4 e2 32 2e e1 2a da 70 0d d7 29 1b eb 91 8b 15 c8 a3 5c 6c 42 3d d6 22 9f 2a f0 1e 56 d1 05 14 e3 08 35 63 03 5d a4 56 bc 89 8d 32 1d 4e d3 29 76 93 ce 63 35 b6 b2 eb 38 81 4f b1 13 39 58 43 4d 2c 89 5a e8 24 de c6 36 5a 81 6c 14 60 17 0e b1 10 16 4a a9 94 46 99 b4 9c 96 51 3a ae 50 3b 6e b1 69 94 4f Data Ascii: CaG){MQ(E4b!qxL@DLB"&cb<0c&f!1s1^D2^x5,B,b,x)HEbL,G\|(BvQch@#8N$N,\2.p)\lB="V5c]V2N)vc58O9XCM,Z$6Zl`JFQ:P;niO
2024-04-18 19:30:41 UTC	4096	IN	Data Raw: d4 03 dd 48 0c 4e 8c 4e 04 27 a6 24 62 12 71 89 84 44 72 22 33 91 9b d8 98 d8 95 b8 90 e8 4f dc 86 05 c3 22 61 b1 b0 2c 58 1e 8c 0a 63 c3 b8 b0 46 58 27 4c 0b b3 c2 1c 30 0f cc 0f db 3e 12 7c 24 f2 48 ec 11 d8 11 d4 91 ea 23 f3 47 bc 47 d6 8e ec 24 85 24 01 92 e2 92 18 49 81 e4 f0 64 60 32 24 19 91 9c 9e 9c 9d 9c 9f 4c 49 66 25 d7 26 0b 93 65 c9 5d c9 03 c9 a6 e4 d1 e4 e9 e4 85 e4 d5 e4 5d 78 28 3c 0a 0e 82 c3 e1 69 f0 2c 38 11 4e 85 b3 e1 5c f8 14 7c 0e ee 81 6f c0 f7 8e 86 1d 8d 3e 0a 3e 9a 72 14 73 14 77 94 70 94 7c d4 92 12 91 d2 7a 2c e2 98 f0 98 fc 98 fa 98 f6 98 e5 98 fd 98 eb d8 f2 b1 2d 44 08 02 80 00 23 90 88 0c 04 1e 41 44 50 11 35 c7 23 8f c7 1e 87 1d 47 1d c7 1d ef 3b be 87 0c 43 46 23 61 48 14 12 8b cc 41 92 90 1c 24 1f 29 46 ca 91 6a a4 1e Data Ascii: HNN'$bqDr"3O"a,XcFX'L0>\|$H#GG$$Id`2$LIf%&e]]x(<i,8N\\|o>>rswp\|z,-D#ADP5#G;CF#aHA$)Fj
2024-04-18 19:30:42 UTC	1496	IN	Data Raw: 4a f2 b9 81 22 60 64 64 cd cc 91 83 5d db 5b 3a a6 bb 6c 15 4b 1a e7 ad 6d 6c df 6b 8a dd 95 9c df 2f ae ca 4d c9 f6 e6 38 ac de ea e7 8b 72 9a ab 62 7b 7a 4a e6 f8 1a 97 14 b8 db 5c de 1e cf 40 67 c5 4c f7 96 e2 3a f7 50 53 17 51 39 2c 46 67 56 ba 27 cd 9c 2d 1a 72 9f 4a 2f b3 ba 8b a1 97 98 ae 4b 74 85 ad 7b 83 3f 51 59 f5 b8 4b 9f 48 a0 c3 74 8d 97 dc 1d b3 1e d6 f3 bb 88 c1 77 04 eb f1 3c 72 1d c5 a1 9c c0 a5 24 a0 1d 58 ce a8 39 00 6f b6 61 a0 0d fa 1b 65 3e f4 b7 c1 57 53 8c b4 12 c6 24 7c 5e 36 1c 93 fd be c6 c6 da 47 1b aa ab 1b 1e 1d fd eb a1 43 7f 9b bb ee 77 7b f7 fe 6e 1d ab 3b 1a ea ce 60 75 17 f3 ba 63 59 dd 04 4b 95 c7 b2 ca a5 5f 07 fd d1 f0 6b 1c 8a 4b 11 80 6a 38 d6 dc de 4c 4c f1 19 dd 50 53 d3 f0 68 5d a3 bf fe cb bc fa c1 bf dd 77 df Data Ascii: J"`dd][:lKmlk/M8rb{zJ\@gL:PSQ9,FgV'-rJ/Kt{?QYKHtw<r$X9oae>WS$\|^6GCw{n;`ucYK_kKj8LLPSh]w
2024-04-18 19:30:42 UTC	2796	IN	Data Raw: f4 ca ca 65 8e 5a 6f 1f 50 40 c3 ba 69 8c 2e 1a a7 35 56 95 01 2d 90 6b af 9c 93 28 60 c5 92 06 4e 13 e2 15 4a 03 94 16 a8 de cf e4 00 b1 26 ba 51 12 90 c5 a8 9e d0 9f 28 ea 25 84 5f c7 a3 97 bc 1e 0e b3 6c 02 4c 62 24 0c 93 97 cb 41 5e ce 04 85 53 f3 8a 46 c0 c5 1e 1c 87 8d ce 72 27 31 8b af e0 6e d1 81 7f 81 7f b2 7d db ae cb fb 2e 73 59 50 8f ce 02 bc 89 d9 48 16 4a 5a a0 a8 09 8b 64 05 a7 85 31 88 44 55 74 2a 93 5c f4 6f 3d fe 05 ad 45 74 10 d3 f6 dd db d1 2d 6d 12 da a6 51 5d 5e 00 ec dd 0c 90 dd d0 ee d3 fb 2e ef da b6 7d 27 b4 07 fc f2 43 92 0a f3 63 46 2e 54 ee 2f 8d 8d 01 e1 c3 28 0e 2c 33 61 37 13 80 8c e0 28 bf 1c 56 63 95 aa 4b d5 95 9e 9e ee 4a 77 3a 81 79 6b a0 23 49 15 be 48 ce cd 26 48 0b 6a 53 84 99 f5 d3 a2 02 6b 56 4d 49 51 47 da b6 bc Data Ascii: eZoP@i.5V-k(`NJ&Q(%_lLb$A^SFr'1n}.sYPHJZd1DUt*\o=Et-mQ]^.}'CcF.T/(,3a7(VcKJw:yk#IH&HjSkVMIQG
2024-04-18 19:30:42 UTC	2796	IN	Data Raw: 87 3b 5a 5b 77 04 d6 55 3f 3a 56 33 6a ed ee ae ad 85 0f b1 b5 ec 9a 31 63 57 4b 6b 3d b9 2e 7e dc 28 ce 9e de dc 3c 9d 7e 18 ed 64 03 1e ea d8 7c 83 0e 96 62 8c 89 a6 0a 97 62 39 05 22 b6 7b 99 6b 39 d5 c1 2d a7 94 48 0d 9c bb be 98 dd f4 c1 a1 ee ee 43 b3 67 ed c9 d8 96 d7 5b d7 d7 57 d7 97 bb 2d 63 cf 2c 5d db ee be be dd 6d 6d 4d 8d 9d 7d 2d 2d 7d 9d 4d fe 76 3a 0f 36 68 7f b5 34 0f 9f f1 47 27 80 75 29 b0 29 90 90 4e 91 c4 b0 ce 4c 82 70 4c 4e 0b 21 5d c3 76 d9 58 e1 94 a0 0c e9 d2 13 8d c2 bb 18 90 42 8c 13 91 9e e8 b2 e9 75 5c 23 2c 0f f7 08 e8 49 b8 c1 bf fa d1 ea b5 5d 14 f1 5d a3 d5 81 9e 9e 9a da 9e 9e 5a 72 7d dc 5c df da bc 7b c6 8c dd cd 8d 58 3d 7e 34 84 74 c2 70 3e 00 38 37 a1 4c ea 8d 34 81 74 05 0e 8b a2 a8 ce df 89 24 c5 8d 5a 70 c2 30 Data Ascii: ;Z[wU?:V3j1cWKk=.~(<~d\|bb9"{k9-HCg[W-c,]mmM}--}Mv:6h4G'u))NLpLN!]vXBu\#,I]]Zr}\{X=~4tp>87L4t$Zp0
2024-04-18 19:30:42 UTC	1398	IN	Data Raw: fa 0a ad e6 b5 69 99 d9 e9 19 e9 b1 f1 19 fe ca e9 c5 ae a6 e9 8b cd 29 6b 3c 59 16 73 6a 7c 7c 56 4b 4d 8a 25 4e 1b 6d 4b c9 b4 24 68 a2 ed 46 6a 2f df 45 46 f0 7f 93 1b 89 02 3e 2f f9 6b 05 e4 0e 8e 93 3f 90 2f b0 7d c8 2a 34 c2 fc bf 83 79 58 ad 2a f7 10 8d ba 02 83 69 c9 02 45 54 88 46 83 21 b5 86 8a 28 4d 34 d6 0a 1a ed 68 14 cb 10 19 88 62 a6 93 8e 5a 77 bd d9 d9 d4 76 ca ae ca ae 2c 2b 2d cc cf 71 85 ed 5e c6 00 b7 a1 bc ee df ec 60 de aa a2 ca f1 14 ce 53 43 43 a7 97 2c 39 35 7f c1 e9 c5 7d fb 03 1d fb a6 4f df d7 d9 79 57 5f f1 22 9f 6f 51 5d cd dc 94 b9 e9 be 1c 1f fc 4b 87 ff d6 08 0b 4e 2f 5a 74 7a c1 fc 53 8b 17 9f 59 d0 d8 7d 77 df f4 7d 81 ae 03 7d 7d 07 ba 66 97 cd af ae 9e 5f e6 cd 2f 2f f2 15 16 fa 8a ca 0a bc 8c b7 59 f0 19 bc 82 dc 40 Data Ascii: i)k<Ysj\|\|VKM%NmK$hFj/EF>/k?/}4yXiETF!(M4hbZwv,+-q^`SCC,95}OyW_"oQ]KN/ZtzSY}w}}}f_//Y@
2024-04-18 19:30:42 UTC	2796	IN	Data Raw: ba dc 18 7c 01 af 1f ff 40 a6 53 bc 35 ac dc c3 cb 83 3f 87 f2 35 61 e5 45 52 f9 bf a0 bc 97 d5 cf cb ed 52 3d d4 7f 93 cd 72 58 73 e2 68 79 3d 58 bd 72 7f de 61 f3 59 2a cd e7 17 11 c7 c3 4d c1 c9 ea f7 4a e3 7d 7b d2 72 cf 14 e5 45 11 e5 f7 2b e5 de 88 f2 03 4a b9 9d 96 43 2f e7 a2 43 58 24 5e 58 20 9a 57 74 2c 6e 1d 8c 11 9e a5 e6 33 e1 7d 3b 67 ee de 3d 73 27 fb c6 0b 76 cd d9 b3 67 ce 2e f6 2d d5 f9 06 d4 49 94 3a fd 42 03 2b 67 f1 3c ac 6f 55 d2 58 5e 9b b4 dc 33 45 79 51 44 f9 01 a5 dc ce cb 79 1c 0b 83 af 93 ea d9 1d 11 e7 46 e3 91 cb fc 25 72 c6 cb 52 9a f2 c0 e3 b7 42 a1 6e 09 09 20 f0 4c 09 60 cb d0 34 37 10 06 61 3e 74 ae 48 18 bd b7 46 bb 9d 3e 2c 45 bb ad a3 51 5b 1b eb 37 91 ab dd e2 bd 34 83 f0 26 f5 2b 83 8d f8 28 f0 e6 3c 74 9a 3b 20 e3 Data Ascii: \|@S5?5aERR=rXshy=XraY*MJ}{rE+JC/CX$^X Wt,n3};g=s'vg.-I:B+g<oUX^3EyQDyF%rRBn L`47a>tHF>,EQ[74&+(<t;
2024-04-18 19:30:42 UTC	2796	IN	Data Raw: 7b 25 7f 3a b7 e7 df 57 ec f9 67 25 fd 93 c3 af 50 e0 7d 11 f0 3f 52 e0 9f 8b 80 0f f9 eb 4b 23 e0 43 7e 84 73 11 f0 ef 72 78 b6 27 f5 1a db 93 c2 f2 9e 94 fc 2e f3 d1 0e 4a 3e da c9 db 2a 9c a2 ad 17 c9 5d 52 2e 71 2a cb 9f b5 a2 52 7f 91 31 16 8c 20 1a db 0d aa 1b 0d ab 16 d0 6e 7e 70 da 08 8b 01 6e 62 7e 0b 2b b2 da 52 1d b9 b2 18 ba c5 fc a1 07 39 85 02 80 bf b1 78 b0 a7 3e 33 dd 9e 66 32 54 58 fc 9d 35 7b 1e a0 e9 c7 20 8a b6 6e 39 66 cd a8 ca 30 a6 51 c3 a6 ce 5b 5f 12 f7 cc 03 4a 3e 32 92 fa 9c 4a 76 11 b3 d2 e7 d7 84 87 59 39 cb 2b 66 63 ac e1 74 2e 6c 54 74 fb 73 cc 07 31 8f e1 ed 2c 3d 3a 48 9a 6b c9 36 be 65 2f a4 88 ee 85 4c e2 a3 39 2b f9 2f 38 fc 01 05 de ce e1 79 4e 2f ab a7 5e 5a 9b 07 58 39 8f a7 a5 f5 2c 90 d6 66 43 18 fc 19 05 de 1d 0e Data Ascii: {%:Wg%P}?RK#C~srx'.J>]R.qR1 n~pnb~+R9x>3f2TX5{ n9f0Q[_J>2JvY9+fct.lTts1,=:Hk6e/L9+/8yN/^ZX9,fC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49986	172.217.215.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:41 UTC	624	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:41 UTC	2088	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Thu, 18 Apr 2024 19:30:41 GMT Date: Thu, 18 Apr 2024 19:30:41 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=2w1i86bxy8I; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=smWdGqyvsgY; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 19:30:41 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 19:30:41 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:41 UTC	1062	IN	Data Raw: 34 31 66 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 30 61 66 36 65 33 32 37 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 49 66 72 61 6d 65 44 65 66 61 75 6c 74 52 65 66 65 72 72 65 72 50 6f 6c 69 63 79 27 5d 20 3d 20 20 74 72 75 65 20 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: 41fvar scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScrip
2024-04-18 19:30:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49991	172.217.215.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:42 UTC	773	OUT	GET /s/player/0af6e327/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:42 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 220979 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 18 Apr 2024 10:39:06 GMT Expires: Fri, 18 Apr 2025 10:39:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 31896 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:42 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 Data Ascii: ;function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 77 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6a 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f Data Ascii: ArrayLike");}function x(a){if(!(a instanceof Array)){a=w(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function fa(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ja="function"==typeof Object.assign?Object.assign:functio
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 4b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 68 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 69 3d 7b 6a 63 3a 62 2c 75 63 3a 21 30 7d 3b 61 2e 67 3d 61 2e 6f 7c 7c 61 2e 75 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 75 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 63 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 7d 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 2c 63 29 7b 61 2e 6f 3d 62 3b 76 6f 69 64 20 30 21 3d 63 26 26 28 Data Ascii: K=function(a){this.h=a};function ua(a,b){a.i={jc:b,uc:!0};a.g=a.o\|\|a.u}sa.prototype.return=function(a){this.i={return:a};this.g=this.u};function A(a,b,c){a.g=c;return{value:b}}sa.prototype.B=function(a){this.g=a};function va(a,b,c){a.o=b;void 0!=c&&(
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 61 28 61 2e 67 29 3b 61 2e 67 2e 6c 3f 62 3d 41 61 28 61 2c 61 2e 67 2e 6c 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 67 2e 4b 29 3a 28 75 61 28 61 2e 67 2c 62 29 2c 62 3d 42 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 7a 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f Data Ascii: hrow=function(b){ta(a.g);a.g.l?b=Aa(a,a.g.l["throw"],b,a.g.K):(ua(a.g,b),b=Ba(a));return b};this.return=function(b){return za(a,b)};this[Symbol.iterator]=function(){return this}}function Ea(a){function b(d){return a.next(d)}function c(d){return a.thro
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6b 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6b 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 62 62 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f Data Ascii: is.i(function(){throw g;})};b.prototype.l=function(){function g(k){return function(m){l\|\|(l=!0,k.call(h,m))}}var h=this,l=!1;return{resolve:g(this.bb),reject:g(this.o)}};b.prototype.bb=function(g){if(g===this)this.o(new TypeError("A Promise cannot reso
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 67 2e 76 62 28 68 2e 72 65 73 6f 6c Data Ascii: tomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.i;return l(g)};b.prototype.O=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new c;b.prototype.eb=function(g){var h=this.l();g.vb(h.resol
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 61 7d 29 3b 0a 76 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6c 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 77 28 6c 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 22 6f 62 Data Ascii: bject.setPrototypeOf",function(a){return a\|\|pa});v("WeakMap",function(a){function b(l){this.g=(h+=Math.random()+1).toString();if(l){l=w(l);for(var k;!(k=l.next()).done;)k=k.value,this.set(k[0],k[1])}}function c(){}function d(l){var k=typeof l;return"ob
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 76 69 6f 75 73 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 68 5b 31 5d 3b 72 65 74 75 72 6e 20 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6b 29 7b 66 6f 72 28 3b 6b 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6b 3d 6b 2e 70 72 65 76 69 6f 75 73 3b 66 6f 72 28 3b 6b 2e 6e 65 78 74 21 3d 6b 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6b 3d 6b 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6c 28 6b 29 7d 3b 6b 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 22 6f 62 6a 65 63 74 22 3d 3d 6b 7c 7c 22 66 Data Ascii: vious=h.next=h.head=h}function c(h,l){var k=h[1];return ea(function(){if(k){for(;k.head!=h[1];)k=k.previous;for(;k.next!=k.head;)return k=k.next,{done:!1,value:l(k)};k=null}return{done:!0,value:void 0}})}function d(h,l){var k=l&&typeof l;"object"==k\|\|"f
2024-04-18 19:30:42 UTC	1255	IN	Data Raw: 68 2c 76 61 6c 75 65 3a 6c 7d 2c 6b 2e 6c 69 73 74 2e 70 75 73 68 28 6b 2e 65 6e 74 72 79 29 2c 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 2e 6e 65 78 74 3d 6b 2e 65 6e 74 72 79 2c 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 6b 2e 65 6e 74 72 79 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 65 6e 74 72 79 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 65 6e 74 72 79 2e 70 72 65 76 69 Data Ascii: h,value:l},k.list.push(k.entry),this[1].previous.next=k.entry,this[1].previous=k.entry,this.size++);return this};e.prototype.delete=function(h){h=d(this,h);return h.entry&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.entry.previ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49992	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:42 UTC	652	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468638019&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468635764&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:42 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:42 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:42 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49995	216.239.36.181	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:42 UTC	1230	OUT	POST /g/collect?v=2&tid=G-WZY91LD4XC&gtm=45je44f0v874940361z8854767554za200&_p=1713468632977&gcd=13l3l3l3l1&npa=0&dma=0&cid=990543739.1713468623&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713468622&sct=1&seg=1&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&dt=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&en=page_view&_et=1&tfd=13150 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:42 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.questor.com.br Date: Thu, 18 Apr 2024 19:30:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49872	172.67.75.61	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:42 UTC	763	OUT	POST /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fquestor-zen%2F&time=1713468641&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:42 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:42 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate access-control-allow-origin: * vary: Origin access-control-max-age: 1728000 x-request-id: 95d6070c-4004-4d57-a8f3-b5fb956043c0 access-control-allow-methods: GET, PUT, POST, OPTIONS etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.027623 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZpFxr%2FkoESddmxtS%2FoOB7juvbDZS15fC3nTyTXSL15fUmo6B8HioAW%2Fmh9ATDfq%2B1vZEewq6h35to7epNafBRtqc7q9Y7ZOfiGrPxOoFd9vOBgRlPwDN6IVADCQNeQyu9XMaQDA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876712294c3fad5c-ATL
2024-04-18 19:30:42 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:30:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49997	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:43 UTC	656	OUT	POST /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive Content-Length: 228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:43 UTC	228	OUT	Data Raw: 75 72 6c 3d 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 26 74 6f 6b 65 6e 3d 38 38 32 38 66 66 39 30 38 64 35 30 30 36 39 65 61 39 31 32 31 32 62 30 64 38 33 36 62 62 31 65 26 74 69 74 6c 65 3d 51 75 65 73 74 6f 72 25 32 30 5a 65 6e 25 32 30 2d 25 32 30 51 75 65 73 74 6f 72 25 32 30 2d 25 32 30 73 69 73 74 65 6d 61 73 25 32 30 63 6f 6e 74 25 43 33 25 41 31 62 65 69 73 25 32 43 25 32 30 65 6d 70 72 65 73 61 72 69 61 69 73 25 32 30 65 25 32 30 63 6f 72 70 6f 72 61 74 69 76 6f 73 26 63 6c 69 65 6e 74 5f 69 64 3d 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: url=www.questor.com.br%2Fquestor-zen%2F&token=8828ff908d50069ea91212b0d836bb1e&title=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&client_id=53b33b18-bcee-43ee-b003-f4993221269f
2024-04-18 19:30:43 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:43 GMT Content-Type: text/html;charset=utf-8 Content-Length: 36 Connection: close Access-Control-Allow-Origin: https://www.questor.com.br Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: *, Content-Type, Accept, AUTHORIZATION, Cache-Control Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1728000 Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma Set-Cookie: _rdtrk=53b33b18-bcee-43ee-b003-f4993221269f; domain=.rdstation.com.br; expires=Sun, 01 Jan 2034 00:00:00 -0000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15724800; includeSubDomains X-Robots-Tag: noindex, nofollow
2024-04-18 19:30:43 UTC	36	IN	Data Raw: 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: 53b33b18-bcee-43ee-b003-f4993221269f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49998	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:43 UTC	1022	OUT	GET /embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:44 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 19:30:44 GMT Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 5a 68 66 51 35 61 71 72 35 51 35 43 38 74 70 31 5f 56 47 63 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="NZhfQ5aqr5Q5C8tp1_VGcA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f Data Ascii: _cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button":true,"disable_
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 70 61 62 6c 65 5f 61 64 73 5f 66 6f 72 5f 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 Data Ascii: ng_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"e
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 65 6d 62 65 64 73 5f 76 69 64 65 6f 5f 64 65 74 61 69 6c 73 22 3a 74 72 75 65 2c 22 6e Data Ascii: _layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_logging":true,"mweb_enable_embeds_video_details":true,"n
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 Data Ascii: ger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_g
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 30 30 30 30 2c 22 73 6c 6f 77 5f 63 6f 6d 70 72 65 73 73 69 6f Data Ascii: k_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":3888000000000,"slow_compressio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49999	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:43 UTC	1022	OUT	GET /embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:44 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 19:30:44 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 50 4c 4e 65 62 51 53 65 67 74 71 61 5f 54 56 4a 79 6e 63 36 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="kPLNebQSegtqa_TVJync6g">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f Data Ascii: _cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button":true,"disable_
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 70 61 62 6c 65 5f 61 64 73 5f 66 6f 72 5f 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 Data Ascii: ng_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"e
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 65 6d 62 65 64 73 5f 76 69 64 65 6f 5f 64 65 74 61 69 6c 73 22 3a 74 72 75 65 2c 22 6e Data Ascii: _layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_logging":true,"mweb_enable_embeds_video_details":true,"n
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 Data Ascii: ger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_g
2024-04-18 19:30:44 UTC	1592	IN	Data Raw: 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 30 30 30 30 2c 22 73 6c 6f 77 5f 63 6f 6d 70 72 65 73 73 69 6f Data Ascii: k_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":3888000000000,"slow_compressio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50000	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:43 UTC	663	OUT	GET /popup/show.json?account_id=703230&uniq=_8h8a2n6cj&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:44 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:30:44 GMT Connection: close
2024-04-18 19:30:44 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50001	104.26.10.199	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	503	OUT	GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fquestor-zen%2F&time=1713468641&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:44 UTC	817	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:44 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate vary: Origin x-request-id: df77f4db-f877-483d-8ba5-76c69c92138f etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.027226 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TawPGwr5nZvS3GyhXlpGwSS6Nk9iOThbbH7NGas2jm6ccXQ%2B8v0pfZF8%2FAHSmxV3tHuGurGZ63rk1n6nEQ5OgSMwHp4ZGhnYx9lJwCua7iRMyEf%2FTpP83Njtbzi6kmBqg3xf4v0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87671231d8b5add2-ATL
2024-04-18 19:30:44 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:30:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50002	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	360	OUT	GET /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:44 UTC	129	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 19:30:44 GMT Content-Type: / Transfer-Encoding: chunked Connection: close
2024-04-18 19:30:44 UTC	2371	IN	Data Raw: 39 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 0a 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 0a 20 20 20 20 20 20 7d 29 3b 20 76 61 72 20 66 20 3d 20 64 Data Ascii: 937<!DOCTYPE html><html><head> <meta charset="UTF-8"> ... Google Tag Manager --> <script>(function (w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50003	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	903	OUT	GET /s/player/0af6e327/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:44 UTC	682	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 381443 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 11:30:49 GMT Expires: Thu, 17 Apr 2025 11:30:49 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 115195 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:44 UTC	573	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 79 74 70 2d 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 Data Ascii: deo-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masth
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 65 38 65 38 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 32 34 32 34 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 3a 6e 6f 74 28 2e 79 74 70 2d 74 6f 75 63 68 2d 6d 6f 64 65 29 20 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: mb{background-color:#8e8e8e;border:1px solid #424242;border-radius:5px}.ytp-big-mode:not(.ytp-touch-mode) ::-webkit-scrollbar-thumb{border-radius:8px}.html5-video-container{z-index:10;position:relative}.ytp-embed-error .html5-video-container{display:none}
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 2c 74 6f 70 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 34 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 35 33 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 36 30 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 Data Ascii: ransition:bottom .25s cubic-bezier(0,0,.2,1),top .25s cubic-bezier(0,0,.2,1)}.ytp-small-mode .ytp-player-content{bottom:49px}.ytp-embed .ytp-player-content{bottom:53px}.ytp-embed:not(.ad-showing) .ytp-player-content:not(.ytp-upnext){top:60px}.ytp-big-mode
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 74 28 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 29 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 68 69 64 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 36 30 70 78 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 Data Ascii: t(.ytp-ad-overlay-open) .ytp-iv-player-content,.ytp-big-mode.ytp-hide-controls .ytp-iv-player-content{bottom:24px}.ytp-big-mode.ytp-ad-overlay-open .ytp-player-content{bottom:160px}.ytp-button{border:none;background-color:transparent;padding:0;color:inher
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 72 69 67 68 74 3a 30 7d 2e 79 74 70 2d 67 76 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2c 2e 79 74 70 2d 67 76 6e 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 74 6f 70 3a 32 30 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 35 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b Data Ascii: on:column;flex-direction:column;right:0}.ytp-gvn .ytp-chrome-top,.ytp-gvn.ytp-big-mode .ytp-chrome-top{top:20px}.ytp-chrome-bottom{bottom:0;height:48px;width:100%;z-index:59;padding-top:3px;text-align:left;direction:ltr}.ytp-small-mode .ytp-chrome-bottom{
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d Data Ascii: :0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0 4px}.ytp-embed .ytp-chrome-controls .ytp-button,.ytp-embed .ytp-replay-button{width:40px;padding:0}.ytp-embed .ytp-chrome-controls .ytp-
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 6f 72 Data Ascii: absolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:not(.ytp-play-button-playlist)::befor
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 72 65 64 2d 69 6e 64 69 63 61 74 6f 72 2c 23 66 66 61 35 30 30 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 Data Ascii: chrome-controls .ytp-button[aria-pressed]:after{background-color:var(--yt-spec-red-indicator,#ffa500)}.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed]:after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-controls .ytp-button[aria-pressed]:after
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 70 61 72 74 79 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2d 62 75 74 74 6f Data Ascii: aria-pressed]:after{background-color:#ddd}.ytp-color-party .ytp-chrome-controls .ytp-button[aria-pressed]:after{-webkit-animation:ytp-party-background-color .1s linear infinite;animation:ytp-party-background-color .1s linear infinite}.ytp-chrome-top-butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50006	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	453	OUT	GET /popup/show.json?account_id=703230&uniq=_8h8a2n6cj&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:44 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:30:44 GMT Connection: close
2024-04-18 19:30:44 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50008	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	907	OUT	GET /s/player/0af6e327/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:44 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 58775 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 20:54:57 GMT Expires: Thu, 17 Apr 2025 20:54:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 81347 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:44 UTC	568	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license//
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 67 2d 66 69 6c 6c 22 2c 58 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d 32 Data Ascii: g-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 20 2d 30 2e 37 2c Data Ascii: -0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99 -0.7,
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 38 20 2e 31 39 2c 2e Data Ascii: 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.68 .19,.
