Edit tour

Windows Analysis Report
https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS15

Overview

General Information

Sample URL:	https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34b
Analysis ID:	1430797
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,12559349652139094833,10463207426666830587,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng==" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.facebook.com/overlakemedicalcenter

HTTP Parser: <input type="password" .../> found

Source: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx	HTTP Parser: No favicon
Source: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx	HTTP Parser: No favicon
Source: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx	HTTP Parser: No favicon

Source: https://www.facebook.com/overlakemedicalcenter

HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/overlakemedicalcenter

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.39.190.93:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.39.190.93:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.39.190.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng== HTTP/1.1Host: r20.rs6.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Portals/_default/default.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /DesktopModules/Announcements/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /DesktopModules/Media/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /DesktopModules/AESOPRegistration/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /DesktopModules/Links/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /DesktopModules/AESOP/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /DesktopModules/AESOPSponsor/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Portals/_default/Skins/Customizable/skin.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Portals/3922/portal.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Portals/_default/Skins/_default/WebControlSkin/Default/DatePicker.Default.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/bootstrap-3/css/bootstrap.min.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/font-awesome/css/font-awesome.min.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/css/gg-dnn.min.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/css/gg-nav.min.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/css/gg-fixed-width.min.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/css/gg-fixed-width-sidebar.min.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Resources/libraries/jQuery/03_06_01/jquery.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Resources/libraries/jQuery-UI/01_13_02/jquery-ui.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=pynGkmcFUV1A_gQetflDiQxP9peo-XOx2caZj2iNuDkzgTYBre1vhGLS6XM1&t=638403336553933774 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=1HpV3OVB0CZk39ogiBwEQbQCVOd2-eGCLhS-Ks_E3NLWxpFDBlXi1KaeEGnM8M-LDRoJU1KE4u9lKltclVCmJOvN5NYfdc5zlfiUOPRv-DCUhnoVqwFxOJbregA1&t=ffffffffbc4a7304 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ScriptManager_TSM&compress=1&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a4dd65af1-4721-4286-9a7d-9f9100b5515f%3aea597d4b%3ab25378d2 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /js/dnn.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/dnn.modalpopup.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/Scripts/jquery/jquery.hoverIntent.min.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /js/aesop.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /js/help.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /js/dnncore.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/Scripts/dnn.jquery.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /js/dnn.servicesframework.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/bootstrap-3/js/bootstrap.min.js?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Portals/3922/Files/Please%20note%20(4).png HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /images/PoweredBy_Logo_136x52.png HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/initWidgets.js HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936714250 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/widgets.js?_=1713936714251 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Portals/3922/Files/Please%20note%20(4).png HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/PoweredBy_Logo_136x52.png HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936714250 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /portals/_default/skins/customizable/font-awesome/font/fontawesome-webfont.woff?v=3.2.1 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://overlakehf.ejoinme.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://overlakehf.ejoinme.org/portals/_default/skins/customizable/font-awesome/css/font-awesome.min.css?cdv=158Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/widgets.js?_=1713936714251 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /MyEvents/BandageBall2024/tabid/1417493/Default.aspx HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /DesktopModules/AESOPEventLanding/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936729825 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936729825 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/widgets.js?_=1713936729826 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/widgets.js?_=1713936729826 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /DesktopModules/HTML/module.css?cdv=158 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936733934 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1Host: greatergivingcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/widgets.js?_=1713936733935 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936733934 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1Host: greatergivingcontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/Shared/scripts/widgets.js?_=1713936733935 HTTP/1.1Host: overlakehf.ejoinme.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
Source: global traffic	HTTP traffic detected: GET /OverlakeHMC HTTP/1.1Host: twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/vendor.6c559eba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/i18n/en.0a146e9a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/main.3e34201a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.Dropdown.c62e1b6a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.s.8a0b95ca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/modules.common.5e0e27da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/modules.audio.54e3f0ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu.fc8f281a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun.5e40379a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc.c4de844a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun.b2aa875a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/hashflags.json HTTP/1.1Host: api.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-client-transaction-id: RkU9SgJEJkRgloyM0q5NjpGRjJpenNhCJcIkpAHxClOM4vxe7P5vmrrttTF2xsIjKLFzn0ewpXvZ5yzH+cLUgeX/duqvRQx-guest-token: 1783006035076403702x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP.5a28b8fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA.979f34da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD.30d39e3a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt.21c3416a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.Account~bundl.49f07aba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /1.1/hashflags.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode.72637d2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.2e9524aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery.f358f33a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.20677bea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.Ocf.34c152ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~loader.LoggedOutNotifications.da86593a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.e4ff644a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AppModules.f040d17a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings.bf60957a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.2b78896a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.44818d8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.f2e86d8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.0203c12a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.SideNav.031f858a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.342e570a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAccount~bundle.Account~bundle.MultiAc.d1ae850a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa.ca47dc2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio.92f8cdba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba.474860ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.e0286a6a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.a210668a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.902d872a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa.2264e83a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~.ccd6e47a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..60c1138a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Compos.540d8c0a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu.029e300a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.db6cd65a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5044215a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.743e980a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.DirectMe.c4756eaa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home.2e978c3a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b.870fa24a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.SettingsProfessionalProfileProfileSpotlight.5beb173a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.TweetCoinDetails~b.c58a905a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.TweetMediaDeta.80329baa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex.6ae55eea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi.0ae4c37a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove.1507b3ca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight.694e894a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.a2076fca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.0767fe7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile.8eab8f9a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile.6f6b76aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.dede70da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli.f0e0e88a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.61deee6a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile.f7878e5a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.35b05caa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.UserProfile~loader.IconLabelHandler.0ec2aa3a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.805d830a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/bundle.UserProfile.10f22bba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.AudioDock.81854dfa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/bundle.NetworkInstrument.4a624f8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.richScribeAction.a8dd068a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/i18n/emoji-en.9bb55bba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.b382915a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio.d10932da.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV.8774e17a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Bold.ebb56aba.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Regular.80fda27a.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/qW5u-DAuXpMEG0zA1F7UGQ/UserByScreenName?variables=%7B%22screen_name%22%3A%22overlakehmc%22%2C%22withSafetyModeUserFields%22%3Atrue%7D&features=%7B%22hidden_profile_likes_enabled%22%3Atrue%2C%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1Host: api.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-client-transaction-id: z8y0w4vNr83pHwUFWyfEBxgYBRPXFVHLrEutLYh4g9oFa3XXZXfmEzNkPLj/T0uqoc35Fs6WzFKjIg6eztSpYNkopAQEzAx-guest-token: 1783006035076403702x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer.a2e6b3aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.NewTweetsPill.c18477ba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.5f7fa13a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.JobSearch~bundle.UserJobs~loader.WideLayout.21f9b23a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.0a0a422a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /profile_banners/34733701/1688412966/600x200 HTTP/1.1Host: pbs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/qW5u-DAuXpMEG0zA1F7UGQ/UserByScreenName?variables=%7B%22screen_name%22%3A%22overlakehmc%22%2C%22withSafetyModeUserFields%22%3Atrue%7D&features=%7B%22hidden_profile_likes_enabled%22%3Atrue%2C%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.WideLayout~bundle.Conversation.8c6c71fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.WideLayout.1706937a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker.96394e7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.9b2e53aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule.c86f284a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.TimelineRenderer.71fd2d4a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profile_images/1675951565944033280/E9478ktH_200x200.jpg HTTP/1.1Host: pbs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profile_banners/34733701/1688412966/600x200 HTTP/1.1Host: pbs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/9zyyd1hebl7oNWIPdA8HRw/UserTweets?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1Host: api.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-client-transaction-id: bW4WYSlvDW9Lvaen+YVmpbq6p7F1t/NpDukPjyraIXinydd1x9VEsZHGnhpd7ekIA2lbtGx3jluKSBwrjnBLdUBNY/gPbgx-guest-token: 1783006035076403702x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
Source: global traffic	HTTP traffic detected: GET /profile_images/1675951565944033280/E9478ktH_200x200.jpg HTTP/1.1Host: pbs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.ComposeScheduling~ondemand.ProfileSidebar.aba1409a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/ondemand.ProfileSidebar.359a202a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Heavy.f44ae4ea.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/Chirp-Medium.f8e2739a.woff2 HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/9zyyd1hebl7oNWIPdA8HRw/UserTweets?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /1.1/jot/ces/p2 HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.DividerHandler.05e0144a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim.e1b24fda.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.TimelineCardHandler.ae43cd2a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich.5ffff2aa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.5d31ec7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /graphql/aQQLnkexAl5z9ec_UgbEIA/UserMedia?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withClientEventToken%22%3Afalse%2C%22withBirdwatchNotes%22%3Afalse%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1Host: api.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-client-transaction-id: sbLKvfWz0bOXYXt7JVm6eWZme22pay+10jXTU/YG/aR7FQupGwmYbU0aQsaBMTXU37eHaLDDKLILN46f0ra+aQa6jYJysgx-guest-token: 1783006035076403702x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer~loader.inlineTombstoneHandler~.517738fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.immersiveTweetHandler.0f0c2fca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu.1c9b673a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler.b835363a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.inlineTombstoneHandler~loader.tweetHandler.1451db7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.tweetHandler.f138785a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.SignupModule.19fb08ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~ondemand.SettingsInternals~bundle.Explore~bundle.Topics~bundle.LiveEvent~bundle.Trend.c76bd12a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Explore~bundle.LiveEvent~bundle.Topics~bundle.Trends~loader.ExploreS.d028fc9a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/loader.ExploreSidebar.fff7273a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/users/recommendations.json?include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&include_mute_edge=1&include_can_dm=1&include_can_media_tag=1&include_ext_is_blue_verified=1&include_ext_verified_type=1&include_ext_profile_image_shape=1&skip_status=1&&pc=true&display_location=profile_accounts_sidebar&limit=3&user_id=34733701&ext=mediaStats%2ChighlightedLabel%2CvoiceInfo%2CbirdwatchPivot%2CsuperFollowMetadata%2CunmentionInfo%2CeditControl%2Carticle HTTP/1.1Host: api.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-client-transaction-id: pqXdquKkxqSAdmxsMk6tbnFxbHq+fDiixSLEROER6rNsAhy+DB6PeloNVdGWJiLDyKGQf6e0yLQ7iu2kXZzR0HQoa6NjpQx-guest-token: 1783006035076403702x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: /Origin: https://twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl.d52c10ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/users/recommendations.json?include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&include_mute_edge=1&include_can_dm=1&include_can_media_tag=1&include_ext_is_blue_verified=1&include_ext_verified_type=1&include_ext_profile_image_shape=1&skip_status=1&&pc=true&display_location=profile_accounts_sidebar&limit=3&user_id=34733701&ext=mediaStats%2ChighlightedLabel%2CvoiceInfo%2CbirdwatchPivot%2CsuperFollowMetadata%2CunmentionInfo%2CeditControl%2Carticle HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund.6da8048a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~.f9a8ca6a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com.c92212ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b.fb6ff94a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH.734be68a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti.853472ca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting.5e7f40fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b.cbab74ca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b.cd125e8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.Typeahead~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.JobSearch~bundle.Ocf~bun.a3a90dba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle.1582bdea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil.14898fca.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.AudioSpaceStart~ondemand.ComposeScheduling~bundle.WorkHistory~bundle.Ocf~bundle.AdvancedSearch~.ab591fda.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.SettingsProfile~bundle.DirectMessages~bundle.Ocf~bundle.UserLists~loader.8115426a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/onboarding/sso_init.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.SettingsProfile~bundle.Ocf~bundle.UserLists.93afaf8a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Birdwatch~bundle.Explore~bundle.GenericTimeline~bundle.Ocf~bundle.Topics.26e5bdba.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Ocf~bundle.ReaderMode~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer.5947c02a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.b2a7cfea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Settings~bundle.Display~bundle.Ocf.ea5bad3a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.Ocf~bundle.TV.3370ea7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Ocf.7fde78fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.Ocf.148df1fa.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/shared~ondemand.SettingsSuperFollows~bundle.Ocf.85a878ea.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/bundle.Ocf.955a2e7a.js HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://twitter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://twitter.com/i/flow/login?redirect_after_login=%2FOverlakeHMCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /favicons/twitter.3.ico HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/icon-default.522d363a.png HTTP/1.1Host: abs.twimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicons/twitter.3.ico HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
Source: global traffic	HTTP traffic detected: GET /responsive-web/client-web/icon-default.522d363a.png HTTP/1.1Host: abs.twimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /1.1/onboarding/task.json?flow_name=login HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt
Source: global traffic	HTTP traffic detected: GET /i/js_inst?c_name=ui_metrics HTTP/1.1Host: twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://twitter.com/i/flow/login?redirect_after_login=%2FOverlakeHMCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET /overlakemedicalcenter HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /1.1/onboarding/task.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yp/l/0,cross/Zl4RYlGvLRL.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yb/r/G3Nm7rYDpD0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3imEC4/yk/l/en_US/xJzhrSBy9e0sDrjlMfQMscqSWxwfxs4Y2DYvatkvPhoOrXpYBH72fzljBzpJFpC9mNK-Y4V06Ed5K1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ijuz4/yz/l/en_US/6fCMsyVB7zA.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3imzX4/yX/l/en_US/UjFiliATh-l.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3idBq4/yT/l/en_US/RS5ioqIRilP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/task.json
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i4eM4/yo/l/en_US/dHfUl44LAS2qwhyhejQkZD0RJQViAVi4_f7uDpbF6yGDONAvDdczOBaB3rHKz4xnM0PMnKn0vHvpru5esQygl-k68yUUHAuQc6MqHVuuLBbAiCfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iQbs4/ya/l/en_US/AgKumEiNrse.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ikCN4/yU/l/en_US/dnVV_isSAif.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/r/JssATjfhfdZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i7rS4/y4/l/en_US/k4jQ2q4LsnA44fB8fr7zjE.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iuJ54/ye/l/en_US/m140NWqU1Tl.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iDa14/yF/l/en_US/6ootXSk4mYOkyxVXaofhwGPt5DLGRZ_LCrGX22_iLwD5QIHyTQ6Z_KZxsw_y3zVOBSnf2ML2XDKJo5r1v89-9txa.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/IuxUKXNocsT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iDeG4/yA/l/en_US/CQDgozv7lkz.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iHWi4/yT/l/en_US/yJzYEEZ1qKpT1bGOl72c-Si9BtyEKKY6vsXBKGulEZ7YjmJAioUiau3UnRR4kL2c3MzDouReqt7vgMVvbs5Bxz9AfzkWVwFU290p3lHmP5bRnoAvNAI-O1M-NRawrDsZxthjVtwoC8TAEQ4oi_YwQ1LIeeq4U1PQSjcmVTZ2S6HgZeQb9Gsu-9YhaugQ0ERYmIF4EZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i47E4/y5/l/en_US/o4-4gtuumUh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iPFs4/yb/l/en_US/fyk_ahmEKSN.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yo/r/RBVykxDUbUn.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yT/r/Dc7-7AgwkwS.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/8k_Y-oVxbuU.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yM/r/qUPkXkiEwfh.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_p640x640&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlZ7-Bh9qr8Xud13aPfiNhlXB5Tg7m-NkVHctccEHU7A&oe=662E8774 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB1m8NAX-bhLwhcb_389jU9W4xFxGps9kAln7Z1Bm_83g&oe=662E8774 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yl/r/QB1B1DuEfJ4.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/eav_geUKRkF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/bpfhWVdEqSZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i_8K4/yV/l/en_US/806OU2p6Shf.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434204982_732142639100127_4554239773083886536_n.jpg?stp=dst-jpg_s600x600&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kCAh3UDLwKEAb5RJjfL&_nc_ht=scontent-sjc3-1.xx&oh=00_AfAgqAcwDkNJxwB1YxewNbnMlGMa-eyceKGA_bOMDCHvBA&oe=662E5F3B HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iWHN4/yj/l/en_US/NBLh_jmhP9rbnDAR7QbqlLmewDUA58SCUmM84SfiWlvqERz6pNGhHp8C0c-C7FrAp6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yb/r/mN-eO9RcwWn.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yR/r/OiBJQTDC7YF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yD/r/siu8qci3VGY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i3Ek4/yP/l/en_US/ZAPhqDpoVnl.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i0Wo4/yH/l/en_US/tAGk4PH_nhv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AfABJ8SwyWeSMuXofMm_jfkH1HTgW2Sg7J402E--jmbvjg&oe=66501200&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AfAc1tv-PAaYO--X3sZzlpw-dYVdCaNRKAvJDHaRMHBnvw&oe=66500E71&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AfDYWr_jHKdDH1-MmgHxR3uRWnZ9KnBaTGYBEecV00bNkw&oe=665011E6&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AfB1V5zviFKmuGr4twHkPoHpTckmnxNUS318pRe6Kv1Vrw&oe=664FF470&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AfCOHOiTQWr87AQIbi_TO8UIAXibgPGQj-vu1mHxXN9QEA&oe=6650164B&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AfD7Ym2hhKakU4zYqIkqPxEzmAAXm5W2WGsqzcqZEtJ-4g&oe=66502298&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yo/r/RBVykxDUbUn.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yM/r/qUPkXkiEwfh.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/8k_Y-oVxbuU.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yT/r/Dc7-7AgwkwS.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB1m8NAX-bhLwhcb_389jU9W4xFxGps9kAln7Z1Bm_83g&oe=662E8774 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_p640x640&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlZ7-Bh9qr8Xud13aPfiNhlXB5Tg7m-NkVHctccEHU7A&oe=662E8774 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434204982_732142639100127_4554239773083886536_n.jpg?stp=dst-jpg_s600x600&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kCAh3UDLwKEAb5RJjfL&_nc_ht=scontent-sjc3-1.xx&oh=00_AfAgqAcwDkNJxwB1YxewNbnMlGMa-eyceKGA_bOMDCHvBA&oe=662E5F3B HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=7&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=8&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AfAhrUF3wEe3teFtCcM4DS7mXy23jdfSmXbYJsT5bcZaRg&oe=66500BC7&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AfDYWr_jHKdDH1-MmgHxR3uRWnZ9KnBaTGYBEecV00bNkw&oe=665011E6&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AfAc1tv-PAaYO--X3sZzlpw-dYVdCaNRKAvJDHaRMHBnvw&oe=66500E71&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AfAghl1gEHN29C2ZODbbICogRb1L1XF35YmRNUxKYWYl4w&oe=66501230&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AfDaUubXx4OfTJn4DccajD9sBj7XD81SszpxLqsNxNf20Q&oe=664FF6D7&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AfABJ8SwyWeSMuXofMm_jfkH1HTgW2Sg7J402E--jmbvjg&oe=66501200&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AfD7Ym2hhKakU4zYqIkqPxEzmAAXm5W2WGsqzcqZEtJ-4g&oe=66502298&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AfCOHOiTQWr87AQIbi_TO8UIAXibgPGQj-vu1mHxXN9QEA&oe=6650164B&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=a&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0ZrNyjt1uln5OxsOz..BmKJmK..AAA.0.0.BmKJmK.AWUlky46bPs
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AfB1V5zviFKmuGr4twHkPoHpTckmnxNUS318pRe6Kv1Vrw&oe=664FF470&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/432668852_796155295887560_588370489562300368_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eDQuve-aS-sAb5LNrB5&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB5mJMGFLBrA-mEsMyjPpEuIa7NkDwnKZ7m7vkd3Pfk2g&oe=662E7DF6 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AfDaUubXx4OfTJn4DccajD9sBj7XD81SszpxLqsNxNf20Q&oe=664FF6D7&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434225809_986346610049172_409589886129999166_n.jpg?stp=c24.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nXzthKFyQOwAb6u1zRw&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCF-fyzT-Hv9sf9KdaPTk6XQIwFJRwMhMHQ5m4rZ5vwng&oe=662E7DF7 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/393310192_718523496989526_6043121057059152698_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=p7c_FRo1cLsAb5rFBd9&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA5tAq0YSchwbtnK_GRq3hJkC8hC9q6B8Jc7xckCu0k9w&oe=662E7B13 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/352230347_642498977400229_7245798881627614562_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=qBZxTxVqogYAb5_rX9a&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlIkpj_DYYAm2exgqXfO2IurQjjy8C0QMKtToF__aj1Q&oe=662E7B2D HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AfAghl1gEHN29C2ZODbbICogRb1L1XF35YmRNUxKYWYl4w&oe=66501230&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/325474282_1575853666210428_5352904713362534565_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=fqs8zQc-t7MAb7ZEJix&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA7iY0CIzV0ai4ZmToaNs0NG7T8RjJ1FXTTorKJNo_Zqg&oe=662E5AF9 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/305262992_451188083712872_1835908681663258642_n.png?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=107&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6pmRLTc1RUwAb453RIY&_nc_ht=scontent-sjc3-1.xx&oh=00_AfD67zDS4ZCd3Oluy7rReiwQPmwiSBDhpVXWELehNk3DdQ&oe=662E5DE1 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AfAhrUF3wEe3teFtCcM4DS7mXy23jdfSmXbYJsT5bcZaRg&oe=66500BC7&_nc_sid=7da55a HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/n3z98p2y3lw.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yn/r/CYXtIISfX0k.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/305262992_451188083712872_1835908681663258642_n.png?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=107&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6pmRLTc1RUwAb453RIY&_nc_ht=scontent-sjc3-1.xx&oh=00_AfD67zDS4ZCd3Oluy7rReiwQPmwiSBDhpVXWELehNk3DdQ&oe=662E5DE1 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/295727862_414160250748989_1177096163670263996_n.png?stp=c71.0.154.155a_dst-jpg_p296x100&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=j5dhy87QTmwAb63QD6F&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCt0JaFs05idTJ4P5xhITxM_7cO2enhon94CN-mtzA_vw&oe=662E7A1F HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/236827637_10159748894181202_2169988089763910096_n.jpg?stp=c60.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eyUcgU6E1RUAb5oTdVX&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCScx29jxRZiTA0yPYOjhEPmR3Lv84z3u132jZiAKOMrw&oe=662E6706 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434738801_903046718527004_2875905521727260665_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=7h4eP_Dka8UAb7E6TIi&_nc_ht=scontent-sjc3-1.xx&oh=00_AfBS7yoKFIceCz3ZSneb7IqWPdpshZnlJvExT1w3_6K7gw&oe=662E5890 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/393310192_718523496989526_6043121057059152698_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=p7c_FRo1cLsAb5rFBd9&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA5tAq0YSchwbtnK_GRq3hJkC8hC9q6B8Jc7xckCu0k9w&oe=662E7B13 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/276269061_277708347876894_5728540495443750993_n.png?stp=cp0_dst-png_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=CsD_9pI4JToAb4bQu5G&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCJKiCsTTmbEVTCI1MEQLiu_2h5TWG2Fgy6FRIDb5h0NQ&oe=662E7DAA HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=cp0_dst-png_p40x40&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfClAOnz2eJZkYuBO3W0ozHjBvdkizIwnGg14B3XY6bT6g&oe=662E8562 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/432668852_796155295887560_588370489562300368_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eDQuve-aS-sAb5LNrB5&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB5mJMGFLBrA-mEsMyjPpEuIa7NkDwnKZ7m7vkd3Pfk2g&oe=662E7DF6 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/352230347_642498977400229_7245798881627614562_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=qBZxTxVqogYAb5_rX9a&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlIkpj_DYYAm2exgqXfO2IurQjjy8C0QMKtToF__aj1Q&oe=662E7B2D HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434225809_986346610049172_409589886129999166_n.jpg?stp=c24.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nXzthKFyQOwAb6u1zRw&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCF-fyzT-Hv9sf9KdaPTk6XQIwFJRwMhMHQ5m4rZ5vwng&oe=662E7DF7 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=dst-png_p200x200&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDSUfPF5rTDhXWuDBUBGPiJpIfJPc_0IyZvseAkUZNJyQ&oe=662E8562 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/325474282_1575853666210428_5352904713362534565_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=fqs8zQc-t7MAb7ZEJix&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA7iY0CIzV0ai4ZmToaNs0NG7T8RjJ1FXTTorKJNo_Zqg&oe=662E5AF9 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/emoji.php/v9/t1f/1/16/1f3b6.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/RAS_7oBOZt9.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/n3z98p2y3lw.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yn/r/CYXtIISfX0k.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434738801_903046718527004_2875905521727260665_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=7h4eP_Dka8UAb7E6TIi&_nc_ht=scontent-sjc3-1.xx&oh=00_AfBS7yoKFIceCz3ZSneb7IqWPdpshZnlJvExT1w3_6K7gw&oe=662E5890 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/276269061_277708347876894_5728540495443750993_n.png?stp=cp0_dst-png_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=CsD_9pI4JToAb4bQu5G&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCJKiCsTTmbEVTCI1MEQLiu_2h5TWG2Fgy6FRIDb5h0NQ&oe=662E7DAA HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=cp0_dst-png_p40x40&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfClAOnz2eJZkYuBO3W0ozHjBvdkizIwnGg14B3XY6bT6g&oe=662E8562 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/236827637_10159748894181202_2169988089763910096_n.jpg?stp=c60.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eyUcgU6E1RUAb5oTdVX&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCScx29jxRZiTA0yPYOjhEPmR3Lv84z3u132jZiAKOMrw&oe=662E6706 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/295727862_414160250748989_1177096163670263996_n.png?stp=c71.0.154.155a_dst-jpg_p296x100&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=j5dhy87QTmwAb63QD6F&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCt0JaFs05idTJ4P5xhITxM_7cO2enhon94CN-mtzA_vw&oe=662E7A1F HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=dst-png_p200x200&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDSUfPF5rTDhXWuDBUBGPiJpIfJPc_0IyZvseAkUZNJyQ&oe=662E8562 HTTP/1.1Host: scontent-sjc3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/emoji.php/v9/t1f/1/16/1f3b6.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/RAS_7oBOZt9.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.facebook.com/overlakemedicalcenterAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=b&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=c&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_601.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_449.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_601.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_346.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_387.2.dr, chromecache_449.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_592.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_449.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_449.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_449.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_387.2.dr, chromecache_449.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: Contact </span><a href="mailto:events@overlakehospital.org" target="_blank" style="box-sizing: inherit; background-color: #ffffff; line-height: inherit; color: #0077c8; cursor: pointer; transition: color 0.3s ease 0s; outline: none; font-family: 'Open Sans', Helvetica, Arial, sans-serif; text-align: center;"><span style="box-sizing: inherit;">Jennifer Fischer</span></a><span style="box-sizing: inherit; text-align: center; background-color: #ffffff; font-family: 'Open Sans', Helvetica, Arial, sans-serif; color: #1b365d;"> by email or at 425-688-5526.</span></span><h4>Follow Us</h4><div class="social-links"><ul class="social-links"><li><a title="Twitter" href="https://twitter.com/OverlakeHMC" target="_blank"><em class="icon-square icon-32 icon-twitter"></em></a> </li><li><a title="Facebook" href="https://www.facebook.com/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-facebook"></em></a> </li><li><a title="LinkedIn" href="https://www.linkedin.com/company/overlake-medical-center-and-clinics/" target="_blank"><em class="icon-square icon-32 icon-linkedin"></em></a> </li><li><a title="Instagram" href="https://www.instagram.com/overlakemedicalcenter/" target="_blank"><em class="icon-square icon-32 icon-instagram"></em></a> </li><li><a title="You Tube" href="https://www.youtube.com/c/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-youtube"></em></a> </li></ul></div></div></div> equals www.facebook.com (Facebook)
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: Contact </span><a href="mailto:events@overlakehospital.org" target="_blank" style="box-sizing: inherit; background-color: #ffffff; line-height: inherit; color: #0077c8; cursor: pointer; transition: color 0.3s ease 0s; outline: none; font-family: 'Open Sans', Helvetica, Arial, sans-serif; text-align: center;"><span style="box-sizing: inherit;">Jennifer Fischer</span></a><span style="box-sizing: inherit; text-align: center; background-color: #ffffff; font-family: 'Open Sans', Helvetica, Arial, sans-serif; color: #1b365d;"> by email or at 425-688-5526.</span></span><h4>Follow Us</h4><div class="social-links"><ul class="social-links"><li><a title="Twitter" href="https://twitter.com/OverlakeHMC" target="_blank"><em class="icon-square icon-32 icon-twitter"></em></a> </li><li><a title="Facebook" href="https://www.facebook.com/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-facebook"></em></a> </li><li><a title="LinkedIn" href="https://www.linkedin.com/company/overlake-medical-center-and-clinics/" target="_blank"><em class="icon-square icon-32 icon-linkedin"></em></a> </li><li><a title="Instagram" href="https://www.instagram.com/overlakemedicalcenter/" target="_blank"><em class="icon-square icon-32 icon-instagram"></em></a> </li><li><a title="You Tube" href="https://www.youtube.com/c/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-youtube"></em></a> </li></ul></div></div></div> equals www.linkedin.com (Linkedin)
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: Contact </span><a href="mailto:events@overlakehospital.org" target="_blank" style="box-sizing: inherit; background-color: #ffffff; line-height: inherit; color: #0077c8; cursor: pointer; transition: color 0.3s ease 0s; outline: none; font-family: 'Open Sans', Helvetica, Arial, sans-serif; text-align: center;"><span style="box-sizing: inherit;">Jennifer Fischer</span></a><span style="box-sizing: inherit; text-align: center; background-color: #ffffff; font-family: 'Open Sans', Helvetica, Arial, sans-serif; color: #1b365d;"> by email or at 425-688-5526.</span></span><h4>Follow Us</h4><div class="social-links"><ul class="social-links"><li><a title="Twitter" href="https://twitter.com/OverlakeHMC" target="_blank"><em class="icon-square icon-32 icon-twitter"></em></a> </li><li><a title="Facebook" href="https://www.facebook.com/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-facebook"></em></a> </li><li><a title="LinkedIn" href="https://www.linkedin.com/company/overlake-medical-center-and-clinics/" target="_blank"><em class="icon-square icon-32 icon-linkedin"></em></a> </li><li><a title="Instagram" href="https://www.instagram.com/overlakemedicalcenter/" target="_blank"><em class="icon-square icon-32 icon-instagram"></em></a> </li><li><a title="You Tube" href="https://www.youtube.com/c/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-youtube"></em></a> </li></ul></div></div></div> equals www.twitter.com (Twitter)
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: Contact </span><a href="mailto:events@overlakehospital.org" target="_blank" style="box-sizing: inherit; background-color: #ffffff; line-height: inherit; color: #0077c8; cursor: pointer; transition: color 0.3s ease 0s; outline: none; font-family: 'Open Sans', Helvetica, Arial, sans-serif; text-align: center;"><span style="box-sizing: inherit;">Jennifer Fischer</span></a><span style="box-sizing: inherit; text-align: center; background-color: #ffffff; font-family: 'Open Sans', Helvetica, Arial, sans-serif; color: #1b365d;"> by email or at 425-688-5526.</span></span><h4>Follow Us</h4><div class="social-links"><ul class="social-links"><li><a title="Twitter" href="https://twitter.com/OverlakeHMC" target="_blank"><em class="icon-square icon-32 icon-twitter"></em></a> </li><li><a title="Facebook" href="https://www.facebook.com/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-facebook"></em></a> </li><li><a title="LinkedIn" href="https://www.linkedin.com/company/overlake-medical-center-and-clinics/" target="_blank"><em class="icon-square icon-32 icon-linkedin"></em></a> </li><li><a title="Instagram" href="https://www.instagram.com/overlakemedicalcenter/" target="_blank"><em class="icon-square icon-32 icon-instagram"></em></a> </li><li><a title="You Tube" href="https://www.youtube.com/c/overlakemedicalcenter" target="_blank"><em class="icon-square icon-32 icon-youtube"></em></a> </li></ul></div></div></div> equals www.youtube.com (Youtube)
Source: chromecache_356.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]);if(window.chrome\|\|window.safari){var d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}else{b=[""," .d8888b. 888 888","d88P Y88b 888 888","Y88b. 888 888",' "Y888b. 888888 .d88b. 88888b. 888',' "Y88b. 888 d88""88b 888 "88b 888',' "888 888 888 888 888 888 Y8P',"Y88b d88P Y88b. Y88..88P 888 d88P",' "Y8888P" "Y888 "Y88P" 88888P" 888'," 888"," 888"," 888"];d=(""+a.toString()).match(/.{35}.+?\s+\|.+$/g);if(d!=null){a=Math.floor(Math.max(0,(b.length-d.length)/2));for(var e=0;e<b.length\|\|e<d.length;e++){var f=b[e];b[e]=f+new Array(45-f.length).join(" ")+(d[e-a]\|\|"")}}console.log("\n\n\n"+b.join("\n")+"\n\n"+c.toString()+"\n");return}}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_346.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLazyPopoverTrigger.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","JSResourceForInteraction","ServerTime","TetraIcon.react","TetraText.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights Data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/Terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad Choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie Settings"),render:a}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight:"normal",children:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.link_string}),k.jsx(c("BaseMiddot.react"),{})]},b))})}if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoGrowthAutomationCrawlingPool)&&(g
Source: chromecache_592.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_373.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: r20.rs6.net

Source: unknown

HTTP traffic detected: POST /1.1/jot/client_event.json HTTP/1.1Host: api.twitter.comConnection: keep-aliveContent-Length: 152sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-twitter-client-language: ensec-ch-ua-mobile: ?0authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/x-www-form-urlencodedx-client-transaction-id: vr3Fsvq83ryYbnR0Kla1dmlpdGKmZCC63TrcXPkJ8qt0GgSmFAaXYkIVTcmOPjrb0EmLZ7+fXs2ORraDlMAnjI2dfDM8vQx-guest-token: 1783006035076403702x-twitter-active-user: yessec-ch-ua-platform: "Windows"Accept: */*Origin: https://twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 24 Apr 2024 05:32:40 UTCperf: 7402827104server: tsa_pcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: c3dbf5b78706d5ccx-rate-limit-limit: 500x-rate-limit-reset: 1713937660x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://twitter.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 7x-connection-hash: 20779578c2b41487800f3678d47aa6c21de045e0927bbee46ef4d564ac138ab1connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:32:58 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936777; path=/; domain=.facebook.com; httponlySet-Cookie: fr=0ZrNyjt1uln5OxsOz..BmKJmK..AAA.0.0.BmKJmK.AWUlky46bPs; expires=Tue, 23-Jul-2024 05:32:58 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:32:59 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936778; path=/; domain=.facebook.com; httponlySet-Cookie: fr=0UXlf7ZgyzrFgd7b4..BmKJmL..AAA.0.0.BmKJmL.AWUVWgGOmUk; expires=Tue, 23-Jul-2024 05:32:59 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:00 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936779; path=/; domain=.facebook.com; httponlySet-Cookie: fr=0JikbgsPU2zJpn98Q..BmKJmM..AAA.0.0.BmKJmM.AWXCnyJdrG0; expires=Tue, 23-Jul-2024 05:33:00 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:01 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936780; path=/; domain=.facebook.com; httponlySet-Cookie: fr=0x9NqxW3pvRr05nOz..BmKJmN..AAA.0.0.BmKJmN.AWVnkPyGF50; expires=Tue, 23-Jul-2024 05:33:01 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:02 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936781; path=/; domain=.facebook.com; httponlySet-Cookie: fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI; expires=Tue, 23-Jul-2024 05:33:02 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:02 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936781; path=/; domain=.facebook.com; httponlySet-Cookie: fr=0wJH5rzMxIa7pNiJj..BmKJmO..AAA.0.0.BmKJmO.AWUIxQJEzPI; expires=Tue, 23-Jul-2024 05:33:02 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=0v1Zm3243eMWxePSz..BmKJmP..AAA.0.0.BmKJmP.AWVS5dFHMw0; expires=Tue, 23-Jul-2024 05:33:03 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}

Source: chromecache_507.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_363.2.dr	String found in binary or memory: http://briancherne.github.io/jquery-hoverIntent/
Source: chromecache_507.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_507.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_552.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_551.2.dr, chromecache_305.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_514.2.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_507.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_507.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_500.2.dr	String found in binary or memory: http://jsfiddle.net/9Mst9/2/
Source: chromecache_507.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_398.2.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/
Source: chromecache_505.2.dr, chromecache_481.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_514.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_396.2.dr, chromecache_299.2.dr, chromecache_410.2.dr, chromecache_522.2.dr, chromecache_557.2.dr, chromecache_582.2.dr, chromecache_456.2.dr, chromecache_361.2.dr, chromecache_509.2.dr, chromecache_549.2.dr, chromecache_304.2.dr, chromecache_379.2.dr	String found in binary or memory: http://www.dotnetnuke.com
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: http://www.google.com/search?q=enable
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: http://www.greatergiving.com/
Source: chromecache_507.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/ASAHI_Superdry_Feb_Japan_2024_emoji/ASAHI_Superdry_Feb_Japan_2024_em
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/ASAHI_Superdry_drycrystal_Mar_Japan_2024_Emoji/ASAHI_Superdry_drycry
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Arizona_Dbacks_MLB_2024/Arizona_Dbacks_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Asahi_Mitsuya_anniversary_Japan_2024_Emoji/Asahi_Mitsuya_anniversary
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10236_Beiersdorf_NFC_Face_Care_February_2024_v2/BF-10236_Beiersdo
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10240_Binance_2024_Q1_Campaign_Emoji_202401/BF-10240_Binance_2024
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10251_Cygames_gbf_relink_jp_Gamelaunch_2024Feb_Branded_Hashtag/BF
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10270_miHoYoHSRClockieBrandedEmoji/BF-10270_miHoYoHSRClockieBrand
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10271_miHoYo_HSR_DreamStarRail/BF-10271_miHoYo_HSR_DreamStarRail.
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10329_wowow_mj_WOWOWkissmy_Hashmoji_2024/BF-10329_wowow_mj_WOWOWk
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10357_FineToday_Plus_tomorrow_Feb2024/BF-10357_FineToday_Plus_tom
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10398_Shiseido_MQ_Campaign_Q124/BF-10398_Shiseido_MQ_Campaign_Q12
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10429_RCU-Arabia-Leapard/BF-10429_RCU-Arabia-Leapard.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10430-FF7R_Feb_emoji_2024/BF-10430-FF7R_Feb_emoji_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10490_Leapandinnovate2024_Hashmoji_afterCL2/BF-10490_Leapandinnov
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10490_Leapandinnovate2024_Hashmoji_nonCL/BF-10490_Leapandinnovate
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10513_MH_Now_March_2024_emoji/BF-10513_MH_Now_March_2024_emoji.pn
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10520_FoundingDayMOC_2024_Hashmoji_after/BF-10520_FoundingDayMOC_
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10542_BrandShiseido_24Q1Campaign_v2/BF-10542_BrandShiseido_24Q1Ca
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10543_SaudiAirlinesFoundingDay_2024_Hashmoji/BF-10543_SaudiAirlin
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10573_HeyJaco_March24_Hashmoji/BF-10573_HeyJaco_March24_Hashmoji.
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10628_claro_brasil_Hashmoji_After_V2/BF-10628_claro_brasil_Hashmo
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10636_MBC_Ramadan_2024_Hashmojis/BF-10636_MBC_Ramadan_2024_Hashmo
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10638_MBC_Ramadan_2024_TriggerHashtag_After/BF-10638_MBC_Ramadan_
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10645_Hashmoji_suntory_tennen_KirittoKajitsu_19th_Mar/BF-10645_Ha
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10646_Gamelaunch2024MarBrandedHashtag/BF-10646_Gamelaunch2024MarB
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10655_Indosat_IM3_Ramadan_2024_hashmoji/BF-10655_Indosat_IM3_Rama
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10658_NetflixJP_18ce54ua4fy_Hashmoji_20240405-20240704_Suzume_/BF
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10661_Hashmoji-Masar-Ramadan_2024/BF-10661_Hashmoji-Masar-Ramadan
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10662_Hashmoji_SBA_Ramadan_2024/BF-10662_Hashmoji_SBA_Ramadan_202
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10676_Hubbl_2024_Hashmojis/BF-10676_Hubbl_2024_Hashmojis.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10689_WZM_March_2024_emoji/BF-10689_WZM_March_2024_emoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10693_/BF-10693_.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10714_AllfreeHashumojiApr2024_v2/BF-10714_AllfreeHashumojiApr2024
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10715_MorinagaIce_Mar_2024/BF-10715_MorinagaIce_Mar_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10726_TheYearofCamels2024_Hashmoji_v3/BF-10726_TheYearofCamels202
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10748_Changyou_haikyu_haifura_Mar2024/BF-10748_Changyou_haikyu_ha
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10760_Hashmoji_HRDF_2024/BF-10760_Hashmoji_HRDF_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10774_LaRoche_PosayCOAnthelios_2024/BF-10774_LaRoche_PosayCOAnthe
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10785_Aplus_sfd_jpbrandedemoji/BF-10785_Aplus_sfd_jpbrandedemoji.
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10788_miHoYo_Archeron_March_2024/BF-10788_miHoYo_Archeron_March_2
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10879_OnePlusNordCE4_Hashmoji/BF-10879_OnePlusNordCE4_Hashmoji.pn
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2/BF-10920_NetflixJP_18ce54u
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10921_NetflixJP_18ce54ua4fy_Hashmoji_20240419-20240518_KID/BF-109
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10943_HASHMOJI_DeUna_BrandFormance_APRIL_2024/BF-10943_HASHMOJI_D
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10967_India_GeneralElections_Hashmoji_Jun2024/BF-10967_India_Gene
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10984_UngentlemanlyWarfare_AFTER_V3/BF-10984_UngentlemanlyWarfare
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10998_HSR_Aventurine_Emoji_Q2_2024/BF-10998_HSR_Aventurine_Emoji_
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11009_IECM_Elecciones_2024/BF-11009_IECM_Elecciones_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11031_OKX_Hashmoji/BF-11031_OKX_Hashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11074_Foris_Limited_2024_Q2_Branded_Hashtag_202404/BF-11074_Foris
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-9382_NBAXLive_CommunityHashtag/BF-9382_NBAXLive_CommunityHashtag.
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Boston_RedSox_MLB_2024/Boston_RedSox_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Chicago_Cubs_MLB_2024/Chicago_Cubs_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Chicago_WhiteSox_MLB_2024/Chicago_WhiteSox_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Coachella2024/Coachella2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/CricketTwitter_2021/CricketTwitter_2021.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DD_CAPCOM_Hashmoji_Launch_2024/DD_CAPCOM_Hashmoji_Launch_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DKPartner_Additional_v2/DKPartner_Additional_v2.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DK_Pre_SB_202/DK_Pre_SB_202.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Detroit_Tigers_MLB_2024/Detroit_Tigers_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DignitasEmoji2024/DignitasEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DraftKings_Additional_hashtags/DraftKings_Additional_hashtags.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Draftkings_2024/Draftkings_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/EMEAMastersEmoji2024/EMEAMastersEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Emigala_2024/Emigala_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/EveryWoman_2020/EveryWoman_2020.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/FaZeClanEmoji2024_v2/FaZeClanEmoji2024_v2.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/FuriaEmoji2024/FuriaEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/GiantXLECEmoji2024/GiantXLECEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/GungHo_puzzdra_PR_Collabo_event_2024April_after/GungHo_puzzdra_PR_Co
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_MWL_2024/Hashmoji_MWL_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_alli_taisho_3_6/Hashmoji_alli_taisho_3_6.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_essential_jp_4_1/Hashmoji_essential_jp_4_1.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_lion_ochtune_4_12/Hashmoji_lion_ochtune_4_12.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_rohto_uv_3_25_v2/Hashmoji_rohto_uv_3_25_v2.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Heavenburnsred_April_2024_emoji/Heavenburnsred_April_2024_emoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Houston_Astros_MLB_2024/Houston_Astros_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/ImmortalsEmoji2024/ImmortalsEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/JBApp_Hashmoji_2024/JBApp_Hashmoji_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/KaijuNo8/KaijuNo8.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/KansasCity_Royals_MLB_2024/KansasCity_Royals_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/LA_Angels_MLB_2024/LA_Angels_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MOBO_Awards_2024/MOBO_Awards_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MSI_Emoji_2024/MSI_Emoji_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MeToo_Korea_2018_v2/MeToo_Korea_2018_v2.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MediaInformationLiteracyWeeks_2020_ThinkBeforeClicking/MediaInformat
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MediaInformationLiteracyWeeks_2020_ThinkBeforeSharing/MediaInformati
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MiLB_Trophy_2024/MiLB_Trophy_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Milwaukee_Brewers_MLB_2024/Milwaukee_Brewers_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Minnesota_Twins_MLB_2024/Minnesota_Twins_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MyXAnniversary/MyXAnniversary.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBALogo_Hashtag_2023/NBALogo_Hashtag_2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBAX_NewCommunityHashtag_V1/NBAX_NewCommunityHashtag_V1.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_BucksHashmoji/NBA_BucksHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_CelticsHashmoji/NBA_CelticsHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_Finals_2024/NBA_Finals_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_KnicksHashmoji/NBA_KnicksHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_Minnesota_Timberwolves_2023_2024_Playoffs_Hashmoji/NBA_Minnesota
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_NetsHashmoji/NBA_NetsHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_PistonsHashmoji/NBA_PistonsHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_Playoffs_2024/NBA_Playoffs_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_RaptorsHashmoji/NBA_RaptorsHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_Sacramento_Kings_2023_2024_Playoffs_Hashmoji/NBA_Sacramento_King
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_WarriorsHashmoji/NBA_WarriorsHashmoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NFLDraft_2024/NFLDraft_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_Bruins_2023/NHL_Bruins_2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_Cayotes_2023/NHL_Cayotes_2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_MWild_2023/NHL_MWild_2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_NJDevils_2023/NHL_NJDevils_2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_Rangers_2023/NHL_Rangers_2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NRGEmoji2024/NRGEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_Chicago_Hashtag2024/NWSL_Chicago_Hashtag2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_League2_Hashtag2024/NWSL_League2_Hashtag2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_League_Hashtag2024/NWSL_League_Hashtag2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_RacingLouisville_2024_Updated/NWSL_RacingLouisville_2024_Update
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_Utah_Hashtag2024/NWSL_Utah_Hashtag2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NY_Yankees_MLB_2024/NY_Yankees_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Net_Emoji_Evergreen_SpanishAdd/Net_Emoji_Evergreen_SpanishAdd.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NigerianIdol20242/NigerianIdol20242.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/OverstockCrazyGoodDeals_AllHashmojis_BF-10915/OverstockCrazyGoodDeal
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Romasaga_April_2024_emoji/Romasaga_April_2024_emoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/SF_Giants_MLB_2024_Updated/SF_Giants_MLB_2024_Updated.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Shopee_BR_Hashmoji_2/Shopee_BR_Hashmoji_2.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Sony_MarcAnthony_MuevenseAlbum_Music/Sony_MarcAnthony_MuevenseAlbum_
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/StopViolenceAgainstWomen_2020/StopViolenceAgainstWomen_2020.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/TampaBay_Rays_MLB_2024/TampaBay_Rays_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Texas_Rangers_MLB_2024/Texas_Rangers_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Twitter_DisabledAndAble/Twitter_DisabledAndAble.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UnileverRexona_BF-10960_Hashmoji3/UnileverRexona_BF-10960_Hashmoji3.
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WNBA_2024_CommissionersCup/WNBA_2024_CommissionersCup.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WNBA_2024_Season/WNBA_2024_Season.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WNBA_2024_Season_WelcometotheW/WNBA_2024_Season_WelcometotheW.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WNBA_2024_TipOff/WNBA_2024_TipOff.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WWENXTEmoji2023/WWENXTEmoji2023.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WWERaw2024Emoji/WWERaw2024Emoji.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WWESpeedEmoji2024/WWESpeedEmoji2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Washington_Nationals_MLB_2024/Washington_Nationals_MLB_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WatchUsWingIt_TwitterParents_2020/WatchUsWingIt_TwitterParents_2020.
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WeDontTrustYou_MetroBoominandFuture_Music_US/WeDontTrustYou_MetroBoo
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/World_Surf_League_2024/World_Surf_League_2024.png
Source: chromecache_298.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/nowruz2018_v4/nowruz2018_v4.png
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_345.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_504.2.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/acknowledgements.txt
Source: chromecache_444.2.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_507.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_563.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_507.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_507.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_563.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_507.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_507.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_563.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_345.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_345.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_345.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_345.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_507.2.dr, chromecache_563.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_563.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_373.2.dr	String found in binary or memory: https://fburl.com/comet_preloading
Source: chromecache_373.2.dr	String found in binary or memory: https://fburl.com/dialog-provider).
Source: chromecache_373.2.dr	String found in binary or memory: https://fburl.com/wiki/m19zmtlh
Source: chromecache_376.2.dr	String found in binary or memory: https://fburl.com/wiki/xrzohrqb
Source: chromecache_552.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19-7DRs5.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-1927DRs5.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-1967DRs5.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmY2RjRdE.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmYGRjRdE.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmYWRjRdE.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmYmRjRdE.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISma2RjRdE.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmbGRjRdE.woff2)
Source: chromecache_424.2.dr	String found in binary or memory: https://github.com/emn178/js-md5
Source: chromecache_424.2.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_551.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_507.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_507.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_507.2.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_563.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_563.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_563.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_551.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_563.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://greatergivingcontent.com/Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://greatergivingcontent.com/Image/660136B2-6730-420F-977B-BFABA1CC08B4
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://greatergivingcontent.com/Image/87ACC56B-2320-449E-A576-99DC53126C80
Source: chromecache_480.2.dr	String found in binary or memory: https://greatergivinghelp.zendesk.com/hc/en-us
Source: chromecache_418.2.dr	String found in binary or memory: https://help.twitter.com/rules-and-policies/twitter-cookies
Source: chromecache_350.2.dr	String found in binary or memory: https://help.x.com/rules-and-policies/x-cookies.
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_563.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_563.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_563.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_563.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_563.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_563.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_563.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_457.2.dr	String found in binary or memory: https://lexical.dev/docs/error?
Source: chromecache_345.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_592.2.dr	String found in binary or memory: https://optout.aboutads.info/
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx
Source: chromecache_295.2.dr	String found in binary or memory: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx
Source: chromecache_313.2.dr	String found in binary or memory: https://pbs.twimg.com/profile_images/1683899100922511378/5lY42eHs_normal.jpg
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_563.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://s7.addthis.com/js/300/addthis_widget.js#pubid=ra-4f870e5700fb9c86
Source: chromecache_351.2.dr	String found in binary or memory: https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Source: chromecache_563.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_425.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_592.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647
Source: chromecache_319.2.dr	String found in binary or memory: https://support.x.com/articles/14016
Source: chromecache_319.2.dr	String found in binary or memory: https://support.x.com/articles/18311
Source: chromecache_319.2.dr	String found in binary or memory: https://support.x.com/articles/20172060
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_459.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.NetworkInstrument
Source: chromecache_334.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.955a2e7a.js.m
Source: chromecache_598.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserProfile.10f22
Source: chromecache_357.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.9bb55bba.j
Source: chromecache_350.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/en.0a146e9a.js.map
Source: chromecache_541.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AppModules.f040d1
Source: chromecache_545.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioDock.81854df
Source: chromecache_436.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.05
Source: chromecache_488.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.ExploreSidebar.ff
Source: chromecache_409.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.NewTweetsPill.c18
Source: chromecache_390.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.031f858a.
Source: chromecache_490.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.19fb
Source: chromecache_441.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineCardHandl
Source: chromecache_381.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.
Source: chromecache_378.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.WideLayout.170693
Source: chromecache_533.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.richScribeAction.
Source: chromecache_325.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.tweetHandler.f138
Source: chromecache_424.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/main.3e34201a.js.map
Source: chromecache_570.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.54e3f0ea.j
Source: chromecache_554.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.5e0e27da.
Source: chromecache_360.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.Dropdown.c62e1b
Source: chromecache_403.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.
Source: chromecache_532.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.s.8a0b95ca.js.m
Source: chromecache_498.2.dr, chromecache_556.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AboutThisA
Source: chromecache_555.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AccountAna
Source: chromecache_544.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Articles~b
Source: chromecache_302.2.dr, chromecache_296.2.dr, chromecache_512.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AudioSpace
Source: chromecache_364.2.dr, chromecache_578.2.dr, chromecache_434.2.dr, chromecache_450.2.dr, chromecache_528.2.dr, chromecache_371.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~
Source: chromecache_617.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Bookmarks~
Source: chromecache_353.2.dr, chromecache_416.2.dr, chromecache_316.2.dr, chromecache_338.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie
Source: chromecache_420.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Compose~bu
Source: chromecache_439.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Conversati
Source: chromecache_319.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ExtendedUs
Source: chromecache_606.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.JobSearch~
Source: chromecache_435.2.dr, chromecache_389.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.LiveEvent~
Source: chromecache_444.2.dr, chromecache_448.2.dr, chromecache_467.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Ocf~bundle
Source: chromecache_611.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ReaderMode
Source: chromecache_572.2.dr, chromecache_352.2.dr, chromecache_460.2.dr, chromecache_580.2.dr, chromecache_342.2.dr, chromecache_609.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.SettingsPr
Source: chromecache_313.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Settings~b
Source: chromecache_370.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ShareJob~b
Source: chromecache_314.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Topics~bun
Source: chromecache_583.2.dr, chromecache_415.2.dr, chromecache_540.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.TwitterArt
Source: chromecache_538.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.UserProfil
Source: chromecache_445.2.dr, chromecache_432.2.dr, chromecache_571.2.dr, chromecache_470.2.dr, chromecache_418.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules
Source: chromecache_487.2.dr, chromecache_413.2.dr, chromecache_392.2.dr, chromecache_395.2.dr, chromecache_591.2.dr, chromecache_453.2.dr, chromecache_468.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AudioDock~
Source: chromecache_358.2.dr, chromecache_311.2.dr, chromecache_574.2.dr, chromecache_315.2.dr, chromecache_550.2.dr, chromecache_561.2.dr, chromecache_437.2.dr, chromecache_589.2.dr, chromecache_330.2.dr, chromecache_380.2.dr, chromecache_516.2.dr, chromecache_382.2.dr, chromecache_486.2.dr, chromecache_430.2.dr, chromecache_527.2.dr, chromecache_581.2.dr, chromecache_365.2.dr, chromecache_587.2.dr, chromecache_518.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~b
Source: chromecache_499.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~o
Source: chromecache_607.2.dr, chromecache_322.2.dr, chromecache_412.2.dr, chromecache_399.2.dr, chromecache_558.2.dr, chromecache_565.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DashMenu~l
Source: chromecache_510.2.dr, chromecache_297.2.dr, chromecache_513.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.SideNav~bu
Source: chromecache_303.2.dr, chromecache_355.2.dr, chromecache_552.2.dr, chromecache_603.2.dr, chromecache_477.2.dr, chromecache_525.2.dr, chromecache_374.2.dr, chromecache_427.2.dr, chromecache_421.2.dr, chromecache_400.2.dr, chromecache_438.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.Typeahead~
Source: chromecache_463.2.dr, chromecache_455.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.WideLayout
Source: chromecache_573.2.dr, chromecache_579.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.directMess
Source: chromecache_462.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.inlineTomb
Source: chromecache_494.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.ComposeS
Source: chromecache_320.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.EmojiPic
Source: chromecache_479.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl
Source: chromecache_508.2.dr, chromecache_564.2.dr, chromecache_614.2.dr, chromecache_386.2.dr, chromecache_423.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.Settings
Source: chromecache_514.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/vendor.6c559eba.js.map
Source: chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	String found in binary or memory: https://twitter.com/OverlakeHMC
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_388.2.dr, chromecache_425.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_480.2.dr	String found in binary or memory: https://www.greatergiving.com/en/lp/privacy-statement
Source: chromecache_480.2.dr	String found in binary or memory: https://www.greatergiving.com/en/lp/product-terms-and-conditions
Source: chromecache_601.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_592.2.dr	String found in binary or memory: https://www.youronlinechoices.com/
Source: chromecache_444.2.dr	String found in binary or memory: https://x.com
Source: chromecache_350.2.dr	String found in binary or memory: https://x.com/en/privacy
Source: chromecache_592.2.dr	String found in binary or memory: https://youradchoices.ca/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847

Source: unknown	HTTPS traffic detected: 23.39.190.93:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.39.190.93:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/593@60/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,12559349652139094833,10463207426666830587,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng=="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,12559349652139094833,10463207426666830587,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://support.x.com/articles/14016	0%	URL Reputation	safe
https://support.x.com/articles/14016	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://x.com/en/privacy	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://greatergivingcontent.com/Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	31.13.70.36	true	false	high
twitter.com	104.244.42.65	true	false	high
s.twitter.com	104.244.42.195	true	false	high
cs45.wac.edgecastcdn.net	72.21.91.70	true	false	high
tpop-api.x.com	104.244.42.130	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
platform.twitter.map.fastly.net	146.75.92.157	true	false	unknown
overlakehf.ejoinme.org	52.137.90.97	true	false	high
tpop-api.twitter.com	104.244.42.2	true	false	high
scontent.xx.fbcdn.net	31.13.70.7	true	false	high
t.co	104.244.42.197	true	false	high
rs6.net	208.75.122.11	true	false	high
greatergivingcontent.com	52.137.90.97	true	false	unknown
www.google.com	142.250.101.105	true	false	high
cs510.wpc.edgecastcdn.net	152.199.24.185	true	false	high
windowsupdatebg.s.llnwi.net	68.142.107.4	true	false	unknown
cs189.wpc.edgecastcdn.net	93.184.215.217	true	false	high
scontent-sjc3-1.xx.fbcdn.net	157.240.22.25	true	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
abs.twimg.com	unknown	unknown	false	high
s7.addthis.com	unknown	unknown	false	high
pbs.twimg.com	unknown	unknown	false	high
api.x.com	unknown	unknown	false	unknown
r20.rs6.net	unknown	unknown	false	high
api.twitter.com	unknown	unknown	false	high
appleid.cdn-apple.com	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
video.twimg.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	false	high
https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.TweetCoinDetails~b.c58a905a.js	false	high
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=c&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3	false	high
https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AfDaUubXx4OfTJn4DccajD9sBj7XD81SszpxLqsNxNf20Q&oe=664FF6D7&_nc_sid=7da55a	false	high
https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/305262992_451188083712872_1835908681663258642_n.png?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=107&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6pmRLTc1RUwAb453RIY&_nc_ht=scontent-sjc3-1.xx&oh=00_AfD67zDS4ZCd3Oluy7rReiwQPmwiSBDhpVXWELehNk3DdQ&oe=662E5DE1	false	high
https://abs.twimg.com/responsive-web/client-web/vendor.6c559eba.js	false	high
https://overlakehf.ejoinme.org/DesktopModules/AESOPRegistration/module.css?cdv=158	false	high
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=8&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3	false	high
https://overlakehf.ejoinme.org/DesktopModules/AESOPEventLanding/module.css?cdv=158	false	high
https://static.xx.fbcdn.net/rsrc.php/v3i0Wo4/yH/l/en_US/tAGk4PH_nhv.js?_nc_x=Ij3Wp8lg5Kz	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js	false	high
https://static.xx.fbcdn.net/rsrc.php/v3i3Ek4/yP/l/en_US/ZAPhqDpoVnl.js?_nc_x=Ij3Wp8lg5Kz	false	high
https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/G3Nm7rYDpD0.js?_nc_x=Ij3Wp8lg5Kz	false	high
https://overlakehf.ejoinme.org/DesktopModules/AESOPSponsor/module.css?cdv=158	false	high
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.9bb55bba.js	false	high
https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/434225809_986346610049172_409589886129999166_n.jpg?stp=c24.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nXzthKFyQOwAb6u1zRw&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCF-fyzT-Hv9sf9KdaPTk6XQIwFJRwMhMHQ5m4rZ5vwng&oe=662E7DF7	false	high
https://overlakehf.ejoinme.org/Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ScriptManager_TSM&compress=1&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a4dd65af1-4721-4286-9a7d-9f9100b5515f%3aea597d4b%3ab25378d2	false	high
https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.81854dfa.js	false	high
https://static.xx.fbcdn.net/rsrc.php/v3/yR/r/OiBJQTDC7YF.js?_nc_x=Ij3Wp8lg5Kz	false	high
https://overlakehf.ejoinme.org/DesktopModules/Announcements/module.css?cdv=158	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt.21c3416a.js	false	high
https://overlakehf.ejoinme.org/portals/_default/skins/customizable/bootstrap-3/css/bootstrap.min.css?cdv=158	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich.5ffff2aa.js	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b.cbab74ca.js	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA.979f34da.js	false	high
https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.SettingsProfile~bundle.Ocf~bundle.UserLists.93afaf8a.js	false	high
https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AfABJ8SwyWeSMuXofMm_jfkH1HTgW2Sg7J402E--jmbvjg&oe=66501200&_nc_sid=7da55a	false	high
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.a2076fca.js	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.JobSearch~bundle.Ocf~bun.a3a90dba.js	false	high
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.4a624f8a.js	false	high
https://abs.twimg.com/responsive-web/client-web/modules.audio.54e3f0ea.js	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.2e9524aa.js	false	high
https://static.xx.fbcdn.net/rsrc.php/v3ijuz4/yz/l/en_US/6fCMsyVB7zA.js?_nc_x=Ij3Wp8lg5Kz	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.743e980a.js	false	high
https://overlakehf.ejoinme.org/Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936733934	false	high
https://static.xx.fbcdn.net/rsrc.php/v3/yp/l/0,cross/Zl4RYlGvLRL.css?_nc_x=Ij3Wp8lg5Kz	false	high
https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings.bf60957a.js	false	high
https://overlakehf.ejoinme.org/js/dnn.modalpopup.js?cdv=158	false	high
https://twitter.com/i/flow/login?redirect_after_login=%2FOverlakeHMC	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_507.2.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/NBA_WarriorsHashmoji/NBA_WarriorsHashmoji.png	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/NY_Yankees_MLB_2024/NY_Yankees_MLB_2024.png	chromecache_298.2.dr	false		high
http://underscorejs.org	chromecache_514.2.dr	false		high
https://support.x.com/articles/14016	chromecache_319.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-10638_MBC_Ramadan_2024_TriggerHashtag_After/BF-10638_MBC_Ramadan_	chromecache_298.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_388.2.dr, chromecache_425.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_507.2.dr	false		high
http://jqueryui.com/position/	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10236_Beiersdorf_NFC_Face_Care_February_2024_v2/BF-10236_Beiersdo	chromecache_298.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.	chromecache_381.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_563.2.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/NBA_CelticsHashmoji/NBA_CelticsHashmoji.png	chromecache_298.2.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_601.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-10984_UngentlemanlyWarfare_AFTER_V3/BF-10984_UngentlemanlyWarfare	chromecache_298.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_563.2.dr	false		high
https://youradchoices.ca/	chromecache_592.2.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_551.2.dr, chromecache_305.2.dr	false	Avira URL Cloud: safe	low
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.19fb	chromecache_490.2.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/NWSL_RacingLouisville_2024_Updated/NWSL_RacingLouisville_2024_Update	chromecache_298.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.	chromecache_403.2.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_507.2.dr	false		high
http://api.jqueryui.com/checkboxradio/	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/Twitter_DisabledAndAble/Twitter_DisabledAndAble.png	chromecache_298.2.dr	false		high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_563.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10270_miHoYoHSRClockieBrandedEmoji/BF-10270_miHoYoHSRClockieBrand	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/MiLB_Trophy_2024/MiLB_Trophy_2024.png	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/DignitasEmoji2024/DignitasEmoji2024.png	chromecache_298.2.dr	false		high
https://greatergivingcontent.com/Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s	chromecache_429.2.dr, chromecache_547.2.dr, chromecache_295.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/slider/	chromecache_507.2.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_563.2.dr	false		high
https://abs.twimg.com/hashflags/Hashmoji_lion_ochtune_4_12/Hashmoji_lion_ochtune_4_12.png	chromecache_298.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/WNBA_2024_Season/WNBA_2024_Season.png	chromecache_298.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.s.8a0b95ca.js.m	chromecache_532.2.dr	false		high
https://abs.twimg.com/hashflags/WWERaw2024Emoji/WWERaw2024Emoji.png	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10943_HASHMOJI_DeUna_BrandFormance_APRIL_2024/BF-10943_HASHMOJI_D	chromecache_298.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.5e0e27da.	chromecache_554.2.dr	false		high
https://abs.twimg.com/hashflags/NWSL_Utah_Hashtag2024/NWSL_Utah_Hashtag2024.png	chromecache_298.2.dr	false		high
https://fburl.com/wiki/xrzohrqb	chromecache_376.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-10726_TheYearofCamels2024_Hashmoji_v3/BF-10726_TheYearofCamels202	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10398_Shiseido_MQ_Campaign_Q124/BF-10398_Shiseido_MQ_Campaign_Q12	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/JBApp_Hashmoji_2024/JBApp_Hashmoji_2024.png	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10715_MorinagaIce_Mar_2024/BF-10715_MorinagaIce_Mar_2024.png	chromecache_298.2.dr	false		high
https://sizzlejs.com/	chromecache_563.2.dr	false		high
https://abs.twimg.com/hashflags/TampaBay_Rays_MLB_2024/TampaBay_Rays_MLB_2024.png	chromecache_298.2.dr	false		high
http://www.robertpenner.com/easing)	chromecache_507.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-10430-FF7R_Feb_emoji_2024/BF-10430-FF7R_Feb_emoji_2024.png	chromecache_298.2.dr	false		high
https://abs.twimg.com/hashflags/KaijuNo8/KaijuNo8.png	chromecache_298.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_563.2.dr	false		high
https://abs.twimg.com/hashflags/DraftKings_Additional_hashtags/DraftKings_Additional_hashtags.png	chromecache_298.2.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_507.2.dr	false		high
https://x.com/en/privacy	chromecache_350.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_445.2.dr, chromecache_432.2.dr, chromecache_571.2.dr, chromecache_470.2.dr, chromecache_418.2.dr	false		high
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_507.2.dr	false		high
https://abs.twimg.com/hashflags/KansasCity_Royals_MLB_2024/KansasCity_Royals_MLB_2024.png	chromecache_298.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
93.184.215.217	cs189.wpc.edgecastcdn.net	European Union	15133	EDGECASTUS	false
157.240.22.25	scontent-sjc3-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
208.75.122.11	rs6.net	United States	40444	ASN-CCUS	false
142.250.101.105	www.google.com	United States	15169	GOOGLEUS	false
104.244.42.65	twitter.com	United States	13414	TWITTERUS	false
52.137.90.97	overlakehf.ejoinme.org	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
31.13.70.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
104.244.42.2	tpop-api.twitter.com	United States	13414	TWITTERUS	false
104.244.42.197	t.co	United States	13414	TWITTERUS	false
104.244.42.130	tpop-api.x.com	United States	13414	TWITTERUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
152.199.24.185	cs510.wpc.edgecastcdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
31.13.70.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
146.75.92.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
72.21.91.70	cs45.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4
192.168.2.22

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430797
Start date and time:	2024-04-24 07:30:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng==
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/593@60/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx Browse: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx Browse: https://twitter.com/OverlakeHMC Browse: https://www.facebook.com/overlakemedicalcenter

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.84, 142.251.2.101, 142.251.2.139, 142.251.2.102, 142.251.2.138, 142.251.2.100, 142.251.2.113, 34.104.35.123, 142.251.2.95, 142.250.141.94, 184.27.144.113, 142.250.101.95, 74.125.137.95, 40.127.169.103, 68.142.107.4, 192.229.211.108, 20.3.187.198, 23.65.32.10, 142.250.101.94
Excluded domains from analysis (whitelisted): cs2-wac.apr-8315.edgecastdns.net, slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, e2885.e9.akamaiedge.net, update.googleapis.com, appleid.cdn-apple.com.edgekey.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, ds-s7.addthis.com.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, e4016.a.akamaiedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, cs2-wpc.apr-8315.edgecastdns.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, appleid.cdn-apple.com.akadns.net, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4570), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	83567
Entropy (8bit):	5.922453747715135
Encrypted:	false
SSDEEP:	1536:AjIVP8JvZwHT3fOX04nsOUINiHMctC1RHCMa/aWknTrEf9e:Aj8P8BsTenzQDiTrE1e
MD5:	27AC277DDA66EDAC0F0117ABE22D22CA
SHA1:	CA3EC5088347EFAEC2187B992A1D64648D42968C
SHA-256:	A28018FB42FE6EBEA2EA217DE67680B2AB582E7A393FD99E7F3E12442B84C441
SHA-512:	B94E6FD50AE26C6BAB6FD91B701B9861164B3F8C04B3C881D539401F98813D287A45B3E9BB61A6330385183A486CE90EE10C17C78903EC910DD26A2073F7BE3B
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx
Preview:	<!DOCTYPE html>..<html lang="en-US">..<head id="Head"><meta charset="utf-8" />.. Responsive Design -->.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chome=1" /><meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />.<meta name="REVISIT-AFTER" content="7 DAYS" />.<meta name="RATING" content="GENERAL" />.<meta name="RESOURCE-TYPE" content="DOCUMENT" />.<meta content="text/javascript" http-equiv="Content-Script-Type" />.<meta content="text/css" http-equiv="Content-Style-Type" />.<title>...Register Today..</title><meta id="MetaDescription" name="DESCRIPTION" content="Register Today" /><meta id="MetaRobots" name="ROBOTS" content="INDEX, FOLLOW" /><link href="/Portals/_default/default.css?cdv=158" media="all" type="text/css" rel="stylesheet"/><link href="/DesktopModules/Announcements/module.css?cdv=158" media="all" type="text/css" rel="stylesheet"/><link href="/DesktopModules/Media/module.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22164)
Category:	downloaded
Size (bytes):	22388
Entropy (8bit):	5.231557314464752
Encrypted:	false
SSDEEP:	384:Q6Ox+d+BmxNlZh+qx8aPls9gbxYrNvPkd5Ac7Xk4A9jecJvLKFGSfPu4rxYzwxYv:Q6O0d+BcNlZh+qVts9gb8vsd5pTk4LcL
MD5:	10793BE6F3A22E3C4F0D229B3E494686
SHA1:	F5EB18816CB4591E65199282D81839A052AF0FC2
SHA-256:	2EAD3C5BC62CF81BCEA13372BDBB6C9F02C5C161F9BF9E9B7CE6DD55A2848A3F
SHA-512:	463AEE87FC77259229CA83BC9D8F0336AF73FB181C08AECDCE067D2772FDFA498ED7046979B4D0607C2C3262AA398FE16C4C55CB4FD7930679B250A382D3A11A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..60c1138a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle."],{39968:(e,d,r)=>{r.d(d,{B:()=>z});var a=r(2784),o=r(25686),l=r(54044),n=r(45962),t=r(73186),u=r(16587),i=r(48501),s=(r(6886),r(7267)),c=r(56499),b=r(34615),p=r(45313),h=r(49031);function m(){const e=(0,s.TH)(),{featureSwitches:d,loggedInUserId:r,userClaims:o}=(0,i.QZ)(),l=d.isTrue("responsive_web_twitter_blue_upsell_right_column"),n=d.isTrue("responsive_web_twitter_blue_upsell_posts"),t=d.isTrue("subscriptions_sign_up_enabled"),u=p.cX.some((e=>o.hasSubscription(e))),c="/home"===e.pathname,{statusId:m}=b.ZP.parsePermalinkPath(e.pathname)\|\|{},A=n&&m;if(!l\|\|!t\|\|!r\|\|u\|\|!c&&!A)return null;const M=A?h.w.post:h.w.home;return a.createElement(D,{statusId:m,type:M})}const D=(0,c.Z)({loader:()=>Promise.all([r.e("modules.common"),r.e("shared~loader.AudioDock~loader.DashMenu~loader

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4083)
Category:	downloaded
Size (bytes):	4306
Entropy (8bit):	5.305887053258875
Encrypted:	false
SSDEEP:	48:iIRHaNZbuhlMAt4Gbsi1KjRQ3wD8hHQ4ja6UAb08/e0VW7Dbg3+3+y/Sru0/maPs:lqb2lIi1Cr5ea63WTcvaAWDRn1O99Uhf
MD5:	4A4DCD09B7B0D3F84B94ED4596696D08
SHA1:	42C6144516CFEF40B9168A8F05B2FD1CDCEF8462
SHA-256:	E9913357CEC26D0F5967AC8C28B322F55F5D99125F892D7DE803165B22B8D9BD
SHA-512:	F289081D3F6A9834B078B9F10EC009D9F38A91B48E8FCFCC1EA6683D294F3E0BA8DF4EB6280905A06ECAC6DE9D710F68BB63781560272CEB369C2EE305FB5CE9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings.bf60957a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings"],{92051:(e,r,n)=>{n.d(r,{i:()=>y.ZP,k:()=>m});n(6886);var t=n(2784),o=n(28123),u=n.n(o),a=n(72845),c=n.n(a),l=n(57074),i=n.n(l),s=n(1206),d=n(63174),f=n(23335),y=n(23803);const h=({render:e})=>e({fetchStatus:y.ZP.LOADING,data:null,error:null,retry:s.Z});class v extends t.Component{constructor(...e){super(...e),this.state={error:null}}static getDerivedStateFromError(e){return{error:e}}componentDidCatch(e,r){if(!(e instanceof d.Z))throw e;this.props.errorHandler(e)}render(){return this.props.children(this.state.error,this.props.retry)}}const p=({query:e,queryRef:r,render:n})=>{const t=u()(e,r);return n({fetchStatus:y.ZP.LOADED,data:t,error:null,retry:s.Z})},m=(e,r)=>({fetchPolicy:n="store-or-network",render:o,variables:u})=>{const[a,l]=c()(e),s=(0,f.n7)(r.errorConfig.cont

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	162907
Entropy (8bit):	5.347508397331908
Encrypted:	false
SSDEEP:	1536:EezWxyGv36zpxv9mkRSWDQ9ZJ5sr4u6PwXJUzlJeRpZp7QR3KWJ4j5RWwzAzEzZ:xz3Q6XJUzkQAwszAzEzZ
MD5:	029CB1A1BF66C5A1B75566646BA86CF0
SHA1:	3211C57D6FFF6AADE6E8934BD36F5DE9FDCEFDA8
SHA-256:	F09BF5B7B7D62E47BE7881F24B03B5B785D012999A225EC7EF5318A814555543
SHA-512:	451C9D0E5C6E8816D7ECB347B71411748C868067EADD27FAEADC41AA4AD644870D057662D3A176EBB053775977ADB7A12E9CA8336C25BC9773F470E2B38D7833
Malicious:	false
Reputation:	low
URL:	https://api.twitter.com/1.1/hashflags.json
Preview:	[{"hashtag":"100T","starting_timestamp_ms":1705737600000,"ending_timestamp_ms":1735718400000,"asset_url":"https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png","is_hashfetti_enabled":false},{"hashtag":"100WIN","starting_timestamp_ms":1705737600000,"ending_timestamp_ms":1735718400000,"asset_url":"https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png","is_hashfetti_enabled":false},{"hashtag":"100.......","starting_timestamp_ms":1713452400000,"ending_timestamp_ms":1721314740000,"asset_url":"https://abs.twimg.com/hashflags/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2.png","is_hashfetti_enabled":false},{"hashtag":"3.28.......","starting_timestamp_ms":1710687600000,"ending_timestamp_ms":1718722740000,"asset_url":"https://abs.twimg.com/hashflags/Asahi_Mitsuya_anniversary_Japan_2024_Emoji/Asahi_Mitsuya_anniversary_Japan_2024_Emoji.png","is_hashfetti_enabled":false},{"hashtag":"8.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	11494
Entropy (8bit):	4.5730700893887075
Encrypted:	false
SSDEEP:	192:mQHTjtWwxR4m5zPwOkmhWHzrQXABKid73KhPie80kDLLEd:mix/51QchPie80kDLLEd
MD5:	1FF71CA63503B6940FAAD910BD546C8B
SHA1:	EC6290A4A106A2C05F9DD457A771144C705A7A9B
SHA-256:	F58C73D2C04F59EEF4AF7FBD84362D4FA49188043405516AA35EE8C412D0DBC1
SHA-512:	139E57610FE5311F59D922751D36B24A3D965D334A216AF3645E3C6B9A520717E60A0B612E94E8761EDD811D8AC7AF21696C134B96099FBBAE3B633E60E107F0
Malicious:	false
Reputation:	low
Preview:	/*..DotNetNuke - http://www.dotnetnuke.com..Copyright (c) 2002-2007..by DotNetNuke Corporation.. ..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated ..documentation files (the "Software"), to deal in the Software without restriction, including without limitation ..the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and ..to permit persons to whom the Software is furnished to do so, subject to the following conditions:.. ..The above copyright notice and this permission notice shall be included in all copies or substantial portions ..of the Software... ..THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED ..TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ..THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN A

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	449
Entropy (8bit):	5.241004473252711
Encrypted:	false
SSDEEP:	6:6v/lhPEebYMZnpb1CV3wJXNMso+u6IsHLXQ1ALQ4o11e4oHtHxF/lljp:6v/7MebznpSAJXNtssrXQ1Kke3/l7
MD5:	0C3DD7D811D03BD31B6A980A2B4E9D23
SHA1:	59DDC6BC3EE1EA0BFAC535C31E10737CD9346392
SHA-256:	56C5E0EDE6CFB29F13460D959D86532F6AB6A61862F5E207856840F24B7C376B
SHA-512:	DA97E9D804761F78F6E5CF5338FC5D7EC58226E89B61B24E1080BCA3156E006DC7C217EE2827D23B95987F3F9FA9103C40BB6A101C350F1F3359583C239A4083
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Dc7-7AgwkwS.png
Preview:	.PNG........IHDR..............W.?....PLTE..............................................................................................................................................................L....3tRNS.........../..M..Ba.....9..........k.....n.%......i>.....IDATx.]....0.@.........^......cr...f.....m2..c.$...6..;..E...~.........$Ca....).9:8.. ..G%!.e.+Sc7....EC..WiC........+.$. ..iH._..d.Ex.?.u...}[...).^..}.\|...p.[_....IEND.B`.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 177, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7303
Entropy (8bit):	7.860646772141492
Encrypted:	false
SSDEEP:	192:AafLZ3TzdkUpBN3MnG4WGOwhiYLUNlQLc:jfLJTxDpBZMG4niXlQLc
MD5:	5FF833A3E0296C7BE5E130413D6F0431
SHA1:	6CB1CFBA275E5047F186EF39B6163ADF66137221
SHA-256:	25524E1E2D251DA55AA20821BE2B39A7EC96BA956B197E2D974D7C6F3D44006D
SHA-512:	366BA42BC157B98113DB3345B48B5DD1F7482CA0C9C4FD51B0868B19F97CDF029F3639C35DC454A8D63C73A69B783C1B2A9CADFEB1088095AC4C5B717C199BA1
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yo/r/RBVykxDUbUn.png
Preview:	.PNG........IHDR...............Ly....PLTEGpL.................................................................................................................................................................................................................................................................................(.8............................................................;;;...................................................................x..\|..x.........................................o......................................x..v....................v..w..............................................eee................w.....w.........................................w..w.................v..w........x..x..x..w..w..w.................w..w..v..v..............w..w.....w..w..w.....w.............n~f....tRNS........>......~..Z...8.H.)f.....,.$.pd...MP...!.............^B.vET.J...x...:i5\....2rzl.X...<a...6......@.....~q../..6.....3..J.!.@,..P.z.e]X......../..@F.!R.@...l........

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6683)
Category:	downloaded
Size (bytes):	6906
Entropy (8bit):	5.457531593278269
Encrypted:	false
SSDEEP:	96:O6x8PGiLJb1Vun1sLvDHixMAzCFVH1IiWJxSQ/RKIPPDCzUEYSEZVEVFerbUUwDG:c+KZGsLbH7AzCFdydh+4LE/HU0B++c
MD5:	0A2F1F5DF980F28AF8FCC6CEF983AFD9
SHA1:	69886C8D34811906ACE0AF27D9FE73C157C1537E
SHA-256:	1CEF38EF9A9BC7F5400F652CC5A4288A05081875338DB86F2565920B877756E7
SHA-512:	83ADCAB96DF458D7B8DB32BD986EB2B665DF192019ACC6BF92797ADB533D92BA6330669597DCFD4DCEBDCD4415361B30B73DF36B8EFCCE3DA8A880313AAA8B46
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpaceStart~ondemand.ComposeScheduling~bundle.WorkHistory~bundle.Ocf~bundle.AdvancedSearch~.ab591fda.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceStart~ondemand.ComposeScheduling~bundle.WorkHistory~bundle.Ocf~bundle.AdvancedSearch~","icons/IconChevronDown-js"],{34509:(e,t,a)=>{a.d(t,{Z:()=>_});var n=a(2784),i=a(25686),s=a(45184),l=a.n(s),r=a(67267),o=a(6149),c=a(82392),h=a(29496),d=a(40080),u=a(10036),y=a(94836),m=a(85204),b=a(73186);const p=l().jf83d092,v=l().af4abf20,D=l().b871f280;let g=1;class _ extends n.Component{constructor(e){super(e),this._showCalendarPicker=()=>{var e;null==(e=this._nativeCalendarRef)\|\|null==e.showPicker\|\|e.showPicker()},this._setNativeCalendarRef=e=>{this._nativeCalendarRef=e},this._handleSelectorChange=(e,t)=>{const{day:a,month:n,year:i}=this.props,s={day:a,month:n,year:i,[e]:parseInt(t,10)};this.props.onChange(s)},this._handleDayChange=e=>{this._handleSelectorChange("day",e)},this._handleMonthChange=e=>{this._handleSelectorChange("month",e)},this._handleYearChange=e=>{

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12530)
Category:	downloaded
Size (bytes):	12753
Entropy (8bit):	5.522522742408943
Encrypted:	false
SSDEEP:	384:W0Lr1NKRJbwyRTbvXT3Trj7TzTcgFQMTjL+F00zI7O6SHbz:W6UjbwyRTbvXTTrj7TzDFQqI00z9THbz
MD5:	98C6CE19ACCAD21D01DECDFDAAAB13DD
SHA1:	ED9A5D592223A9D6458CA5FC6769B8CF89E91262
SHA-256:	3565E6E61A17DFBDEBA4163775576D8458F74F33BE52E7257CEC7DA93376F46F
SHA-512:	3F86581087E9E5B9C2CD133B5695A0AC8064D35D2FE469C30634D3FBC203859C741743A42350DDE2F06E04E5848F8A81222EA94AEC5ACB103B0BD516AF320353
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.2e9524aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird"],{63143:(e,t,o)=>{o.d(t,{BH:()=>I,Qj:()=>R,Wc:()=>z,sI:()=>D});var i=o(2784),n=o(82392),s=o(73186),a=o(45184),r=o.n(a),c=o(63014),l=o(90649),p=o(7307),h=o(81921),d=o(33330),u=o(40271),m=o(80166),_=o(62295),w=o(21783);const b=r().a17a75da,g=r().e7342ed4,y=r().b6a43e78,S=r().b469e406,f=r().b8505290,A=({userFullName:e})=>e?i.createElement(r().I18NFormatMessage,{$i18n:"e1a49407"},i.createElement(n.ZP,null,e)):void 0,x=r().ae8b0564,v=({userFullName:e})=>e?i.createElement(r().I18NFormatMessage,{$i18n:"be54ed41"},i.createElement(n.ZP,null,e)):void 0,L=r().f2adab0e,T=({userFullName:e})=>e?i.createElement(r().I18NFormatMessage,{$i18n:"jb19eb17"},i.createElement(n.ZP,null,e)):void 0,P=({userFullName:e})=>e?i.createElement(r().I18NFormatMessage,{$i18n:"bbfee611"},i.createElement(n

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11494
Entropy (8bit):	4.5730700893887075
Encrypted:	false
SSDEEP:	192:mQHTjtWwxR4m5zPwOkmhWHzrQXABKid73KhPie80kDLLEd:mix/51QchPie80kDLLEd
MD5:	1FF71CA63503B6940FAAD910BD546C8B
SHA1:	EC6290A4A106A2C05F9DD457A771144C705A7A9B
SHA-256:	F58C73D2C04F59EEF4AF7FBD84362D4FA49188043405516AA35EE8C412D0DBC1
SHA-512:	139E57610FE5311F59D922751D36B24A3D965D334A216AF3645E3C6B9A520717E60A0B612E94E8761EDD811D8AC7AF21696C134B96099FBBAE3B633E60E107F0
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/widgets.js?_=1713936714251
Preview:	/*..DotNetNuke - http://www.dotnetnuke.com..Copyright (c) 2002-2007..by DotNetNuke Corporation.. ..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated ..documentation files (the "Software"), to deal in the Software without restriction, including without limitation ..the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and ..to permit persons to whom the Software is furnished to do so, subject to the following conditions:.. ..The above copyright notice and this permission notice shall be included in all copies or substantial portions ..of the Software... ..THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED ..TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ..THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN A

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033), with CRLF line terminators
Category:	downloaded
Size (bytes):	37051
Entropy (8bit):	5.176369382454599
Encrypted:	false
SSDEEP:	768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ
MD5:	04C84852E9937B142AC73C285B895B85
SHA1:	8FB8A9319055253D085EDFC3BB72D20F614EC709
SHA-256:	36460E494E4C628443AFDED40B2743B5EDE9A4A76FB4F7B9EF2345CC7E59FD64
SHA-512:	E27BE06BC898DCF893F06CC49CAFCBB6BA6E3A69106A89A500F6993E57600B3636392784811237A1A783967DBE05D57A0769C78F8074A0C3A59B16B655B1D350
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/bootstrap-3/js/bootstrap.min.js?cdv=158
Preview:	/!.. Bootstrap v3.3.7 (http://getbootstrap.com).. * Copyright 2011-2016 Twitter, Inc... * Licensed under the MIT license.. */..if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.e

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H9liY:fL
MD5:	930472F413D0F3901CD84113C57A696D
SHA1:	E314F7CE78B4DC893699AC5E368C895562C6C498
SHA-256:	0BBEC284DDD6B08E710F4778AD9C8E113B5833771AC971193D636A660F9FB4CE
SHA-512:	DC5FEF3CD51479D56627D0BB881B724354D1F793FAF4C9770684E1BD62501147CD8E51DEA82F75C23FDAE79CCC589AE576705FAB21243B27D4AFBF8BFD8EC3CB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkte5z2FQ3lzhIFDegw6to=?alt=proto
Preview:	CgkKBw3oMOraGgA=

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6469), with no line terminators
Category:	downloaded
Size (bytes):	6469
Entropy (8bit):	5.089667993513651
Encrypted:	false
SSDEEP:	96:eb+1/lA+t+E+DvwssNZwL5VeayLYvfrvTVgx5L32oczApGi+qGiuxocaAZMeC3A3:eRWZlay8vfrvTVEL3yApGi+qGiuoAuIb
MD5:	F52EDF63081E9F6DA79D565F009BA9EB
SHA1:	E276B4D922D3A265820ECD8723BAA0B884B86451
SHA-256:	4D7EA4BE0A3B0C0176C527658016B7CE2E715E3FD5DDAF64BE1E2F0BF2A4A110
SHA-512:	4824FAE6832D29A2C69E9F64D825705B2614F509860A3F748CD18B1C6B9B59622500A4558FA8B4444E04CD4A3EF81FAA2E51810AE965691A1D51BD1196FC9FC8
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/css/gg-fixed-width.min.css?cdv=158
Preview:	@charset "utf-8";.button-row{margin-right:15px}.gg-master-wrapper{box-shadow:0 0 5px 0 rgba(0,0,0,.3)}.container{padding-left:0;padding-right:0}.row{margin-left:0;margin-right:0}.navbar{padding-top:0;padding-bottom:0}.carousel-caption-boxed-layout{padding:0 80px}footer{padding:0;padding-top:20px;padding-bottom:20px}@media only screen and (max-width:550px){ul.gg-sidebar-media-grid li:nth-child(even){margin-right:18px}.gg-reg-table tr.gg-reg-hdr-row{display:none}.gg-reg-user-entry-row{border-top:1px solid #eaeaea;padding-top:10px;padding-bottom:10px}.RadGrid_Default .rgRow td,.RadGrid_Default .rgAltRow td,.RadGrid_Default .rgEditRow td,.RadGrid_Default .rgFooter td{border-style:none;border-width:0 0 0}.controls table,.controls .normalCheckBox{clear:both;display:block}.no-more-tables h5{border-bottom:0;margin-bottom:0;margin-top:0}.no-more-tables table,.no-more-tables thead,.no-more-tables tbody,.no-more-tables th,.no-more-tables td,.no-more-tables tr{display:block}.no-more-tables thead t

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21863)
Category:	downloaded
Size (bytes):	172132
Entropy (8bit):	5.334010162069132
Encrypted:	false
SSDEEP:	1536:WjUKzUwY6yFcMjcfM2lZbeAN5EPMLyb7zz+ldk9tlhK0B55FX:escMjcfM2Zbeauvzm2tbB55FX
MD5:	4FE6C87519200C762207103AB0F7416C
SHA1:	35828DE7767BF3F232F4B99F079EA1E82CFC8A2B
SHA-256:	E39AB06BED93AFC3505169641549BBA1E8DE6DD22FECB992BCA2A0BF99864C0D
SHA-512:	2DD7A467249056185032563F3864F43CD00C17DD0E765ADD8044531B5E1DD80A362337B3A781FD93E955A935447BCA7EE7F8C0F274D9AC541251D1DD58E5F5FF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i3Ek4/yP/l/en_US/ZAPhqDpoVnl.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ManageConstituentBadgeDialogQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6661692877214742"}),null);.__d("ManageConstituentBadgeDialogQuery$Parameters",["ManageConstituentBadgeDialogQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ManageConstituentBadgeDialogQuery_facebookRelayOperation"),metadata:{},name:"ManageConstituentBadgeDialogQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("createFeedCometMentionsDataEntryWithTagSuggestion_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:{mask:!1},name:"createFeedCometMentionsDataEntryWithTagSuggestion_data",selections:[{alias:null,args:null,concreteType:"User",kind:"LinkedField",name:"node",plural:!1,selections:[{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1439
Entropy (8bit):	4.885630784552691
Encrypted:	false
SSDEEP:	24:ws/XESs3HFNV6mG6EKPwyot6hCe3N6QiwyoFvLltrqq3iPDyby/ZdwgTaFggrY7D:wUOHFgkwyNCCiwygvrqZ/Z+gThV8yYKX
MD5:	6D298882DDE4BE157AD3F6653A3B19AD
SHA1:	2BBE230699934F6881FC7FCF01F3C8E84D5B6402
SHA-256:	037C4D8DB9C1D4A8F22D6612BB47F223BA8009D6FA77002D782EC0394340745E
SHA-512:	657B893D04A43F2315651B0CCB6996B120DE35C0C20EC5D2FD9F7E6071F99E43888EF446B0529C4D077CFF2AC2A2623592BB6E8CCEC92E756360641F0F84A710
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/Links/module.css?cdv=158
Preview:	./this is a class to style the design table/..../* Edit View /...LinksDesignTable..{..}...MessageSuccees..{.. color: Green;.. font-weight: bold;..}...MessageFailure..{.. color: Red;.. font-weight: bold;..}..../ Module View /.....link_module..{..}.....linklist..{.. display: block;.. list-style: none;.. margin: 0;.. padding: 0;.. z-index: inherit;..}.....linklist.Horizontal..{.. display:inline-block;.. width:auto;..}.......linkitem..{.. list-style: none;.. margin: 0;.. padding: 0;.. z-index: inherit;..}..#pp_position..{.. position: relative;..}..ul.linklist.Horizontal..{..}....li.linkitem.Horizontal..{.. display: inline-block;.. float: left;.. margin: 0 15px 0 0;..}.....item_desc..{.. margin: 0 0 0 20px;.. white-space: normal;..}.....NavSubLink {.. min-width: 120px;..}..../popup/.....popup..{.. position: absolute;.. display: none; / keeps the popup hidden if no JS available */.. z-index: 999;..}..#ppwrap..{..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11041)
Category:	downloaded
Size (bytes):	52066
Entropy (8bit):	5.627599355887059
Encrypted:	false
SSDEEP:	768:5yDaPQKIZhkIYGiZ1HYu1dH7BJhHuJEzsU230DUNFOIDds:DQKIZPiTJPbKzg
MD5:	3DC86F3192508FDD49468497AEFB0F3F
SHA1:	77E8ABCE1E491940F1B9A9CC239565B60DC0DF51
SHA-256:	C16EA901E56C5D567023FFC049FD05A03DDE0876B76007405B46E1CCCBCF51E9
SHA-512:	C3B6F72A675600A50DBA14454103A89F00BF39CB919B0C6795AA92BB1444ECA303F24E519D871EEC50C807C5D668B883F725A5429C4F712ED8343D8635A60098
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yR/r/OiBJQTDC7YF.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOUND",LEAST_UPPER_BOUND:"LEAST_UPPER_BOUND",NEAREST:"NEAREST"};var h=function(a,b){if(typeof a!=="number"\|\|typeof b!=="number")throw c("unrecoverableViolation")("The default comparator can only be used with sequences of numbers.","comet_infra");return a-b},i=e.GREATEST_LOWER_BOUND,j=e.GREATEST_STRICT_LOWER_BOUND,k=e.LEAST_STRICT_UPPER_BOUND,l=e.LEAST_UPPER_BOUND,m=e.NEAREST;function n(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d){c=a(f);return e(c,b)===0?c:void 0}else return void 0}function o(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d)return e(a(f),b)===0?f:-1;else return-1}function p(a,b,d,e,f,g){switch(g){case l:return q(a,b,d,e,f);case i:return r(a,b,d,e,f);case k:return s(a,b,d,e,f);case

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8315)
Category:	downloaded
Size (bytes):	8538
Entropy (8bit):	5.2612281863213815
Encrypted:	false
SSDEEP:	192:wlVbHW8ITk50+WmmbHfXxJjgnlV+ytKbTU:wlxW8ITk50tmmrjjjytKbTU
MD5:	1D9D9AC16BC4483BBAE7D549D3367BEF
SHA1:	18C88CC9B7E892FA913BC631643B5A231A32B96B
SHA-256:	1FEC7498FC22FD1A4ECDCB8FF27FCBAA30044191AEBD0C96B5BE5EB9DC510C0F
SHA-512:	F3146FB7DF49BBB8B68D1EE40099816BFDD241E3D68EAAE29A6B14D7C4BFC91EDEAC33DB6023F8E05291D6D61C4C24DD741E1480C8F27E1273479E8F52B9359F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.e0286a6a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande"],{31099:(e,t,n)=>{n.d(t,{ZP:()=>b});n(6886),n(71372);var r=n(2784),o=n(25686),a=n(73186),i=n(45184),c=n.n(i),s=n(78525),l=n(61339),u=n(82392),d=n(29496),h=n(50329);const m=c().jcf3e7a2;function p({animation:e,autoplay:t}){const[n,a]=r.useState(t),[i,c]=r.useState(0);return r.useEffect((()=>{e.addEventListener("enterFrame",(e=>{e&&c(Math.round(e.currentTime))}))}),[e]),r.createElement(o.Z,{style:f.container},r.createElement(d.ZP,{accessibilityLabel:n?"Pause":"Play",icon:n?r.createElement(s.default,null):r.createElement(l.default,null),onClick:function(){n?(e.pause(),a(!1)):(e.play(),a(!0))},type:"primaryText"}),r.createElement(u.ZP,{style:f.frames},`${i}/${e.totalFrames}`),r.createElement(o.Z,{style:f.slider},r.createElement(h.Z,{accessibilityLabel:m,max:e.totalFrames,mi

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	5304
Entropy (8bit):	7.808485882331489
Encrypted:	false
SSDEEP:	96:hU4lebGM/WAvoPmo+XfeXNUeayHMB7GDhXQEQNSqQ0IymHd6smt/QxohvIv:O4qGM/Wpeo+XfeXNpMVGDsNTmSHtvhva
MD5:	9C330226C13D8CED1E3318D6AA593E27
SHA1:	3EF421131D66012437BCF6B015244FC9F279DEEA
SHA-256:	BE904D1FC81057A5D590ED4B39BFC57A0E3B89BCBDF5DE5F96DA14830C3C533C
SHA-512:	1309460649A3DA8953C43227C0DB39CC1A5CCBFDE0BDC27E0F5E246A2EB472546D0370C20F4C6103037DD08CA4988E1C61B24D2D0DDE5A13878F92009EFAC01E
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/352230347_642498977400229_7245798881627614562_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=qBZxTxVqogYAb5_rX9a&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlIkpj_DYYAm2exgqXfO2IurQjjy8C0QMKtToF__aj1Q&oe=662E7B2D
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000270300007a050000be060000fc070000dc0a0000ad0d0000300e00004f0f000069100000b8140000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................`...l.......Z../...f....y.vAN.v..._y.-..nm..nr...HAN..=.. .2W..M^$......6...pE.8....g........P%....=..^.X....vz.vc..1..\V.U..9.....0.....;..y.jx.]k.D..:...X.J..........a......w..r.{.z.1.....+.........yOL..f.P..j..=..2.5..~.[c...........%../V.]F...CK.x..g...x..v...L.P:.4..\|...I.<{E...!..3...9..a^)...D....3%=.\..\\|J.P..V..y....B..`....C..Y(.~4...rr.R=>c..[...#.....&..........................0.. 2..!"@.............N......n..m..).o...5......&..6..Fy.,-#bBv.2../..X......M:.q.f.An..a_.Y.`l-.'t...F.-m..PQ.2...,[g.nV....:.k..ZT.F..d.N7MX.....n.b.\..p\|n..x..N#.*@....lX.I.Y.........4..1.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2813)
Category:	downloaded
Size (bytes):	2975
Entropy (8bit):	5.519630034011144
Encrypted:	false
SSDEEP:	48:iIK5l8sQcXXZyYImfEWuvQ0J9yz09S058+FX5HZXFDPREzHOz1xBHnXBFZWms59m:Or+8X0YIqEvQ0J9yw9SM8+FXVrDJEOzB
MD5:	688390287C1ED2C07F9D80C299185D63
SHA1:	B99BC1DCF8F1DAFBEE7ED5750F074B083AC2B45F
SHA-256:	032B2D9D8821DAB5B3C0203B9E5F372A5FA3D654FCABB532CD9470150AD58DE6
SHA-512:	CC618670AAA529B0CD3C8230278358C843907C20B309926ACAAAE3830B3072C8B2207206ABE9C9EF761E330F7F9EC05FDDFCF5458D5B4659EC4E759AE897F068
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Settings~bundle.Display~bundle.Ocf.ea5bad3a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Settings~bundle.Display~bundle.Ocf","loader.AudioOnlyVideoPlayer"],{51507:(e,t,i)=>{i.d(t,{$6:()=>o,eY:()=>a,zt:()=>s});var n=i(2784);const r=n.createContext(!1);function s(e){return n.createElement(r.Provider,e)}const o=r.Consumer;function a(){return n.useContext(r)}},44573:(e,t,i)=>{i.d(t,{Z:()=>b});var n=i(2784),r=i(25686),s=i(73186),o=i(45184),a=i.n(o),l=i(1206),d=i(63242),c=i(92160),h=i(67935);const w=(0,c.Z)().propsFromState((()=>({language:h.VT}))),u=a().gde8fdd7({mention:"X"}),m={text:u,created_at:new Date(Date.now()-6e5).toString(),id:20,id_str:"20",display_text_range:[0,u.length-1],entities:{user_mentions:[{id_str:"783214",name:"X",screen_name:"X",text:"X",indices:[u.indexOf("@"),u.indexOf("@")+1+1]}]},user:{id:783214,id_str:"783214",name:"X",screen_name:"X",profile_image_url_https:"https://pbs.twimg.com/profile_images/1683899100922511378/5lY42eHs_normal.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1323)
Category:	downloaded
Size (bytes):	1546
Entropy (8bit):	5.242978722150439
Encrypted:	false
SSDEEP:	48:iIKmeersHVNUAwMOicL7oufov3jSnWmsmY:O1V0AwMLe7ouOzSna5
MD5:	F77F0A20ED864D9CD1F6C8AA31868E6D
SHA1:	03798AA62C198CDF320486D9A1E343CE8B90DFF3
SHA-256:	C7D6C9C0EE4A2C0086BB19916C24F76545A850C491B9BCB6908EF5BA3D1447B1
SHA-512:	39C46351B329F5742A7C0D5B6E89A536562EB6CED7DF967738F078A6C93AE7014851AD6E6362DB1CB94958013E6453B21F6B96DE7FD1EA3751AFA2CA150CF294
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove.1507b3ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove"],{75305:(e,i,s)=>{s.d(i,{Z:()=>t});const t=Object.freeze({FakeAccount:"fake_account",OffensiveProfileContent:"offensive_profile_content",SensitiveMedia:"sensitive_media",Timeout:"timeout"})},8274:(e,i,s)=>{s.d(i,{ZP:()=>o,n5:()=>r});var t=s(75305);const o=({displaySensitiveMedia:e,isNotFound:i,isSuspended:s,isWithheld:t,user:o,userProfileInterstitialType:r,viewerUserId:l})=>{const d=!!l&&l===o.id_str,u=o.blocked_by,a=o.blocking,f=n({displaySensitiveMedia:e,isOwnProfile:d,user:o,userProfileInterstitialType:r}),c=(d\|\|!t)&&!s;return{avatar:d\|\|!f&&!i&&!s&&!t,badges:d\|\|!t,description:d\|\|!a&&!u&&!f&&!s&&!t,followButton:!(d\|\|u\|\|f\|\|i\|\|s\|\|t),followersYouKnow:!d&&!u&&!a&&!f&&!i&&!s&&!t&&(o.following\|\|!o.protected),followIndicator:!t,fullName:c,label:c,stats:d\|\|!u&&!f&&!s&&!t,subs

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312)
Category:	downloaded
Size (bytes):	1535
Entropy (8bit):	5.299013451216586
Encrypted:	false
SSDEEP:	24:iWGKfWGE5FSF55RORz3EFGIPgYtxjO24Si6+yIyopJh6ZQSCzjO11FaJKbOd2WRZ:iIyo56Rzc+2z+zTJQbCzq11FFCd2C/PH
MD5:	096A8AF4BFE393C14D0DB8DF30FBA6E0
SHA1:	5714948287CFA52605779E550CC8768F979CA024
SHA-256:	1A3BE46DC23B7DA21680570C10BEAFB0BA92CB4A9162352D02F59BD18FC321C6
SHA-512:	D526CF3137274A976AA2E69B03026DA251266265B4478F8B08F10EE07B9088B93393DB3B062BC9696490C57B8E8311C8590B30DD6BB3F8B45FB1B51FA119F4C4
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.9b2e53aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund"],{87398:(e,t,s)=>{s.d(t,{Z:()=>u});var l=s(2784),i=s(66999),n=s(25686),r=s(73186),c=s(45184);const o=s.n(c)().e5b0063d;let a=0;class d extends l.Component{constructor(){super(),this._listDomId=`accessible-list-${a}`,a+=1}render(){const{children:e,title:t}=this.props,s=o({title:t});return l.createElement(n.Z,{accessibilityLabelledBy:this._listDomId,accessibilityRole:"region"},l.createElement(i.Z,{accessibilityLevel:1,accessibilityRole:"heading",nativeID:this._listDomId,style:r.default.visuallyHidden},t),l.createElement(n.Z,{accessibilityLabel:s},e))}}const u=d},60131:(e,t,s)=>{s.d(t,{Z:()=>o});var l=s(2784),i=s(25686),n=s(73186);class r extends l.Component{shouldComponentUpdate(){return!1}render(){return l.createElement(i.Z,{style:c.root})}}const c=n.default.create((e=>(

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8577)
Category:	downloaded
Size (bytes):	8800
Entropy (8bit):	5.112874995252629
Encrypted:	false
SSDEEP:	192:6m0lQGqGybNs9pCHT8XCuSfXo94fnCsQzRdWl6QzRd/kIScYsn9pFfNI9T9ua:6m0yGq5i9pCHT8XCuS/o94fnCsQzRdWm
MD5:	EE3C88F5A1224B683CF9766B94E57176
SHA1:	CF72A1B1BE427A223D2C067402445CF5F0722F8A
SHA-256:	842C955B177896A8ED702071BC6BBD92589FD9A7A7EF0E658BF148DEE51131D0
SHA-512:	759530C80257D89A14489670122082D5BEC141CB159C7B2FFA374E881F8DC6795C9594ECA3DB49554EA6EA7D00041695914D009978229D7151654C23B9192E95
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.0767fe7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi"],{62694:(e,l,n)=>{n.d(l,{Z:()=>d});n(36728);var a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CommunityFacePile_community",selections:[{alias:null,args:null,concreteType:"UserResults",kind:"LinkedField",name:"members_facepile_results",plural:!0,selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"result",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,concreteType:"ApiUser",kind:"LinkedField",name:"legacy",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"profile_image_url_https",storageKey:null}],storageKey:null}],type:"User",abstractKey:null}],storageKey:null}],storageKey:null}],type:"Community",abstractK

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	6245
Entropy (8bit):	7.834962933432371
Encrypted:	false
SSDEEP:	96:hl9JJpYVv/kFXSQnxaVbBLBMk3PR/RD8Q5WJN2Xn+m5fEc76N6Mqs491eJeg1QS9:zY9IxyVBP/R5af2X+m5fvXssgfM0zIB2
MD5:	2ADBB590A2CD9529624762B1ED827FC6
SHA1:	A8A2267BAF00BE78EC19B926CEB7D927B41ED41C
SHA-256:	73ADF2DE8C7987B938A8C3994ECDF64A808DBE942997FEA1F059BD5FF1FB05C2
SHA-512:	6D4926C5869607D4C6668DA4B45F4CE64858833BEC3FDE13D52F7E71FB382BD7918983631AF6B199D46BA1905C3EA5122365368EABE85D25D3180DF1ED5B205C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000026030000930500004b06000005070000840a0000100f0000910f0000591000002011000065180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................D..TqZU.XQ.;....YE..D$...iC....w.p../O...Iy.>...tu.<....5...e...J2I ...=..K.u.....mHz).v.R.u)V.M$.$.$.p....g.W..n.1...08..V...'.I.k...J.X.3../...6.AQ..Q.H$...a O....v~.@......&.....f...U.J./0.A88....j.s....&...&.k..u.6u..n..9!4.fYY.]..(..3..W...xI....E..Y.f...a&mt..jO4....&...&9B....H.....XtN.3e...Vm...`;.V.BD.....d.)A4.....0.]...[....5W.o......l8.J...-...8.3$SVh....'........................... .!0@"1.#4............I>.fb..H.nP5.T.^.d.A....~......0....3Q1=.{..l...3.I......u~.+..v.R.m@.}.A.\..J i.D.f.{e.O\|.....#.=<..b.4.p..2Zl.lT.7./.kM....y...O./..Hqn.n2....R/.F.(......._X?.......nw}8H.A.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	8724
Entropy (8bit):	6.79038236277243
Encrypted:	false
SSDEEP:	192:/itgWO5VcGhhnFZHjbCuTu3rNvxfzP3VyuWyshlnrlqRi:/ANeBFVKZxfMu0lMi
MD5:	2993755C7C7A44E573104124DC060F3C
SHA1:	A10CFFAA067B8FB82C5B084F08721950693474A0
SHA-256:	866248FB3F84481E21A19D0E2D4D5DF20EAADA6C5E5934B3F4FC39879A15A4BF
SHA-512:	746F07C0199702844AD7DA949D12BD8170E98A665DE7F89FC22EABCB3FD3F0DBEFDE65AB9E035F04DC861BEA186397B23548C8DB862E876E903819304CFCBAAA
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AfAc1tv-PAaYO--X3sZzlpw-dYVdCaNRKAvJDHaRMHBnvw&oe=66500E71&_nc_sid=7da55a
Preview:	...KEYF....$................. ...................4C..4C..@@..pB..............................4C..4Cm.....................................................................................................................................................Adobe.d........................................................................................................a..!Q..1A"q.2R....#3B..CSbr............................!1.aAQ............?....$}(.....5{....pcGW.A.?...Q....h..%...8..M!...j......#.'.{S... \|....a.w..O.(....Pn..=..o....[wg.....^6p..Yi.....73OC.V.Kx..4..c.3..E[j..............$....`....&.u)b.o..L9P"....yn..eE...N..........m...Kd...Zvl.;"....S8.oD.....S...Q...-.R#...B..-.&e.lS..v=G.M5....&.....i.G.0.mD...X%.X%....../.V.V..%.b....M.....7.YO+9."......+..Y....L.Tj.K.ln..R...,C.......".#ul...e..P...Z...N.=..X.n.Q2....M.......X..$.T.......i.5!..z..+Q.p.......1BYF(K).........K.1..0..j..n....o_.h..MOE...........u..X,...M&.p.JkK.....cU..........D..>..h.5.h.]:..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	2640
Entropy (8bit):	5.283522945192937
Encrypted:	false
SSDEEP:	48:iIK8dUzLfoxcUAXIEDQTGTDmcHi3BGAf0Wms4:O8dcLfarFoQTGHmcHaff0a4
MD5:	AB8F97E4EE4795CB2F0D600400E70BF2
SHA1:	9DC992C2628C46EC8455E151C37FCFDC306E2C7C
SHA-256:	8FAE6BC637AA1498D0DC06CCD8441622F5A27A25B1F9AE51CFBF740EC9B7FAEA
SHA-512:	93C09CFE173DD52EA62A9CD383A4038DB3A4AD4FBD60EB207D1F1C64D0C100728E70E3E837302BC7F164C73D053826E8C05B1D6F208CD41870906D1364319815
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.35b05caa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ExtendedUserProfile~bundle.UserProfile"],{65075:(e,t,s)=>{s.d(t,{Z:()=>g});var r=s(7896),n=s(2784),a=s(8352),c=s(73186),m=s(92160),l=s(16657);const o=(e,t)=>!!t.screenName&&l.ZP.selectIsUserSuspended(e,t.screenName),d=(e,t)=>{const s=t.screenName?l.ZP.selectByScreenName(e,t.screenName):void 0;return null==s?void 0:s.blocking},i=(0,m.Z)().propsFromState((()=>({isBlocking:d,isSuspended:o}))),u=e=>{const{isBlocking:t,isSuspended:s,screenName:c,...m}=e;return n.createElement(n.Fragment,null,null,n.createElement(a.Z,(0,r.Z)({},m,{style:[p.root,p.verticalPadding]})))},p=c.default.create((e=>({root:{backgroundColor:c.default.theme.colors.cellBackground,paddingHorizontal:c.default.theme.spaces.space20},verticalPadding:{paddingVertical:c.default.theme.spaces.space40}}))),g=i(n.memo(u))},84257:(e,t,s)=>{s.d(t,{Y:()=>o,Z:()=>d});var r=s(2784),n=s(45184),a=s.n(n),c=s(65075);co

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49298), with no line terminators
Category:	downloaded
Size (bytes):	209232
Entropy (8bit):	5.546086404810973
Encrypted:	false
SSDEEP:	1536:cShBB9AX3tRxrHoXXt/w2oolGna2d2bhr7+gkKHT5ysloT0wH:cShBB9AX3tRxLoXX1ZGa2d2xBz3oT3H
MD5:	0623767B925ABB28DFE87AA02D7A46CC
SHA1:	C1873D5CBA5A3A1EF5848D4A6436ED1399B04B76
SHA-256:	28CD85FA7D3639B43D57FBF55794F65A5B760E75A4E49996479C7BD88CFD31AF
SHA-512:	4063954762875D677EB7BE8A784010AE6B52FB3956A53A56333E71378FBFD6BD284210A52B3D43E31493743C1E4B4B5F2A4A3C80BDF1536F1E85446F80AB3502
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker.96394e7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker"],{71969:(f,k,e)=>{e.r(k),e.d(k,{default:()=>c});var a=e(45184),d=e.n(a);const c={compressed:!0,spriteSheetColumns:50,spriteSheetRows:72,categories:[{id:"people",name:d().i506b710,emojis:".. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..... .. .. .. .. .. .. .. .. .. .. .. .. .. .. ...... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (947), with CRLF line terminators
Category:	downloaded
Size (bytes):	952
Entropy (8bit):	5.023049707421392
Encrypted:	false
SSDEEP:	12:tImnFwGPBPhE6dQ6sADImBe/YWFqHQ/lY69OHGqCkumUC7r5txCdVQn4BL2/Wn:Clo/EAQ6l0mgz/lYPGvkN5aZn
MD5:	CA2A17EF9A5808D8311C5FBA412849B7
SHA1:	2621C5B5D3520EF68AD10E13F5597B5C0EC18C4B
SHA-256:	5CC47E4721526DBA67CC644427C16A8E4B6A5A2E742C87DD116C9FCEA0953D98
SHA-512:	03ADF23BD0E7309FAB236572CE977E1841D9BD321EAE0F073C2DB1EE9DAA74D13E8D911F3995F267614C0EA5E56AD90DCE058435B90A773ED12E7F9EEB93E660
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/js/dnn.servicesframework.js?cdv=158
Preview:	...(function ($) { $.dnnSF = function (moduleId) { var base = this; base.getServiceRoot = function (moduleName) { var serviceRoot = dnn.getVar("sf_siteRoot", "/"); serviceRoot += "DesktopModules/" + moduleName + "/API/"; return serviceRoot; }; base.getTabId = function () { return dnn.getVar("sf_tabId", -1); }; base.getModuleId = function () { return moduleId; }; base.setModuleHeaders = function (xhr) { var tabId = base.getTabId(); if (tabId > -1) { xhr.setRequestHeader("ModuleId", base.getModuleId()); xhr.setRequestHeader("TabId", tabId); } var afValue = base.getAntiForgeryValue(); if (afValue) { xhr.setRequestHeader("RequestVerificationToken", afValue); } }; base.getAntiForgeryKey = function () { return "__RequestVerificationToken"; }; base.getAntiForgeryValue = function () { return $('[name="__RequestVerificationToken"]').val(); }; return base; }; $.ServicesFramework = function (moduleId) { return new $.dnnSF(moduleId); }; })(jQuery);

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2346)
Category:	downloaded
Size (bytes):	2569
Entropy (8bit):	5.2354449376298
Encrypted:	false
SSDEEP:	48:iI+Nb2EJXUt/Gcz5vDGnYgl7VjB/F74fOAoWmvCufiJyv1pkaWmkNb27i:mb2EJXUlGctGnYgl7BVlPcITBeaCb2G
MD5:	66FCBB13575C15885D31117C870D568E
SHA1:	A383C4AA958AAD2CFA06A164E90B06F530C5140B
SHA-256:	698E7DAEABB6A74F2E88603C38090012A61FB96F733A26BBEC992E992CEA2452
SHA-512:	D474739B06557213C85B03FFE0CD66C592325A97C05A0C3983FF897F155836E4A1E2F0FEE780F34487626412833D7A49EF9AB5E769C274D85F4A593D8E993D27
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio.92f8cdba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio"],{74673:(n,t,e)=>{e.d(t,{ZP:()=>g});e(6886);var o=e(2784),i=e(25686),r=e(51461),a=e(63142),u=e(82392),l=e(73186);const d="up",s="down",c=(n,t,e)=>{e((e=>{const o=(0,r.Z)(n)?n>(e.count\|\|0)?d:s:d;return{...e,count:n,oldText:e.text,pendingCount:null,pendingText:null,text:t,transitionDirection:o}}))},p={};[d,s].forEach((n=>{const t="0.3s";p[n]={active:{transitionProperty:"transform",transitionDuration:t,transform:"translate3d(0, 0, 0)"},pre:{transform:`translate3d(0, ${n===d?"100%":"-100%"}, 0)`},post:{transform:`translate3d(0, ${n===d?"-100%":"100%"}, 0)`,transitionProperty:"transform",transitionDuration:t}}}));const x={position:"absolute"},m=l.default.create({root:{overflow:"hidden"}}),g=n=>{const{children:t,containerStyle:e,count:l,...s}=n,[g,f]=o.useState({animating:!1,

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.423162629919622
Encrypted:	false
SSDEEP:	3:5RFKqvKPFWk1RHQpPKom:PslRHQp7m
MD5:	5C090F77A9C93B9066D1D899AB8463AC
SHA1:	9BEE03F2F27008F7614399B1CB2D8F2C76B39CD9
SHA-256:	EC4C3176C4C2E897CEB3D82B587B4EB9D49E7CB94CF7F2E4B06E860CC2B94F0D
SHA-512:	51C304D60C39EC6BB350BF24C323CB134365F0B83FFFCEFC1D14959BC3C6248F14706087FD096F5E3B2B8EABD9F2DAB1A3EF00822F7AE8CC984C58A9DD173A6E
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Portals/_default/Skins/Customizable/skin.css?cdv=158
Preview:	@charset "utf-8";../* look to CSS directory for styles */........

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	467
Entropy (8bit):	5.146838272230996
Encrypted:	false
SSDEEP:	6:6v/lhPEIQzDvEIqDYJ15LrzhiCaoa4xNSOmD1we5fSrOxKEbLlJdp:6v/7MnPEIVJJiZNqtmZwQoYrbLlJz
MD5:	DF7EA137C640CBFC8988EBFCBEA3E74C
SHA1:	4D515FAE712AAADC544D64D1C1D22D1BB0A01AFF
SHA-256:	F0C8902560810110039DDE6066D18FF2D3D26A645DF7A4E76D7A6A45617B9F98
SHA-512:	C7BD585317015EEC41EBB2BAF6C6815219EB84BE2212F57EF3E469A4746F50F60519DC03EC9EE510556970A7BF4F4E76667C5D2080018AE00F5CDBBDE86C50B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE...........................................................................................................................................................................45.D...8tRNS..............dH.f...U.;!q%...u.&..n{.P......Oy...^4.N...{....IDAT..u....0...K.`W....../3...Fw..7BQG...l}..!oh...9...o...=...yY..P.aCx.`j.rE#..?`.Y4..9..%..bGHUMjf.okj.>\j...5g.LbRq.f.L.".c.0.. .}n..-..27..H.k\|...$%aXm......IEND.B`.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20667)
Category:	downloaded
Size (bytes):	20800
Entropy (8bit):	5.395482439128922
Encrypted:	false
SSDEEP:	384:38q3ovMDyc1mOUEwE5UouPbKJeH5xfhY7pKS9BuUMU2UVf7zCj1+o9SLrRJiGkNK:3QvMDyc1UEwE5UouP2JeH5/Y7pKS9BuO
MD5:	E519A575F2D467FBFD400E0FC91D862E
SHA1:	85A38A765F6EBFB756F7418E1DECC306875999F4
SHA-256:	C3A6FB56730C32146D2A20ABAFBF4CE1BBD21D72677AD4550AC46510984E89A2
SHA-512:	AF4F71965B83D729F5FB7E984D658B124971224F7B2CA9EC71312039AD0B399CD8DBB360EA3592C8A918C4CE0D961D770A3BA7926A14D12C5197EA4A8CB1E9C2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.tweetHandler.f138785a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.tweetHandler","icons/IconLayers-js"],{12387:(e,t,n)=>{n.d(t,{F:()=>o});const o=e=>i(Math.round(e/1e3)),i=e=>{const{hours:t,minutes:n,seconds:o}=a(e),i=o<10?`0${o}`:o,r=n<10&&t?`0${n}`:n;return t?`${t}:${r}:${i}`:`${r}:${i}`},a=e=>({hours:Math.floor(e/3600),minutes:Math.floor(e%3600/60),seconds:Math.floor(e%60)})},49482:(e,t,n)=>{n.r(t),n.d(t,{default:()=>S});var o=n(16742),i=n(39928),a=n(2784),r=n(7896),s=(n(36728),n(13867)),l=n(60925),c=n(94407),d=n(25686),p=n(11839),u=n(87399),m=n(73186),h=n(65526);const w={threshold:1},v=({analytics:e,onPress:t,style:n,tweet:o,tweetId:i})=>{var r;const s=a.useRef();if((0,h.q)((()=>{if("IntersectionObserver"in window){const t=new IntersectionObserver((n=>{n[0].isIntersecting&&(e.scribeAction("impression"),t.disconnect())}),w),n=s.current;null!=n&&t.observe(n);return()=>{t.disconnect()}}})),!o)return null;const l=null==(r=o.extended_enti

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.400437044194083
Encrypted:	false
SSDEEP:	3:3FHRkXE+TNWxAJza3WxEhxPjJW9y:neE+TNWxA9AWxEb9W0
MD5:	6058A36552E295E064F3835A7D600938
SHA1:	A468FE0E913018CBE639C34AB9594050B90E7E49
SHA-256:	6A625C2D0E272D4FC421AF21D12A00905DB902BF48B714BED4A7B6A4E9F4D55F
SHA-512:	2D11FA886D8852EAB731DA7EB451731FB147A2B1A46FE47B9A5D6D2F5BBEBB1D8BBA6B84D96CF74BE3B109EAE9079BB9D1A3281A2426C6CE441E2F9287084594
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/AESOPSponsor/module.css?cdv=158
Preview:	./* bootstrap definitions needed in non-bootstrap skins/..../ GG DNN Forms */....

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 166x2000, components 3
Category:	downloaded
Size (bytes):	131072
Entropy (8bit):	7.366216481227923
Encrypted:	false
SSDEEP:	3072:6So9V22+bWYl9NJcgYBFnav4b7Zp9mnmTGtiMmG:pofLAVqZBFnagzgsGI
MD5:	F9D84629CDB074945B7A38E53C095F5B
SHA1:	A0193A69F85A650C06E1B841302505A0B30C1C39
SHA-256:	398AB9798771D63C5332358414463392BE33038490CF321F6346C9D618488653
SHA-512:	53AC4B03AFBCD86377B41DFC3DA7176E5F9B589AF65ABCE20A2C30CC57618B65961BB854F460DBEC037AF877EEC8539D5D53AC08AD74236B98752607ABB82E83
Malicious:	false
Reputation:	low
URL:	https://greatergivingcontent.com/Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s
Preview:	......JFIF.............C....................................................................C............................................................................"..........................................x............................!..1."AQ..2a.#Bq.....3R...$9VWXbr......%7suvw..........48CDS.'(56FGTc......&):ef...Edgx.....................................N.........................!1.AQ."aq..2....B...#RSb.....3CTr.....$...456..%...............?...)VV.\5.-.....@1.y.......y.-..S.O~y..V......$..j.Mz....>%^......H.{.`..b.\...E..............).E..%?.o.:TY...]=.0L..1W6.M.r%.V...M...%X.O>V.OWXq..q.....S.mG..8y...X.X>.2......~....>..c.x?....k...;...5...".u.J....u.R.c%/:.Yx..=I.(.Jx#..].m.Wt.d.7P.....\...z....d8.d_..}.'.....Jp..6....Yt.6.J...W.\%./........,h....^...'.(.j?6k....o...Z.m.b.J.P.q.#...5._gi...'6.6..e....'.y.o!Z....#......:.......d).'..E..>.......ey.e.p.......p.OQ2.>..q...$..r........+...0pP*..m.x[...[&...._...{<....i.j...np,.4...a.>..O.Q.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	22917
Entropy (8bit):	5.183499035377466
Encrypted:	false
SSDEEP:	192:PUyiieZoCJrD0oE4/qepsh4+NAdjirustM561hr0P1ITTmg5V9BUTLIt+GgBKTlM:sZzJZS4+NGjKwube
MD5:	B3E193E8D97DB009BF0ED4B3DC430E72
SHA1:	BC5B1EFE831AFEFE374DE0178242FBB95B268E2E
SHA-256:	6D75BE0A3353287C16EF98C95CF9F027D4DB8DDAD88E7FAE38C6AE3095D8FE07
SHA-512:	C192F44EE1776A6DE11FBB2DF44117F43509B558C32E9A1BC857127A8D21AE6ECB1A37B0C2BD774C28937767E6588DEA01A3471CE91AB8B7F2E0347AF23F5C1B
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Portals/_default/Skins/_default/WebControlSkin/Default/DatePicker.Default.css?cdv=158
Preview:	./* START Telerik.Web.UI.Skins.Input.css /...RadInput, .RadInputMgr {.. vertical-align: middle;..}...RadInput table {.. border: 0;.. vertical-align: bottom;..}...RadInput table.riTable td {.. border: 0;.. padding: 0;.. vertical-align: middle;.. overflow: visible;..}...RadInput table td.riCell {.. padding-right: 4px;..}...RadInput textarea {.. vertical-align: bottom;.. overflow: auto;.. resize: none;..}..html body .RadInput .riTextBox, html body .RadInputMgr {.. border-width: 1px;.. border-style: solid;.. padding: 2px 1px 3px;.. vertical-align: middle;..}..textarea.RadInputMgr {.. overflow: auto;..}...RadInput a {.. display: block;.. overflow: hidden;.. position: relative;.. outline: none;.. z-index: 2;.. text-indent: -2222px;.. text-align: center;.. text-decoration: none;..}.. html .RadInput a {.. position: static;..}..* + html .RadInput a {.. position: static;..}...RadInput .riSpin a {.. margin: 0 1px

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	43036
Entropy (8bit):	5.692113097327789
Encrypted:	false
SSDEEP:	768:tQJ8XUYhYxw/U3/9ovTDPdt415COEWq/3eP0jIpQ:6JbA8w0Sv3ny5RFXQ
MD5:	DF416F45FCFEE5C0944313B56924E267
SHA1:	288CE83AB46CCB429A26F79DAD4BBA9131023E56
SHA-256:	27B101995CD472351BCA908614BF320FE018CD6FA171A979CE37A810E1732D85
SHA-512:	8AB2CBD408BDC38767459757B0CF8BAAFEA7977466E3C0BF51987A40A36D5BAF76C2D4DE79E4A64B0DF92E63482A7A031EE314CF70239397CC784E8986A55A87
Malicious:	false
Reputation:	low
Preview:	...KEYF..(... .............$.......$.......,...t.....4C..4C...@..pB..............................(... .............$.......$.......(.........4C..4C...@..pB..........................................yC..!C.....PNG........IHDR.............2L.8...BPLTE....i..f..i..i..i..h..i..h..i..i..h..h..i..i..i..i..h..i..i..i..i.'.)"....tRNS..........H%/m[~>7.vRd........IDATx...;.. ..Q...X..p..z....j.%.w..............+,At\|..o...q..)].................V.C.....>..[k9+.Rr1./\|.z.}S...Q^....~....U..[.....>...1.\|...i.....1....._..l.M......c..,......,A.i..o.2yH..Uk..^.O.f...../...<.~(.n.y.}s.W...7.....n\|.\.+e.......w....\|.vR...I.U{....3.v}C..u!.B/..4....h\|......'..,.EQ<h...+w.W....q.^@;....K.n..B.G...'...L.......w.O.w.H..k..Rw..v..c..s...BGYN.g.H....^.OFw.n..D.>..k...Aw.+].n.....}.2.W.g.n3..M..,;...;.=e.3..t.*..t..=Y...G.@.gI.x..A.ml.;V...#^..n....=...t....v[..{v../.,...m.h..uw.q..+...I...y..w].m#..~.Tz... .wf..;.....J8. w.~Q......]J......n...w..:..].g.._C.N.1....tGr.wF.....

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5811)
Category:	downloaded
Size (bytes):	6029
Entropy (8bit):	5.269797248158883
Encrypted:	false
SSDEEP:	96:mlRzCiFaxnT5dvHfe4hrkxQPYL6gu2h1TyOJnEzbR30U8UQdSIp3nClE:6hFaxndtHExQPYL6gLh1GL2nLLZF
MD5:	30E41776D930B321EC809DD705ED6A75
SHA1:	BD3EE5CC3B75557D4B31E23E257177109A1959AA
SHA-256:	B7A20780E0036693EDD39BFA3731DC729EC9DF89A6A6EEB8CB52A38E9E923615
SHA-512:	09958663318A329FA732ED66AC1C186086D633679F232ED138DA950DC3036E8560FEC1955522CB44C7951AC84B962A2B3DF66FEC0A60803AE410CB67EE0CB93B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.a2076fca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer"],{46303:(e,t,s)=>{s.d(t,{Z:()=>T});var l=s(7896),i=(s(6886),s(2784)),n=s(28316),r=s(96001),o=s(664),h=s(25686),a=s(45184),c=s.n(a),u=s(64698),d=s(6149),_=s(32071),p=s(8443),f=s(73186),m=s(86765);const P=c().gdd51574;class v extends i.Component{constructor(...e){super(...e),this._unmounted=!1,this._inPTR=!1,this._pullHeight=0,this.state={pull:0,pullDistance:0},this._onScroll=()=>window.requestAnimationFrame((()=>this._handleScroll())),this._getListViewRef=e=>{this._listView=e},this._getPullViewRef=e=>{this._pullView=e},this._enablePTRIfNeeded=()=>{if(!this._unmounted){this._getScrollTop()<=0&&this._enablePTR()}},this._handleTouchStart=e=>{this._pullInfo.startY=e.touches[0].clientY},this._handleTouchMove=e=>{if("number"!=typeof this._pullInfo.startY\|\|e.defaultPrevented)return;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	549
Entropy (8bit):	7.471916944420736
Encrypted:	false
SSDEEP:	12:6v/7i/i1SlUUPqHhJYMablwuOa6vz5xtnSDnkXMYvJmJSt/6znV:AwbSBa8zXtnBZAJ9
MD5:	9D99A2372BBD5B28EF4B2EAECAC8C805
SHA1:	6503A35C95CDF2D08ED83E17AE81C8B0E58F49C2
SHA-256:	CC4939AF5D16855F2BEA8322DBF33461EBC6BFD092FA3E2291D87D3D83EBD8ED
SHA-512:	7EFBA58D391137EA50C0ED95025316E404CE8FED549C386F2D3316D91797CD39E5447DB9B0FFDB0EBADBAF1F38766743603C140B8DFB956ECCC144AA78CFF766
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W1..0..w.%t.<.:J.@I.%.......t..R.......L..fN....;.&....lbk.d. "C5...l.......1..F#....r....j...f..... u....c.\|.^.........a2p.X..t:M.....\|.Z.....7.M2A..K..n.!..\|>O..t!.?`)...I..0{\)....Rb.. .=r......%fK..}..%.,c\J.).q0..D+!`.j'.0.@..v....1...c..G.....+.........`....w....=.O...f...aH..%...15.M:.N.k^...e.D..[....&.]...D.s.h]..*#..n.s......ppL.%)...........2..........}2....9...l.y...s:...e...vN.:.t....{....\..x<....wj..IG..S...<u:.d...._fw.WNZ........v.?.ZLm..]J....IEND.B`.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
URL:	https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x200, components 3
Category:	dropped
Size (bytes):	38823
Entropy (8bit):	7.981957302322352
Encrypted:	false
SSDEEP:	768:g+vh+m1k7pk5KDen+auyoXNVhaTGJR4dtUzwbNbrMVrpevewE:tvhlq7pk5KS7uXokWNE9cvewE
MD5:	D617C9D18C0CB9505EF39C3DDBB29386
SHA1:	28F458A68ED0FCA31FFA4C57410AF72A40885833
SHA-256:	E1561DDA276E8502766B92BDC420824963E5F40B0394898C4CC562B34409B73C
SHA-512:	F07B23518F5FB316ED454C186C3C7965C3ADEE0146E4A8E8A6D6324138EB71B036C9E0758F7038CFFBAB34546760142EA9B038F3F030DA58E227CDEB5DC2AD21
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................X.."................................................................................u..!.u.t.I>..$.d..gXE.....E...I..v9.&"-(...Dc8...Hfv"1.H.g.+..0......R.R..2.G..S..:]'..n......R>.#.... ......J/<c/O..t.!I..e.8..b...O.'X2KfN.&ts3. ..h..J,.2m.2f.i6.i1..1....(...p.J$F2f..._?AY'.....m].Pv.>OJ.;.^.y.{.......\m....tN.).\|.J...$#.Y...9..;?..u.vC'e...t.....d.l.b.].d..g.......&!E.Be^.j.E....l...6:?E.......aH.E...ph.Sm\|~...k....lk}.Z.6u.6....9.d6[k,q.....l.j..t.gb....._..n.\M.u.sb....Gn.<.m.U.....m.f......\.....F.+ K..f.."5.F9....U.V..l.&.=.m].Z ..m>..E.{:3.#.....Vqz.m3......n..".?c.n...~....j..D]6.z.M.J..%s.iO..^ob...e..C.....;..e.[.ke.VQ...>'.uyX.....:..%}z@...L..6.j5s.VW.;.!..R.A.pde......7.[...._e.v.L'KB..nz.4...}\..n....H...wD...=..(`.l....W...n....J=...>.B0%.l..u.X...E.71..(....*E.{.e.B`..Q....V

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	231849
Entropy (8bit):	5.269575709128721
Encrypted:	false
SSDEEP:	6144:E7lMK23JQOstevtoeOgEYRSouEPofZ58UpSQWNEMuuTLu9R0fNWd:E7lMK23JQOO2toeOgEYTuEPofZ58UpSm
MD5:	4006F0B989A8A13B3B01E3443CA48173
SHA1:	F933A4C592465BF0C65027119470A2C63E1E8338
SHA-256:	B013A7B2E367F14ABB4557A9F1A95D1BE9D375D07D86679C00214D95B609876D
SHA-512:	1D3B9CFBDC90596D7C1ED16AA5AE4E994D978A4D76495008B9E39B6C3D6EA0B4ADE98C0E766449EC0785D17A813A9EA0D2CDC6575EB11405EC8F2FFBF5463A9E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/bundle.Ocf.955a2e7a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.Ocf","icons/IconArrowDown-js","icons/IconMinus-js"],{49364:(e,t,s)=>{"use strict";s.d(t,{Z:()=>r});var n=s(2784),a=s(25686),i=s(65526);const o={threshold:.01},r=e=>{const{children:t,onImpression:s,style:r}=e,l=n.useRef(null),c=e=>{e.forEach((e=>{e.isIntersecting&&s()}))};return(0,i.q)((()=>{if("IntersectionObserver"in window){const e=new IntersectionObserver(c,o),t=l.current;null!=t&&e.observe(t);const s=()=>{const t=l.current;null!=t&&e.unobserve(t),e.disconnect()};return s}})),n.createElement(a.Z,{ref:l,style:r},t)}},21100:(e,t,s)=>{"use strict";s.d(t,{Z:()=>i});var n=s(2784),a=s(72175);const i=({description:e})=>n.createElement(a.ql,null,n.createElement("meta",{content:e,name:"description"}))},95779:(e,t,s)=>{"use strict";s.d(t,{W:()=>a,g:()=>n});s(71372);const n=Object.freeze({AppealTweetWarning:"appealtweet",LimitedDiscoveryAppealTweet:"limiteddiscoveryappealtweet",ProfileOnlyDis

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2860
Entropy (8bit):	5.02603766452609
Encrypted:	false
SSDEEP:	48:ikRr58flmLgo9rvGGdYKcsg7dzWI3+tOZeqeRCG5wNuH+VuJ/:Bd58dmsoFeG8T3ClpRtwUW6/
MD5:	FF014C89164899D269D478E3BD661526
SHA1:	CC74162DB10B1F9F9E7B1EB9DAB2FA77892A0721
SHA-256:	6A6AB97F683CAB02DD393A049E5B3852C51E4FFF2EB15BB91F33F1F950E0D135
SHA-512:	7A7601AC3286945301705959B6F7C430456F4683FEB9C7D2A6B1CDC8AB7ADA4E1268F64DEB048B78F6CFEC437BDF41FD210CD481C1D647875A7E0E40FE5379E4
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/Media/module.css?cdv=158
Preview:	./..Default CSS for the DotNetNuke Media Module..(C) Copyright 2002-2011 by DotNetNuke Corporation../../* modified by greater giving at bottom of file /...dnnmedia_wrapper { width:100%; }...dnnMedia-Wrapper, .dnnMedia-Wrapper iframe, .dnnMedia-Wrapper object { position: relative; z-index: 899 !important; }...dnnmedia_image { border:0px solid #ffffff; }...dnnmedia_left, .dnnmedia_left img { text-align:left; }...dnnmedia_right, .dnnmedia_right img { text-align:right; }...dnnmedia_center, .dnnmedia_center img { text-align:center; }...dnnmedia_wmp, .dnnmedia_wmp div { position:relative !important; z-index:2 !important; }...dnnmedia_italic { font-style: italic; }..../..media options view..*/..#dnnEditEntry { margin-top:3.2em; }..#dnnmedia-filesupport-wrapper { margin-left:24em; }..div.dnnForm.dnnTextEditor.dnnClear { min-width:570px !important; width:96%; }...dnnmedia-message { margin-top:0.5em; }...dnnmedia_textbox { width:275px; margin-right:1em !important; }...dnnmedia-audit { marg

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2], progressive, precision 8, 320x213, components 3
Category:	downloaded
Size (bytes):	3518
Entropy (8bit):	7.304018105846751
Encrypted:	false
SSDEEP:	48:ZnzfQrc2iWdSEZCDZCdNVWiAsEiHUBReFaxUPMhy1TEmiklMZ/Zcdd7ojIPB4V+Q:ZzIrMQdWbsN0nW+1hfhcXo8pY+Q
MD5:	29709A654FFA695E96F246B321132974
SHA1:	FC71AB954064FD0FC99809AF13E9F23332304930
SHA-256:	44A09F1B80EB9FDC6EAA932B5ACD45554FF5FA26420E7D9FD63362E0428B3376
SHA-512:	024BE29411E236DDA82A70BA32396274F001AC23C59424D35C4889F039740800AD1834C5478CBD1AD6AF7E96ABF86E389F02BED5D5618A3259EAF162B2FE7E1B
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB1m8NAX-bhLwhcb_389jU9W4xFxGps9kAln7Z1Bm_83g&oe=662E8774
Preview:	......JFIF.............DExif..MM........;.........&...........4....Sean Airhart... NBBJ.....http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:Marked="True">. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default">All Rights Reserved</rdf:li>. </rdf:Alt>. </xmpRights:UsageTerms>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........P..Sean Airhart..t... NBBJ..(.bFBMD0a000aac0300005c0600000c07000053070000a9070000d307000024090000220a00008c0a0000260b0000be0d0000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........@..".............................................................................=~q4..5BhCV....i.h..C.Q.%.Nw.g..Y.;c..Z...

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7288
Entropy (8bit):	7.88605116170826
Encrypted:	false
SSDEEP:	96:h0kzKr1PfEgtCiZ/w+PkaLWYDb1auyzO4qnI8sFfGOktmy+iq1J4mSgGucLY8WTS:h8hfYMtLW6wuyz/wsFI1gvPGzUNej
MD5:	6D5675A49AED6DEE33EA91D15EA5C0A4
SHA1:	C6F716BC73347151B7F7087490443CFCC49391AD
SHA-256:	B4E26C68D3DFB9D88592C984FDD2725050647B35F3900F333EB6BA1F26F9818A
SHA-512:	C6A31969C340E81694619EA1E30D645BCCBCA172EF3EA3716C26AD5F663D3B111462BAF68A6BFC49581F3A89016BD395B233BB53D328EB6867C2742FEA84EC2D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000060030000c0060000590700002a080000150c00005d110000d71100009b1200008e130000781c0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................wV....g.xA...D.j.]Tl.P..A.d.}.hH..&6Mmt..].slo....f._o.n..u.....{]..{T..R.y.a(..R./m...4...z.VVw.D...M.)....<t.aJ..zC.uO..........`-.M.h2Ga....hI....#..@m..t}. l.....M.z..n..RMFxm.:..9.7..KDf.F.w...g..?b.8\..ev.S..35....m.V..;....&...w.{.2...}o.\|....mh#..zulU[.V...82..w..u.. .xK.......Ys.....Pn....b.........*.....f.a.q..../E..0K.5..b..V......z....)...).J..A.Z.Xp...C...o....m2.t%.'..G.G!.=B...z.....V.bM.sV.s..I.`.#....: ..V....+............................!13."#24A 0BD..........<!.q.u.H.d.=d......7.;.;.s..#Y.z.4.O^.H......`..7....v.E.....o...W.W.).>o3.D.9...;6.lg[....yUX..[ar..6.z[.>A..=..i..:Z52..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3797)
Category:	downloaded
Size (bytes):	3995
Entropy (8bit):	4.863031139501793
Encrypted:	false
SSDEEP:	96:OhmJHQjGGcJGEN8oQMbBfTP8hW7XBgHVyuRDlN/ah:4hjG8lOrP8hSoPNa
MD5:	77516945FF89BA89D73826BC00A886BF
SHA1:	3F05C6D30808EB3EB06684C010B24AE8E06BAE26
SHA-256:	36125E9683ABE050DBE3F15394BF75DCABAD78B6E8B5FC13574AA909DFE69EB6
SHA-512:	F9AFC2E07707655270A1DCD259EFC9F08C2F54AF62378845490013F62E803975B081C21643FB930AC4C8B1386E9CB7D1F53618FF5E4F61090C8387FBF7DC515D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile.6f6b76aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile"],{90002:(e,l,n)=>{n.d(l,{Z:()=>c});var a,i,t,s,r,u,d={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"RichText_timelineRichText",selections:[{kind:"InlineDataFragmentSpread",name:"formatRichText_timelineRichText",selections:[{kind:"InlineDataFragmentSpread",name:"formatRichText_updateRelayEntities_timelineRichText",selections:[{alias:null,args:null,concreteType:"TimelineRichTextEntity",kind:"LinkedField",name:"entities",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"format",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"from_index",storageKey:null},{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"ref",plural:!1,selections:[{kind:"InlineDataFragmentSpread",name:"formatRichText_timelineReferenceObject",selections:[a={alias:null,arg

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1892)
Category:	downloaded
Size (bytes):	12200
Entropy (8bit):	5.286232333362197
Encrypted:	false
SSDEEP:	192:egEsIAEsIEyssIRN9eD8fG381D84TISIsOlDX8nC8j3yLVMPKobVSi:eFVdsNWDCGs1D8FSIsownCYQgKobv
MD5:	41162E9767BB833A19F29900CA0885D2
SHA1:	8CED2535D4027D3E0076EDFEA806DEBC1C0AAF3D
SHA-256:	276E7031F63E640D81797D0DDCC16D31209AFCB98B734221B4D22A831828C8F3
SHA-512:	BBF8B0D2F7F2804392B801D135FBF1DBC2B03AD4B46FE76C7898A5EF7CA16309FC68A8D18BE1A82BC05D2A3E3D0E421307482168B05791170CB0A0D475459DA9
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/eav_geUKRkF.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometPhotoPermalinkRootQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="25737223945891860"}),null);.__d("CometPhotoPermalinkRootQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometPhotoPermalinkRootQuery_facebookRelayOperation","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","IsMergQAPolls.relayprovider","IsWorkUser.relayprovider","StoriesArmadilloReplyEnabled.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometPhotoPermalinkRootQuery_facebookRelayOperation"),metadata:{},name:"CometPhotoPermalinkRootQuery",operationKind:"query",text:null,providedVariables:{__relay_internal__pv__CometImmersivePhotoCanUserDisable3DMotionrelayprovider:b("CometImmersivePhotoCanUserDisable3DMotion.relayprovider"),__relay_internal__pv__IsWorkUserrelayprovider:b("IsWorkUser.relayprovider"),__relay_internal__pv__IsMergQAPollsrelayprovider

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33134)
Category:	downloaded
Size (bytes):	608418
Entropy (8bit):	5.282419745553554
Encrypted:	false
SSDEEP:	6144:fsTf6SP3xnWDL0O5jzyeYkP0aJK6Bcf8lV:fsTCsBU5jzZzSd8lV
MD5:	512E23AEE2738DAAEAB43233A1956ECB
SHA1:	E60E2D5D4479DD7922C2088F09A3C4DFC805447D
SHA-256:	488875EA0AAC3CE41841A176ADB54138B37AA60CB39401A1F99E39E9362F78C9
SHA-512:	A62AB17CC0B2281ADB285273AB025D4691F7D12B60532B9943D226561EF9E3C2B4B2C97B29D34D516EF2C9096A91AFAC6B9CB932A2313942D14A8390F08E802F
Malicious:	false
Reputation:	low
URL:	"https://static.xx.fbcdn.net/rsrc.php/v3/yp/l/0,cross/Zl4RYlGvLRL.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2;border-color:#DADDE1 #0e1f5b #0e1f5b #d9dfea;border-style:solid;border-width:1px;color:#fff;padding:2px 15px 3px 15px;text-align:center}.inputaux{background:#ebedf0;border-color:#EBEDF0 #666 #666 #e7e7e7;color:#000}.inputsearch{background:#FFFFFF url(/rsrc.php/v3/yL/r/unHwF9CkMyM.png) no-repeat left 4px;padding-left:17px}.html{touch-action:manipulation}body{back

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	574
Entropy (8bit):	5.114505514685391
Encrypted:	false
SSDEEP:	12:3tYBmgQNBnQNUOVSRQJWQ+RSRQeSRQ+o9fSRQO64v8jmSRQcWGYdYO:3tzEWCSRJTRSRHSRToxSR/7v9SRVWGi3
MD5:	CB6E2B67EBB957AFF1CC87643C725E3A
SHA1:	35ADCD95266E4D0532A068D3BFBFFBF0AEEAD776
SHA-256:	7BF3818E2F85B981AC462BC1514C68B489E51FDEF0B6A178BD771A4F1ABA26FB
SHA-512:	9177379436F44526D5A8492D0C7125658689F9194D4609B6C82122D39CE6FBA11E81C137E303ADB30332C74844D5D03FA207F1B367E7126890E31E064DA51927
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/HTML/module.css?cdv=158
Preview:	..dnnHTMLSettings, .dnnMyWork, .dnnEditHtml{margin:2em auto;}....dnnFormItem input[type=checkbox], .dnnPageSettings .dnnFormItem input[type=radio]{width:auto;}....dnnFormItem .dnnHTMLSRadioButtons label, .dnnFormItem .dnnPSRadioButtons input, .dnnFormItem .dnnHTMLSRadioButtons label, .dnnFormItem .dnnHTMLSRadioButtons input{float:left;padding:0;width:2%;text-align:left;}....dnnFormItem .dnnHTMLSRadioButtons label{width:auto;padding:0 15px 0 6px;font-weight:normal}....dnnHTMLSRadioButtons br{display:none !important;font-size:0;line-height:0;border-collapse:collapse;}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2497)
Category:	downloaded
Size (bytes):	2720
Entropy (8bit):	5.337925774972329
Encrypted:	false
SSDEEP:	48:iIK3yw1qfuufuPsfuNfgfBfzCaFcY2i7pj6dqlqT73aLomrUlxfuSjFyXIpnW2GB:ONq3SseIZ/B2WpjERHnmrUTNMIpnYz+E
MD5:	A79DA8B117E3C2927298234B7D071405
SHA1:	431D7D93201A11E82DE4B473AC1C4E1FFA7C4FF8
SHA-256:	EB2114BE711523F0736084783F51DF0ACC85CB55C78D1662F7D40D3B227A7DC9
SHA-512:	D15AF15052237B0ECAE75A135C632AC44717A41BCD932783869A66093C6025C336D5C703498CECB21DC5F6C2A28262E1E71AD1F713963678200246615764BDA6
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli.f0e0e88a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli"],{28092:(e,n,a)=>{a.d(n,{Z:()=>C});var t={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CommunitiesSpotlight_community",selections:[{args:null,kind:"FragmentSpread",name:"CommunityFacePile_community"},{args:null,kind:"FragmentSpread",name:"CommunityMemberCount_community"},{args:null,kind:"FragmentSpread",name:"CommunityThumbnailImage_community"},{alias:null,args:null,kind:"ScalarField",name:"description",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"rest_id",storageKey:null}],type:"Community",abstractKey:null,hash:"34c0c514b034d1f809d48bbf5b8f1381"};const i=t;var m=a(2784),l=a(25686),s=(a(85488),a(77660)),r=a.n(s),o=a(73186),u=a(45184),c=a.n(u),d=a(62694),y=a(55636),g=a(

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x155, components 3
Category:	downloaded
Size (bytes):	8174
Entropy (8bit):	7.90431181396452
Encrypted:	false
SSDEEP:	192:S/wq0WOjc4OO27XgOVOaX3XjDz3pC9MaZN4m32wPN9ThS9ky:EMrX27gOVOaX3XvTpC+CtLhS9v
MD5:	240D273EF48B8B87BC55189B623DC870
SHA1:	5BE5351682F9D3D40B76821154BA4ED59A203174
SHA-256:	59A803A88193CF2F6795112452F182BAECBC6A640794AC5CB47EA439A317D90E
SHA-512:	94C36D076BAA08E93E4FA4701B1E58A28F0A94AE03ED7B7FB168FFFD47DEA89CC2E4D1B951B9BFCEC7D6C7F5A5125889F8A5B270EE7D795A7A616A05B664BD2B
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/305262992_451188083712872_1835908681663258642_n.png?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=107&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6pmRLTc1RUwAb453RIY&_nc_ht=scontent-sjc3-1.xx&oh=00_AfD67zDS4ZCd3Oluy7rReiwQPmwiSBDhpVXWELehNk3DdQ&oe=662E5DE1
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100007803000054070000ee070000880800005e0e000080140000fb140000a015000050160000ee1f0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................c`.I<.go.....s......V..(f..r..es<....rVz..BeNp,;s....u/F.kw..&i..,.=.4b].....'{U.vV.F.s\....Q"1I.V.....T%.h.}.....Z..ynD3G..m;...r....z..i..f.<....=X......).j..2....k..L..K'.p_...L...F..aAa.t...y.N.9.C}yh.c.g..9.:..$.......n>.."...Y.D..AhTq.......1..0...1~......#...g.U..+..8C:...#...].>=..SW..r]<...`.._...\|De..MIZ..Av#.............Li.u..@).@.c.a.../...I...Sf..b...z.`.p..2...]. kk3.>.s...<.h....>.$.Q.XJF43X...f%.:....+cd...S.....\|...-............................!"14#3A..25 %B0..............8.q..3h.6.o..2...../........Q....hmV]..g.9..eUW?.U..Q....I7.%.K0.v..... c0Q....J.....e3.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x503, components 3
Category:	dropped
Size (bytes):	42686
Entropy (8bit):	7.971351755999078
Encrypted:	false
SSDEEP:	768:BalkuA9rB7oADslek+jHLJK8wSMGIzQmBnjPf8HLroBLTzq8LuwHes:blRB7HLkCH8jGIzQejzqIuw+s
MD5:	B0B692F0E0FA1B2197C8966C29B60BC9
SHA1:	D0D82C6BF8A5333B5FF17865FABDF1F12FFDF471
SHA-256:	AB01C677713BE8BB112D58ABF39C0605598357FD6DB74289CA49DE6F3DFF637F
SHA-512:	A6D58599A43BED6F32A16A289D750FF27AA08C1212527925A34C9F7EB3FC051F9FAD0ACF92A5453F1AC85CD26FA0537F328ADC87845F4C8768CD72780B3AE569
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a71010000c7110000342600006e2b000015300000894a00003264000003680000fc6c000022710000bea60000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........X..".....................................................................................K.5..Lm...j..#h..j...F.m...j...F.m...j...F.m...j...F.m...j...F.m...j...F.m...j.j.m.R.N......X.Xk.r...}O]69.>....X...v>.->.....p.F...k..N...\6-p.F.lZ.6.......]..5.d...]..Cb.A..p.5.l'Z6S......r[.....o.[kk.Z.........z.].....z..4Y..h.D]...F.f..9/j.7..^.1{...(r^.H/.$....oSC......D._.X/j ...^...(h_.H/.....I\|P.(.^..1.P/...k..#@...+...{NZ..m....?T..?L..\|~.n.M..c......l...-..C.}....q...]N.s.id..v...~.G./O..c..k..Z.=..e+..<)4...z-..-.........Au._........}...n...%f....kz.m..z5..>.S...S..Po...-\|.h....b.a.i.V..u....1.0'...-h.S.>...:.{..S&=Z-..\|..k1.[..E..k.g\.>?/........n\|:.u...o

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2899)
Category:	downloaded
Size (bytes):	224421
Entropy (8bit):	5.549829926288273
Encrypted:	false
SSDEEP:	6144:1ZJzxw5nCpwyKfrb5Hcimaaz2OICWt9Ioux:ACSyKfBHpHaCOICWXyx
MD5:	78F73F8BA20D355EAC40A8A2BB9F4C64
SHA1:	09DC8027A579915791A4FC62E30F95DAE19C3909
SHA-256:	7CA9FCBDCF46E351EDCA678AA1BA83D5983988B8D33D3EFDCC2C7BBEEB70B92E
SHA-512:	C3FECE7ECEAE9F3DECBBAE8E4CC5B3A8C39EF5252DED325392D8B01CF18D959F55EE26AA7168B3E81EB72FEE6314ABA5E99D9C843224AE6B006B9125DAAE18DC
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x8142400, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6237)
Category:	downloaded
Size (bytes):	95142
Entropy (8bit):	5.449990337336327
Encrypted:	false
SSDEEP:	1536:WTAc3p5Y4X8Wlsg2aT4Iim0sKymy8W2Cu20u6SMiNckCuvw4Im+gSUUJiwM:e5Y48aT4Iim0sKymy8W2Cu20u6gCuvwY
MD5:	922D03F908E97CF6732CDC971623C587
SHA1:	080BC31636B0240D7BAB127C37DA18911D7B91C9
SHA-256:	8362EBBA60AB50233FE45947A8DF68B01DF2671CF0904553D5174CED515021DA
SHA-512:	8D3B7D9569CD61069D6D76D719868DFC4CF72DF9D5A864F3AAC3DD384F371CA2D2125D1EB5BEA1F73D47C55FCE9B614E852732D243E39AF2EA6B9547503861AD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iWHN4/yj/l/en_US/NBLh_jmhP9rbnDAR7QbqlLmewDUA58SCUmM84SfiWlvqERz6pNGhHp8C0c-C7FrAp6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ProfileCometHeaderActionBarMenuItemWithoutIsActiveField_profileAction.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={kind:"Literal",name:"icon_color",value:"fds-black"},b={kind:"Literal",name:"icon_size",value:"20"},c={kind:"Variable",name:"scale",variableName:"scale"},d=[{alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null}];return{argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"ProfileCometHeaderActionBarMenuItemWithoutIsActiveField_profileAction",selections:[{alias:null,args:null,kind:"ScalarField",name:"profile_action_type",storageKey:null},{alias:"secondary_icon",args:[a,b,{kind:"Literal",name:"icon_variant",value:"outline"},c],concreteType:"Image",kind:"LinkedField",

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	14270
Entropy (8bit):	7.969868908522641
Encrypted:	false
SSDEEP:	192:UYxPHQYpAZP3EJj3dNN0EyS9o1zetBYKdEAl0LagoKv8gmxX/STEfw+Mr2edm:DPHQCAEtzXoJbDmgxMX/SYJ02edm
MD5:	C98518A7D3FD4133C127632577442D2D
SHA1:	995A98AD87DE32D6A460B52D0F55C811F66B3513
SHA-256:	D648B5BB67C64FBDB7DA4FBE4E5FA042641B075510947D32B4304D025D5537B5
SHA-512:	89A5F2D4A0E9FA00CD84DA1FA887219587C1898907F4E70AD849DE56D208A52574F042F718E05CA315A0357B36E5363437D6BF2B5A589B7E29F7DE5A518A5D74
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=dst-png_p200x200&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDSUfPF5rTDhXWuDBUBGPiJpIfJPc_0IyZvseAkUZNJyQ&oe=662E8562
Preview:	.PNG........IHDR.............":9.....sRGB...,....SzTXtRaw profile type iptc.........0....i0...<.H.\d.......m...}A.v.\|.`.<...K.+."....V...=T4.. .IDATx..]w...~..{.....I.H..s.A.......}66.q8..;.......`0...A`...B...J..9L..w..L......l..O..~.............d.E......88.%V...,....d... K.,F.Ybe1..+.QA.XY........8..q@!K, ."H........3h......" .?...~.K:D !..."......A..4..g.@..#..._.b..$"..8........o4....b..X{.......Ge.aS.b..q.n..5.9y...y.......9r..<G.Ow..W!.....d.3..@...'So......5..%..#..7..0.a...I@q;....8..I.4.7.0....^....3K.....<.J......X$..<pq.......b.7.W.........0.....QQ..A.Q...).;..B..$.D.....R. ......"..9...f..u...$.D.%..b..d.IH..).......u.!.?...#h.5...C.Y..90)...I$%.I`J....^.^V.;eF.1Sr'.9..\|_7}..` ..HI..,. Z..xjc....7.. .#.k....AQM].).L...D_.~D......V.R..I...\|~...R.e..v.......=... @g.3....`....... .....s.......tu.....8...J.zQA/n.gm.+..c!.4.......2.xX?.k..d8..%.# ..#...).b.$..:.....c...My.....XJ8....#h<.A.]k:.4...\\c....8...%I ...S....RHJ\+.XW..

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1308
Entropy (8bit):	5.03509098872764
Encrypted:	false
SSDEEP:	24:dgwlC0RUOzblFmgfc3mmMlAeRWZQXgV0J/5qG2NCh2LvlIXHoTMBLvA:dgaL5xFHXTAew06ad2NO2RIXoIk
MD5:	2C5DE73517ADD4E34D0FF48B9203B620
SHA1:	C15CE9EC0509023EBA240E2D2921FDBB68E844C9
SHA-256:	C09E169F902CEEDB60477FDB68DC0825D94850C193C245515354D5FBEF32F8FD
SHA-512:	08C553A3656CAD63DD0EDF8FFE2D9E57E20E1EF7AE2CE7656B1923611020A92597AE0F1C2E85B575EBF43DC83C2A1CC4BF834FD3A6A05F9C1FBE26483711AEDC
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/initWidgets.js
Preview:	function loadWidgets() {.. if (typeof (DotNetNuke) === "undefined").. Type.registerNamespace("DotNetNuke.UI.WebControls");.... if (typeof (DotNetNuke.UI.WebControls.Utility) === "undefined").. jQuery.getScript($dnn.baseResourcesUrl + "Shared/scripts/DotNetNukeAjaxShared.js",.. function() { jQuery.getScript($dnn.baseResourcesUrl + "Shared/scripts/widgets.js"); });.. else.. jQuery.getScript($dnn.baseResourcesUrl + "Shared/scripts/widgets.js");..}....if (typeof ($dnn) === "undefined") {.. $dnn = new Object();.. $dnn.pageScripts = document.getElementsByTagName("script");.. $dnn.scriptUrl = $dnn.pageScripts[$dnn.pageScripts.length - 1].src;.. $dnn.hostUrl = (typeof ($dnn.hostUrl) == "undefined" ? $dnn.scriptUrl.toLowerCase().replace("resources/shared/scripts/initwidgets.js", "") : $dnn.hostUrl);.. if (!$dnn.hostUrl.endsWith("/")) $dnn.hostUrl += "/";.. $dnn.baseDnnScriptUrl = $dnn.hostUrl + "Resources/Shared/scripts/";..

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (6510), with no line terminators
Category:	downloaded
Size (bytes):	6513
Entropy (8bit):	5.1007647181420435
Encrypted:	false
SSDEEP:	96:twthrx2XYSBL3T75QCjxaJoc48oc4Doc4J0aYAK03MqGi+JN9f1vA0wL9M0HO+ts:GtRx/Swa03MqGi+JN9f9mL9lOiO5
MD5:	0AE5E67E819B67663F3E4B2C262D93A5
SHA1:	2D592F198652C938CD5B869C6A1D5581201059AB
SHA-256:	0A6300B45DD6A8D72DAFC1682B5BBD4F95F87FEAE8182CC74DCD39FF8885F5B8
SHA-512:	C11D2FD3F9EE3CAEEBBA6BAD8379EE367CE8698E54D98377E9D75EC61E900C6783D44CDB5E883106697E7279C87F80D54903B8D29A939C890950A7169DECCA34
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/css/gg-nav.min.css?cdv=158
Preview:	..navbar{margin-bottom:0;border:0 solid transparent;}.navbar-toggle{margin:0;}.NavLinks-List{border:none;box-shadow:none;background-color:transparent;padding-right:0;border-image-width:0;}.NavLinks-List ul:after{clear:both;}.navbar .brand{padding:0;}.navbar-collapse{position:relative;border-top:0 solid transparent;}.nav-pills>li>a{padding-top:8px;}.nav li{position:relative;list-style:none;margin:0;}.nav li ul{margin-left:0;}.nav-collapse:not(.in) .nav li:hover>ul{display:block;}.nav-collapse .nav li>iframe{display:none;z-index:1;}.nav-collapse:not(.in) .nav li:hover>iframe{display:block;}.navbar-nav>li>.dropdown-menu:before{border:none;}.navbar-nav>li>.dropdown-menu:after{position:absolute;top:-15px;left:20px;content:'';width:0;height:0;border-left:15px solid transparent;border-right:15px solid transparent;border-bottom:15px solid #f5f7f7;font-size:0;line-height:0;}.nav .dropdown-menu>.active>a,.nav .dropdown-menu>.active>a:focus{background-color:transparent;background-image:none;col

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65265), with no line terminators
Category:	downloaded
Size (bytes):	435355
Entropy (8bit):	5.1895533888395065
Encrypted:	false
SSDEEP:	3072:a2iPRTFeY5vqGel/qncYVxXBS7myx1DmiUQ27ZGy3ecz3x/8HoBDqwxcIwVhXRow:G7wdLx1Dm827ZGy3Ldk5WcYHJwF6ICu
MD5:	1C9A7E4825E060132F3DD8E675DA3573
SHA1:	54FD41902A55BC3F853ED08827F1E072298DA264
SHA-256:	285F57588B45C84E812FB9BCBFC520CCB2C6BDE937F24FA224360BF960279585
SHA-512:	AD6100EAF3E347696D31539FE381317CC0AE420AD0F1BA6B57CB3125D75B59058AF995ED7D8843167DABEA4F15D8880A76B61074D68FCF95B455099A6D789AAB
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/i18n/en.0a146e9a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/en"],{17346:(e,t,o)=>{var a=o(79404)._register("en",{get emoji(){return o.e("i18n/emoji-en").then(o.t.bind(o,20747,23))}});function n(e,t,o){return"one"==(a=e,n=!String(a).split(".")[1],1==a&&n?"one":"other")?t:o;var a,n}a("c39b0e24","X"),a("ac0d27be","Sorry, this account has been suspended."),a("bcee7444","Account update failed."),a("e0cbf77a","Add phone"),a("f377195c","X is over capacity. Please wait a few moments then try again."),a("d67f9456","You have been blocked from performing this action."),a("e0ece1b6","Cannot attach media, try re-uploading."),a("i82e8f04","To protect our users from spam and other malicious activity, this account is temporarily blocked from following additional accounts. Please make sure you understand the X Rules."),a("jf7be47a","To protect our users from spam and other malicious activity, this account is temporarily blocked from sending posts. P

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8257)
Category:	downloaded
Size (bytes):	250160
Entropy (8bit):	5.408163179682609
Encrypted:	false
SSDEEP:	3072:8Fsc/FOpUbr7nV7y+6D7VwGckXqCPntgHa7DWvVkBdccF4zc0A:aiQV7yJ72Gwuc8
MD5:	FA10724A7B702064E3AAC9807B5EA98D
SHA1:	5C5F8AF019B8744FCEF05E8EC38EB3EE6B4929D9
SHA-256:	1C766A599A8ECDF996C64E861F92622A9FC03A3D49AA8F694C6F019F32691CA3
SHA-512:	4E09051C40D65F02480251F32817C78409420FD061BF077AE184548D82B101962CC8A185356D8ED7216C0F71AB8CDD8641049B3D099C5C660089144B9A4FA516
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i4eM4/yo/l/en_US/dHfUl44LAS2qwhyhejQkZD0RJQViAVi4_f7uDpbF6yGDONAvDdczOBaB3rHKz4xnM0PMnKn0vHvpru5esQygl-k68yUUHAuQc6MqHVuuLBbAiCfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometTextWithEntitiesRelay_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},b={alias:null,args:null,concreteType:"WorkForeignEntityInfo",kind:"LinkedField",name:"work_foreign_entity_info",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"type",storageKey:null}],storageKey:null},c={kind:"Variable",name:"scale",variableName:"scale"},d={alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},e={alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},f={alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null},g={alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null};return{argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:{mask:!1},name:"CometTextWithEntitiesRelay_entity",selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{alias:null,a

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4004)
Category:	downloaded
Size (bytes):	4158
Entropy (8bit):	5.6423338374879455
Encrypted:	false
SSDEEP:	96:OD4Ioq9XMSj5sV1Xe7G+gEcEn66qZJkNQyCeuD7ce7u7eROrjrEkAJUTaFag:X9qRCXD+6PSN3He67eROH/zTa1
MD5:	8F8B9306D4CF8F20EA9C5244EE212426
SHA1:	CBD135D0D45EE6F84458268E4F9403BFBDFE109B
SHA-256:	FAD0E0794174284F117268C898FF924D06170ABAE787263F66F5608FB06952B0
SHA-512:	71F7B8107311DE615FF9CBB9ACB4A6AF6CC798E777B1CF984E027F95581F3B1B5959BE54D5CEFCC5F210FF85851E14DB8AA04BDF7BCE89CB8B91E4F94749C5EE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.Ocf.148df1fa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfile~bundle.Ocf"],{33626:(e,t,E)=>{E.d(t,{C6:()=>f,GJ:()=>Z,HR:()=>C,Il:()=>w,NJ:()=>D,OG:()=>Q,T_:()=>v,Xw:()=>b,Ys:()=>m,_D:()=>U,b4:()=>M,ck:()=>y,g3:()=>B,o8:()=>V,u$:()=>O,vW:()=>T});E(6886);var i=E(98084),r=E(26853),n=E(53392),_=E(51670),a=E(34556);const s=`${E(55632).Y}/profile`,p=`rweb/${s}`,l=n.dg(p,"REMOVE_PROFILE_BANNER"),I=n.dg(p,"UPDATE_PROFILE"),o=n.dg(p,"UPDATE_PROFILE_AVATAR"),d=n.dg(p,"UPDATE_PROFILE_BANNER"),A=n.dg(p,"UPLOAD_MEDIA"),S=Object.freeze({REQUEST:"rweb/settings/profile/ENABLE_VERIFIED_PHONE_LABEL_REQUEST",SUCCESS:"rweb/settings/profile/ENABLE_VERIFIED_PHONE_LABEL_SUCCESS",FAILURE:"rweb/settings/profile/ENABLE_VERIFIED_PHONE_LABEL_FAILURE"}),R=Object.freeze({REQUEST:"rweb/settings/profile/DISABLE_VERIFIED_PHONE_LABEL_REQUEST",SUCCESS:"rweb/settings/profile/DISABLE_VERIFIED_PHONE_LABEL_SUCCESS",FAILURE:"rweb/settings/profile/DI

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2428)
Category:	downloaded
Size (bytes):	2641
Entropy (8bit):	5.295990741705198
Encrypted:	false
SSDEEP:	48:iIK8Shxz+MEvgDg60AgMgLM4u/47BobU8nLqUJGAL5MrUAbv0knko9Z/ChzONn2C:OrF+Mio7fLMM4uA7BoocLqUN5IUgsyJV
MD5:	79E72D9FAE5B486BA0AF26A52170AE52
SHA1:	7A9B6C358C1F9B002C9E18A00A478A37D8E33A69
SHA-256:	7F6244D748EBAB0754F885B6C5E423CC8C30E939CE711F9C314426F0F73A912F
SHA-512:	4FE6265745826CCFC6D148562581C4B8878D9D2AC3541B7C8B8202F904B4AD95BBAAB1ED80970AD87ACE0C6E7A20AE36481A0A0DDCFC14865A7C6CDA870ED50F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.SettingsProfile~bundle.Ocf~bundle.UserLists.93afaf8a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.TwitterArticles~bundle.SettingsProfile~bundle.Ocf~bundle.UserLists"],{48974:(e,t,i)=>{i.d(t,{Z:()=>Z});var s=i(2784),a=i(73186),o=i(29496),n=i(45184),r=i.n(n),d=i(56992),l=i(292),c=i(23564),p=i(92160),h=i(34556);const m=(e,t)=>t.media?t.media:(0,d.Z)(t.mediaId)?(0,h.m3)(e,t.mediaId)[0]:void 0,u=(e,t)=>void 0!==t.mediaId?t.mediaId:t.media?t.media.id:null,C=(0,p.Z)().propsFromState((()=>({media:m,mediaId:u}))).propsFromActions((()=>({processMedia:h.C4,updateMediaUpload:h._J}))).withAnalytics({page:"media",section:"edit"}),g="applyButton",_=r().gd80afba,k=r().a753a870;class w extends s.Component{constructor(e){super(e),this._getMedia=()=>{const{media:e}=this.props;return e&&e.mediaFile&&e.mediaFile.isImage?e:null},this._renderAppBarRightControl=()=>{const{isProcessing:e}=this.state;return s.createElement(o.ZP,{disabled:e,onPress:this._handleApplyBut

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5271)
Category:	downloaded
Size (bytes):	43815
Entropy (8bit):	5.485384488345455
Encrypted:	false
SSDEEP:	768:oUy0++SVa/a6813sFi0H+tOGNgN0k2FIuEe/:AY/atJV
MD5:	1FDBF7359B9A002237AACD321BE49D0B
SHA1:	2A817AFAE7ED8382638A6AA13DE4D84E4A6BAEDE
SHA-256:	7007FF964186869076641CAFE8702A772C0A0055905600F7C0E5DA0B038AC5C9
SHA-512:	7C6E420339931D38E968899D29284252A1D5EFC0367EB100752B3CB726E9EA75F54568DD9485F92A510C5DAF0554856FF8BA6CC4CB7688805A68EA2472139216
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iuJ54/ye/l/en_US/m140NWqU1Tl.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometEntityHeaderStickyBottomRow_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometEntityHeaderStickyBottomRow_entity",selections:[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{args:null,kind:"FragmentSpread",name:"useBaseEntityHeaderProfile_profile"}],type:"Profile",abstractKey:"__isProfile"};e.exports=a}),null);.__d("ProfileCometTextWithEntities_textWithEntities.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometTextWithEntities_textWithEntities",selections:[{args:null,kind:"FragmentSpread",name:"CometTextWithEntitiesRelay_textWithEntities"}],type:"TextWithEntities",abstractKey:null};e.exports=a}),null);.__d("useProfileCometStoryStatus_user.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null};return{argumentDefinit

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316)
Category:	downloaded
Size (bytes):	2539
Entropy (8bit):	5.178224864642458
Encrypted:	false
SSDEEP:	48:iI5KWszJE9k2Orb5/PBrbQ/QrbzBpzrbqZZ4wrbJm8mrFhRvtsUb9XE+WxpDsUbl:Tsq9k1rb53BrbQorbzB1rbqzrbJm8mRw
MD5:	6D4191F09997FB751D14828F19C501B0
SHA1:	62F4E3BB88AE22485A07915019C711A38736A2D6
SHA-256:	B5B65B59E52F3268EFE37F359923F146B21E327DA06403BFF30C2F96AF627B84
SHA-512:	FCAFF302B4B54449AE5CAF6C984302F968C628ED38BEFA1036B386BEA00E3A4AA31C64EB31C2975CB2920934AAD02BBFF5B1090825DE425E947F3A409965E5F7
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.5d31ec7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa"],{71896:(e,r,t)=>{t.d(r,{DI:()=>k,H$:()=>h,OB:()=>P,Ww:()=>u,YB:()=>d,hj:()=>f,qF:()=>S});t(1951);var s=t(26853),c=t(67935);const n="recentSearches",i="rweb.recentSearches",o=e=>(r,t,{userPersistence:s})=>s.set(i,{recentSearches:e}).catch((()=>{Promise.resolve()})),a=(e,r)=>{let t=[];if(e.user){const s=e.user;t=r.filter((e=>e.event\|\|e.keyword\|\|e.list\|\|e.topic\|\|e.user&&e.user.id!==s.id))}else if(e.event){const s=e.event;t=r.filter((e=>e.keyword\|\|e.list\|\|e.topic\|\|e.user\|\|e.event&&e.event.id!==s.id))}else if(e&&e.keyword){const s=e.keyword;t=r.filter((e=>e.event\|\|e.list\|\|e.topic\|\|e.user\|\|e.keyword&&e.keyword.query!==s.query))}else if(e.list){const s=e.list;t=r.filter((e=>e.event\|\|e.keyword\|\|e.topic\|\|e.user\|\|e.list&&e.list.id!==s.id))}else if(e.topic){const s=e.topic;t=r.fi

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7990)
Category:	downloaded
Size (bytes):	471747
Entropy (8bit):	5.568739436492213
Encrypted:	false
SSDEEP:	3072:VQrLY2kiAGRx0KDCJcrjrMwmvsPJ80cgcelRDKRsHu8aq9jpgc7S/i18EvJZGwS6:yKdelhksn9jOc7S618cZGxrpsU6FI/kj
MD5:	1B4B65B963D6C546495AFA7BA4A5CD08
SHA1:	1D26FF47EC0EFB15C90313986DA7F0F925C0A682
SHA-256:	81812D5FB89F14446D06CBBF6A281AC57E9B22ED502278E9BC14E3AE5CDA2CF3
SHA-512:	6F559B65B5AB7931B0D2DD010B892BC3DBCEFD49F220374C68A466A2367E94D6B994BE7D72FFA6E2BC7146F347E36BDD4F28E1100DC11C6F7C04B7D058547227
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i_8K4/yV/l/en_US/806OU2p6Shf.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometBatchNotificationsStateChangeSubscription_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6546596222061607"}),null);.__d("CometBatchNotificationsStateChangeSubscription.graphql",["CometBatchNotificationsStateChangeSubscription_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"environment"},c={defaultValue:null,kind:"LocalArgument",name:"input"},d=[{alias:null,args:[{kind:"Variable",name:"data",variableName:"input"}],concreteType:"BatchNotificationStateChangeSubscribeResponsePayload",kind:"LinkedField",name:"batch_notification_state_change_subscribe",plural:!1,selections:[{alias:null,args:null,concreteType:"Notification",kind:"LinkedField",name:"aggregated_notifications",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"seen_state",storageKey:null}],storageKey:null},{alias:null,args:nu

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Category:	downloaded
Size (bytes):	136410
Entropy (8bit):	4.939323812925437
Encrypted:	false
SSDEEP:	3072:nGYY2/d6ZnQ7xGYSBYHVKB7Gd5vzrJ8MlZO8:GZ216ZnQdhSu18cx
MD5:	877355977200E7256C91F8C234534CA7
SHA1:	A378FDDCDA0227E2315178E8A7F74F0FA561010D
SHA-256:	7BAC169DFDDA2EB06F39C90C7015EDA36B60C0B602A93A1566E236F8315E3FEA
SHA-512:	087D4FC8FE0199DDBE0B7D12777AE338DF5B4677FF8B3D7922FDCEBB795F1FCA35FD87ADE1C68A8B4EB9A16EE15079AEB3CDCE6D499C6908F3CF901DF9BA55DE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.9bb55bba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/emoji-en"],{20747:(e,a,c)=>{var i=c(79404)._register("en");i("i506b710","Smileys & people"),i("f457f732","Animals & nature"),i("ce9bf9a4","Food & drink"),i("da1e1fd2","Activity"),i("g280553c","Travel & places"),i("b2f95aa6","Objects"),i("ac91750e","Symbols"),i("j56c4be0","Flags"),i("ef15e12a","Grinning face"),i("g9d0571a","face,grin,happy"),i("db5cfab4","Smiling face with open mouth"),i("aead588c","face,mouth,open,smile,happy"),i("c29cc866","Smiling face with open mouth and smiling eyes"),i("db0d8f24","eye,face,mouth,open,smile,happy"),i("i2f5a850","Grinning face with smiling eyes"),i("af2d51c8","eye,face,grin,smile"),i("f61c01c8","Smiling face with open mouth and tightly-closed eyes"),i("c64c70ce","face,laugh,mouth,open,satisfied,smile"),i("c6db198e","Smiling face with open mouth and cold sweat"),i("c36e8a34","cold,face,open,smile,sweat"),i("g03ce604","Face with tears of j

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4148)
Category:	downloaded
Size (bytes):	4371
Entropy (8bit):	5.282131054526615
Encrypted:	false
SSDEEP:	96:m2ZpWAgaTFV/Eupyk7KTZGZTcgy5cmC2Zo:9pWAgLuty5no
MD5:	FA917FCC988C7C6A366ABC5702157129
SHA1:	5A57C42A6AF318B3FD3022172E0FCE845E434DA7
SHA-256:	B247E44A2BEE3B2DBA3FC61A4ED4EB38573FC9C4D322FB4330EB51093E15FA45
SHA-512:	1FBCEF8689889A3E7777D9E190128DEE742FED24EB812F2C62614A78F55A44D80BA9860732A24406BA7E9DC99EABD90859FF04AE00ED3EBC699E92E15E61BB0B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu.029e300a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu"],{49379:(e,t,s)=>{s.d(t,{Z:()=>L});var o=s(7896),i=s(2784),n=s(7267),a=s(68139),c=s(73186),r=(s(6886),s(25686)),l=s(45184),p=s.n(l),d=s(16587),h=s(1206),m=s(82392),u=s(3188),b=s(13867),g=s(79866),f=s(11839);const y=p().d2414d31,x=p().fb9f6f39;class C extends i.Component{constructor(...e){super(...e),this._getMemoizedLink=(0,d.Z)(((e,t)=>{const{pathname:s,query:o,state:i}="string"==typeof e?{pathname:e,state:{},query:{}}:e;return{pathname:s,query:o,method:"replace",state:{...i,lockScroll:t}}})),this._unlisten=this.context?this.context.listen((e=>{this.setState({location:e})})):h.Z,this.state={location:this.context.location},this._getTextColor=(e,t,s)=>{const o=c.default.theme.colors.text,i=c.default.theme.colors.gray700;return e?o:i},this._setRef=e=>{this._ref=e},this._h

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	9848
Entropy (8bit):	7.929694040133499
Encrypted:	false
SSDEEP:	192:eWTDPXy0vqdB4er9KdmZZZ3LXo12lyzv18yQ5j9JTFnd5gd9UqW/C8:J6Bv0dmZZZ37y2QxaRy9XW//
MD5:	493A34060B915C4C93F338EAF04C5C52
SHA1:	0C9B30DC6F0377146446F3F84788FDA591F88C08
SHA-256:	3E53D833277183258455868ED837B43151299EFEF35DA645F7C8E7D8AFBDE3DE
SHA-512:	F95A3DBBE698587834027409C3443604CBC2F43F299B297E000AE6763327066B4C0776B1E431277CCDB233BB863232F5DB4D03EFCDAA76F886D35E4B2C51659E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100005303000083070000640800006d090000c7110000e318000066190000811a0000cc1b000078260000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................h....h.:.n.N.KK..4.....g.9(....~...$...T.e.p7.f.X9.\..6ra..._j..Nx..@n..6n../r..3n.DA...g.........9.w`B..}6P...u..t...N.....9.zR..Aw....05...]....}<l...[!p{IkI..U.Q.Gb,.>\|.1..S.7O5...T...d&.....-...+-..A&n....c..{[...]R...w?.ro.M......g<2f..D...E.'. ...,Ohy.*..@......8.k}.n....s<..... .....6H.A..1......;....vCM...>.a.F;.N...bU2>..}..........."C.7.o....,...E..j$.V9.A.J@..H.j.....@.(4....>.h.}..}k:.3M...[..B]R....'............................1.!"#3 $5..........:P..A..V"..]j..Vw.0....644+....U........S..Uu...]._`c"1....A.].&@.......I../....V...S..X\Z.o.D.a-.:......q.....y..&\.!ie..4+\|.\|.Yt