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 7b 62 3d 61 3b 76 61 72 20 65 3d 64 2c 66 3d 63 5b 64 5d 3b 30 3c 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 3f 62 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 66 29 3a 62 5b 65 5d 3d 66 7d 7d 7d 2c 66 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 63 3b 0a 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 64 3f 61 5b 62 5d 3d 63 3a 63 72 62 28 61 2c 62 2c 63 29 7d 2c 67 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 61 72 62 3b 0a 61 2e 5f 5f 64 65 66 61 75 6c 74 3d 66 72 62 3b 61 2e 73 74 79 6c 65 3d 65 72 62 3b 72 65 74 75 72 6e 20 61 7d 2c 68 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 64 5b 62 5d 7c 7c 64 2e 5f 5f 64 65 66 Data Ascii: {b=a;var e=d,f=c[d];0<=e.indexOf("-")?b.setProperty(e,f):b[e]=f}}},frb=function(a,b,c){var d=typeof c;"object"===d\|\|"function"===d?a[b]=c:crb(a,b,c)},grb=function(){var a=new arb;a.__default=frb;a.style=erb;return a},hrb=function(a,b,c,d){(d[b]\|\|d.__def
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 63 3d 28 64 3d 22 73 76 67 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3a 22 6d 61 74 68 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 38 2f 4d 61 74 68 2f 4d 61 74 68 4d 4c 22 3a 6e 75 6c 6c 3d 3d 64 7c 7c 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3d 3d 3d 65 35 28 64 29 2e 42 3f 6e 75 6c 6c 3a 64 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 29 3f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 64 2c 61 29 3a 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 6b 72 62 28 63 2c 61 2c 62 29 2c 61 3d 63 29 2c 68 35 2e 63 72 65 61 74 65 64 2e 70 75 73 68 28 61 29 2c 63 3d 61 29 3b 61 3d 63 3b 69 66 28 61 21 3d 3d 6a 35 29 7b 69 66 28 30 3c 3d 6d 35 2e 69 Data Ascii: c=(d="svg"===a?"http://www.w3.org/2000/svg":"math"===a?"http://www.w3.org/1998/Math/MathML":null==d\|\|"foreignObject"===e5(d).B?null:d.namespaceURI)?c.createElementNS(d,a):c.createElement(a),krb(c,a,b),a=c),h5.created.push(a),c=a);a=c;if(a!==j5){if(0<=m5.i
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 63 74 2e 69 73 28 61 2c 62 29 7d 2c 73 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 72 62 3b 0a 74 72 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 2c 75 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 59 6c 3d 21 30 3b 0a 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 62 6b 29 7b 76 61 72 20 62 3d 74 35 3b 74 35 3d 21 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 67 2e 75 28 61 2e 62 6b 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 2e 59 6c 7c 7c 75 72 62 28 65 29 7d 7d 66 69 6e 61 6c 6c 79 7b 74 35 3d 62 7d 7d 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 28 66 3d 61 2e 6a 57 29 7c 7c 66 2e 63 61 6c 6c 28 61 2c 61 29 7d 2c 76 72 62 3d 66 75 6e 63 74 69 6f Data Ascii: ct.is(a,b)},s5=function(a){var b=trb;trb=a;return b},urb=function(a){a.Yl=!0;if(void 0!==a.bk){var b=t5;t5=!0;try{for(var c=g.u(a.bk),d=c.next();!d.done;d=c.next()){var e=d.value;e.Yl\|\|urb(e)}}finally{t5=b}}var f;null==(f=a.jW)\|\|f.call(a,a)},vrb=functio
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 7b 7d 3b 65 2e 70 42 3d 28 61 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 72 62 28 65 29 7d 2c 61 2e 57 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 65 2e 4d 73 29 7b 69 66 28 74 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 63 68 65 64 75 6c 65 72 73 20 63 61 6e 6e 6f 74 20 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 65 78 65 63 75 74 65 20 77 61 74 63 68 65 73 20 77 68 69 6c 65 20 73 63 68 65 64 75 6c 69 6e 67 2e 22 29 3b 0a 65 2e 59 6c 3d 21 31 3b 69 66 28 21 65 2e 57 58 7c 7c 7a 72 62 28 65 29 29 7b 65 2e 57 58 3d 21 30 3b 76 61 72 20 66 3d 76 72 62 28 65 29 3b 74 72 79 7b 65 2e 5a 79 28 29 2c 65 2e 5a 79 3d 42 72 62 2c 65 2e 4d 73 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 79 72 62 28 65 2c 66 29 Data Ascii: {};e.pB=(a.notify=function(){return urb(e)},a.WF=function(){if(null!==e.Ms){if(t5)throw Error("Schedulers cannot synchronously execute watches while scheduling.");e.Yl=!1;if(!e.WX\|\|zrb(e)){e.WX=!0;var f=vrb(e);try{e.Zy(),e.Zy=Brb,e.Ms(d)}finally{yrb(e,f)
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 3d 4b 72 62 26 26 28 62 2e 65 44 7c 7c 28 62 2e 65 44 3d 5b 5d 29 2c 62 2e 65 44 2e 70 75 73 68 28 61 29 29 7d 2c 79 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 61 3b 0a 74 68 69 73 2e 43 3d 21 31 7d 2c 4d 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 7a 35 26 26 7a 35 2e 75 77 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 69 76 65 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 75 73 65 53 74 61 74 65 20 6f 72 20 6f 74 68 65 72 20 6d 65 6d 6f 69 7a 61 74 69 6f 6e 20 62 61 73 65 64 20 68 6f 6f 6b 73 2e 22 29 3b 0a 72 65 74 75 72 6e 20 41 35 7d 2c 4e 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7a 35 3d 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 Data Ascii: =Krb&&(b.eD\|\|(b.eD=[]),b.eD.push(a))},y5=function(a){this.props=a;this.C=!1},Mrb=function(){if(z5&&z5.uw)throw Error("Reactive components are not allowed to use useState or other memoization based hooks.");return A5},Nrb=function(a){z5=(null==a?void 0:a
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 47 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 35 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 61 2c 0a 62 5d 2e 63 6f 6e 63 61 74 28 67 2e 71 61 28 67 2e 49 61 2e 61 70 70 6c 79 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 2c 48 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 46 35 3b 0a 46 35 3d 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 29 7d 66 69 6e 61 6c 6c 79 7b 46 35 3d 63 7d 7d 2c 49 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 22 29 7d 2c 4a 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 53 74 72 69 6e 67 28 61 29 29 3b 0a 61 2e 5f 69 73 Data Ascii: G5=function(a,b){return F5.apply(null,[a,b].concat(g.qa(g.Ia.apply(2,arguments))))},H5=function(a,b){var c=F5;F5=a;try{return b()}finally{F5=c}},I5=function(){return document.createTextNode("")},J5=function(a){a=document.createTextNode(String(a));a._is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50007	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	918	OUT	GET /s/player/0af6e327/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:44 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 327826 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 13:17:22 GMT Expires: Thu, 17 Apr 2025 13:17:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 108802 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:44 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 66 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 Data Ascii: );function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(thi
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c Data Ascii: th)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ma(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function na(a,b){return Object.prototype.hasOwnProperty.call
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 77 61 3d 73 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 71 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 77 61 29 77 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e Data Ascii: r(a+" is not extensible");return a}:null}var wa=sa;function w(a,b){a.prototype=qa(b.prototype);a.prototype.constructor=a;if(wa)wa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 6d 3d 6e 75 6c 6c 2c 7a 61 28 61 2e 68 2c 67 29 2c 49 61 28 61 29 7d 61 2e 68 2e 6d 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 49 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 Data Ascii: TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.u=!1,e;var f=e.value}catch(g){return a.h.m=null,za(a.h,g),Ia(a)}a.h.m=null;d.call(a.h,f);return Ia(a)}function Ia(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.u=!1,{value:b.v
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 75 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 0a 69 66 Data Ascii: eturn!1}}:null});u("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.u=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 28 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 66 61 28 29 3b 74 68 69 73 2e 49 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 55 28 29 29 7b 76 61 72 20 68 3d 66 61 2e 63 6f Data Ascii: (1,g)};b.prototype.D=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.fa();this.I()};b.prototype.fa=function(){var g=this;e(function(){if(g.U()){var h=fa.co
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 2e 57 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 75 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d Data Ascii: .Wb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.u=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)}
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 28 6b 29 3b 6e 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6e 61 28 6b 2c Data Ascii: (k);n.set(l,4);return!n.has(k)&&4==n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!na(k,
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 Data Ascii: n(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(v([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50009	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:44 UTC	906	OUT	GET /s/player/0af6e327/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:44 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2546025 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 10:42:13 GMT Expires: Thu, 17 Apr 2025 10:42:13 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 118111 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:44 UTC	565	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 Data Ascii: ission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 Data Ascii: without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 62 61 2c 6f 65 2c 71 65 2c 43 62 61 2c 41 62 61 2c 42 62 61 2c 45 62 61 2c 46 62 61 2c 79 65 2c 7a 65 2c 48 62 61 2c 42 65 2c 49 62 61 2c 4a 62 61 2c 4b 62 61 2c 4f 62 61 2c 4e 62 61 2c 4b 65 2c 4d 65 2c 50 62 61 2c 52 65 2c 57 65 2c 58 65 2c 51 62 61 2c 0a 24 65 2c 66 66 2c 67 66 2c 52 62 61 2c 53 62 61 2c 54 62 61 2c 55 62 61 2c 72 66 2c 77 66 2c 42 66 2c 58 62 61 2c 5a 62 61 2c 59 62 61 2c 44 66 2c 48 66 2c 24 62 61 2c 45 66 2c 52 66 2c 71 66 2c 58 66 2c 62 63 61 2c 5a 66 2c 59 66 2c 70 66 2c 66 67 2c 63 63 61 2c 67 67 2c 68 67 2c 69 67 2c 64 63 61 2c 66 63 61 2c 68 63 61 2c 77 67 2c 78 67 2c 79 67 2c 6c 63 61 2c 6e 63 61 2c 41 67 2c 6f 63 61 2c 7a 67 2c 73 63 61 2c 6e 67 2c 6a 63 61 2c 75 63 61 2c 72 63 61 2c 70 63 61 2c 71 63 61 2c 76 63 61 2c 74 63 Data Ascii: ba,oe,qe,Cba,Aba,Bba,Eba,Fba,ye,ze,Hba,Be,Iba,Jba,Kba,Oba,Nba,Ke,Me,Pba,Re,We,Xe,Qba,$e,ff,gf,Rba,Sba,Tba,Uba,rf,wf,Bf,Xba,Zba,Yba,Df,Hf,$ba,Ef,Rf,qf,Xf,bca,Zf,Yf,pf,fg,cca,gg,hg,ig,dca,fca,hca,wg,xg,yg,lca,nca,Ag,oca,zg,sca,ng,jca,uca,rca,pca,qca,vca,tc
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 2c 79 66 61 2c 54 6d 2c 7a 66 61 2c 56 6d 2c 41 66 61 2c 44 66 61 2c 57 6d 2c 58 6d 2c 59 6d 2c 5a 6d 2c 46 66 61 2c 63 6e 2c 47 66 61 2c 64 6e 2c 65 6e 2c 66 6e 2c 48 66 61 2c 49 66 61 2c 4b 6e 2c 4a 66 61 2c 4c 6e 2c 4d 6e 2c 4d 66 61 2c 4f 66 61 2c 50 66 61 2c 52 66 61 2c 51 66 61 2c 53 66 61 2c 4f 6e 2c 54 66 61 2c 52 6e 2c 56 6e 2c 57 6e 2c 58 6e 2c 57 66 61 2c 58 66 61 2c 59 66 61 2c 59 6e 2c 24 66 61 2c 5a 6e 2c 61 67 61 2c 63 67 61 2c 66 67 61 2c 65 67 61 2c 64 67 61 2c 69 67 61 2c 67 67 61 2c 61 6f 2c 63 6f 2c 6a 67 61 2c 65 6f 2c 66 6f 2c 62 6f 2c 67 6f 2c 68 6f 2c 69 6f 2c 6b 6f 2c 6b 67 61 2c 6c 6f 2c 6d 6f 2c 6d 67 61 2c 6c 67 61 2c 6e 67 61 2c 6f 67 61 2c 70 67 61 2c 72 67 61 2c 6e 6f 2c 6f 6f 2c 70 6f 2c 71 6f 2c 72 6f 2c 73 6f 2c 74 6f 2c Data Ascii: ,yfa,Tm,zfa,Vm,Afa,Dfa,Wm,Xm,Ym,Zm,Ffa,cn,Gfa,dn,en,fn,Hfa,Ifa,Kn,Jfa,Ln,Mn,Mfa,Ofa,Pfa,Rfa,Qfa,Sfa,On,Tfa,Rn,Vn,Wn,Xn,Wfa,Xfa,Yfa,Yn,$fa,Zn,aga,cga,fga,ega,dga,iga,gga,ao,co,jga,eo,fo,bo,go,ho,io,ko,kga,lo,mo,mga,lga,nga,oga,pga,rga,no,oo,po,qo,ro,so,to,
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 74 6a 61 2c 78 6a 61 2c 41 6a 61 2c 7a 6a 61 2c 58 74 2c 42 6a 61 2c 43 6a 61 2c 44 6a 61 2c 46 6a 61 2c 45 6a 61 2c 47 6a 61 2c 59 74 2c 48 6a 61 2c 49 6a 61 2c 24 74 2c 4a 6a 61 2c 4b 6a 61 2c 4c 6a 61 2c 4d 6a 61 2c 61 75 2c 4e 6a 61 2c 62 75 2c 4f 6a 61 2c 63 75 2c 64 75 2c 0a 51 6a 61 2c 65 75 2c 52 6a 61 2c 66 75 2c 67 75 2c 53 6a 61 2c 54 6a 61 2c 68 75 2c 6a 75 2c 56 6a 61 2c 6b 75 2c 55 6a 61 2c 57 6a 61 2c 58 6a 61 2c 59 6a 61 2c 24 6a 61 2c 6c 75 2c 61 6b 61 2c 6f 75 2c 70 75 2c 63 6b 61 2c 64 6b 61 2c 67 6b 61 2c 68 6b 61 2c 71 75 2c 72 75 2c 74 75 2c 75 75 2c 76 75 2c 77 75 2c 78 75 2c 79 75 2c 7a 75 2c 41 75 2c 42 75 2c 43 75 2c 44 75 2c 6c 6b 61 2c 6b 6b 61 2c 6d 6b 61 2c 6f 6b 61 2c 6e 6b 61 2c 71 6b 61 2c 6a 6b 61 2c 70 6b 61 2c 69 6b 61 Data Ascii: tja,xja,Aja,zja,Xt,Bja,Cja,Dja,Fja,Eja,Gja,Yt,Hja,Ija,$t,Jja,Kja,Lja,Mja,au,Nja,bu,Oja,cu,du,Qja,eu,Rja,fu,gu,Sja,Tja,hu,ju,Vja,ku,Uja,Wja,Xja,Yja,$ja,lu,aka,ou,pu,cka,dka,gka,hka,qu,ru,tu,uu,vu,wu,xu,yu,zu,Au,Bu,Cu,Du,lka,kka,mka,oka,nka,qka,jka,pka,ika
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 6e 61 2c 68 7a 2c 69 7a 2c 64 6e 61 2c 6a 7a 2c 65 6e 61 2c 6b 7a 2c 66 6e 61 2c 67 6e 61 2c 68 6e 61 2c 6c 7a 2c 69 6e 61 2c 6d 7a 2c 6e 7a 2c 6f 7a 2c 6a 6e 61 2c 70 7a 2c 6b 6e 61 2c 71 7a 2c 72 7a 2c 73 7a 2c 74 7a 2c 77 7a 2c 78 7a 2c 79 7a 2c 6c 6e 61 2c 7a 7a 2c 41 7a 2c 42 7a 2c 6d 6e 61 2c 43 7a 2c 44 7a 2c 45 7a 2c 46 7a 2c 6e 6e 61 2c 47 7a 2c 48 7a 2c 49 7a 2c 4a 7a 2c 4b 7a 2c 6f 6e 61 2c 4c 7a 2c 70 6e 61 2c 4d 7a 2c 71 6e 61 2c 72 6e 61 2c 4e 7a 2c 4f 7a 2c 73 6e 61 2c 50 7a 2c 51 7a 2c 52 7a 2c 74 6e 61 2c 75 6e 61 2c 76 6e 61 2c 77 6e 61 2c 53 7a 2c 54 7a 2c 78 6e 61 2c 55 7a 2c 79 6e 61 2c 7a 6e 61 2c 41 6e 61 2c 42 6e 61 2c 43 6e 61 2c 56 7a 2c 57 7a 2c 44 6e 61 2c 45 6e 61 2c 58 7a 2c 59 7a 2c 46 6e 61 2c 5a 7a 2c 47 6e 61 2c 48 6e 61 Data Ascii: na,hz,iz,dna,jz,ena,kz,fna,gna,hna,lz,ina,mz,nz,oz,jna,pz,kna,qz,rz,sz,tz,wz,xz,yz,lna,zz,Az,Bz,mna,Cz,Dz,Ez,Fz,nna,Gz,Hz,Iz,Jz,Kz,ona,Lz,pna,Mz,qna,rna,Nz,Oz,sna,Pz,Qz,Rz,tna,una,vna,wna,Sz,Tz,xna,Uz,yna,zna,Ana,Bna,Cna,Vz,Wz,Dna,Ena,Xz,Yz,Fna,Zz,Gna,Hna
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 47 72 61 2c 48 72 61 2c 4a 72 61 2c 49 72 61 2c 64 44 2c 44 72 61 2c 4d 72 61 2c 4e 72 61 2c 69 44 2c 4c 72 61 2c 4f 72 61 2c 50 72 61 2c 6a 44 2c 6b 44 2c 51 72 61 2c 53 72 61 2c 6d 44 2c 54 72 61 2c 55 72 61 2c 57 72 61 2c 59 72 61 2c 70 44 2c 5a 72 61 2c 24 72 61 2c 61 73 61 2c 62 73 61 2c 0a 63 73 61 2c 64 73 61 2c 65 73 61 2c 66 73 61 2c 72 44 2c 67 73 61 2c 74 44 2c 69 73 61 2c 6a 73 61 2c 6b 73 61 2c 6c 73 61 2c 6d 73 61 2c 6e 73 61 2c 79 44 2c 71 73 61 2c 74 73 61 2c 7a 44 2c 75 73 61 2c 77 73 61 2c 70 73 61 2c 78 73 61 2c 79 73 61 2c 7a 73 61 2c 72 73 61 2c 73 73 61 2c 75 44 2c 6f 73 61 2c 78 44 2c 76 73 61 2c 77 44 2c 76 44 2c 41 73 61 2c 42 73 61 2c 43 73 61 2c 44 73 61 2c 45 73 61 2c 46 73 61 2c 4c 73 61 2c 47 73 61 2c 43 44 2c 44 44 2c 45 44 Data Ascii: Gra,Hra,Jra,Ira,dD,Dra,Mra,Nra,iD,Lra,Ora,Pra,jD,kD,Qra,Sra,mD,Tra,Ura,Wra,Yra,pD,Zra,$ra,asa,bsa,csa,dsa,esa,fsa,rD,gsa,tD,isa,jsa,ksa,lsa,msa,nsa,yD,qsa,tsa,zD,usa,wsa,psa,xsa,ysa,zsa,rsa,ssa,uD,osa,xD,vsa,wD,vD,Asa,Bsa,Csa,Dsa,Esa,Fsa,Lsa,Gsa,CD,DD,ED
2024-04-18 19:30:44 UTC	1255	IN	Data Raw: 78 61 2c 54 78 61 2c 52 78 61 2c 55 78 61 2c 69 47 2c 6c 47 2c 6e 47 2c 57 78 61 2c 56 78 61 2c 70 47 2c 58 78 61 2c 59 78 61 2c 71 47 2c 72 47 2c 73 47 2c 7a 47 2c 43 47 2c 24 78 61 2c 44 47 2c 45 47 2c 46 47 2c 47 47 2c 61 79 61 2c 62 79 61 2c 4a 47 2c 63 79 61 2c 4b 47 2c 66 79 61 2c 68 79 61 2c 6a 79 61 2c 6c 79 61 2c 6e 79 61 2c 70 79 61 2c 4d 47 2c 71 79 61 2c 4e 47 2c 72 79 61 2c 75 79 61 2c 76 79 61 2c 77 79 61 2c 50 47 2c 51 47 2c 79 79 61 2c 7a 79 61 2c 53 47 2c 54 47 2c 55 47 2c 42 79 61 2c 56 47 2c 57 47 2c 58 47 2c 43 79 61 2c 59 47 2c 41 79 61 2c 44 79 61 2c 5a 47 2c 46 79 61 2c 45 79 61 2c 24 47 2c 48 79 61 2c 61 48 2c 62 48 2c 64 48 2c 49 79 61 2c 4a 79 61 2c 66 48 2c 67 48 2c 69 48 2c 75 48 2c 74 48 2c 4c 79 61 2c 68 48 2c 4f 79 61 2c 50 Data Ascii: xa,Txa,Rxa,Uxa,iG,lG,nG,Wxa,Vxa,pG,Xxa,Yxa,qG,rG,sG,zG,CG,$xa,DG,EG,FG,GG,aya,bya,JG,cya,KG,fya,hya,jya,lya,nya,pya,MG,qya,NG,rya,uya,vya,wya,PG,QG,yya,zya,SG,TG,UG,Bya,VG,WG,XG,Cya,YG,Aya,Dya,ZG,Fya,Eya,$G,Hya,aH,bH,dH,Iya,Jya,fH,gH,iH,uH,tH,Lya,hH,Oya,P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50010	64.233.185.119	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:46 UTC	701	OUT	GET /vi_webp/vowPgCByrlE/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:46 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 18824 Date: Thu, 18 Apr 2024 19:30:46 GMT Expires: Thu, 18 Apr 2024 21:30:46 GMT Cache-Control: public, max-age=7200 ETag: "1677703235" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:46 UTC	632	IN	Data Raw: 52 49 46 46 80 49 00 00 57 45 42 50 56 50 38 20 74 49 00 00 50 23 01 9d 01 2a 80 02 e0 01 3e 6d 36 96 48 a4 23 27 ac 23 79 c8 f9 80 0d 89 4d c5 42 05 3e e4 74 4a 42 c9 8b 26 2b a3 0c 16 93 44 ff 50 c3 cd b4 c3 72 a4 99 ee e3 35 bf 2f cf 32 d9 fe 77 fb df ed 0f 6a de 5d f6 e7 9a 77 42 7f e3 ff 11 f9 a3 f0 cf ff 27 fa cf 79 df a5 7d 80 3f 57 ff 61 bd 72 fd 75 7f 58 ff 93 ff 6f f6 e7 e0 1f f4 2f ef 1f b7 3e ed 7f e4 7f ea ff 80 fd ff ff ff f4 2b fb 47 f8 5f fb 9f e0 7f be ff ff ff ff f6 01 fd e3 fd 5f ad c7 fb 7f ff fe e0 bf e7 bf d9 ff ff f7 03 fd 8b ff e9 ec e5 ff 6b f7 5b ff 07 c9 e7 f7 0f fa df bb 7f 03 5f b7 3f ff ff ea fb 80 7f f3 f6 c4 fe 01 ff ff 8c 37 ff 87 f8 bf 5d 7d 16 ee 37 f5 1f e0 ff b7 fe d6 7a f8 ff ab ec 17 a5 fc cb fe 43 f6 ab f5 bf dc bd Data Ascii: RIFFIWEBPVP8 tIP#*>m6H#'#yMB>tJB&+DPr5/2wj]wB'y}?WaruXo/>+G__k[_?7]}7zC