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5565)
Category:	downloaded
Size (bytes):	5696
Entropy (8bit):	5.2755543144387005
Encrypted:	false
SSDEEP:	96:LrSnNOuimRBEcuyKwAS0MFAOYIhDNpnnNNUfgDwoHRonA9nC3KAkham:LrSNOuimRBE8DAGiOY6tUfgkh3Kbhl
MD5:	850365F7F8A04EE1B8269EB61A0DED19
SHA1:	05E0FD9917C871EBD5803C7B4A9FF2FBC3C0ACF9
SHA-256:	B481311FA56CB61DD408E62D1A3566F158216BE85A573337AC483F021565A07C
SHA-512:	06A7C16CCCBD6101BCB844331A7B614F415A0454F77DA4437BB26C91BCED340B21004A24CB6DCC84D699EF12D791F91554394402E8ECB9DAEAC939ADA832C4D3
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.c62e1b6a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.Dropdown"],{666:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>y});var i=n(7896),o=n(2784),r=n(78052),a=n(25686),s=n(35193),l=n(11731),c=n(55249),d=n(20023),h=n(50829),p=n(57552),u=n(13867),m=n(74054),f=n(41425),_=n(15686),w=n(70451),v=n(54044),b=n(73186);const g=b.default.create((e=>({rootNarrow:{maxWidth:"75%"},rootWide:{maxWidth:`calc(${e.spaces.space64} * 6)`},anchor:b.default.absoluteFillObject,mask:{...b.default.absoluteFillObject,position:"fixed"},bodyRectHelper:{...b.default.absoluteFillObject,bottom:void 0},content:{borderRadius:e.borderRadii.large,position:"absolute",overflow:"hidden",backgroundColor:e.colors.navigationBackground,boxShadow:e.boxShadows.medium},contentInitialRender:{position:"fixed",opacity:0},contentFixed:{position:"fixed",overflowY:"auto",overscrollBehavior:"contain"}})));class y extends o.Component{constructor(e,t){super(e,t),this._handleAnimateComplet

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11494
Entropy (8bit):	4.5730700893887075
Encrypted:	false
SSDEEP:	192:mQHTjtWwxR4m5zPwOkmhWHzrQXABKid73KhPie80kDLLEd:mix/51QchPie80kDLLEd
MD5:	1FF71CA63503B6940FAAD910BD546C8B
SHA1:	EC6290A4A106A2C05F9DD457A771144C705A7A9B
SHA-256:	F58C73D2C04F59EEF4AF7FBD84362D4FA49188043405516AA35EE8C412D0DBC1
SHA-512:	139E57610FE5311F59D922751D36B24A3D965D334A216AF3645E3C6B9A520717E60A0B612E94E8761EDD811D8AC7AF21696C134B96099FBBAE3B633E60E107F0
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/widgets.js?_=1713936729826
Preview:	/*..DotNetNuke - http://www.dotnetnuke.com..Copyright (c) 2002-2007..by DotNetNuke Corporation.. ..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated ..documentation files (the "Software"), to deal in the Software without restriction, including without limitation ..the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and ..to permit persons to whom the Software is furnished to do so, subject to the following conditions:.. ..The above copyright notice and this permission notice shall be included in all copies or substantial portions ..of the Software... ..THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED ..TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ..THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN A

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (7220), with no line terminators
Category:	downloaded
Size (bytes):	7223
Entropy (8bit):	5.424782662334646
Encrypted:	false
SSDEEP:	192:SPeXPNfVpOIitlomlVkM1xa7bJORaXJCxpvm:KUM1xaWad
MD5:	61A42CB0756F3777D9515E97673090A8
SHA1:	09E87E25D11A41CBEA79BA3CA0272E4334781BDA
SHA-256:	65DF9C602E4E76D6DEC95A16F13B02C16B9F80DEC5FD85A8A098511AC6E4E03E
SHA-512:	B75D0796855AF38E536B4E8ACC9ACF6DFD6D1623633035B0AE84607258FCE4A43FAD621C44CFFBC0453AF5383B5AE0A3DFDF953FE0757B2226E177810DCD2DC7
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/js/dnn.modalpopup.js?cdv=158
Preview:	.(function(n,t){function i(n){for(var t=i.options,f=t.parser[t.strictMode?"strict":"loose"].exec(n),r={},u=14;u--;)r[t.key[u]]=f[u]\|\|"";return r[t.q.name]={},r[t.key[12]].replace(t.q.parser,function(n,i,u){i&&(r[t.q.name][i]=u)}),r}i.options={strictMode:!1,key:["source","protocol","authority","userInfo","user","password","host","port","relative","path","directory","file","query","anchor"],q:{name:"queryKey",parser:/(?:^\|&)([^&=])=?([^&])/g},parser:{strict:/^(?:([^:\/?#]+):)?(?:\/\/((?:(([^:@])(?::([^:@]))?)?@)?([^:\/?#])(?::(\d))?))?((((?:[^?#\/]\/))([^?#]))(?:\?([^#]))?(?:#(.))?)/,loose:/^(?:(?![^:@]+:[^:@\/]@)([^:\/?#.]+):)?(?:\/\/)?((?:(([^:@])(?::([^:@]))?)?@)?([^:\/?#])(?::(\d))?)(((\/(?:[^?#](?![^?#\/]\.[^?#\/.]+(?:[?#]\|$)))\/?)?([^?#\/]))(?:\?([^#]))?(?:#(.*))?)/}};var r=function(){var t=!1;return function(n){(/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobi

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2351), with CRLF line terminators
Category:	downloaded
Size (bytes):	2671
Entropy (8bit):	5.029784205149709
Encrypted:	false
SSDEEP:	48:J05ZJ00Q017MJxs7kRleteRrC48eZx79pGGHGVKhRPT80Ju0wdg0dE0W0WtiGe5H:WGxss8exB+VEZTmUC1uwBD1
MD5:	A103DDD2E05E56449D924026093A0D35
SHA1:	AE17911E5F52C87FE93F69F7299C29D600E6EA58
SHA-256:	95129EF9222401741721AC843515F618206EFFFB5E0FB2DB94E929BC1E4C3FE9
SHA-512:	EE744CC1DFE7B67FAC5F2A28D0C34A495B0F0DF41DFE6A263921D3C4FE69E3C6602273F42DE4935639D96F5187B4CED71ECDB9D80E2AE3E280EAC3777BE4EF5D
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/Scripts/jquery/jquery.hoverIntent.min.js?cdv=158
Preview:	/!.. hoverIntent v1.10.2 // 2020.04.28 // jQuery v1.7.0+.. * http://briancherne.github.io/jquery-hoverIntent/.. .. You may use hoverIntent under the terms of the MIT license. Basically that.. * means you are free to use hoverIntent as long as this header is left intact... * Copyright 2007-2019 Brian Cherne.. /..!function (factory) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], factory) : "object" == typeof module && module.exports ? module.exports = factory(require("jquery")) : jQuery && !jQuery.fn.hoverIntent && factory(jQuery) }(function ($) { "use strict"; function track(ev) { cX = ev.pageX, cY = ev.pageY } function isFunction(value) { return "function" == typeof value } var cX, cY, _cfg = { interval: 100, sensitivity: 6, timeout: 0 }, INSTANCE_COUNT = 0, compare = function (ev, $el, s, cfg) { if (Math.sqrt((s.pX - cX) (s.pX - cX) + (s.pY - cY) * (s.pY - cY)) < cfg.sensitivity) return $el.off(s.event, track), delete s.timeoutId, s.isActive =

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1536)
Category:	downloaded
Size (bytes):	1736
Entropy (8bit):	5.4220973014889955
Encrypted:	false
SSDEEP:	48:iIKlIuew2Q0qq/tbCZ/Jpc+RLOi/CVyI9yRTsOHU+yB6PRWmslIS:OSuewV0H/tWZ/M+RLl/CB9yWYy6PRaSS
MD5:	EE8E86FD6F506D13903FD4BE7A40310E
SHA1:	A69BA06122D090B9089222E3784A7734D29E5911
SHA-256:	7CF78471AAFC320831812854E71548FB0A59A0B0BFDFAC2A1695517090D92A4F
SHA-512:	A29923AEF659AEC53F17FED8663498D38E398609F5273C41407744F714648ED8A5F53FE89563BDF323A8AB9A5965C64A3A9255F59D62A83608E57B3380F56031
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~bundle.Explore~bundle.GenericTimeline~bundle.Ocf~bundle.Topics.26e5bdba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~bundle.Explore~bundle.GenericTimeline~bundle.Ocf~bundle.Topics"],{6319:(e,n,t)=>{t.d(n,{Sz:()=>i});const i=e=>{const n=(JSON.stringify(e)\|\|"").split("");n.sort();const t=n.join("");return r(t,0).toString()},r=(e,n)=>{const t="string"==typeof e?e:String(e);let i=n;for(let e=0;e<t.length;e++){i=(i<<5)-i+t.charCodeAt(e),i&=i}return i}},98701:(e,n,t)=>{t.d(n,{R:()=>d,Z:()=>c});var i=t(97534),r=t(7276),o=t(78772),s=t(62104);const c=({endpointParams:e,endpointUrl:n,isUserRefreshable:t,timelineId:i})=>(0,s.Z)({timelineId:i,isUserRefreshable:t,network:{getEndpoint:e=>e.withEndpoint(r.Z).fetchGeneric,getEndpointParams:({count:t,cursor:i})=>({...e,cursor:"string"==typeof i?i:void 0,count:t,endpointUrl:n})},context:"FETCH_TIMELINE",perfKey:"generic"}),d=(e,n)=>(0,s.Z)({timelineId:`generic-graphql-timeline-${e}`,isUserRefreshable:n,network:{getEndpoint:e=>e.withEndpo

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1748)
Category:	downloaded
Size (bytes):	1971
Entropy (8bit):	5.33036743230486
Encrypted:	false
SSDEEP:	48:iIydDKqN7OUCZAOm01/tBeuQPPjfUlG0WmEdDU:mdOe7OjOOm01/PblXCdg
MD5:	C78FF9C59BAD79F6D81100288EA767B7
SHA1:	F19BA8A54D83DDFEA3066FCAC80364A117027CE9
SHA-256:	8191B94977A4093ECCB8827C644CF5AB86CCF1D213C91D017F1002E867F139B6
SHA-512:	25B7CFEC0B8F03855120B294C1238283E770418D185A68AA8F050AAC144D6CE9E2FB68599C0491AF9AAD5364F22FA246EB41385ABF1FFB8761FC100CF366B541
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.TweetMediaDeta.80329baa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.TweetMediaDeta"],{84246:(e,o,r)=>{r.d(o,{C_:()=>h,I5:()=>_,K2:()=>m,Rb:()=>g,nk:()=>p,sI:()=>C,xr:()=>w});r(6886);var t=r(2784),n=r(27652),i=r(8080),s=r(86765),a=r(27036);const d=(e,o)=>`rgba(${e.rgb.red}, ${e.rgb.green}, ${e.rgb.blue}, ${o})`,l=e=>{const o=e&&n.Z.getForGallery(e);return o?{rgb:w(o),rgba:d(o,.9)}:b},u=a.Z.columnWidths.primary,c=(e,o)=>Math.min(o,e),b={rgb:"rgb(0, 0, 0)",rgba:"rgba(0, 0, 0, 0.9)"},p={transitionProperty:"background-color",transitionDuration:".5s"},_=(e,o)=>{const{containerHeight:r,containerWidth:t,mediaHeight:n,mediaWidth:s}=e,a=s&&n?s/n:1,d=a>1,l=o?400:u,b=d&&s<=l?c(t,l):t,p=!d&&n<=l?c(r,l):r;return i.Z.getContainDimensions({width:b,height:p},a)},g=e=>{const o=e&&e.ext_media_color&&e.ext_media_color.palette;return l(o)},m=e=>{const o=e&&e.profile_image_

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.141565412858599
Encrypted:	false
SSDEEP:	3:RFeBBbBjjHxBAe2FYDxW8:jetdBv2Fp8
MD5:	DE3701EECB9340AE075E05B04BB05A6B
SHA1:	1262474193BC31E859367DF01C4B2B26214A375C
SHA-256:	F475C34186022BA531EBC8BBA97FC10DF7E4C3EA854F314A18AB0644C851620D
SHA-512:	4CCE11ABF10DF2640900C923B0CAC9AE1B80890F52701D5B57AB937C4752E91AEA392ED9439EE24357A6F88AC6F0F79B160A9C080F5670220C29C81B5148C69E
Malicious:	false
Reputation:	low
URL:	https://s7.addthis.com/js/300/addthis_widget.js
Preview:	// AddThis services have been deprecated as of 5/31/23.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	96180
Entropy (8bit):	5.033224608230305
Encrypted:	false
SSDEEP:	1536:whRG/doh8ERju/HeYAYTptPU4wl4KBVI7js9/q9nLBdJFSNSjwXUr8CBCbr2O4f:gu/HztPU4wl4KBVI7js9/q9nLBdFwXUL
MD5:	221BB11EB8B59951EEC7E74473AEEEA7
SHA1:	06B17BC7BBA615C115F86F71A5466C68EA354923
SHA-256:	3A16A896783DD833E5FD03F7D6CFBFBA2F6FE8EA2480052985671FCC1477EBAD
SHA-512:	26DC432D1CFE22465A48C90C857536B14B85D1F01632A6D036E79B862432FDF13F7AA67B7A47A8A893D54BA40C4B9F7E6FA0C55E73EAB66302E32E06A3D313C5
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/js/aesop.js?cdv=158
Preview:	.var donationAmountObj;.var insideCheckAll=false;.var alertdt = new Date();.var delimiterA = '::--::';.var totalAmountVal;.var recurrAmountVal=0;.var totalPercentageAmountVal;.var percentageListName;.var percentageAmountListName;.var insideSetReportDateValues = false;... function CheckPageIsValid() . {. if (typeof (Page_ClientValidate) == 'function') . return Page_ClientValidate();. else . return true;. }. . var pageInvalidMessageCheckbox = 'Errors are present on the page that prevent this option from being unchecked. Even if an item is hidden or deleted, this web browser can not proceed when errors are present on the page. Please repair the errors before unchecking this option.';. . var pageInvalidMessageDelete = 'Errors are present on the page that prevent this item from being deleted. Even if an item is hidden or deleted, this web browser can not proceed when errors are present on the page. Please repair the errors before deleting this item.';. . var pageInvalid

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	289
Entropy (8bit):	5.6127406912167865
Encrypted:	false
SSDEEP:	6:6v/lhPExQlsmrEAaHG0R1kY0zzEIlYdaLTp:6v/7Ml6EfG0TklzELaB
MD5:	FA9ACC855A7C2FF15C7F34036B1E035F
SHA1:	F7007E3B3EAC14E47128D162A6F30028D57EBD99
SHA-256:	7FD26C148CED6C3D8E743B963C3E45655A0D74E97D9D531E9F9138BC27944D7C
SHA-512:	123460015FD25ACFE099DA3342086CED1549E1429C60A9143C3947056E233A70C9532C0ABDA5DCF97F80483D4C511676D6ABFA2A68D36BA37B5E20D9CD5F3214
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yW/r/8k_Y-oVxbuU.png
Preview:	.PNG........IHDR..............W.?...EPLTE........................GpL.............................................n....tRNS.J..7.)..............)..j...uIDATx^u.... .E....!s....6.[....H.+..5.<..nP.+hT..QA....):.oy..f..jE.."4..SU.a.......z..tY[.=$.Ey.4...@Li.!.f~.....,...C....IEND.B`.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 152x152, components 3
Category:	downloaded
Size (bytes):	8176
Entropy (8bit):	7.908831390238996
Encrypted:	false
SSDEEP:	192:3O2PFMOt8g48dh/IF61e47EmNR7tcY6eI32MYfcNUMdlG:3O2PS4VrJEm6Y6ew2Z
MD5:	CC470418AA5D0D0528615FB8535EE58B
SHA1:	D53523341E2DFAE041582CF464FFDA01C56D8EB2
SHA-256:	5B50514A222C061228C81DD77C449DBA2907D512022FA9472522629532750780
SHA-512:	E4E6C28165DF35BAD9045E2FD870769D138254609091CEBE98EC30E4F2B4B2C76C32331B3972729CA297902009DC83E6B96D5F18D63E93AAE157D4A7ABCC7054
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/393310192_718523496989526_6043121057059152698_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=p7c_FRo1cLsAb5rFBd9&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA5tAq0YSchwbtnK_GRq3hJkC8hC9q6B8Jc7xckCu0k9w&oe=662E7B13
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000059030000dc060000d7070000be080000330d000028130000ab130000f514000002160000f01f0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................&..m4+...`..rtA.z!.dc8z9.j.....5AT...X..j]J.UQ.l3#.(.)..8.....U..i..+.D5`.Q...&........ .....X..J..Z~#6..<.tC..D....].m.F...9w.4....;..YG.eTH..:..a....YF.F.T.....@.b.z..'S...h.=..c'..\|z\|..:.!+......y~.0...sC.x...._)e.>U.Z...g..\|z<.......\|..s...T%Yj9W./.Y.q'.....M_4.A.USZ.\|V..x.>o...`..=...J.r.Og..............%..=h.3..`....N.AM.UZ...........+.]v1.\xs....v_ .-{K....,6.p...o.G.)b..lR....u..I3. I ...+...........................!"#1.. $3A.2BC...........P.WN.2.....gnY..r....>..E..H...[....R.s<<.=....h..ZmD.x.1.Bq<.~%yK]...N..[..X.@-l!...0!3....{0{.....K9.g..Y..P..HF.\|G....$'..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3058)
Category:	downloaded
Size (bytes):	3264
Entropy (8bit):	5.440667789021272
Encrypted:	false
SSDEEP:	48:iIKN2qdHYSIA/z24HO7JfDY+DXkRXNCPnxsqhN5ZOz1mTjqpFmnFs6WmsN7:O5dHbIA/z24ulfDjLYEsmNGCWpFYs6a9
MD5:	B72A2A74F5A4AD3292BD63B53928EED3
SHA1:	DFE07AC3AC3BADAAC64E8D9A2D630240CA4608F8
SHA-256:	72B53B2CD0AC08A9D89C3D0B01FE7B15E421AFDB6EA43911A0102172894032FA
SHA-512:	D4B0F6ABA34A9B13D3D2C58C1A2F1D27EB2B78D93D6147459B35F8703EBCD9D37650C0DB406E967351EE07F996B8E3F9DDCBB4131FA9087F6236244CE206CF25
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.dede70da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile"],{34756:(e,t,l)=>{l.d(t,{Z:()=>g});var a=l(2784),i=l(25686),r=l(11839),c=l(73186),o=l(82392),n=l(11258),s=l(6733),d=l(83710),u=l(60673),b=l(95307);const m=c.default.create((e=>({card:{paddingVertical:e.spaces.space12,paddingHorizontal:e.spaces.space20,height:"100%"},cardLayout:{display:"flex",flexDirection:"column",gap:e.spaces.space8,height:"100%"},cardMeta:{display:"flex",flexDirection:"column",gap:8},cardSubtext:{display:"flex",flexDirection:"row",justifyContent:"space-between",alignItems:"center",gap:12},withIcon:{display:"flex",flexDirection:"row",alignItems:"center",gap:e.spaces.space4},contentBackground:{backgroundColor:e.colors.cellBackground},darkModeContentBackground:{backgroundColor:e.colors.gray0}}))),g=({formattedSalary:e,id:t,isVerifiedOrg:l,isViewerFollowsUser:g,jobIndex:

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1704)
Category:	downloaded
Size (bytes):	1927
Entropy (8bit):	5.197299120479853
Encrypted:	false
SSDEEP:	24:iWGKfWGE5pdQuss4d9F1bIuW2aazKtZV0J+aDwBrx97ii6liBrQI+AH6dtt6hrx9:iIK9ssAn1Uu6V0JjOFq8VprgzQWms9q
MD5:	A59562EDDF978D21BD7BDFA24E529B16
SHA1:	F8E8E5FB310E2AB01CD3BD3045DBD58F4CE78B82
SHA-256:	9B222A1C378A698E7C49A8F3456EACBFFDA37A5517F201924D20F5018247437F
SHA-512:	B2198BD29E87310A51AC62B022B89CDEF7B60707ECBFCB93778806FE2CDA30F415FC8890CFC17572CF43E21E760DC875DF660FA47577388A44B8C40648AF4159
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~ondemand.SettingsInternals~bundle.Explore~bundle.Topics~bundle.LiveEvent~bundle.Trend.c76bd12a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~ondemand.SettingsInternals~bundle.Explore~bundle.Topics~bundle.LiveEvent~bundle.Trend"],{16739:(e,i,t)=>{t.d(i,{Z:()=>b});var n=t(28412),a=t(82249),l=t(78772),r=t(24797),s=t(10406),o=t(30669);const c=e=>{const i=(0,o.$)(),t=(e=>{if("SegmentedTimelines"!==e.body.__typename)return;const i=e.body.timelines.map((e=>({graphQLTimelineId:e.timeline.id,id:e.id,labelText:e.labelText,scribeConfig:(0,r.Z)(e.scribeConfig)?void 0:{...e.scribeConfig},refreshIntervalSec:e.refreshIntervalSec})));return{initialTabId:e.body.initialTimeline&&e.body.initialTimeline.id,tabs:i}})(e),n=((e,i)=>{const{header:t}=i;if(!t\|\|"TopicPageHeader"!==t.__typename)return;const{__typename:n,facepile:a,topic:l,...r}=t,o=a&&(0,s.Zn)(e,a);return{...r,topicId:(0,s.S0)(e,l),facepile:o}})(i,e),a=((e,i)=>{const{navBar:t}=i;if(!t)return{};switch(t.__typename){case"TitleNavBar":return{title:t.title,s

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2255
Entropy (8bit):	7.879617216141816
Encrypted:	false
SSDEEP:	48:ZEMsRM8+8oQY5eD6fwqZ0zQWOSUa8mfzXr116:Zo+8b8aR9B8mfDrz6
MD5:	D5846CF6DE7F35908FDDD10B80CD3922
SHA1:	859F953B1EEBA45D84226EAA162D9074FBD59863
SHA-256:	3CF279DE1E7E6E6D792246CC25A70489A7F261E24A91568A628BCF8D185FA666
SHA-512:	088BD64FBC482F303C0336AE14FBE77F12568CB477073DA2223D7791516724C400479A9E5F1E99F0E50E4470A5F9BC9B52AA35B642B8B37A0A8C394EB2D4919A
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=cp0_dst-png_p40x40&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfClAOnz2eJZkYuBO3W0ozHjBvdkizIwnGg14B3XY6bT6g&oe=662E8562
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....SzTXtRaw profile type iptc.........0....i0...<.H.\d.......m...}A.v.\|.`.<...K.+."....V...=T4...IDATX..XkpUW.......y.......B.......?....c..8.:.....t.Z...3h..QT.2T;Z...."$.@.B..w..}...^.87..IH...9g.o.....Z...c.f.....DDc?.4.`..a".Q.6..,.f....a).'u...s]...;..9..a..40ob.,l.T..6..l.D ........m.]....i..l...% (...K._.[t....>O]..>"p..G:_..q.J..`..U...u....U.(.JKPFs.R7u.>h...L..nZR:......%..3........K..I.xF...&..t....cG..[..AW[.JB.....pmi..?}.#1.,pWu...S>.....L.;..q.......N.b].c].....r..!..M*X..@.8_._.....H...r8.o..P...~h{.$..2.u.T.w=\{.=...]..b....U.UD.[P,.[z.G.b.87.....@B......x...}}z...}..u[..-.-21.~v...gn9\|...........i.......V.b@.2.J............K.]../.Jf...Jd.L......N.N/.....`......`.....K..<...b8>.&.-i....)...,0.....W.....B..<G.{....,...Z. ..B.......G........3...=^wWuX3.!.E...7G..7.[!..&._X[US.....-....)..BF.....g.$.bi.....z..@f.X..+.%3....#.aRz....%.9`..hW.MbK.h^Q.~y.4..l`...k.'...B.Y.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19903)
Category:	downloaded
Size (bytes):	1547694
Entropy (8bit):	5.465449928460034
Encrypted:	false
SSDEEP:	12288:km3yMWdqk1DjbYn5QVyiOS9y6ocNoM2WoiMp9Ek:km3ygtn5QVyi91/NyiMpn
MD5:	4E5A4C6DA7EEB641A1529B00CCBC3F0E
SHA1:	FB446C7A8137E8F35285489BD7841E9975BCC08B
SHA-256:	CF7BA6E925B184BEDDAA2DF5F2D42CFDF7A647488520B4679BC232DA7E897FA6
SHA-512:	D49C6D9C6112D19E34F95235925A0321268B5F4172E34B807DBB44F3847985E85BA6FA2056538558860C97DD054A467DF43238C2A06EFCD9A9513566CA854816
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ijuz4/yz/l/en_US/6fCMsyVB7zA.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometStyleXDarkTheme",[],(function(a,b,c,d,e,f){e.exports={"fds-black":"black","fds-black-alpha-05":"rgba(0, 0, 0, 0.05)","fds-black-alpha-10":"rgba(0, 0, 0, 0.1)","fds-black-alpha-15":"rgba(0, 0, 0, 0.15)","fds-black-alpha-20":"rgba(0, 0, 0, 0.2)","fds-black-alpha-30":"rgba(0, 0, 0, 0.3)","fds-black-alpha-40":"rgba(0, 0, 0, 0.4)","fds-black-alpha-50":"rgba(0, 0, 0, 0.5)","fds-black-alpha-60":"rgba(0, 0, 0, 0.6)","fds-black-alpha-80":"rgba(0, 0, 0, 0.8)","fds-blue-05":"black","fds-blue-30":"black","fds-blue-40":"black","fds-blue-60":"black","fds-blue-70":"black","fds-blue-80":"black","fds-button-text":"black","fds-comment-background":"black","fds-dark-mode-gray-35":"black","fds-dark-mode-gray-50":"black","fds-dark-mode-gray-70":"black","fds-dark-mode-gray-80":"black","fds-dark-mode-gray-90":"black","fds-dark-mode-gray-100":"black","fds-gray-00":"black","fds-gray-05":"black","fds-gray-10":"black","fds-gray-20":"black","fds-gray-25":"black","fds-gray-30":"black","

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2025)
Category:	downloaded
Size (bytes):	2252
Entropy (8bit):	5.487321482016616
Encrypted:	false
SSDEEP:	48:iI6XHlx03qVLAyGhOGoS3hV0GpSGJ4WyvOzJ5OWOLL0blKJjZrbsoupTWmQum:mX43qVLAyQOkhi+neHvob0gbliZrbapQ
MD5:	05410F948F06BAFE8E125DB0767A54C7
SHA1:	85BFF3848C245A2358096CB9BCF70285764CF992
SHA-256:	4A27DC469AA20282348378FB5DFB0BCA6533F1476FFC3B2C1798DBF0AF4E6391
SHA-512:	B0E2BC40405FD2D8B0BF5AB0C9DFCB8D05A123845839DAEC8B9A77C58DC6B5866F8BB38A72D0FE6A98E2812D4D5EF61B67F31907C6913895E1D2236A4508B8B9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti.853472ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti"],{37378:(e,t,s)=>{s.d(t,{V:()=>n,n:()=>o});var r=s(27666);const o=750,n={scoper:[{type:"dmUserSearch",regexp:/^[@.]?(.)\|^$/,srcInputs:["compose_message"],scope:{result_type:"users",count:20}},{type:"username",regexp:/^[@.](\w{1,20})/,srcInputs:["compose"],scope:{result_type:"users",count:20}},{type:"hashtag",regexp:r.Z,srcInputs:["compose"],scope:{result_type:"topics",count:20}},{type:"topic",regexp:/(.+)/,srcInputs:["search_box"],scope:{result_type:"all"}},{type:"ttt",regexp:/(.+)/,srcInputs:["welcome_flow"],scope:{count:10,result_type:"topics,ttt"}}],WordBoundary:/[!'%&'()+,\\\-./:;<=>?[\]^{\|}~\s]\|$/,WordEnd:/[^!'%&'()*+,\\\-./:;<=>?[\]^{\|}~\s]+$/}},32941:(e,t,s)=>{s.d(t,{A1:()=>a,D5:()=>h,bR:()=>c,kE:()=>u,sY:()=>d,si:()=>p,xX:()=>i});s(36728),s(6886);var r=s(7

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=\302\251 Copyright 2021 Benjamin Benschneider All Rights Reserved], progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	5664
Entropy (8bit):	7.81683257177889
Encrypted:	false
SSDEEP:	96:V7R3bf7QUnlUuLtunt6qzrEdhbzaEul2abKQtkTc6UjKhptALW3:n3bMuLhwrEnbzOV5eP+2jAy
MD5:	A2C152F6ACD47BFBE694803B52A140D3
SHA1:	7D7FD0C0769850B8F7DB1EA844CC28C37F998648
SHA-256:	F9D15E205A52C829C8068EF15D3CFD56C242D0B2F0CA0654F4FB6E2A5F49FBA4
SHA-512:	2C7DBC4B8BDA51D29350C91E47275480545EEA6F6665B40BD3A321CBFB5E892F796182505C78F808313924CF84FCE3DA0FF19EF901CADDC075BF8BB769C6B87E
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/236827637_10159748894181202_2169988089763910096_n.jpg?stp=c60.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eyUcgU6E1RUAb5oTdVX&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCScx29jxRZiTA0yPYOjhEPmR3Lv84z3u132jZiAKOMrw&oe=662E6706
Preview:	......JFIF.............^Exif..MM..............<......... Copyright 2021 Benjamin Benschneider All Rights Reserved.....Photoshop 3.0.8BIM..........t.;. Copyright 2021 Benjamin Benschneider All Rights Reserved..U..Owner..P..Benjamin Benschneider..(.bFBMD0a000a31020000c9030000f60500009206000041070000a9090000780d0000f20d0000b80e0000900f000020160000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................................:.5u#p......".eTb...i.0.pJ..~r.<@9B7u.Aed.c7".6_.^.".....>..3MI.X..T...(.\| ....[u.mD.x.Qp.O#....%..r..].....H'....gA-L.....h\~-...e....x.....3l.//WCaz.h..#..Io..\|..=..yq..5.....-........R\.R.#.....t....N..s.UZ...;..y..W.s.....l.....9.;F.4=:T.....j.9...4..-).H.&.Mo....c..-r4..9.Y...If..yk.S2\.?E....W.J......#je.^k..(.......x?...(.......................... !#0."1$23@A................>@@<..~...G.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6105)
Category:	downloaded
Size (bytes):	46607
Entropy (8bit):	5.381828255573556
Encrypted:	false
SSDEEP:	768:yFvjyCgt9d+aOMjBwSo3qi1ataFhhuYAAvYir53juPFvUDoXyH:y1yVt9d+aOMjBwSo3XItkuSQFLXyH
MD5:	8510542D687A4D7A73CCA3CA18AEF1DA
SHA1:	40DD42676F8373D99D7CF47FDC670F8C8A83B520
SHA-256:	D3BA773CDBB254AFF33BB8207E9EFEA9131CF5CF53CE6BD0A24C29D68C008D6C
SHA-512:	6EDC4960FA2D3DF10EBE1FCD573DBA29E559FD12A0D45DAE148B8FDF9AF74661020A4FEBEADD65CECE6E20F368F9A3525E92CE16AF164DF2A498A7615F7D3B58
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3idBq4/yT/l/en_US/RS5ioqIRilP.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseCalloutImpl.react",["BaseContextualLayer.react","BaseContextualLayerAnchorRootContext","LayoutAnimationBoundaryContext","react","useCometDisplayTimingTrackerForInteraction"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react")),j=h.useEffect;function a(a){var b=a.anchorRootRefContext,d=a.animationContext,e=a.children,f=a.contextRef,g=a.contextualLayerProps,h=a.imperativeRef,k=a.scrollableAreaContext;a=c("useCometDisplayTimingTrackerForInteraction")("FDSCalloutManager");j(function(){var a=k.map(function(a){return a.getDOMNode()}).filter(Boolean),b=function(){var a;return(a=h.current)==null?void 0:a.reposition()};if(a.length>0){a.forEach(function(a){return a.addEventListener("scroll",b,{passive:!0})});return function(){a.forEach(function(a){return a.removeEventListener("scroll",b,{passive:!0})})}}},[h,k]);return g==null\|\|f==null?null:i.jsx(c("LayoutAnimationBoundaryContext").Provider,{value:d,children:i.jsx(c("BaseContextualLayerAnchorRootContext").P

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56881)
Category:	downloaded
Size (bytes):	72312
Entropy (8bit):	5.061707320740682
Encrypted:	false
SSDEEP:	768:rxTa5Qct6YK+yAjN05Q/rUFycqLsYk5/uyaPYgM/PxC1qdYjYOuO2BJtJ54gGv0p:W3u9VHgz+Sv14
MD5:	73A973AF73208C990CBCB3D2D7A12D8C
SHA1:	9330021C2484648C6C071CE900AD6FE9F42BCAB5
SHA-256:	F86B309D9ACD95E38C3CC8922E25A036F0AA6EA876D9ED78C602DEA15AFD6AED
SHA-512:	0C33E97B05217BA1ADE20151354E2F85719DC9CE4EF2960C14086A9A716B37C40068086EBFC48C9704848670DA19297C0292253399134F800145A0D786B12128
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yD/r/siu8qci3VGY.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("groupsCometFetchStoryQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7649103848515777"}),null);.__d("groupsCometFetchStoryQuery.graphql",["CometTextWithEntitiesRelay_textWithEntities$normalization.graphql","groupsCometFetchStoryQuery_facebookRelayOperation","CometImmersivePhotoCanUserDisable3DMotion.relayprovider","IsWorkUser.relayprovider","IsMergQAPolls.relayprovider","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","StoriesArmadilloReplyEnabled.relayprovider","StoriesTrayShouldShowMetadata.relayprovider","StoriesRing.relayprovider","EventCometCardImage_prefetchEventImage.relayprovider"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"feedLocation"},c={defaultValue:null,kind:"LocalArgument",name:"feedbackSource"},d={defaultValue:null,kind:"LocalArgument",name:"focusCommentID"},e={defaultValue:null,kind:"LocalArgument",name:"id"},f={defaultValue:

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23050)
Category:	downloaded
Size (bytes):	23183
Entropy (8bit):	5.403906623357904
Encrypted:	false
SSDEEP:	384:Nx3se3t8GWNi35pfUq8lr5BqiKxPlvvKDlA1HjMZNDxHalnazdW/BNeOAxdWnP9v:Nx3se3t8GWNi35pfUq8lr5BqiKxPlvvn
MD5:	7A2314D992DDB2899434E9884417C4D8
SHA1:	905F19C52429B8C93E3E1B020F638F73C3F6F4DE
SHA-256:	AEB6DCFB9A3F86A9C5A2544AF5CDF1645E2EAF9E4094AE23245B91FC2EE8E692
SHA-512:	C56A651CA5E4EBEE60DCAB07125276524C9EE70883B1500FE9BE2DD19790450B8F869705682D610D19B10A17C59BC7C91C3744BE2EA77EE26206675E0700C59E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.WideLayout.1706937a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.WideLayout","icons/IconStarStroke-js"],{18892:(e,t,n)=>{n.d(t,{g:()=>r});var l=n(7896),a=(n(36728),n(2784)),s=n(25686);function r(e){const{style:t,type:n,...r}=e,c=[i.container,t];return n===o.transparent&&c.push(i.transparent),a.createElement(s.Z,(0,l.Z)({style:c},r))}const i=n(73186).default.create((e=>({container:{backgroundColor:e.colors.cellBackground,borderWidth:e.borderWidths.small,borderColor:e.colors.borderColor,borderStyle:"solid",borderRadius:e.borderRadii.xLarge,marginBottom:e.spaces.space16,overflow:"hidden"},explore:{backgroundColor:e.colors.gray0,borderColor:e.colors.gray0},transparent:{backgroundColor:"transparent",borderWidth:0}}))),o=Object.freeze({transparent:"transparent"})},33243:(e,t,n)=>{n.r(t),n.d(t,{default:()=>l});const l=n(666).default},51507:(e,t,n)=>{n.d(t,{$6:()=>r,eY:()=>i,zt:()=>s});var l=n(2784);const a=l.createContext(!1);function s(e){re

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9847
Entropy (8bit):	4.803859749476966
Encrypted:	false
SSDEEP:	192:HQHL8ncmZwSecqis9I4IKjiukpM3TUeFnUKW5NykDgoF1bmrRoT7pu4oa:He8p3AnkDtmrREuI
MD5:	957C08B502066363B0C5E6B6EC816DB8
SHA1:	08BA7841C65563A171BD87258AA7F0DE29969FAF
SHA-256:	5D32861C9E13B8222C4973C8461F1D01AA8252AAA1558324178E5C1529E11E4C
SHA-512:	92D3C9BC48C686F89EC4A6E4F81E846E32EE811BCCEDC7D32334F05EFC697D2A3856B89E6A30148F58C77F67A50BFF155D9BE81400B0B031EE270E570DB9933A
Malicious:	false
Reputation:	low
Preview:	/*. DotNetNuke - http://www.dotnetnuke.com. Copyright (c) 2002-2007. by DotNetNuke Corporation. . Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated . documentation files (the "Software"), to deal in the Software without restriction, including without limitation . the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and . to permit persons to whom the Software is furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all copies or substantial portions . of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED . TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL . THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1981)
Category:	downloaded
Size (bytes):	2204
Entropy (8bit):	5.365051773963279
Encrypted:	false
SSDEEP:	48:iIy+DYpoVfj3H0NCePQB/XajuZjcGMh3aKLCnAEG/gxZWmE+DzEc:m+kpIjHi1oBautMU8UZC+n1
MD5:	9CCA41DAD06CC8B336F0D4732B40680A
SHA1:	6B599691C0D16B996A19F9ADFD690E9CBD762C08
SHA-256:	90EAE774EFF7C88E20FA7CD4AA6277ECAFB18CE05AADB60744A1374921849FA5
SHA-512:	846497C41A47704A28C0DB89C4E71CF31B56DAFD3BCCAA22535D3D69BEE18D991DDCB39F92369B842BECF114B077E27F9C1DBF41DB93BD1A038DD2803B720665
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex.6ae55eea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex"],{80717:(e,t,i)=>{i.d(t,{Z:()=>y});i(6886);var s=i(2784),a=i(25686),n=i(29432),c=i(35953),o=i(82392),r=i(44329),l=i(29496),p=i(36776),d=i(12408),m=i(73206),h=i(73186);const g=h.default.create((e=>({root:{paddingVertical:e.spacesPx.space32},rootWithImage:{paddingTop:0},graphic:{marginBottom:e.spacesPx.space20},icon:{alignSelf:"center",height:e.spacesPx.space64,width:e.spacesPx.space64},container:{paddingHorizontal:e.spacesPx.space32},description:{marginTop:e.spacesPx.space8,marginBottom:e.spacesPx.space4},actionButton:{marginTop:e.spacesPx.space16}}))),y=({actionPrimary:e,actionSecondary:t,children:i,headline:y,icon:u,iconColor:w,image:k,onDismiss:P,shouldDisplay:b,text:x,withMask:Z=!0})=>{const[E,C]=s.useState(!1),f=e=>s.createElement(d.Z,{onDismiss:T,renderContent:()=>

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30355)
Category:	downloaded
Size (bytes):	30492
Entropy (8bit):	5.214057629063731
Encrypted:	false
SSDEEP:	768:Km6y1APXLe4r5tO9mYBFZqwnigCg1BgZbEeZrqfAWHxWDFIOvS4ktHF9E7ztCuxi:jLeXP0LEaobkfa8vl1
MD5:	673C8EE7D12799495A7FE5C2C1B0C29A
SHA1:	7C0EA4AC8C968DD445BF0EC3E94D39BFE9C2C705
SHA-256:	8ED47D98C34FA9C604F2F322B3B26A32020025656A2A292B70C3357EF0985AE1
SHA-512:	F7E281CDB72B4E3AB20DE18F5E45F5207F60DCA3B45513B727E343DDD79DDE6CF12D7C359BB96B16205AA6135BFD5283730126DF109872E42B7A9B194D11FCA2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.TimelineRenderer.71fd2d4a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.TimelineRenderer"],{24147:(e,t,n)=>{n.d(t,{X:()=>r,g:()=>i});const r=e=>({id:e,distanceToViewportTop:0}),i=e=>({id:e,distanceToViewportBottom:0})},4434:(e,t,n)=>{n.r(t),n.d(t,{EmptyState:()=>Ge,TimelineRenderer:()=>Ke,default:()=>je});var r=n(7896),i=(n(6886),n(36728),n(2784)),s=n(23288),o=n(1206),a=n(16587),l=n(74428),c=n(11469),d=n(6149),h=n(87398),p=n(79575),m=n(20545),u=n(24147),_=n(90237),g=n(36187),v=n(52612),y=n(78149),b=n(13131),f=n(60673),w=n(65621),C=n(1276),E=n(48501),T=n(46303),S=n(8329),I=n(35193);const k={threshold:[.01,.5]};const x=class{constructor(e){this._itemsUnderObservation={},this._lingerCandidates=new Map,this._reactivityCandidates=new Map,this._lingerEvents=new Map,this._impressionEvents=new Map,this.dequeueLingerEvents=()=>{const e=Array.from(this._lingerEvents,(([e,{end:t,start:n}])=>({id:e,start:n,end:t})));return this._lingerEvents.clear(),e},t

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3196)
Category:	downloaded
Size (bytes):	3419
Entropy (8bit):	5.338458656328098
Encrypted:	false
SSDEEP:	96:mBggeD1Aa/bD5aoz9FaIN2gyEvJ0q6gvk3CBQ:TgO1Aabs+7oCh7vO
MD5:	1C437CF6D665121216BCCAF1724C27CA
SHA1:	335B57CE14CA5E634EF0411A98C33CD7F7A93B7E
SHA-256:	BF0CFE2B8864E1D4775737B82040C7C68B3C6D0CC1CF31C2B7D6AFD1894A3C8F
SHA-512:	5781F45C23D38A12BC5E510E2DEDE2D48A5D54282D5686F30E6F627BEC39176AE2814B89E0E2FEF521DC3C51654DBB746295908C1359267CE589BED57DCFC76A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5044215a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl"],{9082:(e,t,o)=>{o.d(t,{Z:()=>d});var a=o(7896),s=o(2784),n=o(25686),r=o(73186),i=o(77559);const c=({children:e,component:t,fab:o,shouldRenderFab:n,style:r,withoutBottomPadding:c,...d})=>{const b=t,p=n&&!(0,i.ZP)();return s.createElement(b,(0,a.Z)({},d,{style:[p&&!c&&l.root,r]}),e,p?o:null)};c.defaultProps={component:n.Z,shouldRenderFab:!0};const l=r.default.create((e=>({root:{paddingBottom:`calc(${e.spaces.space64} + ${e.spaces.space20} * 2)`}}))),d=c},18578:(e,t,o)=>{o.d(t,{Z:()=>w});var a=o(7896),s=(o(6886),o(2784)),n=o(25686),r=o(41425),i=o(54044),c=o(73186),l=o(74054),d=o(29496);class b extends s.PureComponent{render(){const{accessibilityLabel:e,backgroundColor:t,color:o,disabled:a,href:n,icon:r,label:i,onPress:c,renderMenu:l,style:b,testID:u}=this.props,m=((e,t)=>

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17886), with no line terminators
Category:	downloaded
Size (bytes):	17886
Entropy (8bit):	5.2799472411880615
Encrypted:	false
SSDEEP:	384:kpooAiYQ+uNg4ZXh5bJP3NBZJoAS962mtyVycDDwzg3NvpLk6bQR2XsyD0GeaNYR:kpoXyNBBP37S96vsUbzgNpLk6bQR2cyQ
MD5:	106F187566D86D99A36969127A7C1DC4
SHA1:	56F237A37EAA4CB7DD5C3B243E37FD8D04162BC6
SHA-256:	4FD09B8C63C21189EF3F3C038A3171EA883167F981D2D05028446BD26FE68A8E
SHA-512:	3E294B412D873D68FE6321F19974E42DA940C6ED0015F33546F153106D0ABCFD14D896B89BE4637E26A07A27EB7F0152E97BDF1AB817A01F9D8732F16D10F679
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/js/dnn.js?cdv=158
Preview:	var dnnJscriptVersion="6.0.0";if(typeof(Sys.Browser.Chrome)=="undefined"){Sys.Browser.Chrome={};if(navigator.userAgent.indexOf(" Chrome/")>-1){Sys.Browser.agent=Sys.Browser.Chrome;Sys.Browser.version=parseFloat(navigator.userAgent.match(/Chrome\/(\d+\.\d+)/)[1]);Sys.Browser.name="Chrome";Sys.Browser.hasDebuggerStatement=true}}else{if(Sys.Browser.agent===Sys.Browser.InternetExplorer&&Sys.Browser.version>10){HTMLAnchorElement.prototype.attachEvent=function(a,b){if(a.substr(0,2)=="on"){a=a.substr(2)}this.addEventListener(a,b,false)};HTMLAnchorElement.prototype.detachEvent=function(a,b){if(a.substr(0,2)=="on"){a=a.substr(2)}this.removeEventListener(a,b,false)}}}if($&&$.ui&&$.ui.dialog){$.extend($.ui.dialog.prototype.options,{open:function(){var e=$(document).find("html");e.css("overflow","hidden");var f=e.find("body").scrollTop();if(f>0){e.scrollTop(0);var d=$(this);d.data("cacheScrollTop",f)}var a=$(this).closest(".ui-dialog");if(!$("html").hasClass("mobileView")){var c=$(window).height()

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (668), with CRLF line terminators
Category:	downloaded
Size (bytes):	22487
Entropy (8bit):	5.008005090748075
Encrypted:	false
SSDEEP:	384:Ptp4DDrKFfGQH+X7jVDLPfLk2+SZ2IBm1G:WPPfL3jaG
MD5:	279A779E20D4DAAD6FA9855004DA0010
SHA1:	004FC9BFC4CB2A8E63695FE0B5F886E977E63A48
SHA-256:	43A400CC4C30FC5E45147E54C0DE460616B91A9B51714F249CA9AF92E8585AF9
SHA-512:	0FA5C334DD84D53F1E53D90069D7B46F10B7F1099D22534C9FC4798364CA070D7B7178AC223E6FB029ED2B332B938401757F4945F1370E36CE95A4D2F35701CB
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/font-awesome/css/font-awesome.min.css?cdv=158
Preview:	@font-face{font-family:'FontAwesome';src:url('../font/fontawesome-webfont.eot?v=3.2.1');src:url('../font/fontawesome-webfont.eot?#iefix&v=3.2.1') format('embedded-opentype'),url('../font/fontawesome-webfont.woff?v=3.2.1') format('woff'),url('../font/fontawesome-webfont.ttf?v=3.2.1') format('truetype'),url('../font/fontawesome-webfont.svg#fontawesomeregular?v=3.2.1') format('svg');font-weight:normal;font-style:normal;}[class^="icon-"],[class=" icon-"]{font-family:FontAwesome;font-weight:normal;font-style:normal;text-decoration:inherit;-webkit-font-smoothing:antialiased;margin-right:.3em;}..[class^="icon-"]:before,[class=" icon-"]:before{text-decoration:inherit;display:inline-block;speak:none;}...icon-large:before{vertical-align:-10%;font-size:1.3333333333333333em;}..a [class^="icon-"],a [class=" icon-"]{display:inline;}..[class^="icon-"].icon-fixed-width,[class*=" icon-"].icon-fixed-width{display:inline-block;width:1.1428571428571428em;text-align:right;padding-right:0.28571428571428

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1455)
Category:	downloaded
Size (bytes):	1678
Entropy (8bit):	5.262743406159459
Encrypted:	false
SSDEEP:	48:iITgwrgWfwWPfHXWvgfFSfHNXFFj70xRnLMRWmtghq:Hg0LTfQgsfNVFj70x9gjgA
MD5:	31FE4DA3567A16BFA8A1C0FA82AA4822
SHA1:	3375B89C1568AD394F6BDB76F304F6CD04AF2D4B
SHA-256:	75610E8D8A4102A38EBD25C47521D3AC9DA926542D6D25AA6234F5E7FB4FBDF6
SHA-512:	70E5747F3BDAF33A039B037D2FC45BC87D640C9C4EDB144E875A647716EAB32ED59BA0FD6DB377AAE130DFB1B7EA77A5DA501468783A45D3FB86858EC00EC7ED
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.TweetCoinDetails~b.c58a905a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.TweetCoinDetails~b"],{16411:(e,a,l)=>{l.d(a,{Y:()=>o,Z:()=>g});var n=l(7896),i={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"UserAvatar_user",selections:[{alias:null,args:null,concreteType:"ApiUser",kind:"LinkedField",name:"legacy",plural:!1,selections:[{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"screen_name",storageKey:null},action:"THROW",path:"legacy.screen_name"},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"profile_image_url_https",storageKey:null},action:"THROW",path:"legacy.profile_image_url_https"},{alias:null,args:null,kind:"ScalarField",name:"verified_type",storageKey:null}],storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"profile_image_shape",storageKey:null}],type:"User",abstractKey:null,ha

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18915)
Category:	downloaded
Size (bytes):	43237
Entropy (8bit):	5.680707641754852
Encrypted:	false
SSDEEP:	768:5RWw2BBHWtPd0h3A4LWhNzrXNAtU9ArbM+AI99yNIE:5QBZWtmw4LqPXNIU9ArbMP
MD5:	A20A57297296210AE55C26306436FCE5
SHA1:	AF8363C369F8FD23868093CE0FF02C8D88C229C0
SHA-256:	2DE52103B1FEEB037AF1757A1D10CB77A335258410AFF50F3CC4B93589357FDB
SHA-512:	E0BD233E5F75ECCC4D5018E1F7A4650D13BDD84D4DDCBB1BF482CB35CC836B85CE146F0A2B41DEA578CECF05FB8E7A6C9B6F28DC79A81801A9898B700860020C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/../*. License: https://www.facebook.com/legal/license/t3hOLs8wlXy/. /.__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$/i,d=Math.ceil,e=Math.floor,f="[BigNumber Error] ",i=f+"Number primitive has more than 15 significant digits: ",j=1e14,k=14,l=9007199254740991,m=[1,10,100,1e3,1e4,1e5,1e6,1e7,1e8,1e9,1e10,1e11,1e12,1e13],n=1e7,o=1e9;function p(b){var g,h,x,y=a.prototype={constructor:a,toString:null,valueOf:null},z=new a(1),A=20,B=4,C=-7,D=21,E=-1e7,F=1e7,G=!1,H=1,I=0,J={prefix:"",groupSize:3,secondaryGroupSize:0,groupSeparator:",",decimalSeparator:".",fractionGroupSize:0,fractionGroupSeparator:"\xa0",suffix:""},K="0123456789abcdefghijklmnopqrstuvwxyz";function a(b,d){var f,g,j,m,n,o,p,q,r=this;if(!(r instanceof a))return new a(b,d);if(d==null){if(b&&b._isBigNumber===!0){r.s=b.s;!b.c\|\|b.e>F?r.c=r.e=null:b.e<E?r.c=[r.e=0]:(r.e=b.e,r.c=b.c.slice());retur

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6090)
Category:	downloaded
Size (bytes):	6277
Entropy (8bit):	5.309786768451611
Encrypted:	false
SSDEEP:	192:BFLfcIdO/26yHqjsoTpzdziqRqN7luir3QW9CMn0vjjjU:77cDyaocirAs0vjjA
MD5:	C8398EE881CED9AB9054699B8512962B
SHA1:	70D359F6AA77E32FBEB1005731F60BA77354DF96
SHA-256:	231B14BDEF60089B21A8E30A6B9B7716E3C280025C8544A8B35D7EA9AD5BDD5D
SHA-512:	442D5BCA54A255368D56D7E7ABA3495B3D60C2ACF17121FB2B684FC57EFE4857C68D17E7D7F0EC124EA6C533FC8227EAA710B65C12DE86F4941D7EE4AE22DC2E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer.a2e6b3aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer"],{92462:(e,t,a)=>{a.d(t,{Tc:()=>o,yt:()=>r});a(36728),a(6886),a(2784);var i=a(6556),l=a(55249),s=a(39466);const n={autoplayPrioritizationPolicy:a(17323).Qr,minimumVisibilityForAutoplay:.25};class r{constructor(e=n){this._players=[],this._setPlayerState=(e,t)=>{e.previousPlaybackState=e.playbackState,e.playbackState=t,this._updatePlayerStateForDocking(e,t)},this._updatePlayerStateForDocking=(e,t)=>{if(t===i.q.USER_PLAYING)if(this._updateDockedVideo&&e.registerDockElement){const t=e.registerDockElement();this._updateDockedVideo(t,e.id)}else this._updateIsUserPaused&&this._updateIsUserPaused(!1);else t===i.q.USER_PAUSED?this._updateIsUserPaused&&this._updateIsUserPaused(!0):t===i.q.AUTO_PLAYING&&this._updateIsUserPaused&&this._updateIsUserPaused(!1);this._updateInlinePlayerState&&this._updateInlinePlayerStat

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5915)
Category:	downloaded
Size (bytes):	6043
Entropy (8bit):	5.466971018891144
Encrypted:	false
SSDEEP:	96:dcL8TYQ+zULtVTIStbhJvP0ysbEMNg+CEtYQ6glnlBgqR14gZ9qtA6:dcgTIze8Sh9IfNgBEtYDmlBf4Eqt1
MD5:	15BD8C3F211B187FC3C24E4408621205
SHA1:	F2D52BA08D84B38D264442C32B1E250557E5CAE5
SHA-256:	0625B1AEC28FB22D217A3CE53579330C1CA18F1E38F96C70B9EDF80E634E8A9B
SHA-512:	6FF0508F5EB0604D929052AA85E74EA251AE483D6C53479DA66E684BCD7D0C825EC864C870ED83131CDC1F20351E20455E25DCE51E15DD2B232AAE0B11F4D751
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.SideNav.031f858a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.SideNav","loader.AudioOnlyVideoPlayer"],{4361:(e,t,i)=>{i.r(t),i.d(t,{default:()=>L});var a=i(2784),n=i(25686),s=i(54044),l=i(73186),o=i(40312),r=i(52577),c=(i(6886),i(45184)),d=i.n(c),p=i(47636),m=i(29496),u=i(11731),h=i(82392);const g=({disabled:e,icon:t,isExpanded:i,label:n,link:s,onPress:l,testID:o})=>a.createElement(m.ZP,{accessibilityLabel:n,disabled:e,hoverLabel:{label:n},icon:i?void 0:t,link:s,onPress:l,size:"xLarge",testID:o,type:"brandFilled"},i?a.createElement(u.Z,{animateMount:!0,duration:"long",show:!0,type:"fade"},a.createElement(h.ZP,null,n)):null);var b=i(60673);const v=d().ee69d769({verb:""});class y extends a.Component{constructor(...e){super(...e),this._handlePress=e=>{const{analytics:t}=this.props;t.scribe({component:"new_tweet_button",action:"click"})}}render(){const{composeOptions:e,isExpanded:t,testID:i}=this.props;return a.createElement(g,{icon:w,i

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 177, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7303
Entropy (8bit):	7.860646772141492
Encrypted:	false
SSDEEP:	192:AafLZ3TzdkUpBN3MnG4WGOwhiYLUNlQLc:jfLJTxDpBZMG4niXlQLc
MD5:	5FF833A3E0296C7BE5E130413D6F0431
SHA1:	6CB1CFBA275E5047F186EF39B6163ADF66137221
SHA-256:	25524E1E2D251DA55AA20821BE2B39A7EC96BA956B197E2D974D7C6F3D44006D
SHA-512:	366BA42BC157B98113DB3345B48B5DD1F7482CA0C9C4FD51B0868B19F97CDF029F3639C35DC454A8D63C73A69B783C1B2A9CADFEB1088095AC4C5B717C199BA1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Ly....PLTEGpL.................................................................................................................................................................................................................................................................................(.8............................................................;;;...................................................................x..\|..x.........................................o......................................x..v....................v..w..............................................eee................w.....w.........................................w..w.................v..w........x..x..x..w..w..w.................w..w..v..v..............w..w.....w..w..w.....w.............n~f....tRNS........>......~..Z...8.H.)f.....,.$.pd...MP...!.............^B.vET.J...x...:i5\....2rzl.X...<a...6......@.....~q../..6.....3..J.!.@,..P.z.e]X......../..@F.!R.@...l........

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3184)
Category:	downloaded
Size (bytes):	3407
Entropy (8bit):	5.103482387413591
Encrypted:	false
SSDEEP:	48:iIBxNFjA4Rg3Lo7sh5rS9zGbz2OXiVpK397qXGbzH6Fg+GLABl5Nqh301q9LmFdZ:Z9A48++UW7hHOVl3E3uqRyd1tV
MD5:	FFDEDB1C42FA76B23E0742CFF28E983C
SHA1:	A782717BFBBC63C668BE32A38D23CA960E2BD031
SHA-256:	DD0F2BD4E0A80401DC916A93176E0FD34FDAC2A8B48F5E5F094B833887710BF9
SHA-512:	3CF42D4690CCE98730D7511F9978B9F0616BB94CBDD33C60F04EF60BBD7B91527D10752A9F325C86F2BC9520232625D9E8B3D7915F35DBBCB09565DB90F64008
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l"],{11731:(t,e,i)=>{i.d(e,{Z:()=>u});i(6886);var n=i(2784),a=i(40342),o=i(25686),s=i(40080);const r=Object.freeze({normal:100,long:250,longer:500}),h=Object.freeze({animate:"animate",static:"static",prep:"prep"}),p={height:"auto",opacity:1},m={height:0,opacity:0};class d extends n.Component{constructor(...t){super(...t),this.state={animateStage:h.static,animateProps:this.props.show&&!this.props.animateMount?p:m,renderChildren:this.props.children,componentHeight:0,props:{...this.props,show:!this.props.animateMount&&this.props.show}},this._transitionStart=({componentHeight:t})=>{const{props:{show:e,type:i}}=this.state,n="fade"===i;e?this.setState({animateProps:{height:n?"auto":0,opacity:0},animateStage:h.animate,componentHeight:t},this._requestNewFrame((()=>{this.setState({

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	45660
Entropy (8bit):	5.907863825754591
Encrypted:	false
SSDEEP:	768:D2J8FpAuYQFcenF9AclzvnxQSAyn8+cQGQMoFLyZi:D2J7uYrenrASzaSA3+cCK4
MD5:	E9385DCE39C5167754C02EE58CBE9539
SHA1:	3CEC73883BAC7811DEAAEAAD37FD169A13EA7291
SHA-256:	E790F53E529219A3FB8B3579CB5BEB36276C2A98C02D612757CCEC5917940B79
SHA-512:	8F046BC02C35E87CB79A54265FA7008AEF54BC3015438307A70850F00FE49EACEB48CD50EE77AF906DBA719A201305B6E3E0F215CC3D54D23BE457CD9FDBA78F
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AfCOHOiTQWr87AQIbi_TO8UIAXibgPGQj-vu1mHxXN9QEA&oe=6650164B&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.580622094395224
Encrypted:	false
SSDEEP:	6:6v/lhPEuLl/bbtoyl1AViPh3QY32V65Mm+27hVp:6v/7MuLl/bbqzuQY32s9
MD5:	AE278E7804E28C2733CEE9883DA38CE9
SHA1:	09DCBA0885D6F8094617831C6D1A16AD7A1689CA
SHA-256:	D07B8B3DE27E367F307A22F81DDD52AB9BB68A47E71376B9674316910A863B4D
SHA-512:	5CD4D885BCEBCA2DBF1CAE0F88211399E7F723ED7BB95FB10DA9C92408DB637A660604C0C54E3D9F10E0DBCDDFA194269567F6F48C885C4964EB60789C33F545
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png
Preview:	.PNG........IHDR..............W.?...lPLTEGpL.........................................................................................................N......#tRNS....Q...U........../b..*.v....:9........IDATx^m.G..@...83J.bp...?. hu.....&....,..(}.AZ.S......15D.&.p..@..#.......1.R...5....p..0..9^1..L.H./........M...).v......\|..)E. j.}..>.=...?&...u..-....IEND.B`.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	185639
Entropy (8bit):	5.369726919563593
Encrypted:	false
SSDEEP:	1536:i6uBFaVvs6LE1gGr45JaUNbHXRkgKFvEd9q6XQYUoYGJrCTUcDLph/Sk6H7+VEqK:iubHXiAsXcrC4iLph/Sk6H7+qn1qir
MD5:	BBACB4269C2BA0D70D159AD3059732CC
SHA1:	0CD37CF5542C360569B223B1C4E43FB37B2E26DA
SHA-256:	7DB7E105B3F73922A032D92531C9BFD59AA98A41C110F2BA098189D6BA67FD4D
SHA-512:	1FB5F509FE1E8D1CD15E62C5F00B96711C49F95FDA4CB0BF4CC9F88B265B0E91895A239BD07C333449DA03464BF92FEA4550A3217E9BA535A84AB8A35FDF1556
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP.5a28b8fa.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP","icons/IconPlus-js"],{96138:e=>{e.exports={queryId:"TYpVV9QioZfViHqEqRZxJA",operationName:"BrowseSpaceTopics",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},96135:e=>{e.exports={queryId:"Sxn4YOlaAwEKjnjWV0h7Mw",operationName:"SubscribeToScheduledSpace",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},2582:e=>{e.exports={queryId:"Zevhh76Msw574ZSs2NQHGQ",operationName:"UnsubscribeFromScheduledSpace",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},89150:(e,t,s)=>{"use strict";s.d(t,{S:()=>n});s(6886);var i=s(15579);function n(e){return(t,s)=>{const n=e.analytics.contextualScribeNamespace,r={...e.details,scribe_context_namespace:n,...s},[,o,a,c,l,d]=t.split(":"),u={page:o,section:a,component:c,element:l,action:d},h=

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9847
Entropy (8bit):	4.803859749476966
Encrypted:	false
SSDEEP:	192:HQHL8ncmZwSecqis9I4IKjiukpM3TUeFnUKW5NykDgoF1bmrRoT7pu4oa:He8p3AnkDtmrREuI
MD5:	957C08B502066363B0C5E6B6EC816DB8
SHA1:	08BA7841C65563A171BD87258AA7F0DE29969FAF
SHA-256:	5D32861C9E13B8222C4973C8461F1D01AA8252AAA1558324178E5C1529E11E4C
SHA-512:	92D3C9BC48C686F89EC4A6E4F81E846E32EE811BCCEDC7D32334F05EFC697D2A3856B89E6A30148F58C77F67A50BFF155D9BE81400B0B031EE270E570DB9933A
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936714250
Preview:	/*. DotNetNuke - http://www.dotnetnuke.com. Copyright (c) 2002-2007. by DotNetNuke Corporation. . Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated . documentation files (the "Software"), to deal in the Software without restriction, including without limitation . the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and . to permit persons to whom the Software is furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all copies or substantial portions . of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED . TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL . THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6756
Entropy (8bit):	4.943823679998798
Encrypted:	false
SSDEEP:	192:Gzlkq+gKr4qpYt0pSjgiJ0MwHa4o+lld/9p6:1qxKr4qSoSjgiJ0XHDhlld/j6
MD5:	AAC18EC46CDFF4E56D77EC8EE1DEC2C1
SHA1:	81F294310D14E041A3E3F58595A33306097DE207
SHA-256:	E13171DD374E3750F9CCFC1B8AFAF4D4BBAA6838C9550FD3ECC9A39D9EA128FB
SHA-512:	C23CF65449B2ADD4BF6689CE5FB7D3904D057FB008E5C5494447872EB4D7450D5A455ADFC32B64894CCC781179CD7E6BB48C8EE4C2F62C271C57ED5349948D53
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AfDYWr_jHKdDH1-MmgHxR3uRWnZ9KnBaTGYBEecV00bNkw&oe=665011E6&_nc_sid=7da55a
Preview:	....KEYF....................@.....1C..1C.."@...A......................................................0.................................................H.......$...(...,.......p.......l......?...?.......B.......B............................(...@...X...p.......0...... ..............................................(...8...<...@...P...............@....r..$....... .....+?..+?8......@@.....1?H.......D....A.A\...........................\|...@................... ...........{.>@q=.A....\.....A......?Aq=.A<........... ...........\...=..@....{.>@........\.....cAt........... .............A........q=.A=..@......?A................ .......4...q=.A..A@.....Aq=.AL...q=.A..cAl.......`.....?Aq=.A............................................ .......H...$..............>..{?.....a.?..u?.a.?...................?..?.......>...................?..?.......>............H.:?H.:?(.....@0....r.@8.......4...]..?\@'A....................$...(...,...4.......t..................c.T.......k.................

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	95926
Entropy (8bit):	5.0345720332959925
Encrypted:	false
SSDEEP:	768:xWSXnq5QOSNVPGTMVFrKFMTsNPtIdSD/mIJGhl:xWUnEQOSNVPGTMKwj
MD5:	EEA8EF3A551358BED31C6C5E77ED286C
SHA1:	4D4020C756C5431778B21F9263D1AFC06464B6FC
SHA-256:	F40F0A1D815E17E5C437F8AFA327E3E384E15552BE76F74EF7D01E3CB03C8CB0
SHA-512:	BA06348DA92C231B1A83AC24851BD1B378D9DE29826E4ABD66B71F629B4F2D4FE2158BA3C76B2DC51019042C440AB283BE52EB0B5CE023F0E8006C7AF0AA4400
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Portals/_default/default.css?cdv=158
Preview:	.@charset "utf-8";../* CSS Document /..../ ---------------------------------------------------------......* Filename:....default.css...* Description: ...sets typography, basic grids, .........and standard formstyles...* Version:....1.0.0 (2012-06-16)...* Author:....Ryan Martinez......== INDEX ===============================================......$__generic classes..classes used globally, should be at bottom to prevent semantic inheritance.....------------------------------------------------------------/....../-------------------------------------/../ RESET /../-------------------------------------/..../ http://meyerweb.com/eric/tools/css/reset/.. v2.0 \| 20110126.. License: none (public domain).. */....html, body, div, span, applet, object, iframe,..h1, h2, h3, h4, h5, h6, p, blockquote, pre,..a, abbr, acronym, address, big, cite, code,..del, dfn, em, img, ins, kbd, q, s, samp,..small, strike, strong, sub, sup, tt, var,..b, u, i, center,..dl, dt, dd, ol, ul, li,..fie

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1717)
Category:	downloaded
Size (bytes):	1940
Entropy (8bit):	5.477559838650895
Encrypted:	false
SSDEEP:	48:iI+NQs2I+lVOz1sVUgZBAweIqJFgI+lVOz1sbQHSFNWmkNQ2:mQ9I+lMJgZ/qLgI+lMMQH2NCQ2
MD5:	B237F557F31E8198D47DE7F1446B300B
SHA1:	8A2FAF7AA52BB33A9B572B4EC80F039208969206
SHA-256:	C50AAD126D88A9B91C6F935DB8A4D514841D1E4DA8D1C1967BB2A4A3F9A780A2
SHA-512:	9E37F84FFEB0E49D9418B8E59839E37AC2EA4E0782DCBB2E192E624098CF3079CAE07AF291DB20DBF699D36ADE4B8A73175E9A1FB700CE207728E0894111EE69
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA.979f34da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA"],{73624:(e,i,t)=>{t.r(i),t.d(i,{default:()=>r});var c=t(2784),s=t(90601),l=t(83427),a=t(73569);const o=(e={})=>{const{direction:i}=(0,l.Z)();return(0,s.Z)("svg",{...e,accessibilityRole:e.accessibilityLabel?e.accessibilityRole\|\|"img":void 0,accessibilityHidden:void 0===e.accessibilityLabel,style:[a.Z.root,e.style],viewBox:"0 0 24 24",children:c.createElement("g",null,c.createElement("path",{d:"M23 3v14h-2V5H5V3h18zM10 17c1.1 0 2-1.34 2-3s-.9-3-2-3-2 1.34-2 3 .9 3 2 3zM1 7h18v14H1V7zm16 10c-1.1 0-2 .9-2 2h2v-2zm-2-8c0 1.1.9 2 2 2V9h-2zM3 11c1.1 0 2-.9 2-2H3v2zm0 4c2.21 0 4 1.79 4 4h6c0-2.21 1.79-4 4-4v-2c-2.21 0-4-1.79-4-4H7c0 2.21-1.79 4-4 4v2zm0 4h2c0-1.1-.9-2-2-2v2z"}))},{writingDirection:i})};o.metadata={width:24,height:24};const r=o},2669:(e,i,t)=>{t.r(i),t.d(i,{defa

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4745)
Category:	downloaded
Size (bytes):	4968
Entropy (8bit):	5.3220673307206
Encrypted:	false
SSDEEP:	96:mzU+MIalGHRJdgpj6b4AauBO7xzH6ahqme7jHS9KO:S1MBGxzgpeb4juB24ahqme7jyf
MD5:	83EED627309A3C20F141E64FD5756E19
SHA1:	E36576FC7E83F046B72DDB1E3E8E597D02CA8EED
SHA-256:	320E36A5B37B6E70BE8A894E837AB05C32507DAC504291B51F5293C254FB4D3A
SHA-512:	2A19F9197EB8E7C72863409F39D11AE1124846BE9E1FAEB9F4F0B45C6A193104E4D07009D915874C4F443740525B494E5E22104024B85776B51E587D961C3F03
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa.ca47dc2a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa"],{72983:(e,t,s)=>{s.d(t,{Z:()=>h});var a=s(7896),n=s(2784),r=s(77799),o=s(68472),i=s(73186),l=s(45184),c=s.n(l),d=s(51405);const p=c().aa6e3300,u=({retryMessage:e,...t},s)=>{const i=r.Z.isOnline();return n.createElement(o.Z,(0,a.Z)({},t,{icon:i?void 0:n.createElement(d.default,{style:m.icon}),retryMessage:i?e:p}))},m=i.default.create((e=>({icon:{color:e.colors.gray700,fontSize:e.spaces.space32}}))),h=n.forwardRef(u)},84292:(e,t,s)=>{s.d(t,{Z:()=>B});s(6886);var a=s(2784),n=s(25686),r=s(45184),o=s.n(r),i=s(82392),l=s(29496),c=s(50829),d=s(54484),p=s(54044),u=s(71791),m=s(73206),h=s(73186);const f="confirmationSheetDialog",b=o().e23b20a0,g=o().bb5d8cd2;class w extends a.Component{constructor(...e){super(...e),this.sheetLabelledById=(0,d.F)(),this._handleConfirmPress=e=>t=

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	13996
Entropy (8bit):	6.4808029254950394
Encrypted:	false
SSDEEP:	384:wDR0LU1BkpRxm0umWLUUWg/Oj3uBcUb6i:wDRy+BERx/WnOj+BcM6i
MD5:	45F16F38355B24F1F6E0503656B43BC7
SHA1:	09915E39E188CC8F66B1287F6D32F68E3CB0C195
SHA-256:	7901D70D2E03B2564F43FE21E60721AF0284B0D1E1305E8CDDE646CF6180E0A9
SHA-512:	74F242C6C9339AA49BE6A730DEBBCD7F99801448CBB6E79FFE60A96F8C92A5564D3F9E31AF7F600BA3FACE36DE402F0F4DE2E253D1D32A5C6C97BB97CC7A5FF8
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............\.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d........................................................................................................!a.1Q..Aq."2R....B..#br.S..3C..........................!1AaqQ"............?..g..y.\|..2....@.).8.t.2...f...1....)..DL...x."i..F....m_.3.....d..?.......>=a.\|z.GU...N......Y^8.."..G3....J.P.h.....%K=.^.'..0..0.....ix....*..eI....,'..\....g?.?.....Z.v.5M.r.#.....m.0....o..t.q...e:..N..S.q...e:....7 .+..>\|FA.S..?.`...L...$....N.%_nG..L....r.......L..$....S<....<..D~:."?.c.K..M....T.f.C...>...(F..oDF.,oE)...)Z,......,..Q.W...).b.....x.:.".o.....o......Q:.{.:8z.[..~...5.3.~.L(2...A.S..?.`...L.....)^.t...e)...S..r.......V.&ej...Z..'.%..px3....qE...+..TF..L.i<...9.g2e.J.,.^4U.UO.e.!.-....tv.......R.n.V......Z.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	3654
Entropy (8bit):	7.929794863313375
Encrypted:	false
SSDEEP:	96:m81wykoJW6gVZtxI0R7HsCKmtkdEWuohv5mB0MYOi:WyBW3ZNR7V1WjoWMYn
MD5:	33BD87C2B4EF2AD0510E4B3A37D17814
SHA1:	06615E15E9D25EE4A93201ACA763D36796E32B54
SHA-256:	EEDA93F9B15F022D2BDEBC392425AB5A136CA49DDDBCDE4144D12E77F03EA7CE
SHA-512:	D650B352DE05117AB2473B680D3AC5831CBF07CE17E8185FF74D3F080A6A7A69174F2DEBFB278562F26A78AB7262A107567F655A162882E428049B7BF6575552
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx......w.....fFw.l...y1.-.X....5..Q..:.o........:^&..d2.L&...}....Vi..vk.. ..C..6Z..(.....s...9.Q...m.e.k.kX8..j..2S...ent.27y...[.N.p..Wg..~....D.....c.f.".l.1>q..C2y....;....~;..{...7....%n.....V).W.?.....^...\^.\.%.U....D/.J\........,..N.].C.u...."..F"..a.n!....u%.....n..%..T.1.J...^.'..1m.O......b\.q..KE_."$..P.3...KHH].].<k...VxV,...JH`U~V.q...GHh=F.E.=h...fyPD=a....yB..e....yK.\|.ZHQ...9.k.RV...D@.Z....W.(..........Z....{.....;.@;........m..kl.m.......a.......Z.=.w}]_.n.....^......t~nB.....J...h...S.%...AQ?..S..m....B.J.Nk..d.s....T...n.t^.Y.........~..P..$.\|.....Nz&.......}...>.B.7...O?...D-$[.I.d.......D.^.6.....(B).Q.d..I.....m.HT..<$A.b:.<F.....~.....J........6."...w.....U...ql.$b..$..i.D.:.........D... .[.W.g,.E.(.)...9!{;2..d..\|$V.r.....$.....V...p...UtCb4..)!..t..1><.......\|J..$.Eb.?.%.......q..<1..g5.Qo.kY......-./&.2......r.D..\|*D.....qvg...'/....RI..:..$?.........<\.a...m...5...

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3693)
Category:	downloaded
Size (bytes):	3830
Entropy (8bit):	5.380581861448766
Encrypted:	false
SSDEEP:	96:EQsTX/Bd3lQjymshUvhGI0Irbk4jKNxnWX7YJ14YxqmN+QP4xQd5lAH+dvcj7:EQ0X/X1QjHs+vEI08tsJbxFh56HB3
MD5:	C54815A6EA644B8EB84C3BF4CD9F347A
SHA1:	77D44A79B184804682EBB136C7E99D1BA044B709
SHA-256:	2860C601D323315E397A2FC7B52524444BAFB49F4A95D626314DBB9D8D3A9CF1
SHA-512:	7D7A3A1073A4772A8A1DB0266923F688053F2DCB4D6884EE162D3A92A10BDB7C2CB2B69F59806F152913EE5A8035F49D3EF2D3D94FBABB6EABDCA95F0ADE1D7A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/ondemand.ProfileSidebar.359a202a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.ProfileSidebar"],{14770:(e,t,i)=>{i.d(t,{Z:()=>n});var a=i(15830),r=i(78772),s=i(62104);const n=e=>(0,s.Z)({timelineId:`userMedia-${e}`,network:{getEndpoint:e=>e.withEndpoint(a.Z).fetchUserMedia,getEndpointParams:({count:t,cursor:i})=>({count:t,cursor:"string"==typeof i?i:void 0,userId:e})},formatResponse:r.Z,context:"FETCH_MEDIA_TIMELINE",perfKey:"userMedia-GraphQL"})},15933:(e,t,i)=>{i.r(t),i.d(t,{ProfileSidebarContainer:()=>D,default:()=>k,toRelativePath:()=>T});i(6886),i(85940);var a=i(2784),r=i(8443),s=i(73186),n=i(88796),d=i(45184),o=i.n(d),c=i(1206),l=i(63140),p=i(33252),m=i(48501),u=i(17651),h=i(23803),I=i(23335),f=i(78149),_=i(92160),g=(i(67694),i(24949)),M=i(13737),w=i(58955),Z=i(52612),b=i(24433),E=i(62854),S=i(14770);const y=e=>(0,S.Z)(e),v=[],x=(0,g.P1)(((e,t)=>y(t).selectEntries(e)),E.Z.createHydratedSelector,b.f1,((e,t,i)=>(0,M.Z)(e,(e=>{var a,r;if(e.type

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7960
Entropy (8bit):	5.141328952672597
Encrypted:	false
SSDEEP:	192:LPkA0vcyfoSRngTpOwFhvzV9jIXHoIhFzQmuHv:LVovFzQt
MD5:	B67195ECA4A31362B5B9F4390E99B550
SHA1:	74CAC3A48323BB487D316951DCE15D8EDE9720C8
SHA-256:	B7F9668CBDE145292B79C2AB8C719F77B9DD7F04C82B1F6D74EDB18FDBA329C1
SHA-512:	1CE65A3948F54E0F327DD1426C4FEC711C741A08EFD581A80813E1C2214A6E7938BC2782E084432D8CD46715F98900007F31AB55E4B186FB2A2004848C24AF69
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Portals/3922/portal.css?cdv=158
Preview:	/* ....text: This is the site-wide style for body copy, this could be defined in....the BODY tag if preferred..../ .......text {.. ..font-family: Verdana, Arial, Helvetica, sans-serif;.. ..font-size: 11px;.. ..font-weight: normal;.. ..color: #000000;...}......text2 {.. ..font-family: Arial;.. ..font-size: 12px;.. ..font-weight: normal;.. ..color: #000000;...}...../ ....containerhead: This is the header for the Top and Bottom container. Text ...is white to work with orange background, defined in .top.../ ......containerhead {.. ..font-family: Verdana, Arial, Helvetica, sans-serif;.. ..font-size: 16px;.. ..font-weight: bold;.. ..color: #ffffff;...}....../ ....top: Defines the top of Top & Bottom container header area (the orange....background).../ .......top {.. ..background-color: #F97419;.. ..font-family: Verdana, Arial, Helvetica, sans-serif;.. ..font-size: 16px;.. ..font-weight: normal;.. ..color: #FFFFFF;...}...../ ....containergray: D

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	449
Entropy (8bit):	5.241004473252711
Encrypted:	false
SSDEEP:	6:6v/lhPEebYMZnpb1CV3wJXNMso+u6IsHLXQ1ALQ4o11e4oHtHxF/lljp:6v/7MebznpSAJXNtssrXQ1Kke3/l7
MD5:	0C3DD7D811D03BD31B6A980A2B4E9D23
SHA1:	59DDC6BC3EE1EA0BFAC535C31E10737CD9346392
SHA-256:	56C5E0EDE6CFB29F13460D959D86532F6AB6A61862F5E207856840F24B7C376B
SHA-512:	DA97E9D804761F78F6E5CF5338FC5D7EC58226E89B61B24E1080BCA3156E006DC7C217EE2827D23B95987F3F9FA9103C40BB6A101C350F1F3359583C239A4083
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE..............................................................................................................................................................L....3tRNS.........../..M..Ba.....9..........k.....n.%......i>.....IDATx.]....0.@.........^......cr...f.....m2..c.$...6..;..E...~.........$Ca....).9:8.. ..G%!.e.+Sc7....EC..WiC........+.$. ..iH._..d.Ex.?.u...}[...).^..}.\|...p.[_....IEND.B`.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x200, components 3
Category:	downloaded
Size (bytes):	38823
Entropy (8bit):	7.981957302322352
Encrypted:	false
SSDEEP:	768:g+vh+m1k7pk5KDen+auyoXNVhaTGJR4dtUzwbNbrMVrpevewE:tvhlq7pk5KS7uXokWNE9cvewE
MD5:	D617C9D18C0CB9505EF39C3DDBB29386
SHA1:	28F458A68ED0FCA31FFA4C57410AF72A40885833
SHA-256:	E1561DDA276E8502766B92BDC420824963E5F40B0394898C4CC562B34409B73C
SHA-512:	F07B23518F5FB316ED454C186C3C7965C3ADEE0146E4A8E8A6D6324138EB71B036C9E0758F7038CFFBAB34546760142EA9B038F3F030DA58E227CDEB5DC2AD21
Malicious:	false
Reputation:	low
URL:	https://pbs.twimg.com/profile_banners/34733701/1688412966/600x200
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................X.."................................................................................u..!.u.t.I>..$.d..gXE.....E...I..v9.&"-(...Dc8...Hfv"1.H.g.+..0......R.R..2.G..S..:]'..n......R>.#.... ......J/<c/O..t.!I..e.8..b...O.'X2KfN.&ts3. ..h..J,.2m.2f.i6.i1..1....(...p.J$F2f..._?AY'.....m].Pv.>OJ.;.^.y.{.......\m....tN.).\|.J...$#.Y...9..;?..u.vC'e...t.....d.l.b.].d..g.......&!E.Be^.j.E....l...6:?E.......aH.E...ph.Sm\|~...k....lk}.Z.6u.6....9.d6[k,q.....l.j..t.gb....._..n.\M.u.sb....Gn.<.m.U.....m.f......\.....F.+ K..f.."5.F9....U.V..l.&.=.m].Z ..m>..E.{:3.#.....Vqz.m3......n..".?c.n...~....j..D]6.z.M.J..%s.iO..^ob...e..C.....;..e.[.ke.VQ...>'.uyX.....:..%}z@...L..6.j5s.VW.;.!..R.A.pde......7.[...._e.v.L'KB..nz.4...}\..n....H...wD...=..(`.l....W...n....J=...>.B0%.l..u.X...E.71..(....*E.{.e.B`..Q....V

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x155, components 3
Category:	dropped
Size (bytes):	8174
Entropy (8bit):	7.90431181396452
Encrypted:	false
SSDEEP:	192:S/wq0WOjc4OO27XgOVOaX3XjDz3pC9MaZN4m32wPN9ThS9ky:EMrX27gOVOaX3XvTpC+CtLhS9v
MD5:	240D273EF48B8B87BC55189B623DC870
SHA1:	5BE5351682F9D3D40B76821154BA4ED59A203174
SHA-256:	59A803A88193CF2F6795112452F182BAECBC6A640794AC5CB47EA439A317D90E
SHA-512:	94C36D076BAA08E93E4FA4701B1E58A28F0A94AE03ED7B7FB168FFFD47DEA89CC2E4D1B951B9BFCEC7D6C7F5A5125889F8A5B270EE7D795A7A616A05B664BD2B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100007803000054070000ee070000880800005e0e000080140000fb140000a015000050160000ee1f0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................c`.I<.go.....s......V..(f..r..es<....rVz..BeNp,;s....u/F.kw..&i..,.=.4b].....'{U.vV.F.s\....Q"1I.V.....T%.h.}.....Z..ynD3G..m;...r....z..i..f.<....=X......).j..2....k..L..K'.p_...L...F..aAa.t...y.N.9.C}yh.c.g..9.:..$.......n>.."...Y.D..AhTq.......1..0...1~......#...g.U..+..8C:...#...].>=..SW..r]<...`.._...\|De..MIZ..Av#.............Li.u..@).@.c.a.../...I...Sf..b...z.`.p..2...]. kk3.>.s...<.h....>.$.Q.XJF43X...f%.:....+cd...S.....\|...-............................!"14#3A..25 %B0..............8.q..3h.6.o..2...../........Q....hmV]..g.9..eUW?.U..Q....I7.%.K0.v..... c0Q....J.....e3.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4689)
Category:	downloaded
Size (bytes):	4823
Entropy (8bit):	5.298973895298312
Encrypted:	false
SSDEEP:	96:EoH+6QlVMymFk0Xy87+hj+vdaA95FMJNdpyNl8DGtQyZZkT/gHOW:ExyymFk0XL+jIP9bQJM8T/8T
MD5:	F5A0143F4AA079B0CF65ABB29A9ECA0B
SHA1:	051180762F224D360FF168E26401D84EE0103393
SHA-256:	344D3D7ADFE434FF0E742DD4E16516D1E2C2EA084543F3801429010359CC7C43
SHA-512:	95D096E715E4BFDA870F839AB04D2E71E8919B067D8F48401D682D90BAEAEA02A1B237F313302037CCFFB7BD0547A47144ADAD13244B9551ACF9C12519D0DCFD
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.c18477ba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.NewTweetsPill","icons/IconArrowUp-js"],{23508:(e,t,r)=>{r.r(t),r.d(t,{default:()=>k});var a=r(2784),n=r(25686),l=r(6555),i=r(49650),s=r(82392),c=r(37800),o=r(79866),u=r(11839),d=r(73186);const p=d.default.create((e=>({root:{backgroundColor:e.colors.primary,borderRadius:e.borderRadii.infinite,boxShadow:e.boxShadows.small,justifyContent:"center",paddingHorizontal:e.spaces.space16,paddingVertical:e.spaces.space4},pillContent:{flexDirection:"row"},icon:{alignSelf:"center",color:e.colors.whiteOnColor,width:e.spaces.space20},facepile:{marginStart:e.spaces.space4,marginEnd:e.spaces.space2},pillText:{marginStart:e.spaces.space4,alignSelf:"center"}}))),m=function(e){const{ariaHidden:t,ariaLabel:r,label:l,onClick:m,userAvatarUrls:f}=e,h=o.Z.generate({backgroundColor:d.default.theme.colors.primary,color:d.default.theme.colors.whiteOnColor});return a.createElement(u.Z,{accessibilityH

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	11494
Entropy (8bit):	4.5730700893887075
Encrypted:	false
SSDEEP:	192:mQHTjtWwxR4m5zPwOkmhWHzrQXABKid73KhPie80kDLLEd:mix/51QchPie80kDLLEd
MD5:	1FF71CA63503B6940FAAD910BD546C8B
SHA1:	EC6290A4A106A2C05F9DD457A771144C705A7A9B
SHA-256:	F58C73D2C04F59EEF4AF7FBD84362D4FA49188043405516AA35EE8C412D0DBC1
SHA-512:	139E57610FE5311F59D922751D36B24A3D965D334A216AF3645E3C6B9A520717E60A0B612E94E8761EDD811D8AC7AF21696C134B96099FBBAE3B633E60E107F0
Malicious:	false
Reputation:	low
Preview:	/*..DotNetNuke - http://www.dotnetnuke.com..Copyright (c) 2002-2007..by DotNetNuke Corporation.. ..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated ..documentation files (the "Software"), to deal in the Software without restriction, including without limitation ..the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and ..to permit persons to whom the Software is furnished to do so, subject to the following conditions:.. ..The above copyright notice and this permission notice shall be included in all copies or substantial portions ..of the Software... ..THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED ..TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ..THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN A

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32988
Entropy (8bit):	3.418914174938565
Encrypted:	false
SSDEEP:	192:Vt4NWWCt2D1vuIZMUZYJfuAiLx5yaHVJPzVUpZmweLg:kUHtyu8o5cHVBBUuw8
MD5:	698CACBD6425CBD82C0F33C203D5F8A8
SHA1:	EFDC18316BA3970312D99D39F9D8CAC03486BC33
SHA-256:	1636263A397C0270062F251EF13B8702F3DD1A04AFCB8B261CC0B6C21C37B31C
SHA-512:	AB785818253777DC56987B067F0224A61520B303EA827F44A4FE466F8E312155B7AA671BA938975B3D0D1AFF32395F2BA2A5CA5B1062095B33E28C366E7208BF
Malicious:	false
Reputation:	low
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ....................................................................................................................................!...6...K...\...h...o...n...h...^...L...9...#................................................................................................................................................................................................... ...Y...................................................................a...&...........................................................................................................................................................................Y...........................................................................................b......................................................................................................................................................a....w..............................................

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55130)
Category:	downloaded
Size (bytes):	55353
Entropy (8bit):	5.480753654533614
Encrypted:	false
SSDEEP:	768:Lpr0txaMNWbukN1lZkVN8lUkd8lzb+vckxqiQjG+slvuNbm3HGJpTg+0lq9iUEwE:KtXyX8iQJpfc4ZpZDB5+JeM
MD5:	168EAF24E485A59799E7F7C3456297C3
SHA1:	56AB1230B706852E0C1D03FB34B325879FBBFD16
SHA-256:	0BAD463AAD20E90AFAC7B192CC1519D2DA1022B485FD67A827A3D48DA089DB6D
SHA-512:	5E1195447D5F3965958A9C82EA0C2BBB753C64B7176DCFE1D45D9D86D1430BF3BCCD44C97FF119A0E6B39C2B8F94860421F284B1E247679812397326AE6E69D0
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD.30d39e3a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD"],{8893:(e,t,i)=>{"use strict";i.d(t,{s:()=>n});var a=i(10622),s=i.n(a);function n(e,t,i,a){return s()(e,t,i,a?{networkCacheConfig:{metadata:{isFatalError:a}}}:void 0).toPromise()}},17492:(e,t,i)=>{"use strict";i.d(t,{k:()=>s,Q:()=>n});const a=(e,t,i)=>{const a=new Date;let s=a.getFullYear()-e;const n=a.getMonth()+1-t;if(n<0)s-=1;else if(0===n){a.getDate()-i<0&&(s-=1)}return s},s=(e,t,i,s=!1)=>e&&t&&i?a(e,t,i)<18:s,n=()=>(new Date).getFullYear()-120},45610:(e,t,i)=>{"use strict";i.d(t,{$r:()=>H,O9:()=>V,ZP:()=>$,vK:()=>q});var a=i(45184),s=i.n(a),n=i(521),r=i(17824),o=i(31862),l=i(5255),d=i(455);const u=s().b8098028,c=s().b36f4170,h=s().hab3781e,m=s().f6c4fb02,p=s().g0af3dd2,g=s().b8c8b0be,_=s().ica6d718,f=s().b28d44f7({limit:15}),y=s().i1db7d13,w=s().baac0ed7,S=y({limit:512}),v=s().

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (911)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.377891538560955
Encrypted:	false
SSDEEP:	24:iWGKfWGE5jvNF2spYiNJXWMxQBq2IvoBTh6uKoN6uG8X7zuNnQX460XtXpT5ILYf:iIKNF2s5XWRI2IvWhTKGTG8X7zuNnQXs
MD5:	5B23FFECC31AF9069359AD1CA321EB93
SHA1:	38ABCF713AC11398037AFA19FD0B743502EDAD7B
SHA-256:	44A76A40E290A4CE043B5FB5B98F66384C75190E7FEC57FE33C8C3789D123788
SHA-512:	26FBDBA410664AAE04CFF06F7980A7766603668E426D2DF30A61546E73223EB289F097CE8EFD629614A10B45538646261096722FE8A2BC1F835357D02FD2E59A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.Account~bundl.49f07aba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.Account~bundl"],{37320:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var r=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var r={},t=0;t<10;t++)r["_"+String.fromCharCode(t)]=t;if("0123456789"!==Object.getOwnPropertyNames(r).map((function(e){return r[e]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(e){n[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(e){return!1}}()?Object.assign:function(e,o){for(var a,c,i=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");retu

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10908)
Category:	downloaded
Size (bytes):	47013
Entropy (8bit):	5.602561723044988
Encrypted:	false
SSDEEP:	768:8+664qxKgHo6UBs86b6KoPoq/LjRbzWIsZEA7AG:8/2KgHZgsFbToPrjRbSI2EK
MD5:	B0EFF6457338C7A38DDC5DA08356216E
SHA1:	684A92B56312BEA3F80436B2166865AB01627C4D
SHA-256:	8E90A0F3BB55D636EF4AFFFEA9F98E841D89201B7A9B091AB8DDBE433F1949D9
SHA-512:	2A5F67B90F076A71E025DA8C098EC1A0E069639962BE6EBD16172C6004CA1CC4805DA54430B10618A3630484AB9E155BBAB671B7E2DB306D8CD609606C4FDBAD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/IuxUKXNocsT.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("GroupsCometMemberProfileLink_group.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"GroupsCometMemberProfileLink_group",selections:[{alias:null,args:null,kind:"ScalarField",name:"answer_agent_id",storageKey:null}],type:"Group",abstractKey:null};e.exports=a}),null);.__d("CometDisabledContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(!1);g["default"]=b}),98);.__d("BaseBadgeAligner.react",["BaseView.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={center:{alignItems:"x6s0dn4",end:"xoo4vsp",left:null,right:null,start:"x1mb8mph",justifyContent:"x13a6bvl",$$css:!0},left:{alignItems:"x1cy8zhl",end:"xoo4vsp",left:null,right:null,start:"x17qophe",justifyContent:"x13a6bvl",$$css:!0},right:{alignItems:"xuk3077",end:"xds687c",left:null,right:null,start:"x1mb8mph",justifyContent:"x13a6bvl",$$css:!0},root:{bottom:"x1ey2m1c",display:"x78zum5

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7786)
Category:	downloaded
Size (bytes):	8009
Entropy (8bit):	5.276784555286341
Encrypted:	false
SSDEEP:	192:Z+RCYs2hrnaeOetRZnwAaJRlrpeLmfMEy5dGGCzyUBS:Z+k+v5LmfmdGGCzyUo
MD5:	CE358DAC8D53AFD8D3EA60D42AE07AB0
SHA1:	5B0428D779AC7A773F08F7B524532E741F9D49D7
SHA-256:	84BA314ECE83802137999C8021EE7BB6DD65BDBF99DABBFBC753D0C052D3A2EA
SHA-512:	EE09A4E654EC1785B5FF766A6474D9D81618D1105577B84AE1196FFE18721B8D1002C0A6BAA614F7B069B5C82979450D86FC56C8723CBC51085C05C4EF968016
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.b382915a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye"],{38250:(e,t,r)=>{r.d(t,{o:()=>h,Z:()=>g});var a=r(7896),s=(r(6886),r(2784)),i=r(28316),n=r(12934),l=r(73186),o=r(5422),c=r(31798),p=r(32307);function u(e){let t=d(e);return e=>{const r=d(e);return(0,p.Z)(t,r)\|\|(t=r),t}}function d(e){if(!e\|\|"object"!=typeof e)return e;const t=JSON.parse(JSON.stringify(e));return delete t.dataUsageBytes,t.tracks=t.tracks.map((e=>("number"==typeof e.currentTimeMs&&delete e.currentTimeMs,e))),t}function h({children:e,periodic:t}){const r=t?y.PeriodicContext.Consumer:y.Context.Consumer;return s.createElement(r,null,(t=>{const{aspectRatio:r,containerRef:a,guestsState:s,playerApi:i,playerState:n}=t;return i&&a&&n?e({aspectRatio:r,guestsState:s,playerApi:i,playerState:n,containerRef:a}):null}))}class y extends s.Component{constructor(...e){sup

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15560)
Category:	downloaded
Size (bytes):	15783
Entropy (8bit):	5.395610785322069
Encrypted:	false
SSDEEP:	384:ZQvO97IPAvQ1q342HKJ7WC8hOChlp8dRfk7xEBQE6I:ZQ2lPvQ1q342qJyC8hphlWRfk7xEBQEX
MD5:	11AAC7CDA3DC71CA4D1B7E237D01C8F1
SHA1:	77F8F264F0D4747BC49F09081BB16020F84F8CCC
SHA-256:	2CCDC9385BAED53AC55AF7D2566C0883434C2C245CB73F56701F0DF24E7C889F
SHA-512:	092B2C4E12A7398DF192D2200F3B4B177A776F5F589BF46B1D2407679ACEA1AB31391844738317E6B0A5DD844D62E63CD59744965CE00D701AB30620DEE0FF94
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle.1582bdea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle","icons/IconDraggable-js"],{23564:(e,t,i)=>{i.d(t,{Z:()=>G});var s=i(7896),o=i(2784),n=i(25686),a=i(8443),r=i(45184),h=i.n(r),l=i(23637),c=i(85496),d=i(26770),p=i(42885),u=i(44477),m=i(6149),g=i(29496),v=i(73487),_=i(8080),y=i(50329),f=i(73186),b=i(86765);const w=f.default.create((e=>({mask:{backgroundColor:"transparent",borderWidth:e.spaces.space4,borderColor:e.colors.primary,boxShadow:`0 0 0 9999px ${e.colors.activeFaintGray}`},circle:{borderRadius:e.borderRadii.infinite}}))),S=({circle:e,height:t,width:i})=>o.createElement(n.Z,{pointerEvents:"none",style:[w.mask,{width:i,height:t},e&&w.circle]});var C=i(52661),M=i(27931);class E extends o.Component{constructor(e){super(e),this._previousTouchDistance=0,this._previousPositionX=0,this._previousPositionY=0,this._centerPos

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45939)
Category:	downloaded
Size (bytes):	130991
Entropy (8bit):	5.096498947870095
Encrypted:	false
SSDEEP:	3072:Lk5uEi/bA+TnJDpamoObnmodwbwnwmwowd6/yW8RNK+blic1rU6fJGnjkuC6hfMu:Lablic1rU6fJGjQ6hkefClYsIwC
MD5:	F486BD5743FF12CAF69BB9FD5B7E1CBE
SHA1:	E28909105CD5B69B8A42FA413314FD342830C52B
SHA-256:	18519B94BD9139E48D695C6C8B9938D63C1478EB67CA98543D9B27D5A7BFBDB8
SHA-512:	C106CFBBBAC625ECCEC9A5EF46E154AD5D8DF3ECEEC8C1D5E12F9F8AD3710838074AA770005A19C9D850FEEA36CC372A126207F5AFBCCC2DAD2DD1530F76E8DF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iQbs4/ya/l/en_US/AgKumEiNrse.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometImageFromIXValueRelayWrapper_sprite.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometImageFromIXValueRelayWrapper_sprite",selections:[{alias:null,args:null,kind:"ScalarField",name:"sprited",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sprite_map_css_class",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sprite_css_class",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"preloading_spi",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"w",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"h",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"p",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sz",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"spi",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",na

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4343)
Category:	downloaded
Size (bytes):	4502
Entropy (8bit):	5.323886799225987
Encrypted:	false
SSDEEP:	96:aBvQHoHwKArO1GNG4E3yJ3xmNGKAVeIuiypwy8sItTsDWoH:aBvQLXs7GKgeNiyW98H
MD5:	A23C0467A8CBC2EE3EDFBFB144CEEA1C
SHA1:	BC9C5C6D38390518C9D7EC0CDD1056D01D953936
SHA-256:	FF80CCCBCDFA2713FC95AC0FC6511A0280D41DD6A08D1C9937E0491CAA4889A9
SHA-512:	7CBD36820386811D53E937373694C9E53922C6EF655B96BC4BFC42A1100E5B024923FEC94EE2747088DF5AC522567A826D975901B725B64DE82A1D9D904EBE4A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.e4ff644a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.LoggedOutHome"],{7604:(e,t,n)=>{n.d(t,{Z:()=>s});n(6886);var o=n(2784),r=n(7267),i=n(54987),a=n(54882),c=n(67304);function l(e){return!["/i/flow/login"].includes(e)}const s=(0,a.Z)((function(e={hideCookieBannerPicker:!1}){const t=function(){const e=(0,r.TH)(),[t,n]=o.useState((()=>l(e.pathname)));return o.useEffect((()=>{n(l(e.pathname))}),[n,e]),t}();return!e.hideCookieBannerPicker&&t?o.createElement(i.Z,null,o.createElement(c.Z,null)):null}))},67304:(e,t,n)=>{n.d(t,{Z:()=>_});var o=n(2784),r=n(1477),i=n(39466),a=n(48501),c=(n(6886),n(25686)),l=n(82392),s=n(94917),u=n(29496),d=n(73186),m=n(45184),p=n.n(m),f=n(60673),w=n(3670),b=n(85665);const g=p().d8817e36,h=p().b9288ee6,k=p().i1390ec2;function E(){const e=o.createElement(p().I18NFormatMessage,{$i18n:"e4af7661"},o.createElement(l.ZP,{color:"buttonWhite",link:"https://help.twitter.com/rules-and-p

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43604, version 1.0
Category:	downloaded
Size (bytes):	43604
Entropy (8bit):	7.995192328692737
Encrypted:	true
SSDEEP:	768:R+QWnyBqXVeQrVoVQndu3nOzfptn+j8AV1vfreYK1isjfPxPOmlcIALUS+mtFHCh:svH46VoVgdeOzj+j8evfr0LZPNlcXqm2
MD5:	409FEE54DA01EDB6597F55DF853B2820
SHA1:	1B13B8D79C77D9825F0F604560DCF364D66EA996
SHA-256:	2D7D69FD3B4B6EFA9E0DEFA4F734EA1FCAB62AF8E7AE52F9F0C1238E8066FD7F
SHA-512:	468B16418F5191BDDAAD28B8A849B72BEED5119E6AF13CC659FC6B335B4591F58E003D9D3694B321C5BB679971CCFFBB9CCD369FF4BE018735CD7F06DABC3F4A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/Chirp-Heavy.f44ae4ea.woff2
Preview:	wOF2.......T.......l..................................v..x.`..v.D.......,....6.$..t..<.. ..r. ...[.oq....ARz..c.3...n....C.%.2..2..%l[J...0.7....O...5;.... .. .U......Gx.d-m".E..DE...&...:"2D\|..;.6BL.s.r?.....).V\|<..c....+:...e..M5.U.....r.r&.{[^...[f..P.2\}...~.2..N..p.8.....Z. gs.0.Iw5.....kK...e.....:.....oL.f.....cJ5...=...J.c._...VS.s..mG.Q.....o....m...l.......N6.6..?Hg..u..m..;YY.5...BD.Q......"u_].)....v@...}...V.......IrD....L}.<H.#...v.......@......B...T.....(..<i..X...o.9.y..h....M.......bc....`.X.#.c..... ....q..u.}../....N.....\...n......I<N.............P.....p...4Fa.\|.>....2d.DAw.K.....^.@v\......yo!.B.]..ug.q.\.7=...Ret.u.\/.3gPG....%@...p.#MT$...2.=].d..D.".+../"..F..d.s.D)....$...o..T[Cn&\|7h.W.[......3..'~R....B.....q..B....h-.z`..!.BG...............p~...8....a.....9z..e.a.!..mp..U.B[...i..~...:...[.W..6....F-":x........ /..._...=.d.2..9@.\|.Z.3........:.5..4..='....)..X...H..*].......,.9..(dT..0.......!...\.'f}.]..Q5.)..(..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3189)
Category:	downloaded
Size (bytes):	3358
Entropy (8bit):	5.318942972437473
Encrypted:	false
SSDEEP:	48:iIKZlJIq+FsmhFmffEKooXgOfydj6soJAc9y6AsmAGNZyUuY8XmWmsd:OZlJF8smhAEKo4oj6sCAJRtad
MD5:	F3F444448CF92A011D4D1A453FA424DB
SHA1:	0B2C8F1D1E7469175B23068F966C1831788C4C55
SHA-256:	22E4D563CE5377AE34345CD6B5FCC5A89C2830B603BD7ED40883228718592D0A
SHA-512:	3174EC444E52B2F879D0FFE6DB7C5462BDDD977B73D19CB7C1954AA75EF933F87BF060C4B27D256D48C37DED06A95E64413F475B44CFEF8238A91930036D6C8D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.b2a7cfea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose"],{48734:(e,t,r)=>{r.d(t,{Z:()=>x});r(6886);var o=r(2784),n=r(25686),a=r(45184),l=r.n(a),c=r(11711),i=r(18958),s=r(35953),p=r(82392),u=r(44329),d=r(29496),m=r(30318),w=r(54484),y=r(73186);const f=y.default.create((e=>({root:{borderRadius:e.borderRadii.medium,display:"flex",flexDirection:"row",alignItems:"center",width:"100%",paddingHorizontal:e.spaces.space16,paddingVertical:e.spaces.space12},contentContainer:{display:"flex",flexDirection:"row",flex:1},contentTextContainer:{flex:1,alignItems:"flex-start",justifyContent:"center"},dismissButton:{paddingStart:e.spaces.space12},icon:{color:e.colors.text,marginEnd:e.spaces.space8},illustration:{marginEnd:e.spaces.space8,height:e.spaces.space28,width:e.spaces.space28},arrow:{borderStyle:"none"},arrowContainer:{display:"flex",width:"100%",alignItems:"center"},arrowDirectionUp:{top

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23481)
Category:	downloaded
Size (bytes):	23704
Entropy (8bit):	5.392375755845041
Encrypted:	false
SSDEEP:	384:JJl15JEW8JfYDn/EBG0KCp/JMSZLz2nFe8mPGvWPVlaH0zwFg:JJl152W8JfYDn8BxzJMSZh8mPGvWPLak
MD5:	266CE289796B528EA4CA4348B2914F74
SHA1:	08808559BB31BA7F58F171E1D717C635ECAC581B
SHA-256:	76286990C623B3213F58535F551D13B497CEB66F4ED3468FA3866F4B8C871BF5
SHA-512:	5C5F0D1A439A87FB5C4C3075D5062A66B4ED1438942F018FB852D4EED505A7452D033C0E663D8A6B2E06356BE8FC067268B709028493F1AA57D6FC8F84FCD235
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.a210668a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE"],{2847:(e,o,t)=>{t.d(o,{C:()=>O});t(36728);var n=t(2784),i=t(84292),l=t(98954),s=t(45184),a=t.n(s),r=t(63140),c=t(19565),d=t(67619),u=t(99628),h=t(17772),m=t(90112),p=t(15579),b=t(76275),f=t(76687),w=t(63143),g=t(66298),C=t(23335),y=t(92160),_=t(67935),v=t(99629),F=t(16657);const S=(e,o)=>o.user\|\|F.ZP.select(e,o.userId),k=(0,y.Z)().propsFromState((()=>({isLoggedIn:_.Qb,user:S}))).propsFromActions((()=>({addToast:v.fz,cancelPendingFollow:F.ZP.cancelPendingFollow,createLocalApiErrorHandler:(0,C.zr)("FOLLOW_USER_BUTTON"),fetchOneUserIfNeeded:F.ZP.fetchOneIfNeeded,follow:F.ZP.follow,block:F.ZP.block,unblock:F.ZP.unblock,unfollow:F.ZP.unfollow}))).withAnalytics(),B=e=>`${e}-follow`,T=e=>`${e}-unfollow`,x=e=>`${e}-block`,L=e=>`${e}-unblock`,D=e=>`${e}-cancel`,I=e=>`${e}-subsc

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7288
Entropy (8bit):	7.88605116170826
Encrypted:	false
SSDEEP:	96:h0kzKr1PfEgtCiZ/w+PkaLWYDb1auyzO4qnI8sFfGOktmy+iq1J4mSgGucLY8WTS:h8hfYMtLW6wuyz/wsFI1gvPGzUNej
MD5:	6D5675A49AED6DEE33EA91D15EA5C0A4
SHA1:	C6F716BC73347151B7F7087490443CFCC49391AD
SHA-256:	B4E26C68D3DFB9D88592C984FDD2725050647B35F3900F333EB6BA1F26F9818A
SHA-512:	C6A31969C340E81694619EA1E30D645BCCBCA172EF3EA3716C26AD5F663D3B111462BAF68A6BFC49581F3A89016BD395B233BB53D328EB6867C2742FEA84EC2D
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/432668852_796155295887560_588370489562300368_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eDQuve-aS-sAb5LNrB5&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB5mJMGFLBrA-mEsMyjPpEuIa7NkDwnKZ7m7vkd3Pfk2g&oe=662E7DF6
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000060030000c0060000590700002a080000150c00005d110000d71100009b1200008e130000781c0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................wV....g.xA...D.j.]Tl.P..A.d.}.hH..&6Mmt..].slo....f._o.n..u.....{]..{T..R.y.a(..R./m...4...z.VVw.D...M.)....<t.aJ..zC.uO..........`-.M.h2Ga....hI....#..@m..t}. l.....M.z..n..RMFxm.:..9.7..KDf.F.w...g..?b.8\..ev.S..35....m.V..;....&...w.{.2...}o.\|....mh#..zulU[.V...82..w..u.. .xK.......Ys.....Pn....b.........*.....f.a.q..../E..0K.5..b..V......z....)...).J..A.Z.Xp...C...o....m2.t%.'..G.G!.=B...z.....V.bM.sV.s..I.`.#....: ..V....+............................!13."#24A 0BD..........<!.q.u.H.d.=d......7.;.;.s..#Y.z.4.O^.H......`..7....v.E.....o...W.W.).>o3.D.9...;6.lg[....yUX..[ar..6.z[.>A..=..i..:Z52..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8500)
Category:	downloaded
Size (bytes):	8658
Entropy (8bit):	5.4334510454296705
Encrypted:	false
SSDEEP:	192:oE6rCAtaeUe6/VrV/LlQaj++JvV4TtBs31uIpcbrBzDm:oE6rHth6/Vppj+pA30UcbrBzDm
MD5:	203F83181C29EBE03853821D89927C28
SHA1:	FECD3BCB426B67122F821F348F7D8BECB9780703
SHA-256:	8EB54F3C8E24188E5D0172C6BBF3F72A2989A5485B18C454D032CDA637CAAF0C
SHA-512:	DBEBBEA3867D66A5DFA641C41AFB6EA0940BB032995222E72DE71A710B41290AE2BB02F95E809FA56151CA3B677B252CBE0BD2272E18E4378B0B0229BA29F45A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Ocf.7fde78fa.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsInternals~bundle.Ocf"],{78527:(t,r,e)=>{"use strict";e.d(r,{Z:()=>l});e(36728),e(6886);var n=e(6899),s=e(65188),i=e(44171),a=e.n(i),o=e(46395);const u=(t,r,e)=>{const n=(0,o.Z)(t,r,e);if(t&&"string"==typeof n.vcard){const t=a().parse(n.vcard),r=t&&t[0]\|\|null;return{...n,vcard:r}}return n},c=new n.fK.Entity("vcards",{},{idAttribute:t=>(0,s.Z)(t.id)?t.id:t.id_str,processStrategy:u}),d={count:100},l=({apiClient:t,featureSwitches:r})=>({fetchAddressBook:(r,e={})=>t.get("contacts/addressbook",{...d,...r},e).then((t=>(0,n.Fv)(t,{contacts:[c]}))),uploadAddressBook(r,e){const{contacts:n,...s}=r,i=[];for(let t=0;t<n.length;t+=100)i.push(n.slice(t,t+100));return Promise.all(i.map((r=>t.post("contacts/upload_v2",{...s,contacts:r},{},{...e,"content-type":"application/json"}))))}})},18892:(t,r,e)=>{"use strict";e.d(r,{g:()=>a});var n=e(7896),s=(e(36728),e(2784)),i=e(25686);functio

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2662193
Entropy (8bit):	5.210637481261488
Encrypted:	false
SSDEEP:	49152:ezymiSAdLXPRocAxYaBNCijsPqn8waO+vqX3ZZPlvoQh4hNfDF+1L4oqiUw9Bis/:rA
MD5:	9D150860622C926F1BE18E481C145C59
SHA1:	0991E06DD9812C52231D5C7DE7E9B7DAE45674D2
SHA-256:	B647C37AD64B50583FEE3EC3C3DBD745096318A0F6A2489FE70B076F91460812
SHA-512:	DCD74B597B01950F2D7088DAFCA1E8C001A36200DC9194E9D6401374010A5124AC6670C96DC63FCD33B493F332E39CC380735F2610C627463F2402958DEDB598
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/main.3e34201a.js
Preview:	window.__SCRIPTS_LOADED__.vendor&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["main"],{26738:(e,d,n)=>{var a=n(79404);a.loadLanguage.registerChunkLoader((function(e){return n(31893)(`./${e}`)}),["en","ar","ar-x-fm","bg","bn","ca","cs","da","de","el","en-GB","en-ss","en-xx","es","eu","fa","fi","fil","fr","ga","gl","gu","ha","he","hi","hr","hu","id","ig","it","ja","kn","ko","mr","ms","nb","nl","pl","pt","ro","ru","sk","sr","sv","ta","th","tr","uk","ur","vi","yo","zh","zh-Hant"]),e.exports=a},31893:(e,d,n)=>{var a={"./ar":[40421,"vendor","i18n/ar"],"./ar-x-fm":[97180,"vendor","i18n/ar-x-fm"],"./ar-x-fm.js":[97180,"vendor","i18n/ar-x-fm"],"./ar.js":[40421,"vendor","i18n/ar"],"./bg":[16664,"vendor","i18n/bg"],"./bg.js":[16664,"vendor","i18n/bg"],"./bn":[93458,"vendor","i18n/bn"],"./bn.js":[93458,"vendor","i18n/bn"],"./ca":[45949,"vendor","i18n/ca"],"./ca.js":[45949,"vendor","i18n/ca"],"./cs":[90186,"vendor","i18n/cs"],"./cs.js":[90186,"ven

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8406), with no line terminators
Category:	downloaded
Size (bytes):	8406
Entropy (8bit):	5.215721557193313
Encrypted:	false
SSDEEP:	192:8BccVU3avLmzNOYyzLtxyV8q+UYSSjdmvcLDZMxbSNkk1pAkgi:HcVU3aSzNOYyPtxySq+UYSSjdmvatMx6
MD5:	BD04E45DE568DFCF76E317DE8FF86609
SHA1:	F766CD6BB723D371A08808C58EDBCDC97942D9DB
SHA-256:	098751F0068408407BE658FDE1E8FA5F044E5F6EEE34C69FDE24C817FC9D95FC
SHA-512:	216C09503F744C43ABCB1F511878C26A0D2230ABEC99699BBEB227DED3457ACE3F1FEEF06C5C2987A36A405662B7A3EA358666FD634124AC195A54CA3ED2E0DD
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/js/dnncore.js?cdv=158
Preview:	var DNN_COL_DELIMITER=String.fromCharCode(16);var DNN_ROW_DELIMITER=String.fromCharCode(15);var __dnn_m_bPageLoaded=false;if(window.addEventListener){window.addEventListener("load",__dnn_Page_OnLoad,false)}else{window.attachEvent("onload",__dnn_Page_OnLoad)}function __dnn_ClientAPIEnabled(){return typeof(dnn)!="undefined"}function __dnn_Page_OnLoad(){if(__dnn_ClientAPIEnabled()){dnn.dom.attachEvent(window,"onscroll",__dnn_bodyscroll)}__dnn_m_bPageLoaded=true}function __dnn_KeyDown(iKeyCode,sFunc,e){if(e==null){e=window.event}if(e.keyCode==iKeyCode){eval(unescape(sFunc));return false}}function __dnn_bodyscroll(){var a=document.forms[0];if(__dnn_ClientAPIEnabled()&&__dnn_m_bPageLoaded&&typeof(a.ScrollTop)!="undefined"){a.ScrollTop.value=document.documentElement.scrollTop?document.documentElement.scrollTop:dnn.dom.getByTagName("body")[0].scrollTop}}function __dnn_setScrollTop(c){if(__dnn_ClientAPIEnabled()){if(c==null){c=document.forms[0].ScrollTop.value}var a=dnn.getVar("ScrollToControl"

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5666)
Category:	downloaded
Size (bytes):	5889
Entropy (8bit):	5.500524602120444
Encrypted:	false
SSDEEP:	96:mlLpsZPMXGbCI3wOqeHKXYmHm5OlsLFMO4Ricgfq9slceFtTIdkyWdeKeK6:CtAlGIkRXYmGHMO4RiHZca9rS
MD5:	3C69223F316F8FBA47D6124EF4F8B238
SHA1:	8EA5D9558BBE8F0B05246FC5CED6FB8EBE31F051
SHA-256:	30780C51C3866EB304C9F0D412C7E60A0E6E0F488903628450D2D051BF280AD7
SHA-512:	36CC7C2A6C1CC10A730FC360CD1F375E6EA19DFA8511DBD5AE371BEC59C59B784EAE4FF29B704FF0BA98CE54362B83DA5AD2E3D424ED42E76C9EF942A739C55D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH.734be68a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH"],{78780:(e,t,i)=>{i.d(t,{s:()=>n});var r=i(63752);const n=e=>e===r.p_},54352:(e,t,i)=>{i.d(t,{Ah:()=>P,Bw:()=>b,De:()=>O,E4:()=>C,G6:()=>M,Tu:()=>R,W8:()=>D,bG:()=>I,m1:()=>k,q9:()=>T,qK:()=>U,rA:()=>G,vb:()=>y});i(6886),i(36728);var r=i(68811),n=i.n(r),o=i(28213),d=i(53223),s=i(56992),a=i(8871),l=i(78780),c=i(26853),_=i(53392),p=i(55699),u=i(76431),m=i(97654),w=i(34556);const h="dmComposer",v={};const g=e=>{const{conversation_id:t,id:i,localMediaId:r,recipient_ids:n,sender_id:o,text:d,attachment:s={},error:a}=e,l=Date.now().toString();return{conversation_id:t,recipient_ids:n,error:a,id:i,is_draft:!0,message_data:{attachment:s,localMediaId:r,sender_id:o,text:d,time:l},type:"message",time:l}},I=e=>(t,i,{api:r})=>{const{allowVideoDownload:c,senderId:h,cardUrl:v,conversati

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7121)
Category:	downloaded
Size (bytes):	44552
Entropy (8bit):	5.412463011849095
Encrypted:	false
SSDEEP:	768:HQvvNk35EqETDa+DlaXXAiNNivWzsO2gNm+WdPKaug5dyxROh6KHdWrjrqrNraVt:HQvvl/TrsXXAiNMvEmPPKaVrsrjrqrN0
MD5:	A9F3C90C64C1902D56EB7E98F97CD18B
SHA1:	C75E95062021707300DD66FE4F8A34CA0255166C
SHA-256:	D32FDB4F68A8B5F7897232BDB105A00BC805951912EF8E7B76C36D1BA01B1118
SHA-512:	77E4CAD2429C91E4D0FDC8D1D1323F75C3C37C676D0C0704F91A0859184FCF78A032E8B3CF8EA2C1ADF4BF7E8CF00E867FCB8470463B24827001B6AA255881E2
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y5/r/JssATjfhfdZ.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometNewsFeedVPVDStore_newsFeedEdge.graphql",[],(function(a,b,c,d,e,f){"use strict";a={kind:"InlineDataFragment",name:"CometNewsFeedVPVDStore_newsFeedEdge"};e.exports=a}),null);.__d("registerSourceForView",["DTSG","DTSGUtils","SprinkleConfig","XCometPrivacySandboxRegisterSourceControllerRouteBuilder","isAttributionReportingAPIEnabled"],(function(a,b,c,d,e,f,g){"use strict";function a(a,b){if(!c("isAttributionReportingAPIEnabled")())return;var e={eventSourceEligible:!0,triggerEligible:!1},f={},g=c("XCometPrivacySandboxRegisterSourceControllerRouteBuilder").buildUri({});a!=null&&a.length>0?f.eid=a:b!=null&&b.length>0&&(f.xt=b);a=d("DTSG").getToken();a!=null&&a.length>0&&(f.fb_dtsg=a,c("SprinkleConfig").param_name.length>0&&(f[c("SprinkleConfig").param_name]=c("DTSGUtils").getNumericValue(a)));b=Object.keys(f).map(function(a){return[encodeURIComponent(a),encodeURIComponent(f[a])].join("=")}).join("&");window.fetch(g,{attributionReporting:e,body:b,headers:{"Content-

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5159), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	66445
Entropy (8bit):	5.921773264599841
Encrypted:	false
SSDEEP:	1536:G9xttSXJwIN3COUew6Aq42Gmd/da8WtnKe:GRtltnKe
MD5:	71B97C60E187A71A84C1467E690DC905
SHA1:	81713C5E15C977134B529699039DC7E0F21AF52E
SHA-256:	C8F4018C2A194E9465C066D7D7FF1909E7199C4D99BE4E4B0C9AD74C518442F7
SHA-512:	180FAF2E6618BCEAD73C0A2FA0A9827D784C47D66C90715FEB5D4522C3E9B05F6BC1D7C608157D5DB7EAB1650577FB730EECFEC12F1C00BACC043082A5EA8694
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx
Preview:	<!DOCTYPE html>..<html lang="en-US">..<head id="Head"><meta charset="utf-8" />.. Responsive Design -->.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chome=1" /><meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />.<meta name="REVISIT-AFTER" content="7 DAYS" />.<meta name="RATING" content="GENERAL" />.<meta name="RESOURCE-TYPE" content="DOCUMENT" />.<meta content="text/javascript" http-equiv="Content-Script-Type" />.<meta content="text/css" http-equiv="Content-Style-Type" />.<title>...Give Today..</title><meta id="MetaDescription" name="DESCRIPTION" content="Give Today" /><meta id="MetaRobots" name="ROBOTS" content="INDEX, FOLLOW" /><link href="/Portals/_default/default.css?cdv=158" media="all" type="text/css" rel="stylesheet"/><link href="/DesktopModules/Media/module.css?cdv=158" media="all" type="text/css" rel="stylesheet"/><link href="/DesktopModules/AESOPRegistration/module.css?

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1326)
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	5.298840329386039
Encrypted:	false
SSDEEP:	24:iWGKfWGE5FNzFO6LsLcZdFrtjYDb8pMpcQw3hb3oT+PafKHWwDE05q+v74FT6jAp:iIyvYY5xi8S2VU+Pz0Q0FejAUWmEx+m
MD5:	6FA610DD69E6E679617EB6C66CC16119
SHA1:	D8D683853974485177DC2EA9B29F5EF9DF1F6B47
SHA-256:	A0BA3440F44E1C94E38B8C64039DC24AF9BB3755DC20BFC7DF5AD879758A7B8E
SHA-512:	8A9437A6AB7EF66FEE034E8F30F925CE5BF2D75EC3B1512EF5566F2C2222FE2A8183087A08A5AD0CFEF714A1094A28892E0C20FB05CE3915C20E6746319DC485
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b.cbab74ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b"],{34788:(e,t,n)=>{n.d(t,{Z:()=>b});var s=n(7896),l=(n(6886),n(2784)),i=n(45184),a=n.n(i),d=n(29496),r=n(40080),o=n(73186);const p=a().i5450bec,h=a().f7432494;class u extends l.Component{constructor(...e){super(...e),this._handlePress=e=>{const{onPress:t}=this.props;t&&t(e),this._fileInput&&this._fileInput.click()},this._handleChange=e=>{const{onChange:t}=this.props,n=e.target,s=n.files;s.length&&t&&t(s),n.value=""},this._handleFileInputButtonRef=e=>{this._fileInput=e}}render(){const{accept:e,disabled:t,multiple:n,onChange:i,testID:a,...o}=this.props,u=!(null!=e&&e.includes("video")\|\|null!=e&&e.includes("gif"));return l.createElement(l.Fragment,null,l.createElement(d.ZP,(0,s.Z)({hoverLabel:e?{label:u?h:p}:void 0},o,{disabled:t,onPress:this._handlePress})),(0,r.Z)("input"

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45016, version 1.0
Category:	downloaded
Size (bytes):	45016
Entropy (8bit):	7.9952425972800985
Encrypted:	true
SSDEEP:	768:95nDfv+GmbHY6PoZYahtmlIV4r2rKf9m07kMiqDnX3kpa:95Dfv+GmbHY/RhmIVjrKfX7AcX2a
MD5:	05FB8F8991F2C79721C71285BB6863CD
SHA1:	289FCC339DAA8F24F432B6D8D78E776566CB4CC6
SHA-256:	C385D866C78CF2C91AB9DC834291FA49F806AA0805840EBF3BBD1B41E33F55B6
SHA-512:	65C793B5E1F772F6714C29F0B041E38965711A9828BF3ED1EF40516D841B924B1B192F9EB02186025ABDA84EEC5C5FD15F65B335201D9F7FD2CF2387CCA394A3
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/Chirp-Bold.ebb56aba.woff2
Preview:	wOF2...............$...o..............................v..x.`..v.D.......T..y.6.$..t..<.. ..r. ....$..T[.{q.:..Wbm.m....2...:.6Hy..::....o.`..@wP<...g....oI.2....o.......UU:..L..n.&.;..l....nH.`lH.\.d.L. .......ePsR...Mf(..nq....dw..4....t..y.w.{..J..n...M$d.QvI#f...z..C.(..Y{..\|..C..V^..n.I.@.....Id......L..I...\|..+.q~...S9h.}$..TR%...ZQR..6M.../.J..'../.....t..W.LFI.-,.....?f......L....z.y.<...,(.'..Ljd.......a.@.....!..{%..9.....5 T.Ff.'DDkV.{....l\...H..W..h... .'=k..........T......G.[.{w)..B..Bi!..D.D.[.J....,...[.b.....c....b..._....l........@E.D....A..dm...8.]iZ.l,..W.uu...F.uw.....V...~..........b.k..!..h9E...QO..4.M2...g.oW..T.*@..Pm.e.....@..."..![.l..8............EQ.EQ.EQ.EQ4..F..h4.E.ht..>.L.$...o..M..S..#...c.0...P...$=...d".........`2.._?t..A..a..0O..;........+J](]T......(...M0.N..D.M.8)x+p.?...>s.s.\.{.."....:.".E.../.?..D'.EG..Sw...y.>....y)zO.v..."...P...<.....G.....s...&i.......szZ..8....Y2M.D8H..!..............T...

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5116)
Category:	downloaded
Size (bytes):	5284
Entropy (8bit):	5.533698853207561
Encrypted:	false
SSDEEP:	96:7tY5IVCwZnuQhv1DHAKfDV09cORUluz0W4crbnrbqFYs9FNDyakL1:7tY5IYwZB1DHAEVNORUluQW4N18R
MD5:	5D460593FE7E1375B1A6967E42D633A4
SHA1:	F6BA61E248A463C94214C55FE6C509009A76CFA9
SHA-256:	B28873032BA61A60697F8B7DE03723277CB672D43596DCA7EDA6F11245C7D126
SHA-512:	64AB9C3868549504FE33549519B77B0B2EA63EB264D2E58827DB6EEE1905A1249C568543E0D321D3F3356CB80954B06D9BAA5B2F3C9649FAB5724BEB5BA994AD
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~loader.LoggedOutNotifications.da86593a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~loader.LoggedOutNotifications"],{45988:e=>{e.exports={queryId:"BqIHKmwZKtiUBPi07jKctg",operationName:"EnableLoggedOutWebNotifications",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},88625:(e,t,o)=>{"use strict";o.r(t),o.d(t,{PromptStatus:()=>y,SET_PROMPT_STATUS:()=>_,default:()=>k,fetchLoggedOutNotificationsDataTypes:()=>O,loadLoggedOutNotificationData:()=>F,pushSubscribeLoggedOut:()=>H,resetLoggedOutNotificationState:()=>V,selectArkosePromptStatus:()=>I,selectBrowserPromptStatus:()=>v,selectFetchStatus:()=>K,selectInAppPromptStatus:()=>U,selectIsEligibleForPushPrompt:()=>D,selectLastSeenTimeStamp:()=>C,selectPushNotificationsPromptIsSeen:()=>R,setLastSeenTimeStamp:()=>w,setPromptStatus:()=>h,updatePromptStatus:()=>j,verifyArkoseTokenAndSavePushToken:()=>Q,verifyArkoseTokenAndSavePushTokenActionTypes:()=>N});o(71372);var s=o(72599),r=o(17360

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	8473
Entropy (8bit):	7.746185515678946
Encrypted:	false
SSDEEP:	192:syjfzssKvIN0qVQVekPy/zAARFofhyIYpga+iz6:sy32ekkzjjof8I1aB6
MD5:	109A89B686E886463F8B3AD375420AEA
SHA1:	8A0766B19CBD9F27C01EBB6E699E7DD21FC09CFE
SHA-256:	249208D8D52416DAC4E8D375B3EC3BFB26AA206A5F15B9A03A560920D32BAC53
SHA-512:	D57C210279B9DABB72CC4839D4E1963AA2CA6496FE6FE333BE1E5273C5E8D9ADBD8D12CAEC19BE72CCF0676CB8BFF68CDBA2394C897C0CD7EA013C5B0ED547E8
Malicious:	false
Reputation:	low
URL:	https://pbs.twimg.com/profile_images/1675951565944033280/E9478ktH_200x200.jpg
Preview:	......JFIF..............ICC_PROFILE.......lcms.0..mntrRGB XYZ ............acspAPPL...................................-lcms................................................desc.......8cprt...@...Nwtpt........chad.......,rXYZ........bXYZ........gXYZ........rTRC....... gTRC...,... bTRC...L... chrm...l...$mluc............enUS.........s.R.G.B. .b.u.i.l.t.-.i.n..mluc............enUS...2.....N.o. .c.o.p.y.r.i.g.h.t.,. .u.s.e. .f.r.e.e.l.y....XYZ ...............-sf32.......J.......*........................XYZ ......o...8.....XYZ ......$.........XYZ ......b.........para..........ff......Y.......[para..........ff......Y.......[para..........ff......Y.......[chrm..............T{..L.......&f...\...C..............................................!........."$".$.......C............................................................................"................................................................................G....y.D..}m...}0[...%\.T..pY...n ./).q..g.......r......\zj......e.$Q....X.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2252)
Category:	downloaded
Size (bytes):	2475
Entropy (8bit):	5.089851070148757
Encrypted:	false
SSDEEP:	48:iIKBoJPRk8acj6hpDte7teAYh2axHVXbzZLFoaArvFWmsB4:OBSihD61QxH1bN0aB4
MD5:	5E8A8C884BC34346091A04648E3A9E27
SHA1:	33BEFB04588E4C44DD6BF320B1904A53F2F6BAB9
SHA-256:	3E3D57B4F683478EA847CEB99251870AA443010BE018BC9F63288102B3DA68EB
SHA-512:	3BC6B26BA6CFF3243ABC36955313D9D49421A60CEF673B9DA1F8771D7EB4E4D361C7F82A8C819039B8D289CD2B8BFDD1C0D0396A8F171E49E2358943ECDCE7C1
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.SettingsProfessionalProfileProfileSpotlight.5beb173a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.SettingsProfessionalProfileProfileSpotlight"],{68767:(e,t,n)=>{n.r(t),n.d(t,{default:()=>h});n(6886),n(36728);var i=n(2784),o=n(44487),s=n(84292),a=n(45184),r=n.n(a),l=n(16587);const c=r().cfd2f35e;class d extends i.Component{constructor(...e){super(...e),this.state={activeConfirmation:null},this._handleConfirm=e=>{this.setState({activeConfirmation:e})},this._handleConfirmed=()=>{this.state.activeConfirmation&&this.state.activeConfirmation.confirmCallback(),this.setState({activeConfirmation:null}),this.props.onClose()},this._handleCancelConfirm=()=>{var e,t;this.state.activeConfirmation&&(null==(e=(t=this.state.activeConfirmation).cancelCallback)\|\|e.call(t)),this.setState({activeConfirmation:null})},this._getMemoizedProcessedActionItems=(0,l.Z)(((e,t,n,i)=>e.reduce(((e,{Icon:o,confirmation:s,disabled:a,excludeFrom

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15305)
Category:	downloaded
Size (bytes):	15461
Entropy (8bit):	5.158472617304358
Encrypted:	false
SSDEEP:	384:ml8nUA6q9NRnXVQTFJazdxun1EUj1zIMhrH92cIOqELdVPg:ml876q9NRnXVYFJOdxxUj5rdH92c3qE0
MD5:	51C151D3D7A0DD04D309DCCCDB13D49C
SHA1:	79E68C0784CFE10EB468B78472AB78A9F97CDA8E
SHA-256:	A0784EEB7A9B01A3AA72C0E01B147602F4089DE5E150CF601E45436F94ABEFA3
SHA-512:	3B96107823DD65ADE4603DB04ECD30CE809807813395D1CCE02CF3A8345C560407655A5C6BE8E22860FBDC760F13642A53E02A55BC26E381D2984D372BD8BEFA
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile.f7878e5a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.LiveEvent~bundle.UserProfile","bundle.AudioSpaceDetail"],{13325:(e,t,l)=>{l.d(t,{Z:()=>n});var c=l(2784),i=l(48501),a=l(79135);const n=e=>{const{children:t,collectionName:l}=e,n=c.useContext(i.rC);return(0,a.Kx)(n),t}},33046:(e,t,l)=>{l.d(t,{Z:()=>k});l(6886);var c=l(2784),i=l(76648),a=l(25686),n=l(29496),s=l(73206),o=l(82392),r=l(73186),d=l(45184),b=l.n(d),u=l(40335),h=l(59264),m=l(42411),v=l(99473),y=l(572),p=l(93013),g=l(54699),f=l(8367),E=l(73624),Z=l(18958),w=l(37796),L=l(99629),z=l(16657);const R=b().ia5e7488,_={label:R},H=b().j33d8902,M={label:H},x=b().a8ab3d08,C={bandcamp_handle:{icon:c.createElement(u.default,null),label:b().a7cf1e98,url:"https://bandcamp.com/"},bitcoin_handle:{icon:c.createElement(h.default,null),label:b().d876e67e},cash_app_handle:{icon:c.createElement(m.default,null),label:b().f85f6760,url:"https://cash.app/"},ethereum_handle:{icon:c.cr

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (331)
Category:	downloaded
Size (bytes):	466
Entropy (8bit):	5.370954552669038
Encrypted:	false
SSDEEP:	12:+dWSfKDTWSfEr0wnWmYFVZBNXSUTLqbsFHDxQB:iWGKfWGEr0dRFV/ZSUTLyWDx8
MD5:	F77816051D85EBB8C94BB7C6C803ED96
SHA1:	4180B8064744F54BF0B8EB73DD3B51E6821840B3
SHA-256:	5667E6C8DA35999A220B98F2AE5010617A36FECEC7159ACB84B51BC7817FD824
SHA-512:	DD2F7941EE7AE5B7D5BB8CD91D3227730B55B27D399C32A25F0BB34B361B94576D728EE0C9BB920E16EDA94146ECE08889CAEDDDDAEF5754223F6F249256784B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.DividerHandler.05e0144a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.DividerHandler"],{36097:(e,r,t)=>{t.r(r),t.d(r,{default:()=>l});var s=t(2784),d=t(23162),i=t(16742);const l=t(39928).lC({shouldDisplayBorder:(0,i.Z)(!1),render:(0,i.Z)(s.createElement(d.Z,{withTopBorder:!1}))})}}]);.//# sourceMappingURL=https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.05e0144a.js.map

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10745)
Category:	downloaded
Size (bytes):	10968
Entropy (8bit):	5.384932040761004
Encrypted:	false
SSDEEP:	192:j5QIMcg0702cjm81kAp1ndxHzC7a0EoGM4+IAJP/URw:j5GcgW02ci8jpI7aOl4+IcQw
MD5:	77989554A2D83DFE39B2DA45C4F53F58
SHA1:	7D2B5320B510890C0E5AB0E3E98F64BC9451C961
SHA-256:	655E8FE4A5A2A2495485484404CADFE6562F5B32C0B4D5AE7FBD0E558599A662
SHA-512:	AEDE216BF92288B2A663ED3A352673AF2959E7C0DDCBAA2BCB2550243060E5CBBD63559132CFB33B96062A164269ED7CCCF5166AFB544D7EC488ACC907B77581
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b.cd125e8a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b","icons/IconPaintbrushStroke-js"],{82939:(e,t,i)=>{i.d(t,{A:()=>p,Z:()=>f});i(6886);var a=i(2784),l=i(94407),s=i(25686),r=i(8443),o=i(73186),d=i(45184),n=i.n(d),c=i(99496),u=i(28213),h=i(32307);const m=n().gff1f69e,p=Object.freeze({INFINITE:"infinite",MEDIUM:"medium",NONE:"none"});class b extends a.Component{constructor(...e){super(...e),this.state={imagePreviewUrl:null},this._getImageSrc=()=>{const{enableGif:e,mediaItem:t}=this.props,{imagePreviewUrl:i}=this.state;if(t&&t.mediaFile)return t.mediaFile.isGif&&!e?i:t.mediaFile.url}}componentDidUpdate(){const{enableGif:e,mediaItem:{mediaFile:t}}=this.props,{imagePreviewUrl:i}=this.state;e\|\|i\|\|t instanceof c.ZP&&t.isGif&&(0,u.R)(t).then((e=>{this.setState({imagePreviewUrl:e})}))}shouldComponentUpdate(e,t){return!(0,h.Z)(e,th

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1596)
Category:	downloaded
Size (bytes):	1819
Entropy (8bit):	5.2607871002049675
Encrypted:	false
SSDEEP:	48:iI6G4lgJPeMTW9gNwlM3qlrnLOT5bFnb8WmQG8L:mLlJMTWqClvlrnL05hnYK7L
MD5:	B743B93380C78FB30145C3B05C74FDA4
SHA1:	F0E36FFD735FCAC2CA252A053ACF9D10403BC723
SHA-256:	8EBA946EB754DFE208302289BEBC9B9EC30C36942B3DE111A5BBAF1D61C7E292
SHA-512:	A0EB036878C2DBF476FD96D0DAAA3EDCDC475C327445F3E347418284DA42BE3CE4110D304296F3D27D8D002C2EB353C80B7ED64D0A1916FB37653274CAEE53B9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Compos.540d8c0a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Compos"],{23162:(e,t,r)=>{r.d(t,{Z:()=>s});var o=r(2784),l=r(25686),a=r(59890),n=r(73186);function s({borderColor:e="borderColor",isSlim:t=!1,label:r}){return r?o.createElement(a.Z,{style:!t&&c.root,withGutter:!0},o.createElement(l.Z,{style:c.gapColumn},o.createElement(l.Z,{style:[c.gap,c[e]]})),o.createElement(l.Z,{style:c.gapText},r),o.createElement(l.Z,{style:c.gapColumn},o.createElement(l.Z,{style:[c.gap,c[e]]}))):o.createElement(l.Z,{style:[!t&&c.root,c.gap,c[e]]})}const c=n.default.create((e=>({borderColor:{backgroundColor:n.default.theme.colors.borderColor},nestedBorderColor:{backgroundColor:n.default.theme.colors.nestedBorderColor},gap:{height:e.borderWidths.small},gapColumn:{flex:1,justifyContent:"center"},gapText:{"flex-basis":"auto"},root:{marginVertical:e.spaces.spa

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5786)
Category:	downloaded
Size (bytes):	6009
Entropy (8bit):	5.277153247205427
Encrypted:	false
SSDEEP:	96:OtrPvYYqafHGpYyEdsyfU1j4MlP45TrGvlgcQ2Y5KpL5KM/a8:cYYJfKYHSyfmwXuNYyLBt
MD5:	342148421784ADC86413FD13118428A2
SHA1:	96D9E0EC517B81A86B0D36445E0287E836F19FEB
SHA-256:	C20933DB816D7D3F2670F3B78859C81CBAE32D60899AC2F9A3D389125A5108A2
SHA-512:	D74C294E295D36AF9BBB3AA9462AC0F8CE906E33DD7D609AFB907316BF8BBB73BB1688C0F1FE1293BDC67661E389428BB386C3B434E66AD8D14220F7E4E52254
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer~loader.inlineTombstoneHandler~.517738fa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer~loader.inlineTombstoneHandler~","icons/IconChevronDown-js","icons/IconFilter-js"],{22185:(e,t,i)=>{i.d(t,{ZP:()=>R,Zq:()=>_});i(6886);var n=i(2784),l=i(94407),o=i(25686),s=i(82392),a=i(27519),r=i(12408),c=i(29496),p=i(88990),d=i(73186),h=i(35235),y=i(35131);const m=i.p+"illustration-toxicity-spam.15a7f91a.png";var w=i(60673);const g="Relevant to you",b="All Replies",_=Object.freeze({relevant:"relevant",all:"all"}),u=Object.freeze({relevant:g,all:b}),f={page:"tweet",component:"tweet"};class v extends n.PureComponent{constructor(...e){super(...e),this.state={isReplyDropdownPopover:!1,showReplyDropdownInfo:!1},this._renderReplyDropdownContent=(e,t)=>{const{replyDropdownSelection:i}=this.props,l=e=>n.createElement(s.ZP,{weight:"bold"},e);return n.createElement(n.Fragment,null,n.createElement(s.ZP,{size:"t

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41597)
Category:	downloaded
Size (bytes):	1071114
Entropy (8bit):	5.218849925417944
Encrypted:	false
SSDEEP:	6144:kMCokxvW7D8f+NUfXY8WFb0sVRpaBaY6Ka:4omW+QVl
MD5:	B56C46E1E590C77E2938BB9E908C8AC1
SHA1:	BE8528C7E9DC11AAAB2A6A968EDA9427E3F4688C
SHA-256:	7964100D0BE4C526C2DCA60B5AF420D1558C20DC04FF92E97D864D8CFE7F90D9
SHA-512:	52487F61C8A16C6456B285CE12DE673E7B37705588E07EC531B547E140CDB758C7DDB852DB4143E2CF54D6F97A69B069B9339FFC82AF16DE55F6B15A9F2BCBB0
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iHWi4/yT/l/en_US/yJzYEEZ1qKpT1bGOl72c-Si9BtyEKKY6vsXBKGulEZ7YjmJAioUiau3UnRR4kL2c3MzDouReqt7vgMVvbs5Bxz9AfzkWVwFU290p3lHmP5bRnoAvNAI-O1M-NRawrDsZxthjVtwoC8TAEQ4oi_YwQ1LIeeq4U1PQSjcmVTZ2S6HgZeQb9Gsu-9YhaugQ0ERYmIF4EZ.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedStoryAttachmentRendererInnerThrowback_attachment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"renderLocation"}],kind:"Fragment",metadata:null,name:"CometFeedStoryAttachmentRendererInnerThrowback_attachment",selections:[{alias:"throwbackStyles",args:[{kind:"Variable",name:"render_location",variableName:"renderLocation"},{kind:"Literal",name:"supported",value:"3eKzDk"}],concreteType:null,kind:"LinkedField",name:"style_type_renderer",plural:!1,selections:[{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInnerThrowback_attachment",fragmentName:"CometFeedStoryGoodwillSharedAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentGoodwillSharedStyleRenderer",abstractKey:null}],storageKey:null}],type:"StoryAttachment",abstractKey:null};e.exports=a}),null);.__d("CometFeedStoryAttachmentRendererInner_attachmen

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34471)
Category:	downloaded
Size (bytes):	34611
Entropy (8bit):	5.480049011683097
Encrypted:	false
SSDEEP:	768:Z9ZPeYX3KarlSlxMXj2aZgvhYo6LcXh6MoPyRaE2fxs33sEqtc7+7AFMAqSM3ulD:Z9BxWxMXaWZAXvoDfslZ
MD5:	01F76143F40F4E14AECBB67791D1A46E
SHA1:	F7F6CB91E8D0D13F8E444A6125E31633CDC751F9
SHA-256:	15788C57FAFEB69CF1054AE54D3CCE8A9A2E8A05FCA1B6445C23DB3EF1E942B2
SHA-512:	CDB1E0904C73D83EDAACBD71B3CC2ED5E71EB81DB3A1B4446278AE22C2FB468E1236D19F6AC3F05B9F63AC5D7D806C17591ECFE87FEB7458797C92FA6B3F13A5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.TimelineCardHandler.ae43cd2a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.TimelineCardHandler","bundle.AudioSpaceDetail","loader.HWCard","icons/IconBoldCompact-js","icons/IconBookmarkPlusStroke-js","icons/IconBulletedList-js","icons/IconItalic-js","icons/IconNumberedList-js","icons/IconQuoteStroke-js","icons/IconStrikethrough-js"],{16201:e=>{e.exports={queryId:"8HoabOvl7jl9IC1Aixj-vg",operationName:"BookmarkFolderTimeline",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","creator_subscriptions_tweet_preview_api_enabled","responsive_web_graphql_timeline_navigation_enabled","responsive_web_graphql_skip_user_profile_image_extensions_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_tweet_api_enabled"

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2255
Entropy (8bit):	7.879617216141816
Encrypted:	false
SSDEEP:	48:ZEMsRM8+8oQY5eD6fwqZ0zQWOSUa8mfzXr116:Zo+8b8aR9B8mfDrz6
MD5:	D5846CF6DE7F35908FDDD10B80CD3922
SHA1:	859F953B1EEBA45D84226EAA162D9074FBD59863
SHA-256:	3CF279DE1E7E6E6D792246CC25A70489A7F261E24A91568A628BCF8D185FA666
SHA-512:	088BD64FBC482F303C0336AE14FBE77F12568CB477073DA2223D7791516724C400479A9E5F1E99F0E50E4470A5F9BC9B52AA35B642B8B37A0A8C394EB2D4919A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....SzTXtRaw profile type iptc.........0....i0...<.H.\d.......m...}A.v.\|.`.<...K.+."....V...=T4...IDATX..XkpUW.......y.......B.......?....c..8.:.....t.Z...3h..QT.2T;Z...."$.@.B..w..}...^.87..IH...9g.o.....Z...c.f.....DDc?.4.`..a".Q.6..,.f....a).'u...s]...;..9..a..40ob.,l.T..6..l.D ........m.]....i..l...% (...K._.[t....>O]..>"p..G:_..q.J..`..U...u....U.(.JKPFs.R7u.>h...L..nZR:......%..3........K..I.xF...&..t....cG..[..AW[.JB.....pmi..?}.#1.,pWu...S>.....L.;..q.......N.b].c].....r..!..M*X..@.8_._.....H...r8.o..P...~h{.$..2.u.T.w=\{.=...]..b....U.UD.[P,.[z.G.b.87.....@B......x...}}z...}..u[..-.-21.~v...gn9\|...........i.......V.b@.2.J............K.]../.Jf...Jd.L......N.N/.....`......`.....K..<...b8>.&.-i....)...,0.....W.....B..<G.{....,...Z. ..B.......G........3...=^wWuX3.!.E...7G..7.[!..&._X[US.....-....)..BF.....g.$.bi.....z..@f.X..+.%3....#.aRz....%.9`..hW.MbK.h^Q.~y.4..l`...k.'...B.Y.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.362961159354576
Encrypted:	false
SSDEEP:	3:bh6G3XWZNDrMyMcbtugSUhdei3XWZNDrMyMcI:bnXS5JtpnS5O
MD5:	F71C4EFD36879E28A721AAF93B559B3F
SHA1:	2AA52C4FD618680148F935B280F96496EFD7E153
SHA-256:	F39FC3D962FAE023EBB725DFDBA524226C593C6EB2BC2C1F23C454D63CC10EC2
SHA-512:	8EB53CB46F668813C99768F701C00D1E2FF18FFE86F50C0C0A17DFAC06B339DCB513F58972CDEDB5A372035596806F69F50E5F6228B5F0AFE5992E13AADE080F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkbMnFS9SzlUhIFDYOoWz0SBQ3Fk8QkEhcJsA2cf48--pcSBQ14bxIZEgUNxZPEJA==?alt=proto
Preview:	CiIKEw2DqFs9GgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgCCiIKEw14bxIZGgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgC

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3318)
Category:	downloaded
Size (bytes):	3514
Entropy (8bit):	5.290955034244037
Encrypted:	false
SSDEEP:	48:iIKSCLDtcSgrR1BhD5mURbl4Jmx9Xsr67CZWCqMvbb9MMNUKYULtI+EEFnWmsm:OJK3v8URbmJssr67CZD3vbb97tDWanam
MD5:	4EB363BA8478776B82CBED9EE5DD44B5
SHA1:	FC27B7C8A45672C7E72E8B5AD400128E7DB19E5E
SHA-256:	3C4B3707037EEFFB1B51DDE48B271675A33E229BF118A4E6E3A411CA750E276D
SHA-512:	8B42C95A9C99ED6815114F74EE29EE11BDD12F2BF5404741519687FF6D876CFC9A2400D610DDD73646ED28870768AC5B420825BAA533E633BFE93469AABDE4B5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule.c86f284a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule"],{84361:(e,t,s)=>{s.d(t,{Z:()=>P});s(6886),s(36728);var i=s(2784),n=s(63752),a=s(69263),o=s(29496),r=s(45184),l=s.n(r),p=s(446),c=s(57604),_=s(55258),d=s(87053),u=s(76687),h=s(48501),b=s(40611),m=s(78956),w=s(85114);const g=l().ib65b1c6,f=l().f55cebb8,S=l().dcc304d6,y=l().g61ed8a4,I={clientId:w.fp,scope:"name email",usePopup:!0};class v extends i.PureComponent{constructor(...e){super(...e),this.state={isScriptLoaded:!1},this._is3rdPartyIntegrationDisabled=(0,c.L)("responsive_web_3rd_party_category_sign_in_with_apple",this.context.featureSwitches),this._isSSORedirectEnabled=this.context.featureSwitches.isTrue("responsive_web_sso_redirect_enabled")\|\|this.context.featureSwitches.isTrue("responsive_web_repeat_profile_visits_notifications_device_follow_only_version_enabled")\|\|this.context.featureSwitc

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1817)
Category:	downloaded
Size (bytes):	1975
Entropy (8bit):	5.32717174078096
Encrypted:	false
SSDEEP:	48:iIO3UyRjWRerKZ3kwFbGzC7YlqU+05Mg5ct4EYWmV:S3UCjHKZ39hGzC7YP5GY3
MD5:	42195D49E93DF3C2C8E461264380A30E
SHA1:	C34BD3B313BEBB1F7B9059744C45E3E440710871
SHA-256:	548B2C5201A25843C82437E73B7AE747CEA67595CCC681336763147207E16A56
SHA-512:	56DAC3965AEC7FCE20AF9D6A0DE70EAC1A02E4927943CAE31E4C5B816F91EE1CEEB3A73EA6CF052D20572DEF063824BC577DF8F2FE7D2D382B22B440199E09A2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.Conversation"],{45925:(e,r,t)=>{t.d(r,{zI:()=>s,ti:()=>f,bi:()=>c});t(50519),t(6886),t(75640);var n=t(24797),l=t(97871),a=t(34615);const i=Object.freeze({Web:0,Email:1,Partner:2,Market:3,Access:4});function s(e){var r,t,s,f;let c={};const{emptyIfServerRendered:o=!0}=e;const{httpReferer:u=(null!=(r=document.referrer)?r:""),query:_=(null!=(t=window.location.search)?t:{}),requestUrl:p=window.location.href}=e,{cn:d,iid:w,nid:b,original_referer:h,partner:g,ref_src:y,ref_url:m,refsrc:v,s:k,uid:W,url:$}=function(e){const r={};return["cn","iid","original_referer","nid","refsrc","ref_src","ref_url","s","partner","uid","url"].forEach((t=>{r[t]=(0,l.BX)(e[t])})),r}(_);let A=Object.freeze({});if(null!=e.referralMapping?A=e.referralMapping:null!=e.featureSwitches&&(A=function(e){const r={},t=e.getArrayValue("shortened_tracking_parameters_mapping");for(const e

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	543
Entropy (8bit):	5.501580638840677
Encrypted:	false
SSDEEP:	6:6v/lhPE0EswQ9SvnkkFOShjVHAcPicZzEQ6zgiRlWCsPBG8drm9jB3tbHup:6v/7MJs/9Svnk8OUjVgO5GnR9sPBEBhc
MD5:	8C6D3D65395902083479FD327F86A1D7
SHA1:	0667B3AE1799ACB8455631AEB99CEF56DDD43698
SHA-256:	DA8B7678427D3159D0F68EC15EC42B3536ED1D0085E94AFFBB1FD05C600B7420
SHA-512:	3A1577E6DF18C7A5257D3F2E979BEECBF2924B70DCDF01573280D942A1699FA7FF216527A9B6305A5B1073257F27C0D9FD2E5E47A556A37C9707716493D418AB
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yM/r/qUPkXkiEwfh.png
Preview:	.PNG........IHDR..............W.?....PLTE.......................................................................................................................................................................................Z.C...<tRNS......C.$..0 ..".<........B.......i.n.~.....{..........o...]....IDATx^E...0.D7q.N!....[{/...u52...g.#YP.82&.Sx:.O$...g4y....a.?.2V...i.2)+.\7a.......}.Dg.....0..3..Q...e,.....*........ys.`J....l..B.W}.........-..;......<1....[~...A7.#....=q!..........t-F6p.......y.vq..Zu... ........IEND.B`.

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/eFZD1KABzRA.png
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1297)
Category:	downloaded
Size (bytes):	1518
Entropy (8bit):	5.296864535736778
Encrypted:	false
SSDEEP:	24:iWGKfWGE5pWVCiu5FfEH8UCuId7FeOtTOFrkwrSX1lLbR2VTValbcqEByhuk94f4:iIKaC/ccUisF4weXZEsOqEAQhfUnMUWc
MD5:	799255819606A78E2E12061BC4E9D0EE
SHA1:	75EF6E846F93825318E797CB8187206CFD622A41
SHA-256:	8E19DC3EBC9E89ADC3E635D419020AD3E1669AA79881B1C6E00A16DECA3FDE2E
SHA-512:	88D26943CB215C2895B6DD3CA678CD7FB093AC5B07EDBF4B47BA6F03CBFF5E600AB8CA942A8F973305A228D3CC3FFF0F79FB1BDB79E7716EFF964E91C4B41111
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Ocf~bundle.ReaderMode~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer.5947c02a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.ReaderMode~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer"],{67026:(e,t,n)=>{n.d(t,{Z:()=>c});var r=n(2784),a=n(44542),s=n(45184);const l=n.n(s)().b2311b70;function o(){return r.createElement(a.Z,{onRetry:null,title:l})}const c=r.memo(o)},5621:(e,t,n)=>{n.d(t,{Z:()=>C});var r=n(2784),a=n(44542),s=n(41441),l=n(82392),o=n(29496),c=n(73186),i=n(45184),d=n.n(i),u=n(72175),m=n(76687);const p=e=>(e.staticContext&&(e.staticContext.statusCode=e.status),r.createElement(u.ql,null,r.createElement("meta",{content:"noindex, nofollow",name:"robots"})));p.defaultProps={status:404};const b=(0,m.ZP)(p),w="error-detail",f=d().e49537c2,y=d().a9ae1e78;class C extends r.PureComponent{render(){return r.createElement(a.Z,{testID:w},r.createElement(b,null),r.createElement(s.Z,{style:E.root},r.createElement(l.ZP,{align:"center",color:"gray700",style:E.re

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5114)
Category:	downloaded
Size (bytes):	390189
Entropy (8bit):	5.575848958777119
Encrypted:	false
SSDEEP:	3072:rdb2iCsJ8KRg6o7C2pjLJLPGMZ1xBHMPGsMgr3nyH+K/HinZAq2LvNAL0jkN:12iCHv7Tp5LPGMZ1HoncHGAq2LvK4w
MD5:	28BC7F9649CD493F98F865DBDA643AFF
SHA1:	867434CDAB79CBD7495097447914DA6212F6686D
SHA-256:	9C17E71CA76F3B874E0C4057194FCDD43187C4C24E6CB8F09D4B011CA91BF6E5
SHA-512:	3A4E7874F2BD4490838555697C51B5C75FAAE431BD9CDB067344C9DD280455FF9D5EC6E112D4CC0374CAEE36B5198A60868619DD11BFF24E5EC751A044A3E37C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3imEC4/yk/l/en_US/xJzhrSBy9e0sDrjlMfQMscqSWxwfxs4Y2DYvatkvPhoOrXpYBH72fzljBzpJFpC9mNK-Y4V06Ed5K1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("GenderConst",[],(function(a,b,c,d,e,f){e.exports={NOT_A_PERSON:0,FEMALE_SINGULAR:1,MALE_SINGULAR:2,FEMALE_SINGULAR_GUESS:3,MALE_SINGULAR_GUESS:4,MIXED_UNKNOWN:5,NEUTER_SINGULAR:6,UNKNOWN_SINGULAR:7,FEMALE_PLURAL:8,MALE_PLURAL:9,NEUTER_PLURAL:10,UNKNOWN_PLURAL:11}}),null);.__d("IntlVariations",[],(function(a,b,c,d,e,f){e.exports={BITMASK_NUMBER:28,BITMASK_GENDER:3,NUMBER_ZERO:16,NUMBER_ONE:4,NUMBER_TWO:8,NUMBER_FEW:20,NUMBER_MANY:12,NUMBER_OTHER:24,GENDER_MALE:1,GENDER_FEMALE:2,GENDER_UNKNOWN:3}}),null);.__d("BanzaiWWW",["cr:1642797"],(function(a,b,c,d,e,f,g){g["default"]=b("cr:1642797")}),98);.__d("react-forget-runtime",["fb-error","gkx"],(function(a,b,c,d,e,f,g){var h=null,i=null,j=!1,k=a.console,l=[],m={};a=c("gkx")("21075");var n="Jest-Only Fatal: ";a=a?n:"";["useCallback","useContext","useEffect","useImperativeHandle","useInsertionEffect","useLayoutEffect","useMemo","useReducer","useRef","useState","useDebugValue","useDeferredValue","useTransition","useMutab

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1340)
Category:	downloaded
Size (bytes):	1558
Entropy (8bit):	5.389045061394652
Encrypted:	false
SSDEEP:	48:iIKQ5JNeGmn6SPZSjilVanAiKySkRf/Vat6D9QQ9QwpmJWmsa:OQoGm6RkkVI8hQYQwAJaa
MD5:	0F6C80770E8D3AAF98C74A8AE2439BCD
SHA1:	5E4F07B383A4CE907D714371ACD22D259B21DE4E
SHA-256:	2408681D1B4DDC1E2829DB06381890F9FEAEC0E598EA0B0A388EDCD427571FC9
SHA-512:	3FFE4F155CDA57673042C7E7B67CE93473195B193317B71FEB24D96BD53794BF5DDACCEC6B13C4DE8049829D33D17530567E0542A2800942218DE263E99FB59A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu.1c9b673a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu"],{57751:(e,t,n)=>{n.d(t,{Z:()=>d});n(36728);var o=n(95024),r=n(50813),s=n(75455),i=n(18013),a=n(66961);const d=({addToast:e,createLocalApiErrorHandler:t,dismissUserFromConversation:n,hasPremiumPlus:d,history:u,mute:c,muteAdUpsellEnabled:l,promotedContent:m,scribeAction:h,unmute:p,user:w})=>{const _=()=>{p(w.id_str,{promotedContent:m}).then((()=>{e({text:(0,r.X6)(w.screen_name)})}),t(i.G)),h({element:"unmute"})},{Icon:b,onClick:v,text:C}=(0,r.N1)(w,(()=>{c(w.id_str,{promotedContent:m}).then((()=>{n&&n({userId:w.id_str,feedbackKeys:["UnfollowEntity"]});const t=!(null==m\|\|!m.impression_id);if(l&&t&&!d){const e={variant:"MuteAd"};u.push("/i/verified-get-verified",e)}e({action:{label:o.d,onAction:_},text:(0,r.FK)(w.screen_name)})}),t(s.W)),h({element:"mute"})}),_);return{Icon:b,t

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6544)
Category:	downloaded
Size (bytes):	30729
Entropy (8bit):	5.581259477526867
Encrypted:	false
SSDEEP:	384:dngMmkEeGSQnBx355zXv2Vpfd2A2YjM8oo5hdvWewVebB:pgVnPBh55zf2l2YxC4
MD5:	9B6A2F4E0DB59CC566EA84E957EF1BFC
SHA1:	F4BC790E11E08F3668666BD665649924543406C7
SHA-256:	13EB23946D1B6FAC23FDD825B793DBE34FB480E98BE6A3FBAA65735F02EB52E6
SHA-512:	A465C12D6699389F0EAE9BAA9F3807EC0B2CC0F2A99E6F8CD9FE4337DED7809AC380B16BB1A4BD4BACF80992CB0CCEEC99D481B88DF6CC9EF93CBDD226F5971A
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i0Wo4/yH/l/en_US/tAGk4PH_nhv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometContextualLayer.react",["BaseContextualLayer.react","react","useCometVisualChangeTracker","useMergeRefs"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a,b){var d=c("useCometVisualChangeTracker")();b=c("useMergeRefs")(b,d);return i.jsx(c("BaseContextualLayer.react"),babelHelpers["extends"]({},a,{ref:b}))}a.displayName=a.name+" [from "+f.id+"]";b=i.forwardRef(a);g["default"]=b}),98);.__d("CometTypeaheadProgressGlimmer.react",["CometProgressRingIndeterminate.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(){return i.jsx("div",{className:"x6s0dn4 x78zum5 x1iyjqo2 xdd8jsf xl56j7k",children:i.jsx(c("CometProgressRingIndeterminate.react"),{color:"disabled",size:24})})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);.__d("CometTypeaheadViewItem.react",["CometPressable.react","CometRow.react","CometRowItem.react","emptyFunction","react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	5.076571010714802
Encrypted:	false
SSDEEP:	6:neE+TNWxA9AWxEb9W6Rho6FOLTwuq67AJ/o6F5Z05fB1JLtdAsdD4kPuNyqWn4C7:nCTE24u6wLTwv67i/o6J6JZdTIEqWhPD
MD5:	D3CDE936C4C14CA5B05EECFC390E9E60
SHA1:	96DB5ED0FD6B53694D0AC8BE7FE8205CDE01095E
SHA-256:	5E1B0D0E9A85BC37E7556F8990B83DEB13B7F9B8FD44C0ACC29AC2183DB6A7BE
SHA-512:	1AE0C6C89DF1D6733919A52755AEFDCC10A016745C6ADF41EE15C0D61B50F05D9C368A52935800986BC959D7D64735F8AD4048A33982DC60B1421B030E562B73
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/AESOP/module.css?cdv=158
Preview:	./* bootstrap definitions needed in non-bootstrap skins/..../ GG DNN Forms */...errorDiv_top {.. text-align: left;.. padding-top: 0;.. padding-bottom: 10px;..}.....divShareThisLink {.. text-align: left;.. margin: 2px 2px 12px 2px;.. font-family: Verdana, Arial, Helvetica, sans-serif;.. font-size: 9pt;.. height: auto;..}.....stButton .chicklets {.. PADDING-LEFT: 10px !important;..}

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	308358
Entropy (8bit):	5.383716686073885
Encrypted:	false
SSDEEP:	3072:dU4/t7nOLon79QpjMuxW+spF/1zv7kO+LP0aEBBD06FcGVaPKazGVxCtJztZ:/Ls8ZejMyWPJ7uX61iGVorztZ
MD5:	86BA67B8A6E764C0414C2CBA1D7673FD
SHA1:	B333673876DFF7B6179BAD917365AF8D07E9A6CB
SHA-256:	BF6FB18C000B577AAE35EE333BE0048E4CB37E069247C78B0978F60FF33507A4
SHA-512:	540A18878EA4DBC9EBD1E43639DFD3953DA153ADA07A4D77BE4A2AA2681399F36377E029FCF107AD5A0EFC350A154C5927242B0FE5BD8988CD838D6928BBDB3D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu.fc8f281a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu","icons/IconSortUp-js"],{70828:(e,t,i)=>{"use strict";i.d(t,{Z:()=>n});i(2784);const n=i(15954).Z},31573:(e,t,i)=>{"use strict";i.d(t,{Z:()=>o});var n=i(2784),r=i(679);function a(e){return n.createElement(r.ZP,e)}a.sensitiveMediaTombstoneConfig=r.xh,a.sensitiveMediaWarningTombstoneConfig=r.ui,a.sensitiveMediaVisibilityResultsTombstoneConfig=r.xg;const o=a},70628:(e,t,i)=>{"use strict";i.d(t,{Z:()=>n});i(2784);const n=i(62002).Z},73395:(e,t,i)=>{"use strict";i.d(t,{Z:()=>n});i(2784);const n=i(96182).Z},79135:(e,t,i)=>{"use strict";i.d(t,{Kx:()=>s,ZP:()=>d,ad:()=>c});i(6886),i(36728);var n=i(2784),r=i(7267),a=i(48501);const o=new WeakMap,s=e=>{o.set(e,0)},l=new WeakMap,c=()=>l.get(n.useContext(a.rC)),d=e=>{const{children:t,deletedTombstoneType:i,forwardPivotInfo:o,tweet:s}=e,c=n.useCon

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2287
Entropy (8bit):	7.877331157180108
Encrypted:	false
SSDEEP:	48:+s5gVzMbNO+tSxCJkyeO5wntfQMZ0ooVxT028NhLDaj:OVzP+uYwntfQMCooD0PXfaj
MD5:	FDC852149346F7E9AB72E5A33DB9447A
SHA1:	6A8A4CBF9D08B4C63D481FBAE5D1AF224DC35BA9
SHA-256:	2A51D168D00538767D9FFD2BA75342CF32FD69062A8BCE5239B48C709D97BAC8
SHA-512:	2B559DA907B2A059ED1BBC78AB2292FE5BC8C896D8807C95BDC157703586F89830141819F4B93D9BCAA6F3AB7310BF1A86ADA500DB81778F0985A33BF7F6566D
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-1/276269061_277708347876894_5728540495443750993_n.png?stp=cp0_dst-png_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=CsD_9pI4JToAb4bQu5G&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCJKiCsTTmbEVTCI1MEQLiu_2h5TWG2Fgy6FRIDb5h0NQ&oe=662E7DAA
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....RzTXtRaw profile type iptc.........0.....8.e.q...`..?...b.D;s........K&.-.2QC...e..!'.....KIDATX..X[......sN..vf..{_n.v#..5$.K...X..LRj.QI%...)..\..S.$XJ.T.X.I.".hi.(e%.............s.<....{..a.t......!l..W&..A...yt1...<.x%...!A.D.av.... ...`...P..P......i....3&.#.n..-....W%..R....x-.s...w....[..df..~`)H.F;~Ce..%3./,..2........F.1p...Ef{sO..AH.!i&.N..X..~i..tG.....,.:.6......Si...@.E..$.eu...E...~....,lqu.%.?.......JB....i./.u...K.c.......$.%<.Y........w;C...,.J..:.q&.K.. .:.7........'z...d{...;..XQ..&..`....Z....=...a_......u}....a.%.....N=.......ro....3.3.kF.-...eu.u..f..q...[-...~.#.......+A.....u.Z[...`.z.`..7.....w....}}...../c.ah.-.:;..o6.3.7lI......~..[.Y.`..KA:..cQ..'n..R.............>..FL)%.Zc. "@3.c.~tE....p5..l.y........&.iNF.....f.Dm..[..RWl.v9..UXj=UpJA....xn..'.U.-.0.$..8...2..(....".....T',.,.D...3....g.l.O..@.........g.-..`..f.W..k.Y@..Q...*...........}G..%}. L.9N<.V

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4109)
Category:	downloaded
Size (bytes):	4267
Entropy (8bit):	5.175515439009651
Encrypted:	false
SSDEEP:	48:iIgwoCJoUMX8wILly1uyalqolvFrA3AqFzzhq1Ok61B5RP1FCRuf/o6CfF8fjcSF:mCGUMN8y1undlZKFkcVRP7CRTt8fjjoG
MD5:	4B2D6C3AA2BF6FCBC963C26D60EB0593
SHA1:	FD2D8599D61A8D3DA043C3C111287DBF682C44BF
SHA-256:	18FDA94AD2758EE905F8427E74975A46116538AB3FA7BC4C1059816A56A20374
SHA-512:	C9BFF9FCC6125E5441B0EA07E3CD62B5E228202698C7DED45AA91EB9770B5BB82A7F89165130F7198924BDA6D90A1375E7642D86CC94FD3A615857E55E5523B2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.WideLayout~bundle.Conversation.8c6c71fa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.WideLayout~bundle.Conversation"],{93077:(t,e,i)=>{i.r(e),i.d(e,{StickyView:()=>d,default:()=>g,roundToNearestDevicePixel:()=>p,useStickyViewNotify:()=>u});var s=i(2784),o=i(25686),n=i(55249),c=i(54044),r=i(73186),h=i(66927),a=i(6149),l=i(8329);const p=({cssPixels:t,dpr:e})=>Math.round(t*e)/e;class d extends s.PureComponent{constructor(t){super(t),this._setContentRef=t=>{this._contentNode=t},this._setContainerRef=t=>{this._containerNode=t},this._handleProgrammaticScroll=t=>{this._prevScrollY=(this._prevScrollY\|\|0)+t,this.setState({contentOffset:Math.max(0,this.state.contentOffset+t)})},this._handleLayout=t=>{const e=t.nativeEvent.layout.height>this.state.contentHeight;this._updatePositioning(e)},this._forceUpdatePositioning=()=>{this._updatePositioning(!0)},this.state={stickyTop:!0,stickyThreshold:0,contentOffset:0,contentHeight:0,stickyOffset:0,position:"sticky"},t

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	11494
Entropy (8bit):	4.5730700893887075
Encrypted:	false
SSDEEP:	192:mQHTjtWwxR4m5zPwOkmhWHzrQXABKid73KhPie80kDLLEd:mix/51QchPie80kDLLEd
MD5:	1FF71CA63503B6940FAAD910BD546C8B
SHA1:	EC6290A4A106A2C05F9DD457A771144C705A7A9B
SHA-256:	F58C73D2C04F59EEF4AF7FBD84362D4FA49188043405516AA35EE8C412D0DBC1
SHA-512:	139E57610FE5311F59D922751D36B24A3D965D334A216AF3645E3C6B9A520717E60A0B612E94E8761EDD811D8AC7AF21696C134B96099FBBAE3B633E60E107F0
Malicious:	false
Reputation:	low
Preview:	/*..DotNetNuke - http://www.dotnetnuke.com..Copyright (c) 2002-2007..by DotNetNuke Corporation.. ..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated ..documentation files (the "Software"), to deal in the Software without restriction, including without limitation ..the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and ..to permit persons to whom the Software is furnished to do so, subject to the following conditions:.. ..The above copyright notice and this permission notice shall be included in all copies or substantial portions ..of the Software... ..THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED ..TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ..THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN A

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3971)
Category:	downloaded
Size (bytes):	151546
Entropy (8bit):	5.411191157272343
Encrypted:	false
SSDEEP:	3072:TVuhp4iaafRo8meL1JquiZwUwmYEu+1var6:e4iaafRo8meL1JquiZwUwmYEu+1var6
MD5:	CE0632F21D790B35C986C76A641A7857
SHA1:	35331F7D9FC92563AB5FF05DB8EC6078F8C1140B
SHA-256:	7F9D147B77037D619EC9B0498EA8AFE1DEFFFD2E9A59D120DFAD9A8E50EB8A64
SHA-512:	B35E8C2791E3A4C97AF7E273C2F648249E77E5F93E702D2E7A29B2B1C1B2703B2F1B77A0DAB5E5EF96C0D47CB6C094EFC40C5873C99AD1B06C908C3091320CC6
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iPFs4/yb/l/en_US/fyk_ahmEKSN.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometUFICommentWrapper_comment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometUFICommentWrapper_comment",selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"legacy_fbid",storageKey:null},{args:null,kind:"FragmentSpread",name:"CometUFICommentEditor_comment"},{args:null,kind:"FragmentSpread",name:"CometUFIComment_comment"},{kind:"ClientExtension",selections:[{alias:null,args:null,kind:"ScalarField",name:"client_id",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"optimistic_action",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"optimistic_error",storageKey:null}]}],type:"Comment",abstractKey:null};e.exports=a}),null);.__d("CometUFICommentWrapper_feedback.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"useDefaultActor"}],kind:"Fragment",metada

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 52, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	59766
Entropy (8bit):	7.0626924005843765
Encrypted:	false
SSDEEP:	1536:VNp5qJ9evYLkDVLzMnxL//DwWvHMHpaqKN8:wevsALoxzDwVHc38
MD5:	E45945A496649F07ED678721C0DBB752
SHA1:	B0D453092D4EA1245244A70D524DBB9C0C2A6E9D
SHA-256:	8C2E98CB5F859041A574DF620CFB88245B41101B14E052BB9BFF178A6A42C4DE
SHA-512:	52436B1FD3D250145ABEA173DCDF5E6964A200A1D73CC28EEE21C3EC84CA21A5C8740621EFDC293DE884E701B35D3382E494FE9B94D98CA3D0879D53036208EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....Q.p\....sBIT....\|.d.....pHYs.................tEXtCreation Time.10/17/13.......tEXtSoftware.Adobe Fireworks CS4.......prVWx..[.x.U.. ..:.....FH.0n`...g@A.AEEa......{W.]...QTP"..,n.(.=....E.\.E....Hg..[}A...a..5..]u.:.=.=.TU..AG.A.\.r.o...hcc.v......4VTT.........~l6[c...f..6.6[......6.r+r+.g.V....T.+.l.-W..k.:.^n..........[...;..{.....r..A.H.......Q.T.L.$o...[.m......W.v.ky..S.%........{.}.....~....\|P.I.Y.E.U>$....MrBn.[.V.Mn.;....3t..H..`...t.....ip...L..gA:...^`..p6..}.\.@_8..A..l..9p>..A........b.......ra(... .........Ja8.....7.......F......k`,..ka<L...z..&.p........&...;..Sa...2.X..vp.....n...\|P.~.@.B...D!........P....p......0.........,x......<.........0..I..O..x.........`1,........Ex.^......Wa%....X.k.....j.....`-.......o...........\|....>..@...N.L..>.M....V......%\|...k..;a..o.[....^..........p.~........a8.M..fh.Vh.v..I.-.o-..Z.....k.Uo..5fU..5nEVl%..WZ.....k...Zom....6[[...6k..Cw.<[...Vh+...Jl.6.....M........._i..U.jl..:[..A

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7727)
Category:	downloaded
Size (bytes):	7865
Entropy (8bit):	5.149427935150509
Encrypted:	false
SSDEEP:	192:uJ288ybeRwinoc8ziC/pnR9KCYplpRC5St:uJl3beqioVeuClpn
MD5:	A9B2DB274403F9C12B36CEA8387B9D84
SHA1:	148004269ACB26EC6D62E0FCD215F44CFB3D3157
SHA-256:	CAAE630EF943A036737D23EFBAE960A1E1180AE70FF38E5EED1A38E6498E32A0
SHA-512:	D4153A074C6656765500AA1DE1ACEE50189B19B7565BB13829959D8C79703A2BBE50E87113AC5076FE4359E6B504D4CA2416C55F581C44CB1E12F09C68E61884
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.4a624f8a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.NetworkInstrument"],{88170:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});n(6886),n(14121),n(60523),n(43673),n(40753),n(28399),n(36728);var r=n(77799),s=n(56776),i=n(59211),o=n(56992),a=n(63174),_=n(63140);const u=[_.ZP.BadOauthToken,_.ZP.OauthTimestampException,_.ZP.BadAuthenticationData,_.ZP.AccessDeniedByBouncer];class c{constructor(e,t){this.scribeRequest=e=>{let{response:t}=e;const{error:n,...r}=e,i=new window.URL(r.url);if(n\|\|!t){const r=new window.URL(e.url);if(t={request:{host:r.origin,method:e.method,headers:e.headers,path:r.pathname,uri:e.url},headers:{},body:"",status:n?n.status:500},!(n instanceof a.Z))return}if(this._shouldFilter(i))return;this._flushResourceTimingBuffer();const o=(0,s.Z)(this._buffer,(e=>{const{request:t}=e;return i.protocol===t.uri_scheme&&i.hostname===t.uri_host_name&&i.pathname===t.uri_path&&i.searchParams.toString()===t.uri_query}));if(o){const

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1109)
Category:	downloaded
Size (bytes):	1271
Entropy (8bit):	5.27455330964738
Encrypted:	false
SSDEEP:	24:iWGKfWGE5pCQwqNFlPPAVJSd7IzIDawwTd+7N8WmsCDL:iIKaqXlP/dlwTdKN8Wms4L
MD5:	673801BEED84964699D157C7012607F9
SHA1:	7490693F810E651CEABD8757DDDAD5C2D41645BA
SHA-256:	6690A1938D1FFC614E90ADE598A47366F7791AEDE396619B3155CED94CFC8C9C
SHA-512:	6A56CCED9E89A30FAD7A2742A2D58483ED4219255CE760D783E3066608F85FB1BA523224B74FBF7BB24CE68DFC1AA5FE4F93B94BA6BDD29FCBF988B13B038808
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.805d830a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfile~bundle.UserProfile"],{67320:(e,n,t)=>{t.d(n,{Z:()=>d});var r=t(2784),o=t(45184),i=t.n(o);const c=(e,n,t)=>new Date(e,n,t),s=i().a46f80ab,u=i().c7905f89,a=i().ba2e82a1,b=i().da44942d,f=i().d7d71245;function l({birthdate:e,withBornPrefixText:n}){const{day:t,month:r,year:o}=e,i=!!o,l=!!r,d=!!t,m=!i&&l&&d,_=i&&(!l\|\|!d),p=i&&l&&d?function(e,n,t,r){const o=c(e,n-1,t);return r?s({birthdate:a(o)}):a(o)}(Number(o),Number(r),Number(t),n):m?function(e,n,t){const r=c(0,e-1,n);return t?s({birthdate:b(r)}):b(r)}(Number(r),Number(t),n):_?function(e,n){const t=c(e,0,1);return n?u({year:f(t)}):f(t)}(Number(o),n):null;return p}const d=r.memo(l)},78727:(e,n,t)=>{function r(){return{section:"category_label",action:"impression"}}function o(){return{section:"category_label",action:"click"}}function i(){return{component:"professional_conversion",action:"click"}}function c

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10825)
Category:	downloaded
Size (bytes):	84197
Entropy (8bit):	5.1544067181324955
Encrypted:	false
SSDEEP:	768:UCoSVtBHyOJR9DrJXjDr3BRl3rhZtXJB3LpV9lrFfj1xrhi7TD5FKz2LgUaXcVBz:R4rKzia4fWJAWM
MD5:	C688B6670E544F8A3CC9A2D7D93814B0
SHA1:	87BBCD60BDC62127908CB52C312D0A164EB1D688
SHA-256:	3158983D17665103A9CE2F7825A270A786246DA2E1956A8886A34535B84538FE
SHA-512:	3837C1E9E118BD495244C8F22BB43B5E5E279FD4DB5050D663D38AE77DAE6298F01631BA3E5EBD58C1A5182F6EB0D21CA7007217C7FFE2DEED5B8AE848BF70C1
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i7rS4/y4/l/en_US/k4jQ2q4LsnA44fB8fr7zjE.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometShortenedExternalUrlEntityRenderer_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"CometShortenedExternalUrlEntityRenderer_entity",selections:[{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"external_url",storageKey:null}],type:"ExternalUrl",abstractKey:null}],type:"Entity",abstractKey:"__isEntity"};e.exports=a}),null);.__d("CometUFICommentListRenderer_feedback.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{defaultValue:!0,kind:"LocalArgument",name:"canShowSeenState"},{kind:"RootArgument",name:"feedLocation"},{kind:"RootArgument",name:"feedbackSource"}],kind:"Fragment",metadata:null,name:"CometUFICommentListRenderer_feedback",selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:null,args:[{kind:"Variable",name:"feedback_source_integer",variableName:"feedbackSource"}],kind:"ScalarField",name:"

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28402)
Category:	downloaded
Size (bytes):	28572
Entropy (8bit):	5.312395956413935
Encrypted:	false
SSDEEP:	768:4FwAnd+0A8eHsHjSKzh9/qxtDMsLJFh+7uLRELWgkm:4Si+nwjSKzItDMsLoLWU
MD5:	2B67FBB4BD06F6D54D4041DDBADA1239
SHA1:	40829543912463F178361ABC69C868C8A67BB7E7
SHA-256:	B3678577E9D4473CD9422AAE58857B88EAC5E6CA785FBA97831C18AC167A7A27
SHA-512:	0E67F60C92A382D4E5062791591304D2AEE6FF074C7B577CCD800481431B43DBCA4DAB23E389EBB5AC32BE03D8A4F933D3B97B506D109B2022BEF198203B1A2D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.inlineTombstoneHandler~loader.tweetHandler.1451db7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.inlineTombstoneHandler~loader.tweetHandler","bundle.AudioSpaceDetail"],{18892:(e,t,o)=>{o.d(t,{g:()=>s});var i=o(7896),n=(o(36728),o(2784)),r=o(25686);function s(e){const{style:t,type:o,...s}=e,d=[l.container,t];return o===a.transparent&&d.push(l.transparent),n.createElement(r.Z,(0,i.Z)({style:d},s))}const l=o(73186).default.create((e=>({container:{backgroundColor:e.colors.cellBackground,borderWidth:e.borderWidths.small,borderColor:e.colors.borderColor,borderStyle:"solid",borderRadius:e.borderRadii.xLarge,marginBottom:e.spaces.space16,overflow:"hidden"},explore:{backgroundColor:e.colors.gray0,borderColor:e.colors.gray0},transparent:{backgroundColor:"transparent",borderWidth:0}}))),a=Object.freeze({transparent:"transparent"})},51507:(e,t,o)=>{o.d(t,{$6:()=>s,eY:()=>l,zt:()=>r});var i=o(2784);const n=i.createContext(!1);function r(e){return i.createElement(n.Provider

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3568)
Category:	downloaded
Size (bytes):	3734
Entropy (8bit):	5.407871275918601
Encrypted:	false
SSDEEP:	96:K/yrcEooTTD0/LtVK2lrKdm1K90tPXBRwSgjhg:AyrfoofErjlrKdm1K90tfBq56
MD5:	5DE2FC9AF2468507CDCB608B839C7E7D
SHA1:	9DC7A851F03544F26F1DBC732E94A4DBC6A578E4
SHA-256:	CD5D376D3FA7C5EB46DCB5B0A0A5126986D84E7FB3CCBE5B6F9FCD7D624CFD33
SHA-512:	7244CBD51E76AC2A7BCAA84820B3C19639D49E8FFCF561AEF61AC8D309736EA71903CAC19FC5EE414B5369E1C8456858B215C846711F8F9E5EE46886C32F87BD
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.0a0a422a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.WideLayout~loader.ProfileClusterFollow"],{68755:e=>{e.exports={queryId:"jTviiQMKeTlfHiYFZfNOVg",operationName:"SidebarUserRecommendations",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","responsive_web_graphql_skip_user_profile_image_extensions_enabled","responsive_web_graphql_timeline_navigation_enabled"],fieldToggles:["withAuxiliaryUserLabels"]}}},24710:(e,t,r)=>{"use strict";r.d(t,{C:()=>s});var i=r(1206);const s={[r(63140).ZP.ResourceNotFound]:{customAction:i.Z}}},21292:(e,t,r)=>{"use strict";r.d(t,{yY:()=>Z,UD:()=>R,Ic:()=>A});var i=r(60917),s=r.n(i),n=r(6899),o=r(17360),a=r(90650);const d=new n.fK.Entity("recommendations",{user:a.Z},{idAttribute:e=>{var t;return null==(t=e.user)?void 0:t.rest_id}});var l=r(68755),c=r.n(l),m=r(13239);const u=new n.fK.Entity

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 152x152, components 3
Category:	dropped
Size (bytes):	8176
Entropy (8bit):	7.908831390238996
Encrypted:	false
SSDEEP:	192:3O2PFMOt8g48dh/IF61e47EmNR7tcY6eI32MYfcNUMdlG:3O2PS4VrJEm6Y6ew2Z
MD5:	CC470418AA5D0D0528615FB8535EE58B
SHA1:	D53523341E2DFAE041582CF464FFDA01C56D8EB2
SHA-256:	5B50514A222C061228C81DD77C449DBA2907D512022FA9472522629532750780
SHA-512:	E4E6C28165DF35BAD9045E2FD870769D138254609091CEBE98EC30E4F2B4B2C76C32331B3972729CA297902009DC83E6B96D5F18D63E93AAE157D4A7ABCC7054
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000059030000dc060000d7070000be080000330d000028130000ab130000f514000002160000f01f0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................&..m4+...`..rtA.z!.dc8z9.j.....5AT...X..j]J.UQ.l3#.(.)..8.....U..i..+.D5`.Q...&........ .....X..J..Z~#6..<.tC..D....].m.F...9w.4....;..YG.eTH..:..a....YF.F.T.....@.b.z..'S...h.=..c'..\|z\|..:.!+......y~.0...sC.x...._)e.>U.Z...g..\|z<.......\|..s...T%Yj9W./.Y.q'.....M_4.A.USZ.\|V..x.>o...`..=...J.r.Og..............%..=h.3..`....N.AM.UZ...........+.]v1.\xs....v_ .-{K....,6.p...o.G.)b..lR....u..I3. I ...+...........................!"#1.. $3A.2BC...........P.WN.2.....gnY..r....>..E..H...[....R.s<<.=....h..ZmD.x.1.Bq<.~%yK]...N..[..X.@-l!...0!3....{0{.....K9.g..Y..P..HF.\|G....$'..