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: e4 c8 9a c7 df fb 92 2f fe 6d 3c 21 16 2d 9f 94 94 3d 53 b6 a0 75 26 2c 9c 15 b3 19 19 75 c6 fa f3 61 d8 df ae e0 04 2a c6 88 7e 19 77 45 c2 6b 78 c5 5e d8 3a e7 28 bf c4 54 f1 99 0d e0 af 9a 16 da 92 56 79 7b a1 99 92 3a df ec 85 dd bb 42 b8 6e 37 48 50 45 0d a3 94 d3 f3 44 e5 5e f5 dd b4 d1 4c cd 62 b2 68 fc 92 9d 3a 2a 07 14 cb d9 1c 46 40 41 0d cf 28 83 66 ba 4e e3 a5 33 92 41 9b 5b 16 d5 5b 23 7a d0 fb 33 cd 7d f4 49 bc 7a 68 cb 97 1c 92 da 3d fc f5 e7 01 2d bc 4e 64 f0 d2 a4 e5 74 a7 b6 6c f7 9b 2c 17 57 fa 02 19 8d ac d5 90 5a 4a 2b f4 2e 82 84 59 ec 17 3b f7 bb ec 72 53 ac d7 aa 01 d4 34 45 0f e2 a2 63 cf 9f 28 b8 ce da 5a bf 63 2b 1c ee 36 38 99 ae 53 c6 8f d2 73 c0 44 fb 73 39 f4 bf 67 1a b6 ca 40 36 e9 76 24 f0 8c 6a 49 f4 2f 90 a4 4e ed f3 0c Data Ascii: /m<!-=Su&,ua~wEkx^:(TVy{:Bn7HPED^Lbh:F@A(fN3A[[#z3}Izh=-Ndtl,WZJ+.Y;rS4Ec(Zc+68SsDs9g@6v$jI/N
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 4e 3a ac f4 e8 57 b3 eb 8f 09 fd 02 d4 64 2c 99 6a f1 98 cb fe 71 84 1d 4d 30 56 0d 05 ba cc 60 13 f8 7e 87 33 d2 e7 9e 24 96 da 83 f9 7f 8a 77 a3 b2 f9 7e 97 c7 a1 77 20 fc a8 4d 56 7a 19 dc 5e 96 13 c8 04 aa 70 d9 fd bd 5d 1f 35 16 1e 44 41 c7 fe 29 c5 6e 43 ef 49 40 ac 3d 09 37 7f b1 44 01 ee 08 f4 96 1f a9 45 93 8f e8 5b 14 f0 03 1c 53 40 b6 69 d2 12 67 8d 33 8b 2d 84 a9 39 4c a0 15 c8 b0 b5 fe 0c 06 a4 ee 35 f7 43 14 3a d2 ad 59 a0 2b c0 c1 58 63 da 2d 54 34 da 82 1a 95 76 d8 e5 83 02 3b 0d 45 b2 40 de d7 21 a7 f0 9d be 02 29 5e 5e 95 6b b7 62 8e ab 8c 2f 26 00 ae 68 4f 8b ef ff c4 c9 37 7f 80 93 64 1b 10 be 27 47 2e 3e 42 86 61 b8 3d 32 56 7a d5 87 7a ba 8e 36 32 e3 87 ca 10 f6 ff 2c 5a 0e 6e e9 25 2a c4 43 47 d1 02 8a ea e5 d0 d7 d7 96 01 fa fb 54 Data Ascii: N:Wd,jqM0V`~3$w~w MVz^p]5DA)nCI@=7DE[S@ig3-9L5C:Y+Xc-T4v;E@!)^^kb/&hO7d'G.>Ba=2Vzz62,Zn%*CGT
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: ff a6 f6 c2 ec 22 08 3f 18 9f 2d 38 20 91 50 0e bc 48 e3 28 dc 8c eb b9 dc 2f 26 66 c9 62 56 05 3f 6f f9 1e 61 05 ab 9d 2e c4 fd 0e 91 ab f3 44 8e aa 30 58 cb 0e 48 2d 31 02 be cb 31 66 21 4f dd 7c eb 7b e8 5e e7 53 31 cc 01 5d 10 07 0f 27 9c 10 c0 2e 49 e8 e5 80 6b 51 e3 7d 50 96 94 e8 d2 da 2e 7f ba 67 f1 bd f2 78 80 bd fb ad 78 51 32 53 4e 6e 14 60 ce ed 36 99 89 57 e6 a7 9e 39 4f e3 65 f7 04 aa 98 67 76 d3 2d 10 bb 84 d4 f3 d7 7a dd 5e 7a 70 63 42 3e 55 78 02 2c 97 f3 18 86 6c 9f 94 7a 22 b0 91 11 96 ae 2f a3 f8 80 11 5a 8f 68 ad ac 11 84 c9 15 45 f2 74 de 19 17 ba a4 3a 4e 95 01 38 e7 a1 10 9c b0 d8 ea 28 53 89 00 e3 64 f7 3f db 9f 81 6f 3c 08 df f1 f3 7c 73 fe 16 e6 4c c1 b4 23 76 c2 0a f1 e5 7b 35 11 d4 31 a5 cd da 77 ac c3 cd 8c 06 a4 cb 2f a4 d5 Data Ascii: "?-8 PH(/&fbV?oa.D0XH-11f!O\|{^S1]'.IkQ}P.gxxQ2SNn`6W9Oegv-z^zpcB>Ux,lz"/ZhEt:N8(Sd?o<\|sL#v{51w/
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 1a 6e 3a 9c 84 90 11 c9 33 44 bc cc 6d cd bc b2 21 4c 55 17 69 e8 13 5f ca 7b bb 01 8e d3 11 a9 73 06 65 d1 48 3a 14 b4 e0 ac 40 64 96 f4 66 8d 18 a4 a7 9d b6 58 60 00 fa 46 df bd a6 44 b2 c5 79 db f0 34 da 8b d2 58 88 6d 44 82 ee 18 52 01 ea 30 4a 78 52 b6 2a 93 ad a7 ba 6e b4 5a 79 8e ff 27 ab dd 2d 6a 13 df 33 b5 b5 50 7b 4d 36 ae cd 1b 8d 85 d3 4c b7 b4 3c 8f 90 97 6a cb 67 37 37 a9 3f 27 7d 52 da 76 36 8e 5f e3 10 0e 24 9b 9c a5 31 be 1d 41 16 3e b8 29 78 ea fe 80 fd 92 29 96 47 4e 64 97 9e 2c 3d e6 52 75 73 9b a5 c9 f1 e2 45 c7 bf 25 59 6c 1a 53 ba b8 63 5f b1 c1 6f 67 e3 01 7a 6e af 8f 85 44 39 1a 92 e0 c9 d5 a5 f4 96 82 07 6b 7c a4 0b d6 90 e9 b6 70 3b 6f 4d 9d ce 22 95 fb bc cc 47 29 41 fb e9 e2 b2 a1 a7 4f c0 aa 71 0d 77 69 9e 2d 77 6d c0 c7 52 Data Ascii: n:3Dm!LUi_{seH:@dfX`FDy4XmDR0JxR*nZy'-j3P{M6L<jg77?'}Rv6_$1A>)x)GNd,=RusE%YlSc_ogznD9k\|p;oM"G)AOqwi-wmR
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 71 ab 80 07 ba 21 92 3c 7f ae 03 5e 24 f0 5e 1f b0 4d 07 81 38 54 68 ca 5e ec 29 44 91 17 e5 dc 7d 71 e7 2a f8 a6 6a 01 e3 10 a3 53 49 73 b3 9e 21 82 08 a4 1a 16 9a 03 7f 30 4f 67 71 28 17 ab dc d7 2b d8 de e7 92 17 5b fa cd 71 dd f8 ba 79 9b 38 30 11 3f 6f 23 2b cf 5b ee ca fa aa f8 c4 40 e9 30 34 1d 85 d7 87 a4 84 55 83 01 46 a0 3c 69 42 78 72 50 0f 95 7e 27 15 31 e2 6a 01 13 23 d5 f5 73 37 98 e5 16 f0 3f a7 29 62 a5 62 99 59 34 e2 c9 3e fc 2e 7f d0 3f 1c e2 2c de 7b 1d 19 b2 7b 74 fa fd ec e1 3e 6c b4 b5 08 bd c2 ed f7 5c d2 94 dc 4a 2d 3d 67 01 54 04 41 12 82 b7 87 a7 4a 49 ab 39 7a 37 7e 75 9f fc ea 1a a5 5f 54 ff f2 1d 30 81 54 27 11 c8 13 46 9c 2a 5a e7 93 6b bd 4d 15 9b 53 36 a1 1c b6 84 c8 ee df 53 f5 5f ff 94 11 39 ef 7a 0c 6e 71 f6 6a 40 a8 ad Data Ascii: q!<^$^M8Th^)D}qjSIs!0Ogq(+[qy80?o#+[@04UF<iBxrP~'1j#s7?)bbY4>.?,{{t>l\J-=gTAJI9z7~u_T0T'FZkMS6S_9znqj@
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 51 35 98 5a 76 b4 d8 40 11 41 10 f0 d2 34 4b 30 0c d5 09 d5 11 91 8f a8 ea 8a dc 80 98 b3 b9 e0 6f b1 25 87 e3 14 17 84 74 f0 19 64 bf 20 26 38 51 78 73 7c 8d 9f 6a 43 a2 92 98 99 cc 90 01 15 85 1f fa 9b 7b 4f 89 05 63 a9 92 ef b5 27 a4 b3 b4 1a a9 3d b8 a8 0b 6b 06 9f 6c d0 05 14 d7 09 c4 a4 f0 b8 dc 56 4a 93 7e b4 8d cf 6f 10 ef 31 54 e1 f7 40 fd 0a d2 94 e6 2f ff 02 a5 e6 91 0d e0 3a 9b ac 4a c4 7f fe b3 e6 50 d7 a8 12 77 a8 d1 78 fa 2c 99 ce 9d 2c 78 26 02 b0 76 fd 68 f5 94 fa f8 5a c5 3d 05 9a 68 67 62 a7 2b d0 78 63 f4 8d 42 9c 43 c9 a1 f8 3a be 1c d2 8d 3b 64 4f c3 a4 30 e3 db 6f b0 ef 5b 86 13 1b c2 96 65 ff b2 d1 0b eb 0d f1 f1 a1 a8 fa ce 8e f2 b2 81 a9 37 f5 c6 ac ee 79 0a 91 1e e6 5a c8 50 30 0d f9 10 55 af db c3 f1 50 3a 08 75 81 00 6d bf 31 Data Ascii: Q5Zv@A4K0o%td &8Qxs\|jC{Oc'=klVJ~o1T@/:JPwx,,x&vhZ=hgb+xcBC:;dO0o[e7yZP0UP:um1
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 35 26 b5 bb 47 49 80 6a ed da ec d9 5d fb c8 f8 12 38 b1 13 5b 55 5f b6 9f f7 39 fe 3e 4a 3a 1f 28 98 af 2f a8 67 39 3d 08 66 22 3b b5 1a 20 d1 bf 9c 65 d3 e7 5a 9b bd 54 b3 09 bc 39 fb 41 4a a7 ac 00 e6 80 d1 7c 6c 22 11 9a 0b 4b c5 fc ff d0 d7 93 f9 cf ab ce 57 2d e2 db e7 20 69 af f8 1d c5 69 7c 1d 30 03 a8 1e a4 56 96 a2 c6 e1 f3 85 70 4a 03 cd 0a 79 7c b1 81 94 fb 33 22 9a 76 e8 b7 08 38 5d f7 29 1d 8c ee 43 d2 27 2f f4 dd d0 d2 a7 7c 1f 90 9a 35 f4 d9 c1 70 b3 2c 4b d5 da c8 67 bf 47 cd 32 73 21 11 48 9b 3c 4e 33 f0 30 b6 d5 44 1c c6 fe d8 ec ef 0b a0 0f a7 e3 54 ba d4 63 23 e8 e8 53 e3 c8 a9 e0 ad a6 e8 34 e0 00 37 af c8 f0 56 40 5d ee ad 0c bd f5 73 86 7d a5 91 fe 3a 0e f3 29 4c dd 26 7f a1 13 42 62 7c 18 7d cd 19 59 1e 92 ee 43 11 ff b8 5f 05 77 Data Ascii: 5&GIj]8[U_9>J:(/g9=f"; eZT9AJ\|l"KW- ii\|0VpJy\|3"v8])C'/\|5p,KgG2s!H<N30DTc#S47V@]s}:)L&Bb\|}YC_w
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: f7 96 85 1c d8 4f 70 48 f4 ff a7 9a 1d cd 7b a2 22 bd 61 4c b4 60 70 f5 61 ca 1c 28 4e 8e 59 65 a0 a8 98 46 23 11 1f fd 51 61 79 21 47 64 6e be 07 17 46 74 c2 06 58 be e3 8c 29 80 81 03 fc dd b1 50 95 c8 d9 30 11 43 d2 4b 37 40 7f 44 b0 bd 84 2a 11 c6 ea e3 24 06 fa 6f 67 51 a7 a3 25 b4 e4 1e 8a 11 68 9a 81 45 6a e4 ca 09 4a a0 a6 11 02 31 c2 e3 d2 72 25 25 05 d5 7e bb e1 fe 4d 9e 3d b4 b9 9a cc 91 8b bf af 35 d3 7c dd 80 c2 74 e3 2e 36 8e ef 43 39 10 02 5e 1d 03 23 f8 e9 5a 81 74 cb e0 fc 56 2a 7d 51 25 34 d8 62 37 e1 ed de 21 7e f7 5b fa 9e d9 b6 93 f6 97 ca d3 6a 12 0e 0f 83 42 c7 e3 8f e0 2b 8f b9 7a 79 58 16 b6 8d ac 80 13 8d fa 02 f4 7a b3 b9 26 22 c1 ac 13 8d 8d 8d be f9 8c 0b 29 08 58 83 03 6f 6f e6 7d 6b 15 9a f5 b4 e9 e4 4f ab 93 54 7d f6 74 19 Data Ascii: OpH{"aL`pa(NYeF#Qay!GdnFtX)P0CK7@D$ogQ%hEjJ1r%%~M=5\|t.6C9^#ZtV}Q%4b7!~[jB+zyXz&")Xoo}kOT}t
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: c0 73 fb 29 8b a8 4a 81 78 94 ef 87 83 15 f9 5c af 6a 3e 2c 8f b0 5e 37 c7 48 3b f5 0e 7d 2c ed 2e 70 bb 9f 5d 52 7e 3f 14 78 ee af 46 0c 0e 78 2d c0 80 74 4e f9 e8 9a 0e 1e 0c 3a 79 80 42 d7 50 59 27 3f a5 64 dc 64 04 75 3a b8 44 2a 3f e7 4f c5 99 90 b1 b4 b2 0b c9 e4 34 f4 1b 9a 3b 91 b1 55 a8 6f 45 f5 37 3a ab 80 fb d9 27 c8 6b 05 0f 05 d7 eb 75 a5 dd 99 cc 11 89 a7 b6 4c 2d 09 b4 8e 7c fe 8c b6 3f 0c 07 d1 69 6c 2c a7 6e 13 b4 5c bf 08 e4 44 07 a8 25 2a ab d7 05 ee 54 74 4c 8e 2c f5 b7 4f c2 b2 1d 93 80 53 8c bc 7b 73 71 81 64 0d db fc 9d 00 63 d8 10 d4 5f b7 30 08 ca e9 eb 0a 11 cc 5f 7a 18 e4 8b 66 7c 0c d6 9e 6b 6f 62 e1 96 03 9b 7e e0 58 13 8d 9a 38 01 d5 5d e2 1a 64 f7 bc d5 16 fe d1 aa 4d 61 b7 6a f4 23 00 ef e7 59 2f e7 c0 35 3d 92 6c 82 61 f2 Data Ascii: s)Jx\j>,^7H;},.p]R~?xFx-tN:yBPY'?ddu:D?O4;UoE7:'kuL-\|?il,n\D%TtL,OS{sqdc_0_zf\|kob~X8]dMaj#Y/5=la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50012	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:46 UTC	908	OUT	GET /s/player/0af6e327/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:46 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120953 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 11:30:51 GMT Expires: Thu, 17 Apr 2025 11:30:51 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 17 Apr 2024 04:21:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 115195 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:46 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 45 70 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 5e 67 2e 6b 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 62 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var a8=function(a){g.Ep(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 3b 0a 65 6c 73 65 20 66 6f 72 28 61 3d 4f 41 62 28 61 29 3b 3b 29 7b 76 61 72 20 64 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 64 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 62 2e 63 61 6c 6c 28 63 2c 64 2e 76 61 6c 75 65 2c 76 6f 69 64 20 30 2c 61 29 7d 7d 2c 51 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 0a 50 41 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 4f 76 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 3d 3d 66 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 76 6f 69 64 20 30 3d 3d 3d 65 3f Data Ascii: ;else for(a=OAb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},QAb=function(a,b){var c=[];PAb(b,function(d){try{var e=g.Ov.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 72 6e 20 57 41 62 28 61 29 7d 2c 58 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6a 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6a 6d 29 72 65 74 75 72 6e 20 61 2e 6a 6d 28 29 3b 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 76 61 6c 75 65 73 28 29 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 22 22 29 3b 69 66 28 67 2e 61 62 28 61 29 29 7b 66 6f 72 28 76 61 Data Ascii: rn WAb(a)},XAb=function(a){if(a.jm&&"function"==typeof a.jm)return a.jm();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(g.ab(a)){for(va
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 7b 4c 63 3a 33 2c 4b 63 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 64 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 4b 69 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 62 29 7d 2c 65 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 64 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 4f 68 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 6d 65 Data Ascii: ient_streamz/youtube/living_room/mdx/channel/closed",{Lc:3,Kc:"channel_type"})},dBb=function(a,b){a.j.Ki("/client_streamz/youtube/living_room/mdx/channel/closed",b)},eBb=function(){this.j=d8();this.j.Oh("/client_streamz/youtube/living_room/mdx/channel/me
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 0a 74 68 69 73 2e 61 70 70 3d 61 2e 61 70 70 2c 74 68 69 73 2e 74 79 70 65 3d 61 2e 74 79 70 65 7c 7c 22 52 45 4d 4f 54 45 5f 43 4f 4e 54 52 4f 4c 22 2c 74 68 69 73 2e 75 73 65 72 6e 61 6d 65 3d 61 2e 75 73 65 72 7c 7c 22 22 2c 74 68 69 73 2e 61 76 61 74 61 72 3d 61 2e 75 73 65 72 41 76 61 74 61 72 55 72 69 7c 7c 22 22 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 61 2e 6f 62 Data Ascii: N";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.app,this.type=a.type\|\|"REMOTE_CONTROL",this.username=a.user\|\|"",this.avatar=a.userAvatarUri\|\|"",this.obfuscatedGaiaId=a.ob
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 65 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 Data Ascii: Bb=function(a,b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},e8=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.s
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 29 7c 7c 5b 5d 3b 0a 67 2e 57 62 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 2c 79 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 30 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 0a 76 61 72 20 62 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 63 3d 2d 31 3d 3d 62 3f 61 5b 30 5d 3a 61 5b 30 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3b 72 65 74 75 72 6e 20 67 2e 51 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 7a 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 71 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d Data Ascii: mote-connected-devices")\|\|[];g.Wb(a);return a},yBb=function(a){if(0==a.length)return[];var b=a[0].indexOf("#"),c=-1==b?a[0]:a[0].substring(0,b);return g.Qr(a,function(d,e){return 0==e?d:d.substring(c.length)})},zBb=function(a){g.qC("yt-remote-connected-
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 0a 72 65 74 75 72 6e 20 6c 38 3f 21 21 6c 38 2e 67 65 74 28 22 79 74 2d 72 65 6d 6f 74 65 2d 75 73 65 2d 73 74 61 67 69 6e 67 2d 73 65 72 76 65 72 22 29 3a 21 31 7d 2c 6d 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 64 45 5b 61 5d 3d 21 30 3b 0a 76 61 72 20 63 3d 67 2e 62 45 28 29 3b 63 26 26 63 2e 70 75 62 6c 69 73 68 2e 61 70 70 6c 79 28 63 2c 61 72 67 75 6d 65 6e 74 73 29 3b 67 2e 64 45 5b 61 5d 3d 21 31 7d 2c 49 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6e 38 29 7b 6e 38 3d 6e 65 77 20 67 2e 46 67 28 6e 65 77 20 49 42 62 29 3b 0a 76 61 72 20 61 3d 67 2e 77 42 28 22 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 5f 77 65 62 5f 66 6c 75 73 68 5f 63 6f 75 6e 74 22 2c 2d 31 29 3b 2d 31 21 3d Data Ascii: return l8?!!l8.get("yt-remote-use-staging-server"):!1},m8=function(a,b){g.dE[a]=!0;var c=g.bE();c&&c.publish.apply(c,arguments);g.dE[a]=!1},IBb=function(){},d8=function(){if(!n8){n8=new g.Fg(new IBb);var a=g.wB("client_streamz_web_flush_count",-1);-1!=
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 6f 6e 47 43 61 73 74 41 70 69 41 76 61 69 6c 61 62 6c 65 3d 63 3b 4d 42 62 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 61 73 74 2f 73 64 6b 2f 6c 69 62 73 2f 73 65 6e 64 65 72 2f 31 2e 30 2f 63 61 73 74 5f 66 72 61 6d 65 77 6f 72 6b 2e 6a 73 22 2c 4e 42 62 2c 63 29 7d 7d 2c 53 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 52 42 62 28 29 3b 0a 76 61 72 20 61 3d 50 42 62 28 29 3b 61 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 29 3b 6f 38 28 61 29 7d 2c 55 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 52 42 62 28 29 3b 0a 76 61 72 20 61 3d 50 42 62 28 29 3b 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 67 2e 71 61 28 54 42 62 2e 6d 61 Data Ascii: onGCastApiAvailable=c;MBb("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",NBb,c)}},SBb=function(){RBb();var a=PBb();a.push("//www.gstatic.com/eureka/clank/cast_sender.js");o8(a)},UBb=function(){RBb();var a=PBb();a.push.apply(a,g.qa(TBb.ma
2024-04-18 19:30:46 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 67 2e 54 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 7d 2c 62 29 7d 2c 76 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 47 3d 61 3b 0a 74 68 69 73 2e 44 3d 62 3b 74 68 69 73 2e 6c 63 3d 63 3b 74 68 69 73 2e 58 62 3d 64 7c 7c 31 3b 74 68 69 73 2e 5a 61 3d 6e 65 77 20 67 2e 4a 70 28 74 68 69 73 29 3b 74 68 69 73 2e 77 62 3d 34 35 45 33 3b 61 3d 67 2e 61 53 3f 31 32 35 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 62 3d 6e 65 77 20 67 2e 43 67 28 61 29 3b 74 68 69 73 2e 4d 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 43 3d 21 31 3b 74 68 69 73 2e 59 3d 74 68 69 73 2e 59 61 3d 74 68 69 73 2e 5a 3d 74 68 69 73 2e 51 61 3d 74 68 69 73 2e 42 Data Ascii: return g.Ta.setTimeout(function(){a()},b)},v8=function(){},w8=function(a,b,c,d){this.G=a;this.D=b;this.lc=c;this.Xb=d\|\|1;this.Za=new g.Jp(this);this.wb=45E3;a=g.aS?125:void 0;this.eb=new g.Cg(a);this.Ma=null;this.C=!1;this.Y=this.Ya=this.Z=this.Qa=this.B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50015	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:46 UTC	739	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:46 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:30:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:46 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 6f 62 4d 35 34 56 2d 4e 68 41 4c 68 59 34 36 69 79 55 31 75 36 4d 6e 30 72 53 38 55 6d 50 74 35 6c 75 41 64 4d 56 57 63 53 33 48 43 6b 76 6d 5a 67 52 65 72 37 79 73 66 64 73 49 38 61 37 49 6d 5f 49 66 54 31 53 77 50 78 73 44 32 48 69 35 37 38 54 32 65 48 54 62 4c 50 45 77 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKoobM54V-NhALhY46iyU1u6Mn0rS8UmPt5luAdMVWcS3HCkvmZgRer7ysfdsI8a7Im_IfT1SwPxsD2Hi578T2eHTbLPEw"}
2024-04-18 19:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50014	172.253.124.148	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:46 UTC	717	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:46 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 18 Apr 2024 19:15:56 GMT Expires: Thu, 18 Apr 2024 19:30:56 GMT Cache-Control: public, max-age=900 Age: 890 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:46 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50019	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:47 UTC	739	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:47 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:30:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:47 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 69 72 59 6b 54 6e 55 4d 31 56 74 54 74 42 32 30 76 74 45 51 35 58 48 49 4e 33 78 4f 32 49 48 63 66 32 6f 75 53 68 67 67 5a 79 37 2d 5a 4c 49 65 50 35 55 66 71 37 30 4f 50 72 6e 75 67 32 76 62 47 46 51 35 31 58 67 6a 53 6a 42 42 63 6f 37 6a 53 64 63 54 54 46 63 4b 71 7a 77 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKpirYkTnUM1VtTtB20vtEQ5XHIN3xO2IHcf2ouShggZy7-ZLIeP5Ufq70OPrnug2vbGFQ51XgjSjBBco7jSdcTTFcKqzw"}
2024-04-18 19:30:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50020	64.233.185.119	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:47 UTC	701	OUT	GET /vi_webp/kcHoXFYUlVQ/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:48 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 10918 Date: Thu, 18 Apr 2024 19:30:48 GMT Expires: Thu, 18 Apr 2024 21:30:48 GMT Cache-Control: public, max-age=7200 ETag: "1679573038" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:48 UTC	632	IN	Data Raw: 52 49 46 46 9e 2a 00 00 57 45 42 50 56 50 38 20 92 2a 00 00 90 e5 00 9d 01 2a 80 02 e0 01 3e 6d 36 97 49 24 22 a5 22 21 f4 79 80 a0 0d 89 65 6e 96 da 67 cf 6f 17 03 6c a0 6b 12 9b f1 b7 45 ff fd 9a 5b de 33 f7 0d cd 9b 8f bc 78 8b c0 57 6e d4 f8 5f ec bf bf 77 d4 ed b7 ce fa 4e e6 05 91 bc d7 79 8b fe af f7 cf 69 bf ef 3f e0 7f 8b f7 bd fa 13 ff 37 b8 27 ea cf ec 77 f8 cf 6c 6f 5f 3f d8 ff e2 7e 20 7c 02 fe 89 fe 13 f6 9f dd d7 fc af ed 8f b9 4f ed df e8 bf 66 3f d8 fc 80 7f 49 ff 1f ff b3 b0 8f fc 6f fe 0f 61 4f e6 bf df ff f8 7a e6 fe e3 fc 1d ff 61 ff 93 fb 8d ed 63 ff f3 fe 37 b8 07 ff af 6b ff e0 1f fd 3a b1 e6 1b a5 9d 3a 1e a9 f6 b7 e3 c7 f0 9d 7f d6 b3 ef 67 e2 fd 71 7f 73 fe 5b ed bb d3 de 01 1e c5 ff 35 c0 eb b5 f9 84 7b 43 f6 5f f8 de 9a 9f 79 Data Ascii: RIFFWEBPVP8 *>m6I$""!yengolkE[3xWn_wNyi?7'wlo_?~ \|Of?IoaOzac7k::gqs[5{C_y
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 1a be a8 85 bc 84 04 b7 c4 80 c4 b4 27 35 1f e2 fa 6f a7 3c ac 05 e8 b9 4a ff 3a 9c 43 bd fc ff a2 44 a5 7c 55 a6 0a 06 f2 14 59 97 34 30 5f e1 61 b9 fc 52 43 ae c7 92 ba 2e 4f 9c 89 d7 5d 77 13 f2 36 25 7b a6 4a fd f1 74 84 b6 d2 82 a1 c0 e2 2c c0 ca 9a 51 bc bf 0e 26 5b 5a bd 2f fc f1 6b 2d 18 e2 b3 6d b1 ee 9e 75 a6 79 29 f3 92 b7 4b e8 e6 6b 8e 17 84 6d 17 c4 2f 0b 3c 33 f9 15 e4 5d 0c 9e 45 7e 21 bf 42 f9 32 48 c7 8a fc d8 2a 22 66 2b ae 05 7d d5 b6 ba 55 7b 37 63 05 30 32 84 5b 63 18 2e 3a e8 49 39 a6 6a 3e 10 6b ba 4c df b5 cc c5 94 5d a7 7e f5 b7 51 94 28 2a 51 21 1b bd b8 a1 68 fe 54 bb b4 f6 fe a4 a0 bb d2 22 22 e5 1f 0e 6e 48 94 16 57 d6 cb 3f 5c f6 c6 d0 60 00 99 52 2b 82 8a 85 39 05 fa 20 a2 98 2b a6 c8 59 51 d5 b5 d8 42 64 a3 23 ca e3 70 37 Data Ascii: '5o<J:CD\|UY40_aRC.O]w6%{Jt,Q&[Z/k-muy)Kkm/<3]E~!B2H"f+}U{7c02[c.:I9j>kL]~Q(Q!hT""nHW?\`R+9 +YQBd#p7
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 04 d2 3f 47 94 2e 86 fc 55 6c a4 64 ff f8 82 39 79 67 cf 95 ce 4c 61 63 a7 c8 46 7a f5 99 22 42 27 9a 1c 9f 6c e7 f8 22 31 91 16 38 36 85 60 f8 4f 6e 56 4d 3f f9 b1 e2 66 78 7c d1 68 15 06 47 7d c3 b7 50 46 ea 4b 58 cc ab 06 a3 ce 69 6e d0 d8 06 b5 bd dc 06 6f 87 21 d5 12 f8 b1 1b b5 f7 03 e6 aa 8f 99 ed 8d ac 8c b6 a2 4a 3c aa 44 da 46 68 94 aa bc 28 ec db 56 d5 6c a9 7a 93 0a e8 bc 35 26 e5 90 25 d9 81 8a 15 83 2f 36 01 fc bb 2e 26 1b 8d 4f 3a c5 41 d2 c2 9f f8 f5 43 74 e2 60 49 9d fb 5b be c0 cb 62 ee 8a 20 d9 43 82 b6 e7 26 ed c8 10 82 ef c1 57 c2 39 72 d9 8f 16 54 d6 a2 6e 18 0a 05 70 b7 1b a7 5d 1a 2f d9 14 64 91 72 68 fd ac 23 a0 af b9 be 6c 54 e4 40 08 9e 9b 15 fc d8 70 41 77 d8 8d 9c 34 bb de e9 83 12 eb 78 cc 41 f1 1d 4c 79 cd Data Ascii: ?G.Uld9ygLacFz"B'l"186`OnVM?fx\|hG}PFKXino!J<DFh(Vlz5&%/6.&O:ACt`I[b C&W9rTnp]/drh#lT@pAw4xALy
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: e7 aa 20 da ca 78 b3 39 4c e6 d7 45 67 3d 01 77 f6 8f 75 7b d1 1c a4 ae d3 e3 92 06 5a f2 29 1a 3c 22 7e 26 4e 4a 26 74 20 3d db 20 fd b3 34 cc 62 b1 0e ee fe 8f 44 f1 9d 73 dd 08 ca 9f ad 7b d6 5c e6 34 d2 32 c6 2c 26 51 b7 64 f2 7b a5 f1 a6 49 07 ed b5 a7 6d 82 62 c5 03 7f 96 82 10 f4 52 f2 d7 21 d6 ca 79 f6 0c eb d3 dd dc 45 22 e8 4d cf a8 17 ae bf b0 71 9e 19 07 b5 cb bb 21 6b 4c b6 cd 1b fe 61 d0 36 bd bd 39 49 9d 49 a3 db 22 ff ff 77 1d 84 f7 ba 8f e7 f3 50 a4 89 32 16 83 88 f7 6e 50 f7 1d 52 52 6d fe 02 2f 19 7a de cb 47 c1 8f 15 90 71 a3 05 f6 be 53 31 25 41 d9 cf 6c 0c 97 96 5e 7f 73 5c d1 67 64 c0 2c a0 55 ce 74 f2 b1 0e cf fe 38 4e d2 ed 4a 3c 3f e2 66 1f ac b1 5d b6 d1 46 31 a9 4c d8 fe e8 e4 20 d3 b3 2a 35 27 43 0a b3 92 b0 27 19 39 bf 55 5f Data Ascii: x9LEg=wu{Z)<"~&NJ&t = 4bDs{\42,&Qd{ImbR!yE"Mq!kLa69II"wP2nPRRm/zGqS1%Al^s\gd,Ut8NJ<?f]F1L *5'C'9U_
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: a2 bc 79 b0 10 4b 40 43 84 64 89 f8 ed 35 2a 9f 1d 6b b5 81 91 31 ed 4c 6a ad a2 85 2c 39 fc 33 df 9f 33 53 ee 8a 4d 38 f2 23 81 87 20 f6 a8 a0 d7 d9 3f 6d 5c 82 09 7e c4 fa 6a 16 a8 82 2a 6c d5 1c fe 36 60 36 15 e0 4b 19 0e b6 2d 70 3c 1f 07 e9 c8 f1 91 2a 81 6f e3 c5 82 61 02 f3 6b ff 5e f7 1d 2a dd 5b 60 d4 bd b5 36 6c 97 48 a0 58 9b 44 7f ec 32 99 5d 9f 9e ed 46 13 55 3e 30 14 bc 9e a5 64 88 31 81 15 43 77 ee 4d 5e aa 62 f7 65 3c 51 18 b6 c0 b3 a2 93 ba 1d f8 97 22 03 86 4c eb a8 5d 93 4a 4a 22 f6 d6 e5 ea 96 5b cc 63 8f fa 99 cf 24 fd 69 52 7d 45 48 b3 d7 39 01 93 b7 78 67 2d b5 5b 35 f9 93 8f d7 0d eb 43 9d dd 09 e6 4e 02 b9 36 f6 12 77 49 76 d6 90 07 37 a7 e6 b9 7a 0d 56 8f 19 8b 59 23 0a 77 2a 01 32 02 22 1b 72 67 96 fb 0f 70 f5 45 a1 4a 19 e7 e6 Data Ascii: yK@Cd5k1Lj,933SM8# ?m\~jl6`6K-p<oak^[`6lHXD2]FU>0d1CwM^be<Q"L]JJ"[c$iR}EH9xg-[5CN6wIv7zVY#w*2"rgpEJ
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 2b 2b e9 38 50 de 1e 8b 4b 50 58 f4 f8 e8 a3 8e 0b 7f 7a 91 89 ca 49 cd 57 42 cc 74 c4 56 de f3 d2 bd 1a 47 ca 48 a3 74 d2 cc 3d 34 cf ec 3d 7a 32 90 9e f9 1e 84 89 91 97 a9 c0 68 16 ea ed 77 ef 13 3e 53 35 9b 28 c0 b8 aa 73 7c 58 2f b3 ab 43 c1 18 93 10 ed 53 19 ca a7 53 09 d4 6f 23 5f 6a af 10 d7 fc 12 58 5e 1d fb 70 74 aa fb 92 f1 d4 bd dd f4 b5 ec e6 5e 52 52 70 97 2b 0b 46 6a 09 35 cd 8d 1f 76 b0 5e 8f b3 6f ef a4 d5 d1 c8 65 11 86 c7 76 e1 8a 27 c4 20 2e 44 22 aa 0f 94 4c ea 61 43 88 08 9f 0f a8 ef c4 5e 79 bd b7 4b f5 ad 78 c2 02 79 bf b9 35 a8 76 4a 2f 45 67 fc b9 7d b7 88 aa f8 f4 9e 9c 31 85 df e8 0c 6c 7a 59 4b 8b d3 4a 5b 8a 7a d7 f2 ec 9c 34 01 e7 de 82 a7 d7 7b 97 42 ad 9a 6c f3 ba 97 54 1b c3 4e 86 78 d7 57 ad 79 2f 9f cc e7 22 89 ca f1 46 Data Ascii: ++8PKPXzIWBtVGHt=4=z2hw>S5(s\|X/CSSo#_jX^pt^RRp+Fj5v^oev' .D"LaC^yKxy5vJ/Eg}1lzYKJ[z4{BlTNxWy/"F
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: bb 13 b9 2a c5 1b 65 97 5d 21 17 a5 4f 74 dd 5a c7 87 f7 de d9 af 35 fd 0c ef 57 9a 97 6c f3 76 9f e6 e6 a7 bf d9 2d f7 e5 3a 7e 65 1d a0 bd 97 f3 a2 1d 1e 5e a3 cb dc 0d a9 ae dc b4 4f 91 d3 e6 7c 0e 51 df fb 8e e6 10 fc 0f 0a 9b 94 f7 20 9e c0 05 ba 75 2a c8 85 23 7b 25 2a d6 85 49 29 08 d3 c0 8a c8 02 a3 18 21 73 23 2d 23 de ca b9 6a 48 d5 37 40 e4 a7 31 b2 de 44 e2 11 3a dd 57 1e d2 05 4f c5 77 6e 8e d8 d7 ba 49 32 ef 44 06 4f 87 b2 76 6e 5d 22 b6 de cc 54 c9 01 bd 3b ff db 8d 64 0d 93 5e b0 b8 c4 70 d3 1a cc d2 6e f0 8d 03 47 f4 60 f2 9b c5 50 34 76 8a 8e 6b 1e da b8 b0 56 8e c2 6b 57 d2 20 d1 f7 e3 2a cb bd c4 2e f7 cd 9b 2d e6 9e 09 bd 38 57 17 c4 8e 98 3f e7 e7 b8 42 ca 90 72 0a ee 0e 08 8f 7e e9 b1 0b 33 f9 d5 b4 3b 0b 27 c4 a5 b9 0c f6 07 a6 0e Data Ascii: e]!OtZ5Wlv-:~e^O\|Q u#{%I)!s#-#jH7@1D:WOwnI2DOvn]"T;d^pnG`P4vkVkW .-8W?Br~3;'
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 6c 28 4a 32 41 2a bf cd 12 6c 32 68 96 4c e4 2c c9 0a ea 02 53 b3 eb 9e 97 2a e1 06 0e 33 46 a0 ec 7a 11 cc e8 45 11 f1 e6 35 2b c1 f6 aa 30 3b cd 98 5f 20 44 65 6f a6 d0 cd 04 90 8b c5 80 81 d8 81 48 b8 06 b3 0a 47 53 6f 8f 06 f0 a2 1a 69 d1 27 e5 d2 e6 11 1e 73 87 c0 37 9b 46 42 05 d5 0a bd 75 6d 15 42 ed 43 54 cf a8 36 e6 e4 f7 30 6b 02 09 1c f1 c1 88 89 aa cc 3a 5b 22 82 ec 43 17 7d af 7a a3 56 ca 22 94 77 b4 af b0 d2 ba 31 f2 9c 1c 44 49 0d 53 e4 ac 7a ad e4 83 7d 84 31 3b 8c 3a ac f5 eb 20 b7 ee 75 b5 c4 fe ea 83 2d 2f 76 6a 0d c8 82 3f 18 ff d4 f1 af 7e 2e e6 f3 cc 4b 49 f6 b4 3c 9c 5f 71 a4 45 48 ae 2e a2 f9 63 cb 76 6c f0 f5 0b 37 0e 9d 6b fb 7f 58 fe c4 2a 49 59 cf f3 42 4e 38 7e 46 bf 1f e5 fa 70 e9 a6 83 d0 3e 99 39 21 5e 77 7e ef 81 1a d0 82 Data Ascii: l(J2Al2hL,S3FzE5+0;_ DeoHGSoi's7FBumBCT60k:["C}zV"w1DISz}1;: u-/vj?~.KI<_qEH.cvl7kX*IYBN8~Fp>9!^w~
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: cf 95 47 bc b9 12 ae 64 f3 bf 15 ee 1f 0d ef 32 e9 bb 23 4d d7 3e 0c 14 a8 40 8c 76 8a e6 82 9b d0 22 39 ec 88 84 d7 30 7f bc 59 02 e7 ba 32 42 56 99 5a f4 5d 59 44 31 e0 01 ca 58 d7 27 5f ba 7a c9 2c 10 7c d1 e3 c4 eb 7e fe 96 ab 75 d0 3d 89 ea 90 05 cd 10 03 34 6c ac d0 87 e9 7b f1 00 05 ed 2b 56 ea 0d e2 a1 25 8e c0 a5 dd 39 96 4f 2c dd 19 ac d4 8e 31 4f 22 a9 3f 05 e9 0e 77 d4 2d 60 ae a3 2a 9c c6 a6 b3 0a b7 08 ef 7e 48 3a 70 0c 37 d0 87 f8 43 03 93 d2 30 c0 09 d5 0b 4f 77 37 8f 0a 5a 16 ae af 09 d0 00 ee 18 3d 7b c9 49 ef 56 13 fe 81 27 10 4f fb 3c a0 4d cc ea f6 86 49 6d 97 01 cb c2 cb 98 73 d5 f8 d0 a4 31 fd 41 eb 18 26 71 61 8f a8 e0 1e a3 04 5a da be 94 0f 61 2e f3 26 75 e2 86 27 35 f2 0d a8 e5 05 86 9a dd d6 2e a3 8c 78 3b d4 fe 52 91 5a c1 c0 Data Ascii: Gd2#M>@v"90Y2BVZ]YD1X'_z,\|~u=4l{+V%9O,1O"?w-`*~H:p7C0Ow7Z={IV'O<MIms1A&qaZa.&u'5.x;RZ
2024-04-18 19:30:48 UTC	246	IN	Data Raw: a8 0f da 46 6a 0e ea c2 11 a9 d9 5c 76 c1 48 40 b3 ec 52 34 31 16 b4 9b 52 01 a6 cb df 51 61 8c bc 53 ba cd 24 ed 88 89 6e c1 22 8a 36 d2 72 4c 11 af 59 98 3e a4 ae 36 af 67 34 c6 ba a2 19 44 b1 fd 30 63 03 51 22 13 33 d1 bf 44 cc 77 bc 29 45 f7 fc 8e 7a fe 49 a7 88 6e 77 2a d9 74 ae 0f 68 5c 95 8b ad e4 b4 73 cf 8f 5f 7d ed fc 6c 35 67 1f 1d 05 91 bc 2d d3 5b cf bf 55 be 52 85 62 86 a4 80 a1 41 12 9d 50 97 17 4d 43 63 e1 e5 3b a7 82 3e 3a d1 26 07 93 ae f4 90 9d 08 9e 0c 64 4a 30 99 5c a3 4b be c3 2b 69 db e2 cf 41 10 10 f2 9b 1f 4e c4 f8 05 fc 07 d7 8a 0f 7f aa 82 e5 d7 38 30 de b1 37 18 0e cf 0d 3b 66 9d 5f 16 72 79 9d 24 b9 75 04 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Fj\vH@R41RQaS$n"6rLY>6g4D0cQ"3Dw)EzInw*th\s_}l5g-[URbAPMCc;>:&dJ0\K+iAN807;f_ry$u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50023	64.233.176.132	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:47 UTC	769	OUT	GET /K1O63kjyY-HyaTz3j3XD8cyDN6SUjD0vGlw8Ro7HdRmx51DgX4D3DhO63ZTc37ayTHUBWfvCtA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:48 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Apr 2024 19:30:48 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 19:30:48 GMT Server: fife Content-Length: 2342 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:48 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 09 09 08 0f 0f 08 0a 08 09 09 08 0c 09 0d 0a 08 09 08 08 09 0c 08 08 0a 08 08 09 0a 08 0d 08 08 08 08 08 07 08 08 08 09 0b 16 08 08 08 09 09 0b 09 0a 09 0b 18 16 08 0d 08 08 0b 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0d 0b 0d 0e 0f 14 13 10 10 10 0d 0f 10 12 10 10 0d 0f 10 11 0f 0f 10 10 10 11 0e 0f 0e 12 12 0f 13 11 0f 10 12 0f 0d 13 10 15 10 13 14 0f 10 0d 0e 11 12 10 0f ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 07 08 05 06 09 04 03 01 ff c4 00 30 10 00 02 01 03 02 05 02 05 02 07 00 00 00 00 00 00 01 02 03 00 04 11 05 12 07 08 13 21 31 06 41 14 22 23 51 72 24 71 32 33 42 52 61 82 a3 ff c4 Data Ascii: JFIFDD0!1A"#Qr$q23BRa
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 9f 0c be 78 a7 46 b0 ce 76 6b 83 9a 4f 81 23 29 27 90 06 4f 45 99 e0 5f 30 f3 e9 6e 8a cc d3 d8 12 03 42 49 73 12 f6 1b ed 32 4e cd 83 bf 41 7e 9b 8c f6 46 6d e3 2f 09 c7 2a d9 b8 31 e7 35 2e 63 72 3b b7 fb 6d d2 0a c0 e2 3e 17 a1 8b 31 d5 18 03 2e 06 ce db 31 e8 fe b3 f7 6e 39 92 04 2e 80 e9 9a 9a 4d 1c 6e 8e 24 8e 54 59 11 d0 e5 5a 37 01 95 94 8f 2a ca 41 cf da ae 26 3d af 68 73 4c 82 34 3d 97 33 56 a2 fa 35 1d 4a a0 2d 73 49 04 1d c1 06 08 3d c2 f5 57 da f1 4a 22 51 16 81 c7 bf 57 b5 96 95 7f 2a b1 49 04 3d 34 61 e5 65 b8 65 b7 8d 87 f9 49 25 56 ef db b5 6a 31 6b 93 6d 67 56 ab 77 0d d3 c4 e8 3d ca 92 f0 d5 8b 6f b1 3a 14 1e 25 a5 d2 47 56 b4 17 11 e6 1a 42 a1 9c 13 e1 d0 d4 75 0b 58 0e 44 24 97 93 61 da 45 bc 2b b9 82 90 43 29 90 85 8b 72 9d ca 5c 37 Data Ascii: xFvkO#)'OE_0nBIs2NA~Fm/15.cr;m>1.1n9.Mn$TYZ7A&=hsL4=3V5J-sI=WJ"QW*I=4aeeI%Vj1kmgVw=o:%GVBuXD$aE+C)r\7
2024-04-18 19:30:48 UTC	363	IN	Data Raw: 30 ee 08 04 60 80 6b c6 b5 1a 75 98 69 d5 68 73 4f 22 24 2c 9b 6b aa d6 b5 05 6a 0f 2c 78 d8 83 07 ff 00 75 ea ab e7 a9 b9 1b b3 90 b1 86 ea 7b 4c f8 47 db 75 12 fe 3d 42 93 91 f9 dc 31 fd aa 1b 71 c2 76 ef 24 d1 7b 99 db 47 01 eb f3 47 fc 95 9f 69 f1 12 f2 98 02 e6 93 2a 77 12 c7 1f 49 67 a3 02 f0 68 7c 89 40 a4 75 75 19 a6 00 e7 10 45 1d b6 40 39 c1 2e d7 27 07 c7 ca 54 e3 c1 53 82 3c 68 70 8d 26 eb 5a ab 9d e0 03 47 f5 3e eb 22 e3 e2 3d 77 08 b7 b7 6b 7b b9 ce 7f 9e 99 07 ac f7 95 bb fa db 95 1d 3e 7b 21 0c 30 25 a4 b1 16 92 29 d4 17 7e b3 aa 2b 7c 43 31 32 4e 92 ac 71 ab 6f 62 db 51 31 b4 c6 98 dd 5d 60 36 d5 6d c5 0a 6d cb 12 41 e8 7b f3 33 cd 47 f0 fe 34 c4 28 5e 7e 62 e1 e6 a3 5d 01 cc 3a 0c a0 92 32 81 a3 48 92 44 0e 66 66 4c e0 39 71 e5 87 e0 18 Data Ascii: 0`kuihsO"$,kj,xu{LGu=B1qv${GGi*wIgh\|@uuE@9.'TS<hp&ZG>"=wk{>{!0%)~+\|C12NqobQ1]`6mmA{3G4(^~b]:2HDffL9q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50025	142.250.9.104	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:48 UTC	662	OUT	GET /js/th/rNOiIBWn_DQS_hHEFtHtv97eBjsLLf3CcRgHQ0Jgy0I.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:48 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 52717 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 15 Apr 2024 23:41:07 GMT Expires: Tue, 15 Apr 2025 23:41:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 244181 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:48 UTC	443	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 3b 65 6c 73 65 20 69 66 28 75 3d 3d 72 29 75 3d 77 26 26 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 44 3a 34 34 3b 65 6c 73 65 20 69 66 28 75 3d 3d 44 29 61 3d 44 2c 6d 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 51 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 65 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 65 7d 29 2c 75 3d 49 3b 65 6c 73 65 20 69 66 28 34 31 3d 3d 75 29 75 3d 52 2e 63 6f 6e 73 6f 6c 65 3f 57 3a 49 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 75 29 77 3d 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6d 3d 46 2c 75 3d 72 3b 65 6c 73 65 20 69 66 28 34 34 3d 3d 75 29 72 65 74 75 72 6e 20 6d 7d 7d 63 61 74 63 68 28 53 29 7b 69 66 28 38 36 3d 3d 61 29 74 68 72 6f 77 20 53 3b 61 3d 3d 44 26 26 28 4a Data Ascii: ;else if(u==r)u=w&&w.createPolicy?D:44;else if(u==D)a=D,m=w.createPolicy(Q,{createHTML:e,createScript:e,createScriptURL:e}),u=I;else if(41==u)u=R.console?W:I;else if(39==u)w=R.trustedTypes,m=F,u=r;else if(44==u)return m}}catch(S){if(86==a)throw S;a==D&&(J
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 28 77 3d 65 5b 62 5d 29 26 26 21 77 2e 70 61 26 26 77 2e 63 61 70 74 75 72 65 3d 3d 49 26 26 28 53 3d 77 2e 4e 47 7c 7c 77 2e 73 72 63 2c 4a 3d 77 2e 6c 69 73 74 65 6e 65 72 2c 77 2e 51 43 26 26 6e 28 6e 75 6c 6c 2c 32 32 2c 77 2c 44 2e 69 29 2c 75 3d 66 61 6c 73 65 21 3d 3d 4a 2e 63 61 6c 6c 28 53 2c 61 29 26 26 75 29 3b 46 3d 75 26 26 21 61 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7d 65 6c 73 65 20 46 3d 74 72 75 65 3b 6d 3d 34 34 7d 65 6c 73 65 20 69 66 28 34 39 3d 3d 6d 29 75 2b 2b 2c 6d 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 31 3d 3d 6d 29 75 3d 30 2c 6d 3d 35 35 3b 65 6c 73 65 20 69 66 28 33 39 3d 3d 6d 29 6d 3d 36 38 3b 65 6c 73 65 20 69 66 28 34 34 3d 3d 6d 29 6d 3d 33 3d 3d 28 57 3e 3e 32 26 31 31 29 3f 33 35 3a 35 38 3b 65 6c 73 65 7b Data Ascii: (w=e[b])&&!w.pa&&w.capture==I&&(S=w.NG\|\|w.src,J=w.listener,w.QC&&n(null,22,w,D.i),u=false!==J.call(S,a)&&u);F=u&&!a.defaultPrevented}else F=true;m=44}else if(49==m)u++,m=29;else if(11==m)u=0,m=55;else if(39==m)m=68;else if(44==m)m=3==(W>>2&11)?35:58;else{
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 5b 52 72 5d 3d 61 2c 4a 3d 36 29 7d 7d 2c 78 33 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 2c 77 2c 53 2c 75 2c 62 2c 4a 2c 65 29 7b 66 6f 72 28 4a 3d 31 3b 37 39 21 3d 4a 3b 29 69 66 28 34 32 3d 3d 4a 29 4a 3d 53 35 3f 31 37 3a 38 33 3b 65 6c 73 65 20 69 66 28 36 38 3d 3d 4a 29 65 3d 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 6e 61 2f 74 68 69 73 2e 6e 29 2c 4a 3d 31 39 3b 65 6c 73 65 20 69 66 28 38 33 3d 3d 4a 29 62 3d 7b 7d 2c 53 35 3d 28 62 2e 61 74 6f 6d 69 63 3d 66 61 6c 73 65 2c 62 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 49 2c 62 2e 64 72 6f 70 65 66 66 65 63 74 3d 49 2c 62 2e 68 61 73 70 6f 70 75 70 3d 66 61 6c 73 65 2c 62 2e 6c 69 76 65 3d 22 6f 66 66 22 2c 62 2e 6d 75 6c 74 69 6c 69 Data Ascii: [Rr]=a,J=6)}},x3=function(W,r,a,I,D,R,w,S,u,b,J,e){for(J=1;79!=J;)if(42==J)J=S5?17:83;else if(68==J)e=0===this.n?0:Math.sqrt(this.na/this.n),J=19;else if(83==J)b={},S5=(b.atomic=false,b.autocomplete=I,b.dropeffect=I,b.haspopup=false,b.live="off",b.multili
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 2e 49 4a 26 26 44 2e 49 4a 28 53 2c 44 2e 5a 2c 44 2e 4c 2c 44 2e 6c 2c 44 2e 49 29 2c 44 2e 49 3d 57 2c 44 2e 5a 3d 57 2c 44 2e 4c 3d 57 2c 44 2e 6c 3d 57 2c 53 3c 77 7c 7c 30 3e 3d 44 2e 5a 48 2d 2d 7c 7c 28 53 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 53 29 2c 44 2e 6f 4a 2e 70 75 73 68 28 32 35 34 3e 3d 53 3f 53 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 44 2e 56 43 3d 57 7d 4a 3d 52 7d 62 3d 37 7d 65 6c 73 65 20 38 34 3d 3d 62 3f 62 3d 44 20 69 6e 20 49 2e 48 26 26 58 28 49 2e 48 5b 44 5d 2c 30 2c 32 34 2c 61 29 3f 37 35 3a 38 32 3a 34 32 3d 3d 62 3f 62 3d 34 39 3a 37 39 3d 3d 62 3f 28 64 65 6c 65 74 65 20 49 2e 48 5b 44 5d 2c 49 2e 55 38 2d 2d 2c 62 3d 38 32 29 3a 34 39 3d 3d 62 3f 62 3d 28 72 26 34 32 29 3d 3d 72 3f 39 36 3a 39 32 3a 37 35 3d 3d 62 3f Data Ascii: .IJ&&D.IJ(S,D.Z,D.L,D.l,D.I),D.I=W,D.Z=W,D.L=W,D.l=W,S<w\|\|0>=D.ZH--\|\|(S=Math.floor(S),D.oJ.push(254>=S?S:254))}finally{D.VC=W}J=R}b=7}else 84==b?b=D in I.H&&X(I.H[D],0,24,a)?75:82:42==b?b=49:79==b?(delete I.H[D],I.U8--,b=82):49==b?b=(r&42)==r?96:92:75==b?