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	151112
Entropy (8bit):	5.436457227851175
Encrypted:	false
SSDEEP:	3072:1FiVxW5Sn9rC88Bp0bZcdctMXQgCe6rzsMVv1:1FAxWGhcwZ0rgje6rzsMP
MD5:	4CB08CE34E989E6B7799216A5077C495
SHA1:	131453E3A82E4961BF9A5A4A347703DCAF890FC1
SHA-256:	B3790AAF2C91DC30C90A8E9BC622D7DD480AEDBD56550E082F040AF9AA10CA62
SHA-512:	F6FD757B09A802EB1F790F56D901D4EA3B8C035E22D4922A7135476ABD5396271B66E1442EA36BED30CC56E54F9F7100D6EBD9CC6EAA2DB8E7983262557020D7
Malicious:	false
Reputation:	low
Preview:	....KEYF....................@......C...CUU.?...A...............................................................%.......c..........$...0...4...4...D...H...L...T.......,.............d{<......?x...H..............?...?\.....RCd.....RCl.......`...X...................`...T...H...<...0...$.......................................................\|...p...d...X...L...@...4...(........................!.=.!.=.1.=.!.>J)%>.1F>.9g>.!.>)..>J).>k..>.1.>...>.9.>..>.!.?.c.?)..?:..?J)%?[k-?k.5?\|.=?.1F?.sN?..V?..^?.9g?.{o?.w?....0_...[...X..XU..$R...N...K...H...E...B..d?..0<...8...5..T2.. /...+...(...%..."..............4...............T...\...........^.......f.......n.......v.......~.......................................................................................................................................................................&...............6.......>.......F...........................\... ...........l...0...........\|...@.................. ............. C..RC......#C..RC.......C..RC

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	6756
Entropy (8bit):	4.943823679998798
Encrypted:	false
SSDEEP:	192:Gzlkq+gKr4qpYt0pSjgiJ0MwHa4o+lld/9p6:1qxKr4qSoSjgiJ0XHDhlld/j6
MD5:	AAC18EC46CDFF4E56D77EC8EE1DEC2C1
SHA1:	81F294310D14E041A3E3F58595A33306097DE207
SHA-256:	E13171DD374E3750F9CCFC1B8AFAF4D4BBAA6838C9550FD3ECC9A39D9EA128FB
SHA-512:	C23CF65449B2ADD4BF6689CE5FB7D3904D057FB008E5C5494447872EB4D7450D5A455ADFC32B64894CCC781179CD7E6BB48C8EE4C2F62C271C57ED5349948D53
Malicious:	false
Reputation:	low
Preview:	....KEYF....................@.....1C..1C.."@...A......................................................0.................................................H.......$...(...,.......p.......l......?...?.......B.......B............................(...@...X...p.......0...... ..............................................(...8...<...@...P...............@....r..$....... .....+?..+?8......@@.....1?H.......D....A.A\...........................\|...@................... ...........{.>@q=.A....\.....A......?Aq=.A<........... ...........\...=..@....{.>@........\.....cAt........... .............A........q=.A=..@......?A................ .......4...q=.A..A@.....Aq=.AL...q=.A..cAl.......`.....?Aq=.A............................................ .......H...$..............>..{?.....a.?..u?.a.?...................?..?.......>...................?..?.......>............H.:?H.:?(.....@0....r.@8.......4...]..?\@'A....................$...(...,...4.......t..................c.T.......k.................

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19260)
Category:	downloaded
Size (bytes):	19401
Entropy (8bit):	5.370085464606305
Encrypted:	false
SSDEEP:	384:UUChDxbVsneSvhUzuTzrhian5i2ip2q2d9hFGIyyCMzm:UUChDxRsEqfrn5i2iDC9nGI95zm
MD5:	E4C7E06785FA68DA5F558CC922975EF2
SHA1:	D84FE64628AAE149C76A227C74CED300E1FBBFFB
SHA-256:	CCFAA5A1AB7D26FECDEE9C6E786420040DF79BAC1AF4C80463D772A7145BB7F6
SHA-512:	9DEE09F4910AA8A1A7EFEDF3A52073CE1B144574B65F40D82E78A0A206CB058D22A26AAC68A09DCB99D352D2054A482384289EC68BDDA32337CC12D1418C0A87
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Ocf~bundle.TV.3370ea7a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.TV"],{39515:(t,r,e)=>{var n=e(38761)(e(37772),"DataView");t.exports=n},89612:(t,r,e)=>{var n=e(52118),o=e(96909),a=e(98138),u=e(4174),i=e(7942);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},80235:(t,r,e)=>{var n=e(3945),o=e(21846),a=e(88028),u=e(72344),i=e(91764);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=o,s.prototype.get=a,s.prototype.has=u,s.prototype.set=i,t.exports=s},10326:(t,r,e)=>{var n=e(38761)(e(37772),"Map");t.exports=n},96738:(t,r,e)=>{var n=e(92411),o=e(36417),a=e(51660),u=e(79493),i=e(24150);function s(t){var r=-1,e=null==t?0:t.length;for(this.clear();++r<e;){var n=t[r];this.set(n[0],n[1])}}s.proto

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10837)
Category:	downloaded
Size (bytes):	11060
Entropy (8bit):	5.4630125795009565
Encrypted:	false
SSDEEP:	192:Kcl4oTYREST34JsTqcLkkpScmGe0nRgMn/U5JrUC81NhH0/+AgNbF9m0:KcuuY34JsuIY0gMM7E1fH0WAUbF9m0
MD5:	7B222319931C1452F053F13347BE9DE7
SHA1:	8562D167981ECB21500A6CC3BA35E398F45BDA76
SHA-256:	4195DA52E78FC8EE28EDFD12C884E09CCC5198E2EA5237D6F0E8DDC364338B05
SHA-512:	CD76DC963295DE9031C076B8E6237B1E96A076BF3B2165D3D2F7717E5FAA663727EF54CF1879751133FDA872B72EAE4C569AF4D7C60DA81FB5D6510963FA0350
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun.b2aa875a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun"],{3613:(e,t,i)=>{i.d(t,{Z:()=>a});i(36728);var n=i(2784),o=i(25686),r=i(91300),s=i(73186);const a=({children:e,color:t="gray700",size:i,style:s})=>{const a=[];return n.Children.forEach(e,(e=>{const o=a.length;e&&(o>0&&a.push(n.createElement(r.Z,{color:t,key:`middot-${o}`,size:i})),a.push(e))})),a.length?n.createElement(o.Z,{style:[l.middotGroup,s]},a):null},l=s.default.create((e=>({middotGroup:{alignItems:"baseline",flexDirection:"row",flexShrink:1}})))},32070:(e,t,i)=>{i.d(t,{Z:()=>z});var n=i(7896),o=(i(6886),i(2784)),r=i(14983),s=i.n(r),a=i(28316),l=i(31461),c=i(80753),d=i(81665),u=!!document.documentElement.currentStyle,h={"min-height":"0","max-height":"none",height:"0",visibility:"hidden",overflow:"hidden",position:"absolute","z-index":"-1000",top:"0",right:"0"},p=

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1605)
Category:	downloaded
Size (bytes):	1774
Entropy (8bit):	5.4113178415568735
Encrypted:	false
SSDEEP:	48:iI9eLQg1+ZbY8re8yrt1D3jFPiIz0Pdvt4WmDeR:h2l1QbY868qtp3j37tS
MD5:	6CB5F814F796C60D7BB7F50E54427742
SHA1:	3C46987CF704FDC735B25231A65AB1101BED73DD
SHA-256:	3A98F89D3E033B83E020D27A951B378B632DEA62CC4F0CEEDE5A7AEE398D4F9A
SHA-512:	02B1720B32470424224C420B558ABFBBCF7CA76F3F5F77925A293A7C375B150ADB3D08D872BB91863BE1B825D4EEFE10945878AC063533E16E9755785BD7CAE4
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.20677bea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV"],{44337:(e,n,t)=>{t.d(n,{D0:()=>l,c$:()=>a,fD:()=>r,iB:()=>k,jk:()=>u});var o=t(60328),i=t(72599);const s=2,c=1e3,r=Object.freeze({AcceptAllCookies:"acceptAllCookies",RefuseNonEssentialCookies:"refuseNonEssentialCookies",Invalid:"invalid",NotSet:"notSet"});function l(e){const n=(0,o.bL)(e);return n?_(n)?p(n)?n[1]?r.AcceptAllCookies:n[2]?r.RefuseNonEssentialCookies:((0,i.ZP)("Invalid consent signal state"),r.Invalid):r.NotSet:r.Invalid:r.NotSet}function u(e){(0,o.kA)({consent_version:s,text_version:c,1:!0},e)}function a(e){(0,o.kA)({consent_version:s,text_version:c,2:!0},e)}function _(e){return!(e[1]&&e[2])}function p(e){return e[1]\|\|e[2]}function k(e){const n=(0,o.bL)(e);return!n\|\|(!_(n)\|\|!p(n)\|\|n.consent_version<s\|\|n.text_version<c)}},3670:(e,n,t)=>{t.d(n,{A:()=>o});const o={page:"cookie_compliance_banner"}},85665:(e,n,t)

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.5706090166549025
Encrypted:	false
SSDEEP:	3:RnF3v/mT5Cx3A:Jhc
MD5:	8CA07540EA0B35814767C3D67EF88964
SHA1:	2AA31926DA7DC3000CA318AF0F6B347AC8131E62
SHA-256:	C4DA00B61B4C0D0597E433BC2A921B64F315BD09F54B74EDC85DD8E1035BB7F3
SHA-512:	B47535FDF993B4A3404CD50C39CE30C7F2F010CB4BFEB4D8E7ADBB15EDB3FDCF0E467F4D196E933C942C22D672702AB60CB0FB8A1C0DA57BC601223B235376DB
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/AESOPRegistration/module.css?cdv=158
Preview:	..errorDiv_top {.. text-align:left;..}

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15752, version 1.0
Category:	downloaded
Size (bytes):	15752
Entropy (8bit):	7.986884574909637
Encrypted:	false
SSDEEP:	384:DIpkuoeBluvyxH/Mn3F3uccTKl7FPjAEbOccVzhFnizKKkB:CdhB6YHcF+cQKTUnccVzH3J
MD5:	B20371A6DAF29D4A1F2E85DBBF40FB20
SHA1:	0355A01C1CCB45CB728E7E07C41C8EBF456F70BB
SHA-256:	7E262106F82CC52663E403F5B73795BBEAB9CA0630C33C03579354FBCD4FAE1E
SHA-512:	0D4A0EAF7C8EF92A0E5C9747E7F0CA4EDF267B8F264053505EAB96928DB3E1F6CA89634AEDFACF984DDB46B93EC74C891A25F2C3EB46EA823F07D488F17E80FF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......=........\..=#.........................d.....^.`.. .Z..<.....,..\|........6.$.... ..\|. ..8.k}%l...;p..i.H..q@.?..D..F.2..o.!.5@.~0%.H.Q.By.....:.L.Z.p.^.....}../.R3...c&p}../>(.W....@....=.Q.....cL.0..{0..N...'.$..~..i.o@@j.h.@..".SSs....u...N.q.D.....>u.9.9.....1..&jE/...Y..E.4.co...L2..l`.c.%.m..[.U.p......u....6[...-...jTa...[>&I2E.O..T..0'L.:c."s..'...bo....%.0..C.0....vV.xv..<vL.w@.v%..).$>`.4+...y.....G.......4i]_..."...AAMUN......(.l......,...[.x..;.%.GX^....z5.l.L...w.}......b.k..O...h.....>..KR.R.M3..ciF.e;.V.........!....r....luL.`....W]_1.mw.O-...).....BR.t...V..Zt....a3...($FI..WU.wA.z.\|.1..A.H...9..=..0@.2i.R......:...B0UqZ...[..'O..K.-6..k..."......vK..9.B...C...n.{m.... ..(.S50......8.q....$I.H.,..9 ..A....(....6.....,.X..h I .Bd...g..M....).....r.x.}.9...~.4..,...@.7.....O.......a..e.(.....'...*..+...F;z.../...vd..1.y.....e..b.....A##....xJ.~q......\|...#d...mk.-.wI.z.V..11.]o.....I.k....N...b,...%^..X...0.`.....b.I.\|.....k......#..

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1333, components 3
Category:	dropped
Size (bytes):	524288
Entropy (8bit):	7.730875429651701
Encrypted:	false
SSDEEP:	12288:vt5RVpF+OsGa9ZS0LVU/y6T3YLv4cCK2cYix7TEByBSOBk1h4:j3j8ZS0Fw7cCCYiNQV/4
MD5:	58968E2A218D140ABA059CC7750E19AE
SHA1:	F9AB0003D0765B1A97AEE74F9802128E79E3FB51
SHA-256:	1D3A32A00C7E4B814574A3F64AED73CFD8DFEA89727C29924A631764ACC49121
SHA-512:	4BD583FAD11F227D8E6C7706D485CC5CAE5F2B214659A9B20D5A790C1AAF3405EB0AA42A2A58AFF1A3BDBDEE68B4E0AC6DDD2CFD0B8F61A077A24394B4D6106F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................5...."........................................K.......................!..1AQ.."aq....2.#B...R...3b..$r.C.S.%4c...D..&Ts.................................@.......................!1.A.Qa."q...2.......#BR..$3br...4...C.............?...[..E....D..........&......E4.Z...E....#.JY1.=j..U.H..../..Jg....x.....-F6...JL.i...%D:....I..j....$...:.U.3..CT2}.?v...O........0?qP..3<T.E.T..%2.8..Cw.....C..c".]..R....U...m8#...(.l..f....B...f...-{.........ov......Q..^!I.....%?.....N...!.OM..]........d..?J.rU.(.;...M...r..6.f+CL..x.&.+.F.$...%(.E.wY.=O$~e.......n...$.....\.......)...p.Q.....a......<'Q.......wys.`....A+.1......C...Q.k...>.L.U.<94.V9;3.8.Y}.;L2..$...i......A)IP......Kd...Jk..2.G....IH.@.....3....'..9.....%.a.. D...rR..j..'.J0.....7L./rB...h...G.Jl).AN:Q.[..".....W!9...j......J$I'......j..}.......WU

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	265
Entropy (8bit):	5.699621597454565
Encrypted:	false
SSDEEP:	6:6v/lhPkjl/Mmw3gwYFE+/2MpWI1BhOsvs36SCYVyecdQjljp:6v/7Il/MwwYh2zI1XOeWTNVyeTZN
MD5:	A1E5F333AD092F16905FC1E60D404729
SHA1:	6FD7E3A35CA3AAD1BE2B46E7E69866110719EAE4
SHA-256:	4A0CF97FCD185F5DEABED3C6F3ED7991B241E3E6EE2BA67AE20589449A60D19F
SHA-512:	1E8C4CE386612D07B844CB84C72C68837B9570BE56F7280BF828D0D5D052358921CCBE844409E33EA58F49F8865D8F8C112A3920C2CD73FE592715C30C5C264B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................>...0PLTEGpL.............................................%L.9....tRNS...PU.....J..K.l....yIDAT.[c```....*...N..@..Z.....L{..3.......$....d.. ....c~e.)..P.$7.......@.'......V.f~.k.3....3......l...(p@v..#......8W..g.-)....IEND.B`.

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9225)
Category:	downloaded
Size (bytes):	129663
Entropy (8bit):	5.607166751762152
Encrypted:	false
SSDEEP:	1536:fXex/5AZEJuhTIsyk45MJ+wmE0aq4KJY4OP8iT6SARjl:2d5e+e0aq4KJY4KARh
MD5:	F3B94C883C248FB4DE0C26DB42F9D00D
SHA1:	00E6B7D2E15DAA1FC1B3C890AC717155A7C56498
SHA-256:	5B244139FA611E9D9C53C9F8B188C1191A8F0BF146F6472529037BF28365B10B
SHA-512:	501E71E94A267266475D8F358A7F5EBFDF1E4B35AD923F167AAAAC2ADD0034563521B0F0B02227A6C190927688AB7A272AC16661563E36ADF9A8F4092CB5C5CF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iDa14/yF/l/en_US/6ootXSk4mYOkyxVXaofhwGPt5DLGRZ_LCrGX22_iLwD5QIHyTQ6Z_KZxsw_y3zVOBSnf2ML2XDKJo5r1v89-9txa.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("WelcomeMessageSendQPLConstants",["qpl"],(function(a,b,c,d,e,f,g){"use strict";a="welcome_message_send_failed";b="welcome_message_send_success";d="welcome_message_send";e=c("qpl")._(619057412,"608");g.WELCOME_MESSAGE_SEND_FAILED=a;g.WELCOME_MESSAGE_SEND_SUCCESS=b;g.WELCOME_MESSAGE_SEND=d;g.WELCOME_MESSAGE_SEND_QPL_EVENT=e}),98);.__d("IGDWebUtils",["CurrentUserInitialData"],(function(a,b,c,d,e,f,g){"use strict";var h;function i(a){return a!=null?a===1217981644879628\|\|a===936619743392459\|\|a===487152425211411\|\|a===1035956773910536:!1}function a(){return i(Number((h\|\|(h=c("CurrentUserInitialData"))).APP_ID))}g.isInstagramWebSupportedApp=i;g.isOnInstagramWeb=a}),98);.__d("MAWCurrentUser",["CurrentUserInitialData","FBLogger","IGDWebUtils","gkx"],(function(a,b,c,d,e,f,g){"use strict";var h;function a(){var a=Number(i());if(a===772021112871879\|\|a===2220391788200892\|\|a===256281040558)return k();else if(d("IGDWebUtils").isInstagramWebSupportedApp(a))return j();return k()}f

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	7.021846344488144
Encrypted:	false
SSDEEP:	12:6v/7eEqqxZyUn5venbWSctlEUoffJLt6F0iqeTQX7:AxzRrl7aflcD07
MD5:	6B6E34C885B8D3809C749704D294A077
SHA1:	466EA65A2D13A540A931DF9F9B953E3B9616D6CF
SHA-256:	608F111BEE0C848B8368ED1922109F8946ABEECC5958FA498602F5167DBAFE72
SHA-512:	F1FC3117BD4999E629138ACB422BDB896A50D4217364421E5097BE632A4DDA2F0FD0FE7819A107A276008DCBC3DC9C954AE650DDA2370AA05F2C9C0CF9647E77
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/images/emoji.php/v9/t1f/1/16/1f3b6.png
Preview:	.PNG........IHDR.............(-.S....PLTEGpL7:@59A:>F;@H59@9=E029DHPBFP58?@FQ;?GMS_8<C/18.07,-324;=@I<@I15</2802702936=35=9;BQYf36=LS_,.3HOZ=CL,-2CHR.178:A-/5QXeMTaDJU=AJem{eo~mv.iq.ox.().Zbp8;CDITgq.z..T\iD. ....3tRNS.....nA...K..;[..q../.~ib7..-.S.h.R.....t...\|...R......IDAT.....r.........C.Z....%...@.qU...)..PE....Q?.I^.,<..,...y.u.;.i....H...e..i..H....2....5VfII.v.../.SV...?..]$........M..{....5..{..6..N...k.Td.i.L..qI...8nR..Vu......1..W.....IEND.B`.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34652)
Category:	downloaded
Size (bytes):	34875
Entropy (8bit):	5.33885279704571
Encrypted:	false
SSDEEP:	768:vnMymhFfSu1je9KnD1TVQuJErK0ftKyUPaG4aLbZIASG1aLX60Y0KJyQeKvQBLZE:vMqu40tDyAxjkVKJyQes
MD5:	FA98668A75FAF21EB3F4B769CA72256C
SHA1:	AEDEE67095B37E106200DBE853DC296FAEFA1071
SHA-256:	74369C906F0A25D237431B3769656DCF58C9EEF63FD707E9AC806C6E20CB67E3
SHA-512:	053A0B102AD1A81B9EC97DA5374248C3B0DBAD44E7023F5C28E98C2492CFE120508127F16F71CD0A578795C5A7271DAAB55FAD21C98F79221EB46B72E7B6C052
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.JobSearch~bundle.Ocf~bun.a3a90dba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.JobSearch~bundle.Ocf~bun"],{31010:(e,t,s)=>{s.d(t,{Z:()=>n});s(2784);var i=s(40080),o=s(73186);const n=e=>{const{style:t,...s}=e;return(0,i.Z)("form",{...s,action:"#",style:[o.default.view,t]})}},36830:(e,t,s)=>{s.d(t,{Z:()=>w});var i=s(2784),o=s(28316),n=s(25686),r=s(23162),a=s(16587),l=s(79640),d=s(77648),c=s(40159),h=(s(6886),s(5252)),u=s(73186),p=s(45184),m=s.n(p),f=s(37378);const y=m().f2b3fe06,g=u.default.create((e=>({hidden:{visibility:"hidden"}}))),_=({isLoading:e})=>{const[t,s]=i.useState(!1);return i.useEffect((()=>{let t;return e?t=setTimeout((()=>s(!0)),f.n):s(!1),()=>clearTimeout(t)}),[e]),i.createElement(h.Z,{ariaValueText:t?y:"",indeterminate:t,style:!t&&g.hidden})};class w extends i.Component{constructor(e,t){super(e),this._setFocusedItemRef=e=>{this._shouldScrollToFocusedItem&&e

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.6127406912167865
Encrypted:	false
SSDEEP:	6:6v/lhPExQlsmrEAaHG0R1kY0zzEIlYdaLTp:6v/7Ml6EfG0TklzELaB
MD5:	FA9ACC855A7C2FF15C7F34036B1E035F
SHA1:	F7007E3B3EAC14E47128D162A6F30028D57EBD99
SHA-256:	7FD26C148CED6C3D8E743B963C3E45655A0D74E97D9D531E9F9138BC27944D7C
SHA-512:	123460015FD25ACFE099DA3342086CED1549E1429C60A9143C3947056E233A70C9532C0ABDA5DCF97F80483D4C511676D6ABFA2A68D36BA37B5E20D9CD5F3214
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?...EPLTE........................GpL.............................................n....tRNS.J..7.)..............)..j...uIDATx^u.... .E....!s....6.[....H.+..5.<..nP.+hT..QA....):.oy..f..jE.."4..SU.a.......z..tY[.=$.Ey.4...@Li.!.f~.....,...C....IEND.B`.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61750)
Category:	downloaded
Size (bytes):	61959
Entropy (8bit):	5.38827617756105
Encrypted:	false
SSDEEP:	768:LgCld39viK66dsa+WH0wY6fCG2baLtXkLy09RaUABmG1+JwS12HCLQbGUNukKjLN:U4Z1qLMQ+h+jqUV7Tvzyq
MD5:	1882A8AF2C1F4F42EFC8D525DDE764F9
SHA1:	8C3671C64A96574B843EC2D0766863EF31EF7C53
SHA-256:	39B84D2A735E4D3A4D1FA65A3B210CA904A597668C2115531527038F3B789549
SHA-512:	9B38C9EF39DE7D4454F4E0C3821CB4982A08B7816CC27B54C3BDA9222CD81CA7B2B20F189F4D048F936BAFBA2803B97C8A365DBAEE902AFEB8056F0BB0DCA885
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV.8774e17a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV"],{7187:(t,e,i)=>{i.d(e,{Z:()=>xe});i(34115),i(634),i(20796),i(49228),i(38695),i(27233),i(74083),i(18145),i(15735),i(43450),i(43108),i(32501),i(24895),i(99120),i(65584),i(26936),i(71245),i(14586),i(58143),i(43105),i(34769),i(58188),i(34114),i(77950),i(88233),i(28673),i(1939),i(6886),i(54226);var n,r,a,o,s=i(80753),c=i(81665),u=i(56666),d=i(22699),l=i.n(d);function h(t,e){var i;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(i=function(t,e){if(!t)return;if("string"==typeof t)return v(t,e);var i=Object.prototype.toString.call(t).slice(8,-1);"Object"===i&&t.constructor&&(i=t.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(t);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i))return v(t,e)}(t))\|\|e&&t&&"number"==typeof t.length

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4314
Entropy (8bit):	5.066312539168522
Encrypted:	false
SSDEEP:	96:8ZHO/43VnlWKiVa3liVaXHgPqRg/8vhDDoiqEgCi33iNXfiqjiM3i2niGY5icKOw:wDaZGH/RJZH/B
MD5:	E3C7E561863616ECCCE60CE4B401602B
SHA1:	8DB14455A4E3E53E30D7E18A3A282E082014E37D
SHA-256:	4263F9338CF1108AEAD08F491EA574F627DF1F0CACC331BDF2480920C7D62889
SHA-512:	5A730A93FAC2FD2518739055F46AE4E063384D5BE47FB2F4A37B3FE54A8C43D3BF71BCAAC36EA8E769BF7DAD303075F29CE7593623AE555D8C2892F7F5F94E9A
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/js/help.js?cdv=158
Preview:	...var baseHelpUrl = 'https://greatergivinghelp.zendesk.com/hc/en-us';....function openHelpWindow(UrlToOpen) {.. var openWin, lUrlToOpen;.. if (UrlToOpen != null && UrlToOpen != "") .. lUrlToOpen = UrlToOpen;.. else.. lUrlToOpen = baseHelpUrl;.. .. // open in new window.. openWin = window.open(lUrlToOpen, '_blank');.. if (openWin !== undefined) {.. openWin.focus();.. }..}....function openHelpPopup(UrlToOpen)..{.. // just open new window.. // we don't want to use pop ups any longer.. // we want to be consistent with GGO.. openHelpWindow(UrlToOpen);..}....function openDefaultHelpWindow() {.. openHelpWindow(null);..}......function openDefaultHelpPopup() {.. openHelpPopup(baseHelpUrl);..}......function openHelpWindowWithBase(UrlToOpen)..{.. var url = baseHelpUrl + UrlToOpen;.. openHelpWindow(url);..}....function openHelpPopupWithBase(UrlToOpen) {.. var url = baseHelpUrl + UrlToOpen;.. openHelpPopup(url);..}....functio

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	45810
Entropy (8bit):	7.964818731954779
Encrypted:	false
SSDEEP:	768:fQMTf8QkzNXgdQYULpqlJhBCdyh4TPrnDSZgmSEn3ZyUAkdLYYd+3q0rzJpeR9Qn:fnfuzGjUtchBDurnog03ZyUZcYdrIzsK
MD5:	B9AF0B9CC21D6EEFD768903C504090A1
SHA1:	0975975A3B1A3775E8ED726BCDF37E7F4C6D82EF
SHA-256:	3A702BCF9C2D101EA3D8B7D9098F9703967CCDE63FB23B28CB091F636EC902E8
SHA-512:	4B98A2FF18CDEB6F6B7EACA881FE01574EC881717AF9610D7089A5EE68C470C2A02433B8E77AE013FE21D21905C524ED808AEFC11D5F3C02C88C33D81F6DC547
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .................pHYs..........+.....iiTXtXML:com.adobe.xmp.....<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-04-02</Attrib:Created>. <Attrib:ExtId>d8977641-296a-4554-ba1d-9bf068360d04</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Please note: - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>. <pdf:Author>Sarah</pdf:Author>. </rdf:Desc

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1333, components 3
Category:	downloaded
Size (bytes):	524288
Entropy (8bit):	7.730875429651701
Encrypted:	false
SSDEEP:	12288:vt5RVpF+OsGa9ZS0LVU/y6T3YLv4cCK2cYix7TEByBSOBk1h4:j3j8ZS0Fw7cCCYiNQV/4
MD5:	58968E2A218D140ABA059CC7750E19AE
SHA1:	F9AB0003D0765B1A97AEE74F9802128E79E3FB51
SHA-256:	1D3A32A00C7E4B814574A3F64AED73CFD8DFEA89727C29924A631764ACC49121
SHA-512:	4BD583FAD11F227D8E6C7706D485CC5CAE5F2B214659A9B20D5A790C1AAF3405EB0AA42A2A58AFF1A3BDBDEE68B4E0AC6DDD2CFD0B8F61A077A24394B4D6106F
Malicious:	false
Reputation:	low
URL:	https://greatergivingcontent.com/Image/660136B2-6730-420F-977B-BFABA1CC08B4
Preview:	......JFIF.............C....................................................................C.......................................................................5...."........................................K.......................!..1AQ.."aq....2.#B...R...3b..$r.C.S.%4c...D..&Ts.................................@.......................!1.A.Qa."q...2.......#BR..$3br...4...C.............?...[..E....D..........&......E4.Z...E....#.JY1.=j..U.H..../..Jg....x.....-F6...JL.i...%D:....I..j....$...:.U.3..CT2}.?v...O........0?qP..3<T.E.T..%2.8..Cw.....C..c".]..R....U...m8#...(.l..f....B...f...-{.........ov......Q..^!I.....%?.....N...!.OM..]........d..?J.rU.(.;...M...r..6.f+CL..x.&.+.F.$...%(.E.wY.=O$~e.......n...$.....\.......)...p.Q.....a......<'Q.......wys.`....A+.1......C...Q.k...>.L.U.<94.V9;3.8.Y}.;L2..$...i......A)IP......Kd...Jk..2.G....IH.@.....3....'..9.....%.a.. D...rR..j..'.J0.....7L./rB...h...G.Jl).AN:Q.[..".....W!9...j......J$I'......j..}.......WU

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	6245
Entropy (8bit):	7.834962933432371
Encrypted:	false
SSDEEP:	96:hl9JJpYVv/kFXSQnxaVbBLBMk3PR/RD8Q5WJN2Xn+m5fEc76N6Mqs491eJeg1QS9:zY9IxyVBP/R5af2X+m5fvXssgfM0zIB2
MD5:	2ADBB590A2CD9529624762B1ED827FC6
SHA1:	A8A2267BAF00BE78EC19B926CEB7D927B41ED41C
SHA-256:	73ADF2DE8C7987B938A8C3994ECDF64A808DBE942997FEA1F059BD5FF1FB05C2
SHA-512:	6D4926C5869607D4C6668DA4B45F4CE64858833BEC3FDE13D52F7E71FB382BD7918983631AF6B199D46BA1905C3EA5122365368EABE85D25D3180DF1ED5B205C
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/434738801_903046718527004_2875905521727260665_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=7h4eP_Dka8UAb7E6TIi&_nc_ht=scontent-sjc3-1.xx&oh=00_AfBS7yoKFIceCz3ZSneb7IqWPdpshZnlJvExT1w3_6K7gw&oe=662E5890
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000026030000930500004b06000005070000840a0000100f0000910f0000591000002011000065180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................D..TqZU.XQ.;....YE..D$...iC....w.p../O...Iy.>...tu.<....5...e...J2I ...=..K.u.....mHz).v.R.u)V.M$.$.$.p....g.W..n.1...08..V...'.I.k...J.X.3../...6.AQ..Q.H$...a O....v~.@......&.....f...U.J./0.A88....j.s....&...&.k..u.6u..n..9!4.fYY.]..(..3..W...xI....E..Y.f...a&mt..jO4....&...&9B....H.....XtN.3e...Vm...`;.V.BD.....d.)A4.....0.]...[....5W.o......l8.J...-...8.3$SVh....'........................... .!0@"1.#4............I>.fb..H.nP5.T.^.d.A....~......0....3Q1=.{..l...3.I......u~.+..v.R.m@.}.A.\..J i.D.f.{e.O\|.....#.=<..b.4.p..2Zl.lT.7./.kM....y...O./..Hqn.n2....R/.F.(......._X?.......nw}8H.A.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.580622094395224
Encrypted:	false
SSDEEP:	6:6v/lhPEuLl/bbtoyl1AViPh3QY32V65Mm+27hVp:6v/7MuLl/bbqzuQY32s9
MD5:	AE278E7804E28C2733CEE9883DA38CE9
SHA1:	09DCBA0885D6F8094617831C6D1A16AD7A1689CA
SHA-256:	D07B8B3DE27E367F307A22F81DDD52AB9BB68A47E71376B9674316910A863B4D
SHA-512:	5CD4D885BCEBCA2DBF1CAE0F88211399E7F723ED7BB95FB10DA9C92408DB637A660604C0C54E3D9F10E0DBCDDFA194269567F6F48C885C4964EB60789C33F545
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?...lPLTEGpL.........................................................................................................N......#tRNS....Q...U........../b..*.v....:9........IDATx^m.G..@...83J.bp...?. hu.....&....,..(}.AZ.S......15D.&.p..@..#.......1.R...5....p..0..9^1..L.H./........M...).v......\|..)E. j.}..>.=...?&...u..-....IEND.B`.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	482
Entropy (8bit):	6.902647108175344
Encrypted:	false
SSDEEP:	12:6v/7EU+7J3t7FbfWz3MLWkCM8ss4PMgzS+BxEMNJS:8Y35b+TMLhVPRzjBxEMNQ
MD5:	7C956B4C226E9440C1CB1F0E9226882A
SHA1:	BC65AF34B298B7AB11A50E8A35BCE0DD24469683
SHA-256:	9D8D1E43387BF1D11CBECB080DE713A1484D717CCD5F485800FE1E0913A1FDA2
SHA-512:	A9276095CADC192B6340CC8F1715CB5E1D96FC5A074AB7806E121FFBA8C2A962374BC23B76AD4C63357238AFBF1F130788A2D8C4B8E81A7D82D99A2E0FB675E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............'......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....tIME...............bKGD.........IDATx...NBa.....`.....l........;..x.47..B.P...........gg...3M..-._.>..W.3f.Z-....F...3.......o.hR".J....k..dfX.%.)I...+F.). A.G..\.....+n..n.8....W..uX.BZUtK..K...}.".../~.J...W5.!5.3<E_h.!.w:.UG....L..&.'.E..H.....4.....n[...1'...%tEXtdate:create.2019-02-26T23:26:08-08:00.......%tEXtdate:modify.2019-02-26T23:26:08-08:00........IEND.B`.

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32348)
Category:	downloaded
Size (bytes):	32571
Entropy (8bit):	5.297035305581623
Encrypted:	false
SSDEEP:	768:K0T98c1zdEgFfudFTtk+7Z6RfKWqNwL9VAWcENOlbFQKib:ZvxWgFGFL6RfT9VAWc6O9Fvib
MD5:	240B5DB13804B013F340BEE9ADC6EC6D
SHA1:	5AA7CB573B9A7C083BA4AC2B9F0F640F5FF9A20E
SHA-256:	FCBA2CD56EB50772BFE8CBC21C464CF8284241E6D06068B3F161D690714EC6FE
SHA-512:	115A04BC637F2224ABD089F9DDF6617A751D2F05FAC61A570288B28FA2378BA96D499EB90B63C3DE3089A2C4C71B9F40FC521C6A8DE46A32A9421F8F4AE0180D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.743e980a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle"],{69843:(t,e,n)=>{"use strict";n.d(e,{Nr:()=>k,ZP:()=>D});n(6886);var i=n(2784),r=n(25686),a=n(45184),s=n.n(a),o=n(15019),l=n(3655),u=n(1206),c=n(14983),d=n.n(c),f=n(96001),h=n(56992),p=n(63142),m=n(15686),y=n(73186),v=n(86765),g=n(27931);const _={stiffness:267,damping:20};class b extends i.PureComponent{constructor(t,e){super(t,e),this._handleResize=()=>{window.requestAnimationFrame((()=>window.requestAnimationFrame((()=>this._setDimensions(!0)))))},this._handleLayout=()=>{this._setDimensions(!0)},this._handleUpdatingParentAspectRatio=t=>{const{itemWidth:e}=this.state,{setParentAspectRatio:n}=this.props;if(n){const{height:i}=t.nativeEvent.layout;n(e/i)}},this._shouldRenderItem=t=>{const{shouldRenderAll:e}=this.props,{currentItem:n,itemsToShow:i}=this.state,r=n+2*Math.ceil(i);return

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50180)
Category:	downloaded
Size (bytes):	50404
Entropy (8bit):	5.490327980999208
Encrypted:	false
SSDEEP:	1536:/hk1+7/98nz7L/fB9LIIJzoh9mHAAQIOJ6jE:6+TN0cn
MD5:	84605ED86B21295DA6D58B941EC36279
SHA1:	FFD8A584B2A35A8565550E0865A8E1E6C2B9FFC2
SHA-256:	CCFA47E0393AF5E202B2CE128CE01014B173D92719AC7A180514FE69EC807DF1
SHA-512:	D19B9C4D9C7A077B4E21B24B159D9D2011069554FDBED919768E47A0BB139ECE7EAE621952B031D82FE230C7FCD087E7051CD2728DF2B5B75C7BC463EA4B7382
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun.5e40379a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun"],{37800:(e,t,i)=>{i.d(t,{Z:()=>o});var r=i(2784),l=i(25686),n=i(73186),a=i(81142);const o=e=>{var t;const{borderColor:i="cellBackground",borderWidth:o="small",style:c,userAvatarSize:d="medium",userAvatarUrls:u,withIncreasedSpacing:m}=e,p=u.length,h="transparent"===i;return r.createElement(l.Z,{style:[s.root,c,{height:null==(t=a.default.getSizeStyle(d))?void 0:t.height}]},u.map(((e,t)=>r.createElement(a.default,{backgroundColor:i,borderColor:i,borderWidth:h?"none":o,key:t,size:d,style:[0!==t&&{marginStart:-1*n.default.theme.spacesPx[m?"space4":"space12"]},{zIndex:p-t}],uri:e}))))},s=n.default.create((e=>({root:{flexDirection:"row",flexShrink:0,overflow:"hidden",flexWrap:"wrap",justifyContent:"center"}})))},77227:(e,t,i)=>{i.d(t,{Z:()=>C});var r=i(2784),l=i(25686),n=i(217

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2352)
Category:	downloaded
Size (bytes):	2487
Entropy (8bit):	5.3815262360035705
Encrypted:	false
SSDEEP:	48:iIjWfHx3aktnf0Aus+gd5sQB8AzWAWcKHCFoRQTFo6pN2EUhWk/:/wR3zBus+F+Fy/CTFo62EUhZ/
MD5:	C09D765FFF9A45F1F57694195719081E
SHA1:	37AE5198CB6880E5D9085677FFD9DF85E06592DB
SHA-256:	9EB88032B5B051DBE40BC1D3B51E6965113C8BD4C34C31025F176E3F6D546AF6
SHA-512:	AC1AE622A2EDEAD8D5817EF4FCDCF2681ED668EA901C188F1CA3229B9ECC2B06993736F0D3126646A6F742F6D7C293D6D7438A6F0FB550BC49C027DB76A1FB51
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.ExploreSidebar.fff7273a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.ExploreSidebar"],{86421:(e,t,r)=>{r.r(t),r.d(t,{ExploreSidebar:()=>v,UPDATE_INTERVAL:()=>w,default:()=>S});r(6886);var n=r(2784),i=r(26499),s=r(25686),o=r(8352),a=r(25301),l=r(45184),d=r.n(l),h=r(16587),c=r(78207),p=r(20579),_=r(48501),u=r(31372),b=r(52612),m=r(39928);const f={...(0,r(12372).G)({withThirdPartyCards:!1,isInSidebar:!0,errorContext:"EXPLORE_SIDEBAR"}),[b.ZP.TimelineCursor]:m.OZ(m.KM()),[b.ZP.Label]:m.OZ(m.KM()),[b.ZP.Message]:m.OZ(m.KM()),[b.ZP.News]:m.OZ(m.KM())},Z=d().b8e930fe,g=d().ae05f268,w=3e5,E=()=>n.createElement(o.Z,{message:g}),T=(0,h.Z)(((e,t)=>(0,p.O9)({exploreGraphQLEnabled:t,displayLocation:p.qk.WebSidebar,focalTweetId:e}))),x=(0,h.Z)(((e,t)=>(0,p.O9)({exploreGraphQLEnabled:t,displayLocation:p.qk.WebSidebar,profileUserId:e})));class v extends n.Component{constructor(...e){var t;super(...e),this._renderBetaLabel=()=>n.createElement(a.ZP,{backgro

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 765, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4476
Entropy (8bit):	7.623507465653841
Encrypted:	false
SSDEEP:	96:V1tbTcPExw31EZh1wTeB0MhgXHffrLGI824yGOV7jG:VMPA0Etw9MhIfTLGIZpi
MD5:	B1FB0D39C11137CBDFC6613BF4FD794E
SHA1:	BF8852FD9DFEF2CCBE65A5EDFB4F62154B7E4556
SHA-256:	698E31282476A559C2822BD72E5CA6C2E25E1CBA5EDADE0C071A93C562CB29A3
SHA-512:	BA20993A2B103C2044938312D055961636A44F4C6A2DCB463E6410DC5B21E8CECD4C512CC37FD5B0DEA9470E4723A6C65647E5A62BE85320DFCB2D8ED397EBCD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}=.....PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................................m.5....tRNS.T.P...................N.d..."$...Z..J........b..H....,. .l0.t.n(:...hf......&...`.B.vj.2..\|F.8.~..z<4.x..>6DpV@.^Xr..LR\.{)X...,IDATx^...[.J.../.B..cc.B\0.%..j.%.B.!.PRIo'.${..._..f$=Nn6..w....\|...53.h..N...Ei...A\....._.@..i..Z:}.}Q.....p...^....@.,.......A1_k.WL..R.[y..`.(W....l...N.$........,.j.q.h..FWpct....\..-&..r..D..UQ.(UIC.....+..:.L.G'\|D...!.@...3.:.5VH..........f[y(..v....vb.e...z+d...c....I.;-.N\..V..I...+.2.K....M*~..Z.f.) ;.D}]A..G..$.rDz:H.z....^Ax..g.::..j....y.g...c......fi...w-...]...V.j.....~ ./v.. ....-....m.fO.s.C.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2260)
Category:	downloaded
Size (bytes):	2393
Entropy (8bit):	5.324094897314314
Encrypted:	false
SSDEEP:	48:iIUd517wHHSOPREUi3ON1XuJDg5Pjg+Zg6ON+UkviWwO:YZYq+/EDg5Lg8gz8UJW
MD5:	DA56A4910421E2BDA1C6D896D9D74BCD
SHA1:	7BE05D1E1662108984980C775E93A0E3EBEADEBD
SHA-256:	0D96015A19A86FA51EB1F5F36220884E5D47A998BB3E1847B96BC0CA6F0B935D
SHA-512:	A5DD94619C852E4776CDCDFE6A9B123FBF3A887B78DA9999BCBA191880074C3407237172A66D0C19748CDD5DF904FE17ADF2F12FE64ECA1BD9561F7AD8D4A3FE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.SignupModule.19fb08ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.SignupModule"],{8419:(e,t,n)=>{n.r(t),n.d(t,{SignupModuleContainer:()=>E,default:()=>Z});n(6886);var s=n(2784),a=n(25686),o=n(73186),i=n(54044),r=n(68591),l=n(82392),c=n(29496),u=n(45184),p=n.n(u),m=n(48501),d=n(84361),y=n(58721),b=n(85114),g=n(52008),S=n(55258);const C=p().a565833e,h=p().c6b51af8,w=p().ie8e1ffc,f=o.default.create((e=>({buttonContainer:{marginTop:e.spaces.space16,marginBottom:e.spaces.space16,marginStart:e.spaces.space12,marginEnd:e.spaces.space12},ssoButtonStyles:{marginBottom:e.spaces.space12},buttonStyles:{width:b.fI,height:e.spaces.space40},narrowButtonStyles:{width:b.ND},moduleContent:{paddingStart:e.spaces.space12,paddingEnd:e.spaces.space12},footerLabel:{marginBottom:e.spaces.space16}}))),B=({onSignupClick:e})=>{const{featureSwitches:t}=s.useContext(m.rC),n=(0,S.BG)(t),{signUpLabel:o}=(0,S.M5)(t),u=(0,i.Zx)((({containerWidth:e})=>g.Z.isTwoColumnSma

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35120), with no line terminators
Category:	downloaded
Size (bytes):	35120
Entropy (8bit):	5.093014244302118
Encrypted:	false
SSDEEP:	384:882TxtBv6uWws0VRNrdhipGkgD2E9gw66hB9gRRMjbC17e+XO711CNTbuz0qS:/AN6uWwvVgw66hu17eE811ZS
MD5:	0524DAA091930747FF4B707D475C3FA0
SHA1:	252568AE825BA33F45B8F07E68C3AE84CC4B75D0
SHA-256:	E07BBE6E46B64935F169008862023ACD0B668CFFC8C978C5946AD6567479FB63
SHA-512:	F24741C2ACDF11B7F072C880F98A3974C62EF8069AEF70F5225995E5A4DBBEF9AD6BBEFE6BE0A2CBF03B5E90C5C6CC9E44EF2233999222E59DFC3E75238C29A7
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/css/gg-dnn.min.css?cdv=158
Preview:	hr{box-sizing:content-box;border-top:1px solid #eee;border-bottom:1px solid #fff}body,html{font-family:Roboto !important;background-color:#fff;font-size:14px;line-height:20px}td{padding:0;margin:0;font-size:14px;line-height:20px;font-weight:normal}th{padding:5px 0 5px 0;margin:0;font-size:14px;font-weight:bold}tr{padding:0;margin:0}img{max-width:100%}.form-control{display:inline-block;width:220px;height:30px}input[type="radio"],input[type="checkbox"]{width:auto;display:block;float:left;margin-right:6px;margin-left:6px;box-sizing:content-box}select{width:220px;background-color:#fff;border:1px solid #ccc;font-size:14px;font-weight:normal}option{font-size:14px;font-weight:normal}blockquote{border-left:5px solid #3f3f3f;margin:0 0 20px;padding:0 0 0 15px}mark,.mark{padding:0;background-color:transparent;box-sizing:content-box}h1,h2,h3,h4,h5,h6{font-weight:700;text-transform:none}.moduleAlignment{text-align:left;vertical-align:top}.formTitleContainer{text-align:center}P,A,text,td,th,.Error,

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4160)
Category:	downloaded
Size (bytes):	12605
Entropy (8bit):	5.126652544944623
Encrypted:	false
SSDEEP:	96:6mRjRsI5BpR0HKUCnT31zzXpGHX5QZnQ78fZt7UJPS/TP8tQXW2RpquzjzwNUJZF:6m7sIR6Uz8pQVyJP2TjGMoNiZzp
MD5:	9BFEAB29DB36F0C2CE03A9D65DFB487A
SHA1:	3A3D2CE47AEC9309206372833A22989063D020E7
SHA-256:	5158CA33034938B4547802E826D992C6D4F8002FB784FB974B2A6A45D16AB5C6
SHA-512:	21FFAEEC90BF47C488C3CC0D643A02CE4FBBBAC2880FD9BAB06647FF240095617F33245D5E16B224B6877A6D5C6C9243A1A540C083FECD816861CBBE0E6001C4
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/bpfhWVdEqSZ.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ProfileCometReviewsFeedQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="8876980462417332"}),null);.__d("ProfileCometReviewsFeedQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","EventCometCardImage_prefetchEventImage.relayprovider","IsMergQAPolls.relayprovider","IsWorkUser.relayprovider","ProfileCometReviewsFeedQuery_facebookRelayOperation","StoriesArmadilloReplyEnabled.relayprovider","StoriesRing.relayprovider","StoriesTrayShouldShowMetadata.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ProfileCometReviewsFeedQuery_facebookRelayOperation"),metadata:{},name:"ProfileCometReviewsFeedQuery",operationKind:"query",text:null,providedVariables:{__relay_internal__pv__CometImmersivePhotoCanUserDisable3DMotionrelayprovider:b("CometImmersivePhotoCanUserDisable3DMotion.relayprovide

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2898)
Category:	downloaded
Size (bytes):	15815
Entropy (8bit):	5.356316318677249
Encrypted:	false
SSDEEP:	192:GR5pa4Oo9opxjop/Q0rNA/qy/OaF2+wiXt4:GRrjt92N2/TNA/qy/9FdwiK
MD5:	E61077F7A16224DEB796D565724E9FFE
SHA1:	718A4995298958A3C211872CE692EFC90C74EDE7
SHA-256:	8B6A1B5007A9FC7E1CF6A9E4C2C6D6D4218670FE6487986B04303351A4C273F6
SHA-512:	F5014C690483F9B6773CBFF35E7C636E0FA182F2462E160715E4B9AA6FAEA15793031DE4E93AE1A3B0467F56A321CB652525F81BCFAD38DB9A369C84DCF31D9E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/QB1B1DuEfJ4.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometImmersivePhotoIcon_photo.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometImmersivePhotoIcon_photo",selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"immersive_photo_encodings",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"projection_type",storageKey:null}],storageKey:null}],type:"Photo",abstractKey:null};e.exports=a}),null);.__d("ProfileCometAboutAppSectionQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7460819603997427"}),null);.__d("ProfileCometAboutAppSectionQuery$Parameters",["CometUFIReactionsEnableShortName.relayprovider","ProfileCometAboutAppSectionQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ProfileCometAboutAppSectionQuery_facebookRelayOperation"),metadata:{},name:"ProfileCometAboutAppSectionQuery",operationKind:"query",text:null,providedVaria

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1778)
Category:	downloaded
Size (bytes):	1949
Entropy (8bit):	5.3034660181788436
Encrypted:	false
SSDEEP:	48:iIFmVU5VmoYqnUSsFoSXMyx0EyFfWWry+3yPkhzprFRWmQ:sGVmoYSBsFoSXMfW2Re
MD5:	599C061A2919FCFDFBD1683B2F918DC7
SHA1:	A3338FBAADBD4C39638C857D0F3EA267724F5E90
SHA-256:	4B411CE002136403F548C3A9D7BEFD8447F7AE6CA9F9D99D8F360F673BFAB6C6
SHA-512:	B549D5135E11254821E11A779E26379A91730C112EE083ECD7AA1285E8B503E9808B6A5057B55A0F1AA225947F07D5CC561980898E5B8DC41CE8811F11D31527
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.ComposeScheduling~ondemand.ProfileSidebar.aba1409a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.ComposeScheduling~ondemand.ProfileSidebar"],{17651:(e,t,n)=>{n.d(t,{Z:()=>v});var i=n(7896),o=(n(6886),n(2784)),r=n(44329),a=n(21439),c=n(56969),s=n(37116);const d=({cacheLocationKey:e,containerAspectRatio:t,images:n,isCondensed:d,mediaMaxHeight:l,onClick:p,onVariantSelection:h,previewMode:m,singleImageMaxAspectRatio:u,singleImageMinAspectRatio:C,testID:g,withCenterCrop:w=!1,withLink:v=!0})=>{const{getLayoutCacheForIndex:k}=(0,s.X)({locationKey:e,itemCount:n.length}),M=o.useMemo((()=>n.length>1?r.Z.COVER:r.Z.withinRange(C,u)),[n.length,u,C]),b=o.useMemo((()=>n.map((e=>({type:"photo",...e})))),[n]),y=o.useCallback((({index:e})=>{var t;const n={mediaMaxHeight:l,onClick:p,onVariantSelection:h,previewMode:m,testID:g,withCenterCrop:w,withLink:v},r=b[e],a=null!=(t=k(e))?t:void 0;return o.createElement(c.j,(0,i.Z)({},n,{aspectMode:M,image:r,layoutCache:a}))}),[b,l,p,h,m

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3654
Entropy (8bit):	7.929794863313375
Encrypted:	false
SSDEEP:	96:m81wykoJW6gVZtxI0R7HsCKmtkdEWuohv5mB0MYOi:WyBW3ZNR7V1WjoWMYn
MD5:	33BD87C2B4EF2AD0510E4B3A37D17814
SHA1:	06615E15E9D25EE4A93201ACA763D36796E32B54
SHA-256:	EEDA93F9B15F022D2BDEBC392425AB5A136CA49DDDBCDE4144D12E77F03EA7CE
SHA-512:	D650B352DE05117AB2473B680D3AC5831CBF07CE17E8185FF74D3F080A6A7A69174F2DEBFB278562F26A78AB7262A107567F655A162882E428049B7BF6575552
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/icon-default.522d363a.png
Preview:	.PNG........IHDR....................IDATx......w.....fFw.l...y1.-.X....5..Q..:.o........:^&..d2.L&...}....Vi..vk.. ..C..6Z..(.....s...9.Q...m.e.k.kX8..j..2S...ent.27y...[.N.p..Wg..~....D.....c.f.".l.1>q..C2y....;....~;..{...7....%n.....V).W.?.....^...\^.\.%.U....D/.J\........,..N.].C.u...."..F"..a.n!....u%.....n..%..T.1.J...^.'..1m.O......b\.q..KE_."$..P.3...KHH].].<k...VxV,...JH`U~V.q...GHh=F.E.=h...fyPD=a....yB..e....yK.\|.ZHQ...9.k.RV...D@.Z....W.(..........Z....{.....;.@;........m..kl.m.......a.......Z.=.w}]_.n.....^......t~nB.....J...h...S.%...AQ?..S..m....B.J.Nk..d.s....T...n.t^.Y.........~..P..$.\|.....Nz&.......}...>.B.7...O?...D-$[.I.d.......D.^.6.....(B).Q.d..I.....m.HT..<$A.b:.<F.....~.....J........6."...w.....U...ql.$b..$..i.D.:.........D... .[.W.g,.E.(.)...9!{;2..d..\|$V.r.....$.....V...p...UtCb4..)!..t..1><.......\|J..$.Eb.?.%.......q..<1..g5.Qo.kY......-./&.2......r.D..\|*D.....qvg...'/....RI..:..$?.........<\.a...m...5...

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	549
Entropy (8bit):	7.471916944420736
Encrypted:	false
SSDEEP:	12:6v/7i/i1SlUUPqHhJYMablwuOa6vz5xtnSDnkXMYvJmJSt/6znV:AwbSBa8zXtnBZAJ9
MD5:	9D99A2372BBD5B28EF4B2EAECAC8C805
SHA1:	6503A35C95CDF2D08ED83E17AE81C8B0E58F49C2
SHA-256:	CC4939AF5D16855F2BEA8322DBF33461EBC6BFD092FA3E2291D87D3D83EBD8ED
SHA-512:	7EFBA58D391137EA50C0ED95025316E404CE8FED549C386F2D3316D91797CD39E5447DB9B0FFDB0EBADBAF1F38766743603C140B8DFB956ECCC144AA78CFF766
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/favicons/twitter.3.ico
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W1..0..w.%t.<.:J.@I.%.......t..R.......L..fN....;.&....lbk.d. "C5...l.......1..F#....r....j...f..... u....c.\|.^.........a2p.X..t:M.....\|.Z.....7.M2A..K..n.!..\|>O..t!.?`)...I..0{\)....Rb.. .=r......%fK..}..%.,c\J.).q0..D+!`.j'.0.@..v....1...c..G.....+.........`....w....=.O...f...aH..%...15.M:.N.k^...e.D..[....&.]...D.s.h]..*#..n.s......ppL.%)...........2..........}2....9...l.y...s:...e...vN.:.t....{....\..x<....wj..IG..S...<u:.d...._fw.WNZ........v.?.ZLm..]J....IEND.B`.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1791)
Category:	downloaded
Size (bytes):	2014
Entropy (8bit):	5.274437549578195
Encrypted:	false
SSDEEP:	48:iIKR/f8bjeOovM1cS62+D++bbRQMNrara7yWmsR//R:OxYjePMB62+D+6bFZOaj
MD5:	9C4242A7EC273AC2E3BA1764DD1D8DC9
SHA1:	1F2E633F288EA5BC06F6B3A74045FD61DD648C7B
SHA-256:	C8CF14AF73A097444351ED9DF4B14C04739A09466BE47AD04ECE52ED027BBFAB
SHA-512:	DBA8AD53348827A82A36EA63F63DE2A818B2218686F98507233851890D8B5CEABEC74A5B54D092E1123F04B000D430F26F6C5554A81745081E59552F8DA66508
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl.d52c10ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl"],{26176:(t,e,i)=>{i.d(e,{ZP:()=>h});i(6886);var n=i(2784),o=i(14983),l=i.n(o),r=i(25686),s=i(31165),c=i(78705),d=i(27968),a=i(70451);function u(t,e,i){return t\|\|(!e&&i?"fixed":void 0)}class h extends n.Component{constructor(...t){super(...t),this._handleBackClick=()=>{const{history:t,onBackClick:e}=this.props;l()(e\|\|t,"Either onBackClick must be specified, or history should be supplied"),e?e(this.goBack):this.goBack()},this.goBack=()=>{const{backLocation:t,history:e}=this.props;e&&e.goBack({backLocation:t})}}_renderContent(){const{backButtonType:t,centerTitle:e,centeredLogo:i,fixed:o,hideBackButton:l,isFullWidth:r,isLarge:d,leftControl:a,middleControl:h,position:k,rightControl:p,secondaryBar:C,style:b,subtitle:B,title:g,titleDomId:y,titleIconCell:f,titleIconCellSize:m,w

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1247)
Category:	downloaded
Size (bytes):	1470
Entropy (8bit):	5.325599894739666
Encrypted:	false
SSDEEP:	24:iWGKfWGE5Fr31skK7y2xFo9qBDu+P1TtBMJzrCozBF4fL+s6POlUcq+w/FFWmErm:iIyj1sk+TDdDu+P1Txeq+s6POlUhFFW+
MD5:	B3863B4504DFB5E7C62E0006B5D4293D
SHA1:	EC50A0F5EC4244B55095ECA221ED1F2CDC96F0F0
SHA-256:	88A794B7FCAEFBE9CA2B93F90863E04C2772BF855C89628719E5FD165FB218D0
SHA-512:	C7974334B0E9342BDA5F0CE5AB69CF968063CADD71EC78D96B7C61AEBDE3211939B7368EDD3C6DDBE52A86A71CC0B4E34164B23901274659C0EAD3983F2DD8E0
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAccount~bundle.Account~bundle.MultiAc.d1ae850a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAccount~bundle.Account~bundle.MultiAc"],{63705:(e,t,a)=>{a.d(t,{Z:()=>d});var o=a(2784),n=a(76687),s=a(92160),c=a(39581),i=a(38429),r=a(87950);const p=(0,s.Z)().propsFromActions((()=>({googleAnalyticsPageView:c.XB,updateLocation:r.YF,updateTweetDetailNav:i.NH}))).withAnalytics();class l extends o.Component{componentDidMount(){this._performPageUpdates(this.props)}componentDidUpdate(e){const{history:{location:t},location:{pathname:a,search:o},locationKey:n}=this.props,{location:{pathname:s,search:c},locationKey:i}=e;let r=!1;t.pathname!==a?this._isInBackground=!0:this._isInBackground&&t.pathname===a&&(this._isInBackground=!1,r=!0);const p=n\|\|i;(p&&n!==i\|\|!p&&a!==s\|\|o!==c\|\|r)&&this._performPageUpdates(this.props)}render(){return this.props.children}_performPageUpdates(e){const{analytics:t,googleAnalyticsPageVie

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (319), with CRLF line terminators
Category:	downloaded
Size (bytes):	171857
Entropy (8bit):	4.426623085477658
Encrypted:	false
SSDEEP:	3072:3ZffgPpUbSd478awil78BnG3GM75Go3lME:35fgPpUbSd478awil78q3l
MD5:	C984F3D3543D2B466772014956E8326D
SHA1:	F3BFA75A1B66B6023D84329AB982B4348AA89838
SHA-256:	64CB0F7E6220410714C2264461FD4D816C5EDFAC94168892E055674AF2A7B15B
SHA-512:	A3C937D385D06A4C26BBD91F3E2158E5A9B494B73E2E3D03F537BE3C1E034A4CFB642B39A56E40CADE8BDFB2CBC51CB28548AFAF5D415DE9F62F9AF88272320E
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/Scripts/dnn.jquery.js?cdv=158
Preview:	.(function ($) {.. $.fn.dnnTabs = function (options) {.. var opts = $.extend({}, $.fn.dnnTabs.defaultOptions, options),.. $wrap = this;.... // patch for period in selector - http://jsfiddle.net/9Mst9/2/.. $.ui.tabs.prototype._sanitizeSelector = function (hash) {.. return hash.replace(/:/g, "\\:").replace(/\./g, "\\\.");.. };.... $wrap.each(function () {.. var showEvent, cookieId;.. if (this.id) {.. cookieId = 'dnnTabs-' + this.id;.. if (opts.selected === -1) {.. var cookieValue = dnn.dom.getCookie(cookieId);.. if (cookieValue) {.. opts.selected = cookieValue;.. }.. if (opts.selected === -1) {.. opts.selected = 0;.. }.. }.. showEvent = (function (cid) {.. return function (event, ui) {..

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	64756
Entropy (8bit):	5.225827032715958
Encrypted:	false
SSDEEP:	768:OmzGTKHFfqqFgt1qNy/eGvs6jfsrP0bz8JpvegbKUAWKwIM:jFq/noy/ekfIY8JF6S
MD5:	679A3A4A17037D73A8C5289E662E71BE
SHA1:	9C67A9F0AE800CD4758FED2C9C108C6CB89B66FA
SHA-256:	0E7D78CFE6AD5ABCC9E7AEABE78DE85A2BB8DA203CFB48C83C1015F3FFA873A8
SHA-512:	832D7841382B699B6C98F0C1B1AEED00C15A8EAFE912D530DBB4C5A2E686315357BE323159F1AEA8DE77B1389B681B98FC2F7F94E91BFB31D7BA66DCD9858A77
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yg/r/DUjm2v1u572.kf
Preview:	....KEYF..$... .........................8..........B...B...?..pB............RandomSubdocument...................B#.............B...B...?..pB.................~..Tk...X...D..d1..........N#..............\...`...d.......\|........... ...8...................`...<............4.=...>W..?..'?..:?............................~..................?..?.......>...................?..?.....[.=..>..................a?UUU?.......?...................?"......>...................?0....[.=..><......=...=H...`..=`..=T...\..=\..=`......=...=l.....=..=x......=...=.......B.......B..............pB..pB........................ ...........D....... ...8...................`...<.........<N.=4..>.[.?.c+?N.>?..........=....5..>5...................8......?..?R......>............X......?..?d.....>..>R...........\|...UUU?UUU?.......?r..................?.......>...................?......>..>...............?...?............ ...........p.........<N.=4..>............<... ...................0......C`...............

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	14270
Entropy (8bit):	7.969868908522641
Encrypted:	false
SSDEEP:	192:UYxPHQYpAZP3EJj3dNN0EyS9o1zetBYKdEAl0LagoKv8gmxX/STEfw+Mr2edm:DPHQCAEtzXoJbDmgxMX/SYJ02edm
MD5:	C98518A7D3FD4133C127632577442D2D
SHA1:	995A98AD87DE32D6A460B52D0F55C811F66B3513
SHA-256:	D648B5BB67C64FBDB7DA4FBE4E5FA042641B075510947D32B4304D025D5537B5
SHA-512:	89A5F2D4A0E9FA00CD84DA1FA887219587C1898907F4E70AD849DE56D208A52574F042F718E05CA315A0357B36E5363437D6BF2B5A589B7E29F7DE5A518A5D74
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............":9.....sRGB...,....SzTXtRaw profile type iptc.........0....i0...<.H.\d.......m...}A.v.\|.`.<...K.+."....V...=T4.. .IDATx..]w...~..{.....I.H..s.A.......}66.q8..;.......`0...A`...B...J..9L..w..L......l..O..~.............d.E......88.%V...,....d... K.,F.Ybe1..+.QA.XY........8..q@!K, ."H........3h......" .?...~.K:D !..."......A..4..g.@..#..._.b..$"..8........o4....b..X{.......Ge.aS.b..q.n..5.9y...y.......9r..<G.Ow..W!.....d.3..@...'So......5..%..#..7..0.a...I@q;....8..I.4.7.0....^....3K.....<.J......X$..<pq.......b.7.W.........0.....QQ..A.Q...).;..B..$.D.....R. ......"..9...f..u...$.D.%..b..d.IH..).......u.!.?...#h.5...C.Y..90)...I$%.I`J....^.^V.;eF.1Sr'.9..\|_7}..` ..HI..,. Z..xjc....7.. .#.k....AQM].).L...D_.~D......V.R..I...\|~...R.e..v.......=... @g.3....`....... .....s.......tu.....8...J.zQA/n.gm.+..c!.4.......2.xX?.k..d8..%.# ..#...).b.$..:.....c...My.....XJ8....#h<.A.]k:.4...\\c....8...%I ...S....RHJ\+.XW..

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	45660
Entropy (8bit):	5.907863825754591
Encrypted:	false
SSDEEP:	768:D2J8FpAuYQFcenF9AclzvnxQSAyn8+cQGQMoFLyZi:D2J7uYrenrASzaSA3+cCK4
MD5:	E9385DCE39C5167754C02EE58CBE9539
SHA1:	3CEC73883BAC7811DEAAEAAD37FD169A13EA7291
SHA-256:	E790F53E529219A3FB8B3579CB5BEB36276C2A98C02D612757CCEC5917940B79
SHA-512:	8F046BC02C35E87CB79A54265FA7008AEF54BC3015438307A70850F00FE49EACEB48CD50EE77AF906DBA719A201305B6E3E0F215CC3D54D23BE457CD9FDBA78F
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39767)
Category:	downloaded
Size (bytes):	43171
Entropy (8bit):	6.072760892799744
Encrypted:	false
SSDEEP:	768:7J5Ab8SnVCFqwivkAuLabUnQt2weVCFqwivkRRRum6AlVFyICfHXs:dyASniqILeUQmiq/m9W8
MD5:	5016E169748A6E203FDF156B9AB6DA33
SHA1:	E882467086E870ED3D166982CF27D8B855078CE0
SHA-256:	8356948D6F3BEF342FF37A4DECA7F6B64B58CA0B90CA128C1929C1BB76CC7A54
SHA-512:	CD47019302E7B9CC90EFD0FFD5CA921C139013DB9B3F44CAD87D1AE8536BA4F827EF67C01956A7569FCD73F23DF3746A0AD2E178D122D110D9584AE8BADBE7F9
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
Preview:	/*. Copyright (c) 2023 Apple Inc. All rights reserved.. * . * # Sign In with Apple License. * . * IMPORTANT: This Sign In with Apple software is supplied to you by Apple Inc. ("Apple") in consideration of your agreement to the following terms, and your use, reproduction, or installation of this Apple software constitutes acceptance of these terms. If you do not agree with these terms, please do not use, reproduce or install this Apple software.. * . * This software is licensed to you only for use with Sign In with Apple that you are authorized or legally permitted to embed or display on your website.. . The Sign In with Apple software is only licensed and intended for the purposes set forth above and may not be used for other purposes or in other contexts without Apple's prior written permission. For the sake of clarity, you may not and agree not to or enable others to, modify or create derivative works of the Sign In with Apple software.. . You may only use the Sign In wi

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	45810
Entropy (8bit):	7.964818731954779
Encrypted:	false
SSDEEP:	768:fQMTf8QkzNXgdQYULpqlJhBCdyh4TPrnDSZgmSEn3ZyUAkdLYYd+3q0rzJpeR9Qn:fnfuzGjUtchBDurnog03ZyUZcYdrIzsK
MD5:	B9AF0B9CC21D6EEFD768903C504090A1
SHA1:	0975975A3B1A3775E8ED726BCDF37E7F4C6D82EF
SHA-256:	3A702BCF9C2D101EA3D8B7D9098F9703967CCDE63FB23B28CB091F636EC902E8
SHA-512:	4B98A2FF18CDEB6F6B7EACA881FE01574EC881717AF9610D7089A5EE68C470C2A02433B8E77AE013FE21D21905C524ED808AEFC11D5F3C02C88C33D81F6DC547
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Portals/3922/Files/Please%20note%20(4).png
Preview:	.PNG........IHDR... .................pHYs..........+.....iiTXtXML:com.adobe.xmp.....<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-04-02</Attrib:Created>. <Attrib:ExtId>d8977641-296a-4554-ba1d-9bf068360d04</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Please note: - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>. <pdf:Author>Sarah</pdf:Author>. </rdf:Desc

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	32856
Entropy (8bit):	6.370524623339198
Encrypted:	false
SSDEEP:	768:As/PNPiPQTHCiSbVESUnSTbgtK2RFozpMDWeFDZeNX7Xi:As/PNPiPraNSvgmIWoely
MD5:	939340C7A209B4CA46615C8200F6610D
SHA1:	9DEE563165182C679C2EB808966DCA25AA09B006
SHA-256:	43078647F3BD86002CC2D165F4439181AFA7D53C7B271CF5A02071CC25D6909B
SHA-512:	743AF1C6630EAC427508C015B90B86FF3AD2C900DF96EE71396955B0FB6473EFFDC8B9B01DA19019BFEC8F2C12A2D8B5B33D744099778A089EC0898B44658CFE
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AfDaUubXx4OfTJn4DccajD9sBj7XD81SszpxLqsNxNf20Q&oe=664FF6D7&_nc_sid=7da55a
Preview:	...KEYF....$................. .............<(....4C..4Cffv@..pB........4.................4C..4C......................................................................................................................................................Adobe.d.........................................................................................................a..!Q.1A."q..#2r...$3BR...C....%Dbc............................!1QAaq..."2R......#3Bbr..............?...Z..dcI.1....D.i"F4.$...Q ..7I+..#..? .B....[<<.....ZH....i.Zt.HT....&.....\|2.D..t./..w#?.h....O..E.../.X..C....w..J.r).X..2..b.G...Z....:.iP.bwG0...tK..e-'..d.....O.....>.K..;LMg..?P..'...f. t.J...k.'i..\|.-.....u._.g.+...1...CU.p...I..p....~?.y\|.h.S..c.)..K.1....D.i"F4.#.H..$I....W...cI.1....D..q.h.....$I......{.0@z...\7...B...6...8....o.D#.........\z.i.U1Yu.w52......+..cT........@. ..@JX..).&..)G..RF.A...UH...T5....y..o....>......^d0.\....\.u...VG.'..X.U...N..4..i"F4.#.H..$I...c.r...#.."F=.D.i.g...../

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (1004), with CRLF line terminators
Category:	downloaded
Size (bytes):	549961
Entropy (8bit):	5.104091842307792
Encrypted:	false
SSDEEP:	12288:jGCfdmQNaxGUUPcTC3kamfO7U57jhLxP/jmNBE:GGUUPcTC0amfO7UtXP/jmNBE
MD5:	CF9359AFE544408B222D0C7D5AB136ED
SHA1:	D9AF28CE8516CE2A8661EBA9EF33B060B7684C87
SHA-256:	876336B347EB2933389279D7CCAF413F27440EFBD7B1E7D6D5502767ACA4E9BC
SHA-512:	8066F93727690184C97C2F68485F63B3DB1A47A66ECF71895977061743990FD1D51DA1D9BC1ED3B1044890A0B09445D1500CB61CDC1B757C5E1C3E4C7E975BF9
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/libraries/jQuery-UI/01_13_02/jquery-ui.js?cdv=158
Preview:	./! jQuery UI - v1.13.2 - 2022-07-14.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2364)
Category:	downloaded
Size (bytes):	2587
Entropy (8bit):	5.469831769584665
Encrypted:	false
SSDEEP:	48:iIqPZdqBD8FB/444FJaI/4p/4fKpQvmLrbksRb/4b+Jbump3/4Ob/WmI7:Eqx8FB/l4FJaI/S/aKpQvsrbhb/wIamy
MD5:	B24FBC6D931290639DD16C3C6E4AB537
SHA1:	FE426A4FE7121FD81801CAB2F0B07B3732B5AB4F
SHA-256:	85B264F45184856CD3EEA4E3970607B727B9E3D3646895123EF707D19301A86D
SHA-512:	EB8258AA3CFFDFD73DE24BB8EE70E5513C4A33B9BAB9C7ED12C4B7E777A72FC75FE0C4C89C550B4060A76DB297B800E4FECF8E532B4B90F0EF5A6444556D9A3F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Explore~bundle.LiveEvent~bundle.Topics~bundle.Trends~loader.ExploreS.d028fc9a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsInternals~bundle.Explore~bundle.LiveEvent~bundle.Topics~bundle.Trends~loader.ExploreS"],{20579:(e,t,n)=>{n.d(t,{$N:()=>w,G0:()=>g,Jj:()=>T,O9:()=>_,S:()=>b,fy:()=>h,jz:()=>m,nm:()=>u,qk:()=>E,uI:()=>c});var r=n(16587),i=n(7276),o=n(16739),a=n(78772),d=n(3124),p=n(38203),s=n(62104);const l=Object.freeze({Trends:"trends"}),E=Object.freeze({WebSidebar:"web_sidebar"}),c="explore-",f=9e5;const _=({contentType:e,displayLocation:t,exploreGraphQLEnabled:n=!1,focalTweetId:r,includePageConfiguration:a=!1,initialTabId:d,profileUserId:l})=>{const E=e\|\|t\|\|"main",_=function(e,t,n,r){return n?`${e}${t}-tweet-${n}`:r?`${e}${t}-user-${r}`:`${e}${t}`}(n?"explore-graphql-":c,E,r,l),b={timelineId:_,formatResponse:p.Z,network:{getEndpoint:e=>e.withEndpoint(i.Z).fetchExplore,getEndpointParams:n=>({...n,candidate_source:e,display_location:t,focal_tweet_id:r,include_page_configu

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9847
Entropy (8bit):	4.803859749476966
Encrypted:	false
SSDEEP:	192:HQHL8ncmZwSecqis9I4IKjiukpM3TUeFnUKW5NykDgoF1bmrRoT7pu4oa:He8p3AnkDtmrREuI
MD5:	957C08B502066363B0C5E6B6EC816DB8
SHA1:	08BA7841C65563A171BD87258AA7F0DE29969FAF
SHA-256:	5D32861C9E13B8222C4973C8461F1D01AA8252AAA1558324178E5C1529E11E4C
SHA-512:	92D3C9BC48C686F89EC4A6E4F81E846E32EE811BCCEDC7D32334F05EFC697D2A3856B89E6A30148F58C77F67A50BFF155D9BE81400B0B031EE270E570DB9933A
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936733934
Preview:	/*. DotNetNuke - http://www.dotnetnuke.com. Copyright (c) 2002-2007. by DotNetNuke Corporation. . Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated . documentation files (the "Software"), to deal in the Software without restriction, including without limitation . the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and . to permit persons to whom the Software is furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all copies or substantial portions . of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED . TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL . THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10246)
Category:	downloaded
Size (bytes):	10398
Entropy (8bit):	5.318728312972804
Encrypted:	false
SSDEEP:	192:a8GVIiVPkdw1s6cw9HS/oy110ff9CkbkCtPZxSn7qm/Iqzz0t:RJi+w1K4iZKVzxkbIqzz0t
MD5:	3BDEFEB249652C79E99CBDD0915BB23E
SHA1:	BC1A4CBB6C3084E6738DE45946C6A7B69F2F0251
SHA-256:	F8EA62D707487E0D0DFCCF3CE4995937E77C710B89BE34E8DD6548DBC20E6879
SHA-512:	F3C21D72EA983250491CD33AD84CC608DF272216727AAD2B2BD89E6266A44C173D5B9CD3B03030DAE0F09B6D0E390082BB46F9D389BB1B27BB9B238268FF7DA5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.0203c12a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.JobSearch"],{40312:(e,t,n)=>{n.d(t,{ZP:()=>ge});n(36728);var a,c={fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"AccountSwitcherDelegateQuery",selections:a=[{alias:null,args:[{kind:"Literal",name:"s",value:"4721"}],concreteType:"Viewer",kind:"LinkedField",name:"viewer_v2",plural:!1,selections:[{alias:"pendingGroups",args:[{kind:"Literal",name:"roles",value:["Admin","Contributor"]},{kind:"Literal",name:"status",value:"Pending"}],concreteType:"DelegationGroup",kind:"LinkedField",name:"list_delegation_groups",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null}],storageKey:'list_delegation_groups(roles:["Admin","Contributor"],status:"Pending")'}],storageKey:'viewer_v2(s:"4721")'}],type:"Query",abstractKey:null},kind:"Request",operation:{argumentDefinitions:[],kind:"Operation",name:"AccountSwitch

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	8473
Entropy (8bit):	7.746185515678946
Encrypted:	false
SSDEEP:	192:syjfzssKvIN0qVQVekPy/zAARFofhyIYpga+iz6:sy32ekkzjjof8I1aB6
MD5:	109A89B686E886463F8B3AD375420AEA
SHA1:	8A0766B19CBD9F27C01EBB6E699E7DD21FC09CFE
SHA-256:	249208D8D52416DAC4E8D375B3EC3BFB26AA206A5F15B9A03A560920D32BAC53
SHA-512:	D57C210279B9DABB72CC4839D4E1963AA2CA6496FE6FE333BE1E5273C5E8D9ADBD8D12CAEC19BE72CCF0676CB8BFF68CDBA2394C897C0CD7EA013C5B0ED547E8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms.0..mntrRGB XYZ ............acspAPPL...................................-lcms................................................desc.......8cprt...@...Nwtpt........chad.......,rXYZ........bXYZ........gXYZ........rTRC....... gTRC...,... bTRC...L... chrm...l...$mluc............enUS.........s.R.G.B. .b.u.i.l.t.-.i.n..mluc............enUS...2.....N.o. .c.o.p.y.r.i.g.h.t.,. .u.s.e. .f.r.e.e.l.y....XYZ ...............-sf32.......J.......*........................XYZ ......o...8.....XYZ ......$.........XYZ ......b.........para..........ff......Y.......[para..........ff......Y.......[para..........ff......Y.......[chrm..............T{..L.......&f...\...C..............................................!........."$".$.......C............................................................................"................................................................................G....y.D..}m...}0[...%\.T..pY...n ./).q..g.......r......\zj......e.$Q....X.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4159)
Category:	downloaded
Size (bytes):	4382
Entropy (8bit):	5.257891242563115
Encrypted:	false
SSDEEP:	96:O6f66VSIZvn+TjxHRSMwQfxci70HgbIz5JwAdq/bV8wa6+:nxnElxLwGxJ70HOIz5JwAdmV8l
MD5:	CCEF61D36697D90AA379F0282E9C4A20
SHA1:	92673BCC48E9651B76AFC510486401CD85C1B65C
SHA-256:	C10935A1562EB4533412AE7F54BC2EF8C84E142D236163538A16206F18C54B15
SHA-512:	82C8D42FC91291FC613319ED70CBD316C7F3C5AD287B327E6827D5FD7F610C6615AAF03559E31EFE8BE8248844BC3AEE8D64A88ADA34EA24B0034E7F2B39B7B6
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting.5e7f40fa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting"],{85204:(e,t,s)=>{s.d(t,{ZP:()=>m});s(6886);var r=s(2784),i=s(25686),o=s(35131),n=s(40190),a=s(51384),l=s(82392),d=s(40080),c=s(15686),p=s(73186);const h=r.forwardRef(((e,t)=>(0,d.Z)("select",{...e,ref:t}))),u=e=>(0,d.Z)("option",e);let b=1;class _ extends r.PureComponent{constructor(e){super(e),this._selectRef=r.createRef(),this.state={isFocused:!1},this._handleChange=e=>{const{onChange:t,withEmptyOption:s}=this.props,{selectedIndex:r,value:i}=e.target;t&&t(i,r-(s?1:0))},this._handleBlur=e=>{const{onBlur:t}=this.props;this.setState({isFocused:!1}),t&&t()},this._handleFocus=e=>{const{onFocus:t}=this.props;this.setState({isFocused:!0}),t&&t()},this._id=`SELECTOR_${b}`,this._errorID=`${this._id}_ERROR`,this._helperID=`${this._id}_HELP`,this._labelID=`${this._id}_LABEL`,b+

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4363)
Category:	downloaded
Size (bytes):	4535
Entropy (8bit):	5.2876925875265455
Encrypted:	false
SSDEEP:	96:cClTIerbqO1la+7R6/7IxytpZVXnKHNBvOG7va:NTLAWKpvn4bi
MD5:	6A648C9E69CCE3CD567C1BE782B603F5
SHA1:	CC15063668B20AA48A4F5A4D4BB02F73655C7DC9
SHA-256:	B4F36189685D22A136087B80D8E3E14067F4EAE070CCA477D45A13DA08A9B14A
SHA-512:	113B7B220969B1DBB8C3C88A0B002AF56062587617BF6A4644E601927C5908288F7C12AD43CFF07660C30E2B81B950DA4CAF601A709929EA3F7E9350EF857C9C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.f2e86d8a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch"],{93111:(e,t,a)=>{a.d(t,{a:()=>P});var r=a(2784),n=a(19153),s=a(85682),i=a(3188),c=a(73186),l=a(45184),o=a.n(l),d=a(31735),u=a(7066),m=a(1206),g=a(44910),p=(a(6886),a(25686)),h=a(82392),f=a(37800),b=a(55916),C=a(35131),_=a(37796),v=a(67935),w=a(48501);const U=o().c61eea74,k=o().b7dc3885,y=o().d86bbf0f,E=o().h6beb5fb,I=({accountUsers:e,activeUser:t,handleMultiAccountSwitch:a,renderUserDecoration:s,userTestId:c,withBadges:l})=>{const{featureSwitches:o}=r.useContext(w.rC),d=(0,_.v9)(v.BP),u=o.isTrue("twitter_delegate_enabled"),[m,g]=r.useState(!u),I=r.useMemo((()=>e.filter((e=>e.user_id!==(null==t?void 0:t.id_str)))),[e,t]),S=r.useMemo((()=>I.reduce(((e,t)=>e+(t.badgeCount\|\|0)),0)),[I]),B=r.useCallback((()=>{g(!m)}),[m]),M=r.useMemo((()=>u&&d&&d>0?r.createElement(p.Z,{onClick:B,style:D.personalAccountsLabel},r.createElemen

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55975)
Category:	downloaded
Size (bytes):	684985
Entropy (8bit):	5.468485343106325
Encrypted:	false
SSDEEP:	6144:FP/X/e7E8rmE7DzSeiXMlicXQakFo7fm21SrJD3qAFeW8Oys4hjZAq:FP/Xm7hrx7fSbMNgaMH20rxNPyuq
MD5:	65008B079E3A54A058B81DCE7D29C308
SHA1:	A5D264AB39F5F367FAD269276CD5ADE182282499
SHA-256:	B98EA70D85D86398F4F28B737C798553A74B042E3F1CCBB68835347E65BCE709
SHA-512:	74D8675B2A037433244DE5179EC0114D070A31DA65B3A7BE83CFB84FF3A1BC76160D06FF17D271911B8C8E28C2F7B0EBD523272A54A38FE49C7DFA1E0263F1D9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/vendor.6c559eba.js
Preview:	window.__SCRIPTS_LOADED__.runtime&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["vendor"],{86706:(e,t,r)=>{"use strict";r.d(t,{zt:()=>H,$j:()=>B,I0:()=>G,v9:()=>b,oR:()=>q});var n=r(43100),a=r(41110),i=r(28316);let o=function(e){e()};const u=()=>o;var s=r(2784);const l=Symbol.for("react-redux-context"),c="undefined"!=typeof globalThis?globalThis:{};function d(){var e;if(!s.createContext)return{};const t=null!=(e=c[l])?e:c[l]=new Map;let r=t.get(s.createContext);return r\|\|(r=s.createContext(null),t.set(s.createContext,r)),r}const f=d();function p(e=f){return function(){return(0,s.useContext)(e)}}const h=p(),v=()=>{throw new Error("uSES not initialized!")};let g=v;const m=(e,t)=>e===t;function y(e=f){const t=e===f?h:p(e);return function(e,r={}){const{equalityFn:n=m,stabilityCheck:a,noopCheck:i}="function"==typeof r?{equalityFn:r}:r;const{store:o,subscription:u,getServerState:l,stabilityCheck:c,noopCheck:d}=t(),f=((0,s.useRef)(!0),(0,s.us

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/ScriptResource.axd?d=1HpV3OVB0CZk39ogiBwEQbQCVOd2-eGCLhS-Ks_E3NLWxpFDBlXi1KaeEGnM8M-LDRoJU1KE4u9lKltclVCmJOvN5NYfdc5zlfiUOPRv-DCUhnoVqwFxOJbregA1&t=ffffffffbc4a7304
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2545)
Category:	downloaded
Size (bytes):	2768
Entropy (8bit):	5.3969282119456725
Encrypted:	false
SSDEEP:	48:iIypLFU/a0FcB30OwWf5YspSss4XXHkfOnIxpV+P54XzQpE8DpDDpPWmEr:mphUS8cB30hgYCnQXMiqCr
MD5:	8F0733DECCC23463483F62EE7120123E
SHA1:	E5F46E3ADF2E3A5622D8F6FB6D70A9463CF6167C
SHA-256:	733C37BDEFFB65CB7870D95AB64CC979EC0000099F96EE522614455E28B7D5E2
SHA-512:	66467F2F71C65B95D4481C387B10F6C1CD1B2DCB9BB9362AD87E0664373E6E9F27BF6BECCE05CC389D4ACF75D69EC0195E59BD1657259F742188BFDEC89D3F98
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.5f7fa13a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund"],{96688:(e,t,s)=>{s.d(t,{Z:()=>L});var r=s(7896),a=(s(6886),s(2784)),n=s(76984),d=s.n(n),o=s(45184),l=s.n(o),c=s(63140),i=s(72983),u=s(25686),h=s(42569),p=s(23301),f=s(34590);const I=({displayMode:e,renderUserCell:t,userIds:s})=>a.createElement(u.Z,null,s.map(((s,r)=>t?t(s):a.createElement(h.ZP,{decoration:h.ET,displayMode:e,key:s,promotedItemType:p.bj.USER,userId:s,withFollowsYou:!0}))));I.defaultProps={displayMode:f.Z.UserDetailed};const U=I;var b=s(23803),Z=s(23335),P=s(58343),m=s(92160),D=s(16657);const E=(e,t)=>t.userIds,_=(e,t)=>{const{filterPredicate:s=(e=>!!e),userIds:r}=t;return r.filter((t=>{const r=D.ZP.select(e,t);return!!r&&s(r)}))},A=(e,t)=>{const{userIds:s}=t;return s.reduce(((t,s)=>{const r=D.ZP.selectFetchStatus(e,s);return t[s]=r===b.ZP.NONE?b.ZP.LOADI

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/WebResource.axd?d=pynGkmcFUV1A_gQetflDiQxP9peo-XOx2caZj2iNuDkzgTYBre1vhGLS6XM1&t=638403336553933774
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1378)
Category:	downloaded
Size (bytes):	1601
Entropy (8bit):	5.43312593611265
Encrypted:	false
SSDEEP:	48:iIy5DxnyQgdBSKpX0+ii16Iixwd8bC8lJvfYWmE5Dl:m5NyQgrjZ0+iiQIix9x2C5B
MD5:	3F0C18CC43C1050F6FDAC380E72E6B61
SHA1:	A5D1954943E1BA0098DF1BF66B20EF7F2829F08C
SHA-256:	9554CE110494E0CF7BDF8EB18B037A87D4BA5D981505913E5ADE2EDC81C5F61F
SHA-512:	26F2DF17C2B32E158520933E30DCB4EA10D3BAD852CA7410DAE76CB9B739D0052BD833A696066C7CF8BCCA5DACCEE0BAB7A0B3D5609B315AA5166B1F4B441F0B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi.0ae4c37a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi"],{62261:(e,t,o)=>{o.d(t,{Hq:()=>v,c1:()=>p,lP:()=>F,og:()=>f});var r=o(31149);var n=o(26853),s=o(53392),l=o(51670),i=o(16657);const u="knownFollowers",a=`rweb/${u}`,w=[],c=(0,s.dg)(a,"FETCH_KNOWN_FOLLOWERS"),d={};n.Z.register({[u]:function(e=d,t){if(!t)return e;if(t.type===c.SUCCESS){const o=t.payload\|\|{},{total_count:r,users:n}=o&&o.result,{user_id:s}=t.meta\|\|{};return s?{...e,[s]:{knownFollowersCount:r,knownFollowerIds:n}}:e}return e}});const _=(e,t)=>e[u][t],p=(e,t)=>{if(t){const n=h(e,t);return o=i.ZP.selectMany(e,n),r=e=>!!e,o.filter(r)}var o,r;return w},f=(e,t)=>p(e,t).filter((({name:e,profile_image_url_https:t})=>!(null==t\|\|!t.length\|\|null==e\|\|!e.length))),F=(e,t)=>{let o;if(t){const r=_(e,t);o=null==r?void 0:r.knownFollowersCount}return o},h=(e,t)=>{const o=_(e,

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26130
Entropy (8bit):	5.488324254257486
Encrypted:	false
SSDEEP:	768:tGIr9iykWXc8VV4ucbxiyBBt2GVrGL9zFDunks90GENYx59B3Rw1iK9yoCf24Q9j:eVsd4JZG
MD5:	662C9D48C325173851DD2080868731E3
SHA1:	1613A3185523CCD77BE31A02DA783578F79980C7
SHA-256:	D155F904A6170BA1723C94C37D109AF3CED19153ABE2B5ECEF3E3970EFB481C4
SHA-512:	E1530E1DF2A4A8F04EFA3877579032D7E4697614500546B864B8F3F5B1830230C6B697C0E6F0D21756135A1190677196C4B74D510177A4795D3BCEF37103347B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,900Black,500Medium%7CLato:400,700%7CRoboto+Slab%7CRoboto+Condensed:400,500,600,700,900&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2) format('woff2');. unicode-range: U+0100-02

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2287
Entropy (8bit):	7.877331157180108
Encrypted:	false
SSDEEP:	48:+s5gVzMbNO+tSxCJkyeO5wntfQMZ0ooVxT028NhLDaj:OVzP+uYwntfQMCooD0PXfaj
MD5:	FDC852149346F7E9AB72E5A33DB9447A
SHA1:	6A8A4CBF9D08B4C63D481FBAE5D1AF224DC35BA9
SHA-256:	2A51D168D00538767D9FFD2BA75342CF32FD69062A8BCE5239B48C709D97BAC8
SHA-512:	2B559DA907B2A059ED1BBC78AB2292FE5BC8C896D8807C95BDC157703586F89830141819F4B93D9BCAA6F3AB7310BF1A86ADA500DB81778F0985A33BF7F6566D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....RzTXtRaw profile type iptc.........0.....8.e.q...`..?...b.D;s........K&.-.2QC...e..!'.....KIDATX..X[......sN..vf..{_n.v#..5$.K...X..LRj.QI%...)..\..S.$XJ.T.X.I.".hi.(e%.............s.<....{..a.t......!l..W&..A...yt1...<.x%...!A.D.av.... ...`...P..P......i....3&.#.n..-....W%..R....x-.s...w....[..df..~`)H.F;~Ce..%3./,..2........F.1p...Ef{sO..AH.!i&.N..X..~i..tG.....,.:.6......Si...@.E..$.eu...E...~....,lqu.%.?.......JB....i./.u...K.c.......$.%<.Y........w;C...,.J..:.q&.K.. .:.7........'z...d{...;..XQ..&..`....Z....=...a_......u}....a.%.....N=.......ro....3.3.kF.-...eu.u..f..q...[-...~.#.......+A.....u.Z[...`.z.`..7.....w....}}...../c.ah.-.:;..o6.3.7lI......~..[.Y.`..KA:..cQ..'n..R.............>..FL)%.Zc. "@3.c.~tE....p5..l.y........&.iNF.....f.Dm..[..RWl.v9..UXj=UpJA....xn..'.U.-.0.$..8...2..(....".....T',.,.D...3....g.l.O..@.........g.-..`..f.W..k.Y@..Q...*...........}G..%}. L.9N<.V

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44660, version 1.0
Category:	downloaded
Size (bytes):	44660
Entropy (8bit):	7.99540254121323
Encrypted:	true
SSDEEP:	768:hgJ8wY+W8lE34E/C6z3sbYqg0OvVQ8J4WSrQek4cXzrrhDn:NdQlE34E/C6sbTg0yV54drQ2cXz/hDn
MD5:	AF0FD092A950CD858A160490AE22D16C
SHA1:	4291C81C52514932F517529F3D3C24F4A40609EC
SHA-256:	858B70C0B816C651B12A0849E17C83EAE8A76AADE2FDF02E98848D5D25868C82
SHA-512:	64123D00581D6D45C1FE0390911E20FB732A9875EEBC667C45CA4F84E5768657BDB1FA9A307C150D6E5644A7E8E5CD274C58F879FE059B8C6E1DC73E2A039B35
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/Chirp-Regular.80fda27a.woff2
Preview:	wOF2.......t..........................................d..x.`..v.D.......8..W.6.$..t..<.. ..r. ..&.$..T[.\|...q.n_...IU....o...9..A....T5...q.J@w..J.+.....E.....n...U....ww. .....s..@Yy.%....,.@d..ptN1.,...f+.VZ ..S.L.e3.=.,J....."..h....Vs....S..0.N04...%.k_......Z....7.$o(e.m6.......$..#...4LaX..G3...R.6mn.jW$..dPX..Ntg.\|-..7{...^._>.a.){.M..bU.5...5&5... .....t..X[......j;_M%......;y.......b..k)%)..R...~.P........FRRa.m.`....R.W.......bY....Q.......>.E..$.).I..e&............=......?@&..A.....%.\|.A0W.lq9......y..s.{I......"b..k...FDD..q...q.F.P..-n.@.....+ "......\|..#.>...8.....l....D....N06ka..9]....W."us.....^Z..vIH..\|@bM@.QJ,...!..c...."OH0..... ..>v./5.?...m.....T;k....."..$..!Q.;...D.l.....R.J...n.2..SW.[..[m.......0....?...k......EkP.....J...^....'..qc.....<.).a...x.....I.....u..s....4.......+...q.J.M.Z.. . ...]..N..v/...>u......"............2..!.C6..$.."K...,....V....$ni..P.:....y(k..?M..@...X...@.......-.]..*..k..)..Z... .>

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9847
Entropy (8bit):	4.803859749476966
Encrypted:	false
SSDEEP:	192:HQHL8ncmZwSecqis9I4IKjiukpM3TUeFnUKW5NykDgoF1bmrRoT7pu4oa:He8p3AnkDtmrREuI
MD5:	957C08B502066363B0C5E6B6EC816DB8
SHA1:	08BA7841C65563A171BD87258AA7F0DE29969FAF
SHA-256:	5D32861C9E13B8222C4973C8461F1D01AA8252AAA1558324178E5C1529E11E4C
SHA-512:	92D3C9BC48C686F89EC4A6E4F81E846E32EE811BCCEDC7D32334F05EFC697D2A3856B89E6A30148F58C77F67A50BFF155D9BE81400B0B031EE270E570DB9933A
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936729825
Preview:	/*. DotNetNuke - http://www.dotnetnuke.com. Copyright (c) 2002-2007. by DotNetNuke Corporation. . Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated . documentation files (the "Software"), to deal in the Software without restriction, including without limitation . the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and . to permit persons to whom the Software is furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all copies or substantial portions . of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED . TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL . THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 1343, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8336
Entropy (8bit):	7.809937138777953
Encrypted:	false
SSDEEP:	192:gjtarBQWhIcwo85icrAZrLwS1tJPnh0AqhUDEL4NzO:DrBQWhIcwoAIvhnqhl2zO
MD5:	93CBB501B0B758DD90964C56D16E1F95
SHA1:	45C5FCD436DEA716B61DCA77A721E63CB01C420A
SHA-256:	957819BCE755D7D8871110F870A0AAFB0E64A26667E64F23D433C11423A63C30
SHA-512:	D2F8326DA50958CF75C3489DB39CE6B04EE65F625CB93AC0E4A5E69A38A746447B97B336D22C40C8595EEDF3B8186E37BF42ACDA362E078EC6AB17CC92B60580
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.....p.......PLTEGpL...........................................................................bhp...................................................................................................................................................agq...........................@......................................agp...`hp...............agp.........agp......agq...............`bp......agq...`ep...`fp......agq.........bfp..............`gp?..agqagq...agq...>..>.....`hpagp...agq..?..?..>..>..@....agqagpagqagq.........@..?..>..>..?..@..agq...agqagp..agq.............>..>.....agqagq......agqagqagqagqagq............agq....?..>.....>...........@...........agq..................>..agqagq>..>..@..agq...>........agqagq...`fp@........agq......agpagq@..>......`....tRNS..~`.0... @....p.^...P.....n.........+#..N...{..jD......Z..I.x.g.&..(..\..8>c........v.TW<...sL. 4...2.R.6.........B...0~OO....pp.0?..^~@....]@.......Q.,..).O..^A../ .(..w........

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	830
Entropy (8bit):	4.9746362124394805
Encrypted:	false
SSDEEP:	12:UsPI/znHUbqRV9rBuJUukKU5MNPybURE3nuMrvALoUbUREY9dD:TPI/rt90PtPNPLovBdD
MD5:	A4A61024CE5FB0C08278259E7F4D762D
SHA1:	CBACA33A9762BC453CBE3BF53F7649006ABD17BA
SHA-256:	91C00942241699534858A17E34AB5759BBE330A86FD92758261325F63F887F49
SHA-512:	B4E2448B9F2BE62C883D588BE3C8222C5D8842B0D48454E54F9CB50AB98AA69B777FEFEC5D916BE3F25C7BFD8FA6E8DAC3286CCF4D5034405145D92911F69249
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/Announcements/module.css?cdv=158
Preview:	/* ========================================.. CSS STYLES FOR Module DNN.Announcements.. ========================================..*/...ModDNNAnnouncementsC..{.. overflow: hidden;..}.....DNN_ANN_DesignTable..{.. width: auto;..}.....DNN_ANN_Description..{.. margin-bottom: 16px;..}.... .DNN_ANN_Description p.. {.. margin-top: 0;.. }.....DNN_ANN_viewtypeSelector..{.. float: right;..}.....DNN_ANN_viewtypeSelectorLabel..{.. float: left;..}.....DNN_ANN_viewtypeSelectorDDL..{.. float: left;..}.....DNN_ANN_ImageDiv..{.. float: left;.. margin-right: 5px;.. width: auto;.. max-width: 100%;..}.....DNN_ANN_DesignTable .DNN_ANN_ImageDiv > img..{.. margin-bottom: 10px;..}.....DNN_ANN_Description p img,...DNN_ANN_Description img..{.. width: auto;.. max-width: 100%;.. margin-bottom: 0;.. margin-right: 5px;..}..

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3630)
Category:	downloaded
Size (bytes):	3812
Entropy (8bit):	5.572874856544779
Encrypted:	false
SSDEEP:	48:iINESG1kKZ75msuy36gDHmDQvBKLiUplkJo7zxMhAIOz1i+v4U5CF+21DJzMP639:5ES6kTE1w7b9KAlLvuQsSi1oQ
MD5:	B927D5ECD505AF0DB5D05985E73182D9
SHA1:	F699322A2C81954BCB0034E5BAE21DD9A5F48E92
SHA-256:	6EAFEC8E558ECEB7B177150222BE96A90FEFBF795FED7C37F6E3F1AAE7DA0A42
SHA-512:	4E6EC8F2BF3A55D3665058C6AB2B366C5832FE6CDACE2FD66FA7847F80929277AE726D7248755DD433819D12D02AA1FB7F23DD656878F557F4BBF3AAC03D8C08
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery.f358f33a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery","bundle.AudioSpaceDetail"],{20604:(e,s,t)=>{t.d(s,{ZP:()=>k,UJ:()=>S});t(6886),t(36728);var o=t(2784),i=t(25686),r=t(73186),n=t(82392),c=t(45184),a=t.n(c),u=t(66927),l=t(1206),d=t(68547),p=t(66961),h=t(76687),b=t(48501),m=t(92160),g=t(16657);const y=(0,m.Z)().propsFromState((()=>({viewerUser:g.ZP.selectViewerUser}))).adjustStateProps((({viewerUser:e})=>({viewerUserScreenName:e?e.screen_name:void 0}))),q=a().b47e760e,w=a().fd2c7b44,v=new u.Z,S=e=>v.subscribe(e).unsubscribe;class _ extends o.Component{constructor(...e){super(...e),this._bindKeyboardShortcuts=()=>{const{history:e,viewerUserScreenName:s}=this.props,t=(s,t={})=>e.push({pathname:s,state:{...t,source:"keyboard_shortcut"}}),o=e=>s=>{s.preventDefault(),v.getListeners().length?v.notify(e):t("/explore",{searchFocused:!0,searchPrefill:e})},i={[p.uq.labs.o

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 765, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4476
Entropy (8bit):	7.623507465653841
Encrypted:	false
SSDEEP:	96:V1tbTcPExw31EZh1wTeB0MhgXHffrLGI824yGOV7jG:VMPA0Etw9MhIfTLGIZpi
MD5:	B1FB0D39C11137CBDFC6613BF4FD794E
SHA1:	BF8852FD9DFEF2CCBE65A5EDFB4F62154B7E4556
SHA-256:	698E31282476A559C2822BD72E5CA6C2E25E1CBA5EDADE0C071A93C562CB29A3
SHA-512:	BA20993A2B103C2044938312D055961636A44F4C6A2DCB463E6410DC5B21E8CECD4C512CC37FD5B0DEA9470E4723A6C65647E5A62BE85320DFCB2D8ED397EBCD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yn/r/CYXtIISfX0k.png
Preview:	.PNG........IHDR..............}=.....PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................................m.5....tRNS.T.P...................N.d..."$...Z..J........b..H....,. .l0.t.n(:...hf......&...`.B.vj.2..\|F.8.~..z<4.x..>6DpV@.^Xr..LR\.{)X...,IDATx^...[.J.../.B..cc.B\0.%..j.%.B.!.PRIo'.${..._..f$=Nn6..w....\|...53.h..N...Ei...A\....._.@..i..Z:}.}Q.....p...^....@.,.......A1_k.WL..R.[y..`.(W....l...N.$........,.j.q.h..FWpct....\..-&..r..D..UQ.(UIC.....+..:.L.G'\|D...!.@...3.:.5VH..........f[y(..v....vb.e...z+d...c....I.;-.N\..V..I...+.2.K....M*~..Z.f.) ;.D}]A..G..$.rDz:H.z....^Ax..g.::..j....y.g...c......fi...w-...]...V.j.....~ ./v.. ....-....m.fO.s.C.

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468)
Category:	downloaded
Size (bytes):	1691
Entropy (8bit):	5.463029685009129
Encrypted:	false
SSDEEP:	48:iIyyDAl2mGalx7WKYQOy9+iV3nHzy/+QLv6JWmEyDaU:mysl5FlZfYZM+i5c+ecCyGU
MD5:	594E0D9FFE7302A9FD38CEF14923F04A
SHA1:	D720FDF5DD5A38DA13A4EB149848CC11B5152716
SHA-256:	DF795D1A4EE3C8C8E5275F3DFCBA9000E7D30856F166EEAD017C44764E53DF11
SHA-512:	3F1D5F280B701EAB0728318A5BAD3A62DA100A955AEEB230A5D021DCFAB79864BEA46C574EF680FC953C79D0CFF8B8C096E1ED7D5020A979032E39B90ABD155A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich.5ffff2aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich"],{58804:(e,t,r)=>{r.d(t,{Z:()=>p});var s=r(7896),o=r(2784),i=r(77089),d=r(30700),n=r(24797),c=r(46110),a=r(60673),l=r(48501),u=r(23335),w=r(92160),h=r(99072),m=r(62854);const b=(e,t)=>t.tweetId,_=(e,t)=>{const r=t.tweetId,s=r&&m.Z.select(e,r);return s?(0,h.z0)(e,s):void 0},p=(0,w.Z)().propsFromState((()=>({community:_,hydratedTweet:m.Z.createHydratedTweetSelector(b)}))).propsFromActions((()=>({createLocalApiErrorHandler:(0,u.zr)("QUOTE_TWEET_CONTAINER"),fetchCommunityIfNeeded:h.ZP.fetchOneIfNeeded})))((({community:e,createLocalApiErrorHandler:t,fetchCommunityIfNeeded:r,hydratedTweet:u,onPress:w,tweetId:h,withBirdwatchPivot:m=!0,...b})=>{const{featureSwitches:_,viewerUserId:p}=o.useContext(l.rC),f=(0,a.z)(),C=null==u?void 0:u.community_id_str;o.useEffect((()=>{C&&(0,n.Z)

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	105092
Entropy (8bit):	5.44639180198464
Encrypted:	false
SSDEEP:	3072:4WGfYtu/lLPALBShXP3HsmbiR4MERL1jGl:JGfYtu/lLPgghvWN
MD5:	DFADEB1D65D3B63F39FBF5E7B418F8AA
SHA1:	D30570CA9554A4ACC88CD7CF4DBAF0C24A6F2A6F
SHA-256:	708B82549E11368F8541CA46E9E6D3A60BA476A18AEF6D1EA0CE010756E11CF6
SHA-512:	B98178A0517BC1E380790A0FD8A6A3CC79C4E3B00354C30DE23EAEC576DA0DE7E0258DD45AAF715FAA56A199088D8C986F8BB4DC87B17326812296ABC99F5EED
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler.b835363a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler"],{25572:(e,t,i)=>{i.d(t,{Z:()=>n});const n=i(2784).createContext({heightsReady:!0})},29279:(e,t,i)=>{i.d(t,{Z:()=>n});i(6886),i(2784);const n=(0,i(56499).Z)({loader:()=>Promise.all([i.e("shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun"),i.e("shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa"),i.e("ondemand.IntentPrompt")]).then(i.bind(i,7402))})},90560:(e,t,i)=>{i.d(t,{Z9:()=>ht,ZP:()=>Tt});var n=i(7896),a=(i(6886),i(36728),i(2784)),o=i(25686),s=i(22685),r=i(25663),l=i(47701),d=i(22398),c=i(25494),_=i(13867),u=i(45184),p=i.n(u),m=i(1206),I=i(16587),h=i(32307),T=i(75297),E=i(50829),A=i(73186),w=i(79075),y=i(82392),g=i(29496);const v=p().gf5e9ea6;function C({heading:e,onUndoClick:t,subhe

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x503, components 3
Category:	downloaded
Size (bytes):	42686
Entropy (8bit):	7.971351755999078
Encrypted:	false
SSDEEP:	768:BalkuA9rB7oADslek+jHLJK8wSMGIzQmBnjPf8HLroBLTzq8LuwHes:blRB7HLkCH8jGIzQejzqIuw+s
MD5:	B0B692F0E0FA1B2197C8966C29B60BC9
SHA1:	D0D82C6BF8A5333B5FF17865FABDF1F12FFDF471
SHA-256:	AB01C677713BE8BB112D58ABF39C0605598357FD6DB74289CA49DE6F3DFF637F
SHA-512:	A6D58599A43BED6F32A16A289D750FF27AA08C1212527925A34C9F7EB3FC051F9FAD0ACF92A5453F1AC85CD26FA0537F328ADC87845F4C8768CD72780B3AE569
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/434204982_732142639100127_4554239773083886536_n.jpg?stp=dst-jpg_s600x600&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kCAh3UDLwKEAb5RJjfL&_nc_ht=scontent-sjc3-1.xx&oh=00_AfAgqAcwDkNJxwB1YxewNbnMlGMa-eyceKGA_bOMDCHvBA&oe=662E5F3B
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a71010000c7110000342600006e2b000015300000894a00003264000003680000fc6c000022710000bea60000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........X..".....................................................................................K.5..Lm...j..#h..j...F.m...j...F.m...j...F.m...j...F.m...j...F.m...j...F.m...j.j.m.R.N......X.Xk.r...}O]69.>....X...v>.->.....p.F...k..N...\6-p.F.lZ.6.......]..5.d...]..Cb.A..p.5.l'Z6S......r[.....o.[kk.Z.........z.].....z..4Y..h.D]...F.f..9/j.7..^.1{...(r^.H/.$....oSC......D._.X/j ...^...(h_.H/.....I\|P.(.^..1.P/...k..#@...+...{NZ..m....?T..?L..\|~.n.M..c......l...-..C.}....q...]N.s.id..v...~.G./O..c..k..Z.=..e+..<)4...z-..-.........Au._........}...n...%f....kz.m..z5..>.S...S..Po...-\|.h....b.a.i.V..u....1.0'...-h.S.>...:.{..S&=Z-..\|..k1.[..E..k.g\.>?/........n\|:.u...o

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	5304
Entropy (8bit):	7.808485882331489
Encrypted:	false
SSDEEP:	96:hU4lebGM/WAvoPmo+XfeXNUeayHMB7GDhXQEQNSqQ0IymHd6smt/QxohvIv:O4qGM/Wpeo+XfeXNpMVGDsNTmSHtvhva
MD5:	9C330226C13D8CED1E3318D6AA593E27
SHA1:	3EF421131D66012437BCF6B015244FC9F279DEEA
SHA-256:	BE904D1FC81057A5D590ED4B39BFC57A0E3B89BCBDF5DE5F96DA14830C3C533C
SHA-512:	1309460649A3DA8953C43227C0DB39CC1A5CCBFDE0BDC27E0F5E246A2EB472546D0370C20F4C6103037DD08CA4988E1C61B24D2D0DDE5A13878F92009EFAC01E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000270300007a050000be060000fc070000dc0a0000ad0d0000300e00004f0f000069100000b8140000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................`...l.......Z../...f....y.vAN.v..._y.-..nm..nr...HAN..=.. .2W..M^$......6...pE.8....g........P%....=..^.X....vz.vc..1..\V.U..9.....0.....;..y.jx.]k.D..:...X.J..........a......w..r.{.z.1.....+.........yOL..f.P..j..=..2.5..~.[c...........%../V.]F...CK.x..g...x..v...L.P:.4..\|...I.<{E...!..3...9..a^)...D....3%=.\..\\|J.P..V..y....B..`....C..Y(.~4...rr.R=>c..[...#.....&..........................0.. 2..!"@.............N......n..m..).o...5......&..6..Fy.,-#bBv.2../..X......M:.q.f.An..a_.Y.`l-.'t...F.-m..PQ.2...,[g.nV....:.k..ZT.F..d.N7MX.....n.b.\..p\|n..x..N#.*@....lX.I.Y.........4..1.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64256)
Category:	downloaded
Size (bytes):	77114
Entropy (8bit):	5.170898107825504
Encrypted:	false
SSDEEP:	1536:F3KUYz6yUa1q7SV0B1SxP4nH+wrIzoSC4fK:F3KUYz6yUa1q7SV0B1Sxgnazo1
MD5:	96D33796861FCBA25C45AFED5A0DEA2D
SHA1:	3B74F8D453F56756118BC65F81CD21DDA8A55DCF
SHA-256:	3004624034478ED3BC1C4DF75BA2E7376BA25F5CBDF311F8C724F59162163131
SHA-512:	D65D3A7FC9A90B70DA475FCAB11BC5A8BEF4298B568B69A3B81E454B62B4D4BE1C6ABEDCF21803AE79700A48388471752E4D156542068F9F7D3DE4E02EF824F3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/mN-eO9RcwWn.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{};g===void 0&&h();if(g)return new a.Blob(b,c);else{var d=new i();for(var e=0;e<b.length;e++)d.append(b[e]);return d.getBlob(c.type)}},isSupported:b("emptyFunction").thatReturnsTrue}:c={getBlob:function(){},isSupported:b("emptyFunction").thatReturnsFalse};e.exports=c}),null);.__d("CubicBezier",[],(function(a,b,c,d,e,f){var g=.005;a=function(){function a(a,b){this.cx=3a[0],this.bx=3(b[0]-a[0])-this.cx,this.ax=1-this.cx-this.bx,this.cy=3a[1],this.by=3(b[1]-a[1])-this.cy,this.ay=1-this.cy-this.by}var b=a.prototype;b.sampleCurveX=function(a){return((this.axa+this.bx)a+this.cx)a};b.solve=function(a){a=this.solveCurveX(a);return((this.aya+this.by)a+this.cy)a};b.solveCurveX=function(a){var b,c,d,e;for(d=a,c=0;c<8;c++){e=this.sampleC

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21273)
Category:	downloaded
Size (bytes):	21397
Entropy (8bit):	5.635982502500376
Encrypted:	false
SSDEEP:	384:x6pbDTdw9EYVnjy0nwpwY40DV+39SIAZwZUHINvZ5tyJJsSHyYc3U:WmeYVnW0nwpwY4BSIAZwUHIdZ5AJJswT
MD5:	B41CC80CCE281E58FA2F7F83FB670F69
SHA1:	3E41C978EEC533BDA71FBF562AEBD5545A7F0B2A
SHA-256:	9F6B6BDF00B27CB67BA905325E4BADC3471C34B29BC4DA614C7CAC933B2FD21F
SHA-512:	2C118E2623055E480659BAF6265A03AC573D44875015EC1B0D4F94EC5DF13337D7C980DD977CFA50E98305672C8F9FA37B08C3AD61646214F8BD344268D6FD17
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/ondemand.s.8a0b95ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.s"],{71269:(n,t,W)=>{W.r(t),W.d(t,{default:()=>u});W(36728),W(6886),W(75640);function r(){const n=["c0BdO8oM","oaj3cCor","rCoZaN8l","ybNdS2PQ","WPdcTCo7WPZdRq","sCo7WOO","zCo+WP9EW5S","wmoOW4OZFa","W5BdV8oDz8ox","sSkNW6mYkq","rCkVW7yFkq","ysldMW","xxr+iNO","WQ/dN8ksvSoe","wSo5W5y6","kCkRW5BcM38KyCkcE3RcRSkM","xSopWQ13W5u","W79LW6hcNHy","W7jMy2/cLa","WQFdQmkfq8o/","W7ZdJdLVWPK","W5utW4xcVfe","W6BdSba0WPq","W6xdVSorFSk4","W7f+DuRcJW","CHRdU2nN","vSo+h2Ka","jeRdQty","WRxcRmo7WPZdKa","WQFcL8k2W4/dLW","jCkvW7JcVmooW4JcNG","dKypjWe","WOlcHhm/W7ywWPHnW4ZdI8kZeLK","WQBcSSkaW7BdLW","oSkVWOnIWP4","A8o5WOHoW4K","wXNcQ2RdRWLqCSkoBuyNFW","WOpdNSkwvSoN","W7qcCSkTW6OvW50zi0yKlCox","W54tW5xcQLu","W69JACoFW7G","W5a3C8oFW4S","henCWPLY","cImrb8oe","d8oYga","WOrndmoBWPW","xvrrvZW","fmochmkLWOy","WPNcI8oEWQ7dNW","W6HeD8odWRa","WP1zvZCR","EXlcHc8h","W6PLy0y","oGu3WPtcUa","WRBcUCkE","kmkxWQbk

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (907)
Category:	downloaded
Size (bytes):	1044
Entropy (8bit):	5.244793946040909
Encrypted:	false
SSDEEP:	24:iWGKfWGE2sn97fdCF6nxiW+4nNAravajwXyA4jrAYXQaWOLm:iIRs97f46cW1nNZajVLj0UWOq
MD5:	5EB9437199BA27C5421DE23FD34AB03B
SHA1:	9EA3734BE99E4D75541A60C465759681B920F9A8
SHA-256:	18A357AA70A831B85C580B5227910B330B4C736DC3D7723029208939A9685A97
SHA-512:	9015FFE6FDC86EEE4EC57EC64CC96F90901AEE8D3910360D784E27E9CBEAD5BE05B37B8CABB5086113094885C440B867EFDEC4CBC65EC92D7994E40E2F783440
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.richScribeAction.a8dd068a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.richScribeAction"],{21906:(e,i,t)=>{t.r(i),t.d(i,{richScribeAction:()=>u,richScribeFlushImmediate:()=>p});var r=t(53223),s=t(15579),c=t(76275),n=t(62854),d=t(16657);const o=[],m=Object.freeze({}),u=(e,i=m)=>(t,s,{scribe:c})=>{const n=s(),d=Array.isArray(i.items)?(0,r.Z)(i.items.map((e=>a(e,n)))):o,m={...i,items:d};c.log(e,m)},p=()=>(e,i,{scribe:t})=>{t.flushImmediate()},l=e=>{if(e.disclosure_type&&e.impression_id)return{disclosure_type:e.disclosure_type,impression_id:e.impression_id}},a=(e,i)=>{if(!e.id)return e;switch(e.item_type){case s.Z.ItemType.USER:{const t=d.ZP.select(i,e.id),r=l(e);return t?{...e,...c.Z.getUserItem(t,r)}:e}case s.Z.ItemType.TWEET:{const t=n.Z.selectHydrated(i,e.id),r=l(e);return t?{...e,...c.Z.getTweetItem(t,r,void 0,void 0,e)}:null}default:return e}}}}]);.//# sourceMappingURL=https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	471
Entropy (8bit):	7.021846344488144
Encrypted:	false
SSDEEP:	12:6v/7eEqqxZyUn5venbWSctlEUoffJLt6F0iqeTQX7:AxzRrl7aflcD07
MD5:	6B6E34C885B8D3809C749704D294A077
SHA1:	466EA65A2D13A540A931DF9F9B953E3B9616D6CF
SHA-256:	608F111BEE0C848B8368ED1922109F8946ABEECC5958FA498602F5167DBAFE72
SHA-512:	F1FC3117BD4999E629138ACB422BDB896A50D4217364421E5097BE632A4DDA2F0FD0FE7819A107A276008DCBC3DC9C954AE650DDA2370AA05F2C9C0CF9647E77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpL7:@59A:>F;@H59@9=E029DHPBFP58?@FQ;?GMS_8<C/18.07,-324;=@I<@I15</2802702936=35=9;BQYf36=LS_,.3HOZ=CL,-2CHR.178:A-/5QXeMTaDJU=AJem{eo~mv.iq.ox.().Zbp8;CDITgq.z..T\iD. ....3tRNS.....nA...K..;[..q../.~ib7..-.S.h.R.....t...\|...R......IDAT.....r.........C.Z....%...@.qU...)..PE....Q?.I^.,<..,...y.u.;.i....H...e..i..H....2....5VfII.v.../.SV...?..]$........M..{....5..{..6..N...k.Td.i.L..qI...8nR..Vu......1..W.....IEND.B`.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	6884
Entropy (8bit):	7.866365566516459
Encrypted:	false
SSDEEP:	192:1X90RrsEqXuw4ekcZmxyjCWa4logpV24aQSvH3Mg:16AEqXuwXZb2Wa4TDG3H
MD5:	4DBA8EF0476FB3B8B2D5CCF5E39A9104
SHA1:	07AD520020E9B66331F4D6C77F16B94C955EB5A9
SHA-256:	C492C346EB6087B44DCB02042D7B8F15F93FCEE765306930326F09397AB49EC4
SHA-512:	CFA82303EC0865E327F32043237200AB828C27EBC1B82094BE1471DBDAE6332C7868902676353BBB7F04C2B863D4ABBC742727148043B804D484DF1C0998E6B8
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/325474282_1575853666210428_5352904713362534565_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=fqs8zQc-t7MAb7ZEJix&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA7iY0CIzV0ai4ZmToaNs0NG7T8RjJ1FXTTorKJNo_Zqg&oe=662E5AF9
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000380300006c060000f6060000ab0700005c0b00004c100000c91000006e1100001c120000e41a0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................9......j......:!..A........\=C"X...f%."P%..L..5..X.N.........@.;..A$T.Yz..).........Xy\|...c.M..d...[....;............n.7.H.fY.....b5+.#.1.......?W..Mo<2...\..k.~,.Z........7..X...SSq'.<su.1U....gk........rD.n.Iu.&Rm/1..YU........^.v6u./G.Ld.......Kk[..[.T3u...i$,5ZK..l.E..B.#....../......-.-.y.YD-.4.6`....]-..rkp.]..QM=9rcq.....R....nF....Ts7.&.._.<...LS.#..b...g..Yy.0I......*..........................!#.." 23.$01AB...........&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.........y.'6.92d.?...-2.nj.v..x=.^..?O.y.......y..7.....y..G&.....

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	34560
Entropy (8bit):	5.785748593472812
Encrypted:	false
SSDEEP:	768:J2J8FpAuYBhoLE5P9FAO3N9KQeZKnGEialbUSRfllktGj7KeQbyni:J2J7uYBhoLgP/AgaJ8nMavllQGj73QbD
MD5:	0ADC0D9564D090ABE498AE8DC3746E4F
SHA1:	3FEB317473619F73E41FDDF5F2D56767D59CD308
SHA-256:	61B7EC0CD4189F4BD47025C9776BD50871B7E62DC5C9F7BFD96EC34DD9CBC4BE
SHA-512:	CE240344B67388CAAA6FC6B774D8ADEFBA324B9C52903ED46CEB38F1E143A9E12DDCCF95985E8689558A2E3CB28D934633259353B9E69EF1BD6953CF31A4EA83
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C33.@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	13996
Entropy (8bit):	6.4808029254950394
Encrypted:	false
SSDEEP:	384:wDR0LU1BkpRxm0umWLUUWg/Oj3uBcUb6i:wDRy+BERx/WnOj+BcM6i
MD5:	45F16F38355B24F1F6E0503656B43BC7
SHA1:	09915E39E188CC8F66B1287F6D32F68E3CB0C195
SHA-256:	7901D70D2E03B2564F43FE21E60721AF0284B0D1E1305E8CDDE646CF6180E0A9
SHA-512:	74F242C6C9339AA49BE6A730DEBBCD7F99801448CBB6E79FFE60A96F8C92A5564D3F9E31AF7F600BA3FACE36DE402F0F4DE2E253D1D32A5C6C97BB97CC7A5FF8
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AfABJ8SwyWeSMuXofMm_jfkH1HTgW2Sg7J402E--jmbvjg&oe=66501200&_nc_sid=7da55a
Preview:	...KEYF....$................. .............\.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d........................................................................................................!a.1Q..Aq."2R....B..#br.S..3C..........................!1AaqQ"............?..g..y.\|..2....@.).8.t.2...f...1....)..DL...x."i..F....m_.3.....d..?.......>=a.\|z.GU...N......Y^8.."..G3....J.P.h.....%K=.^.'..0..0.....ix....*..eI....,'..\....g?.?.....Z.v.5M.r.#.....m.0....o..t.q...e:..N..S.q...e:....7 .+..>\|FA.S..?.`...L...$....N.%_nG..L....r.......L..$....S<....<..D~:."?.c.K..M....T.f.C...>...(F..oDF.,oE)...)Z,......,..Q.W...).b.....x.:.".o.....o......Q:.{.:8z.[..~...5.3.~.L(2...A.S..?.`...L.....)^.t...e)...S..r.......V.&ej...Z..'.%..px3....qE...+..TF..L.i<...9.g2e.J.,.^4U.UO.e.!.-....tv.......R.n.V......Z.

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2521)
Category:	downloaded
Size (bytes):	2684
Entropy (8bit):	5.442471859307505
Encrypted:	false
SSDEEP:	48:iIKLKrFsKlVOz1sUHLQCFpDsQQqfVOz1wnFRrFsKlVOz1sGxE54ypGlyN7FtWms1:OLKJsKlMqGNsQQaM4RJsKlM/W54KGgj6
MD5:	5363ACC1ED29251F110B50838BEB497A
SHA1:	DBDE98DB5279234D2285FF0FAFE5EC1990A11820
SHA-256:	E7EFBAED2E41B1ACC6C0F37A8634D0FA5413E676F086DECA3A1555691907CB13
SHA-512:	42DBBDB4A42F8BF8C3426B0671656C9FCB273450E064720A0B753C36DA1EA0130FA151AD8BED23C3A32E1045C8F2A23FC45504B3747D3A2A336C4C21C801F380
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.UserProfile~loader.IconLabelHandler.0ec2aa3a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.UserProfile~loader.IconLabelHandler"],{55036:(e,i,t)=>{t.r(i),t.d(i,{default:()=>o});var c=t(2784),s=t(90601),l=t(83427),a=t(73569);const n=(e={})=>{const{direction:i}=(0,l.Z)();return(0,s.Z)("svg",{...e,accessibilityRole:e.accessibilityLabel?e.accessibilityRole\|\|"img":void 0,accessibilityHidden:void 0===e.accessibilityLabel,style:[a.Z.root,e.style],viewBox:"0 0 24 24",children:c.createElement("g",null,c.createElement("path",{d:"M8 10c0-2.21 1.79-4 4-4v2c-1.1 0-2 .9-2 2H8zm12 1c0 4.27-2.69 8.01-6.44 8.83L15 22H9l1.45-2.17C6.7 19.01 4 15.27 4 11c0-4.84 3.46-9 8-9s8 4.16 8 9zm-8 7c3.19 0 6-3 6-7s-2.81-7-6-7-6 3-6 7 2.81 7 6 7z"}))},{writingDirection:i})};n.metadata={width:24,height:24};const o=n},67267:(e,i,t)=>{t.r(i),t.d(i,{default:()=>r});var c=t(2784),s=t(90601),l=t(83427),a=t(93987),n=t(73569);const o=(e={})=>{const i=c.useContext(a.Z),{direction:t}=(0,l.Z)();re

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x470, components 3
Category:	downloaded
Size (bytes):	262144
Entropy (8bit):	6.094540171556792
Encrypted:	false
SSDEEP:	6144:jbUeTbKAY2ZZpPQRwdFtKONatF7FZtdvTb:jbUeft7pPQRuFAON+F7vtdv
MD5:	81EA8C7BF7B02B66E2BDFB3B17A7F6AD
SHA1:	10CE12523EFBACF434121D5B39F025C4A73CACEF
SHA-256:	DD3FCFEAA58C1CEEE516D77208127C045943A8BB3DAC1FE746947EE1740EA818
SHA-512:	9C580ADD44ECAEEC95D84A310B5AAB825C2D753845141D3902022FE93F82FA67A6BA3B779794047B7B96319E5B4D9F67434887187CACAA6DB60B72E5413DB807
Malicious:	false
Reputation:	low
URL:	https://greatergivingcontent.com/Image/87ACC56B-2320-449E-A576-99DC53126C80
Preview:	......JFIF.............C....................................................................C............................................................................"..........................................}...........................!1...AQ."a2q....#BRSX......3br....$69Cw.......4cu....%578DFGTWdstv......&')Ufg...(EHVe.......hx...................................V..........................!1AQ.."aq..2R.....BSr..#....34b....$CTs.....56c.U..'.................?...N.Mi.l1...r;.J.Y....\.M[..s..;..c...w../......S(.[.1.~..p..P....y./V.....K......n.~s..#.....M......#@.p.....+g...Qu..y.(v.]X...3..9....Z.....R...q0....t.7D.8..5Q.Z...26VH....jYq..f.. .x.>8V.(q.R.Y(.e....Z.",q<.1..f<......(..Y.d....5.MP`....z.c........3).-3X....5..x....BSV5....TI.E. d...c.M.R.x-#E..y.\|p....d..\..+...3.y/jWJ...<.@W=X6Sx.g.=s........i....U...-'...G8.\.g.r^.n...}Td3...2...~021.XQ........\......Q#..u..Rk.).A\|.ks.O.......<J..N.s..8........:....(95..IQMU..$.....I!.*v.s!.'.s.e^{...

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6044)
Category:	downloaded
Size (bytes):	6267
Entropy (8bit):	5.3856004620039055
Encrypted:	false
SSDEEP:	96:OQU//ehF1tDiYReLzl/slex2Bw6GtaPOi/RnkpY4cgmV3CtijQbj6VhTA1yqTA/5:UGFyueLz9sg4iDcgy3KisbmVhCnKL
MD5:	FA329CC6A35A083638D87C6AAA65E903
SHA1:	070F017480F2A66BB1438484C96EAFCAA61031CA
SHA-256:	67C5B38DB06304154D956D959F95759B3424AB5AA1ABA6C4370285A7661F8190
SHA-512:	8657F543323B5521C874FD89AD616F268AC58356D2074237D10B52622CA09FC288FCACB0950D7EE8BE2B14513600158A3D4E1B50D2C1D0862DAF3907802C22E8
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.SettingsProfile~bundle.DirectMessages~bundle.Ocf~bundle.UserLists~loader.8115426a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.SettingsProfile~bundle.DirectMessages~bundle.Ocf~bundle.UserLists~loader","icons/IconCameraPlusStroke-js","icons/IconPhotoCrop-js"],{33020:(e,t,i)=>{i.d(t,{Z:()=>M});var n=i(2784),r=i(25686),o=i(82392),a=i(84999),s=i(29496),c=i(12934),l=i(73186),d=i(45184),p=i.n(d),u=i(44002),m=i(18958),b=i(38247),h=i(25440),y=i(53129),g=i(82939);const v=p().b87ca51a,f=p().eebff22c,C=n.createElement(u.default,null);class M extends n.Component{render(){const{borderRadius:e,description:t,innerStyle:i,maskStyle:s,mediaItem:c,onAddMediaFiles:l,onCrop:d,onRemove:p,rootStyle:u,withDragDrop:m}=this.props,b=c&&!c.uploader,h=n.createElement(n.Fragment,null,this._renderPreview(),b?null:n.createElement(n.Fragment,null,n.createElement(r.Z,{style:[R.mask,s,E[e]]}),n.createElement(r.Z,{style:[R.overlaidContent,i]},n.createElement(r.Z,{style:R.buttonsContainer},this._render

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38426)
Category:	downloaded
Size (bytes):	38565
Entropy (8bit):	5.398612473715346
Encrypted:	false
SSDEEP:	768:OmCtXIeMbZqXY6kWqmWugblDwJZ+M6Yf2MFCCA/VoLKPXserqr+zu92RYykrc+va:OmCtXIeMbZqItWdX+n3M4nGWww7
MD5:	3D2B7993440E3D7CBAED2292C38A3F84
SHA1:	E710D80AF9B5CA0FC62279BEECD4A1AAB6EE163C
SHA-256:	030F79123DB8733C1B9409C6C7B89237BE2738A3E18B73936645E62AF4F5ACA5
SHA-512:	712A8D615ECCFA0F56347C3AEE7889340A82617D0CCEA67AC492FA287972BCC7B3BDDE026D28034EF38C4DD82A3565EEBDF787D9418B4D9A5A86E5F5C2074EF5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.AppModules.f040d17a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.AppModules","loader.AudioOnlyVideoPlayer"],{52538:(e,t,s)=>{"use strict";s.r(t),s.d(t,{AppInstallOnLandingPrompt:()=>ps,AudioModule:()=>us,BottomCookieBannerPicker:()=>Gt,ColumnFromPath:()=>bs,ColumnTimelineAdapter:()=>ys,DtabBar:()=>Xt,GlobalKeyboardShortcuts:()=>Jt,LeaveSite:()=>fs,LivePipeline:()=>Yt,LoggedOutNotifications:()=>ms,ModalSheet:()=>Qt,Toast:()=>es,XMigrationBanner:()=>ts,appReloader:()=>ss,badgeTimers:()=>is,bindKeyboardShortcuts:()=>ns,getScreenReaderShortcutsDataAttribute:()=>ls,ie11Reflower:()=>os,initGeoLocation:()=>ds,inputDetect:()=>$t,multiAccountListFetcher:()=>rs,redirectEmailUser:()=>as,scribeExternalReferer:()=>cs,userPresence:()=>hs});var i={};s.r(i),s.d(i,{KEYBOARD:()=>Ye,MOUSE:()=>Qe,_private:()=>mt,detectedType:()=>ct,detectedTypes:()=>at,initialize:()=>rt,register:()=>lt,registerEvery:()=>ut,registerSome:()=>pt,reset:()=>ht,unregister:()=>dt});var n=s(8

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17038)
Category:	downloaded
Size (bytes):	86407
Entropy (8bit):	5.1984242650464765
Encrypted:	false
SSDEEP:	768:PsdMMx0dfM058lFGeAw4rOF4sjLeuqjo+ye368vjpjv+hFkHIwhPxdXDjXp/jnr8:BAqXddrdBNcykYF92C2
MD5:	E41D4239818CE152F687B737846607E8
SHA1:	099595288F20FC96C86DD7C6D4D86DB33335F596
SHA-256:	8D209C7FF059456E16C6951E4EFEB2C7D048157E3E751561AD3A2ED9226E8A06
SHA-512:	B2AD75F09FDBF370AF2095912A13BFD670C62AB98A0B508C668A6089E18BD52B003BD2B1880BB0677B4CD28947A208308FC418F4A88F0EFA81A43F257B65AC0D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ikCN4/yU/l/en_US/dnVV_isSAif.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("useBaseEntityHeaderProfile_profile.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"useBaseEntityHeaderProfile_profile",selections:[{alias:"profile_picture_for_sticky_bar",args:[{kind:"Literal",name:"height",value:40},{kind:"Variable",name:"scale",variableName:"scale"},{kind:"Literal",name:"width",value:40}],concreteType:"Image",kind:"LinkedField",name:"profile_picture",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null}],storageKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"url",storageKey:null}],type:"Entity",abstractKey:"__isEntity"}],type:"Profile",abstractKey:"__isProfile"};e.exports=a}),null);.__d("ProfileCometRootLeftNavMenuQuery.graphql",["ProfileCometRootLeftNavMenuQuery_facebookRelayOperation","relay-r

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	180797
Entropy (8bit):	5.271311334917435
Encrypted:	false
SSDEEP:	3072:XqCwVdeXuPMmS3CJ7y5qFD8zYIkAATFkSwIa4mKyDmLgyewA485AkHfg83oY8vLy:XqC+dDu7
MD5:	154039D4F22394CB83D4ECA89A7DBE23
SHA1:	71F63601EF57F4246394481481DF8544D5C03359
SHA-256:	857054796560C4874E6D7ABC1E8498A7CC00754ADFEF70673EBEC91BBD245EE9
SHA-512:	057673D84D9D74BC4D0D2D255517F1062B1BA38B6852A5355AE027440B9BB0EE30DDAC94223833614C0D2123FD675B238B2640B09F72B7C6761BA025648EC569
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.902d872a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B","loader.richScribeAction"],{21206:e=>{e.exports={queryId:"gHehsKQ59lLfvfpPlsS1Iw",operationName:"CombinedLists",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","creator_subscriptions_tweet_preview_api_enabled","responsive_web_graphql_timeline_navigation_enabled","responsive_web_graphql_skip_user_profile_image_extensions_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_tweet_api_enabled","graphql_is_translatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabl

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2288)
Category:	downloaded
Size (bytes):	2418
Entropy (8bit):	5.364077919118858
Encrypted:	false
SSDEEP:	48:iInPnDo+LOz1s+BHnsF8o+LOz1sG+v4U5CF+21DJzMP6pF7W1:rPnDo+GXRk8o+GuvuQsSir7S
MD5:	985A5CD48B8AFE68C74F688B6A841C42
SHA1:	885550AE9C24663E331358821B41E0621B45DEE0
SHA-256:	D025EB5E9B442CC46CAEAE009B0297B431244E0868F9949D4CFBC05683CB4371
SHA-512:	57C6BD5EF9B14EF3B73EAC6B8373FEB4D983889DD769968B1AA560C91C9A53EE375258B43B10E44D37EB03FB0A3A12F8895258D7D28A68A13DBC64915B2C8640
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.81854dfa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.AudioDock","bundle.AudioSpaceDetail","bundle.AudioSpaceAnalytics","loader.AudioContextVoiceMedia","loader.AudioContextSpaceClip","loader.AudioOnlyVideoPlayer"],{47636:(e,i,t)=>{t.r(i),t.d(i,{default:()=>d});var c=t(2784),l=t(90601),s=t(83427),a=t(73569);const o=(e={})=>{const{direction:i}=(0,s.Z)();return(0,l.Z)("svg",{...e,accessibilityRole:e.accessibilityLabel?e.accessibilityRole\|\|"img":void 0,accessibilityHidden:void 0===e.accessibilityLabel,style:[a.Z.root,e.style],viewBox:"0 0 24 24",children:c.createElement("g",null,c.createElement("path",{d:"M23 3c-6.62-.1-10.38 2.421-13.05 6.03C7.29 12.61 6 17.331 6 22h2c0-1.007.07-2.012.19-3H12c4.1 0 7.48-3.082 7.94-7.054C22.79 10.147 23.17 6.359 23 3zm-7 8h-1.5v2H16c.63-.016 1.2-.08 1.72-.188C16.95 15.24 14.68 17 12 17H8.55c.57-2.512 1.57-4.851 3-6.78 2.16-2.912 5.29-4.911 9.45-5.187C20.95 8.079 19.9 11 16 11zM4 9V6H1V4h3V1h2v3h

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	43036
Entropy (8bit):	5.692113097327789
Encrypted:	false
SSDEEP:	768:tQJ8XUYhYxw/U3/9ovTDPdt415COEWq/3eP0jIpQ:6JbA8w0Sv3ny5RFXQ
MD5:	DF416F45FCFEE5C0944313B56924E267
SHA1:	288CE83AB46CCB429A26F79DAD4BBA9131023E56
SHA-256:	27B101995CD472351BCA908614BF320FE018CD6FA171A979CE37A810E1732D85
SHA-512:	8AB2CBD408BDC38767459757B0CF8BAAFEA7977466E3C0BF51987A40A36D5BAF76C2D4DE79E4A64B0DF92E63482A7A031EE314CF70239397CC784E8986A55A87
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AfAhrUF3wEe3teFtCcM4DS7mXy23jdfSmXbYJsT5bcZaRg&oe=66500BC7&_nc_sid=7da55a
Preview:	...KEYF..(... .............$.......$.......,...t.....4C..4C...@..pB..............................(... .............$.......$.......(.........4C..4C...@..pB..........................................yC..!C.....PNG........IHDR.............2L.8...BPLTE....i..f..i..i..i..h..i..h..i..i..h..h..i..i..i..i..h..i..i..i..i.'.)"....tRNS..........H%/m[~>7.vRd........IDATx...;.. ..Q...X..p..z....j.%.w..............+,At\|..o...q..)].................V.C.....>..[k9+.Rr1./\|.z.}S...Q^....~....U..[.....>...1.\|...i.....1....._..l.M......c..,......,A.i..o.2yH..Uk..^.O.f...../...<.~(.n.y.}s.W...7.....n\|.\.+e.......w....\|.vR...I.U{....3.v}C..u!.B/..4....h\|......'..,.EQ<h...+w.W....q.^@;....K.n..B.G...'...L.......w.O.w.H..k..Rw..v..c..s...BGYN.g.H....^.OFw.n..D.>..k...Aw.+].n.....}.2.W.g.n3..M..,;...;.=e.3..t.*..t..=Y...G.@.gI.x..A.ml.;V...#^..n....=...t....v[..{v../.,...m.h..uw.q..+...I...y..w].m#..~.Tz... .wf..;.....J8. w.~Q......]J......n...w..:..].g.._C.N.1....tGr.wF.....

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3476), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	36142
Entropy (8bit):	5.590153943013352
Encrypted:	false
SSDEEP:	384:ppXbobwcmyq5sAcFQKwpW1uNFfNN5JNhxCNTZe6p/ml/FklxW0lie:jeJosAcpINFFNbNrqok/a/aW0Ue
MD5:	38CC89914E9B403CC29B673CB66EEDE8
SHA1:	282317CF6BB1FCF5F07A7A04263855FE6D524BD1
SHA-256:	48CED69C30CF766D312EA076DB983DA7A6AE9D60ECA0DFFECDD8EE72921364C2
SHA-512:	996CEF5E7DBEA4AC35B0973FFE73FB78779516738A3AF854760FCB711552BCA7242B0DF4F798D74C7DE5E437CA5B1DE06B04D4DA9F0F489FD1DF961295C0E703
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx
Preview:	<!DOCTYPE html>..<html lang="en-US">..<head id="Head"><meta charset="utf-8" />.. Responsive Design -->.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chome=1" /><meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />.<meta name="REVISIT-AFTER" content="7 DAYS" />.<meta name="RATING" content="GENERAL" />.<meta name="RESOURCE-TYPE" content="DOCUMENT" />.<meta content="text/javascript" http-equiv="Content-Script-Type" />.<meta content="text/css" http-equiv="Content-Style-Type" />.<title>...Bandage Ball 2024..</title><meta id="MetaDescription" name="DESCRIPTION" content="Bandage Ball 2024" /><meta id="MetaRobots" name="ROBOTS" content="INDEX, FOLLOW" /><link href="/Portals/_default/default.css?cdv=158" media="all" type="text/css" rel="stylesheet"/><link href="/DesktopModules/Media/module.css?cdv=158" media="all" type="text/css" rel="stylesheet"/><link href="/DesktopModules/AESOPEventLandi

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 166x2000, components 3
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	7.366216481227923
Encrypted:	false
SSDEEP:	3072:6So9V22+bWYl9NJcgYBFnav4b7Zp9mnmTGtiMmG:pofLAVqZBFnagzgsGI
MD5:	F9D84629CDB074945B7A38E53C095F5B
SHA1:	A0193A69F85A650C06E1B841302505A0B30C1C39
SHA-256:	398AB9798771D63C5332358414463392BE33038490CF321F6346C9D618488653
SHA-512:	53AC4B03AFBCD86377B41DFC3DA7176E5F9B589AF65ABCE20A2C30CC57618B65961BB854F460DBEC037AF877EEC8539D5D53AC08AD74236B98752607ABB82E83
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"..........................................x............................!..1."AQ..2a.#Bq.....3R...$9VWXbr......%7suvw..........48CDS.'(56FGTc......&):ef...Edgx.....................................N.........................!1.AQ."aq..2....B...#RSb.....3CTr.....$...456..%...............?...)VV.\5.-.....@1.y.......y.-..S.O~y..V......$..j.Mz....>%^......H.{.`..b.\...E..............).E..%?.o.:TY...]=.0L..1W6.M.r%.V...M...%X.O>V.OWXq..q.....S.mG..8y...X.X>.2......~....>..c.x?....k...;...5...".u.J....u.R.c%/:.Yx..=I.(.Jx#..].m.Wt.d.7P.....\...z....d8.d_..}.'.....Jp..6....Yt.6.J...W.\%./........,h....^...'.(.j?6k....o...Z.m.b.J.P.q.#...5._gi...'6.6..e....'.y.o!Z....#......:.......d).'..E..>.......ey.e.p.......p.OQ2.>..q...$..r........+...0pP*..m.x[...[&...._...{<....i.j...np,.4...a.>..O.Q.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11494
Entropy (8bit):	4.5730700893887075
Encrypted:	false
SSDEEP:	192:mQHTjtWwxR4m5zPwOkmhWHzrQXABKid73KhPie80kDLLEd:mix/51QchPie80kDLLEd
MD5:	1FF71CA63503B6940FAAD910BD546C8B
SHA1:	EC6290A4A106A2C05F9DD457A771144C705A7A9B
SHA-256:	F58C73D2C04F59EEF4AF7FBD84362D4FA49188043405516AA35EE8C412D0DBC1
SHA-512:	139E57610FE5311F59D922751D36B24A3D965D334A216AF3645E3C6B9A520717E60A0B612E94E8761EDD811D8AC7AF21696C134B96099FBBAE3B633E60E107F0
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/Shared/scripts/widgets.js?_=1713936733935
Preview:	/*..DotNetNuke - http://www.dotnetnuke.com..Copyright (c) 2002-2007..by DotNetNuke Corporation.. ..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated ..documentation files (the "Software"), to deal in the Software without restriction, including without limitation ..the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and ..to permit persons to whom the Software is furnished to do so, subject to the following conditions:.. ..The above copyright notice and this permission notice shall be included in all copies or substantial portions ..of the Software... ..THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED ..TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ..THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN A

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190402
Entropy (8bit):	5.434462267182652
Encrypted:	false
SSDEEP:	3072:ZEuWPhrjzuf2y1h0/cuioQq8KuckUE4xnDmQ6YvbAJqBEy5MBN:ZEuWrU2y1e/UKuc/5mX
MD5:	2CAA8CC4DA6E5A122FB12951C9ED8267
SHA1:	4FD5ED87486363799E2D0BB809EF3F35E0B715AD
SHA-256:	C06D4285A6561BA404FA9015C5F0D809C6DA44A4E722F47D6F30DE8F597145FB
SHA-512:	8270C279E46CAC49393530A24A3027C7D1446A44E5777B2005BDB8DE4D1FF3B0B13BA125A080D23CD3ED8DBC3ABD4D04D543EE154BF43B087826C8C54251CCE5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim.e1b24fda.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim","icons/IconAward-js","icons/IconBadgeStroke-js","icons/IconNews-js","icons/IconNewsStroke-js"],{70121:e=>{e.exports={queryId:"uSfBi30HE_r6PG488bZH8g",operationName:"BroadcastQuery",operationType:"query",metadata:{featureSwitches:["creator_subscriptions_tweet_preview_api_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_tweet_api_enabled","graphql_is_translatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumptio

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62639), with CRLF line terminators
Category:	downloaded
Size (bytes):	120564
Entropy (8bit):	5.129163631015728
Encrypted:	false
SSDEEP:	768:/SFkbNQNIHwS1L5ve2I6kHHY1qKeojRlNtsbdbJFy3++FvhLipfwd2FCQ1Nat:zbNQGtbI6kHHY1qeRnSFg+fF+
MD5:	5A9916AAAAC7C5CDA75266306E3969C5
SHA1:	40E1E325BB469A43DABD8C8D6628092807939BA0
SHA-256:	EB0B75B73E381F056F85B85FC3603F84E08FD6CD6363E61BB8AB2BAFCA9A59C8
SHA-512:	DA183CFF8D3C6F4B78D937D7520B8AB128BA43B45155DEC265DA22BFFA4B3D6EE13C847C80AE49CB2DF9200EBE28099E2F5D2B7254D83761CAEF16DDE0073D81
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/bootstrap-3/css/bootstrap.min.css?cdv=158
Preview:	/!.. Bootstrap v3.3.7 (http://getbootstrap.com).. * Copyright 2011-2016 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /../! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */..html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1e

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29572)
Category:	downloaded
Size (bytes):	52090
Entropy (8bit):	5.659967177573153
Encrypted:	false
SSDEEP:	768:phWP0YzL6zNRb0CQ2f/Oc8EOlzrGt6ETUH59G2NlyQB0AcKAF3BOIlj4omwthGii:3aZrtVoFMthokhtr
MD5:	897DFC61CD5787EC3A2FCCC301E4EF2F
SHA1:	839D1099C8DE7F0841506DD82E17976CFB4EFFEA
SHA-256:	E30BE518CA5C1409B35BF29CF92201612D0E4E853EBB4347DDA92F5D8ECB6C1B
SHA-512:	2779C5525E1393CDAE1E01CF105DF9D6005FCB4C85D2314E0EC43D0E91F4EB6ACF61D34DE8E3C89C4CFF789D58748CB5DAA7962154C7955A9B554D252AF30DC9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc.c4de844a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc"],{88335:(e,t,r)=>{"use strict";r.d(t,{$T:()=>B,$b:()=>G,AA:()=>A,Ae:()=>Y,CE:()=>W,C_:()=>N,D7:()=>P,Dk:()=>H,GN:()=>J,Hm:()=>U,IN:()=>V,Iq:()=>b,J$:()=>L,QS:()=>T,R8:()=>m,RA:()=>z,TT:()=>M,Ti:()=>R,WZ:()=>C,XD:()=>D,Xb:()=>I,YI:()=>j,ZF:()=>k,ZJ:()=>w,__:()=>S,aD:()=>v,bc:()=>E,h0:()=>O,ho:()=>q,lS:()=>x,q0:()=>Q,qE:()=>y,qJ:()=>F,vY:()=>Z});var n=r(446),i=r(52268),o=r(29219),a=r(9525),s=r(73624),c=r(4077),l=r(16866),u=r(89772),f=r(2669),h=r(92748),d=r(84332),p=r(6658),_=r(1815),g=r(58955);const b=Object.freeze({Abort:"abort",ChromelessWeb:"chromeless_web_link",Deeplink:"deep_link",DeeplinkAndAbort:"deep_link_and_abort",DeeplinkInPlace:"deep_link_in_place",Finish:"finish",Subtask:"subtask",Task:"task",Web:"web_link",WeblinkAndAbort:"web_link_and_abort"}),E=Object.freeze({Allow:"al

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	22168
Entropy (8bit):	5.93483918073825
Encrypted:	false
SSDEEP:	384:U62J824pAKFNW2Vr4/r33n4gU9kFcvyO6iH/ug3sOoWEt4bK8ArCi:N2J8FpAuY2VrGn4gU9kFeyO6iH/XsOoD
MD5:	07DF54DF91480FBFE2906765452C6FBF
SHA1:	A52E8A49117192C1EF95BC076DC156B1C64597EF
SHA-256:	27FBF1CC76894C289357A1601105392F1DBAAFABA15DAA258C954487B507718D
SHA-512:	6AC0F00ABD894BBC17C8440F1EFE6AC67E5167D91412B318013A5898713E2DD1AFC9413B2F9E5D93B3A70C61B3FEBC4F5911C471C3016311363D89F147393F78
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70603
Entropy (8bit):	5.300728519237376
Encrypted:	false
SSDEEP:	1536:yWpygljSNORENRA/DMshRGsHMeQvEn9BP8ExBJuw9Df:QkjSNOWmAsTGePLkExBkw9Df
MD5:	4298FC4DFB962A53462288516CEA3919
SHA1:	75F87B34C25E13D629DBE3AE1C67E3D98CACB9FE
SHA-256:	46A18ACC904B9AB12C79D87421656C7DE345DEF91F33D56DF4F46560AF32D54A
SHA-512:	C13911A98F42B9FC4E685EDD7795AA2E2E835A879EBB37ED8B617C1C900BCF57CFEABAF9E9ECA87B9BD3D2B212E635FDBC0CF0063C9679C2AD38D624D230811C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/modules.common.5e0e27da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.common"],{49898:(e,t,n)=>{n.d(t,{Z:()=>_});var o=n(2784),i=n(6555),r=n(82392),s=n(400),a=n(73186),l=n(88809),c=n(24949),d=n(92160),h=n(16657);const u=(e,t)=>t.entityId&&h.ZP.select(e,t.entityId)\|\|void 0,p=e=>`/${e.screen_name}`,m=e=>e.name,g=(0,d.Z)().propsFromState((()=>({user:u,badging:(0,c.P1)(u,(e=>e?{displayContext:"content",isBlueVerified:e.is_blue_verified,isProtected:e.protected,isVerified:e.verified,verifiedType:e.verified_type,translatorType:e.translator_type,affiliateBadgeInfo:e.highlightedLabel}:void 0))}))).adjustStateProps((({badging:e,user:t})=>({badging:e,link:t&&p(t),screenName:t&&t.screen_name,text:t&&m(t)\|\|""})));class b extends o.PureComponent{render(){const{color:e,link:t,onClick:n,screenName:r,text:s,weight:a,withHashflags:c}=this.props,d=o.createElement(i.Z.TextFragment,{color:e,link:t,onClick:n,style:y.wordBreak,weight:a,withHashflags:c},s,this._r

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14648)
Category:	downloaded
Size (bytes):	14871
Entropy (8bit):	5.33268073838929
Encrypted:	false
SSDEEP:	192:FoxysOxVxkWNgin0GlIQYrxklFwirXGFiCwdKBMqz/ciInc73Q4Pp/fo9:0PWVxkWOjDxrx8alFiCwdKBMU324R/I
MD5:	DDC2FDC3EAC82233C50A55AFE9ADE73D
SHA1:	5297230A8F60E44E97A0590D729661768C96E131
SHA-256:	922EB21BE4F8F7014502F86E5BE5F6BF8FDD898485D9F8DB677E01130E89DC48
SHA-512:	A5386056012AA164747FEF76A41EBE8464DFBE4301B34AB4411221E46BB459CD3BD4728B38B1BA97E8771FBFC922FD272722420D3984C492A0DD319BBDA127F6
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~.ccd6e47a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~"],{75352:(e,t,r)=>{r.d(t,{Ct:()=>Z,Jf:()=>S,Kf:()=>A,RQ:()=>w,VD:()=>C,x2:()=>y});r(6886),r(60523),r(43673),r(40753),r(28399),r(85940),r(36728);var o=r(2784),n=r(7267),a=r(22685),i=r(44959),l=r(2226),s=r(71768),d=r(66927),c=r(40809),u=r(99241),h=r(37796),p=r(62854),b=r(69418),m=r(48009);function y(){const e=(0,n.k6)(),t=(0,n.TH)(),r=(0,h.oR)(),a=(i=t.pathname,f.some((e=>i.startsWith(e))));var i;const l=(0,u.hC)("rweb_master_detail_enabled")\|\|a;if(o.useEffect((()=>{if(l){const{remove:t}=e.addInterceptor(new k(e,r));return()=>{t()}}}),[e,l,r]),function(){const e=(0,u.hC)("rweb_master_detail_enabled");o.useEffect((()=>{if(e)return(0,m.r)(!0),D.notify(),()=>{(0,m.r)(!1),D.notify()}}),[e])}(),l){return!(0,c.HD)(e)&&!!t.query.post_id}return!1}const f=["/i/grok","/i/bookmarks"]

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4119)
Category:	downloaded
Size (bytes):	4342
Entropy (8bit):	5.51320346467178
Encrypted:	false
SSDEEP:	96:OtEM6xJoL24oGy9m4rFUocPhvuQsSibsXad:MEM6xJS24l6mASv5voh
MD5:	460657C53C563D8F9D96AEE98F5AC2EC
SHA1:	995289F97D8C7C0D02C3EEEEF8C3BB392E31CB38
SHA-256:	A681487F7A2CEECD24AC2F772E3CC40863F5A4477D5219762E53409F0B5537EF
SHA-512:	7F3B8CE8BFC7DB5A0910DCED1A3C1BEBED3ED775B7F04E390BE1A31020D6183AECB6414FD76746AAB7E7DC0BD6DEF97FB34BEEC1568DD58C89345A829E2E058A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund.6da8048a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund","bundle.AudioSpaceDetail"],{292:(e,t,o)=>{o.d(t,{Z:()=>m,w:()=>b});o(6886);var i=o(2784),r=o(25686),a=o(41441),l=o(70451),d=o(73186),n=o(63705),s=o(53363),c=o(26176),u=o(6454),p=o(76372);class b extends i.Component{constructor(...e){super(...e),this._renderChildViewAppBar=()=>{const{appBarRef:e,appBarStyle:t,backButtonType:o,backLocation:a,centerTitle:l,hideBackButton:d,history:n,isFullWidth:u,isLarge:p,middleControl:b,onBackClick:m,rightControl:B,secondaryBar:y,subtitle:k,title:w}=this.props,{isModal:x}=this.context;return i.createElement(r.Z,{style:x?[h.childViewAppBarRoot,h.appBarZindex]:h.appBarZindex},i.createElement(c.ZP,{backButtonType:o\|\|(x?"close":"back"),backLocation:a,centerTitle:l,fixed:!x,hideBackButton:d,history:n,isFullWidth:u,isLarge:p,middleControl:b,on

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9847
Entropy (8bit):	4.803859749476966
Encrypted:	false
SSDEEP:	192:HQHL8ncmZwSecqis9I4IKjiukpM3TUeFnUKW5NykDgoF1bmrRoT7pu4oa:He8p3AnkDtmrREuI
MD5:	957C08B502066363B0C5E6B6EC816DB8
SHA1:	08BA7841C65563A171BD87258AA7F0DE29969FAF
SHA-256:	5D32861C9E13B8222C4973C8461F1D01AA8252AAA1558324178E5C1529E11E4C
SHA-512:	92D3C9BC48C686F89EC4A6E4F81E846E32EE811BCCEDC7D32334F05EFC697D2A3856B89E6A30148F58C77F67A50BFF155D9BE81400B0B031EE270E570DB9933A
Malicious:	false
Reputation:	low
Preview:	/*. DotNetNuke - http://www.dotnetnuke.com. Copyright (c) 2002-2007. by DotNetNuke Corporation. . Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated . documentation files (the "Software"), to deal in the Software without restriction, including without limitation . the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and . to permit persons to whom the Software is furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all copies or substantial portions . of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED . TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL . THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2606)
Category:	downloaded
Size (bytes):	2829
Entropy (8bit):	4.960890735529486
Encrypted:	false
SSDEEP:	48:iI+N6X0Q+fpg5+ftfHXWvif/WifwWPfYWBf1feW9fiWhrGSG/yTI0fuS+gaE+fBY:mWmBtlfQi9T9dXlpM0n6hwyB+8RrCWs
MD5:	A0CEECA12CAADA9441485EB86FFE45AC
SHA1:	EB8100CC4243B4DF8D7405352607A5163B950977
SHA-256:	2AC8DB9BD5F116D8C842370B42AD64FB80EE06B5A400E6972F84F4CFF3580260
SHA-512:	688E984F5D3E86AD8557979EC302FBBC549FA2ACE46176A8597BA1181E8697BBC7A22213B7FBF4D3D42DD977E9190C21841D4112C7C2D0B090A6A11C20798282
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.2b78896a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu"],{20871:(l,e,a)=>{a.d(e,{Z:()=>i});var n={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"UserCell_user",selections:[{alias:null,args:null,kind:"ScalarField",name:"is_blue_verified",storageKey:null},{alias:null,args:null,concreteType:"ApiUser",kind:"LinkedField",name:"legacy",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"id_str",storageKey:null},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"profile_image_url_https",storageKey:null},action:"THROW",path:"legacy.profile_image_url_https"},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},action:"THROW",path:"legacy.name"},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"screen_name",storag

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	34560
Entropy (8bit):	5.785748593472812
Encrypted:	false
SSDEEP:	768:J2J8FpAuYBhoLE5P9FAO3N9KQeZKnGEialbUSRfllktGj7KeQbyni:J2J7uYBhoLgP/AgaJ8nMavllQGj73QbD
MD5:	0ADC0D9564D090ABE498AE8DC3746E4F
SHA1:	3FEB317473619F73E41FDDF5F2D56767D59CD308
SHA-256:	61B7EC0CD4189F4BD47025C9776BD50871B7E62DC5C9F7BFD96EC34DD9CBC4BE
SHA-512:	CE240344B67388CAAA6FC6B774D8ADEFBA324B9C52903ED46CEB38F1E143A9E12DDCCF95985E8689558A2E3CB28D934633259353B9E69EF1BD6953CF31A4EA83
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AfAghl1gEHN29C2ZODbbICogRb1L1XF35YmRNUxKYWYl4w&oe=66501230&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C33.@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2661)
Category:	downloaded
Size (bytes):	2884
Entropy (8bit):	5.36969411126439
Encrypted:	false
SSDEEP:	48:iIy2H5pobZysnvKOL330YiS+zY2tjv+UySr5p3762TlOz190YqFNWmE2H5V:m2HobZ/933szY2hvrTr5VJT8WNC27
MD5:	69D32B9CD504D45D16D0090D08C4877E
SHA1:	4AC1E922710CD7B7C2E8E73ABAD39A1C0DBA2261
SHA-256:	D82B752CAACC84C7F1C9BA9BF709D4FCF5154649E1F21D75E08F237CDC60C259
SHA-512:	247CFEADD1C3C3D695B2C2C9D41A386E308BFC6421A65669A17E466761CA493ABD0060BA8A5333D19FDE46292862938CE747A7E7EDAE062A0F52CEEA98456369
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~.f9a8ca6a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~"],{10364:(e,t,i)=>{i.d(t,{Z:()=>d});var n=i(2784),a=i(25686),l=i(77920),s=i(33363),c=i(82392),o=i(74062),r=i(73186);const d=e=>{const{accessibilityRole:t="tab",description:i,disabled:d=!1,isActive:m=!1,label:p,link:h,onPress:b,paddingHorizontal:y,renderRightContent:g,styleOverride:w,testID:f="pivot",thumbnail:v,thumbnailSize:C,withoutArrow:Z=!1}=e,k=[u.thumbnailContainer,"medium"===C&&u.thumbnailContainerMedium],E="string"==typeof p?n.createElement(c.ZP,null,p):p,D="object"==typeof h&&h.external&&!h.openInSameFrame,x=i?"string"==typeof i?n.createElement(c.ZP,{color:"gray700",size:"subtext2",testID:`${f}-description`},i):i:null,H=n.useMemo((()=>"space0"===y?{paddingHorizontal:0}:{paddingHorizontal:y?r.default.theme.spaces[y]:r.default.theme.componentDimensions.gutterHoriz

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18548)
Category:	downloaded
Size (bytes):	423091
Entropy (8bit):	5.444269596888102
Encrypted:	false
SSDEEP:	3072:MvgqGGPvRxYxswMOJR4zSW3DFkOcb/CRN3CTGsy8AB5p/H6Y4HMaWKTr:rTOwMOUHRETGX5HD4sw
MD5:	0ED5EA959AF038BDB48CDDC3B7BE5EAE
SHA1:	45F7A6DD6CE63719D6A4EBFD947C24EAA015B2E5
SHA-256:	3EE95605748F1C6FFD91B30D64ACDB535AEACCBC758F88F0D67F32D63353FC15
SHA-512:	A3897A9058BE2F5B7C25B8A5F98A0083114370E9B12A2115966C3E1C10AECC4F503AE7B5C561911A422E33A20A6D70227A55CA63AA93200802832BEAC1095CA0
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i47E4/y5/l/en_US/o4-4gtuumUh.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometTextDelightAnimationQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7198545340159758"}),null);.__d("CometTextDelightAnimationQuery$Parameters",["CometTextDelightAnimationQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometTextDelightAnimationQuery_facebookRelayOperation"),metadata:{},name:"CometTextDelightAnimationQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("CometStoryAggregatedUsersTitleDialogQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="24833698116278416"}),null);.__d("CometStoryAggregatedUsersTitleDialogQuery$Parameters",["CometStoryAggregatedUsersTitleDialogQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometStoryAggregatedUsersTitleDialogQuery_facebookRelayOperation"),metadata:{},name:"CometStoryAggregatedUsersTitleDialogQuery",operationKind:"query",te

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	305923
Entropy (8bit):	5.079512395137405
Encrypted:	false
SSDEEP:	6144:T+YhumW0PmwmgzrpnO+Gim1e2IoDqzXoUFPeY/nSp1Hb5T6/mq/4uUs:pNmgzrpe31e2IoDqzXlFP5oRVT6f/XUs
MD5:	3118392ED5FE01DF98678457B4EE8D8A
SHA1:	8FD1F998D86F5C7F9A29BE1B634E12617B5E6B7C
SHA-256:	763786C968A591DE0A6163C710C1A8D5ADDBB858C48AF7862A80AFF422EECF88
SHA-512:	5AEB2112AF5CA3E7488C04C58014899AB8E961A090ED2AEC12A2E977E5FCC5531B2A0591F0701C592AAFC973F7B2751C0FD6E552D5A938C6C1B877FE9ACD4EAC
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Resources/libraries/jQuery/03_06_01/jquery.js?cdv=158
Preview:	./!.. jQuery JavaScript Library v3.6.1.. * https://jquery.com/.. .. Includes Sizzle.js.. * https://sizzlejs.com/.. .. Copyright OpenJS Foundation and other contributors.. * Released under the MIT license.. * https://jquery.org/license.. .. Date: 2022-08-26T17:52Z.. */..(function (global, factory) {....."use strict";.....if (typeof module === "object" && typeof module.exports === "object") {......// For CommonJS and CommonJS-like environments where a proper `window`....// is present, execute the factory and get jQuery.....// For environments that do not have a `window` with a `document`....// (such as Node.js), expose a factory as module.exports.....// This accentuates the need for the creation of a real `window`.....// e.g. var jQuery = require("jquery")(window);....// See ticket trac-14549 for more info.....module.exports = global.document ?.....factory(global, true) :.....function (w) {......if (!w.document) {.......throw new Error("jQuery requires a window with a docum

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1661)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.644586462788356
Encrypted:	false
SSDEEP:	48:iISkgmdwRgYds8713PO9t4sPdcj+3VqEHXWmEkg6:2kgmd0s87BPOsIya3VqkXikg6
MD5:	075001B9237295334D944D4377718819
SHA1:	500775BB237E7B43E244FDBD25456A09240671D7
SHA-256:	C6C40A0C542365EC100DF76F01DC125E147C40CBDA22275AE2148BD2961B9E7B
SHA-512:	537A22D57AAD92FBB843DA421AEF8451933E831C8B05913CCBDEFA1C7D6E65D070D322749A3FBD7F63B2D7A510034D42A9E8DC553372BC29924345969D03BC38
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b.870fa24a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b"],{15610:(e,d,a)=>{a.d(d,{T:()=>f,x:()=>t});var c=a(45184),b=a.n(c);const f={AED:b().d857e44d,ALL:b().cb87e3db,ARS:b().a9d5ffd1,AUD:b().a0e8371d,BAM:b().gcc50dc9,BDT:b().a6a43585,BGN:b().a0cc8f2d,BHD:b().i31c32c5,BRL:b().i7dc69e9,BYR:b().c14a6c03,CAD:b().jaa3d537,CHF:b().a824080b,CLP:b().d9c0bedb,CNY:b().bf8c0613,COP:b().i8163625,CZK:b().adb53ba1,DKK:b().iabf697d,DZD:b().a1a0555b,EGP:b().f266f3d9,EUR:b().a9a8652b,GBP:b().dbf40761,GHS:b().b0d993d9,GTQ:b().ac1308e1,HKD:b().a7889ab3,HRK:b().c614f5cd,HUF:b().i55d57e3,IDR:b().e4b6002b,ILS:b().d28e983b,INR:b().e8c9232d,IQD:b().c8994ae1,ISK:b().f821c2a5,JPY:b().j348b9c9,KES:b().i6f93b9b,KRW:b().c6150bd5,KWD:b().i8921e09,KZT:b().ef239279,LBP:b().hecdb149,MAD:b().fdd039b7,MKD:b().f30c2c37,MXN:b().d9ea7bff,MYR:b().ea3df4b7,NGN:b()

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	405317
Entropy (8bit):	5.417978364529961
Encrypted:	false
SSDEEP:	6144:5++4B0YqCpIy+YfUZs8u20DicHywkIq9iHs32cZBYkoVvDl2cfSexf:5PxCpIPCGOJDB
MD5:	EAB34CCB7EFAEB39B168A30E88DB5FB1
SHA1:	495AE3188F1D1722D994FFBDED5FB1A31926F0E5
SHA-256:	79A207BF7FC05A318EC1E1ADEF611A25EF007988E9C5C98FD799C5FFDEB57EB3
SHA-512:	8946AD4CCA69F5E35804A1ADEDE9629CAB92E63C2392092BE33DDDB8627F3A4C2E3ACB56A8070FD731F1CC297E9C982E9365478450860F99877C68DA6CFBCF64
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode.72637d2a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode"],{93128:e=>{e.exports={queryId:"QjN8ZdavFDqxUjNn3r9cig",operationName:"AuthenticatedUserTFLists",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},18561:e=>{e.exports={queryId:"bKw070RKxWfAI39SV8Qv3Q",operationName:"CommunitiesExploreTimeline",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","creator_subscriptions_tweet_preview_api_enabled","responsive_web_graphql_timeline_navigation_enabled","responsive_web_graphql_skip_user_profile_image_extensions_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_twe

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.477567157116929
Encrypted:	false
SSDEEP:	3:mSUW7n+QiCk9qY:mSNz+yk9qY
MD5:	1469D19B9CAED17F4BCB6FAF60E53437
SHA1:	1C9CCFA2C8ED27BB522D9BAF9ADE5207EE9076AD
SHA-256:	6B3169402D9E78836B41EB1112FEC6C9FE7565EBDE5946C9041EB2E52E91B0A8
SHA-512:	C2AF3414A5C847138BCF48E2CEAF701A618CBE0100B1C93F9B6ADE0F529C33AA0989835AFD784A945D6F57914982222ED99CA00A9B3F201BBA549286C7BC65C8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgl8d2V_JvtpcBIFDZoS_LkSBQ18YoRTEgUNI9T4Hw==?alt=proto
Preview:	ChsKBw2aEvy5GgAKBw18YoRTGgAKBw0j1PgfGgA=

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x470, components 3
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	6.094540171556792
Encrypted:	false
SSDEEP:	6144:jbUeTbKAY2ZZpPQRwdFtKONatF7FZtdvTb:jbUeft7pPQRuFAON+F7vtdv
MD5:	81EA8C7BF7B02B66E2BDFB3B17A7F6AD
SHA1:	10CE12523EFBACF434121D5B39F025C4A73CACEF
SHA-256:	DD3FCFEAA58C1CEEE516D77208127C045943A8BB3DAC1FE746947EE1740EA818
SHA-512:	9C580ADD44ECAEEC95D84A310B5AAB825C2D753845141D3902022FE93F82FA67A6BA3B779794047B7B96319E5B4D9F67434887187CACAA6DB60B72E5413DB807
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"..........................................}...........................!1...AQ."a2q....#BRSX......3br....$69Cw.......4cu....%578DFGTWdstv......&')Ufg...(EHVe.......hx...................................V..........................!1AQ.."aq..2R.....BSr..#....34b....$CTs.....56c.U..'.................?...N.Mi.l1...r;.J.Y....\.M[..s..;..c...w../......S(.[.1.~..p..P....y./V.....K......n.~s..#.....M......#@.p.....+g...Qu..y.(v.]X...3..9....Z.....R...q0....t.7D.8..5Q.Z...26VH....jYq..f.. .x.>8V.(q.R.Y(.e....Z.",q<.1..f<......(..Y.d....5.MP`....z.c........3).-3X....5..x....BSV5....TI.E. d...c.M.R.x-#E..y.\|p....d..\..+...3.y/jWJ...<.@W=X6Sx.g.=s........i....U...-'...G8.\.g.r^.n...}Td3...2...~021.XQ........\......Q#..u..Rk.).A\|.ks.O.......<J..N.s..8........:....(95..IQMU..$.....I!.*v.s!.'.s.e^{...

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27620)
Category:	downloaded
Size (bytes):	220206
Entropy (8bit):	5.146232152637314
Encrypted:	false
SSDEEP:	1536:IOR8WRGEUATCTR8b+LWni8lAA2AxCR/4gy:3xT0qniEp2AxCR/4gy
MD5:	C6B0187C078F9F992DD497BD7585C819
SHA1:	ACA1B719B438A7BF0596E343021A5DDC24422F2E
SHA-256:	234B0F4A46CD20F4462340463C176364FB5019A8D28C16829934B0F58F0960CA
SHA-512:	0A47FFDFFF563B651D3A2AF08F0308ACDF655A7FD114D32E62C6A93BE14B84795A48A32C620DA228805B76B41D6A789CF6A6BB97F27082B2A23DEE5B56E6DA46
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iDeG4/yA/l/en_US/CQDgozv7lkz.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("useCoerceRelayImage_image.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCoerceRelayImage_image",selections:[{alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null}],type:"Image",abstractKey:null};e.exports=a}),null);.__d("ProfileCometHeaderActionBarButtonWithoutIsActiveField_action.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"ProfileCometHeaderActionBarButtonWithoutIsActiveField_action",selections:[{kind:"RequiredField",field:{alias:null,args:null,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:[{kind:"RequiredField",field:{alias:null,args:

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43572, version 1.0
Category:	downloaded
Size (bytes):	43572
Entropy (8bit):	7.991846190596049
Encrypted:	true
SSDEEP:	768:9aVzVymSbSDcPi1iyD9m9ySj+H2fmwsTtxNXfmQZKQ6srdeujlLANRWOvClvztaO:KVyW6i1iyD9Epj+umwsxmir6soCKvXvY
MD5:	B683029BAFE0305AC2234038A03E1541
SHA1:	12F8C193902E99348493ACE32E498031BF79B654
SHA-256:	18E6B5FF511B90EDF098E62AC45ED9D6673A3EEE10165D0DE4164D4D02A3A77F
SHA-512:	44823904027DD2E901429BFF1672132600AE6895486EBCFD3B97A5315635104BB1D555F614DC5FDCA9645B01C65056D2D55842351B1324290C163A2451307E46
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/font-awesome/font/fontawesome-webfont.woff?v=3.2.1
Preview:	wOFF.......4......4.........................FFTM...D........epa.GDEF...`....... ....OS/2.......>...`..z.cmap....... ...j.5..gasp................glyf............2..head.......1...6.\."hhea...........$....hmtx................loca............q...maxp........... ....name.......f....<.e.post...0........2...webf...,.........RQ..........=.......T.0......<.x.c`d``..b...`b`d`dl..,`........x.c`f}.8............B3.3D..8AAeQ1....W.6..@>...2.bDR......R....x...J.Q...n~. {...(.f.@}....ZR.X..H...!.e..$.6AD.tV...$Y.,.L...n\..l...s.....!...FrR.(...T....D)..6.P.......~.../..6.....h......}.c,.8..E."5iHkH.D.....G_x.F.%....&...).q.....W6.$e.........3.f.l.....?.z]7....gy..x..x..9..+&m.X.....G.I?.....)..O..".......M........H.....2tn........x...\|T..0~.s..;..Y..d2.d.$d..Y............ ..(.....j...]..j..jW}mkW...m..^...?[!s.....$$.}....{.}=..s.s......x...N.l....!.....v2.]....q.8.....3................H(.Oe.!....H.:. =.R..r.x.7..O..on.6z..1*..`t......s....`.cub.......J.$.C..^.8..