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 65 53 74 61 6d 70 3d 30 2c 74 68 69 73 2e 47 3d 6e 75 6c 6c 2c 75 3d 35 30 3b 65 6c 73 65 20 69 66 28 34 31 3d 3d 75 29 75 3d 44 3f 33 38 3a 33 32 3b 65 6c 73 65 20 69 66 28 35 30 3d 3d 75 29 75 3d 72 3f 32 38 3a 36 35 3b 65 6c 73 65 20 69 66 28 33 38 3d 3d 75 29 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 44 2c 75 3d 35 34 3b 65 6c 73 65 20 69 66 28 35 34 3d 3d 75 29 75 3d 49 3f 31 32 3a 39 3b 65 6c 73 65 20 69 66 28 39 3d 3d 75 29 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 72 2e 6f 66 66 73 65 74 58 2c 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 72 2e 6f 66 66 73 65 74 59 2c 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 63 6c 69 65 6e 74 58 3f 72 2e 63 6c 69 65 6e 74 58 3a 72 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 Data Ascii: eStamp=0,this.G=null,u=50;else if(41==u)u=D?38:32;else if(50==u)u=r?28:65;else if(38==u)this.relatedTarget=D,u=54;else if(54==u)u=I?12:9;else if(9==u)this.offsetX=r.offsetX,this.offsetY=r.offsetY,this.clientX=void 0!==r.clientX?r.clientX:r.pageX,this.clie
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 65 6e 74 58 3f 49 2e 63 6c 69 65 6e 74 58 3a 49 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 76 6f 69 64 20 30 21 3d 3d 49 2e 63 6c 69 65 6e 74 59 3f 49 2e 63 6c 69 65 6e 74 59 3a 49 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 49 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 49 2e 73 63 72 65 65 6e 59 7c 7c 30 2c 75 3d 39 34 29 3a 33 32 3d 3d 75 3f 75 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3d 3d 52 3f 32 33 3a 33 35 3a 36 33 3d 3d 75 3f 75 3d 33 3d 3d 57 2d 31 3e 3e 33 3f 38 38 3a 31 37 3a 38 38 3d 3d 75 26 26 28 53 3d 72 2c 75 3d 31 37 29 7d 7d 2c 77 36 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 2c 77 2c 53 2c 75 2c 62 29 7b 66 6f 72 28 75 3d 32 33 3b 33 38 21 3d 75 3b 29 69 66 Data Ascii: entX?I.clientX:I.pageX,this.clientY=void 0!==I.clientY?I.clientY:I.pageY,this.screenX=I.screenX\|\|0,this.screenY=I.screenY\|\|0,u=94):32==u?u="mouseover"==R?23:35:63==u?u=3==W-1>>3?88:17:88==u&&(S=r,u=17)}},w6=function(W,r,a,I,D,R,w,S,u,b){for(u=23;38!=u;)if
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 70 6d 5b 72 5d 29 3f 36 3a 35 31 3b 65 6c 73 65 20 69 66 28 35 38 3d 3d 6d 29 6d 3d 44 3f 37 34 3a 39 34 3b 65 6c 73 65 20 69 66 28 33 3d 3d 6d 29 43 6d 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 2c 6d 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 37 3d 3d 6d 29 6d 3d 35 38 3b 65 6c 73 65 20 69 66 28 39 36 3d 3d 6d 29 74 68 69 73 2e 44 3d 75 2c 6d 3d 38 33 3b 65 6c 73 65 20 69 66 28 32 39 3d 3d 6d 29 6d 3d 28 75 3d 52 29 3f 39 36 3a 37 33 3b 65 6c 73 65 20 69 66 28 35 31 3d 3d 6d 29 44 3d 28 62 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 44 2e 70 72 6f 74 6f 74 79 70 65 29 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 6d 3d 31 37 3b 65 6c 73 65 20 69 66 28 39 34 3d 3d 6d 29 75 3d 77 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 Data Ascii: pm[r])?6:51;else if(58==m)m=D?74:94;else if(3==m)Cm.call(this,a),m=29;else if(17==m)m=58;else if(96==m)this.D=u,m=83;else if(29==m)m=(u=R)?96:73;else if(51==m)D=(b=Object.getPrototypeOf(D.prototype))&&b.constructor,m=17;else if(94==m)u=w?"function"===type
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 21 77 7c 7c 53 2d 49 2e 61 4a 3c 49 2e 64 34 2d 28 52 3f 32 35 35 3a 61 3f 35 3a 32 29 3f 6d 3d 66 61 6c 73 65 3a 28 49 2e 48 58 3d 44 2c 75 3d 68 28 49 2c 61 3f 33 37 3a 32 39 32 29 2c 41 28 32 39 32 2c 49 2c 49 2e 56 29 2c 49 2e 76 2e 70 75 73 68 28 5b 58 38 2c 75 2c 61 3f 44 2b 31 3a 44 2c 49 2e 5a 2c 49 2e 4c 2c 49 2e 6c 2c 49 2e 49 5d 29 2c 49 2e 41 3d 6c 52 2c 6d 3d 74 72 75 65 29 2c 46 3d 35 37 7d 65 6c 73 65 20 69 66 28 31 3d 3d 46 29 46 3d 35 39 3b 65 6c 73 65 7b 69 66 28 33 39 3d 3d 46 29 72 65 74 75 72 6e 20 6d 3b 39 32 3d 3d 46 3f 28 6d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 42 74 29 26 26 72 5b 42 74 5d 7c 7c 28 72 5b 42 74 5d 3d 2b 2b 64 36 29 2c 46 3d 34 34 29 Data Ascii: !w\|\|S-I.aJ<I.d4-(R?255:a?5:2)?m=false:(I.HX=D,u=h(I,a?37:292),A(292,I,I.V),I.v.push([X8,u,a?D+1:D,I.Z,I.L,I.l,I.I]),I.A=lR,m=true),F=57}else if(1==F)F=59;else{if(39==F)return m;92==F?(m=Object.prototype.hasOwnProperty.call(r,Bt)&&r[Bt]\|\|(r[Bt]=++d6),F=44)
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 32 3d 3d 6d 3f 28 4a 3d 70 28 31 32 2c 52 29 2c 6d 3d 33 29 3a 33 3d 3d 6d 26 26 28 6d 3d 4a 3f 37 37 3a 38 29 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 2c 61 2c 49 2c 44 2c 52 29 7b 66 6f 72 28 44 3d 38 39 3b 32 34 21 3d 44 3b 29 69 66 28 39 32 3d 3d 44 29 44 3d 32 3d 3d 28 57 3c 3c 31 26 31 35 29 3f 38 38 3a 31 32 3b 65 6c 73 65 20 69 66 28 31 30 3d 3d 44 29 61 2e 4b 3d 72 2c 61 2e 46 28 29 2c 44 3d 39 38 3b 65 6c 73 65 20 69 66 28 35 3d 3d 44 29 54 78 2e 63 61 6c 6c 28 74 68 69 73 29 2c 72 7c 7c 69 52 7c 7c 28 69 52 3d 6e 65 77 20 76 74 29 2c 74 68 69 73 2e 57 3d 74 68 69 73 2e 67 34 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6a 4d 3d 74 68 69 73 2e 45 38 3d 66 61 6c 73 65 2c 74 68 69 73 2e 69 62 3d 74 68 69 73 2e 4f 76 3d 74 68 69 73 2e 58 38 3d 6e 75 Data Ascii: 2==m?(J=p(12,R),m=3):3==m&&(m=J?77:8)}},g=function(W,r,a,I,D,R){for(D=89;24!=D;)if(92==D)D=2==(W<<1&15)?88:12;else if(10==D)a.K=r,a.F(),D=98;else if(5==D)Tx.call(this),r\|\|iR\|\|(iR=new vt),this.W=this.g4=null,this.jM=this.E8=false,this.ib=this.Ov=this.X8=nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50028	108.177.122.157	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:48 UTC	535	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:48 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:30:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:48 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 4a 4c 6c 6f 4e 5f 6d 63 70 31 5a 31 54 35 6b 6c 66 35 35 37 4e 43 50 37 33 61 66 58 31 51 30 30 43 32 54 4a 65 41 63 37 58 43 66 53 50 71 37 75 5a 33 74 38 57 30 42 4b 6b 63 2d 52 77 78 45 46 69 6e 42 4a 38 65 4e 39 5f 5a 48 61 41 5f 52 6e 73 42 55 65 57 77 4b 7a 5a 57 67 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKqJLloN_mcp1Z1T5klf557NCP73afX1Q00C2TJeAc7XCfSPq7uZ3t8W0BKkc-RwxEFinBJ8eN9_ZHaA_RnsBUeWwKzZWg"}
2024-04-18 19:30:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50029	64.233.177.119	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:48 UTC	466	OUT	GET /vi_webp/vowPgCByrlE/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:48 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 18824 Date: Thu, 18 Apr 2024 19:30:48 GMT Expires: Thu, 18 Apr 2024 21:30:48 GMT Cache-Control: public, max-age=7200 ETag: "1677703235" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:48 UTC	632	IN	Data Raw: 52 49 46 46 80 49 00 00 57 45 42 50 56 50 38 20 74 49 00 00 50 23 01 9d 01 2a 80 02 e0 01 3e 6d 36 96 48 a4 23 27 ac 23 79 c8 f9 80 0d 89 4d c5 42 05 3e e4 74 4a 42 c9 8b 26 2b a3 0c 16 93 44 ff 50 c3 cd b4 c3 72 a4 99 ee e3 35 bf 2f cf 32 d9 fe 77 fb df ed 0f 6a de 5d f6 e7 9a 77 42 7f e3 ff 11 f9 a3 f0 cf ff 27 fa cf 79 df a5 7d 80 3f 57 ff 61 bd 72 fd 75 7f 58 ff 93 ff 6f f6 e7 e0 1f f4 2f ef 1f b7 3e ed 7f e4 7f ea ff 80 fd ff ff ff f4 2b fb 47 f8 5f fb 9f e0 7f be ff ff ff ff f6 01 fd e3 fd 5f ad c7 fb 7f ff fe e0 bf e7 bf d9 ff ff f7 03 fd 8b ff e9 ec e5 ff 6b f7 5b ff 07 c9 e7 f7 0f fa df bb 7f 03 5f b7 3f ff ff ea fb 80 7f f3 f6 c4 fe 01 ff ff 8c 37 ff 87 f8 bf 5d 7d 16 ee 37 f5 1f e0 ff b7 fe d6 7a f8 ff ab ec 17 a5 fc cb fe 43 f6 ab f5 bf dc bd Data Ascii: RIFFIWEBPVP8 tIP#*>m6H#'#yMB>tJB&+DPr5/2wj]wB'y}?WaruXo/>+G__k[_?7]}7zC
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: e4 c8 9a c7 df fb 92 2f fe 6d 3c 21 16 2d 9f 94 94 3d 53 b6 a0 75 26 2c 9c 15 b3 19 19 75 c6 fa f3 61 d8 df ae e0 04 2a c6 88 7e 19 77 45 c2 6b 78 c5 5e d8 3a e7 28 bf c4 54 f1 99 0d e0 af 9a 16 da 92 56 79 7b a1 99 92 3a df ec 85 dd bb 42 b8 6e 37 48 50 45 0d a3 94 d3 f3 44 e5 5e f5 dd b4 d1 4c cd 62 b2 68 fc 92 9d 3a 2a 07 14 cb d9 1c 46 40 41 0d cf 28 83 66 ba 4e e3 a5 33 92 41 9b 5b 16 d5 5b 23 7a d0 fb 33 cd 7d f4 49 bc 7a 68 cb 97 1c 92 da 3d fc f5 e7 01 2d bc 4e 64 f0 d2 a4 e5 74 a7 b6 6c f7 9b 2c 17 57 fa 02 19 8d ac d5 90 5a 4a 2b f4 2e 82 84 59 ec 17 3b f7 bb ec 72 53 ac d7 aa 01 d4 34 45 0f e2 a2 63 cf 9f 28 b8 ce da 5a bf 63 2b 1c ee 36 38 99 ae 53 c6 8f d2 73 c0 44 fb 73 39 f4 bf 67 1a b6 ca 40 36 e9 76 24 f0 8c 6a 49 f4 2f 90 a4 4e ed f3 0c Data Ascii: /m<!-=Su&,ua~wEkx^:(TVy{:Bn7HPED^Lbh:F@A(fN3A[[#z3}Izh=-Ndtl,WZJ+.Y;rS4Ec(Zc+68SsDs9g@6v$jI/N
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 4e 3a ac f4 e8 57 b3 eb 8f 09 fd 02 d4 64 2c 99 6a f1 98 cb fe 71 84 1d 4d 30 56 0d 05 ba cc 60 13 f8 7e 87 33 d2 e7 9e 24 96 da 83 f9 7f 8a 77 a3 b2 f9 7e 97 c7 a1 77 20 fc a8 4d 56 7a 19 dc 5e 96 13 c8 04 aa 70 d9 fd bd 5d 1f 35 16 1e 44 41 c7 fe 29 c5 6e 43 ef 49 40 ac 3d 09 37 7f b1 44 01 ee 08 f4 96 1f a9 45 93 8f e8 5b 14 f0 03 1c 53 40 b6 69 d2 12 67 8d 33 8b 2d 84 a9 39 4c a0 15 c8 b0 b5 fe 0c 06 a4 ee 35 f7 43 14 3a d2 ad 59 a0 2b c0 c1 58 63 da 2d 54 34 da 82 1a 95 76 d8 e5 83 02 3b 0d 45 b2 40 de d7 21 a7 f0 9d be 02 29 5e 5e 95 6b b7 62 8e ab 8c 2f 26 00 ae 68 4f 8b ef ff c4 c9 37 7f 80 93 64 1b 10 be 27 47 2e 3e 42 86 61 b8 3d 32 56 7a d5 87 7a ba 8e 36 32 e3 87 ca 10 f6 ff 2c 5a 0e 6e e9 25 2a c4 43 47 d1 02 8a ea e5 d0 d7 d7 96 01 fa fb 54 Data Ascii: N:Wd,jqM0V`~3$w~w MVz^p]5DA)nCI@=7DE[S@ig3-9L5C:Y+Xc-T4v;E@!)^^kb/&hO7d'G.>Ba=2Vzz62,Zn%*CGT
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: ff a6 f6 c2 ec 22 08 3f 18 9f 2d 38 20 91 50 0e bc 48 e3 28 dc 8c eb b9 dc 2f 26 66 c9 62 56 05 3f 6f f9 1e 61 05 ab 9d 2e c4 fd 0e 91 ab f3 44 8e aa 30 58 cb 0e 48 2d 31 02 be cb 31 66 21 4f dd 7c eb 7b e8 5e e7 53 31 cc 01 5d 10 07 0f 27 9c 10 c0 2e 49 e8 e5 80 6b 51 e3 7d 50 96 94 e8 d2 da 2e 7f ba 67 f1 bd f2 78 80 bd fb ad 78 51 32 53 4e 6e 14 60 ce ed 36 99 89 57 e6 a7 9e 39 4f e3 65 f7 04 aa 98 67 76 d3 2d 10 bb 84 d4 f3 d7 7a dd 5e 7a 70 63 42 3e 55 78 02 2c 97 f3 18 86 6c 9f 94 7a 22 b0 91 11 96 ae 2f a3 f8 80 11 5a 8f 68 ad ac 11 84 c9 15 45 f2 74 de 19 17 ba a4 3a 4e 95 01 38 e7 a1 10 9c b0 d8 ea 28 53 89 00 e3 64 f7 3f db 9f 81 6f 3c 08 df f1 f3 7c 73 fe 16 e6 4c c1 b4 23 76 c2 0a f1 e5 7b 35 11 d4 31 a5 cd da 77 ac c3 cd 8c 06 a4 cb 2f a4 d5 Data Ascii: "?-8 PH(/&fbV?oa.D0XH-11f!O\|{^S1]'.IkQ}P.gxxQ2SNn`6W9Oegv-z^zpcB>Ux,lz"/ZhEt:N8(Sd?o<\|sL#v{51w/
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 1a 6e 3a 9c 84 90 11 c9 33 44 bc cc 6d cd bc b2 21 4c 55 17 69 e8 13 5f ca 7b bb 01 8e d3 11 a9 73 06 65 d1 48 3a 14 b4 e0 ac 40 64 96 f4 66 8d 18 a4 a7 9d b6 58 60 00 fa 46 df bd a6 44 b2 c5 79 db f0 34 da 8b d2 58 88 6d 44 82 ee 18 52 01 ea 30 4a 78 52 b6 2a 93 ad a7 ba 6e b4 5a 79 8e ff 27 ab dd 2d 6a 13 df 33 b5 b5 50 7b 4d 36 ae cd 1b 8d 85 d3 4c b7 b4 3c 8f 90 97 6a cb 67 37 37 a9 3f 27 7d 52 da 76 36 8e 5f e3 10 0e 24 9b 9c a5 31 be 1d 41 16 3e b8 29 78 ea fe 80 fd 92 29 96 47 4e 64 97 9e 2c 3d e6 52 75 73 9b a5 c9 f1 e2 45 c7 bf 25 59 6c 1a 53 ba b8 63 5f b1 c1 6f 67 e3 01 7a 6e af 8f 85 44 39 1a 92 e0 c9 d5 a5 f4 96 82 07 6b 7c a4 0b d6 90 e9 b6 70 3b 6f 4d 9d ce 22 95 fb bc cc 47 29 41 fb e9 e2 b2 a1 a7 4f c0 aa 71 0d 77 69 9e 2d 77 6d c0 c7 52 Data Ascii: n:3Dm!LUi_{seH:@dfX`FDy4XmDR0JxR*nZy'-j3P{M6L<jg77?'}Rv6_$1A>)x)GNd,=RusE%YlSc_ogznD9k\|p;oM"G)AOqwi-wmR
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 71 ab 80 07 ba 21 92 3c 7f ae 03 5e 24 f0 5e 1f b0 4d 07 81 38 54 68 ca 5e ec 29 44 91 17 e5 dc 7d 71 e7 2a f8 a6 6a 01 e3 10 a3 53 49 73 b3 9e 21 82 08 a4 1a 16 9a 03 7f 30 4f 67 71 28 17 ab dc d7 2b d8 de e7 92 17 5b fa cd 71 dd f8 ba 79 9b 38 30 11 3f 6f 23 2b cf 5b ee ca fa aa f8 c4 40 e9 30 34 1d 85 d7 87 a4 84 55 83 01 46 a0 3c 69 42 78 72 50 0f 95 7e 27 15 31 e2 6a 01 13 23 d5 f5 73 37 98 e5 16 f0 3f a7 29 62 a5 62 99 59 34 e2 c9 3e fc 2e 7f d0 3f 1c e2 2c de 7b 1d 19 b2 7b 74 fa fd ec e1 3e 6c b4 b5 08 bd c2 ed f7 5c d2 94 dc 4a 2d 3d 67 01 54 04 41 12 82 b7 87 a7 4a 49 ab 39 7a 37 7e 75 9f fc ea 1a a5 5f 54 ff f2 1d 30 81 54 27 11 c8 13 46 9c 2a 5a e7 93 6b bd 4d 15 9b 53 36 a1 1c b6 84 c8 ee df 53 f5 5f ff 94 11 39 ef 7a 0c 6e 71 f6 6a 40 a8 ad Data Ascii: q!<^$^M8Th^)D}qjSIs!0Ogq(+[qy80?o#+[@04UF<iBxrP~'1j#s7?)bbY4>.?,{{t>l\J-=gTAJI9z7~u_T0T'FZkMS6S_9znqj@
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 51 35 98 5a 76 b4 d8 40 11 41 10 f0 d2 34 4b 30 0c d5 09 d5 11 91 8f a8 ea 8a dc 80 98 b3 b9 e0 6f b1 25 87 e3 14 17 84 74 f0 19 64 bf 20 26 38 51 78 73 7c 8d 9f 6a 43 a2 92 98 99 cc 90 01 15 85 1f fa 9b 7b 4f 89 05 63 a9 92 ef b5 27 a4 b3 b4 1a a9 3d b8 a8 0b 6b 06 9f 6c d0 05 14 d7 09 c4 a4 f0 b8 dc 56 4a 93 7e b4 8d cf 6f 10 ef 31 54 e1 f7 40 fd 0a d2 94 e6 2f ff 02 a5 e6 91 0d e0 3a 9b ac 4a c4 7f fe b3 e6 50 d7 a8 12 77 a8 d1 78 fa 2c 99 ce 9d 2c 78 26 02 b0 76 fd 68 f5 94 fa f8 5a c5 3d 05 9a 68 67 62 a7 2b d0 78 63 f4 8d 42 9c 43 c9 a1 f8 3a be 1c d2 8d 3b 64 4f c3 a4 30 e3 db 6f b0 ef 5b 86 13 1b c2 96 65 ff b2 d1 0b eb 0d f1 f1 a1 a8 fa ce 8e f2 b2 81 a9 37 f5 c6 ac ee 79 0a 91 1e e6 5a c8 50 30 0d f9 10 55 af db c3 f1 50 3a 08 75 81 00 6d bf 31 Data Ascii: Q5Zv@A4K0o%td &8Qxs\|jC{Oc'=klVJ~o1T@/:JPwx,,x&vhZ=hgb+xcBC:;dO0o[e7yZP0UP:um1
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 35 26 b5 bb 47 49 80 6a ed da ec d9 5d fb c8 f8 12 38 b1 13 5b 55 5f b6 9f f7 39 fe 3e 4a 3a 1f 28 98 af 2f a8 67 39 3d 08 66 22 3b b5 1a 20 d1 bf 9c 65 d3 e7 5a 9b bd 54 b3 09 bc 39 fb 41 4a a7 ac 00 e6 80 d1 7c 6c 22 11 9a 0b 4b c5 fc ff d0 d7 93 f9 cf ab ce 57 2d e2 db e7 20 69 af f8 1d c5 69 7c 1d 30 03 a8 1e a4 56 96 a2 c6 e1 f3 85 70 4a 03 cd 0a 79 7c b1 81 94 fb 33 22 9a 76 e8 b7 08 38 5d f7 29 1d 8c ee 43 d2 27 2f f4 dd d0 d2 a7 7c 1f 90 9a 35 f4 d9 c1 70 b3 2c 4b d5 da c8 67 bf 47 cd 32 73 21 11 48 9b 3c 4e 33 f0 30 b6 d5 44 1c c6 fe d8 ec ef 0b a0 0f a7 e3 54 ba d4 63 23 e8 e8 53 e3 c8 a9 e0 ad a6 e8 34 e0 00 37 af c8 f0 56 40 5d ee ad 0c bd f5 73 86 7d a5 91 fe 3a 0e f3 29 4c dd 26 7f a1 13 42 62 7c 18 7d cd 19 59 1e 92 ee 43 11 ff b8 5f 05 77 Data Ascii: 5&GIj]8[U_9>J:(/g9=f"; eZT9AJ\|l"KW- ii\|0VpJy\|3"v8])C'/\|5p,KgG2s!H<N30DTc#S47V@]s}:)L&Bb\|}YC_w
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: f7 96 85 1c d8 4f 70 48 f4 ff a7 9a 1d cd 7b a2 22 bd 61 4c b4 60 70 f5 61 ca 1c 28 4e 8e 59 65 a0 a8 98 46 23 11 1f fd 51 61 79 21 47 64 6e be 07 17 46 74 c2 06 58 be e3 8c 29 80 81 03 fc dd b1 50 95 c8 d9 30 11 43 d2 4b 37 40 7f 44 b0 bd 84 2a 11 c6 ea e3 24 06 fa 6f 67 51 a7 a3 25 b4 e4 1e 8a 11 68 9a 81 45 6a e4 ca 09 4a a0 a6 11 02 31 c2 e3 d2 72 25 25 05 d5 7e bb e1 fe 4d 9e 3d b4 b9 9a cc 91 8b bf af 35 d3 7c dd 80 c2 74 e3 2e 36 8e ef 43 39 10 02 5e 1d 03 23 f8 e9 5a 81 74 cb e0 fc 56 2a 7d 51 25 34 d8 62 37 e1 ed de 21 7e f7 5b fa 9e d9 b6 93 f6 97 ca d3 6a 12 0e 0f 83 42 c7 e3 8f e0 2b 8f b9 7a 79 58 16 b6 8d ac 80 13 8d fa 02 f4 7a b3 b9 26 22 c1 ac 13 8d 8d 8d be f9 8c 0b 29 08 58 83 03 6f 6f e6 7d 6b 15 9a f5 b4 e9 e4 4f ab 93 54 7d f6 74 19 Data Ascii: OpH{"aL`pa(NYeF#Qay!GdnFtX)P0CK7@D$ogQ%hEjJ1r%%~M=5\|t.6C9^#ZtV}Q%4b7!~[jB+zyXz&")Xoo}kOT}t
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: c0 73 fb 29 8b a8 4a 81 78 94 ef 87 83 15 f9 5c af 6a 3e 2c 8f b0 5e 37 c7 48 3b f5 0e 7d 2c ed 2e 70 bb 9f 5d 52 7e 3f 14 78 ee af 46 0c 0e 78 2d c0 80 74 4e f9 e8 9a 0e 1e 0c 3a 79 80 42 d7 50 59 27 3f a5 64 dc 64 04 75 3a b8 44 2a 3f e7 4f c5 99 90 b1 b4 b2 0b c9 e4 34 f4 1b 9a 3b 91 b1 55 a8 6f 45 f5 37 3a ab 80 fb d9 27 c8 6b 05 0f 05 d7 eb 75 a5 dd 99 cc 11 89 a7 b6 4c 2d 09 b4 8e 7c fe 8c b6 3f 0c 07 d1 69 6c 2c a7 6e 13 b4 5c bf 08 e4 44 07 a8 25 2a ab d7 05 ee 54 74 4c 8e 2c f5 b7 4f c2 b2 1d 93 80 53 8c bc 7b 73 71 81 64 0d db fc 9d 00 63 d8 10 d4 5f b7 30 08 ca e9 eb 0a 11 cc 5f 7a 18 e4 8b 66 7c 0c d6 9e 6b 6f 62 e1 96 03 9b 7e e0 58 13 8d 9a 38 01 d5 5d e2 1a 64 f7 bc d5 16 fe d1 aa 4d 61 b7 6a f4 23 00 ef e7 59 2f e7 c0 35 3d 92 6c 82 61 f2 Data Ascii: s)Jx\j>,^7H;},.p]R~?xFx-tN:yBPY'?ddu:D?O4;UoE7:'kuL-\|?il,n\D%TtL,OS{sqdc_0_zf\|kob~X8]dMaj#Y/5=la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50032	64.233.177.119	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:48 UTC	466	OUT	GET /vi_webp/kcHoXFYUlVQ/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:48 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 10918 Date: Thu, 18 Apr 2024 19:30:48 GMT Expires: Thu, 18 Apr 2024 21:30:48 GMT Cache-Control: public, max-age=7200 ETag: "1679573038" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:48 UTC	632	IN	Data Raw: 52 49 46 46 9e 2a 00 00 57 45 42 50 56 50 38 20 92 2a 00 00 90 e5 00 9d 01 2a 80 02 e0 01 3e 6d 36 97 49 24 22 a5 22 21 f4 79 80 a0 0d 89 65 6e 96 da 67 cf 6f 17 03 6c a0 6b 12 9b f1 b7 45 ff fd 9a 5b de 33 f7 0d cd 9b 8f bc 78 8b c0 57 6e d4 f8 5f ec bf bf 77 d4 ed b7 ce fa 4e e6 05 91 bc d7 79 8b fe af f7 cf 69 bf ef 3f e0 7f 8b f7 bd fa 13 ff 37 b8 27 ea cf ec 77 f8 cf 6c 6f 5f 3f d8 ff e2 7e 20 7c 02 fe 89 fe 13 f6 9f dd d7 fc af ed 8f b9 4f ed df e8 bf 66 3f d8 fc 80 7f 49 ff 1f ff b3 b0 8f fc 6f fe 0f 61 4f e6 bf df ff f8 7a e6 fe e3 fc 1d ff 61 ff 93 fb 8d ed 63 ff f3 fe 37 b8 07 ff af 6b ff e0 1f fd 3a b1 e6 1b a5 9d 3a 1e a9 f6 b7 e3 c7 f0 9d 7f d6 b3 ef 67 e2 fd 71 7f 73 fe 5b ed bb d3 de 01 1e c5 ff 35 c0 eb b5 f9 84 7b 43 f6 5f f8 de 9a 9f 79 Data Ascii: RIFFWEBPVP8 *>m6I$""!yengolkE[3xWn_wNyi?7'wlo_?~ \|Of?IoaOzac7k::gqs[5{C_y
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 1a be a8 85 bc 84 04 b7 c4 80 c4 b4 27 35 1f e2 fa 6f a7 3c ac 05 e8 b9 4a ff 3a 9c 43 bd fc ff a2 44 a5 7c 55 a6 0a 06 f2 14 59 97 34 30 5f e1 61 b9 fc 52 43 ae c7 92 ba 2e 4f 9c 89 d7 5d 77 13 f2 36 25 7b a6 4a fd f1 74 84 b6 d2 82 a1 c0 e2 2c c0 ca 9a 51 bc bf 0e 26 5b 5a bd 2f fc f1 6b 2d 18 e2 b3 6d b1 ee 9e 75 a6 79 29 f3 92 b7 4b e8 e6 6b 8e 17 84 6d 17 c4 2f 0b 3c 33 f9 15 e4 5d 0c 9e 45 7e 21 bf 42 f9 32 48 c7 8a fc d8 2a 22 66 2b ae 05 7d d5 b6 ba 55 7b 37 63 05 30 32 84 5b 63 18 2e 3a e8 49 39 a6 6a 3e 10 6b ba 4c df b5 cc c5 94 5d a7 7e f5 b7 51 94 28 2a 51 21 1b bd b8 a1 68 fe 54 bb b4 f6 fe a4 a0 bb d2 22 22 e5 1f 0e 6e 48 94 16 57 d6 cb 3f 5c f6 c6 d0 60 00 99 52 2b 82 8a 85 39 05 fa 20 a2 98 2b a6 c8 59 51 d5 b5 d8 42 64 a3 23 ca e3 70 37 Data Ascii: '5o<J:CD\|UY40_aRC.O]w6%{Jt,Q&[Z/k-muy)Kkm/<3]E~!B2H"f+}U{7c02[c.:I9j>kL]~Q(Q!hT""nHW?\`R+9 +YQBd#p7
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 04 d2 3f 47 94 2e 86 fc 55 6c a4 64 ff f8 82 39 79 67 cf 95 ce 4c 61 63 a7 c8 46 7a f5 99 22 42 27 9a 1c 9f 6c e7 f8 22 31 91 16 38 36 85 60 f8 4f 6e 56 4d 3f f9 b1 e2 66 78 7c d1 68 15 06 47 7d c3 b7 50 46 ea 4b 58 cc ab 06 a3 ce 69 6e d0 d8 06 b5 bd dc 06 6f 87 21 d5 12 f8 b1 1b b5 f7 03 e6 aa 8f 99 ed 8d ac 8c b6 a2 4a 3c aa 44 da 46 68 94 aa bc 28 ec db 56 d5 6c a9 7a 93 0a e8 bc 35 26 e5 90 25 d9 81 8a 15 83 2f 36 01 fc bb 2e 26 1b 8d 4f 3a c5 41 d2 c2 9f f8 f5 43 74 e2 60 49 9d fb 5b be c0 cb 62 ee 8a 20 d9 43 82 b6 e7 26 ed c8 10 82 ef c1 57 c2 39 72 d9 8f 16 54 d6 a2 6e 18 0a 05 70 b7 1b a7 5d 1a 2f d9 14 64 91 72 68 fd ac 23 a0 af b9 be 6c 54 e4 40 08 9e 9b 15 fc d8 70 41 77 d8 8d 9c 34 bb de e9 83 12 eb 78 cc 41 f1 1d 4c 79 cd Data Ascii: ?G.Uld9ygLacFz"B'l"186`OnVM?fx\|hG}PFKXino!J<DFh(Vlz5&%/6.&O:ACt`I[b C&W9rTnp]/drh#lT@pAw4xALy
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: e7 aa 20 da ca 78 b3 39 4c e6 d7 45 67 3d 01 77 f6 8f 75 7b d1 1c a4 ae d3 e3 92 06 5a f2 29 1a 3c 22 7e 26 4e 4a 26 74 20 3d db 20 fd b3 34 cc 62 b1 0e ee fe 8f 44 f1 9d 73 dd 08 ca 9f ad 7b d6 5c e6 34 d2 32 c6 2c 26 51 b7 64 f2 7b a5 f1 a6 49 07 ed b5 a7 6d 82 62 c5 03 7f 96 82 10 f4 52 f2 d7 21 d6 ca 79 f6 0c eb d3 dd dc 45 22 e8 4d cf a8 17 ae bf b0 71 9e 19 07 b5 cb bb 21 6b 4c b6 cd 1b fe 61 d0 36 bd bd 39 49 9d 49 a3 db 22 ff ff 77 1d 84 f7 ba 8f e7 f3 50 a4 89 32 16 83 88 f7 6e 50 f7 1d 52 52 6d fe 02 2f 19 7a de cb 47 c1 8f 15 90 71 a3 05 f6 be 53 31 25 41 d9 cf 6c 0c 97 96 5e 7f 73 5c d1 67 64 c0 2c a0 55 ce 74 f2 b1 0e cf fe 38 4e d2 ed 4a 3c 3f e2 66 1f ac b1 5d b6 d1 46 31 a9 4c d8 fe e8 e4 20 d3 b3 2a 35 27 43 0a b3 92 b0 27 19 39 bf 55 5f Data Ascii: x9LEg=wu{Z)<"~&NJ&t = 4bDs{\42,&Qd{ImbR!yE"Mq!kLa69II"wP2nPRRm/zGqS1%Al^s\gd,Ut8NJ<?f]F1L *5'C'9U_
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: a2 bc 79 b0 10 4b 40 43 84 64 89 f8 ed 35 2a 9f 1d 6b b5 81 91 31 ed 4c 6a ad a2 85 2c 39 fc 33 df 9f 33 53 ee 8a 4d 38 f2 23 81 87 20 f6 a8 a0 d7 d9 3f 6d 5c 82 09 7e c4 fa 6a 16 a8 82 2a 6c d5 1c fe 36 60 36 15 e0 4b 19 0e b6 2d 70 3c 1f 07 e9 c8 f1 91 2a 81 6f e3 c5 82 61 02 f3 6b ff 5e f7 1d 2a dd 5b 60 d4 bd b5 36 6c 97 48 a0 58 9b 44 7f ec 32 99 5d 9f 9e ed 46 13 55 3e 30 14 bc 9e a5 64 88 31 81 15 43 77 ee 4d 5e aa 62 f7 65 3c 51 18 b6 c0 b3 a2 93 ba 1d f8 97 22 03 86 4c eb a8 5d 93 4a 4a 22 f6 d6 e5 ea 96 5b cc 63 8f fa 99 cf 24 fd 69 52 7d 45 48 b3 d7 39 01 93 b7 78 67 2d b5 5b 35 f9 93 8f d7 0d eb 43 9d dd 09 e6 4e 02 b9 36 f6 12 77 49 76 d6 90 07 37 a7 e6 b9 7a 0d 56 8f 19 8b 59 23 0a 77 2a 01 32 02 22 1b 72 67 96 fb 0f 70 f5 45 a1 4a 19 e7 e6 Data Ascii: yK@Cd5k1Lj,933SM8# ?m\~jl6`6K-p<oak^[`6lHXD2]FU>0d1CwM^be<Q"L]JJ"[c$iR}EH9xg-[5CN6wIv7zVY#w*2"rgpEJ
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 2b 2b e9 38 50 de 1e 8b 4b 50 58 f4 f8 e8 a3 8e 0b 7f 7a 91 89 ca 49 cd 57 42 cc 74 c4 56 de f3 d2 bd 1a 47 ca 48 a3 74 d2 cc 3d 34 cf ec 3d 7a 32 90 9e f9 1e 84 89 91 97 a9 c0 68 16 ea ed 77 ef 13 3e 53 35 9b 28 c0 b8 aa 73 7c 58 2f b3 ab 43 c1 18 93 10 ed 53 19 ca a7 53 09 d4 6f 23 5f 6a af 10 d7 fc 12 58 5e 1d fb 70 74 aa fb 92 f1 d4 bd dd f4 b5 ec e6 5e 52 52 70 97 2b 0b 46 6a 09 35 cd 8d 1f 76 b0 5e 8f b3 6f ef a4 d5 d1 c8 65 11 86 c7 76 e1 8a 27 c4 20 2e 44 22 aa 0f 94 4c ea 61 43 88 08 9f 0f a8 ef c4 5e 79 bd b7 4b f5 ad 78 c2 02 79 bf b9 35 a8 76 4a 2f 45 67 fc b9 7d b7 88 aa f8 f4 9e 9c 31 85 df e8 0c 6c 7a 59 4b 8b d3 4a 5b 8a 7a d7 f2 ec 9c 34 01 e7 de 82 a7 d7 7b 97 42 ad 9a 6c f3 ba 97 54 1b c3 4e 86 78 d7 57 ad 79 2f 9f cc e7 22 89 ca f1 46 Data Ascii: ++8PKPXzIWBtVGHt=4=z2hw>S5(s\|X/CSSo#_jX^pt^RRp+Fj5v^oev' .D"LaC^yKxy5vJ/Eg}1lzYKJ[z4{BlTNxWy/"F