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65344), with no line terminators
Category:	downloaded
Size (bytes):	231836
Entropy (8bit):	5.364468378303986
Encrypted:	false
SSDEEP:	3072:C5+kxi2zndZ9jyGHOB5Ju1p3nEdYw/QrGPtq7HXgqzh6/ymwJaeCgK/iMjsecpuc:C5+EfE4OB+zw/QrjZvLJaeCg0xRjI
MD5:	3E705B1897BA2EC613DB1214CCD24090
SHA1:	0955B7EDA1C97AB1B8499F220E496BD9649A0AEE
SHA-256:	1963FBEACEB5ACFAF55990C6415E3739B6805AC75F093737D87C26D828B03F28
SHA-512:	62BBAF4491A80188C4E22C4A6C7E6691E5207AB68DEF70810FA650298809096DF5A7CA24DA8B1C77974F0F6B05016E90E299CD2852A4B94A9DCE802A7DC6E16B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/modules.audio.54e3f0ea.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.audio"],{66324:e=>{e.exports={queryId:"bXd9dWP49ldGZAorWYn8dg",operationName:"AudioSpaceAddSharing",operationType:"mutation",metadata:{featureSwitches:["creator_subscriptions_tweet_preview_api_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_tweet_api_enabled","graphql_is_translatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumption_enabled","tweet_awards_web_tipping_enabled","creator_subscriptions_quote_tweet_preview_enabled","freedom_of_speech_not_reach_fetch_enabled","standardized_nudges_misinfo","tweet_wi

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5604)
Category:	downloaded
Size (bytes):	5753
Entropy (8bit):	5.447398956550917
Encrypted:	false
SSDEEP:	96:bP8D7pT4cibS+5iUGIRAeX1/PMKkPO0WsNa+SdDHMKyqMM7XL6c/iSLV:bP25i2stHRAeF4PWsNa/dDso7qSh
MD5:	1666EF41673E81FB99B2874EE2D3114C
SHA1:	1E4B3F4765A03950F65390D4BE06E57F2382B899
SHA-256:	C00E4CB7D476F775837E32A019515D9453C4B2BEAC8D036EA428B834F1338368
SHA-512:	03412EE0CF567CF8099D42B4C35146F9F7568A0D7E173DE15FBB85C8988595223A332C9E95975A83A82A9BFB3EECF9B2D112AC7BBE042108F76CAC68DEF4660C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Ocf.34c152ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.Ocf"],{50519:(e,t,n)=>{n.d(t,{QF:()=>i,Qo:()=>l,hZ:()=>s});var r=n(24058);const a="external_referer",o=604800;function s(e){return(0,r.ej)({cookieName:a,featureSwitches:e})}function i(e,t){const n=t&&t.encryptedReferralDetails\|\|"",s=t&&t.encryptedReferer\|\|"",i=t&&void 0!==t.referralType?`${t.referralType}`:"";if(!n&&!s&&!i)return;const l=`${encodeURIComponent(s)}\|${i}\|${encodeURIComponent(n)}`;(0,r.d8)(a,l,{cookieOptions:{maxAge:o,encode:e=>e},featureSwitches:e})}const l=e=>{const t=s(e);if(t&&t.split("\|").length>1){const e=t.split("\|");return{encryptedReferer:e[0],referralType:e[1],encryptedReferralDetails:e[2]}}}},58380:(e,t,n)=>{n.r(t),n.d(t,{ArkoseChallengeType:()=>$,ArkoseSecurityChallenge:()=>v,default:()=>_});n(6886);var r=n(2784),a=n(25686),o=n(73186),s=n(8443),i=n(6149),l=n(48501),c=n(90437),d=n(72599),u=n(70025),f=n(82385),m=n(60673),p=n

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7928)
Category:	downloaded
Size (bytes):	8148
Entropy (8bit):	4.943254235123884
Encrypted:	false
SSDEEP:	192:sNqNxdNmUGNreit18l4Ub8l9e5LoONUlFoXt:sNqNxdNmUGNreit18l4Ub8l9e5fNUlFE
MD5:	DA4E4BFBA4381DE4C97E5D53E6C2A96A
SHA1:	57CC61931DD3C1088BF97B3AB963FC291B8BA6FA
SHA-256:	D45F6D4352B14EA042B95F334335797999F29E6BBF18B2AC58DAE24995E9C2EC
SHA-512:	F5356D20446A7BAD6203214D128E631CC0330F50BB3CFE47738D76320DF6AA18F3BEB1849396916B260C8D6A05FBCD8767D888795572C3C789AE0AD2B4DA100B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile.8eab8f9a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile"],{24316:(e,l,n)=>{n.d(l,{ac:()=>F,kI:()=>f,vF:()=>p,m1:()=>y});var a,s,i,r,t={fragment:{argumentDefinitions:a=[{defaultValue:null,kind:"LocalArgument",name:"screenName"}],kind:"Fragment",metadata:null,name:"useFetchProfileBlocks_profileExistsQuery",selections:[{alias:null,args:s=[{kind:"Literal",name:"s",value:"f3d8"},{kind:"Variable",name:"screen_name",variableName:"screenName"}],concreteType:"UserResults",kind:"LinkedField",name:"user_result_by_screen_name",plural:!1,selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"result",plural:!1,selections:[{kind:"InlineFragment",selections:[i={alias:null,args:null,kind:"ScalarField",name:"has_profile_blocks",storageKey:null}],type:"User",abstractKey:null}],storageKey:null}],storageKey:null}],type:"Query",

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7890)
Category:	downloaded
Size (bytes):	8113
Entropy (8bit):	5.507438185640679
Encrypted:	false
SSDEEP:	192:a483zGGJ2fK1HWKjSH93CwfwAuKy33zVyjm5bPwFl17cwh5456oekgdR:a483hsgHWKflQe0/vBka
MD5:	1B87BA821E91F43B68338D671D28B79E
SHA1:	9CB8E75DECC034F6A1A4C5BFD54A8C4BCEEA2BDB
SHA-256:	BA596653CA8AE43009B6ABB2E2A123788CBBED84808646DD280A160823B261EC
SHA-512:	919B4FDDC2B27D12F8AE38B0CB09B2733548AFD7FA46582122A31ACE1F2EB7F8B7FF063F4DCBFFD2BA02AA630D146174AB2F5B3A49F3259E5B9E709B15D2832F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.db6cd65a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun"],{22167:(e,t,s)=>{s.d(t,{BU:()=>_,Cr:()=>r,To:()=>n,UN:()=>o,eD:()=>a,td:()=>d,v1:()=>i});const a=Object.freeze({ONE_TO_ONE:"ONE_TO_ONE",GROUP:"GROUP_DM",SECRET_ONE_TO_ONE:"SECRET_ONE_TO_ONE"}),n=Object.freeze({AT_END:"AT_END",HAS_MORE:"HAS_MORE"}),r=Object.freeze({CONVERSATION_AVATAR_UPDATE:"conversation_avatar_update",CONVERSATION_NAME_UPDATE:"conversation_name_update",CONVERSATION_PROFILE_INFO_HEADER:"conversation_profile_info_header",CONVERSATION_READ:"conversation_read",CONVO_METADATA_UPDATE:"convo_metadata_update",DELEGATE_ALERT_BANNER:"delegate_alert_banner",DISABLE_NOTIFICATIONS:"disable_notifications",ENABLE_NOTIFICATIONS:"enable_notifications",END_AV_BROADCAST:"end_av_broadcast",ENCRYPTED_CONVERSATION:"encrypted_conversation",JOIN_CONVERSATION:"join_conversati

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3161)
Category:	downloaded
Size (bytes):	3384
Entropy (8bit):	5.220912965507965
Encrypted:	false
SSDEEP:	96:mnlXjDD0nRqktyzi3xGIx9bFXRF0QBOC/:GTDonRntyzC4YJXFLBZ
MD5:	B109CCB05A0B420519005F2DE8A09526
SHA1:	9FA41CC87C0910C1A51299D52433033575012333
SHA-256:	F15146BD63A4FDCB9E05B3CC2E1FBC76C8B7DB811D7DAC27902B6C12340DCEDB
SHA-512:	13BD087A531FCBEE91E1C957657F2FAAEB3ABC7614A4A2A43B8996F370FF74162432BEF6E9F723FDDC9A96ACB5BAF7DD497813F3AEF14C9BEBA564C597D1B70B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com.c92212ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com"],{96818:(e,t,r)=>{r.d(t,{Z:()=>m});var o=r(7896),l=r(2784),a=r(4152),n=r(25686),s=r(7066),c=r(82392),i=r(40080),d=r(35094),h=r(79866),b=r(11839),u=r(73186);let p=1;class C extends l.Component{blur(){this._checkboxElement&&a.Z.blur(this._checkboxElement)}focus(){this._checkboxElement&&a.Z.focus(this._checkboxElement)}constructor(){super(),this._handleChange=e=>{const{onChange:t}=this.props;t&&t(e.nativeEvent.target.checked)},this._setCheckboxRef=e=>{this._checkboxElement=e},this._labelId=`CHECKBOX_${p}_LABEL`,p+=1}render(){const{checked:e,disabled:t,helpText:r,label:a,onChange:p,style:C,...m}=this.props,g=h.Z.generate({backgroundColor:u.default.theme.colors.transparent,color:u.default.theme.colors.primary,withFocusWithinFocusRing:!0}),f=h.Z.generate({backgroundColor:u.de

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	151112
Entropy (8bit):	5.436457227851175
Encrypted:	false
SSDEEP:	3072:1FiVxW5Sn9rC88Bp0bZcdctMXQgCe6rzsMVv1:1FAxWGhcwZ0rgje6rzsMP
MD5:	4CB08CE34E989E6B7799216A5077C495
SHA1:	131453E3A82E4961BF9A5A4A347703DCAF890FC1
SHA-256:	B3790AAF2C91DC30C90A8E9BC622D7DD480AEDBD56550E082F040AF9AA10CA62
SHA-512:	F6FD757B09A802EB1F790F56D901D4EA3B8C035E22D4922A7135476ABD5396271B66E1442EA36BED30CC56E54F9F7100D6EBD9CC6EAA2DB8E7983262557020D7
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AfB1V5zviFKmuGr4twHkPoHpTckmnxNUS318pRe6Kv1Vrw&oe=664FF470&_nc_sid=7da55a
Preview:	....KEYF....................@......C...CUU.?...A...............................................................%.......c..........$...0...4...4...D...H...L...T.......,.............d{<......?x...H..............?...?\.....RCd.....RCl.......`...X...................`...T...H...<...0...$.......................................................\|...p...d...X...L...@...4...(........................!.=.!.=.1.=.!.>J)%>.1F>.9g>.!.>)..>J).>k..>.1.>...>.9.>..>.!.?.c.?)..?:..?J)%?[k-?k.5?\|.=?.1F?.sN?..V?..^?.9g?.{o?.w?....0_...[...X..XU..$R...N...K...H...E...B..d?..0<...8...5..T2.. /...+...(...%..."..............4...............T...\...........^.......f.......n.......v.......~.......................................................................................................................................................................&...............6.......>.......F...........................\... ...........l...0...........\|...@.................. ............. C..RC......#C..RC.......C..RC

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44744, version 1.0
Category:	downloaded
Size (bytes):	44744
Entropy (8bit):	7.995787087315447
Encrypted:	true
SSDEEP:	768:dxszm2WHLjjPNDTCw4nY1ljkbpYNdt2gN8BHcVegXUPaMaU+GRquWGvJvaivBHFE:nc+5DTCi1Fkb8dQgN81chXUPaMUGRbv0
MD5:	22898C3B88EF29DA6A41C302510F28B4
SHA1:	F9CC37A5977F1163068A0A73D289AE2431A7FB82
SHA-256:	29BF369DC4C1B989F933E482F76B961ACC5478BF48800547B18D6CC6B9B9DD91
SHA-512:	F270ED67A28469B36694A7600187A07AB8FA82877D3A52BBB442C6344091E3ED815FFEC90238605FADBA4685DAD0F5EF0FC9145EAD8FF38ED21969A4F6A5EF72
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/Chirp-Medium.f8e2739a.woff2
Preview:	wOF2...............l...`..............................p..x.`..v.D..*........b.6.$..t..<.. ..r. .. .$..T[=\|q.fc.:..U..."L..S.._..9.#...[.%...sS.~.m..iM..g.....d.Cw..]>................e"..f".......{$s.,3......1.^.)&.b..%]...g%..&.;.I.n.C....A.4...36.On...1h.Y..K....i7...9..c.\....i..qF..V...By`:.S.o~toRxU.....].......?..Og[P...9..O.....F.E9T....&.bi.F_....'.`...\|...W.0U.W/Ghk..;.K:...\h.9...\|....H...A.......Nv.'&....5.....f.1....'.r.v...Yj....cB~B=._.G.y....+A.X...._[.....f.h1H.^)q...0.#W.v..t.M..X+pYv....!^...$......_.T..H....b.TE.....K....D.]C.u,v.Y].Z...z.$g..H...0...l5q.O%..v.h{2...bU.........@!.j.\|$ ...dX.T4.....7w...3...{.F";m...K!..1.......[..l.W..W.[..^..ii.i..A....<!F./...\|...z..%...0...g.D.............8...4...>...{.&....(....A...G.CR.@n.y....j.6+..N........4...@...R.........m..y....6-.{...y.......L...'R.P,...."...f...r..m.Z.n...8.....0.N.L.,..i. Bb.y=.....)8..%........9.....d.Ywd....lL._t.nQjCi..9.!.c0.y4....RD.t..A.8......_.N.B<.1

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	467
Entropy (8bit):	5.146838272230996
Encrypted:	false
SSDEEP:	6:6v/lhPEIQzDvEIqDYJ15LrzhiCaoa4xNSOmD1we5fSrOxKEbLlJdp:6v/7MnPEIVJJiZNqtmZwQoYrbLlJz
MD5:	DF7EA137C640CBFC8988EBFCBEA3E74C
SHA1:	4D515FAE712AAADC544D64D1C1D22D1BB0A01AFF
SHA-256:	F0C8902560810110039DDE6066D18FF2D3D26A645DF7A4E76D7A6A45617B9F98
SHA-512:	C7BD585317015EEC41EBB2BAF6C6815219EB84BE2212F57EF3E469A4746F50F60519DC03EC9EE510556970A7BF4F4E76667C5D2080018AE00F5CDBBDE86C50B2
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/4Lea07Woawi.png
Preview:	.PNG........IHDR..............W.?....PLTE...........................................................................................................................................................................45.D...8tRNS..............dH.f...U.;!q%...u.&..n{.P......Oy...^4.N...{....IDAT..u....0...K.`W....../3...Fw..7BQG...l}..!oh...9...o...=...yY..P.aCx.`j.rE#..?`.Y4..9..%..bGHUMjf.okj.>\j...5g.LbRq.f.L.".c.0.. .}n..-..27..H.k\|...$%aXm......IEND.B`.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2582)
Category:	downloaded
Size (bytes):	2798
Entropy (8bit):	5.320628230622526
Encrypted:	false
SSDEEP:	48:iIKv4tNz9RNvDSHGB7hLZ+B2/IfH7Y/t1gGjA8YxhuhHzJHBmBaH5sMw1KWms4b:Ov+Nz9RNvOmB7hLZ+B2/QHAYSA9xQhHr
MD5:	942946B8DAA9310F73731DAEE82895C9
SHA1:	41FF849ED542A5D7C58315556069E1383F17D3F2
SHA-256:	D7EA2F24E1B83A49B740251C42E86C964B5FBF71E6624D04455EBF098CCFA5A4
SHA-512:	8E86D19281E509B39FEC39BA3CC0604658C67C67D4AC7973B5733D0FBA570A5B535E3B6F2AE08D202C5A742D03DE3D0C224ED7D0DD3E66341A1F95B9889F25FD
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.immersiveTweetHandler.0f0c2fca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.immersiveTweetHandler"],{92187:(e,t,n)=>{n.d(t,{Z:()=>d});n(6886),n(2784);const d=(0,n(56499).Z)({loader:()=>Promise.all([n.e("modules.common"),n.e("shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande"),n.e("shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim"),n.e("shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings"),n.e("shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.SettingsProfessionalProfileProfileSpotlight"),n.e("shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu"),n.e("shared~bundle.Compose~loader.TweetCurationActionMenu~bundle.RichTextCompose"),n.e

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25383)
Category:	downloaded
Size (bytes):	25606
Entropy (8bit):	5.471538887475454
Encrypted:	false
SSDEEP:	768:vZSJFFQnTmkNtaF19MYU2Lipkby/I/ez/MpUOJO1R2x++:vsXdewaA
MD5:	5501D0BF1AD752B4EF39EA80727738FA
SHA1:	9DE0B9EF3BEE56B26249259682B947AD132757AA
SHA-256:	3DE969FBCA8BC82E52799F7C19039E01F50989244939589570C95C5279F0B7CD
SHA-512:	B3CB4C9A126935C654073E761719B819B8EDE892E59CEDD0935445B8BC1F9FAD2E55B0D1A0D90ED82D90FA602DD5A676D27FA3FFAD031F8638FDBBE85B9FD321
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b.fb6ff94a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b"],{43346:(e,t,n)=>{n.d(t,{Z:()=>i,l:()=>r});var s=n(34562),a=n(42938);const r=(e,t)=>{var n,a;const r=null==(n=e.data)\|\|null==(n=n.labels)\|\|null==(n=n.find((e=>e.label_type===s.w1.PINNED)))?void 0:n.timestamp,i=null==(a=t.data)\|\|null==(a=a.labels)\|\|null==(a=a.find((e=>e.label_type===s.w1.PINNED)))?void 0:a.timestamp;return r?i?r-i:-1:1},i=({sort_event_id:e},{sort_event_id:t})=>e?t?(0,a.ZP)(t,e):1:-1},18397:(e,t,n)=>{n.d(t,{$S:()=>Me,Ae:()=>be,Ap:()=>Ze,BW:()=>xe,Be:()=>Ae,Ek:()=>Be,FI:()=>Fe,FS:()=>te,GP:()=>Oe,Ke:()=>je,OF:()=>ie,OW:()=>Ie,PZ:()=>Le,Pr:()=>J,Qe:()=>Je,S9:()=>Re,SF:()=>fe,UA:()=>ce,Um:()=>ue,W:()=>de,X5:()=>Xe,Xw:()=>ke,ZP:()=>K,Zg:()=>se,_D:()=>He,aG:()=>oe,ax:()=>ne,ck:()=>_e,d0:()=>De,dq:()=>ge,gQ:()=>$,gq:()=>ae,jT:()=>re,lT:()=>Ve,nI:()=>Ke,qH:()=>N

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11338)
Category:	downloaded
Size (bytes):	11562
Entropy (8bit):	5.308091725378181
Encrypted:	false
SSDEEP:	192:exXkGyKdfDO1JRuAEkAOUZC3BZZCSEIW3uNA86ufIOrBC9vs1drMCVFQ+lm1NEem:sXxyKd7O1JRuAEbCABIW3uNAXU1Yoxbt
MD5:	77C276A1EF88FDB75959728A3C3B80DF
SHA1:	5D00316536F92F3B54A43B1B5D4383611CC6051A
SHA-256:	6B308F9655DBF7F4A8167D2869AC67196DFA2DFA594F9A82A035E84BFFC62342
SHA-512:	69F7BE398C862C4169855D19D6CAFA27B06AC5070A3494F2198BAAD8BC776F9EBF7FA5718468695E116FA7BD35DF87D63EE4301002E1C43B729D816B8381691B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight.694e894a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight"],{60100:(e,t,o)=>{o.d(t,{Z:()=>r});var n=o(2784),l=o(25686);function r({children:e}){const t=n.useRef(null);return n.useLayoutEffect((()=>{if(t.current){t.current.querySelectorAll('a[href], input, button, [role="button"]').forEach((e=>{e.setAttribute("tabindex","-1"),e.setAttribute("role","presentation")}))}}),[]),n.createElement(l.Z,{ariaHidden:!0,ref:t,style:a.root},n.createElement(l.Z,{style:a.overlay}),e)}const a=o(73186).default.create((e=>({root:{position:"relative",pointerEvents:"none",userSelect:"none"},overlay:{height:"100%",pointerEvents:"none",position:"absolute",userSelect:"none",width:"100%",zIndex:1}})))},75219:(e,t,o)=>{o.d(t,{Z:()=>z});o(36728);var n=o(2784),l=o(45184),r=o.n(l),a=o(65526),i=o(48501),s=o(60673),c=o(95307),d=o(39397),u=o(44487);const p=r()

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4255)
Category:	downloaded
Size (bytes):	4478
Entropy (8bit):	5.152045719926148
Encrypted:	false
SSDEEP:	96:moRJsX9QRjn47VTO40Ki9G7X30CBogB9LCZ:TRJsmRjn47MKi9G7n0CBogB9g
MD5:	2F499036E4EB3FA85C20D8E8D3C1F563
SHA1:	5B823B9EDE7495AFBF682EABE9AC279CE4D16803
SHA-256:	2ACE270C78F24DDA625917133CBEE92E39117D32DF1235D0E1A8AC6F311630C4
SHA-512:	87E0723EB4C2E2E5558056CEA72FD5EDE67F140F5C4000FBC4556133344ECA2FCE7664524321F7E4BD458EBBB0ADC200962B42FD3E1C732C1FAECED6B97DCA53
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.342e570a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi"],{76372:(e,t,s)=>{s.d(t,{Z:()=>a});var o=s(7896),i=s(2784),r=s(25686),n=s(1477),h=s(16587),d=s(48501),l=s(28377),c=s(27745);class a extends i.Component{constructor(e,t){super(e,t),this._unmounted=!1,this._handleResize=()=>{const{viewport:e}=this.state;e&&e instanceof c.Z&&e.notifyRectChanged()},this._handleViewRef=e=>{const{onViewportSet:t}=this.props;e&&this._lastRef!==e&&window.requestAnimationFrame((()=>{if(!this._unmounted){n.Z.unobserveAll(this._lastRef),this._lastRef=e,n.Z.observe(e,this._handleResize);const s=this._getViewport(e);this.setState({viewport:s}),t&&t(s)}}))},this._getDataSet=(0,h.Z)(((e={})=>({...e,viewportview:"true"}))),this.state={viewport:void 0}}render(){const{children:e,dataSet:t,onViewportSet:s,...n}=this.props,{viewport:h}=this.state,d=h?i.cre

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9847
Entropy (8bit):	4.803859749476966
Encrypted:	false
SSDEEP:	192:HQHL8ncmZwSecqis9I4IKjiukpM3TUeFnUKW5NykDgoF1bmrRoT7pu4oa:He8p3AnkDtmrREuI
MD5:	957C08B502066363B0C5E6B6EC816DB8
SHA1:	08BA7841C65563A171BD87258AA7F0DE29969FAF
SHA-256:	5D32861C9E13B8222C4973C8461F1D01AA8252AAA1558324178E5C1529E11E4C
SHA-512:	92D3C9BC48C686F89EC4A6E4F81E846E32EE811BCCEDC7D32334F05EFC697D2A3856B89E6A30148F58C77F67A50BFF155D9BE81400B0B031EE270E570DB9933A
Malicious:	false
Reputation:	low
Preview:	/*. DotNetNuke - http://www.dotnetnuke.com. Copyright (c) 2002-2007. by DotNetNuke Corporation. . Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated . documentation files (the "Software"), to deal in the Software without restriction, including without limitation . the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and . to permit persons to whom the Software is furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in all copies or substantial portions . of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED . TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL . THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4104)
Category:	downloaded
Size (bytes):	4358
Entropy (8bit):	5.5786068547198635
Encrypted:	false
SSDEEP:	96:OJebaAyJjcYsJT4mBDt/n/oapIAHgPTY7/zvls2Oab:KAyBGJTxDtvpIALNFB
MD5:	D3CA344987DA7664156F362DAD6476D6
SHA1:	4CAD2960851FB108B486E1301EDCE504D94CA206
SHA-256:	C5D911680403EBB70E2EDADFE3D7D62E328D1C9AD4320BA990D4143E28B99734
SHA-512:	B5C17F59198837243E73F3F3B2CA445CC243897F140FDF8D932C042CE2A2ED2B9B8611E7A035FDBA0010345810E19A65A416EFCB00C0FF9ACDC7902BD308ABAB
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio.d10932da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio"],{31460:(r,e,t)=>{var n=t(24229),o=t(70095),a=t(6358),i=o("species");r.exports=function(r){return a>=51\|\|!n((function(){var e=[];return(e.constructor={})[i]=function(){return{foo:1}},1!==e[r](Boolean).foo}))}},96038:(r,e,t)=>{var n=t(24229);r.exports=function(r,e){var t=[][r];return!!t&&n((function(){t.call(null,e\|\|function(){return 1},1)}))}},43143:(r,e,t)=>{var n=t(77111),o=t(92991),a=t(9337),i=t(39646),u=TypeError,s=function(r){return function(e,t,s,c){n(t);var f=o(e),p=a(f),l=i(f),v=r?l-1:0,d=r?-1:1;if(s<2)for(;;){if(v in p){c=p[v],v+=d;break}if(v+=d,r?v<0:l<=v)throw new u("Reduce of empty array with no initial value")}for(;r?v>=0:l>v;v+=d)v in p&&(c=t(c,p[v],v,f));return c}};r.exports={left:s(!1),right:s(!0)}},1909:(r,e,t)=>{var n=t(65968);r.exports=n([].slice)},28

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299), with CRLF line terminators
Category:	downloaded
Size (bytes):	143841
Entropy (8bit):	5.3300514720869945
Encrypted:	false
SSDEEP:	1536:4GLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7k4d2YB4Hy7mT4aVt0SrMUT3:4GLXGFKT79DSs6WFMM8CSZT3
MD5:	AF22E030D18F302EE5BAEBBCC54AA001
SHA1:	AFA5E8191F9D91776F23DAB5A3AD4CBF16FD7376
SHA-256:	CD9C48621B2462EAE0C6BFFCF1F7059D8573BCF87B90420925A1A0FF3D3556AB
SHA-512:	F7B9816F5A7244A9B467D88371FA2102DABBEE43C0A99246D912917F4B3BB97CF2748F986AC4595AFF0C3BAD384689119F6B353881E3696483685CABF243CDD1
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ScriptManager_TSM&compress=1&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a4dd65af1-4721-4286-9a7d-9f9100b5515f%3aea597d4b%3ab25378d2
Preview:	/* START MicrosoftAjax.js */..//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Func

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2], progressive, precision 8, 960x640, components 3
Category:	downloaded
Size (bytes):	153045
Entropy (8bit):	7.991071804669953
Encrypted:	true
SSDEEP:	3072:opnyAZxh3d9fmBlPYKZtDQS7m4Swr6Fw5RCaw205Dc/uTMLadsFscq6Ghv:uySHQlZtvmHFwqT205DcEdPc3Q
MD5:	6A4D49BFB63D21292609FDD05047DA14
SHA1:	203BE2D714E9ADE6AA06C33688B7A60DE8E37714
SHA-256:	107EE0681DBA5F2FDB2F386FE81D07B3EEA5705B6C60CDD7A2690C49AEE86F72
SHA-512:	3E511450EBE812314ADDED53FDCA46086198619B45CBDFDF09EEA18CF1785074887CC74395CBFD504230860A852264FDEF691AC8FE9C725A220D709A3A95CE93
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_p640x640&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlZ7-Bh9qr8Xud13aPfiNhlXB5Tg7m-NkVHctccEHU7A&oe=662E8774
Preview:	......JFIF.............DExif..MM........;.........&...........4....Sean Airhart... NBBJ.....http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:Marked="True">. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default">All Rights Reserved</rdf:li>. </rdf:Alt>. </xmpRights:UsageTerms>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........P..Sean Airhart..t... NBBJ..(.bFBMD0a000aae0300002b280000286b0000b0740000c0850000fce30000b95e010005660100d4730100ab870100d5550200...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................~.fN...i$.....gA..2-&i.@.&....t.; wg...2

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 52, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	59766
Entropy (8bit):	7.0626924005843765
Encrypted:	false
SSDEEP:	1536:VNp5qJ9evYLkDVLzMnxL//DwWvHMHpaqKN8:wevsALoxzDwVHc38
MD5:	E45945A496649F07ED678721C0DBB752
SHA1:	B0D453092D4EA1245244A70D524DBB9C0C2A6E9D
SHA-256:	8C2E98CB5F859041A574DF620CFB88245B41101B14E052BB9BFF178A6A42C4DE
SHA-512:	52436B1FD3D250145ABEA173DCDF5E6964A200A1D73CC28EEE21C3EC84CA21A5C8740621EFDC293DE884E701B35D3382E494FE9B94D98CA3D0879D53036208EE
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/images/PoweredBy_Logo_136x52.png
Preview:	.PNG........IHDR.......4.....Q.p\....sBIT....\|.d.....pHYs.................tEXtCreation Time.10/17/13.......tEXtSoftware.Adobe Fireworks CS4.......prVWx..[.x.U.. ..:.....FH.0n`...g@A.AEEa......{W.]...QTP"..,n.(.=....E.\.E....Hg..[}A...a..5..]u.:.=.=.TU..AG.A.\.r.o...hcc.v......4VTT.........~l6[c...f..6.6[......6.r+r+.g.V....T.+.l.-W..k.:.^n..........[...;..{.....r..A.H.......Q.T.L.$o...[.m......W.v.ky..S.%........{.}.....~....\|P.I.Y.E.U>$....MrBn.[.V.Mn.;....3t..H..`...t.....ip...L..gA:...^`..p6..}.\.@_8..A..l..9p>..A........b.......ra(... .........Ja8.....7.......F......k`,..ka<L...z..&.p........&...;..Sa...2.X..vp.....n...\|P.~.@.B...D!........P....p......0.........,x......<.........0..I..O..x.........`1,........Ex.^......Wa%....X.k.....j.....`-.......o...........\|....>..@...N.L..>.M....V......%\|...k..;a..o.[....^..........p.~........a8.M..fh.Vh.v..I.-.o-..Z.....k.Uo..5fU..5nEVl%..WZ.....k...Zom....6[[...6k..Cw.<[...Vh+...Jl.6.....M........._i..U.jl..:[..A

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3400)
Category:	downloaded
Size (bytes):	3623
Entropy (8bit):	5.453222165827239
Encrypted:	false
SSDEEP:	96:m6slHEQgr2Y+Ck5dW7q5SBrtATR8xaMIkcMC6g:uHZgaJq75NqN80kch
MD5:	76A8F0CAE21F9E2E170438A162D838A3
SHA1:	AEF8557A5743D44C210515A259B635213E4F2280
SHA-256:	9AF8E9F0B30A12821786692A43DB5271C74B095C80B3A7F2100A9E47345D36B1
SHA-512:	4933015F8FEAF1D7EDDCACFCB00CAAED292DCBDE479058A2A9F3C341BB802389C462EEA0B89628B2C53E48BD975514F43774A9D77410648909576BE8D9A7D6F8
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil.14898fca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil","icons/IconPhotoStroke-js"],{25440:(e,t,r)=>{r.d(t,{Z:()=>m,h:()=>v});var a=r(7896),s=r(2784),o=r(34788),n=r(73186),i=r(45184),c=r.n(i),d=r(74581),l=r(51171),p=r(455);const h="fileInput",u=c().b9960f32,g=s.createElement(d.default,null),v=({acceptGifs:e,acceptImages:t=!0,acceptVideo:r})=>(t?l.v5:[]).concat(e?[l.Re]:[]).concat(r?p.jn:[]);class D extends s.PureComponent{render(){const{acceptGifs:e,acceptImages:t,acceptVideo:r,customMimeTypes:n,icon:i,style:c,withIcon:d,...l}=this.props,p=v({acceptGifs:e,acceptImages:t,acceptVideo:r}).concat(n).join(",");return s.createElement(o.Z,(0,a.Z)({},l,{accept:p,icon:d?i:void 0,style:[f.root,c],testID:h}))}}D.defaultProps={acceptGifs:!0,acceptImages:!0,acceptVideo:!0,customMimeTypes:[],accessibilityLabel:u,icon:g,size:"medium",withI

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22168
Entropy (8bit):	5.93483918073825
Encrypted:	false
SSDEEP:	384:U62J824pAKFNW2Vr4/r33n4gU9kFcvyO6iH/ug3sOoWEt4bK8ArCi:N2J8FpAuY2VrGn4gU9kFeyO6iH/XsOoD
MD5:	07DF54DF91480FBFE2906765452C6FBF
SHA1:	A52E8A49117192C1EF95BC076DC156B1C64597EF
SHA-256:	27FBF1CC76894C289357A1601105392F1DBAAFABA15DAA258C954487B507718D
SHA-512:	6AC0F00ABD894BBC17C8440F1EFE6AC67E5167D91412B318013A5898713E2DD1AFC9413B2F9E5D93B3A70C61B3FEBC4F5911C471C3016311363D89F147393F78
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AfD7Ym2hhKakU4zYqIkqPxEzmAAXm5W2WGsqzcqZEtJ-4g&oe=66502298&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19046)
Category:	downloaded
Size (bytes):	19271
Entropy (8bit):	5.628474635196539
Encrypted:	false
SSDEEP:	384:Nsw4ckjDtu+5eG7dWnOI7ImiTtVYMpVxfgpenq8hbVKt6ivwSYc+IaD:Nsw4ckPkEeG7dPI7ImiTtVYMpVxIpeqE
MD5:	E601F75E62D854323795C49665779445
SHA1:	05D73A49CCFA9D57D129F2196918E8F20379B887
SHA-256:	08BA30705F583F33404CC78781BF4A98F62417AF18E9B20AB334CFBDB9C6EE5E
SHA-512:	F164B727AFCE7B21B16F3F3B74215B4D51ACC55F7DFAB3993ACD729FC3246200F385C605C3B160D63927ADB6083EACA4B9605E3310DEAB8794139A6FCB592149
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba.474860ba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba"],{20545:(e,i,t)=>{t.d(i,{Z:()=>u,C:()=>b});var s=t(7896),c=t(2784),a=t(48501),l=(t(6886),t(56499)),r=t(81010);const o=(0,l.Z)({loader:()=>Promise.all([t.e("shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD"),t.e("shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba"),t.e("shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun"),t.e("shared~loader.DMDrawer~bundle.Articles~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.LiveEvent~bundle"),t.e("loader.AbsolutePower")]).then(t.bind(t,72034)),renderPlaceholder:(e,i)=>c.createElement(r.Z,{hasError:e,onRetry:i})}),n=(0,l.Z)({loader:()=>Promise.all([t.e

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12821)
Category:	downloaded
Size (bytes):	13044
Entropy (8bit):	5.32960024340484
Encrypted:	false
SSDEEP:	192:Oi0/rP9VUujhix5X/vSLQk8JRplVW+tLAvJy2pVq/vTpOVG2+RY:Oi0/rPIXjPDWcUvwGMXTn2UY
MD5:	29A66074B3C410CC1CBC7763E7CF57CF
SHA1:	BF81B90AE692974C2DC62C0AD015E13CCE61C69C
SHA-256:	322D0C76D1F94897C72F796F31A2D380FB3215D2BCBF80C8DC8CC97E0F7901A0
SHA-512:	3728372E61015677342F9F7C783C6E6E2F824958857BEC376EA8F8F6E366FC0DCE896463475393F86AFCFDB20BA56FE8008B0C0BEC7D23294348B349CB30F988
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt.21c3416a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt"],{68139:(t,e,i)=>{i.d(e,{Z:()=>S});i(6886);var n=i(2784),s=i(25686),o=i(45184),l=i.n(o),r=i(15019),a=i(3655),h=i(90867),d=i(35193),c=i(6149),u=i(63142),p=i(29496),f=i(11839),g=i(15686),_=i(73186),v=i(46737);let b;const w=l().gea7aa3c,m=l().b6462b32,y=t=>function(){if(void 0!==b)return b;const t=document.createElement("template");t.innerHTML='<div dir="rtl" style="width: 1px; height: 1px; position: fixed; top: 0px; left: 0px; overflow: hidden"><div style="width: 2px"><span style="display: inline-block; width: 1px"></span><span style="display: inline-block; width: 1px"></span></div></div>';const e=t.content.firstChild;if(!(e&&e instanceof window.HTMLElement))return b;document.body&&document.body.appendChild(e);const i=e.scrollLeft;return e.remove(),b=0===i,b}()\|\|!t,x=Obje

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4260)
Category:	downloaded
Size (bytes):	533162
Entropy (8bit):	5.54991171085953
Encrypted:	false
SSDEEP:	3072:Tjquqabz8mutNU6KgJ90akdzpPk85//kXbvOHaXU7TzMjVVvjOP8tz89SukSS9II:Te5RF85//kXs7nMjVVrW9Sv/QTDU57
MD5:	252F44B62082F655085B65622092A2AA
SHA1:	5143622504B857AB0FD5EDD67C4C3F3DD2E0AC97
SHA-256:	E74F096D804F4C063B07A8F9674B674F6FDC80AADDD0D7373D7155F5F030B362
SHA-512:	A9ACB1597B68185475C33FB283BA0EC13B22B7D0A2C1B0D88FE8E232D8DA5BE3F760B38596CFB03314EAD6A8EA700FDC9B49D5A82BBF1550187930D0A82FEB48
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3imzX4/yX/l/en_US/UjFiliATh-l.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometLogInHiddenInputs_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"value",storageKey:null}];return{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometLogInHiddenInputs_data",selections:[{alias:null,args:null,kind:"ScalarField",name:"prefill_contactpoint",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"prefill_source",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"idd_user_crypted_uid",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"locale",storageKey:null},{alias:null,args:null,concreteType:"LoginNameValue",kind:"LinkedField",name:"lsd",plural:!1,selections:a,storageKey:null},{alias:null,args:null,concreteType:"LoginNameValue",kind:"LinkedField",name:"jazoest",plural:!1,selections:a,storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"login_source

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with no line terminators
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	5.067077095034939
Encrypted:	false
SSDEEP:	3:MM+LzNIUAR+3KWKGIjHtsCJh+EIJR43Q1XlWKGISSsCJh+EIJR+5SoCWY:UpARmK+KHtN4RUeXl+zS4R0SX
MD5:	ACB76DA5E7BCA1DB0110637E9929174F
SHA1:	58B0561EBC6387EEFDF17ACF5BEADB73BA3D577D
SHA-256:	06C0EBF943AA80C73EED3984E1E399C3D3C82F14DA406265E6AAAF1F0A40D6C7
SHA-512:	A15EF9E31C7A476A4DDE3719D8DAC423561C256B376853D3B43E3B42449EBEE9D235ECB310447AECBE9E77F413E8336E67165AF64645F33C1F54F1426436C83A
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/portals/_default/skins/customizable/css/gg-fixed-width-sidebar.min.css?cdv=158
Preview:	.@media(min-width:768px) and (max-width:979px){.fundraisingSignupTextDiv{float:none;clear:both;max-width:100%}.fundraisingSignupImageDiv{float:none;clear:both;max-width:100%;margin-right:0}}

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32988
Entropy (8bit):	3.418914174938565
Encrypted:	false
SSDEEP:	192:Vt4NWWCt2D1vuIZMUZYJfuAiLx5yaHVJPzVUpZmweLg:kUHtyu8o5cHVBBUuw8
MD5:	698CACBD6425CBD82C0F33C203D5F8A8
SHA1:	EFDC18316BA3970312D99D39F9D8CAC03486BC33
SHA-256:	1636263A397C0270062F251EF13B8702F3DD1A04AFCB8B261CC0B6C21C37B31C
SHA-512:	AB785818253777DC56987B067F0224A61520B303EA827F44A4FE466F8E312155B7AA671BA938975B3D0D1AFF32395F2BA2A5CA5B1062095B33E28C366E7208BF
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/favicon.ico
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ....................................................................................................................................!...6...K...\...h...o...n...h...^...L...9...#................................................................................................................................................................................................... ...Y...................................................................a...&...........................................................................................................................................................................Y...........................................................................................b......................................................................................................................................................a....w..............................................

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8724
Entropy (8bit):	6.79038236277243
Encrypted:	false
SSDEEP:	192:/itgWO5VcGhhnFZHjbCuTu3rNvxfzP3VyuWyshlnrlqRi:/ANeBFVKZxfMu0lMi
MD5:	2993755C7C7A44E573104124DC060F3C
SHA1:	A10CFFAA067B8FB82C5B084F08721950693474A0
SHA-256:	866248FB3F84481E21A19D0E2D4D5DF20EAADA6C5E5934B3F4FC39879A15A4BF
SHA-512:	746F07C0199702844AD7DA949D12BD8170E98A665DE7F89FC22EABCB3FD3F0DBEFDE65AB9E035F04DC861BEA186397B23548C8DB862E876E903819304CFCBAAA
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. ...................4C..4C..@@..pB..............................4C..4Cm.....................................................................................................................................................Adobe.d........................................................................................................a..!Q..1A"q.2R....#3B..CSbr............................!1.aAQ............?....$}(.....5{....pcGW.A.?...Q....h..%...8..M!...j......#.'.{S... \|....a.w..O.(....Pn..=..o....[wg.....^6p..Yi.....73OC.V.Kx..4..c.3..E[j..............$....`....&.u)b.o..L9P"....yn..eE...N..........m...Kd...Zvl.;"....S8.oD.....S...Q...-.R#...B..-.&e.lS..v=G.M5....&.....i.G.0.mD...X%.X%....../.V.V..%.b....M.....7.YO+9."......+..Y....L.Tj.K.ln..R...,C.......".#ul...e..P...Z...N.=..X.n.Q2....M.......X..$.T.......i.5!..z..+Q.p.......1BYF(K).........K.1..0..j..n....o_.h..MOE...........u..X,...M&.p.JkK.....cU..........D..>..h.5.h.]:..

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2], progressive, precision 8, 320x213, components 3
Category:	dropped
Size (bytes):	3518
Entropy (8bit):	7.304018105846751
Encrypted:	false
SSDEEP:	48:ZnzfQrc2iWdSEZCDZCdNVWiAsEiHUBReFaxUPMhy1TEmiklMZ/Zcdd7ojIPB4V+Q:ZzIrMQdWbsN0nW+1hfhcXo8pY+Q
MD5:	29709A654FFA695E96F246B321132974
SHA1:	FC71AB954064FD0FC99809AF13E9F23332304930
SHA-256:	44A09F1B80EB9FDC6EAA932B5ACD45554FF5FA26420E7D9FD63362E0428B3376
SHA-512:	024BE29411E236DDA82A70BA32396274F001AC23C59424D35C4889F039740800AD1834C5478CBD1AD6AF7E96ABF86E389F02BED5D5618A3259EAF162B2FE7E1B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............DExif..MM........;.........&...........4....Sean Airhart... NBBJ.....http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:Marked="True">. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default">All Rights Reserved</rdf:li>. </rdf:Alt>. </xmpRights:UsageTerms>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........P..Sean Airhart..t... NBBJ..(.bFBMD0a000aac0300005c0600000c07000053070000a9070000d307000024090000220a00008c0a0000260b0000be0d0000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........@..".............................................................................=~q4..5BhCV....i.h..C.Q.%.Nw.g..Y.;c..Z...

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.400437044194083
Encrypted:	false
SSDEEP:	3:3FHRkXE+TNWxAJza3WxEhxPjJW9y:neE+TNWxA9AWxEb9W0
MD5:	6058A36552E295E064F3835A7D600938
SHA1:	A468FE0E913018CBE639C34AB9594050B90E7E49
SHA-256:	6A625C2D0E272D4FC421AF21D12A00905DB902BF48B714BED4A7B6A4E9F4D55F
SHA-512:	2D11FA886D8852EAB731DA7EB451731FB147A2B1A46FE47B9A5D6D2F5BBEBB1D8BBA6B84D96CF74BE3B109EAE9079BB9D1A3281A2426C6CE441E2F9287084594
Malicious:	false
Reputation:	low
URL:	https://overlakehf.ejoinme.org/DesktopModules/AESOPEventLanding/module.css?cdv=158
Preview:	./* bootstrap definitions needed in non-bootstrap skins/..../ GG DNN Forms */....

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	202907
Entropy (8bit):	5.419087163702532
Encrypted:	false
SSDEEP:	3072:FMeOJVIZ4g5KLjqkaB7mTbTKOPV4HAsEz6kHtfBgB8Tb:+GGBPb
MD5:	526A98EBDFD72A177D3D5F665D387BB4
SHA1:	96EE474FF7562DFD21FE4560F5235C5A02F6C082
SHA-256:	8F7AB9466C4DD441B872890079F8ED78617188D6D0482D3802BC86634479BE1C
SHA-512:	AB91C7B81A5E0079E75908B0DB8C70478197AE162FFEE8F92966D9F81F0C25300C9B23E88E9EEDB99AC3E34F24F6DF45B54D29F3F3EB7DB460EB00EF53313953
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/bundle.UserProfile.10f22bba.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.UserProfile"],{29521:e=>{e.exports={queryId:"EvbTkPDT-xQCfupPu0rWMA",operationName:"TweetStats",operationType:"query",metadata:{featureSwitches:["profile_foundations_tweet_stats_enabled","profile_foundations_tweet_stats_tweet_frequency"],fieldToggles:[]}}},37212:(e,n,o)=>{var l={"./IconAccessibilityAlt.js":[39943,"icons/IconAccessibilityAlt-js"],"./IconAccessibilityCircle.js":[42683,"icons/IconAccessibilityCircle-js"],"./IconAccount.js":[2475,"icons/IconAccount-js"],"./IconAccountNFT.js":[20906,"icons/IconAccountNFT-js"],"./IconAccountsStroke.js":[75215,"icons/IconAccountsStroke-js"],"./IconActivity.js":[6498,"icons/IconActivity-js"],"./IconAlerts.js":[49932,"icons/IconAlerts-js"],"./IconAlignCenter.js":[55753,"icons/IconAlignCenter-js"],"./IconAlignLeft.js":[53667,"icons/IconAlignLeft-js"],"./IconAlignRight.js":[5578,"icons/IconAlignRight-js"],"./IconAltPill.js":[72293,"icons/IconAlt

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.699621597454565
Encrypted:	false
SSDEEP:	6:6v/lhPkjl/Mmw3gwYFE+/2MpWI1BhOsvs36SCYVyecdQjljp:6v/7Il/MwwYh2zI1XOeWTNVyeTZN
MD5:	A1E5F333AD092F16905FC1E60D404729
SHA1:	6FD7E3A35CA3AAD1BE2B46E7E69866110719EAE4
SHA-256:	4A0CF97FCD185F5DEABED3C6F3ED7991B241E3E6EE2BA67AE20589449A60D19F
SHA-512:	1E8C4CE386612D07B844CB84C72C68837B9570BE56F7280BF828D0D5D052358921CCBE844409E33EA58F49F8865D8F8C112A3920C2CD73FE592715C30C5C264B
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/4PEEs7qlhJk.png
Preview:	.PNG........IHDR................>...0PLTEGpL.............................................%L.9....tRNS...PU.....J..K.l....yIDAT.[c```....*...N..@..Z.....L{..3.......$....d.. ....c~e.)..P.$7.......@.'......V.f~.k.3....3......l...(p@v..#......8W..g.-)....IEND.B`.

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	6884
Entropy (8bit):	7.866365566516459
Encrypted:	false
SSDEEP:	192:1X90RrsEqXuw4ekcZmxyjCWa4logpV24aQSvH3Mg:16AEqXuwXZb2Wa4TDG3H
MD5:	4DBA8EF0476FB3B8B2D5CCF5E39A9104
SHA1:	07AD520020E9B66331F4D6C77F16B94C955EB5A9
SHA-256:	C492C346EB6087B44DCB02042D7B8F15F93FCEE765306930326F09397AB49EC4
SHA-512:	CFA82303EC0865E327F32043237200AB828C27EBC1B82094BE1471DBDAE6332C7868902676353BBB7F04C2B863D4ABBC742727148043B804D484DF1C0998E6B8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000380300006c060000f6060000ab0700005c0b00004c100000c91000006e1100001c120000e41a0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................9......j......:!..A........\=C"X...f%."P%..L..5..X.N.........@.;..A$T.Yz..).........Xy\|...c.M..d...[....;............n.7.H.fY.....b5+.#.1.......?W..Mo<2...\..k.~,.Z........7..X...SSq'.<su.1U....gk........rD.n.Iu.&Rm/1..YU........^.v6u./G.Ld.......Kk[..[.T3u...i$,5ZK..l.E..B.#....../......-.-.y.YD-.4.6`....]-..rkp.]..QM=9rcq.....R....nF....Ts7.&.._.<...LS.#..b...g..Yy.0I......*..........................!#.." 23.$01AB...........&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.2d.&L.........y.'6.92d.?...-2.nj.v..x=.^..?O.y.......y..7.....y..G&.....

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20303)
Category:	downloaded
Size (bytes):	278291
Entropy (8bit):	5.408718211408449
Encrypted:	false
SSDEEP:	1536:fPHaQFjcTxlJ/yfJkmH9OD47Yzc4HEBuP2j5yeOkFCbPIO6I3uclVuYgyi3i8/KK:+sxahP2j5cnLoxeVGROa
MD5:	388490C03C7779E07DCB2580EEBFEEC2
SHA1:	ED0F2318C04315B34F5EFBE7FCBB80A09EC35C1A
SHA-256:	FD16F1E401275AA0ECE78BBF12E7095CF753E3D17E0327E9CB2F845D3ECAD449
SHA-512:	408A05FFA57A2B79228E7ED4B4CAF819157CFC041BBE4580768C68F85995FD179D372A18FC42DA9F557A372DE3D6F1B2ED7A40F83744C3C3B82BB1CA85E424EC
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/G3Nm7rYDpD0.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=\302\251 Copyright 2021 Benjamin Benschneider All Rights Reserved], progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	5664
Entropy (8bit):	7.81683257177889
Encrypted:	false
SSDEEP:	96:V7R3bf7QUnlUuLtunt6qzrEdhbzaEul2abKQtkTc6UjKhptALW3:n3bMuLhwrEnbzOV5eP+2jAy
MD5:	A2C152F6ACD47BFBE694803B52A140D3
SHA1:	7D7FD0C0769850B8F7DB1EA844CC28C37F998648
SHA-256:	F9D15E205A52C829C8068EF15D3CFD56C242D0B2F0CA0654F4FB6E2A5F49FBA4
SHA-512:	2C7DBC4B8BDA51D29350C91E47275480545EEA6F6665B40BD3A321CBFB5E892F796182505C78F808313924CF84FCE3DA0FF19EF901CADDC075BF8BB769C6B87E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............^Exif..MM..............<......... Copyright 2021 Benjamin Benschneider All Rights Reserved.....Photoshop 3.0.8BIM..........t.;. Copyright 2021 Benjamin Benschneider All Rights Reserved..U..Owner..P..Benjamin Benschneider..(.bFBMD0a000a31020000c9030000f60500009206000041070000a9090000780d0000f20d0000b80e0000900f000020160000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................................:.5u#p......".eTb...i.0.pJ..~r.<@9B7u.Aed.c7".6_.^.".....>..3MI.X..T...(.\| ....[u.mD.x.Qp.O#....%..r..].....H'....gA-L.....h\~-...e....x.....3l.//WCaz.h..#..Io..\|..=..yq..5.....-........R\.R.#.....t....N..s.UZ...;..y..W.s.....l.....9.;F.4=:T.....j.9...4..-).H.&.Mo....c..-r4..9.Y...If..yk.S2\.?E....W.J......#je.^k..(.......x?...(.......................... !#0."1$23@A................>@@<..~...G.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15938)
Category:	downloaded
Size (bytes):	16161
Entropy (8bit):	5.488945260999894
Encrypted:	false
SSDEEP:	384:IXzoVv19L/yofQRv1zVK5pKz/3HGltNV5FTCaGBk62KtEr6G62RFMt:m4v192ofQRv1zY5pKz/303CtB+JFMt
MD5:	51EB10E7A5C6347E7C8A901E85D677FB
SHA1:	F2C27CF38EFF2AEFA843CE1467F8814730669BED
SHA-256:	89616362E9B7B550DEFB619B1DEAFD1D741E744F0F8EFBA4B73EC8FE22DA7D38
SHA-512:	5A3950075AFC0D5853F1A6079AE9065043F9580E3A926DB1F24A95AA46FD5BFC2FAF58C7B9A4C9F36A41FE076CBDF0D7776F51624A07881059DC25C896E6852E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.DirectMe.c4756eaa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.DirectMe"],{84515:(e,t,r)=>{r.d(t,{E5:()=>c,lk:()=>d});r(6886);var n=r(53223),a=r(22167),i=r(60805);const s={entries:{},entryIdsByConversationId:{},reactionsByMessageId:{}},o=(e=[],t={})=>e.map((e=>({...e,user:(0,i.b)(t[e.user_id])\|\|{created_at:"",description:"",entities:{},followed_by:!1,followers_count:0,following:!1,friends_count:0,id:parseInt(e.user_id,10),id_str:e.user_id,name:"",profile_image_url_https:"",protected:!1,screen_name:"",verified:!1}})));function l(e,t){const{entries:r,entryIdsByConversationId:n}=t;return(n[e]\|\|[]).map((e=>r[e]&&r[e].data)).filter(Boolean)}const c=(e,t=s,r)=>{const{conversation_id:n,participants:a,...i}=e;return{conversation_id:n,...i,entries:t.entryIdsByConversationId[n]\|\|[],participants:o(a,r)}},d=(e,t,r)=>{const{conversation_id:s,participants

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	543
Entropy (8bit):	5.501580638840677
Encrypted:	false
SSDEEP:	6:6v/lhPE0EswQ9SvnkkFOShjVHAcPicZzEQ6zgiRlWCsPBG8drm9jB3tbHup:6v/7MJs/9Svnk8OUjVgO5GnR9sPBEBhc
MD5:	8C6D3D65395902083479FD327F86A1D7
SHA1:	0667B3AE1799ACB8455631AEB99CEF56DDD43698
SHA-256:	DA8B7678427D3159D0F68EC15EC42B3536ED1D0085E94AFFBB1FD05C600B7420
SHA-512:	3A1577E6DF18C7A5257D3F2E979BEECBF2924B70DCDF01573280D942A1699FA7FF216527A9B6305A5B1073257F27C0D9FD2E5E47A556A37C9707716493D418AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE.......................................................................................................................................................................................Z.C...<tRNS......C.$..0 ..".<........B.......i.n.~.....{..........o...]....IDATx^E...0.D7q.N!....[{/...u52...g.#YP.82&.Sx:.O$...g4y....a.?.2V...i.2)+.\7a.......}.Dg.....0..3..Q...e,.....*........ys.`J....l..B.W}.........-..;......<1....[~...A7.#....=q!..........t-F6p.......y.vq..Zu... ........IEND.B`.

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 1343, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8336
Entropy (8bit):	7.809937138777953
Encrypted:	false
SSDEEP:	192:gjtarBQWhIcwo85icrAZrLwS1tJPnh0AqhUDEL4NzO:DrBQWhIcwoAIvhnqhl2zO
MD5:	93CBB501B0B758DD90964C56D16E1F95
SHA1:	45C5FCD436DEA716B61DCA77A721E63CB01C420A
SHA-256:	957819BCE755D7D8871110F870A0AAFB0E64A26667E64F23D433C11423A63C30
SHA-512:	D2F8326DA50958CF75C3489DB39CE6B04EE65F625CB93AC0E4A5E69A38A746447B97B336D22C40C8595EEDF3B8186E37BF42ACDA362E078EC6AB17CC92B60580
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/RAS_7oBOZt9.png
Preview:	.PNG........IHDR.......?.....p.......PLTEGpL...........................................................................bhp...................................................................................................................................................agq...........................@......................................agp...`hp...............agp.........agp......agq...............`bp......agq...`ep...`fp......agq.........bfp..............`gp?..agqagq...agq...>..>.....`hpagp...agq..?..?..>..>..@....agqagpagqagq.........@..?..>..>..?..@..agq...agqagp..agq.............>..>.....agqagq......agqagqagqagqagq............agq....?..>.....>...........@...........agq..................>..agqagq>..>..@..agq...>........agqagq...`fp@........agq......agpagq@..>......`....tRNS..~`.0... @....p.^...P.....n.........+#..N...{..jD......Z..I.x.g.&..(..\..8>c........v.TW<...sL. 4...2.R.6.........B...0~OO....pp.0?..^~@....]@.......Q.,..).O..^A../ .(..w........

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13921)
Category:	downloaded
Size (bytes):	14092
Entropy (8bit):	5.354878867709529
Encrypted:	false
SSDEEP:	384:171v9fZGawfGlaydGFWkr0pKjjeiNuHYh2d:171vyawfGlaydGFWkr0pK/eiNuHYh2d
MD5:	8B25D3AE301040B72BC8221EBED73931
SHA1:	C03874A50C09287B3756B7A2156F28EABA6D31EE
SHA-256:	1E9B3A9B121404EAF0FDD5FBD79E6A86097E8B299D41D6499CE725705084C58A
SHA-512:	8843379A5F63521D0086E6B6F2BFFB6F2C98AF4B721C5FFCDBCC969283EDAA4F3F45631820CEA2FDA43C3950F3C51A14EA656FBCB39BDB2A418621C512A91F7D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.JobSearch~bundle.UserJobs~loader.WideLayout.21f9b23a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.JobSearch~bundle.UserJobs~loader.WideLayout","bundle.AudioSpaceDetail"],{3631:(e,l,a)=>{a.d(l,{Z:()=>F});var n=a(2784),t=a(25686),i=a(77660),r=a.n(i),s=a(73186),o=a(8716),c=a(75609),u=(a(36728),a(7267)),d=a(82392),m=a(400),y=a(79439),g=a(74062),b=a(81142),p=a(7093),k=a(83710),f=a(16411),v=a(19524);const S=({fallbackName:e,user:l})=>{const a=r()(v.fR,l);var i;return a&&a.legacy&&a.legacy.name&&a.legacy.screen_name?n.createElement(d.ZP,{size:"subtext2",style:_.userName},n.createElement(t.Z,{style:_.name},n.createElement(d.ZP,{numberOfLines:1},a.legacy.name),n.createElement(m.Z,{isVerified:a.legacy.verified,verifiedType:null!=(i=a.legacy.verified_type)?i:void 0})),n.createElement(y.Z,{screenName:a.legacy.screen_name,size:"subtext2"})):e?n.createElement(d.ZP,{size:"subtext2",weight:"normal"},e):null},_=s.default.create((e=>({listContainer:{paddingVertical:e.spaces.spac

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10791)
Category:	downloaded
Size (bytes):	10979
Entropy (8bit):	5.315425865757939
Encrypted:	false
SSDEEP:	192:cab2Coq+nkQOF1bsoq+n1RcpMlP8hOBHbNjorigPph6aSktMlVuFDFBCZ5EUoW:cab/oq+nkrbsoq+n1RcpMSsBHpjo+gx+
MD5:	E0D284224093F959A3553D604EB57CC1
SHA1:	BA489062C0B68E6A23EEFF74A86B13AE4F6579DF
SHA-256:	E3C37E3784E75C5AE20008EEB819539D4AA18B112B8ECE242284DC2AC7901C51
SHA-512:	02CAC32A14B6CC9F8BBBD0AE6B085E965D43CEFA7C27923F2084A6D08884DA4036A63DB549F6CB5D1894CDF6091F9762AF6BCCEE73D0AD1238B2442F5824B22D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.44818d8a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch","icons/IconChevronDown-js","icons/IconChevronUp-js"],{44910:(e,l,a)=>{a.d(l,{ZP:()=>B,V7:()=>W});a(6886),a(36728);var n,i,t,s,r,o,u,d,c,g,p={fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"DelegatedAccountListQuery",selections:[{alias:null,args:n=[{kind:"Literal",name:"s",value:"4bf0"}],concreteType:"Viewer",kind:"LinkedField",name:"viewer_v2",plural:!1,selections:[{alias:null,args:i=[{kind:"Literal",name:"status",value:"Accepted"}],concreteType:"DelegationGroup",kind:"LinkedField",name:"list_delegation_groups",plural:!0,selections:[{alias:"handle",args:null,concreteType:"UserResults",kind:"LinkedField",name:"handle_results",plural:!1,selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"result",plural:!1,selections:[t={alias:null,args:null,kind:"ScalarField",n

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 154x155, components 3
Category:	dropped
Size (bytes):	6342
Entropy (8bit):	7.863189182940164
Encrypted:	false
SSDEEP:	96:xD5E/R0t5RxulRWdkwo/G4DvMD2+PnCrilvaFMiuMxNlPgX7avqYjvwaP:xQR0T7gRaBW62+Pnm7FLNxvqYx
MD5:	D07399C2492E1A46C093A4B13CCA7C68
SHA1:	6CC981C425D7FED19BFB94068574D9D5EB0BFEE3
SHA-256:	1DF6B77FA2191A4294BAB40578B524787FF19650968F3E16BCD951CBC8AC09A1
SHA-512:	FEF3A9BD945AD24789ECA4D1542953C8BF08A225C8454BFA66EF1A29B1113E6CDE22E7473086953CAF679EC17B3E527A86B85E4A69D963F881BF3837339D81BD
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000055030000b9060000910700003f080000540b0000a30f0000211000000a110000e1110000c6180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................m1..^..0.9....#C$........g/C.._.".D.C...zt.!uq....E...H.;...VL#.sK.X..c.zA.....6.s..ua.l..3..b-..C.M..."B0Z.'..+.c...N@.8}.$..zc..^q.k.. c.........Z.2[....Cw.v.....(.o.....\...Hw.N..$wjm..w...W..0.[.J.,YIt.!...Bd.q.o...~.Fg..e....=..RD...J.m....z....S...,.=.7b....jB.tp4.0....FaM.+Lk...l2...)..1.....k.....v._..F];Dc.. ..j..]%r......1\|...l...8OYS0;.H.6.b-}.PT.h...7.~<,.....@i_.?.......a....8.f...H..r...+tw...*..........................!."1. #.245$3A..............l..:..u{;.j..b.a.V,.8...].no..."..S.n.3F..z..8..(..R......s......g.....".C.......`Q..M}._.o<.O........n.NG...Q5.M@<..c..osE.b..

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27134)
Category:	downloaded
Size (bytes):	27324
Entropy (8bit):	5.239897899028527
Encrypted:	false
SSDEEP:	768:M8TG3T7z9kmT8Ad5f8B7/qh/sLDBxqjQctS77W/AQU3/RwgxEBVnHyLLky/JAyJz:fUA12lAnf24
MD5:	E1DF1DB31E9DBBDB7C77C1398771F10D
SHA1:	20A5CC6866C510DF9497BE6CBF9F381DB01E7991
SHA-256:	10A2758E63906756324BBDFE454553932518DA86CE23E30F6FE01053D1D0E669
SHA-512:	33DE02CBA0D072ED5E6E7BC0378EA077BD2FAF9E7FAC732F5190B0237323EDD3D165C76E0F843358CC19195400963702460EBC94BBFA894A0982EE2D2ED766BD
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.61deee6a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile"],{90269:(e,l,a)=>{a.d(l,{Z:()=>Ie});var n={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileSpotlight_profileSpotlight",selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{kind:"InlineFragment",selections:[{args:null,kind:"FragmentSpread",name:"LocationSpotlight_aboutModule"}],type:"AboutModule",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,kind:"FragmentSpread",name:"ShopSpotlight_shopModule"}],type:"ShopModule",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,kind:"FragmentSpread",name:"CommunitiesSpotlight_communitiesModule"}],type:"CommunitiesModule",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,kind:"FragmentSpread",name:"JobSpotlight_jobsModule"}],type:"JobsModule",abstractKey:null}],type:"Pro

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	64756
Entropy (8bit):	5.225827032715958
Encrypted:	false
SSDEEP:	768:OmzGTKHFfqqFgt1qNy/eGvs6jfsrP0bz8JpvegbKUAWKwIM:jFq/noy/ekfIY8JF6S
MD5:	679A3A4A17037D73A8C5289E662E71BE
SHA1:	9C67A9F0AE800CD4758FED2C9C108C6CB89B66FA
SHA-256:	0E7D78CFE6AD5ABCC9E7AEABE78DE85A2BB8DA203CFB48C83C1015F3FFA873A8
SHA-512:	832D7841382B699B6C98F0C1B1AEED00C15A8EAFE912D530DBB4C5A2E686315357BE323159F1AEA8DE77B1389B681B98FC2F7F94E91BFB31D7BA66DCD9858A77
Malicious:	false
Reputation:	low
Preview:	....KEYF..$... .........................8..........B...B...?..pB............RandomSubdocument...................B#.............B...B...?..pB.................~..Tk...X...D..d1..........N#..............\...`...d.......\|........... ...8...................`...<............4.=...>W..?..'?..:?............................~..................?..?.......>...................?..?.....[.=..>..................a?UUU?.......?...................?"......>...................?0....[.=..><......=...=H...`..=`..=T...\..=\..=`......=...=l.....=..=x......=...=.......B.......B..............pB..pB........................ ...........D....... ...8...................`...<.........<N.=4..>.[.?.c+?N.>?..........=....5..>5...................8......?..?R......>............X......?..?d.....>..>R...........\|...UUU?UUU?.......?r..................?.......>...................?......>..>...............?...?............ ...........p.........<N.=4..>............<... ...................0......C`...............

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	373967
Entropy (8bit):	5.462490664117143
Encrypted:	false
SSDEEP:	6144:l2rlbxeMIepiCa9+vYoPZUT34os0+ic06sedj:MJbxvl5JZUlc0Kj
MD5:	21EE8BA54EF2CAAF710A9850205A6B35
SHA1:	9F63A83BAE6E8E34E1F4EF36F005106E63FC409D
SHA-256:	28BC9A20930814CD91DA5CA8E82955DCE7520E8D68B4A6944BFDB759665BA8A7
SHA-512:	E9DF4BFA7A84CFB20A55C0F0F46AFC6B786F8D896CB74992627CD6A283B6EC2B1735BC037551C7911F907513C3643DA8A0D4E78B409610406DAFFA934A0AE68C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa.2264e83a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa","icons/IconAtBold-js","icons/IconBoldCompact-js","icons/IconBookmarkCollectionsPlusStroke-js","icons/IconBookmarkPlusStroke-js","icons/IconBulletedList-js","icons/IconDrafts-js","icons/IconErrorCircle-js","icons/IconEye-js","icons/IconHeartStroke-js","icons/IconItalic-js","icons/IconNotificationsCircleFill-js","icons/IconNumberedList-js","icons/IconPersonCheckmark-js","icons/IconPersonHeart-js","icons/IconQuoteStroke-js","icons/IconStrikethrough-js"],{19458:e=>{e.exports={queryId:"88Bu08U2ddaVVjKmmXjVYg",operationName:"articleNudgeDomains",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},16201:e=>{e.exports={queryId:"8HoabOvl7jl9IC1Aixj-vg",operationName:"BookmarkFolderTimeline",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	482
Entropy (8bit):	6.902647108175344
Encrypted:	false
SSDEEP:	12:6v/7EU+7J3t7FbfWz3MLWkCM8ss4PMgzS+BxEMNJS:8Y35b+TMLhVPRzjBxEMNQ
MD5:	7C956B4C226E9440C1CB1F0E9226882A
SHA1:	BC65AF34B298B7AB11A50E8A35BCE0DD24469683
SHA-256:	9D8D1E43387BF1D11CBECB080DE713A1484D717CCD5F485800FE1E0913A1FDA2
SHA-512:	A9276095CADC192B6340CC8F1715CB5E1D96FC5A074AB7806E121FFBA8C2A962374BC23B76AD4C63357238AFBF1F130788A2D8C4B8E81A7D82D99A2E0FB675E6
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yW/r/n3z98p2y3lw.png
Preview:	.PNG........IHDR.............'......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....tIME...............bKGD.........IDATx...NBa.....`.....l........;..x.47..B.P...........gg...3M..-._.>..W.3f.Z-....F...3.......o.hR".J....k..dfX.%.)I...+F.). A.G..\.....+n..n.8....W..uX.BZUtK..K...}.".../~.J...W5.!5.3<E_h.!.w:.UG....L..&.'.E..H.....4.....n[...1'...%tEXtdate:create.2019-02-26T23:26:08-08:00.......%tEXtdate:modify.2019-02-26T23:26:08-08:00........IEND.B`.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	32856
Entropy (8bit):	6.370524623339198
Encrypted:	false
SSDEEP:	768:As/PNPiPQTHCiSbVESUnSTbgtK2RFozpMDWeFDZeNX7Xi:As/PNPiPraNSvgmIWoely
MD5:	939340C7A209B4CA46615C8200F6610D
SHA1:	9DEE563165182C679C2EB808966DCA25AA09B006
SHA-256:	43078647F3BD86002CC2D165F4439181AFA7D53C7B271CF5A02071CC25D6909B
SHA-512:	743AF1C6630EAC427508C015B90B86FF3AD2C900DF96EE71396955B0FB6473EFFDC8B9B01DA19019BFEC8F2C12A2D8B5B33D744099778A089EC0898B44658CFE
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............<(....4C..4Cffv@..pB........4.................4C..4C......................................................................................................................................................Adobe.d.........................................................................................................a..!Q.1A."q..#2r...$3BR...C....%Dbc............................!1QAaq..."2R......#3Bbr..............?...Z..dcI.1....D.i"F4.$...Q ..7I+..#..? .B....[<<.....ZH....i.Zt.HT....&.....\|2.D..t./..w#?.h....O..E.../.X..C....w..J.r).X..2..b.G...Z....:.iP.bwG0...tK..e-'..d.....O.....>.K..;LMg..?P..'...f. t.J...k.'i..\|.-.....u._.g.+...1...CU.p...I..p....~?.y\|.h.S..c.)..K.1....D.i"F4.#.H..$I....W...cI.1....D..q.h.....$I......{.0@z...\7...B...6...8....o.D#.........\z.i.U1Yu.w52......+..cT........@. ..@JX..).&..)G..RF.A...UH...T5....y..o....>......^d0.\....\.u...VG.'..X.U...N..4..i"F4.#.H..$I...c.r...#.."F=.D.i.g...../

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3297)
Category:	downloaded
Size (bytes):	3458
Entropy (8bit):	5.1585040768292805
Encrypted:	false
SSDEEP:	48:iIO2N0ZTdxXDFRDIMuMEfJStRfVDvr8KHH3pe8+jRNqiQYazcl4XIWmIo:y2N0ZTdxh1YRStRf9x38DREiQY3lx+o
MD5:	DDD8BF91C88001B317F194A3A5176FC0
SHA1:	56908C0E5C18AE2EA9F1067B04CBAEDC7D647EA1
SHA-256:	08FD94EF4AE226D0DDFF6C070CD59261D1FCC8884321B6CE1D1043B6B537652D
SHA-512:	07B4CA81B3F6D6B4A5F9E81DC6ADED357E73F2A790F86AE3DD3B59A40A3A8BC4C5D4F496879E1BB625BCE2E32A29911422B0A5674DE6E594BB032740CAC7D426
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsSuperFollows~bundle.Ocf.85a878ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsSuperFollows~bundle.Ocf"],{72948:(e,r,o)=>{o.d(r,{Z:()=>C});var a=o(7896),t=o(2784),l=o(24921),i=o(25686),c=o(7066),s=o(1206),n=o(82392),d=o(35094),b=o(79866),p=o(11839),u=o(54484),g=o(73186);const h=g.default.create((e=>({root:{padding:e.spaces.space4,borderRadius:e.borderRadii.large,overflow:"hidden"},base:{flexDirection:"row",justifyContent:"space-between",flexGrow:1},backgroundColor:{backgroundColor:e.colors.cellBackground},border:{borderRadius:e.borderRadii.large,borderWidth:e.borderWidths.medium,borderColor:e.colors.transparent},borderColor:{borderColor:e.colors.borderColor},activeBorder:{borderColor:e.colors.blue500},containerClicked:{backgroundColor:e.colors.primary},interactive:{cursor:"pointer"},radioBackground:{borderRadius:e.borderRadii.infinite,margin:`-${e.spaces.space8}`,padding:e.spaces.space8},textContainer:{margin:e.spaces.space12,flexSh

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 154x155, components 3
Category:	downloaded
Size (bytes):	6342
Entropy (8bit):	7.863189182940164
Encrypted:	false
SSDEEP:	96:xD5E/R0t5RxulRWdkwo/G4DvMD2+PnCrilvaFMiuMxNlPgX7avqYjvwaP:xQR0T7gRaBW62+Pnm7FLNxvqYx
MD5:	D07399C2492E1A46C093A4B13CCA7C68
SHA1:	6CC981C425D7FED19BFB94068574D9D5EB0BFEE3
SHA-256:	1DF6B77FA2191A4294BAB40578B524787FF19650968F3E16BCD951CBC8AC09A1
SHA-512:	FEF3A9BD945AD24789ECA4D1542953C8BF08A225C8454BFA66EF1A29B1113E6CDE22E7473086953CAF679EC17B3E527A86B85E4A69D963F881BF3837339D81BD
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/295727862_414160250748989_1177096163670263996_n.png?stp=c71.0.154.155a_dst-jpg_p296x100&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=j5dhy87QTmwAb63QD6F&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCt0JaFs05idTJ4P5xhITxM_7cO2enhon94CN-mtzA_vw&oe=662E7A1F
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000055030000b9060000910700003f080000540b0000a30f0000211000000a110000e1110000c6180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................m1..^..0.9....#C$........g/C.._.".D.C...zt.!uq....E...H.;...VL#.sK.X..c.zA.....6.s..ua.l..3..b-..C.M..."B0Z.'..+.c...N@.8}.$..zc..^q.k.. c.........Z.2[....Cw.v.....(.o.....\...Hw.N..$wjm..w...W..0.[.J.,YIt.!...Bd.q.o...~.Fg..e....=..RD...J.m....z....S...,.=.7b....jB.tp4.0....FaM.+Lk...l2...)..1.....k.....v._..F];Dc.. ..j..]%r......1\|...l...8OYS0;.H.6.b-}.PT.h...7.~<,.....@i_.?.......a....8.f...H..r...+tw...*..........................!."1. #.245$3A..............l..:..u{;.j..b.a.V,.8...].no..."..S.n.3F..z..8..(..R......s......g.....".C.......`Q..M}._.o<.O........n.NG...Q5.M@<..c..osE.b..

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2], progressive, precision 8, 960x640, components 3
Category:	dropped
Size (bytes):	153045
Entropy (8bit):	7.991071804669953
Encrypted:	true
SSDEEP:	3072:opnyAZxh3d9fmBlPYKZtDQS7m4Swr6Fw5RCaw205Dc/uTMLadsFscq6Ghv:uySHQlZtvmHFwqT205DcEdPc3Q
MD5:	6A4D49BFB63D21292609FDD05047DA14
SHA1:	203BE2D714E9ADE6AA06C33688B7A60DE8E37714
SHA-256:	107EE0681DBA5F2FDB2F386FE81D07B3EEA5705B6C60CDD7A2690C49AEE86F72
SHA-512:	3E511450EBE812314ADDED53FDCA46086198619B45CBDFDF09EEA18CF1785074887CC74395CBFD504230860A852264FDEF691AC8FE9C725A220D709A3A95CE93
Malicious:	false
Reputation:	low
Preview:	......JFIF.............DExif..MM........;.........&...........4....Sean Airhart... NBBJ.....http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:Marked="True">. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default">All Rights Reserved</rdf:li>. </rdf:Alt>. </xmpRights:UsageTerms>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........P..Sean Airhart..t... NBBJ..(.bFBMD0a000aae0300002b280000286b0000b0740000c0850000fce30000b95e010005660100d4730100ab870100d5550200...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................~.fN...i$.....gA..2-&i.@.&....t.; wg...2

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1926)
Category:	downloaded
Size (bytes):	2149
Entropy (8bit):	5.463991423684607
Encrypted:	false
SSDEEP:	48:iIKx5QXd+JQ+jy32QsxUd3IwRkV1Oz1zBHnXkbF1Wmsx5Qa:Oyd+JDyvswCsVRw1aN
MD5:	FB24321BA23A424B4D35E34E4DACA40B
SHA1:	11B55A737A171E5DEDC93D21FEC181B8F6B38F25
SHA-256:	7190ABC13BAF911E68516C014932B5304F8F1EDF3A6046C25FC5E5C1867C95B5
SHA-512:	BCFAA8F8F4D31A66AEBD5983558B325C6CA3333C55DD979BE4B686915691D2B7CF6B7B76913A514E919195031FF0026080C8FB312150A41C87A52F731DEE96D5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home.2e978c3a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home","loader.AudioOnlyVideoPlayer"],{80065:(e,t,s)=>{s.d(t,{Z:()=>a});s(6886),s(36728);var i=s(2784),n=s(18578),o=s(2607);const c="/compose/post";class l extends i.PureComponent{constructor(...e){super(...e),this._handlePress=e=>{e.preventDefault();const{getLocationState:t,history:s}=this.props,i={pathname:c,state:t&&t()\|\|{}};s.push(i)}}render(){const{accessibilityLabel:e,icon:t,label:s,scribeComponent:l}=this.props;return i.createElement(n.Z,{accessibilityLabel:e,href:c,icon:t,label:s,onPress:this._handlePress,scribeComponent:l,testID:o.Z.tweet})}}const a=l},54296:(e,t,s)=>{s.d(t,{Z:()=>d});var i=s(2784),n=s(45184),o=s.n(n),c=s(47636),l=s(80065);const a=o().j0179e90,r=o().ee69d769({verb:""}),b=i.createElement(c.default,null),d=({getLocationState:e,history:t})=>i.createEleme

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	9848
Entropy (8bit):	7.929694040133499
Encrypted:	false
SSDEEP:	192:eWTDPXy0vqdB4er9KdmZZZ3LXo12lyzv18yQ5j9JTFnd5gd9UqW/C8:J6Bv0dmZZZ37y2QxaRy9XW//
MD5:	493A34060B915C4C93F338EAF04C5C52
SHA1:	0C9B30DC6F0377146446F3F84788FDA591F88C08
SHA-256:	3E53D833277183258455868ED837B43151299EFEF35DA645F7C8E7D8AFBDE3DE
SHA-512:	F95A3DBBE698587834027409C3443604CBC2F43F299B297E000AE6763327066B4C0776B1E431277CCDB233BB863232F5DB4D03EFCDAA76F886D35E4B2C51659E
Malicious:	false
Reputation:	low
URL:	https://scontent-sjc3-1.xx.fbcdn.net/v/t39.30808-6/434225809_986346610049172_409589886129999166_n.jpg?stp=c24.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nXzthKFyQOwAb6u1zRw&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCF-fyzT-Hv9sf9KdaPTk6XQIwFJRwMhMHQ5m4rZ5vwng&oe=662E7DF7
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100005303000083070000640800006d090000c7110000e318000066190000811a0000cc1b000078260000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................h....h.:.n.N.KK..4.....g.9(....~...$...T.e.p7.f.X9.\..6ra..._j..Nx..@n..6n../r..3n.DA...g.........9.w`B..}6P...u..t...N.....9.zR..Aw....05...]....}<l...[!p{IkI..U.Q.Gb,.>\|.1..S.7O5...T...d&.....-...+-..A&n....c..{[...]R...w?.ro.M......g<2f..D...E.'. ...,Ohy.*..@......8.k}.n....s<..... .....6H.A..1......;....vCM...>.a.F;.N...bU2>..}..........."C.7.o....,...E..j$.V9.A.J@..H.j.....@.(4....>.h.}..}k:.3M...[..B]R....'............................1.!"#3 $5..........:P..A..V"..]j..Vw.0....644+....U........S..Uu...]._`c"1....A.].&@.......I../....V...S..X\Z.o.D.a-.:......q.....y..&\.!ie..4+\|.\|.Yt