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: bb 13 b9 2a c5 1b 65 97 5d 21 17 a5 4f 74 dd 5a c7 87 f7 de d9 af 35 fd 0c ef 57 9a 97 6c f3 76 9f e6 e6 a7 bf d9 2d f7 e5 3a 7e 65 1d a0 bd 97 f3 a2 1d 1e 5e a3 cb dc 0d a9 ae dc b4 4f 91 d3 e6 7c 0e 51 df fb 8e e6 10 fc 0f 0a 9b 94 f7 20 9e c0 05 ba 75 2a c8 85 23 7b 25 2a d6 85 49 29 08 d3 c0 8a c8 02 a3 18 21 73 23 2d 23 de ca b9 6a 48 d5 37 40 e4 a7 31 b2 de 44 e2 11 3a dd 57 1e d2 05 4f c5 77 6e 8e d8 d7 ba 49 32 ef 44 06 4f 87 b2 76 6e 5d 22 b6 de cc 54 c9 01 bd 3b ff db 8d 64 0d 93 5e b0 b8 c4 70 d3 1a cc d2 6e f0 8d 03 47 f4 60 f2 9b c5 50 34 76 8a 8e 6b 1e da b8 b0 56 8e c2 6b 57 d2 20 d1 f7 e3 2a cb bd c4 2e f7 cd 9b 2d e6 9e 09 bd 38 57 17 c4 8e 98 3f e7 e7 b8 42 ca 90 72 0a ee 0e 08 8f 7e e9 b1 0b 33 f9 d5 b4 3b 0b 27 c4 a5 b9 0c f6 07 a6 0e Data Ascii: e]!OtZ5Wlv-:~e^O\|Q u#{%I)!s#-#jH7@1D:WOwnI2DOvn]"T;d^pnG`P4vkVkW .-8W?Br~3;'
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: 6c 28 4a 32 41 2a bf cd 12 6c 32 68 96 4c e4 2c c9 0a ea 02 53 b3 eb 9e 97 2a e1 06 0e 33 46 a0 ec 7a 11 cc e8 45 11 f1 e6 35 2b c1 f6 aa 30 3b cd 98 5f 20 44 65 6f a6 d0 cd 04 90 8b c5 80 81 d8 81 48 b8 06 b3 0a 47 53 6f 8f 06 f0 a2 1a 69 d1 27 e5 d2 e6 11 1e 73 87 c0 37 9b 46 42 05 d5 0a bd 75 6d 15 42 ed 43 54 cf a8 36 e6 e4 f7 30 6b 02 09 1c f1 c1 88 89 aa cc 3a 5b 22 82 ec 43 17 7d af 7a a3 56 ca 22 94 77 b4 af b0 d2 ba 31 f2 9c 1c 44 49 0d 53 e4 ac 7a ad e4 83 7d 84 31 3b 8c 3a ac f5 eb 20 b7 ee 75 b5 c4 fe ea 83 2d 2f 76 6a 0d c8 82 3f 18 ff d4 f1 af 7e 2e e6 f3 cc 4b 49 f6 b4 3c 9c 5f 71 a4 45 48 ae 2e a2 f9 63 cb 76 6c f0 f5 0b 37 0e 9d 6b fb 7f 58 fe c4 2a 49 59 cf f3 42 4e 38 7e 46 bf 1f e5 fa 70 e9 a6 83 d0 3e 99 39 21 5e 77 7e ef 81 1a d0 82 Data Ascii: l(J2Al2hL,S3FzE5+0;_ DeoHGSoi's7FBumBCT60k:["C}zV"w1DISz}1;: u-/vj?~.KI<_qEH.cvl7kX*IYBN8~Fp>9!^w~
2024-04-18 19:30:48 UTC	1255	IN	Data Raw: cf 95 47 bc b9 12 ae 64 f3 bf 15 ee 1f 0d ef 32 e9 bb 23 4d d7 3e 0c 14 a8 40 8c 76 8a e6 82 9b d0 22 39 ec 88 84 d7 30 7f bc 59 02 e7 ba 32 42 56 99 5a f4 5d 59 44 31 e0 01 ca 58 d7 27 5f ba 7a c9 2c 10 7c d1 e3 c4 eb 7e fe 96 ab 75 d0 3d 89 ea 90 05 cd 10 03 34 6c ac d0 87 e9 7b f1 00 05 ed 2b 56 ea 0d e2 a1 25 8e c0 a5 dd 39 96 4f 2c dd 19 ac d4 8e 31 4f 22 a9 3f 05 e9 0e 77 d4 2d 60 ae a3 2a 9c c6 a6 b3 0a b7 08 ef 7e 48 3a 70 0c 37 d0 87 f8 43 03 93 d2 30 c0 09 d5 0b 4f 77 37 8f 0a 5a 16 ae af 09 d0 00 ee 18 3d 7b c9 49 ef 56 13 fe 81 27 10 4f fb 3c a0 4d cc ea f6 86 49 6d 97 01 cb c2 cb 98 73 d5 f8 d0 a4 31 fd 41 eb 18 26 71 61 8f a8 e0 1e a3 04 5a da be 94 0f 61 2e f3 26 75 e2 86 27 35 f2 0d a8 e5 05 86 9a dd d6 2e a3 8c 78 3b d4 fe 52 91 5a c1 c0 Data Ascii: Gd2#M>@v"90Y2BVZ]YD1X'_z,\|~u=4l{+V%9O,1O"?w-`*~H:p7C0Ow7Z={IV'O<MIms1A&qaZa.&u'5.x;RZ
2024-04-18 19:30:48 UTC	246	IN	Data Raw: a8 0f da 46 6a 0e ea c2 11 a9 d9 5c 76 c1 48 40 b3 ec 52 34 31 16 b4 9b 52 01 a6 cb df 51 61 8c bc 53 ba cd 24 ed 88 89 6e c1 22 8a 36 d2 72 4c 11 af 59 98 3e a4 ae 36 af 67 34 c6 ba a2 19 44 b1 fd 30 63 03 51 22 13 33 d1 bf 44 cc 77 bc 29 45 f7 fc 8e 7a fe 49 a7 88 6e 77 2a d9 74 ae 0f 68 5c 95 8b ad e4 b4 73 cf 8f 5f 7d ed fc 6c 35 67 1f 1d 05 91 bc 2d d3 5b cf bf 55 be 52 85 62 86 a4 80 a1 41 12 9d 50 97 17 4d 43 63 e1 e5 3b a7 82 3e 3a d1 26 07 93 ae f4 90 9d 08 9e 0c 64 4a 30 99 5c a3 4b be c3 2b 69 db e2 cf 41 10 10 f2 9b 1f 4e c4 f8 05 fc 07 d7 8a 0f 7f aa 82 e5 d7 38 30 de b1 37 18 0e cf 0d 3b 66 9d 5f 16 72 79 9d 24 b9 75 04 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Fj\vH@R41RQaS$n"6rLY>6g4D0cQ"3Dw)EzInw*th\s_}l5g-[URbAPMCc;>:&dJ0\K+iAN807;f_ry$u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50033	142.250.105.132	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:49 UTC	534	OUT	GET /K1O63kjyY-HyaTz3j3XD8cyDN6SUjD0vGlw8Ro7HdRmx51DgX4D3DhO63ZTc37ayTHUBWfvCtA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:49 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Apr 2024 19:30:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 19:30:49 GMT Server: fife Content-Length: 2342 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:49 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 09 09 08 0f 0f 08 0a 08 09 09 08 0c 09 0d 0a 08 09 08 08 09 0c 08 08 0a 08 08 09 0a 08 0d 08 08 08 08 08 07 08 08 08 09 0b 16 08 08 08 09 09 0b 09 0a 09 0b 18 16 08 0d 08 08 0b 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0d 0b 0d 0e 0f 14 13 10 10 10 0d 0f 10 12 10 10 0d 0f 10 11 0f 0f 10 10 10 11 0e 0f 0e 12 12 0f 13 11 0f 10 12 0f 0d 13 10 15 10 13 14 0f 10 0d 0e 11 12 10 0f ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 07 08 05 06 09 04 03 01 ff c4 00 30 10 00 02 01 03 02 05 02 05 02 07 00 00 00 00 00 00 01 02 03 00 04 11 05 12 07 08 13 21 31 06 41 14 22 23 51 72 24 71 32 33 42 52 61 82 a3 ff c4 Data Ascii: JFIFDD0!1A"#Qr$q23BRa
2024-04-18 19:30:49 UTC	1255	IN	Data Raw: 9f 0c be 78 a7 46 b0 ce 76 6b 83 9a 4f 81 23 29 27 90 06 4f 45 99 e0 5f 30 f3 e9 6e 8a cc d3 d8 12 03 42 49 73 12 f6 1b ed 32 4e cd 83 bf 41 7e 9b 8c f6 46 6d e3 2f 09 c7 2a d9 b8 31 e7 35 2e 63 72 3b b7 fb 6d d2 0a c0 e2 3e 17 a1 8b 31 d5 18 03 2e 06 ce db 31 e8 fe b3 f7 6e 39 92 04 2e 80 e9 9a 9a 4d 1c 6e 8e 24 8e 54 59 11 d0 e5 5a 37 01 95 94 8f 2a ca 41 cf da ae 26 3d af 68 73 4c 82 34 3d 97 33 56 a2 fa 35 1d 4a a0 2d 73 49 04 1d c1 06 08 3d c2 f5 57 da f1 4a 22 51 16 81 c7 bf 57 b5 96 95 7f 2a b1 49 04 3d 34 61 e5 65 b8 65 b7 8d 87 f9 49 25 56 ef db b5 6a 31 6b 93 6d 67 56 ab 77 0d d3 c4 e8 3d ca 92 f0 d5 8b 6f b1 3a 14 1e 25 a5 d2 47 56 b4 17 11 e6 1a 42 a1 9c 13 e1 d0 d4 75 0b 58 0e 44 24 97 93 61 da 45 bc 2b b9 82 90 43 29 90 85 8b 72 9d ca 5c 37 Data Ascii: xFvkO#)'OE_0nBIs2NA~Fm/15.cr;m>1.1n9.Mn$TYZ7A&=hsL4=3V5J-sI=WJ"QW*I=4aeeI%Vj1kmgVw=o:%GVBuXD$aE+C)r\7
2024-04-18 19:30:49 UTC	363	IN	Data Raw: 30 ee 08 04 60 80 6b c6 b5 1a 75 98 69 d5 68 73 4f 22 24 2c 9b 6b aa d6 b5 05 6a 0f 2c 78 d8 83 07 ff 00 75 ea ab e7 a9 b9 1b b3 90 b1 86 ea 7b 4c f8 47 db 75 12 fe 3d 42 93 91 f9 dc 31 fd aa 1b 71 c2 76 ef 24 d1 7b 99 db 47 01 eb f3 47 fc 95 9f 69 f1 12 f2 98 02 e6 93 2a 77 12 c7 1f 49 67 a3 02 f0 68 7c 89 40 a4 75 75 19 a6 00 e7 10 45 1d b6 40 39 c1 2e d7 27 07 c7 ca 54 e3 c1 53 82 3c 68 70 8d 26 eb 5a ab 9d e0 03 47 f5 3e eb 22 e3 e2 3d 77 08 b7 b7 6b 7b b9 ce 7f 9e 99 07 ac f7 95 bb fa db 95 1d 3e 7b 21 0c 30 25 a4 b1 16 92 29 d4 17 7e b3 aa 2b 7c 43 31 32 4e 92 ac 71 ab 6f 62 db 51 31 b4 c6 98 dd 5d 60 36 d5 6d c5 0a 6d cb 12 41 e8 7b f3 33 cd 47 f0 fe 34 c4 28 5e 7e 62 e1 e6 a3 5d 01 cc 3a 0c a0 92 32 81 a3 48 92 44 0e 66 66 4c e0 39 71 e5 87 e0 18 Data Ascii: 0`kuihsO"$,kj,xu{LGu=B1qv${GGi*wIgh\|@uuE@9.'TS<hp&ZG>"=wk{>{!0%)~+\|C12NqobQ1]`6mmA{3G4(^~b]:2HDffL9q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50035	108.177.122.157	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:49 UTC	535	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:49 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:30:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:49 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 63 59 54 43 77 49 34 68 50 71 6a 45 41 6f 2d 4f 61 6c 6c 6d 4b 53 48 4d 44 41 4f 6a 72 59 78 68 49 7a 6e 2d 5a 4e 47 6c 6e 57 47 6a 71 41 64 73 79 53 32 74 50 6b 33 74 71 6c 6c 51 77 32 57 72 4f 51 2d 6e 62 58 4d 46 35 31 45 39 71 6c 2d 38 61 47 49 76 49 6d 44 69 65 4c 77 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKocYTCwI4hPqjEAo-OallmKSHMDAOjrYxhIzn-ZNGlnWGjqAdsyS2tPk3tqllQw2WrOQ-nbXMF51E9ql-8aGIvImDieLw"}
2024-04-18 19:30:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50036	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:50 UTC	1627	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 11131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713468644136&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C540%2C304&vis=1&wgl=true&ca_type=image&bid=ANyPxKoobM54V-NhALhY46iyU1u6Mn0rS8UmPt5luAdMVWcS3HCkvmZgRer7ysfdsI8a7Im_IfT1SwPxsD2Hi578T2eHTbLPEw sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713468648525 Content-Type: application/json X-Goog-Event-Time: 1713468648525 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtzbVdkR3F5dnNnWSjj6YWxBjIKCgJVUxIEGgAgKw%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:50 UTC	11131	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 50 70 68 62 45 47 45 49 4f 5f 73 41 55 51 31 74 61 77 42 52 44 75 73 37 41 46 45 4a 61 56 73 41 55 51 5f 49 57 77 42 52 43 7a 30 37 41 46 45 4e 57 49 73 41 55 51 7a 4e 2d 75 42 52 44 30 71 37 41 46 45 50 4f 68 73 41 55 51 69 4f 4f 76 42 52 44 47 5f 62 63 69 45 4e 33 6f 5f 68 49 51 74 36 75 77 42 52 44 76 7a 62 41 46 45 4f 4f 56 73 41 55 51 36 73 4f 76 42 52 44 4f 32 4c 41 46 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COPphbEGEIO_sAUQ1tawBRDus7AFEJaVsAUQ_IWwBRCz07AFENWIsAUQzN-uBRD0q7AFEPOhsAUQiOOvBRDG_bciEN3o_hIQt6uwBRDvzbAFEOOVsAUQ6sOvBRDO2LAFEP
2024-04-18 19:30:50 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 19:30:50 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:50 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 19:30:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50037	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:50 UTC	1627	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10396 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713468644127&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C565%2C318&vis=1&wgl=true&ca_type=image&bid=ANyPxKpirYkTnUM1VtTtB20vtEQ5XHIN3xO2IHcf2ouShggZy7-ZLIeP5Ufq70OPrnug2vbGFQ51XgjSjBBco7jSdcTTFcKqzw sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713468648538 Content-Type: application/json X-Goog-Event-Time: 1713468648538 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtzbVdkR3F5dnNnWSjj6YWxBjIKCgJVUxIEGgAgKw%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:50 UTC	10396	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 50 70 68 62 45 47 45 4c 32 4b 73 41 55 51 36 35 4f 75 42 52 44 6e 75 71 38 46 45 4d 7a 66 72 67 55 51 74 2d 72 2d 45 68 44 5f 33 37 41 46 45 4f 76 6f 5f 68 49 51 34 35 57 77 42 52 44 64 33 62 41 46 45 49 6a 6a 72 77 55 51 76 74 69 77 42 52 44 51 6a 62 41 46 45 4b 4b 42 73 41 55 51 38 36 47 77 42 52 44 75 73 37 41 46 45 4a 33 51 73 41 55 51 6d 76 43 76 42 52 44 37 32 72 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COPphbEGEL2KsAUQ65OuBRDnuq8FEMzfrgUQt-r-EhD_37AFEOvo_hIQ45WwBRDd3bAFEIjjrwUQvtiwBRDQjbAFEKKBsAUQ86GwBRDus7AFEJ3QsAUQmvCvBRD72rAFEL
2024-04-18 19:30:50 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 19:30:50 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:50 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 19:30:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50039	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:50 UTC	936	OUT	GET /generate_204?TKHpgw HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:50 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:50 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50038	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:50 UTC	936	OUT	GET /generate_204?F4TfAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:50 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:50 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50042	142.250.9.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:50 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:50 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 19:30:50 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:50 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 19:30:50 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50046	142.250.9.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:51 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:51 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 19:30:51 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:51 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 19:30:51 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50047	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:53 UTC	1347	OUT	GET /politicas-de-cookies/questor-zen/ HTTP/1.1 Host: www.questor.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468635.47.0.0; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjM4MDI4fQ==; _clsk=7jxt0%7C1713468639357%7C2%7C1%7Cl.clarity.ms%2Fcollect; _ga_43W2WYML5H=GS1.1.1713468627.1.1.1713468641.0.0.0
2024-04-18 19:30:54 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:30:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.17 Link: <https://www.questor.com.br/wp-json/>; rel="https://api.w.org/" Link: <https://www.questor.com.br/wp-json/wp/v2/pages/10406>; rel="alternate"; type="application/json" Link: <https://www.questor.com.br/?p=10406>; rel=shortlink
2024-04-18 19:30:54 UTC	1007	IN	Data Raw: 33 65 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a Data Ascii: 3e8<!doctype html><html lang="pt-BR"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, nofollow' />
2024-04-18 19:30:54 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 20 70 6f 72 20 69 73 73 6f 2c 20 70 72 65 70 61 72 61 6d 6f 73 20 65 73 74 61 20 50 6f 6c c3 ad 74 69 63 61 20 70 61 72 61 20 69 6e 66 6f 72 6d 61 72 20 64 65 20 66 6f 72 6d 61 20 63 6c 61 72 61 20 65 20 64 69 72 65 74 61 20 5b 26 68 65 6c 6c 69 70 3b 5d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 70 6f 6c 69 74 69 63 61 73 2d 64 65 2d 63 6f 6f 6b 69 65 73 2f 71 75 65 73 74 6f 72 2d 7a 65 6e 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 51 75 65 73 74 6f 72 20 2d 20 73 69 73 74 65 6d 61 73 20 63 Data Ascii: 1000 por isso, preparamos esta Poltica para informar de forma clara e direta […]" /><meta property="og:url" content="https://www.questor.com.br/politicas-de-cookies/questor-zen/" /><meta property="og:site_name" content="Questor - sistemas c
2024-04-18 19:30:54 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: 1000var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t
2024-04-18 19:30:54 UTC	1492	IN	Data Raw: 35 63 64 0d 0a 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 30 30 64 30 38 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 38 65 64 31 66 63 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 Data Ascii: 5cd--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset
2024-04-18 19:30:54 UTC	1405	IN	Data Raw: 35 37 36 0d 0a 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 30 25 2c 72 67 62 28 35 31 2c 31 36 37 2c 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 Data Ascii: 57692) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126)
2024-04-18 19:30:54 UTC	1405	IN	Data Raw: 35 37 36 0d 0a 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 Data Ascii: 576 !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body
2024-04-18 19:30:54 UTC	2599	IN	Data Raw: 61 32 30 0d 0a 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 Data Ascii: a20-preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-gr
2024-04-18 19:30:54 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d Data Ascii: 1000inous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-
2024-04-18 19:30:54 UTC	2901	IN	Data Raw: 62 34 65 0d 0a 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 6c 69 63 6b 2d 74 68 65 6d 65 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 67 69 74 65 63 68 2f 63 73 73 2f 73 6c 69 63 6b 2d 74 68 65 6d 65 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 32 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f Data Ascii: b4e /><link rel='stylesheet' id='slick-theme-css' href='https://www.questor.com.br/wp-content/themes/engitech/css/slick-theme.css?ver=6.5.2' type='text/css' media='all' /><link rel='stylesheet' id='magnific-popup-css' href='https://www.questor.com.br/
2024-04-18 19:30:54 UTC	1201	IN	Data Raw: 34 61 61 0d 0a 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 37 2e 31 22 20 69 64 3d 22 6a 71 75 65 72 79 2d 63 6f 72 65 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 69 6e 63 6c 75 64 65 73 Data Ascii: 4aas://fonts.gstatic.com/" crossorigin><script type="text/javascript" src="https://www.questor.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" id="jquery-core-js"></script><script type="text/javascript" src="https://www.questor.com.br/wp-includes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50057	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:55 UTC	695	OUT	GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c6ea8d8e630f57d377818da4c8bd1b8c" If-Modified-Since: Thu, 21 Dec 2023 11:41:45 GMT
2024-04-18 19:30:56 UTC	494	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 19:30:57 GMT Last-Modified: Thu, 21 Dec 2023 11:41:45 GMT Cache-Control: no-cache x-amz-version-id: TE0H92uWvbxvP5WbDnKffpRjpMGxk2Jl Server: AmazonS3 ETag: "c6ea8d8e630f57d377818da4c8bd1b8c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 12dcec9e9455cb3092110c9f79ca8696.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: vjY-GzpBMsU87-M6WukwiykIMfXVwpxQD7uYUgxZRf3_UDo87pYvjg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50056	13.107.246.41	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:55 UTC	648	OUT	GET /tag/uet/343080441?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-18 19:30:56 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:56 GMT Content-Type: application/x-javascript Content-Length: 721 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2 x-azure-ref: 20240418T193056Z-r1f585c6b654cgwleayu8v9rpg00000006gg00000000basm X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-18 19:30:56 UTC	721	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 43 6c 61 72 69 74 79 49 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 33 34 33 30 38 30 34 34 31 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","ClarityInsights")}),!1);a[c]("metadata",(function(){a[c]("set","_u","343080441")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50061	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:56 UTC	1626	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1660 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713468644127&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C565%2C318&vis=2&wgl=true&ca_type=image&bid=ANyPxKpirYkTnUM1VtTtB20vtEQ5XHIN3xO2IHcf2ouShggZy7-ZLIeP5Ufq70OPrnug2vbGFQ51XgjSjBBco7jSdcTTFcKqzw sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713468654708 Content-Type: application/json X-Goog-Event-Time: 1713468654708 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtzbVdkR3F5dnNnWSjj6YWxBjIKCgJVUxIEGgAgKw%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:56 UTC	1660	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4f 50 70 68 62 45 47 45 4c 32 4b 73 41 55 51 36 35 4f 75 42 52 44 6e 75 71 38 46 45 4d 7a 66 72 67 55 51 74 2d 72 2d 45 68 44 5f 33 37 41 46 45 4f 76 6f 5f 68 49 51 34 35 57 77 42 52 44 64 33 62 41 46 45 49 6a 6a 72 77 55 51 76 74 69 77 42 52 44 51 6a 62 41 46 45 4b 4b 42 73 41 55 51 38 36 47 77 42 52 44 75 73 37 41 46 45 4a 33 51 73 41 55 51 6d 76 43 76 42 52 44 37 32 72 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"COPphbEGEL2KsAUQ65OuBRDnuq8FEMzfrgUQt-r-EhD_37AFEOvo_hIQ45WwBRDd3bAFEIjjrwUQvtiwBRDQjbAFEKKBsAUQ86GwBRDus7AFEJ3QsAUQmvCvBRD72rAFEL
2024-04-18 19:30:56 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 19:30:56 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:56 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 19:30:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50060	64.233.177.156	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:56 UTC	1478	OUT	GET /td/rul/1027983844?random=1713468654473&cv=11&fst=1713468654473&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:56 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 19:30:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50065	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:56 UTC	1354	OUT	GET /pagead/viewthroughconversion/1027983844/?random=1713468654473&cv=11&fst=1713468654473&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:30:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:30:56 UTC	552	IN	Data Raw: 39 34 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 949(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 19:30:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 19:30:56 UTC	577	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 36 36 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 6a 65 34 34 66 30 76 38 37 34 39 34 30 33 36 31 7a 38 38 35 34 37 36 37 35 35 34 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 70 6f 6c 69 74 69 63 61 73 2d 64 65 2d 63 6f 6f 6b 69 65 73 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 Data Ascii: fst\x3d1713466800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45je44f0v874940361z8854767554za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F
2024-04-18 19:30:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50064	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:56 UTC	876	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:56 UTC	466	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=10, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50063	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:56 UTC	986	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:56 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:56 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 19:30:56 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50068	142.250.9.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:56 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:30:57 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 19:30:57 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:57 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 19:30:57 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50071	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:57 UTC	638	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:57 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:30:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50070	142.251.15.103	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:57 UTC	1181	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468654473&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNf2k7qoR8SIQKyLJZa5C03JGRQtclteuSFBMuyko4jcWlODs&random=2501142473&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50072	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:57 UTC	675	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&rl=&if=false&ts=1713468654429&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468654249&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:57 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:30:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:30:57 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50073	172.67.75.61	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:57 UTC	786	OUT	POST /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468655&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:57 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:57 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate access-control-allow-origin: * vary: Origin access-control-max-age: 1728000 x-request-id: fbecedb7-e597-4d0c-9c16-d0c50fa7bd07 access-control-allow-methods: GET, PUT, POST, OPTIONS etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.027329 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fE15BEHX%2F%2BZL5ZpVGgppgCo6LhC0KZnNFCP%2Bmq5y2N1XCxE71zgsYh7s7MqPHal33B17Qyr%2FDfrJHCS%2FuwQhaKNBvJDbRVZwA3Tq61eIlJHk57O%2B20SWs6SHozoeUfzpI3e2cKQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87671285f88c53fd-ATL
2024-04-18 19:30:57 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:30:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50074	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:57 UTC	656	OUT	POST /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive Content-Length: 249 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:57 UTC	249	OUT	Data Raw: 75 72 6c 3d 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 70 6f 6c 69 74 69 63 61 73 2d 64 65 2d 63 6f 6f 6b 69 65 73 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 26 74 6f 6b 65 6e 3d 38 38 32 38 66 66 39 30 38 64 35 30 30 36 39 65 61 39 31 32 31 32 62 30 64 38 33 36 62 62 31 65 26 74 69 74 6c 65 3d 51 75 65 73 74 6f 72 2d 5a 65 6e 25 32 30 2d 25 32 30 51 75 65 73 74 6f 72 25 32 30 2d 25 32 30 73 69 73 74 65 6d 61 73 25 32 30 63 6f 6e 74 25 43 33 25 41 31 62 65 69 73 25 32 43 25 32 30 65 6d 70 72 65 73 61 72 69 61 69 73 25 32 30 65 25 32 30 63 6f 72 70 6f 72 61 74 69 76 6f 73 26 63 6c 69 65 6e 74 5f 69 64 3d 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: url=www.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&token=8828ff908d50069ea91212b0d836bb1e&title=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&client_id=53b33b18-bcee-43ee-b003-f4993221269f
2024-04-18 19:30:57 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:57 GMT Content-Type: text/html;charset=utf-8 Content-Length: 36 Connection: close Access-Control-Allow-Origin: https://www.questor.com.br Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: *, Content-Type, Accept, AUTHORIZATION, Cache-Control Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1728000 Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma Set-Cookie: _rdtrk=53b33b18-bcee-43ee-b003-f4993221269f; domain=.rdstation.com.br; expires=Sun, 01 Jan 2034 00:00:00 -0000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15724800; includeSubDomains X-Robots-Tag: noindex, nofollow
2024-04-18 19:30:57 UTC	36	IN	Data Raw: 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: 53b33b18-bcee-43ee-b003-f4993221269f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50077	142.250.105.104	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:58 UTC	943	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468654473&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&frm=0&tiba=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNf2k7qoR8SIQKyLJZa5C03JGRQtclteuSFBMuyko4jcWlODs&random=2501142473&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:58 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:30:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:30:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50079	104.26.10.199	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:58 UTC	526	OUT	GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fpoliticas-de-cookies%2Fquestor-zen%2F&time=1713468655&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:58 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:30:58 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate vary: Origin x-request-id: 9ea1bc8b-9646-408c-80b9-98ff82e449c8 etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.017877 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V3sNl1fgun8CUD%2BX8V3SI5ctcVFZtQ8xDWKSuPnxQw3yFyeg9e8%2Bth24k38Id%2FqUzVz%2BRukyIVzAhJo%2FLpTLlQUtjmjBe5QhxiSpwo%2FUWiLx%2FJXW25Ox2ufsmDeaLb4ODsOTsS8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8767128a3a631d80-ATL
2024-04-18 19:30:58 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:30:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50078	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:58 UTC	360	OUT	GET /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:58 UTC	129	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 19:30:58 GMT Content-Type: / Transfer-Encoding: chunked Connection: close
2024-04-18 19:30:58 UTC	2371	IN	Data Raw: 39 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 0a 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 0a 20 20 20 20 20 20 7d 29 3b 20 76 61 72 20 66 20 3d 20 64 Data Ascii: 937<!DOCTYPE html><html><head> <meta charset="UTF-8"> ... Google Tag Manager --> <script>(function (w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50076	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:58 UTC	691	OUT	GET /popup/show.json?account_id=703230&uniq=_iuh09f9i7&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:58 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:30:58 GMT Connection: close
2024-04-18 19:30:58 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50081	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:58 UTC	481	OUT	GET /popup/show.json?account_id=703230&uniq=_iuh09f9i7&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcG9saXRpY2FzLWRlLWNvb2tpZXMvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:30:59 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:30:59 GMT Connection: close
2024-04-18 19:30:59 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50082	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:30:59 UTC	641	OUT	GET / HTTP/1.1 Host: www.questor.net.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:00 UTC	207	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 18 Apr 2024 19:30:59 GMT Content-Length: 0 Connection: close Location: https://www.questor.com.br/questor-zen/ Strict-Transport-Security: max-age=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50048	209.14.140.191	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:00 UTC	1326	OUT	GET /questor-zen/ HTTP/1.1 Host: www.questor.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1052122086.1713468621; _ga=GA1.1.990543739.1713468623; _fbp=fb.2.1713468624032.1132749747; _clck=1jurj8p%7C2%7Cfl1%7C0%7C1569; rdtrk=%7B%22id%22%3A%2253b33b18-bcee-43ee-b003-f4993221269f%22%7D; _uetsid=183d29c0fdba11eeb5b637c5106dde09; _uetvid=183e98e0fdba11ee8f2f4d0d5beef3d6; _ga_WZY91LD4XC=GS1.1.1713468622.1.1.1713468654.28.0.0; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNzEzNDY4NjU1MzIwfQ==; _clsk=7jxt0%7C1713468655852%7C3%7C1%7Cl.clarity.ms%2Fcollect; _ga_43W2WYML5H=GS1.1.1713468627.1.1.1713468656.0.0.0
2024-04-18 19:31:00 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.17 Link: <https://www.questor.com.br/wp-json/>; rel="https://api.w.org/" Link: <https://www.questor.com.br/wp-json/wp/v2/pages/15279>; rel="alternate"; type="application/json" Link: <https://www.questor.com.br/?p=15279>; rel=shortlink
2024-04-18 19:31:00 UTC	1007	IN	Data Raw: 33 65 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 Data Ascii: 3e8<!doctype html><html lang="pt-BR"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='index, follow, max-ima
2024-04-18 19:31:00 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 66 69 63 61 72 c3 a1 20 61 73 20 74 72 6f 63 61 73 20 64 65 20 64 6f 63 75 6d 65 6e 74 6f 73 20 63 6f 6d 20 73 65 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 43 6f 6e 68 65 c3 a7 61 20 6d 61 69 73 21 20 4f 20 64 69 61 20 61 20 64 69 61 20 64 61 20 63 6f 6e 74 61 62 69 6c 69 64 61 64 65 20 c3 a9 20 73 65 6d 70 72 65 20 6d 75 69 74 6f 20 62 75 72 6f 63 72 c3 a1 74 69 63 6f 2e 20 53 c3 a3 6f 20 64 65 7a 65 6e 61 73 20 64 65 20 64 6f 63 75 6d 65 6e 74 6f 73 20 71 75 65 20 70 72 65 63 69 73 61 6d 20 73 65 72 20 63 6f 6d 70 61 72 74 69 6c 68 61 64 6f 73 20 65 6e 74 72 65 20 6f 20 65 73 63 72 69 74 c3 b3 72 69 6f 20 65 20 5b 26 68 65 6c 6c 69 70 3b 5d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 Data Ascii: aecficar as trocas de documentos com seus clientes. Conhea mais! O dia a dia da contabilidade sempre muito burocrtico. So dezenas de documentos que precisam ser compartilhados entre o escritrio e […]" /><meta property="og:url" cont
2024-04-18 19:31:00 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 6f 6e 22 7d 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 7d 2c 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 5d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 70 74 2d 42 52 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 40 69 64 22 Data Ascii: 1000on"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.questor.com.br/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"Organization","@id"
2024-04-18 19:31:00 UTC	2792	IN	Data Raw: 61 65 31 0d 0a 72 79 74 68 69 6e 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 2c 22 66 6c 61 67 22 21 3d 3d 74 26 26 28 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 29 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 6e 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 6e 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 44 4f 4d 52 65 61 64 79 3d Data Ascii: ae1rything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady=!1,n.readyCallback=function(){n.DOMReady=
2024-04-18 19:31:00 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 Data Ascii: aecadient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,4
2024-04-18 19:31:00 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f Data Ascii: 1000 .is-layout-grid{display: grid;}body .is-layout-grid > *{margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-po
2024-04-18 19:31:00 UTC	104	IN	Data Raw: 36 32 0d 0a 6f 72 61 6e 67 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 0d 0a Data Ascii: 62orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminou
2024-04-18 19:31:00 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 Data Ascii: aecs-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: v
2024-04-18 19:31:00 UTC	2803	IN	Data Raw: 61 65 63 0d 0a 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6e 67 69 74 65 63 68 2d 66 6c 61 74 69 63 6f 6e 2d 66 6f 6e 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 67 69 74 65 63 68 2f 63 73 73 2f 66 6c 61 74 69 63 6f 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 32 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 6c 69 63 6b 2d 73 6c 69 64 65 72 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 2f 77 70 Data Ascii: aeck rel='stylesheet' id='engitech-flaticon-font-css' href='https://www.questor.com.br/wp-content/themes/engitech/css/flaticon.css?ver=6.5.2' type='text/css' media='all' /><link rel='stylesheet' id='slick-slider-css' href='https://www.questor.com.br/wp
2024-04-18 19:31:00 UTC	997	IN	Data Raw: 33 64 65 0d 0a 32 47 69 55 59 35 68 38 61 44 52 2f 4c 68 59 78 50 59 69 58 68 33 73 41 41 47 47 44 6b 46 76 46 71 57 67 46 76 54 73 54 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 67 6f 6f 67 6c 65 2d 66 6f 6e 74 73 2d 31 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 2b 53 6c 61 62 25 33 41 31 30 30 25 32 43 31 30 30 69 74 61 6c 69 63 25 32 43 32 30 30 25 32 43 32 30 30 69 74 61 6c 69 63 25 32 43 33 30 30 25 32 43 33 30 30 69 74 61 6c 69 63 25 32 43 34 30 30 25 32 43 34 30 30 69 74 61 6c 69 63 25 32 43 35 Data Ascii: 3de2GiUY5h8aDR/LhYxPYiXh3sAAGGDkFvFqWgFvTsTd" crossorigin="anonymous" /><link rel='stylesheet' id='google-fonts-1-css' href='https://fonts.googleapis.com/css?family=Roboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50084	216.239.36.181	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	1244	OUT	POST /g/collect?v=2&tid=G-WZY91LD4XC&gtm=45je44f0v874940361z8854767554za200&_p=1713468653699&gcd=13l3l3l3l1&npa=0&dma=0&cid=990543739.1713468623&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713468622&sct=1&seg=1&dl=https%3A%2F%2Fwww.questor.com.br%2Fpoliticas-de-cookies%2Fquestor-zen%2F&dt=Questor-Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&en=page_view&tfd=8079 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:01 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.questor.com.br Date: Thu, 18 Apr 2024 19:31:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50086	3.161.169.69	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	695	OUT	GET /js/loader-scripts/fa57019d-c91a-4555-8519-2e07472110c4-loader.js HTTP/1.1 Host: d335luupugsy2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c6ea8d8e630f57d377818da4c8bd1b8c" If-Modified-Since: Thu, 21 Dec 2023 11:41:45 GMT
2024-04-18 19:31:01 UTC	494	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 19:31:02 GMT Last-Modified: Thu, 21 Dec 2023 11:41:45 GMT Cache-Control: no-cache x-amz-version-id: TE0H92uWvbxvP5WbDnKffpRjpMGxk2Jl Server: AmazonS3 ETag: "c6ea8d8e630f57d377818da4c8bd1b8c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 9bccfea07ac8b23d74bce99ce1575d6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: _AISQSEiv2NamGQMViKTdG-RnN7-btAnFxpvjOdFNvx5T-b7DTFVjw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50088	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	853	OUT	GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:01 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:31:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50087	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	963	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:01 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:31:01 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:31:01 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 19:31:01 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50085	13.107.246.41	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	648	OUT	GET /tag/uet/343080441?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=43257a7267c64d95990e253016374800.20240418.20250418; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-18 19:31:01 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:31:01 GMT Content-Type: application/x-javascript Content-Length: 721 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0 x-azure-ref: 20240418T193101Z-15497cdd9fdrtvgd4t2mhqxwec00000000hg00000000nc02 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-18 19:31:01 UTC	721	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 43 6c 61 72 69 74 79 49 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 33 34 33 30 38 30 34 34 31 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","ClarityInsights")}),!1);a[c]("metadata",(function(){a[c]("set","_u","343080441")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50089	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	1333	OUT	GET /pagead/viewthroughconversion/1027983844/?random=1713468660162&cv=11&fst=1713468660162&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:01 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:31:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:01 UTC	552	IN	Data Raw: 39 33 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 934(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 19:31:01 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 19:31:01 UTC	556	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 36 36 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 6a 65 34 34 66 30 76 38 37 34 39 34 30 33 36 31 7a 38 38 35 34 37 36 37 35 35 34 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 Data Ascii: fst\x3d1713466800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45je44f0v874940361z8854767554za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F\x26frm\x3d0\x26tiba\x3
2024-04-18 19:31:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50090	64.233.177.156	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	1457	OUT	GET /td/rul/1027983844?random=1713468660162&cv=11&fst=1713468660162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&hn=www.googleadservices.com&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&pscdl=noapi&auid=1052122086.1713468621&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:01 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:31:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:01 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 19:31:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50094	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:01 UTC	615	OUT	GET /tr/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:31:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50095	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:02 UTC	652	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=134545240619778&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660049&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:02 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:31:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:31:02 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50097	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:02 UTC	853	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:31:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50098	31.13.88.35	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:02 UTC	963	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:02 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:31:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:31:02 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-18 19:31:02 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50099	142.251.15.103	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:02 UTC	1160	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468660162&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqp6YQs-x1WgM0lmcG6PvKzClliawqxKK60qAsxdlx50iW-WNf&random=1069753338&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:02 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:31:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50103	34.120.202.204	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:02 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=557d10726a4bf685533a5cd18e4b442310c8a38d1713468662 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1098 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:02 UTC	1098	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6c 69 70 5f 69 64 22 3a 32 31 35 36 39 36 36 39 36 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 36 31 39 30 38 39 37 39 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f Data Ascii: [{"autoplay":false,"background":false,"clip_id":215696696,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":false,"owner_id":61908979,"product":"vimeo-vod","referrer":"https://www.questor.co
2024-04-18 19:31:02 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Thu, 18 Apr 2024 19:31:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50109	172.217.215.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	728	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:06 UTC	1581	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Thu, 18 Apr 2024 19:31:06 GMT Date: Thu, 18 Apr 2024 19:31:06 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:06 UTC	1062	IN	Data Raw: 34 31 66 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 30 61 66 36 65 33 32 37 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 49 66 72 61 6d 65 44 65 66 61 75 6c 74 52 65 66 65 72 72 65 72 50 6f 6c 69 63 79 27 5d 20 3d 20 20 74 72 75 65 20 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: 41fvar scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/0af6e327\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScrip
2024-04-18 19:31:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50112	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	652	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:06 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-18 19:31:06 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-18 19:31:06 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50113	142.250.105.104	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	922	OUT	GET /pagead/1p-user-list/1027983844/?random=1713468660162&cv=11&fst=1713466800000&bg=ffffff&guid=ON&async=1&gtm=45je44f0v874940361z8854767554za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&frm=0&tiba=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqp6YQs-x1WgM0lmcG6PvKzClliawqxKK60qAsxdlx50iW-WNf&random=1069753338&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:06 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:31:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50114	31.13.65.36	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	615	OUT	GET /tr/?id=413255480274437&ev=PageView&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&rl=&if=false&ts=1713468660187&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.2.1713468624032.1132749747&cs_est=true&ler=empty&cdl=API_unavailable&it=1713468659983&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:06 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 18 Apr 2024 19:31:06 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50116	216.239.36.181	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	1223	OUT	POST /g/collect?v=2&tid=G-WZY91LD4XC&gtm=45je44f0v874940361z8854767554za200&_p=1713468659914&gcd=13l3l3l3l1&npa=0&dma=0&cid=990543739.1713468623&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713468622&sct=1&seg=1&dl=https%3A%2F%2Fwww.questor.com.br%2Fquestor-zen%2F&dt=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&en=page_view&tfd=7476 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:06 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.questor.com.br Date: Thu, 18 Apr 2024 19:31:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50120	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	1022	OUT	GET /embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:07 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 19:31:07 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 39 36 6f 4b 71 52 67 6e 47 7a 6c 63 4e 35 52 53 4f 34 4c 72 76 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="96oKqRgnGzlcN5RSO4LrvA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f Data Ascii: _cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button":true,"disable_
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 70 61 62 6c 65 5f 61 64 73 5f 66 6f 72 5f 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 Data Ascii: ng_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"e
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 65 6d 62 65 64 73 5f 76 69 64 65 6f 5f 64 65 74 61 69 6c 73 22 3a 74 72 75 65 2c 22 6e Data Ascii: _layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_logging":true,"mweb_enable_embeds_video_details":true,"n
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 Data Ascii: ger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_g
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 30 30 30 30 2c 22 73 6c 6f 77 5f 63 6f 6d 70 72 65 73 73 69 6f Data Ascii: k_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":3888000000000,"slow_compressio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50117	172.67.75.61	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	763	OUT	POST /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fquestor-zen%2F&time=1713468665&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:07 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:31:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate access-control-allow-origin: * vary: Origin access-control-max-age: 1728000 x-request-id: ed41d734-80fa-4f55-85c1-2b8a8431d53e access-control-allow-methods: GET, PUT, POST, OPTIONS etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.036599 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eKXbb4IP4xJ49zJ7dUTyWeJJ36aQw06WOHliFH89lMUA24Y%2FK2aORsx3E3tg5osgzkAduTQPcMAujkqEzEXH1LmVufnP5w6rlirtEWVG6kKDdV92bjyixEMtmbxIIl0dJiqZgdc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876712c0fc50453e-ATL
2024-04-18 19:31:07 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:31:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50119	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	1022	OUT	GET /embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:07 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 19:31:07 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 46 67 6a 4f 4a 30 7a 30 59 6f 47 5f 4a 70 33 74 39 4d 72 59 4c 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="FgjOJ0z0YoG_Jp3t9MrYLA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 73 70 61 72 6b 6c 65 73 5f 6c 69 67 68 74 5f 63 74 61 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f Data Ascii: _cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_set_title_bar":true,"desktop_sparkles_light_cta_button":true,"disable_
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 70 61 62 6c 65 5f 61 64 73 5f 66 6f 72 5f 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 Data Ascii: ng_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"e
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 65 6d 62 65 64 73 5f 76 69 64 65 6f 5f 64 65 74 61 69 6c 73 22 3a 74 72 75 65 2c 22 6e Data Ascii: _layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_logging":true,"mweb_enable_embeds_video_details":true,"n
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 Data Ascii: ger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_g
2024-04-18 19:31:07 UTC	1592	IN	Data Raw: 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 30 30 30 30 2c 22 73 6c 6f 77 5f 63 6f 6d 70 72 65 73 73 69 6f Data Ascii: k_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":3888000000000,"slow_compressio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50118	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:06 UTC	656	OUT	POST /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive Content-Length: 228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:06 UTC	228	OUT	Data Raw: 75 72 6c 3d 77 77 77 2e 71 75 65 73 74 6f 72 2e 63 6f 6d 2e 62 72 25 32 46 71 75 65 73 74 6f 72 2d 7a 65 6e 25 32 46 26 74 6f 6b 65 6e 3d 38 38 32 38 66 66 39 30 38 64 35 30 30 36 39 65 61 39 31 32 31 32 62 30 64 38 33 36 62 62 31 65 26 74 69 74 6c 65 3d 51 75 65 73 74 6f 72 25 32 30 5a 65 6e 25 32 30 2d 25 32 30 51 75 65 73 74 6f 72 25 32 30 2d 25 32 30 73 69 73 74 65 6d 61 73 25 32 30 63 6f 6e 74 25 43 33 25 41 31 62 65 69 73 25 32 43 25 32 30 65 6d 70 72 65 73 61 72 69 61 69 73 25 32 30 65 25 32 30 63 6f 72 70 6f 72 61 74 69 76 6f 73 26 63 6c 69 65 6e 74 5f 69 64 3d 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: url=www.questor.com.br%2Fquestor-zen%2F&token=8828ff908d50069ea91212b0d836bb1e&title=Questor%20Zen%20-%20Questor%20-%20sistemas%20cont%C3%A1beis%2C%20empresariais%20e%20corporativos&client_id=53b33b18-bcee-43ee-b003-f4993221269f
2024-04-18 19:31:07 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:31:07 GMT Content-Type: text/html;charset=utf-8 Content-Length: 36 Connection: close Access-Control-Allow-Origin: https://www.questor.com.br Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: *, Content-Type, Accept, AUTHORIZATION, Cache-Control Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1728000 Access-Control-Expose-Headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma Set-Cookie: _rdtrk=53b33b18-bcee-43ee-b003-f4993221269f; domain=.rdstation.com.br; expires=Sun, 01 Jan 2034 00:00:00 -0000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15724800; includeSubDomains X-Robots-Tag: noindex, nofollow
2024-04-18 19:31:07 UTC	36	IN	Data Raw: 35 33 62 33 33 62 31 38 2d 62 63 65 65 2d 34 33 65 65 2d 62 30 30 33 2d 66 34 39 39 33 32 32 31 32 36 39 66 Data Ascii: 53b33b18-bcee-43ee-b003-f4993221269f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50123	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:07 UTC	663	OUT	GET /popup/show.json?account_id=703230&uniq=_9h2ggd7no&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.questor.com.br Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.questor.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:08 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:31:08 GMT Connection: close
2024-04-18 19:31:08 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50126	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:08 UTC	739	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:08 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:31:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:08 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 4d 78 32 43 61 78 70 42 75 43 6f 76 65 72 79 2d 79 67 54 45 4b 6f 57 76 49 73 61 47 4b 46 74 75 52 4c 5f 52 6a 6e 58 44 57 4b 71 39 2d 61 4f 79 66 58 68 4e 31 5f 7a 65 4f 6c 7a 79 56 4c 74 31 6f 6e 33 69 30 6c 45 35 65 2d 67 33 5f 41 53 50 62 49 37 52 6c 77 68 59 7a 33 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKrMx2CaxpBuCovery-ygTEKoWvIsaGKFtuRL_RjnXDWKq9-aOyfXhN1_zeOlzyVLt1on3i0lE5e-g3_ASPbI7RlwhYz3Q"}
2024-04-18 19:31:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50127	172.253.124.148	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:08 UTC	767	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-Modified-Since: Thu, 12 Dec 2013 23:40:16 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:08 UTC	273	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 19:30:56 GMT Expires: Thu, 18 Apr 2024 19:45:56 GMT Age: 12 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Cache-Control: public, max-age=900 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50128	108.177.122.154	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:09 UTC	739	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:09 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:31:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:09 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 30 4b 50 36 75 49 77 6a 43 2d 6f 53 55 65 52 57 44 31 4b 54 46 32 75 65 4c 78 46 44 5a 43 38 52 4b 6b 52 61 38 49 47 2d 63 30 68 4e 66 66 4a 6c 51 44 6c 46 47 79 56 5a 69 71 6a 48 78 71 76 67 4f 6d 6d 61 55 71 35 6b 6a 4e 48 34 44 68 77 55 48 71 68 67 68 6e 6e 32 4c 5a 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKq0KP6uIwjC-oSUeRWD1KTF2ueLxFDZC8RKkRa8IG-c0hNffJlQDlFGyVZiqjHxqvgOmmaUq5kjNH4DhwUHqhghnn2LZQ"}
2024-04-18 19:31:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50133	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:09 UTC	936	OUT	GET /generate_204?0rMcgA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:09 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:31:09 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50132	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:09 UTC	936	OUT	GET /generate_204?a3ddJA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:09 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:31:09 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50136	104.26.10.199	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:10 UTC	503	OUT	GET /api/chatbot/scripts/search?company=2aiwme8luKMdmpjy8EUFuYc4r&session=null&path=%2Fquestor-zen%2F&time=1713468665&host=www.questor.com.br&query=&platform=desktop HTTP/1.1 Host: app.leadster.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:11 UTC	819	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:31:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK Cache-Control: max-age=0, private, must-revalidate vary: Origin x-request-id: 197b47d5-fddd-4057-a2c5-a3217e9ce317 etag: W/"44136fa355b3678a1146ad16f7e8649e" x-runtime: 0.049086 x-powered-by: cloud66 x-powered-by: cloud66 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2BtyL6JaSetYdK0NjHWA5vgc89jOh42BIou%2FuVb5C2WgKAoEMKFwknNWok1GbNHX4iWOmIIuFJNK7j1Ys2gmN%2BpYL4CSc1A9kiyM23dCpPaVNvoUhL5p2eBnxYBcTNbCbxV%2Fzrc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876712da0eb2180f-ATL
2024-04-18 19:31:11 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-18 19:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50135	35.223.116.65	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:10 UTC	360	OUT	GET /send HTTP/1.1 Host: pageview-notify.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:11 UTC	129	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 19:31:11 GMT Content-Type: / Transfer-Encoding: chunked Connection: close
2024-04-18 19:31:11 UTC	2371	IN	Data Raw: 39 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 0a 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 0a 20 20 20 20 20 20 7d 29 3b 20 76 61 72 20 66 20 3d 20 64 Data Ascii: 937<!DOCTYPE html><html><head> <meta charset="UTF-8"> ... Google Tag Manager --> <script>(function (w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50137	34.68.90.188	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:11 UTC	453	OUT	GET /popup/show.json?account_id=703230&uniq=_9h2ggd7no&ref=aHR0cHM6Ly93d3cucXVlc3Rvci5jb20uYnIvcXVlc3Rvci16ZW4v HTTP/1.1 Host: popups.rdstation.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:31:11 UTC	415	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Length: 13 Content-Security-Policy-Report-Only: upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; Content-Type: application/json Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=7776000 X-Frame-Options: sameorigin Date: Thu, 18 Apr 2024 19:31:11 GMT Connection: close
2024-04-18 19:31:11 UTC	13	IN	Data Raw: 7b 22 70 6f 70 75 70 73 22 3a 5b 5d 7d Data Ascii: {"popups":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50138	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:11 UTC	1627	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10444 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713468666479&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C565%2C318&vis=1&wgl=true&ca_type=image&bid=ANyPxKrMx2CaxpBuCovery-ygTEKoWvIsaGKFtuRL_RjnXDWKq9-aOyfXhN1_zeOlzyVLt1on3i0lE5e-g3_ASPbI7RlwhYz3Q sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713468669730 Content-Type: application/json X-Goog-Event-Time: 1713468669730 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtzbVdkR3F5dnNnWSj76YWxBjIKCgJVUxIEGgAgKw%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/kcHoXFYUlVQ?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:11 UTC	10444	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 76 70 68 62 45 47 45 4f 4c 52 73 41 55 51 6f 70 4b 77 42 52 43 56 7a 37 41 46 45 50 5f 66 73 41 55 51 76 5a 6d 77 42 52 44 75 73 37 41 46 45 4c 32 32 72 67 55 51 39 71 75 77 42 52 43 44 76 37 41 46 45 4e 57 49 73 41 55 51 69 4f 4f 76 42 52 44 4d 33 36 34 46 45 4c 66 71 5f 68 49 51 36 2d 6a 2d 45 68 44 48 7a 72 41 46 45 4a 72 77 72 77 55 51 79 66 65 76 42 52 43 2d 2d 61 38 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"CPvphbEGEOLRsAUQopKwBRCVz7AFEP_fsAUQvZmwBRDus7AFEL22rgUQ9quwBRCDv7AFENWIsAUQiOOvBRDM364FELfq_hIQ6-j-EhDHzrAFEJrwrwUQyfevBRC--a8FEN
2024-04-18 19:31:11 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 19:31:11 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:11 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 19:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50139	74.125.136.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:11 UTC	1627	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 10531 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713468667167&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C540%2C304&vis=1&wgl=true&ca_type=image&bid=ANyPxKq0KP6uIwjC-oSUeRWD1KTF2ueLxFDZC8RKkRa8IG-c0hNffJlQDlFGyVZiqjHxqvgOmmaUq5kjNH4DhwUHqhghnn2LZQ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713468669845 Content-Type: application/json X-Goog-Event-Time: 1713468669844 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240416.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtzbVdkR3F5dnNnWSj76YWxBjIKCgJVUxIEGgAgKw%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/vowPgCByrlE?controls=1&rel=0&playsinline=0&modestbranding=0&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fwww.questor.com.br&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:11 UTC	10531	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 31 36 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 76 70 68 62 45 47 45 4a 43 79 73 41 55 51 76 5a 6d 77 42 52 43 6c 77 76 34 53 45 4e 6e 4a 72 77 55 51 67 71 4c 5f 45 68 44 57 31 72 41 46 45 4b 4b 53 73 41 55 51 74 2d 72 2d 45 68 44 47 5f 62 63 69 45 4a 58 50 73 41 55 51 33 64 32 77 42 52 44 51 6a 62 41 46 45 4b 48 44 73 41 55 51 6e 64 43 77 42 52 44 4a 39 36 38 46 45 4e 36 49 5f 78 49 51 76 35 5f 5f 45 68 44 50 71 4c 41 46 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240416.01.00","configInfo":{"appInstallData":"CPvphbEGEJCysAUQvZmwBRClwv4SENnJrwUQgqL_EhDW1rAFEKKSsAUQt-r-EhDG_bciEJXPsAUQ3d2wBRDQjbAFEKHDsAUQndCwBRDJ968FEN6I_xIQv5__EhDPqLAFEP
2024-04-18 19:31:11 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 18 Apr 2024 19:31:11 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:11 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-18 19:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50141	108.177.122.157	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:11 UTC	535	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:11 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:31:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:11 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 35 65 7a 68 35 67 36 7a 74 71 30 59 52 5a 48 6d 6f 57 32 69 73 6c 46 50 6b 67 71 73 51 49 39 71 79 79 30 61 70 64 50 41 57 51 49 6c 6e 4c 6c 57 53 41 45 62 6a 4d 72 74 59 63 67 31 4c 4b 58 36 32 42 36 45 58 56 79 6a 6b 6b 5f 73 6a 31 63 62 53 36 61 54 58 4a 57 6f 66 31 67 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKo5ezh5g6ztq0YRZHmoW2islFPkgqsQI9qyy0apdPAWQIlnLlWSAEbjMrtYcg1LKX62B6EXVyjkk_sj1cbS6aTXJWof1g"}
2024-04-18 19:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50146	108.177.122.157	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:12 UTC	535	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmJZN3YItLtY_h1rh-OvUfNKLJw5E7HePHTgnLILRvS_kTg_eotLax0TeH6
2024-04-18 19:31:12 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 18 Apr 2024 19:31:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:31:12 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 6f 57 6c 7a 50 4d 30 4d 53 43 6c 33 32 4b 30 73 56 57 4b 4a 6c 6b 45 51 73 69 44 4f 51 79 59 6c 55 36 41 5a 62 52 74 44 53 36 75 52 50 4d 4a 68 34 45 43 33 39 38 79 65 31 33 6e 78 78 53 53 69 43 59 77 41 59 50 72 45 79 65 59 53 55 6f 30 4e 4f 53 6f 79 6c 5a 4e 65 70 58 41 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKqoWlzPM0MSCl32K0sVWKJlkEQsiDOQyYlU6AZbRtDS6uRPMJh4EC398ye13nxxSSiCYwAYPrEyeYSUo0NOSoylZNepXA"}
2024-04-18 19:31:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50148	142.250.9.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:12 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:12 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 19:31:12 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:12 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 19:31:12 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50149	142.250.9.136	443	5764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:13 UTC	614	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=2w1i86bxy8I; VISITOR_INFO1_LIVE=smWdGqyvsgY; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKw%3D%3D
2024-04-18 19:31:13 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 18 Apr 2024 19:31:13 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:13 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-18 19:31:13 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port
281	192.168.2.4	50157	64.233.177.139	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:18 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=LClr4Vb1Z8WRvsV-3Z1E8f8eot39Fv_2aRL0lWidGHKHq6gKWac9XYWRFeG9PYyupAo0tWqqZN-KX-eaoq0xotYw9fLxCz6GtAL9Fg0LHkbRMLYrC7_2EUAaAkmKVlNPFecDp-D3nQxO6ytd4DqI0gcnurWgSfo1y_Ieo-a5B6A
2024-04-18 19:31:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 19:31:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:18 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-18 19:31:18 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
282	192.168.2.4	50158	64.233.177.139	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:18 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=LClr4Vb1Z8WRvsV-3Z1E8f8eot39Fv_2aRL0lWidGHKHq6gKWac9XYWRFeG9PYyupAo0tWqqZN-KX-eaoq0xotYw9fLxCz6GtAL9Fg0LHkbRMLYrC7_2EUAaAkmKVlNPFecDp-D3nQxO6ytd4DqI0gcnurWgSfo1y_Ieo-a5B6A
2024-04-18 19:31:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 19:31:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:18 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-18 19:31:18 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
283	192.168.2.4	50159	64.233.177.139	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:31:19 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=RBsRhxfypwjzSImNWT9Sw2-CQMEfCYnUIQc2X2REQQO35ZVwU8mNA6dx3zHdabgIcjeD0KQKeFgjQ9XBetr4qJQATSkhsbZrG6DjihkEBYcpjkR5UjnHLP5lJPbQDbBnQBdoEdI_bp3Tp8zyZ4KdhBKvyE3sOL0bwY4cH9WFfug
2024-04-18 19:31:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 19:31:19 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:31:19 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-18 19:31:19 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Target ID:	0
Start time:	21:29:42
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:29:44
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:29:46
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dinamicconsultores.app.questorpublico.com.br/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	21:30:47
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6272 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	21:30:48
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 --field-trial-handle=1992,i,18391614300340571406,10157824289975110089,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dinamicconsultores.app.questorpublico.com.br/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Windows Analysis Report
https://dinamicconsultores.app.questorpublico.com.br/