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 07:31:48.160793066 CEST	192.168.2.4	1.1.1.1	0xe7b8	Standard query (0)	r20.rs6.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:48.160943031 CEST	192.168.2.4	1.1.1.1	0x453d	Standard query (0)	r20.rs6.net	65	IN (0x0001)	false
Apr 24, 2024 07:31:49.497837067 CEST	192.168.2.4	1.1.1.1	0xa448	Standard query (0)	overlakehf.ejoinme.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:49.498259068 CEST	192.168.2.4	1.1.1.1	0x58bc	Standard query (0)	overlakehf.ejoinme.org	65	IN (0x0001)	false
Apr 24, 2024 07:31:50.524657011 CEST	192.168.2.4	1.1.1.1	0x8676	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.550862074 CEST	192.168.2.4	1.1.1.1	0x71f3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 07:31:51.818514109 CEST	192.168.2.4	1.1.1.1	0xce5a	Standard query (0)	greatergivingcontent.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:51.819196939 CEST	192.168.2.4	1.1.1.1	0x2fc	Standard query (0)	greatergivingcontent.com	65	IN (0x0001)	false
Apr 24, 2024 07:31:54.130189896 CEST	192.168.2.4	1.1.1.1	0x9ab3	Standard query (0)	greatergivingcontent.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:54.130706072 CEST	192.168.2.4	1.1.1.1	0x8afc	Standard query (0)	greatergivingcontent.com	65	IN (0x0001)	false
Apr 24, 2024 07:31:56.864402056 CEST	192.168.2.4	1.1.1.1	0x97ae	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:56.864717007 CEST	192.168.2.4	1.1.1.1	0xe795	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
Apr 24, 2024 07:31:59.954348087 CEST	192.168.2.4	1.1.1.1	0x476a	Standard query (0)	overlakehf.ejoinme.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:59.954812050 CEST	192.168.2.4	1.1.1.1	0xdf9	Standard query (0)	overlakehf.ejoinme.org	65	IN (0x0001)	false
Apr 24, 2024 07:32:19.231364012 CEST	192.168.2.4	1.1.1.1	0x2129	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:19.231800079 CEST	192.168.2.4	1.1.1.1	0x59fb	Standard query (0)	twitter.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:20.221843958 CEST	192.168.2.4	1.1.1.1	0xfa24	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.222574949 CEST	192.168.2.4	1.1.1.1	0x7aaa	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:20.223417044 CEST	192.168.2.4	1.1.1.1	0xbaf6	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.223942995 CEST	192.168.2.4	1.1.1.1	0xe7ad	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:20.388273954 CEST	192.168.2.4	1.1.1.1	0x8ade	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.388757944 CEST	192.168.2.4	1.1.1.1	0x5fe	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:20.390034914 CEST	192.168.2.4	1.1.1.1	0x5a3e	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.390630960 CEST	192.168.2.4	1.1.1.1	0xfa3d	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 24, 2024 07:32:20.545921087 CEST	192.168.2.4	1.1.1.1	0x97dc	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.546227932 CEST	192.168.2.4	1.1.1.1	0xa748	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:20.549941063 CEST	192.168.2.4	1.1.1.1	0xa4e3	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.550467968 CEST	192.168.2.4	1.1.1.1	0x1e46	Standard query (0)	api.x.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:26.654551983 CEST	192.168.2.4	1.1.1.1	0xf0f7	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:26.655004978 CEST	192.168.2.4	1.1.1.1	0x7427	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:29.047955036 CEST	192.168.2.4	1.1.1.1	0xedf7	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:29.048329115 CEST	192.168.2.4	1.1.1.1	0x12fa	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:30.109509945 CEST	192.168.2.4	1.1.1.1	0x4e42	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:30.109698057 CEST	192.168.2.4	1.1.1.1	0x5f8b	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:30.309237003 CEST	192.168.2.4	1.1.1.1	0x64bd	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:30.309586048 CEST	192.168.2.4	1.1.1.1	0x2d18	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 24, 2024 07:32:31.083293915 CEST	192.168.2.4	1.1.1.1	0xa72f	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:31.083462000 CEST	192.168.2.4	1.1.1.1	0x3728	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:37.671031952 CEST	192.168.2.4	1.1.1.1	0x5eed	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:37.671530962 CEST	192.168.2.4	1.1.1.1	0xd212	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:41.713422060 CEST	192.168.2.4	1.1.1.1	0x6fc3	Standard query (0)	appleid.cdn-apple.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:41.713578939 CEST	192.168.2.4	1.1.1.1	0x63eb	Standard query (0)	appleid.cdn-apple.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:47.312302113 CEST	192.168.2.4	1.1.1.1	0x7fe3	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:47.312577963 CEST	192.168.2.4	1.1.1.1	0x4ee7	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:49.280900002 CEST	192.168.2.4	1.1.1.1	0xff5c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:49.281114101 CEST	192.168.2.4	1.1.1.1	0x4971	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:50.856587887 CEST	192.168.2.4	1.1.1.1	0x81a0	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:50.857256889 CEST	192.168.2.4	1.1.1.1	0x2a4c	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 24, 2024 07:32:55.482902050 CEST	192.168.2.4	1.1.1.1	0x5cc0	Standard query (0)	scontent-sjc3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:55.483449936 CEST	192.168.2.4	1.1.1.1	0x4f60	Standard query (0)	scontent-sjc3-1.xx.fbcdn.net	65	IN (0x0001)	false
Apr 24, 2024 07:32:58.169290066 CEST	192.168.2.4	1.1.1.1	0xd579	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:58.169502020 CEST	192.168.2.4	1.1.1.1	0xb946	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 07:32:58.174665928 CEST	192.168.2.4	1.1.1.1	0x72b7	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:58.174818039 CEST	192.168.2.4	1.1.1.1	0xfec2	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 24, 2024 07:32:58.184572935 CEST	192.168.2.4	1.1.1.1	0xf6bc	Standard query (0)	scontent-sjc3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:58.184947014 CEST	192.168.2.4	1.1.1.1	0x8379	Standard query (0)	scontent-sjc3-1.xx.fbcdn.net	65	IN (0x0001)	false
Apr 24, 2024 07:33:01.448726892 CEST	192.168.2.4	1.1.1.1	0x4205	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:33:01.449280977 CEST	192.168.2.4	1.1.1.1	0xfd43	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Apr 24, 2024 07:33:02.251118898 CEST	192.168.2.4	1.1.1.1	0x33c1	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:33:02.251316071 CEST	192.168.2.4	1.1.1.1	0xeefb	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 07:31:48.330440044 CEST	1.1.1.1	192.168.2.4	0xe7b8	No error (0)	r20.rs6.net	rs6.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:31:48.330440044 CEST	1.1.1.1	192.168.2.4	0xe7b8	No error (0)	rs6.net		208.75.122.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:48.331578970 CEST	1.1.1.1	192.168.2.4	0x453d	No error (0)	r20.rs6.net	rs6.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:31:49.767010927 CEST	1.1.1.1	192.168.2.4	0xa448	No error (0)	overlakehf.ejoinme.org		52.137.90.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.678281069 CEST	1.1.1.1	192.168.2.4	0x8676	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.678281069 CEST	1.1.1.1	192.168.2.4	0x8676	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.678281069 CEST	1.1.1.1	192.168.2.4	0x8676	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.678281069 CEST	1.1.1.1	192.168.2.4	0x8676	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.678281069 CEST	1.1.1.1	192.168.2.4	0x8676	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.678281069 CEST	1.1.1.1	192.168.2.4	0x8676	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:50.704642057 CEST	1.1.1.1	192.168.2.4	0x71f3	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 07:31:52.176456928 CEST	1.1.1.1	192.168.2.4	0xce5a	No error (0)	greatergivingcontent.com		52.137.90.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:54.283826113 CEST	1.1.1.1	192.168.2.4	0x9ab3	No error (0)	greatergivingcontent.com		52.137.90.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:31:57.018300056 CEST	1.1.1.1	192.168.2.4	0x97ae	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:31:57.018300056 CEST	1.1.1.1	192.168.2.4	0x97ae	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:31:57.018709898 CEST	1.1.1.1	192.168.2.4	0xe795	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:31:57.018709898 CEST	1.1.1.1	192.168.2.4	0xe795	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:00.108475924 CEST	1.1.1.1	192.168.2.4	0x476a	No error (0)	overlakehf.ejoinme.org		52.137.90.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:04.327126980 CEST	1.1.1.1	192.168.2.4	0xcd39	No error (0)	windowsupdatebg.s.llnwi.net		68.142.107.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:05.831967115 CEST	1.1.1.1	192.168.2.4	0xbe1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:05.831967115 CEST	1.1.1.1	192.168.2.4	0xbe1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:18.052174091 CEST	1.1.1.1	192.168.2.4	0xc521	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:18.052174091 CEST	1.1.1.1	192.168.2.4	0xc521	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:19.384919882 CEST	1.1.1.1	192.168.2.4	0x2129	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.375528097 CEST	1.1.1.1	192.168.2.4	0xfa24	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.375528097 CEST	1.1.1.1	192.168.2.4	0xfa24	No error (0)	cs510.wpc.edgecastcdn.net		152.199.24.185	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.376940012 CEST	1.1.1.1	192.168.2.4	0xbaf6	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.376940012 CEST	1.1.1.1	192.168.2.4	0xbaf6	No error (0)	tpop-api.twitter.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.376954079 CEST	1.1.1.1	192.168.2.4	0x7aaa	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.377516985 CEST	1.1.1.1	192.168.2.4	0xe7ad	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.541925907 CEST	1.1.1.1	192.168.2.4	0x8ade	No error (0)	video.twimg.com	cs296.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.541925907 CEST	1.1.1.1	192.168.2.4	0x8ade	No error (0)	cs296.wpc.edgecastcdn.net	cs2-wpc.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.541925907 CEST	1.1.1.1	192.168.2.4	0x8ade	No error (0)	cs2-wpc-us.8315.ecdns.net	cs189.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.541925907 CEST	1.1.1.1	192.168.2.4	0x8ade	No error (0)	cs189.wpc.edgecastcdn.net		93.184.215.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.542746067 CEST	1.1.1.1	192.168.2.4	0x5fe	No error (0)	video.twimg.com	cs296.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.542746067 CEST	1.1.1.1	192.168.2.4	0x5fe	No error (0)	cs296.wpc.edgecastcdn.net	cs2-wpc.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.542746067 CEST	1.1.1.1	192.168.2.4	0x5fe	No error (0)	cs2-wpc-us.8315.ecdns.net	cs531.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.543942928 CEST	1.1.1.1	192.168.2.4	0x5a3e	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.699053049 CEST	1.1.1.1	192.168.2.4	0x97dc	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.699053049 CEST	1.1.1.1	192.168.2.4	0x97dc	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.699053049 CEST	1.1.1.1	192.168.2.4	0x97dc	No error (0)	cs2-wac-us.8315.ecdns.net	cs45.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.699053049 CEST	1.1.1.1	192.168.2.4	0x97dc	No error (0)	cs45.wac.edgecastcdn.net		72.21.91.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.700193882 CEST	1.1.1.1	192.168.2.4	0xa748	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.700193882 CEST	1.1.1.1	192.168.2.4	0xa748	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.700193882 CEST	1.1.1.1	192.168.2.4	0xa748	No error (0)	cs2-wac-us.8315.ecdns.net	cs672.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.702987909 CEST	1.1.1.1	192.168.2.4	0xa4e3	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:20.702987909 CEST	1.1.1.1	192.168.2.4	0xa4e3	No error (0)	tpop-api.x.com		104.244.42.130	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:20.704308987 CEST	1.1.1.1	192.168.2.4	0x1e46	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:26.807888985 CEST	1.1.1.1	192.168.2.4	0xf0f7	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:26.807888985 CEST	1.1.1.1	192.168.2.4	0xf0f7	No error (0)	tpop-api.twitter.com		104.244.42.2	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:26.808342934 CEST	1.1.1.1	192.168.2.4	0x7427	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:29.202338934 CEST	1.1.1.1	192.168.2.4	0x12fa	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:29.202482939 CEST	1.1.1.1	192.168.2.4	0xedf7	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:29.202482939 CEST	1.1.1.1	192.168.2.4	0xedf7	No error (0)	platform.twitter.map.fastly.net		146.75.92.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:30.262685061 CEST	1.1.1.1	192.168.2.4	0x4e42	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:30.262685061 CEST	1.1.1.1	192.168.2.4	0x4e42	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:30.262685061 CEST	1.1.1.1	192.168.2.4	0x4e42	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:30.263211966 CEST	1.1.1.1	192.168.2.4	0x5f8b	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:30.263211966 CEST	1.1.1.1	192.168.2.4	0x5f8b	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:30.462460041 CEST	1.1.1.1	192.168.2.4	0x64bd	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:31.236965895 CEST	1.1.1.1	192.168.2.4	0x3728	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:31.236965895 CEST	1.1.1.1	192.168.2.4	0x3728	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:31.237066031 CEST	1.1.1.1	192.168.2.4	0xa72f	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:31.237066031 CEST	1.1.1.1	192.168.2.4	0xa72f	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:31.237066031 CEST	1.1.1.1	192.168.2.4	0xa72f	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824574947 CEST	1.1.1.1	192.168.2.4	0x5eed	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824574947 CEST	1.1.1.1	192.168.2.4	0x5eed	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824574947 CEST	1.1.1.1	192.168.2.4	0x5eed	No error (0)	cs2-wac-us.8315.ecdns.net	cs45.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824574947 CEST	1.1.1.1	192.168.2.4	0x5eed	No error (0)	cs45.wac.edgecastcdn.net		72.21.91.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824820042 CEST	1.1.1.1	192.168.2.4	0xd212	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824820042 CEST	1.1.1.1	192.168.2.4	0xd212	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:37.824820042 CEST	1.1.1.1	192.168.2.4	0xd212	No error (0)	cs2-wac-us.8315.ecdns.net	cs672.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:41.867444038 CEST	1.1.1.1	192.168.2.4	0x63eb	No error (0)	appleid.cdn-apple.com	appleid.cdn-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:41.867652893 CEST	1.1.1.1	192.168.2.4	0x6fc3	No error (0)	appleid.cdn-apple.com	appleid.cdn-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:43.741529942 CEST	1.1.1.1	192.168.2.4	0x815c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:43.741529942 CEST	1.1.1.1	192.168.2.4	0x815c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:47.466155052 CEST	1.1.1.1	192.168.2.4	0x7fe3	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:47.466155052 CEST	1.1.1.1	192.168.2.4	0x7fe3	No error (0)	cs510.wpc.edgecastcdn.net		152.199.24.185	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:47.466223001 CEST	1.1.1.1	192.168.2.4	0x4ee7	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:49.434209108 CEST	1.1.1.1	192.168.2.4	0xff5c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:49.434209108 CEST	1.1.1.1	192.168.2.4	0xff5c	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:49.434823036 CEST	1.1.1.1	192.168.2.4	0x4971	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:51.011197090 CEST	1.1.1.1	192.168.2.4	0x81a0	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:51.011197090 CEST	1.1.1.1	192.168.2.4	0x81a0	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:51.011317015 CEST	1.1.1.1	192.168.2.4	0x2a4c	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:55.636769056 CEST	1.1.1.1	192.168.2.4	0x5cc0	No error (0)	scontent-sjc3-1.xx.fbcdn.net		157.240.22.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:58.322562933 CEST	1.1.1.1	192.168.2.4	0xd579	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:58.322562933 CEST	1.1.1.1	192.168.2.4	0xd579	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:58.322643042 CEST	1.1.1.1	192.168.2.4	0xb946	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:58.328634024 CEST	1.1.1.1	192.168.2.4	0x72b7	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:58.328634024 CEST	1.1.1.1	192.168.2.4	0x72b7	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:32:58.328649998 CEST	1.1.1.1	192.168.2.4	0xfec2	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:32:58.337560892 CEST	1.1.1.1	192.168.2.4	0xf6bc	No error (0)	scontent-sjc3-1.xx.fbcdn.net		157.240.22.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:33:00.224662066 CEST	1.1.1.1	192.168.2.4	0x812c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 07:33:00.224662066 CEST	1.1.1.1	192.168.2.4	0x812c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:33:01.602355957 CEST	1.1.1.1	192.168.2.4	0x4205	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 07:33:02.404580116 CEST	1.1.1.1	192.168.2.4	0x33c1	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	208.75.122.11	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:49 UTC	1041	OUT	GET /tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng== HTTP/1.1 Host: r20.rs6.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:31:49 UTC	414	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 05:31:49 GMT Server: Apache P3P: CP="CAO DSP TAIa OUR NOR UNI" Location: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Content-Length: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate, no-cache="Set-Cookie" Pragma: no-cache Connection: close Content-Type: text/html;charset=ISO-8859-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:50 UTC	730	OUT	GET /MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:31:50 UTC	1434	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 83567 Connection: close Cache-Control: private Vary: Accept-Encoding Set-Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; expires=Tue, 02-Jul-2024 16:11:50 GMT; path=/; secure; HttpOnly Set-Cookie: ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; path=/; secure; HttpOnly; SameSite=Lax X-UA-Compatible: IE=edge,chome=1 Set-Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; expires=Tue, 02-Jul-2024 16:11:50 GMT; path=/; secure; HttpOnly Set-Cookie: ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: language=en-US; path=/; secure; HttpOnly Set-Cookie: __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; path=/; secure; HttpOnly X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:50 UTC	14950	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 48 65 61 64 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 3c 21 2d 2d 20 52 65 73 70 6f 6e 73 69 76 65 20 44 65 73 69 67 6e 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 6f 6d 65 3d 31 22 20 2f 3e 3c 6d 65 74 61 Data Ascii: <!DOCTYPE html><html lang="en-US"><head id="Head"><meta charset="utf-8" /> ... Responsive Design --> <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chome=1" /><meta
2024-04-24 05:31:50 UTC	16384	IN	Data Raw: 66 47 54 6f 49 78 39 77 57 64 55 66 48 31 7a 63 70 50 34 38 45 77 6b 35 6b 4b 55 37 4d 56 37 52 51 31 34 63 71 31 53 31 70 5a 32 49 55 4d 6c 46 2f 4f 68 65 55 65 69 4b 68 32 79 6c 58 42 4d 35 6d 64 69 72 6e 46 74 63 67 79 38 65 65 4b 58 4d 38 71 36 34 43 56 4f 6b 75 34 72 35 50 71 52 44 61 31 34 73 42 73 66 2b 35 49 4d 4b 73 6a 59 7a 41 32 43 6f 63 71 78 4e 70 50 78 74 53 78 62 70 48 37 53 2f 50 75 79 36 46 4f 50 46 78 33 76 37 68 4e 31 67 2b 6b 54 35 6c 31 63 6f 7a 48 67 30 59 75 73 70 72 48 34 33 56 50 62 63 31 32 64 55 50 4a 47 32 34 61 41 44 6e 31 46 34 32 51 2f 4a 56 56 5a 44 64 4f 6a 31 63 74 49 54 66 79 4a 2f 52 36 4c 67 6b 75 4c 4d 32 78 34 58 67 6e 6c 33 61 6e 79 37 4c 33 2b 5a 77 42 63 58 35 33 64 6e 47 42 6c 30 58 6b 52 44 6b 55 30 38 58 33 38 Data Ascii: fGToIx9wWdUfH1zcpP48Ewk5kKU7MV7RQ14cq1S1pZ2IUMlF/OheUeiKh2ylXBM5mdirnFtcgy8eeKXM8q64CVOku4r5PqRDa14sBsf+5IMKsjYzA2CocqxNpPxtSxbpH7S/Puy6FOPFx3v7hN1g+kT5l1cozHg0YusprH43VPbc12dUPJG24aADn1F42Q/JVVZDdOj1ctITfyJ/R6LgkuLM2x4Xgnl3any7L3+ZwBcX53dnGBl0XkRDkU08X38
2024-04-24 05:31:51 UTC	16384	IN	Data Raw: 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 31 48 70 56 33 4f 56 42 30 43 5a 6b 33 39 6f 67 69 42 77 45 51 62 51 43 56 4f 64 32 2d 65 47 43 4c 68 53 2d 4b 73 5f 45 33 4e 4c 57 78 70 46 44 42 6c 58 69 31 4b 61 65 45 47 6e 4d 38 4d 2d 4c 44 52 6f 4a 55 31 4b 45 34 75 39 6c 4b 6c 74 63 6c 56 43 6d 4a 4f 76 4e 35 4e 59 66 64 63 35 7a 6c 66 69 55 4f 50 52 76 2d 44 43 55 68 6e 6f 56 71 77 46 78 4f 4a 62 72 65 67 41 31 26 61 6d 70 3b 74 3d 66 66 66 66 66 66 66 66 62 63 34 61 37 33 30 34 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 54 65 6c 65 72 69 6b 2e 57 65 62 2e 55 49 2e 57 65 62 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 5f 54 53 Data Ascii: ="/ScriptResource.axd?d=1HpV3OVB0CZk39ogiBwEQbQCVOd2-eGCLhS-Ks_E3NLWxpFDBlXi1KaeEGnM8M-LDRoJU1KE4u9lKltclVCmJOvN5NYfdc5zlfiUOPRv-DCUhnoVqwFxOJbregA1&t=ffffffffbc4a7304" type="text/javascript"></script><script src="/Telerik.Web.UI.WebResource.axd?_TS
2024-04-24 05:31:51 UTC	16384	IN	Data Raw: 6c 61 73 73 3d 22 70 61 67 65 2d 77 72 61 70 70 65 72 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 44 4e 4e 20 43 6f 6e 74 65 6e 74 20 50 61 6e 65 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 67 2d 64 6e 6e 2d 63 6f 6e 74 65 6e 74 2d 70 61 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 44 4e 4e 20 43 6f 6e 74 65 6e 74 20 50 61 6e 65 20 43 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 6d 61 72 6b 65 74 69 6e 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 38 22 3e Data Ascii: lass="page-wrapper"> ... DNN Content Pane --> <div class="gg-dnn-content-pane"> ... DNN Content Pane Container --> <div class="container-fluid marketing"> <div class="row"> <div class="col-sm-8">
2024-04-24 05:31:51 UTC	16384	IN	Data Raw: 43 68 65 63 6b 62 6f 78 5f 61 75 74 68 6f 72 69 7a 65 43 68 65 63 6b 62 6f 78 44 69 76 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 20 67 67 2d 61 75 74 68 6f 72 69 7a 65 2d 63 6f 6e 74 61 69 6e 65 72 20 61 6c 65 72 74 20 61 6c 65 72 74 2d 63 68 61 72 67 65 22 3e 0d 0a 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 20 61 6c 65 72 74 2d 63 68 61 72 67 65 20 6c 61 62 65 6c 42 6f 6c 64 22 20 66 6f 72 3d 22 64 6e 6e 5f 63 74 72 32 39 32 34 30 35 36 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 61 75 74 68 6f 72 69 7a 65 45 76 65 6e 74 73 43 68 65 63 6b 62 6f 78 5f 61 75 74 68 6f 72 69 7a 65 64 43 68 65 63 6b 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d Data Ascii: Checkbox_authorizeCheckboxDiv" class="form-group gg-authorize-container alert alert-charge"> <label class="control-label alert-charge labelBold" for="dnn_ctr2924056_ViewAESOPRegistration_authorizeEventsCheckbox_authorizedCheckbox"> <span id=
2024-04-24 05:31:51 UTC	3081	IN	Data Raw: 72 43 75 73 74 6f 6d 56 61 6c 69 64 61 74 6f 72 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 64 6e 6e 5f 63 74 72 32 39 32 34 30 35 36 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 6d 6f 64 75 6c 65 5f 64 6f 6e 61 74 69 6f 6e 49 6e 66 6f 5f 6f 74 68 65 72 43 75 73 74 6f 6d 56 61 6c 69 64 61 74 6f 72 2e 65 6e 61 62 6c 65 64 20 3d 20 22 46 61 6c 73 65 22 3b 0d 0a 64 6e 6e 5f 63 74 72 32 39 32 34 30 35 36 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 6d 6f 64 75 6c 65 5f 64 6f 6e 61 74 69 6f 6e 49 6e 66 6f 5f 6f 74 68 65 72 43 75 73 74 6f 6d 56 61 6c 69 64 61 74 6f 72 2e 65 76 61 6c 75 61 74 69 6f 6e 66 75 6e 63 74 69 6f 6e 20 3d 20 22 43 75 73 74 6f 6d 56 61 6c 69 64 61 74 6f 72 45 Data Ascii: rCustomValidator.display = "Dynamic";dnn_ctr2924056_ViewAESOPRegistration_rmodule_donationInfo_otherCustomValidator.enabled = "False";dnn_ctr2924056_ViewAESOPRegistration_rmodule_donationInfo_otherCustomValidator.evaluationfunction = "CustomValidatorE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:51 UTC	942	OUT	GET /Portals/_default/default.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:51 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:51 GMT Content-Type: text/css Content-Length: 95926 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:51 UTC	15715	IN	Data Raw: ef bb bf 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 0d 0a 09 2a 20 46 69 6c 65 6e 61 6d 65 3a 09 09 09 09 64 65 66 61 75 6c 74 2e 63 73 73 0d 0a 09 2a 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 09 09 09 73 65 74 73 20 74 79 70 6f 67 72 61 70 68 79 2c 20 62 61 73 69 63 20 67 72 69 64 73 2c 20 0d 0a 09 09 09 09 09 09 09 61 6e 64 20 73 74 61 6e 64 61 72 64 20 66 6f 72 6d 73 74 79 6c 65 73 0d 0a 09 2a 20 56 65 72 73 69 6f 6e 3a 09 09 09 09 31 2e 30 2e 30 20 28 32 30 31 32 2d 30 36 2d 31 36 29 0d Data Ascii: @charset "utf-8";/* CSS Document // ---------------------------------------------------------* Filename:default.css* Description: sets typography, basic grids, and standard formstyles* Version:1.0.0 (2012-06-16)
2024-04-24 05:31:51 UTC	16384	IN	Data Raw: 61 28 32 2c 31 33 39 2c 32 35 35 2c 30 2e 35 29 3b 20 2f 2a 20 62 6c 75 65 20 2a 2f 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 33 70 78 20 30 70 78 20 72 67 62 61 28 32 2c 20 31 33 39 2c 20 32 35 35 2c 20 30 2e 34 29 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 20 72 67 62 61 28 32 2c 20 31 33 39 2c 20 32 35 35 2c 20 30 2e 34 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 7d 0d 0a 2f 2a 20 52 65 71 75 69 72 65 64 20 46 69 65 6c 64 73 20 2a 2f 0d 0a 2e 72 65 71 75 69 72 65 64 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 0d 0a 6c 65 67 65 6e 64 2e 72 65 71 75 69 72 65 64 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 Data Ascii: a(2,139,255,0.5); /* blue / -webkit-box-shadow: 0px 0px 3px 0px rgba(2, 139, 255, 0.4); box-shadow: 0px 0px 0px 0px rgba(2, 139, 255, 0.4); color: #333;}/ Required Fields */.required label:after,legend.required:after { displa
2024-04-24 05:31:52 UTC	16384	IN	Data Raw: 2e 64 6e 6e 4c 61 62 65 6c 20 3e 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 6e 6e 46 6f 72 6d 20 2e 64 6e 6e 46 6f 72 6d 49 74 65 6d 20 61 2e 64 6e 6e 46 6f 72 6d 48 65 6c 70 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 6e 6e 46 6f 72 6d 20 2e 64 6e 6e 46 6f 72 6d 49 74 65 6d 20 61 2e 64 6e 6e 46 6f 72 6d 48 65 6c 70 20 69 6d 67 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 6e 6e 4c 61 62 65 6c 20 2b 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a Data Ascii: .dnnLabel > span { text-align: right;}.dnnForm .dnnFormItem a.dnnFormHelp span { position: relative;}.dnnForm .dnnFormItem a.dnnFormHelp img { display: block;}.dnnLabel + span { display: inline-block; margin-top:
2024-04-24 05:31:52 UTC	16384	IN	Data Raw: 66 66 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 39 63 39 63 39 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 6e 6e 42 75 74 74 6f 6e 44 72 6f 70 64 6f 77 6e 2d 75 6c 20 7b Data Ascii: ff; border: 1px solid #c9c9c9; border-bottom: 1px solid #fff; -webkit-border-top-left-radius: 3px; border-top-left-radius: 3px; -webkit-border-top-right-radius: 3px; border-top-right-radius: 3px;}.dnnButtonDropdown-ul {
2024-04-24 05:31:52 UTC	16384	IN	Data Raw: 68 74 3a 20 34 36 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 49 6e 73 74 61 6c 6c 57 69 7a 61 72 64 42 47 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 34 30 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 6e 6e 57 69 7a 61 72 64 54 61 62 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 74 61 62 73 2d 61 63 74 69 76 65 20 2e 64 6e 6e 57 69 7a 61 72 64 53 74 65 70 20 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 36 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 30 30 70 78 3b 0d Data Ascii: ht: 46px; background: transparent url(../../images/InstallWizardBG.png) no-repeat; background-position: 0 -401px;}.dnnWizardTab.ui-tabs .ui-tabs-nav li.ui-tabs-active .dnnWizardStep { height: 46px; background-position: 0 -100px;
2024-04-24 05:31:52 UTC	14675	IN	Data Raw: 74 3b 20 2f 2a 20 49 45 31 30 2b 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 33 30 33 30 33 30 20 30 25 2c 23 31 39 31 39 31 39 20 31 30 30 25 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 57 33 43 20 2a 2f 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0d 0a 7d 0d 0a 2e 65 69 70 62 61 63 6b 69 6d 67 2e 63 6f 6e 74 61 69 6e 65 72 54 69 74 6c 65 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 38 70 78 3b 0d 0a 7d 0d 0a 2e 65 69 70 62 61 63 6b 69 6d 67 2e 63 6f 6e 74 61 69 6e 65 72 54 69 74 6c 65 2e 65 64 69 74 4d 6f 64 65 20 7b 0d 0a 09 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 09 72 69 67 68 74 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 Data Ascii: t; /* IE10+ / background: linear-gradient(to bottom, #303030 0%,#191919 100%) !important; / W3C */opacity: 0.8;}.eipbackimg.containerTitle {margin-top: -8px;}.eipbackimg.containerTitle.editMode {left: auto;right: 0px;margin-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:51 UTC	953	OUT	GET /DesktopModules/Announcements/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:51 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:51 GMT Content-Type: text/css Content-Length: 830 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:04:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:51 UTC	830	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 20 20 20 20 43 53 53 20 53 54 59 4c 45 53 20 46 4f 52 20 4d 6f 64 75 6c 65 20 44 4e 4e 2e 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 0d 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 2e 4d 6f 64 44 4e 4e 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 43 0d 0a 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 44 4e 4e 5f 41 4e 4e 5f 44 65 73 69 67 6e 54 61 62 6c 65 0d 0a 7b 0d 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 44 4e 4e 5f 41 4e 4e 5f 44 65 73 63 72 69 70 74 69 Data Ascii: /* ======================================== CSS STYLES FOR Module DNN.Announcements ========================================*/.ModDNNAnnouncementsC{ overflow: hidden;}.DNN_ANN_DesignTable{ width: auto;}.DNN_ANN_Descripti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:51 UTC	945	OUT	GET /DesktopModules/Media/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:51 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:51 GMT Content-Type: text/css Content-Length: 2860 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:04:38 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:51 UTC	2860	IN	Data Raw: ef bb bf 2f 2a 0d 0a 44 65 66 61 75 6c 74 20 43 53 53 20 66 6f 72 20 74 68 65 20 44 6f 74 4e 65 74 4e 75 6b 65 20 4d 65 64 69 61 20 4d 6f 64 75 6c 65 0d 0a 28 43 29 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 32 2d 32 30 31 31 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2a 2f 0d 0a 2f 2a 20 6d 6f 64 69 66 69 65 64 20 62 79 20 67 72 65 61 74 65 72 20 67 69 76 69 6e 67 20 61 74 20 62 6f 74 74 6f 6d 20 6f 66 20 66 69 6c 65 20 2a 2f 0d 0a 2e 64 6e 6e 6d 65 64 69 61 5f 77 72 61 70 70 65 72 20 7b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 7d 0d 0a 2e 64 6e 6e 4d 65 64 69 61 2d 57 72 61 70 70 65 72 2c 20 2e 64 6e 6e 4d 65 64 69 61 2d 57 72 61 70 70 65 72 20 69 66 72 61 6d 65 2c 20 2e 64 6e 6e 4d 65 64 69 61 2d 57 72 61 70 70 65 Data Ascii: /Default CSS for the DotNetNuke Media Module(C) Copyright 2002-2011 by DotNetNuke Corporation//* modified by greater giving at bottom of file */.dnnmedia_wrapper { width:100%; }.dnnMedia-Wrapper, .dnnMedia-Wrapper iframe, .dnnMedia-Wrappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:51 UTC	957	OUT	GET /DesktopModules/AESOPRegistration/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:51 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:51 GMT Content-Type: text/css Content-Length: 41 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:51 UTC	41	IN	Data Raw: ef bb bf 2e 65 72 72 6f 72 44 69 76 5f 74 6f 70 20 7b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0d 0a 7d Data Ascii: .errorDiv_top { text-align:left;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49741	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:51 UTC	945	OUT	GET /DesktopModules/Links/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:51 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:51 GMT Content-Type: text/css Content-Length: 1439 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:04 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:51 UTC	1439	IN	Data Raw: ef bb bf 2f 2a 74 68 69 73 20 69 73 20 61 20 63 6c 61 73 73 20 74 6f 20 73 74 79 6c 65 20 74 68 65 20 64 65 73 69 67 6e 20 74 61 62 6c 65 2a 2f 0d 0a 0d 0a 2f 2a 20 45 64 69 74 20 56 69 65 77 20 2a 2f 0d 0a 2e 4c 69 6e 6b 73 44 65 73 69 67 6e 54 61 62 6c 65 0d 0a 7b 0d 0a 7d 0d 0a 2e 4d 65 73 73 61 67 65 53 75 63 63 65 65 73 0d 0a 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 47 72 65 65 6e 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 7d 0d 0a 2e 4d 65 73 73 61 67 65 46 61 69 6c 75 72 65 0d 0a 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 52 65 64 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 4d 6f 64 75 6c 65 20 56 69 65 77 20 2a 2f 0d 0a 0d 0a 2e 6c 69 6e 6b 5f 6d 6f Data Ascii: /this is a class to style the design table//* Edit View /.LinksDesignTable{}.MessageSuccees{ color: Green; font-weight: bold;}.MessageFailure{ color: Red; font-weight: bold;}/ Module View */.link_mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:51 UTC	945	OUT	GET /DesktopModules/AESOP/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:51 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:51 GMT Content-Type: text/css Content-Length: 396 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:51 UTC	396	IN	Data Raw: ef bb bf 2f 2a 20 62 6f 6f 74 73 74 72 61 70 20 64 65 66 69 6e 69 74 69 6f 6e 73 20 6e 65 65 64 65 64 20 69 6e 20 6e 6f 6e 2d 62 6f 6f 74 73 74 72 61 70 20 73 6b 69 6e 73 2a 2f 0d 0a 0d 0a 2f 2a 20 47 47 20 44 4e 4e 20 46 6f 72 6d 73 20 2a 2f 0d 0a 2e 65 72 72 6f 72 44 69 76 5f 74 6f 70 20 7b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 69 76 53 68 61 72 65 54 68 69 73 4c 69 6e 6b 20 7b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 70 78 20 32 70 78 20 31 32 70 78 20 32 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: /* bootstrap definitions needed in non-bootstrap skins// GG DNN Forms */.errorDiv_top { text-align: left; padding-top: 0; padding-bottom: 10px;}.divShareThisLink { text-align: left; margin: 2px 2px 12px 2px; font-family:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	23.39.190.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 05:31:52 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=5571 Date: Wed, 24 Apr 2024 05:31:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	952	OUT	GET /DesktopModules/AESOPSponsor/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:52 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:52 GMT Content-Type: text/css Content-Length: 85 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:52 UTC	85	IN	Data Raw: ef bb bf 2f 2a 20 62 6f 6f 74 73 74 72 61 70 20 64 65 66 69 6e 69 74 69 6f 6e 73 20 6e 65 65 64 65 64 20 69 6e 20 6e 6f 6e 2d 62 6f 6f 74 73 74 72 61 70 20 73 6b 69 6e 73 2a 2f 0d 0a 0d 0a 2f 2a 20 47 47 20 44 4e 4e 20 46 6f 72 6d 73 20 2a 2f 0d 0a 0d 0a Data Ascii: /* bootstrap definitions needed in non-bootstrap skins// GG DNN Forms */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	958	OUT	GET /Portals/_default/Skins/Customizable/skin.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:52 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:52 GMT Content-Type: text/css Content-Length: 65 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:52 UTC	65	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 6c 6f 6f 6b 20 74 6f 20 43 53 53 20 64 69 72 65 63 74 6f 72 79 20 66 6f 72 20 73 74 79 6c 65 73 20 2a 2f 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: @charset "utf-8";/* look to CSS directory for styles */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	937	OUT	GET /Portals/3922/portal.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:52 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:52 GMT Content-Type: text/css Content-Length: 7960 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 01 Jul 2020 06:14:38 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:52 UTC	7960	IN	Data Raw: 2f 2a 20 0d 0a 09 09 74 65 78 74 3a 20 54 68 69 73 20 69 73 20 74 68 65 20 73 69 74 65 2d 77 69 64 65 20 73 74 79 6c 65 20 66 6f 72 20 62 6f 64 79 20 63 6f 70 79 2c 20 74 68 69 73 20 63 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 0d 0a 09 09 74 68 65 20 42 4f 44 59 20 74 61 67 20 69 66 20 70 72 65 66 65 72 72 65 64 2e 0d 0a 09 2a 2f 20 0d 0a 09 0d 0a 09 2e 74 65 78 74 20 7b 0d 0a 20 20 20 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 20 31 31 70 78 3b 0d 0a 20 20 20 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 09 09 63 6f 6c 6f 72 3a 20 23 30 30 Data Ascii: /* text: This is the site-wide style for body copy, this could be defined inthe BODY tag if preferred.*/ .text { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color: #00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	991	OUT	GET /Portals/_default/Skins/_default/WebControlSkin/Default/DatePicker.Default.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:53 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:52 GMT Content-Type: text/css Content-Length: 22917 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:53 UTC	15715	IN	Data Raw: ef bb bf 2f 2a 20 53 54 41 52 54 20 54 65 6c 65 72 69 6b 2e 57 65 62 2e 55 49 2e 53 6b 69 6e 73 2e 49 6e 70 75 74 2e 63 73 73 20 2a 2f 0d 0a 2e 52 61 64 49 6e 70 75 74 2c 20 2e 52 61 64 49 6e 70 75 74 4d 67 72 20 7b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 2e 52 61 64 49 6e 70 75 74 20 74 61 62 6c 65 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 0d 0a 7d 0d 0a 2e 52 61 64 49 6e 70 75 74 20 74 61 62 6c 65 2e 72 69 54 61 62 6c 65 20 74 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a Data Ascii: /* START Telerik.Web.UI.Skins.Input.css */.RadInput, .RadInputMgr { vertical-align: middle;}.RadInput table { border: 0; vertical-align: bottom;}.RadInput table.riTable td { border: 0; padding: 0; vertical-align:
2024-04-24 05:31:53 UTC	7202	IN	Data Raw: 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 31 70 78 20 30 70 78 20 30 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 29 2c 20 69 6e 73 65 74 20 30 70 78 20 31 70 78 20 32 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 52 61 64 50 69 63 6b 65 72 5f 44 65 66 61 75 6c 74 20 2e 72 69 Data Ascii: x 0px rgba(0, 0, 0, 0.1); box-shadow: 0px 1px 0px 0px rgba(255, 255, 255, 0.8), inset 0px 1px 2px 0px rgba(0, 0, 0, 0.1); color: #999; font-size: 12px; padding: 8px !important; height: auto !important;}.RadPicker_Default .ri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	983	OUT	GET /portals/_default/skins/customizable/bootstrap-3/css/bootstrap.min.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:53 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:52 GMT Content-Type: text/css Content-Length: 120564 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:53 UTC	15714	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 0d 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0d 0a 68 74 6d Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */htm
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 69 6d 67 2d 63 69 72 63 6c 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 68 72 7b 6d 61 72 67 69 6e 2d 74 6f Data Ascii: height:auto;padding:4px;line-height:1.42857143;background-color:#fff;border:1px solid #ddd;border-radius:4px;-webkit-transition:all .2s ease-in-out;-o-transition:all .2s ease-in-out;transition:all .2s ease-in-out}.img-circle{border-radius:50%}hr{margin-to
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 69 6e 66 6f 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 65 64 66 37 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: tr.info>th,.table>tfoot>tr.info>th{background-color:#d9edf7}.table-hover>tbody>tr>td.info:hover,.table-hover>tbody>tr>th.info:hover,.table-hover>tbody>tr.info:hover>td,.table-hover>tbody>tr:hover>.info,.table-hover>tbody>tr.info:hover>th{background-color:
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 39 64 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 39 64 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 Data Ascii: ff;background-color:#449d44;border-color:#398439}.btn-success:active,.btn-success.active,.open>.dropdown-toggle.btn-success{color:#fff;background-color:#449d44;border-color:#398439}.btn-success:active:hover,.btn-success.active:hover,.open>.dropdown-toggle
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 35 65 35 65 35 7d 2e 6e 61 76 3e 6c 69 3e 61 3e 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 6e 61 76 2d 74 61 62 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 30 20 30 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d Data Ascii: 5e5e5}.nav>li>a>img{max-width:none}.nav-tabs{border-bottom:1px solid #ddd}.nav-tabs>li{float:left;margin-bottom:-1px}.nav-tabs>li>a{margin-right:2px;line-height:1.42857143;border:1px solid transparent;border-radius:4px 4px 0 0}.nav-tabs>li>a:hover{border-
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 37 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 62 61 64 67 65 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 74 6e 20 2e 62 61 64 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 70 78 7d 2e 62 74 6e 2d 78 73 20 2e 62 61 64 67 65 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 78 73 3e 2e 62 74 6e 20 2e 62 61 64 67 65 7b 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 35 70 78 7d 61 2e 62 61 64 67 65 3a 68 6f 76 65 72 2c 61 2e 62 61 64 67 65 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 3e 2e 62 61 64 67 65 2c Data Ascii: 7;border-radius:10px}.badge:empty{display:none}.btn .badge{position:relative;top:-1px}.btn-xs .badge,.btn-group-xs>.btn .badge{top:0;padding:1px 5px}a.badge:hover,a.badge:focus{color:#fff;text-decoration:none;cursor:pointer}.list-group-item.active>.badge,
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 Data Ascii: x;border-bottom-left-radius:3px}.panel>.table:last-child>tbody:last-child>tr:last-child td:first-child,.panel>.table-responsive:last-child>.table:last-child>tbody:last-child>tr:last-child td:first-child,.panel>.table:last-child>tfoot:last-child>tr:last-ch
2024-04-24 05:31:53 UTC	6546	IN	Data Raw: 30 30 30 30 27 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 39 30 29 3b 6f 75 74 6c 69 6e 65 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 70 72 65 76 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 6e 65 78 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 67 6c 79 Data Ascii: 0000',GradientType=1);background-repeat:repeat-x}.carousel-control:hover,.carousel-control:focus{color:#fff;text-decoration:none;filter:alpha(opacity=90);outline:0;opacity:.9}.carousel-control .icon-prev,.carousel-control .icon-next,.carousel-control .gly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	23.39.190.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 05:31:52 UTC	658	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 35C99E6D169B4F63A1B2514125DB0961 Ref B: CH1AA2040901054 Ref C: 2023-08-05T07:25:37Z X-MSEdge-Ref: Ref A: 90E5741CD36646A4B6D502122F515FB1 Ref B: BY3EDGE0413 Ref C: 2023-08-05T07:25:37Z Content-Type: application/octet-stream Cache-Control: public, max-age=5534 Date: Wed, 24 Apr 2024 05:31:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 05:31:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:52 UTC	987	OUT	GET /portals/_default/skins/customizable/font-awesome/css/font-awesome.min.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:53 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:53 GMT Content-Type: text/css Content-Length: 22487 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:53 UTC	15715	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 33 2e 32 2e 31 27 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 26 76 3d 33 2e 32 2e 31 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 33 2e 32 2e 31 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 61 Data Ascii: @font-face{font-family:'FontAwesome';src:url('../font/fontawesome-webfont.eot?v=3.2.1');src:url('../font/fontawesome-webfont.eot?#iefix&v=3.2.1') format('embedded-opentype'),url('../font/fontawesome-webfont.woff?v=3.2.1') format('woff'),url('../font/fonta
2024-04-24 05:31:53 UTC	6772	IN	Data Raw: 36 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 73 69 74 65 6d 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 38 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 75 6d 62 72 65 6c 6c 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 6c 69 67 68 74 62 75 6c 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 3b 7d 0d 0a 2e 69 63 6f 6e 2d 63 6c 6f 75 Data Ascii: 6";}.icon-bolt:before{content:"\f0e7";}.icon-sitemap:before{content:"\f0e8";}.icon-umbrella:before{content:"\f0e9";}.icon-paste:before{content:"\f0ea";}.icon-lightbulb:before{content:"\f0eb";}.icon-exchange:before{content:"\f0ec";}.icon-clou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:53 UTC	697	OUT	GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:31:53 UTC	175	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:53 GMT Content-Type: image/png Content-Length: 262144 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:31:53 UTC	16209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 d6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 01 02 03 0a ff c4 00 7d 10 00 01 03 03 02 03 05 03 03 0d 06 0e 06 14 07 11 01 00 02 03 04 05 11 06 07 12 21 31 08 09 13 41 51 14 22 61 32 71 81 0a 15 Data Ascii: JFIFCC"}!1AQ"a2q
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 99 71 e6 49 e6 df a5 75 14 af c1 2e c9 00 f2 70 76 72 54 d2 03 83 9a 0d d4 22 65 a5 af 3a 23 9a 5c d1 d7 a1 f3 e8 b8 31 39 dc f8 3a 00 33 9f 4f e4 51 34 f1 60 70 f1 67 38 27 03 a2 f7 74 40 8f a3 cf 9a b9 ce 16 3d c1 c4 a9 4c f4 ae 1c c8 23 2e c7 20 ad 5f 6b 7b 30 a9 db 8a 7b 9b 1a 78 a8 6e b1 92 ef 40 f6 b9 9f ca 42 bc d5 31 31 a3 8b 19 38 ea 15 13 be f6 33 7c da ab e5 14 6d e2 73 28 0c d1 90 33 97 46 43 f3 f9 01 58 9c 41 03 ed d4 19 98 20 6a 58 eb 78 81 71 f1 b2 cc 61 d9 9f b0 d7 e5 63 9d 83 db 7f 02 6c 7e 04 ab 81 dd 17 ad 8d cf 6a 75 36 81 9a 57 39 f6 7b eb 2a a1 6b 9d c9 b1 54 47 d0 0f e3 c4 f2 7e 2e 59 74 06 47 30 b5 bf dd 5f ae 46 9b ed 1d 3e 95 96 50 21 d4 56 29 a1 60 73 b0 0c b1 16 ca cc 7a 92 d0 ff 00 d6 b6 40 08 20 7f 9d 6b 4c 23 35 f6 9a 23 01 Data Ascii: qIu.pvrT"e:#\19:3OQ4`pg8't@=L#. _k{0{xn@B1183\|ms(3FCXA jXxqacl~ju6W9{*kTG~.YtG0_F>P!V)`sz@ kL#5#
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 77 66 71 22 c4 66 75 9c 4e d6 1b 9d bc ae 16 d9 9a 99 94 8f 4d 6b e5 c5 a1 e8 00 37 d8 68 3b f8 71 f3 5e f0 44 de 6f 96 41 81 c8 0c 73 07 3f ab e7 51 71 53 90 d6 b1 ae c0 2e c8 6a f1 a7 0e 6b 3c 3c 0e 5c c1 f3 23 d1 46 b7 88 30 87 34 0c 9e 2c 35 4b 08 71 21 a7 fa b7 97 7d d6 10 bc 37 55 d5 ac 1c 7e 1b b0 5b 8c 90 07 45 2f bc 6a 8b 26 9f ad 8a dd 5b 53 28 a8 95 85 ec 86 08 5d 21 c0 1c dc 71 f2 7e 9c 65 4d 5c d6 e0 35 b9 f2 e2 20 75 54 65 3c 2d 35 97 5b b4 cf 71 e3 af 78 e3 73 b2 78 47 26 81 f0 f8 2b c9 69 26 c4 36 71 cb a6 bc fe 9f 3d 15 bb a3 5e e4 0b f2 e5 f5 e1 ef 55 25 06 a3 b5 5c 1d e1 53 dc 63 33 63 21 ae 18 24 0f 81 f3 f9 94 43 a7 04 e5 83 39 1c c9 3e 6a d8 ea 5b dd 63 24 22 82 d9 4c f7 44 43 84 d3 48 ec 35 dd 70 38 79 e5 50 f3 f6 80 d5 fb 6f 79 92 Data Ascii: wfq"fuNMk7h;q^DoAs?QqS.jk<<\#F04,5Kq!}7U~[E/j&[S(]!q~eM\5 uTe<-5[qxsxG&+i&6q=^U%\Sc3c!$C9>j[c$"LDCH5p8yPoy
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: f5 d0 9f 15 e7 87 a3 cf 97 c4 ad a1 4e 61 bb da 5f ec 55 4c 7c 75 54 c7 c1 95 8e e2 6b 83 9b c9 c0 8e a3 04 1c ac 35 7f 60 9d ee 13 3f 11 5a 5c 0b ce 08 b9 75 e7 d7 9b 54 c3 16 c8 cd cf 18 26 03 0b ad 9a f6 17 de cb 5f f4 7f 53 90 a6 b6 64 4d 45 0c 27 2d ae 6d 7b 66 bf ba ea c4 32 0f 87 cf c9 7a c7 4c 70 09 6f 5f 82 be b1 76 0c de b1 82 e8 2d 5f a4 47 f3 54 16 ac ec 95 b8 1a 0e d4 db ae a4 fa dc 1b 24 cd 82 9e 08 2b 83 e5 a8 95 c4 06 c7 1b 31 97 38 e7 a0 f2 c9 50 c7 d1 aa 50 9a 5e f8 4e 00 71 b1 5b 26 1e 23 a2 46 88 19 0e 61 a4 9d 80 21 43 f6 6d b4 d4 4d a7 6e 14 fc 20 47 7c d5 d6 1b 63 78 99 9e 71 d4 3a ad ee f9 83 62 19 3f 15 55 5c 67 8e e1 a1 6a ee ef 8c 39 f3 e9 4d 55 77 8c 02 47 fb 2a bd 94 ec 60 f5 27 a8 f5 ca 9d 58 b4 8b 74 55 8a 9b 4c d8 0b 25 ae Data Ascii: Na_UL\|uTk5`?Z\uT&_SdME'-m{f2zLpo_v-_GT$+18PP^Nq[&#Fa!CmMn G\|cxq:b?U\gj9MUwG*`'XtUL%
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: b2 d3 7a d1 d7 6d 41 41 71 6d 4d 2b c6 90 bd d5 4d 2b 62 8d 8d 93 8d cd 89 bc d9 1f 1e 5c 01 ce 09 ca 82 d4 7b 09 7c db 98 f1 a8 2f f6 8a c7 41 28 8a 67 5b 2b 38 e4 83 2f 24 02 df 94 e3 8f ba f2 e9 c9 5d 8d 33 a2 b4 7e aa 7d 1e 96 da cb 7d 65 fe de ca 98 ea e4 a8 92 57 47 ee bb 9b a3 aa 32 34 0e 00 78 8b 4b 07 99 0a ea a7 56 87 92 1c c4 38 a7 aa 3a dc 0b 00 5a 41 b9 79 b5 af a0 ca 6d 98 5f 7e 16 92 12 2d 11 5f 05 cc 19 c6 9a 9d 6c 74 b0 02 f7 e2 6f c0 db 65 2f 97 4e 6a 2b c6 d7 be af 56 e8 4a 46 ea 06 d1 d2 91 35 2d 03 a0 a9 8a 9a 26 90 c7 c8 c6 0e 02 1e dc fb dd 4e 01 56 f6 3c 3d b9 6f 31 f0 3d 42 c9 9b 56 97 be 58 22 a8 b8 59 dd 14 fc 72 be dd 1b 68 a7 a8 95 a6 27 38 70 b3 de fb 98 c6 47 0f 3c b7 3c d5 80 d7 fa 46 af 44 6b 1b 86 98 a9 39 f6 69 cf 86 ff Data Ascii: zmAAqmM+M+b\{\|/A(g[+8/$]3~}}eWG24xKV8:ZAym_~-_ltoe/Nj+VJF5-&NV<=o1=BVX"Yrh'8pG<<FDk9i
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 7e fd dd fe 1b 0f bc b2 82 24 39 09 61 36 d0 33 1d 20 83 c0 03 67 45 23 9d c6 56 7f 8a e7 76 29 05 b3 49 d9 2c 36 e8 2d 11 db 59 4f 4d 4c de 18 69 a2 e8 c1 9c 90 3d 32 79 9c 79 a9 dd 2d fe d7 66 85 91 43 48 c6 1c e1 be 1b 7d f7 e4 8c 03 e6 ee 7d 02 98 56 d2 50 36 8d d5 57 26 12 31 c8 01 e6 7a 7c ea a7 d8 ee ca f7 fb ce a9 93 59 6e 73 df 15 0c 32 36 5b 25 1d 35 41 64 ae 70 20 b6 67 16 fc 90 3c 9b e7 d5 61 71 1e 25 a4 61 7a 61 99 9b 70 00 0e c3 06 ee 3c 9a 3e 67 60 37 4c 3b 87 6a 78 a2 a0 61 42 b9 be af 79 bd 80 3c 49 e6 6d a0 dc 95 4c ea 1d 9a dd dd e1 b3 d2 5a 61 d2 33 d1 d9 6a ab 8b 2e 75 75 a0 33 c2 89 80 39 c5 d1 9f 7b 84 83 80 ec 63 3f 32 b9 bb 39 61 d3 5b 45 6d f6 6d 2f 69 a7 34 50 b5 d1 b0 3f 2e e3 6e 31 c4 09 e7 d3 a7 c3 e7 55 66 eb ea 4d 43 53 39 Data Ascii: ~$9a63 gE#Vv)I,6-YOMLi=2yy-fCH}}VP6W&1z\|Yns26[%5Adp g<aq%azap<>g`7L;jxaBy<ImLZa3j.uu39{c?29a[Emm/i4P?.n1UfMCS9
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 08 e5 98 78 af 2e ce 31 c0 ce 16 f3 e8 18 b1 2f 62 ed 35 dd bf fb c0 ae 5b d1 7b a5 74 ba 4b 4c 54 b2 a6 08 e5 8f dc 30 42 e2 da 2a 72 0f 2c bd c0 ca e1 e6 03 fd 57 d8 53 90 6a d8 c2 6a b7 31 ac bc a0 b8 e4 4b 74 60 1d ee 75 dc 3b d7 a8 f4 a9 ac 31 d1 6d 37 08 48 e9 3b 52 21 ae e6 d0 fb 3e 33 9d dc c6 59 87 bb c1 65 f7 62 2d 8b 3d 9f 7b 38 58 34 45 6d 38 65 d2 a2 0f ae 17 b3 e7 ed 73 80 e7 34 ff 00 10 70 c7 fd e7 c5 5d b7 72 66 57 2c 1c 23 24 a9 2e e3 eb 9b 46 db e8 2b ce bf be 3f 14 96 5b 64 f5 b3 8c e0 b9 b1 b0 bb 84 7c 49 00 0f 89 0b 58 4c cc 4c d5 27 df 19 fa c4 88 e2 7c dc 76 1f c9 74 45 3e 4a 43 0e d1 61 ca c2 ec c1 80 c0 d1 7e 0d 63 6d 73 e4 2e 4f 9a d6 cf 7b 7e f5 3b 70 3b 42 43 b6 96 da de 3b 7e 8d a2 10 4a d6 bb 2d 75 64 c0 49 29 f9 da df 0d 9f Data Ascii: x.1/b5[{tKLT0B*r,WSjj1Kt`u;1m7H;R!>3Yeb-={8X4Em8es4p]rfW,#$.F+?[d\|IXLL'\|vtE>JCa~cms.O{~;p;BC;~J-udI)
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: d8 ce a9 ce 9b 47 6d f5 8a a3 53 6b e1 13 bd d7 d6 4f 11 86 8a 07 60 f5 6f 1b 64 c7 98 71 1e 4b e0 00 94 e0 b3 2f 4f df ad 1a a6 c5 47 a9 6c 15 cc aa a1 b8 52 c7 53 47 53 11 cb 65 89 ed 0e 63 c7 c0 b4 82 ad 37 66 3e d7 54 bd a3 f7 43 75 36 da 9f 40 cd 68 76 d8 ea f7 d8 e5 ac 96 e2 d9 c5 c4 b5 d2 37 c6 6b 43 1a 62 1f 6b cf 09 2e eb d7 92 b5 dd d2 bb a1 a8 a1 da ad 43 d9 13 73 2a 1c 75 5e cc df a5 b1 54 78 a4 71 4f 6f e3 71 a5 94 7a 8c 07 33 23 90 0d 67 32 a4 dd d7 c7 3d a9 3b 57 ff 00 76 09 bf c6 d4 a6 5b 5d 2e b3 45 dd 15 2f bb bb bb b7 9b 15 b7 97 3d d4 dd 3d 47 0d aa c7 68 83 c5 ad ac 9b 27 03 20 35 ad 6b 72 5e f7 38 86 b5 a0 12 49 00 2a 9d cf 58 3d df 50 ea 5b 9d b3 64 f4 66 ad ab 7c 5a 42 f3 bb 14 b1 6a 9c c8 5b 13 a1 0d 03 0f 39 00 00 c7 4a ef ef 73 Data Ascii: GmSkO`odqK/OGlRSGSec7f>TCu6@hv7kCbk.Csu^TxqOoqz3#g2=;Wv[].E/==Gh' 5kr^8IX=P[df\|ZBj[9Js
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 5e 5a 1d de f6 b4 0d c0 e0 ba f6 57 a2 ed 45 36 99 ae d5 3d a8 6f d6 df ae 37 69 e3 9a dd a7 ad b4 4c 8d b6 78 83 48 31 39 ed cf 1b 9d c8 90 4b b8 48 f9 47 38 17 5d a3 03 08 c6 f0 8c 7c 17 2b 5f cd cc 99 b9 97 46 c8 d6 df 83 45 9a 38 58 01 fe e7 72 49 5b c2 99 20 29 92 10 e5 44 47 c4 ca 3d 68 8e 2e 7b 8d ee 4b 9c 78 92 76 16 00 68 d0 00 00 11 11 5b 2b f4 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 58 e3 de ed fd 8c fd ed fe e7 77 0f f0 02 c8 e5 62 3b cd b4 06 b7 dd 5e c0 9b b7 b7 3b 6f a5 ab 6f 77 db ce 87 ad a5 b5 5a 6d f1 87 cd 57 3b 9a 03 63 60 24 65 c7 e7 57 32 64 36 6e 19 3b 66 1f 35 46 60 13 2e f0 39 1f 92 bc da 43 fa d4 b6 7f b9 f0 7f 8b 6a 98 a8 0d 2d 0c d4 da 6e df 4b 53 13 99 24 54 30 b6 46 38 73 6b 83 00 20 a8 f5 6e 77 55 46 c8 88 8b Data Ascii: ^ZWE6=o7iLxH19KHG8]\|+_FE8XrI[ )DG=h.{Kxvh[+DDDDDDDDDDDDDDDDDDXwb;^;oowZmW;c`$eW2d6n;f5F`.9Cj-nKS$T0F8sk nwUF
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 7c 4c 7c a0 39 ab 79 ae 36 e0 69 5b d1 14 b1 b8 41 58 c7 4b 06 1b f2 64 1f 2d bf e7 fa 56 79 93 cd 8c 03 6f ad 82 c7 b6 53 ab 79 77 8a a5 62 b2 c6 5c c7 96 1c 79 85 ed 25 ba 99 ad 24 00 00 ea a7 70 d3 c4 fa 41 c2 1b 90 30 47 a2 96 d6 c5 e2 c8 63 c6 07 f2 af b9 89 2a bb 48 d9 4a aa 69 a1 e1 3c 2d e5 eb 95 06 fa 66 b8 91 8e 4a 75 3d 18 64 5c 2d 6e 54 1b e9 71 26 00 e6 4a f6 1c be 90 a9 9b ad aa 46 3c 4f 17 2c 1f 21 d5 75 b3 c5 51 40 d9 1c c9 0b 5e 5f c4 07 91 55 54 96 c8 ab 07 01 68 38 1c f0 14 9e b6 d6 fa 62 f0 d6 13 cb 90 ea aa 88 99 85 8a a5 d4 80 ec c1 54 9a 63 52 37 c1 c7 18 0f 04 71 05 3f a9 d4 8d 10 0c cc 41 03 a6 55 98 83 58 8b 45 cc c5 54 1e 1a d3 c2 f2 47 4f 8a ae 74 fd ce 96 eb 47 f5 c6 5a 81 e1 b4 13 92 ee 58 f9 d5 28 d0 32 0c c7 65 ee 1c 56 c5 Data Ascii: \|L\|9y6i[AXKd-VyoSywb\y%$pA0Gc*HJi<-fJu=d\-nTq&JF<O,!uQ@^_UTh8bTcR7q?AUXETGOtGZX(2eV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:53 UTC	968	OUT	GET /portals/_default/skins/customizable/css/gg-dnn.min.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:53 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:53 GMT Content-Type: text/css Content-Length: 35120 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:53 UTC	15715	IN	Data Raw: 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 7d 62 6f 64 79 2c 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 74 64 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 74 68 7b 70 61 64 64 Data Ascii: hr{box-sizing:content-box;border-top:1px solid #eee;border-bottom:1px solid #fff}body,html{font-family:Roboto !important;background-color:#fff;font-size:14px;line-height:20px}td{padding:0;margin:0;font-size:14px;line-height:20px;font-weight:normal}th{padd
2024-04-24 05:31:53 UTC	16384	IN	Data Raw: 2d 64 6f 6e 61 74 69 6f 6e 2d 66 6f 72 6d 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 66 6f 72 6d 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 73 75 72 76 65 79 2d 71 75 65 73 74 69 6f 6e 2d 66 69 65 6c 64 73 65 74 20 2e 63 6f 6e 74 72 6f 6c 73 20 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 66 6f 72 6d 2d 61 6c 69 67 6e 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 66 6f 72 6d 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 63 61 72 64 2d 69 6e 66 6f 2d 75 73 65 72 2d 66 69 65 6c 64 73 65 74 20 6c 61 62 65 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 66 6f 72 6d 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 63 61 72 64 2d 69 6e 66 6f 2d 75 73 65 Data Ascii: -donation-form{text-align:left}.form-align-left .survey-question-fieldset .controls label{margin-top:5px;width:auto}.form-align-left{text-align:left}.form-align-left .card-info-user-fieldset label{text-align:left;width:auto}.form-align-left .card-info-use
2024-04-24 05:31:53 UTC	3021	IN	Data Raw: 2e 67 67 2d 70 6f 77 65 72 65 64 42 79 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 32 30 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 32 70 78 7d 2e 67 67 2d 65 6e 74 72 75 73 74 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 2e 67 67 2d 70 6f 77 65 72 65 64 42 79 4c 6f 67 6f 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 67 67 2d 6f 72 67 2d 63 6f 70 79 72 69 67 68 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f Data Ascii: .gg-poweredBy{float:right;text-align:right;vertical-align:bottom;max-width:200px;min-width:52px}.gg-entrust{height:60px;text-align:right;vertical-align:middle;float:right;margin-left:10px}.gg-poweredByLogo{float:left}.gg-org-copyright{float:left;margin-to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:53 UTC	968	OUT	GET /portals/_default/skins/customizable/css/gg-nav.min.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:53 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:53 GMT Content-Type: text/css Content-Length: 6513 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:53 UTC	6513	IN	Data Raw: ef bb bf 2e 6e 61 76 62 61 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 7b 6d 61 72 67 69 6e 3a 30 3b 7d 2e 4e 61 76 4c 69 6e 6b 73 2d 4c 69 73 74 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 69 6d 61 67 65 2d 77 69 64 74 68 3a 30 3b 7d 2e 4e 61 76 4c 69 6e 6b 73 2d 4c 69 73 74 20 75 6c 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 7d 2e 6e 61 76 62 61 72 20 2e 62 72 61 6e 64 7b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 6e 61 Data Ascii: .navbar{margin-bottom:0;border:0 solid transparent;}.navbar-toggle{margin:0;}.NavLinks-List{border:none;box-shadow:none;background-color:transparent;padding-right:0;border-image-width:0;}.NavLinks-List ul:after{clear:both;}.navbar .brand{padding:0;}.na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:53 UTC	976	OUT	GET /portals/_default/skins/customizable/css/gg-fixed-width.min.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:53 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:53 GMT Content-Type: text/css Content-Length: 6469 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:53 UTC	6469	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 2e 62 75 74 74 6f 6e 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 67 67 2d 6d 61 73 74 65 72 2d 77 72 61 70 70 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 6e 61 76 62 61 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 61 70 74 69 6f 6e 2d 62 6f 78 65 64 2d 6c 61 79 6f 75 74 7b 70 61 64 64 69 6e 67 Data Ascii: @charset "utf-8";.button-row{margin-right:15px}.gg-master-wrapper{box-shadow:0 0 5px 0 rgba(0,0,0,.3)}.container{padding-left:0;padding-right:0}.row{margin-left:0;margin-right:0}.navbar{padding-top:0;padding-bottom:0}.carousel-caption-boxed-layout{padding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:53 UTC	984	OUT	GET /portals/_default/skins/customizable/css/gg-fixed-width-sidebar.min.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:54 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:53 GMT Content-Type: text/css Content-Length: 192 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:54 UTC	192	IN	Data Raw: ef bb bf 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 37 39 70 78 29 7b 2e 66 75 6e 64 72 61 69 73 69 6e 67 53 69 67 6e 75 70 54 65 78 74 44 69 76 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 75 6e 64 72 61 69 73 69 6e 67 53 69 67 6e 75 70 49 6d 61 67 65 44 69 76 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 7d Data Ascii: @media(min-width:768px) and (max-width:979px){.fundraisingSignupTextDiv{float:none;clear:both;max-width:100%}.fundraisingSignupImageDiv{float:none;clear:both;max-width:100%;margin-right:0}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	945	OUT	GET /Resources/libraries/jQuery/03_06_01/jquery.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:54 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: application/javascript Content-Length: 305923 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:54 UTC	15700	IN	Data Raw: ef bb bf 2f 2a 21 0d 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 36 2e 31 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0d 0a 20 2a 0d 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v3.6.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * D
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 09 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 5c 5c 5d 22 2c 0d 0a 0d 0a 09 09 09 09 70 73 65 75 64 6f 73 20 3d 20 22 3a 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 28 3f 3a 5c 5c 28 28 22 20 2b 0d 0a 0d 0a 09 09 09 09 09 2f 2f 20 54 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 6c 65 63 74 6f 72 73 20 6e 65 65 64 69 6e 67 20 74 6f 6b 65 6e 69 7a 65 20 69 6e 20 74 68 65 20 70 72 65 46 69 6c 74 65 72 2c 20 70 72 65 66 65 72 20 61 72 67 75 6d 65 6e 74 73 3a 0d 0a 09 09 09 09 09 2f 2f 20 31 2e 20 71 75 6f 74 65 64 20 28 63 61 70 74 75 72 65 20 33 3b 20 63 61 70 74 75 72 65 20 34 20 6f 72 20 63 61 70 74 75 72 65 20 35 29 0d 0a 09 09 09 09 09 22 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 Data Ascii: whitespace + "\\]",pseudos = ":(" + identifier + ")(?:\\((" +// To reduce the number of selectors needing tokenize in the preFilter, prefer arguments:// 1. quoted (capture 3; capture 4 or capture 5)"('((?:\\\\.\|[^\\\\']))
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 0d 0a 09 09 09 20 2a 20 40 70 61 72 61 6d 20 7b 45 6c 65 6d 65 6e 74 7c 4f 62 6a 65 63 74 7d 20 5b 64 6f 63 5d 20 41 6e 20 65 6c 65 6d 65 6e 74 20 6f 72 20 64 6f 63 75 6d 65 6e 74 20 6f 62 6a 65 63 74 20 74 6f 20 75 73 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0d 0a 09 09 09 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 52 65 74 75 72 6e 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 0d 0a 09 09 09 20 2a 2f 0d 0a 09 09 09 73 65 74 44 6f 63 75 6d 65 6e 74 20 3d 20 53 69 7a 7a 6c 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 64 65 29 20 7b 0d 0a 09 09 09 09 76 61 72 20 68 61 73 43 6f 6d 70 61 72 65 2c 20 Data Ascii: the current document * @param {Element\|Object} [doc] An element or document object to use to set the document * @returns {Object} Returns the current document */setDocument = Sizzle.setDocument = function (node) {var hasCompare,
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 61 62 6c 65 20 65 71 65 71 65 71 20 2a 2f 0d 0a 09 09 09 09 09 09 09 61 70 5b 69 5d 20 3d 3d 20 70 72 65 66 65 72 72 65 64 44 6f 63 20 3f 20 2d 31 20 3a 0d 0a 09 09 09 09 09 09 09 09 62 70 5b 69 5d 20 3d 3d 20 70 72 65 66 65 72 72 65 64 44 6f 63 20 3f 20 31 20 3a 0d 0a 09 09 09 09 09 09 09 09 09 2f 2a 20 65 73 6c 69 6e 74 2d 65 6e 61 62 6c 65 20 65 71 65 71 65 71 20 2a 2f 0d 0a 09 09 09 09 09 09 09 09 09 30 3b 0d 0a 09 09 09 09 09 7d 3b 0d 0a 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 3b 0d 0a 09 09 09 7d 3b 0d 0a 0d 0a 09 09 09 53 69 7a 7a 6c 65 2e 6d 61 74 63 68 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 78 70 72 2c 20 65 6c 65 6d 65 6e 74 73 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 53 69 7a 7a 6c 65 28 65 78 70 72 2c 20 Data Ascii: able eqeqeq /ap[i] == preferredDoc ? -1 :bp[i] == preferredDoc ? 1 :/ eslint-enable eqeqeq */0;};return document;};Sizzle.matches = function (expr, elements) {return Sizzle(expr,
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 09 2f 2f 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 73 65 6c 65 63 74 6f 72 73 2f 23 6c 61 6e 67 2d 70 73 65 75 64 6f 0d 0a 09 09 09 09 09 22 6c 61 6e 67 22 3a 20 6d 61 72 6b 46 75 6e 63 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 20 28 6c 61 6e 67 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 2f 2f 20 6c 61 6e 67 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 61 20 76 61 6c 69 64 20 69 64 65 6e 74 69 66 69 65 72 0d 0a 09 09 09 09 09 09 69 66 20 28 21 72 69 64 65 6e 74 69 66 69 65 72 2e 74 65 73 74 28 6c 61 6e 67 20 7c 7c 20 22 22 29 29 20 7b 0d 0a 09 09 09 09 09 09 09 53 69 7a 7a 6c 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 3a 20 22 20 2b 20 6c 61 6e 67 29 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 6c Data Ascii: // http://www.w3.org/TR/selectors/#lang-pseudo"lang": markFunction(function (lang) {// lang value must be a valid identifierif (!ridentifier.test(lang \|\| "")) {Sizzle.error("unsupported lang: " + lang);}l
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 78 74 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 20 7c 7c 20 63 6f 6e 74 65 78 74 20 7c 7c 20 6f 75 74 65 72 6d 6f 73 74 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 70 61 73 73 69 6e 67 20 65 6c 65 6d 65 6e 74 4d 61 74 63 68 65 72 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 72 65 73 75 6c 74 73 0d 0a 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 3c 39 2c 20 53 61 66 61 72 69 0d 0a 09 09 09 09 09 09 2f 2f 20 54 6f 6c 65 72 61 74 65 20 4e 6f 64 65 4c 69 73 74 20 70 72 6f 70 65 72 74 69 65 73 20 28 49 45 3a 20 22 6c 65 6e 67 74 68 22 3b 20 53 61 66 61 72 69 3a 20 3c 6e 75 6d 62 65 72 3e 29 20 6d 61 74 63 68 69 6e 67 20 65 6c 65 6d 65 6e 74 73 20 62 79 20 69 64 0d 0a 09 09 09 09 09 09 66 6f Data Ascii: xt == document \|\| context \|\| outermost;}// Add elements passing elementMatchers directly to results// Support: IE<9, Safari// Tolerate NodeList properties (IE: "length"; Safari: <number>) matching elements by idfo
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 0d 0a 09 09 09 69 66 20 28 21 72 6e 65 65 64 73 43 6f 6e 74 65 78 74 2e 74 65 73 74 28 73 65 6c 65 63 74 6f 72 73 29 29 20 7b 0d 0a 09 09 09 09 66 6f 72 20 28 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 20 7b 0d 0a 09 09 09 09 09 66 6f 72 20 28 63 75 72 20 3d 20 74 68 69 73 5b 69 5d 3b 20 63 75 72 20 26 26 20 63 75 72 20 21 3d 3d 20 63 6f 6e 74 65 78 74 3b 20 63 75 72 20 3d 20 63 75 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 2f 2f 20 41 6c 77 61 79 73 20 73 6b 69 70 20 64 6f 63 75 6d 65 6e 74 20 66 72 61 67 6d 65 6e 74 73 0d 0a 09 09 09 09 09 09 69 66 20 28 63 75 72 2e 6e 6f 64 65 54 79 70 65 20 3c 20 31 31 20 26 26 20 28 74 61 72 67 65 74 73 20 3f 0d 0a 09 09 09 09 09 09 09 74 61 72 67 65 74 73 2e 69 6e 64 65 78 28 63 75 72 29 Data Ascii: if (!rneedsContext.test(selectors)) {for (; i < l; i++) {for (cur = this[i]; cur && cur !== context; cur = cur.parentNode) {// Always skip document fragmentsif (cur.nodeType < 11 && (targets ?targets.index(cur)
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 20 6f 70 74 69 6f 6e 61 6c 20 68 6f 6f 6b 20 74 6f 20 72 65 63 6f 72 64 20 74 68 65 20 73 74 61 63 6b 2c 20 69 6e 20 63 61 73 65 20 6f 66 20 65 78 63 65 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 2f 2f 20 73 69 6e 63 65 20 69 74 27 73 20 6f 74 68 65 72 77 69 73 65 20 6c 6f 73 74 20 77 68 65 6e 20 65 78 65 63 75 74 69 6f 6e 20 67 6f 65 73 20 61 73 79 6e 63 0d 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 67 65 74 53 74 61 63 6b 48 6f 6f 6b 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 3d 20 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 67 65 74 53 74 61 63 6b 48 6f 6f 6b 28 29 3b 0d 0a 09 09 09 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 09 09 09 77 Data Ascii: optional hook to record the stack, in case of exception// since it's otherwise lost when execution goes asyncif (jQuery.Deferred.getStackHook) {process.stackTrace = jQuery.Deferred.getStackHook();}w
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0d 0a 09 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0d 0a 09 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 60 75 6e 64 65 66 69 6e 65 64 60 20 66 6f 72 20 65 6c 65 6d 20 3d 20 74 68 69 73 5b 20 30 20 5d 20 77 68 69 63 68 20 77 69 6c 6c 0d 0a 09 09 09 09 2f 2f 20 74 68 72 6f 77 20 61 6e 20 65 78 63 65 70 74 69 6f 6e 20 69 66 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 61 64 20 61 20 64 61 74 61 20 Data Ascii: // (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in `undefined` for elem = this[ 0 ] which will// throw an exception if an attempt to read a data
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 6e 75 6c 6c 29 20 7b 0d 0a 0d 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2c 20 66 6e 20 29 0d 0a 09 09 09 66 6e 20 3d 20 73 65 6c 65 63 74 6f 72 3b 0d 0a 09 09 09 64 61 74 61 20 3d 20 73 65 6c 65 63 74 6f 72 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 7d 20 65 6c 73 65 20 69 66 20 28 66 6e 20 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 09 09 09 69 66 20 28 74 79 70 65 6f 66 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 0d 0a 09 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2c 20 73 65 6c 65 63 74 6f 72 2c 20 66 6e 20 29 0d 0a 09 09 09 09 66 6e 20 3d 20 64 61 74 61 3b 0d 0a 09 09 09 09 64 61 74 61 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 0d 0a 09 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2c Data Ascii: null) {// ( types, fn )fn = selector;data = selector = undefined;} else if (fn == null) {if (typeof selector === "string") {// ( types, selector, fn )fn = data;data = undefined;} else {// ( types,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	951	OUT	GET /Resources/libraries/jQuery-UI/01_13_02/jquery-ui.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:54 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: application/javascript Content-Length: 549961 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:54 UTC	15700	IN	Data Raw: ef bb bf 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 63 75 72 72 65 6e 74 20 3d 20 24 28 63 75 72 72 65 6e 74 2e 6e 6f 74 28 6f 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 29 2e 67 65 74 28 29 29 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 74 68 61 74 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 63 6c 61 73 73 65 73 5b 69 5d 5d 20 3d 20 63 75 72 72 65 6e 74 3b 0d 0a 09 09 09 09 09 66 75 6c 6c 2e 70 75 73 68 28 63 6c 61 73 73 65 73 5b 69 5d 29 3b 0d 0a 09 09 09 09 09 69 66 20 28 63 68 65 63 6b 4f 70 74 69 6f 6e 20 26 26 20 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 65 73 5b 63 6c 61 73 73 65 73 5b 69 5d 5d 29 20 7b 0d 0a 09 09 09 09 09 09 66 75 6c 6c 2e 70 75 73 68 28 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 65 73 5b 63 6c 61 73 73 65 73 5b 69 5d 5d 29 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 Data Ascii: current = $(current.not(options.element).get());}that.classesElementLookup[classes[i]] = current;full.push(classes[i]);if (checkOption && options.classes[classes[i]]) {full.push(options.classes[classes[i]]);}
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 69 74 68 69 6e 4f 66 66 73 65 74 2c 0d 0a 09 09 09 09 09 09 6e 65 77 4f 76 65 72 52 69 67 68 74 3b 0d 0a 0d 0a 09 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 69 73 20 77 69 64 65 72 20 74 68 61 6e 20 77 69 74 68 69 6e 0d 0a 09 09 09 09 09 69 66 20 28 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 20 3e 20 6f 75 74 65 72 57 69 64 74 68 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 69 73 20 69 6e 69 74 69 61 6c 6c 79 20 6f 76 65 72 20 74 68 65 20 6c 65 66 74 20 73 69 64 65 20 6f 66 20 77 69 74 68 69 6e 0d 0a 09 09 09 09 09 09 69 66 20 28 6f 76 65 72 4c 65 66 74 20 3e 20 30 20 26 26 20 6f 76 65 72 52 69 67 68 74 20 3c 3d 20 30 29 20 7b 0d 0a 09 09 09 09 09 09 09 6e 65 77 4f 76 65 72 52 69 67 68 74 20 3d 20 70 6f 73 69 74 Data Ascii: ithinOffset,newOverRight;// Element is wider than withinif (data.collisionWidth > outerWidth) {// Element is initially over the left side of withinif (overLeft > 0 && overRight <= 0) {newOverRight = posit
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 7d 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 73 61 6d 65 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 72 65 74 75 72 6e 20 73 61 6d 65 3b 0d 0a 09 09 7d 2c 0d 0a 09 09 5f 73 70 61 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 09 76 61 72 20 75 73 65 64 20 3d 20 5b 5d 2c 0d 0a 09 09 09 09 69 6e 73 74 20 3d 20 74 68 69 73 3b 0d 0a 09 09 09 65 61 63 68 28 73 70 61 63 65 73 2c 20 66 75 6e 63 74 69 6f 6e 20 28 73 70 61 63 65 4e 61 6d 65 2c 20 73 70 61 63 65 29 20 7b 0d 0a 09 09 09 09 69 66 20 28 69 6e 73 74 5b 73 70 61 63 65 2e 63 61 63 68 65 5d 29 20 7b 0d 0a 09 09 09 09 09 75 73 65 64 2e 70 75 73 68 28 73 70 61 63 65 4e 61 6d 65 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 29 Data Ascii: }});}return same;});return same;},_space: function () {var used = [],inst = this;each(spaces, function (spaceName, space) {if (inst[space.cache]) {used.push(spaceName);}})
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 70 61 63 65 20 2b 20 73 65 74 5b 69 5d 2c 20 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 74 79 6c 65 5b 73 65 74 5b 69 5d 5d 29 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 7d 2c 0d 0a 0d 0a 09 09 09 09 2f 2f 20 52 65 73 74 6f 72 65 73 20 61 20 73 65 74 20 6f 66 20 70 72 65 76 69 6f 75 73 6c 79 20 73 61 76 65 64 20 70 72 6f 70 65 72 74 69 65 73 20 66 72 6f 6d 20 61 20 64 61 74 61 20 73 74 6f 72 61 67 65 0d 0a 09 09 09 09 72 65 73 74 6f 72 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 73 65 74 29 20 7b 0d 0a 09 09 09 09 09 76 61 72 20 76 61 6c 2c 20 69 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 73 65 74 2e 6c 65 6e 67 74 68 3b 0d 0a 09 09 09 09 09 66 6f 72 20 28 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 Data Ascii: pace + set[i], element[0].style[set[i]]);}}},// Restores a set of previously saved properties from a data storagerestore: function (element, set) {var val, i = 0, length = set.length;for (; i < length; i++)
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 74 28 76 61 6c 75 65 73 5b 31 5d 29 20 7c 7c 20 30 2c 0d 0a 09 09 09 09 72 69 67 68 74 3a 20 76 61 6c 75 65 73 5b 32 5d 20 3d 3d 3d 20 22 61 75 74 6f 22 20 3f 20 6f 75 74 65 72 57 69 64 74 68 20 3a 20 70 61 72 73 65 46 6c 6f 61 74 28 76 61 6c 75 65 73 5b 32 5d 29 2c 0d 0a 09 09 09 09 62 6f 74 74 6f 6d 3a 20 76 61 6c 75 65 73 5b 33 5d 20 3d 3d 3d 20 22 61 75 74 6f 22 20 3f 20 6f 75 74 65 72 48 65 69 67 68 74 20 3a 20 70 61 72 73 65 46 6c 6f 61 74 28 76 61 6c 75 65 73 5b 33 5d 29 2c 0d 0a 09 09 09 09 6c 65 66 74 3a 20 70 61 72 73 65 46 6c 6f 61 74 28 76 61 6c 75 65 73 5b 34 5d 29 20 7c 7c 20 30 0d 0a 09 09 09 7d 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 24 2e 66 78 2e 73 74 65 70 2e 63 6c 69 70 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 66 78 29 20 7b 0d 0a 09 09 09 Data Ascii: t(values[1]) \|\| 0,right: values[2] === "auto" ? outerWidth : parseFloat(values[2]),bottom: values[3] === "auto" ? outerHeight : parseFloat(values[3]),left: parseFloat(values[4]) \|\| 0};}$.fx.step.clip = function (fx) {
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 73 2e 73 63 61 6c 65 64 44 69 6d 65 6e 73 69 6f 6e 73 28 65 6c 65 6d 65 6e 74 29 2c 0d 0a 09 09 09 66 72 6f 6d 20 3d 20 6f 70 74 69 6f 6e 73 2e 66 72 6f 6d 20 7c 7c 20 6f 72 69 67 69 6e 61 6c 2c 0d 0a 09 09 09 74 6f 20 3d 20 6f 70 74 69 6f 6e 73 2e 74 6f 20 7c 7c 20 24 2e 65 66 66 65 63 74 73 2e 73 63 61 6c 65 64 44 69 6d 65 6e 73 69 6f 6e 73 28 65 6c 65 6d 65 6e 74 2c 20 30 29 3b 0d 0a 0d 0a 09 09 24 2e 65 66 66 65 63 74 73 2e 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 6d 6f 64 65 20 3d 3d 3d 20 22 73 68 6f 77 22 29 20 7b 0d 0a 09 09 09 74 65 6d 70 20 3d 20 66 72 6f 6d 3b 0d 0a 09 09 09 66 72 6f 6d 20 3d 20 74 6f 3b 0d 0a 09 09 09 74 6f 20 3d 20 74 65 6d 70 3b 0d 0a 09 09 7d 0d 0a 0d 0a Data Ascii: s.scaledDimensions(element),from = options.from \|\| original,to = options.to \|\| $.effects.scaledDimensions(element, 0);$.effects.createPlaceholder(element);if (mode === "show") {temp = from;from = to;to = temp;}
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 6f 72 29 20 7b 0d 0a 0d 0a 09 09 2f 2f 20 43 53 53 20 73 74 72 69 6e 67 2f 69 64 65 6e 74 69 66 69 65 72 20 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 0d 0a 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 64 72 61 66 74 73 2e 63 73 73 77 67 2e 6f 72 67 2f 63 73 73 6f 6d 2f 23 63 6f 6d 6d 6f 6e 2d 73 65 72 69 61 6c 69 7a 69 6e 67 2d 69 64 69 6f 6d 73 0d 0a 09 09 76 61 72 20 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 0d 0a 0d 0a 09 09 76 61 72 20 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 29 20 7b 0d 0a 09 09 09 69 66 20 28 61 73 43 6f 64 65 50 6f 69 6e 74 29 20 7b Data Ascii: or) {// CSS string/identifier serialization// https://drafts.csswg.org/cssom/#common-serializing-idiomsvar rcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;var fcssescape = function (ch, asCodePoint) {if (asCodePoint) {
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 77 6e 22 0d 0a 09 09 09 7d 3b 0d 0a 09 09 09 69 66 20 28 65 76 65 6e 74 29 20 7b 0d 0a 09 09 09 09 24 2e 65 61 63 68 28 65 76 65 6e 74 2e 73 70 6c 69 74 28 22 20 22 29 2c 20 66 75 6e 63 74 69 6f 6e 20 28 69 6e 64 65 78 2c 20 65 76 65 6e 74 4e 61 6d 65 29 20 7b 0d 0a 09 09 09 09 09 65 76 65 6e 74 73 5b 65 76 65 6e 74 4e 61 6d 65 5d 20 3d 20 22 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 22 3b 0d 0a 09 09 09 09 7d 29 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 5f 6f 66 66 28 74 68 69 73 2e 68 65 61 64 65 72 73 2e 61 64 64 28 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6e 65 78 74 28 29 29 29 3b 0d 0a 09 09 09 74 68 69 73 2e 5f 6f 6e 28 74 68 69 73 2e 68 65 61 64 65 72 73 2c 20 65 76 65 6e 74 73 29 3b 0d 0a 09 09 09 74 68 69 73 2e 5f 6f 6e 28 74 68 69 73 Data Ascii: wn"};if (event) {$.each(event.split(" "), function (index, eventName) {events[eventName] = "_eventHandler";});}this._off(this.headers.add(this.headers.next()));this._on(this.headers, events);this._on(this
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 6f 20 61 6e 79 20 64 69 73 61 62 6c 65 64 20 6d 65 6e 75 20 69 74 65 6d 0d 0a 09 09 09 69 74 65 6d 73 2e 66 69 6c 74 65 72 28 22 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 0d 0a 09 09 09 2f 2f 20 49 66 20 74 68 65 20 61 63 74 69 76 65 20 69 74 65 6d 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 62 6c 75 72 20 74 68 65 20 6d 65 6e 75 0d 0a 09 09 09 69 66 20 28 74 68 69 73 2e 61 63 74 69 76 65 20 26 26 20 21 24 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 20 74 68 69 73 2e 61 63 74 69 76 65 5b 30 5d 29 29 20 7b 0d 0a 09 09 09 09 74 68 69 73 2e 62 6c 75 72 28 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 2c Data Ascii: o any disabled menu itemitems.filter(".ui-state-disabled").attr("aria-disabled", "true");// If the active item has been removed, blur the menuif (this.active && !$.contains(this.element[0], this.active[0])) {this.blur();}},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	991	OUT	GET /WebResource.axd?d=pynGkmcFUV1A_gQetflDiQxP9peo-XOx2caZj2iNuDkzgTYBre1vhGLS6XM1&t=638403336553933774 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:54 UTC	687	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: application/x-javascript Content-Length: 23063 Connection: close Cache-Control: public Expires: Wed, 23 Apr 2025 13:44:33 GMT Last-Modified: Tue, 09 Jan 2024 02:00:55 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:54 UTC	15697	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-04-24 05:31:54 UTC	7366	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 61 72 67 65 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 Data Ascii: getElementById(target); } else { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	1056	OUT	GET /ScriptResource.axd?d=1HpV3OVB0CZk39ogiBwEQbQCVOd2-eGCLhS-Ks_E3NLWxpFDBlXi1KaeEGnM8M-LDRoJU1KE4u9lKltclVCmJOvN5NYfdc5zlfiUOPRv-DCUhnoVqwFxOJbregA1&t=ffffffffbc4a7304 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:54 UTC	702	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 26951 Connection: close Cache-Control: public Expires: Wed, 23 Apr 2025 17:39:04 GMT Last-Modified: Tue, 23 Apr 2024 17:39:04 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:54 UTC	15682	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-04-24 05:31:54 UTC	11269	IN	Data Raw: 75 61 74 65 49 73 56 61 6c 69 64 28 76 61 6c 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 Data Ascii: uateIsValid(val) { var value = ValidatorGetValue(val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getEle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49766	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	1167	OUT	GET /Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ScriptManager_TSM&compress=1&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a4dd65af1-4721-4286-9a7d-9f9100b5515f%3aea597d4b%3ab25378d2 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:54 UTC	717	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: application/x-javascript Content-Length: 143841 Connection: close Cache-Control: public, max-age=31536000 Expires: Thu, 24 Apr 2025 05:31:54 GMT Last-Modified: Tue, 09 Dec 2014 00:00:00 GMT Vary: User-Agent,Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:54 UTC	15667	IN	Data Raw: 2f 2a 20 53 54 41 52 54 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 20 2a 2f 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d Data Ascii: /* START MicrosoftAjax.js *///----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeNam
2024-04-24 05:31:54 UTC	16384	IN	Data Raw: 5f 63 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 63 61 6e 63 65 6c 3d 61 7d 7d 3b 53 79 73 2e 43 61 6e 63 65 6c 45 76 65 6e 74 41 72 67 73 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 43 61 6e 63 65 6c 45 76 65 6e 74 41 72 67 73 22 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 Data Ascii: _cancel:function(a){this._cancel=a}};Sys.CancelEventArgs.registerClass("Sys.CancelEventArgs",Sys.EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writ
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b Data Ascii: n "0"+a;return a.toString()}function m(a){if(a<10)return "00"+a;if(a<100)return "0"+a;return a.toString()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 76 61 72 20 64 3d 30 3b 64 3c 33 34 3b 64 2b 2b 29 7b 76 61 72 20 62 3d 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 5b 64 5d 3b 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 62 29 21 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 Data Ascii: var d=0;d<34;d++){var b=Sys.Serialization.JavaScriptSerializer._charsToEscape[d];if(a.indexOf(b)!==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 6c 61 79 3d 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3b 65 6c 73 65 20 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 7d 3b 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 65 6e 73 75 72 65 4f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 Data Ascii: lay=a._oldDisplayMode;else a.style.display="none"}};Sys.UI.DomElement._ensureOldDisplayMode=function(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisp
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 26 22 29 2b 28 63 3f 22 26 26 22 2b 63 3a 22 22 29 7d 3b 53 79 73 2e 5f 41 70 70 6c 69 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 68 69 73 2e 5f 65 6e 61 62 6c 65 48 69 73 74 6f 72 79 29 7b 61 3d 61 7c 7c 22 22 3b 69 66 28 61 21 3d 3d 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 45 6e 74 72 79 29 7b 69 66 28 77 69 6e 64 6f 77 2e 74 68 65 46 6f 72 6d 29 7b 76 61 72 20 64 3d 77 69 6e 64 6f 77 2e 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 2c 65 3d 64 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 77 69 6e 64 6f 77 2e 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 28 65 21 3d 3d 2d 31 3f 64 2e 73 Data Ascii: IComponent(e)}return b.join("&")+(c?"&&"+c:"")};Sys._Application.prototype._setState=function(a,b){if(this._enableHistory){a=a\|\|"";if(a!==this._currentEntry){if(window.theForm){var d=window.theForm.action,e=d.indexOf("#");window.theForm.action=(e!==-1?d.s
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 3d 22 22 7d 64 2e 73 65 74 5f 62 6f 64 79 28 6f 29 3b 64 2e 61 64 64 5f 63 6f 6d 70 6c 65 74 65 64 28 78 29 3b 69 66 28 65 26 26 65 3e 30 29 64 2e 73 65 74 5f 74 69 6d 65 6f 75 74 28 65 29 3b 64 2e 69 6e 76 6f 6b 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 69 66 28 64 2e 67 65 74 5f 72 65 73 70 6f 6e 73 65 41 76 61 69 6c 61 62 6c 65 28 29 29 7b 76 61 72 20 66 3d 64 2e 67 65 74 5f 73 74 61 74 75 73 43 6f 64 65 28 29 2c 63 3d 6e 75 6c 6c 3b 74 72 79 7b 76 61 72 20 65 3d 64 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 3b 69 66 28 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 29 63 3d 64 2e 67 65 74 5f 6f 62 6a 65 63 74 28 29 3b 65 6c 73 65 20 Data Ascii: =""}d.set_body(o);d.add_completed(x);if(e&&e>0)d.set_timeout(e);d.invoke();function x(d){if(d.get_responseAvailable()){var f=d.get_statusCode(),c=null;try{var e=d.getResponseHeader("Content-Type");if(e.startsWith("application/json"))c=d.get_object();else
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 4e 6f 64 65 3b 69 66 28 21 62 29 7b 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 62 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 22 3b 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 62 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 6e 70 75 74 20 74 79 70 65 3d 27 68 69 64 64 65 6e 27 20 2f 3e 22 3b 61 3d 62 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 3b 61 2e 5f 69 73 43 6f 6e 74 61 69 6e 65 64 3d 74 72 75 65 3b 61 2e 69 64 3d 61 2e 6e 61 6d 65 3d 63 3b 61 2e 76 61 6c 75 65 3d 64 7d 2c 5f 63 72 65 61 74 65 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 66 75 6e Data Ascii: Node;if(!b){b=document.createElement("span");b.style.cssText="display:none !important";this._form.appendChild(b)}b.innerHTML="<input type='hidden' />";a=b.childNodes[0];a._isContained=true;a.id=a.name=c;a.value=d},_createPageRequestManagerTimeoutError:fun
2024-04-24 05:31:55 UTC	13486	IN	Data Raw: 69 6f 6e 2e 63 72 65 61 74 65 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 46 61 69 6c 65 64 2c 61 29 29 2c 6e 75 6c 6c 29 7d 2c 5f 6f 6e 57 69 6e 64 6f 77 55 6e 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 69 73 70 6f 73 65 28 29 7d 2c 5f 70 61 67 65 4c 6f 61 64 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 67 65 74 48 61 6e 64 6c 65 72 28 22 70 61 67 65 4c 6f 61 64 65 64 22 29 3b 69 66 28 62 29 62 28 74 68 69 73 2c 74 68 69 73 2e 5f 67 65 74 50 61 67 65 4c 6f 61 64 65 64 45 76 65 6e 74 41 72 67 73 28 61 2c 63 29 29 3b 69 66 28 21 61 29 53 79 73 2e 41 70 70 6c 69 63 61 74 Data Ascii: ion.createCallback(this._scriptIncludesLoadFailed,a)),null)},_onWindowUnload:function(){this.dispose()},_pageLoaded:function(a,c){var b=this._get_eventHandlerList().getHandler("pageLoaded");if(b)b(this,this._getPageLoadedEventArgs(a,c));if(!a)Sys.Applicat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	909	OUT	GET /js/dnn.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:55 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: application/javascript Content-Length: 17886 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:55 UTC	15701	IN	Data Raw: 76 61 72 20 64 6e 6e 4a 73 63 72 69 70 74 56 65 72 73 69 6f 6e 3d 22 36 2e 30 2e 30 22 3b 69 66 28 74 79 70 65 6f 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 43 68 72 6f 6d 65 29 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 53 79 73 2e 42 72 6f 77 73 65 72 2e 43 68 72 6f 6d 65 3d 7b 7d 3b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 20 43 68 72 6f 6d 65 2f 22 29 3e 2d 31 29 7b 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 43 68 72 6f 6d 65 3b 53 79 73 2e 42 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5c 64 2b 5c 2e 5c 64 2b Data Ascii: var dnnJscriptVersion="6.0.0";if(typeof(Sys.Browser.Chrome)=="undefined"){Sys.Browser.Chrome={};if(navigator.userAgent.indexOf(" Chrome/")>-1){Sys.Browser.agent=Sys.Browser.Chrome;Sys.Browser.version=parseFloat(navigator.userAgent.match(/Chrome\/(\d+\.\d+
2024-04-24 05:31:55 UTC	2185	IN	Data Raw: 74 75 72 6e 22 22 7d 2c 61 70 70 65 6e 64 43 68 69 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 72 65 74 75 72 6e 20 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 2c 72 65 6d 6f 76 65 43 68 69 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 7d 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 7d 29 3b 64 6e 6e 2e 64 6f 6d 2e 6c 65 61 6b 45 76 74 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 62 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 63 3b 74 68 69 73 2e 63 74 6c 3d 61 3b 74 68 69 73 2e Data Ascii: turn""},appendChild:function(b,a){return b.appendChild(a)},removeChild:function(a){return a.parentNode.removeChild(a)},createElement:function(a){return document.createElement(a.toLowerCase())}});dnn.dom.leakEvt=function(c,a,b){this.name=c;this.ctl=a;this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:54 UTC	390	OUT	GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:31:55 UTC	175	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:54 GMT Content-Type: image/png Content-Length: 262144 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:31:55 UTC	16209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 d6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 01 02 03 0a ff c4 00 7d 10 00 01 03 03 02 03 05 03 03 0d 06 0e 06 14 07 11 01 00 02 03 04 05 11 06 07 12 21 31 08 09 13 41 51 14 22 61 32 71 81 0a 15 Data Ascii: JFIFCC"}!1AQ"a2q
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 99 71 e6 49 e6 df a5 75 14 af c1 2e c9 00 f2 70 76 72 54 d2 03 83 9a 0d d4 22 65 a5 af 3a 23 9a 5c d1 d7 a1 f3 e8 b8 31 39 dc f8 3a 00 33 9f 4f e4 51 34 f1 60 70 f1 67 38 27 03 a2 f7 74 40 8f a3 cf 9a b9 ce 16 3d c1 c4 a9 4c f4 ae 1c c8 23 2e c7 20 ad 5f 6b 7b 30 a9 db 8a 7b 9b 1a 78 a8 6e b1 92 ef 40 f6 b9 9f ca 42 bc d5 31 31 a3 8b 19 38 ea 15 13 be f6 33 7c da ab e5 14 6d e2 73 28 0c d1 90 33 97 46 43 f3 f9 01 58 9c 41 03 ed d4 19 98 20 6a 58 eb 78 81 71 f1 b2 cc 61 d9 9f b0 d7 e5 63 9d 83 db 7f 02 6c 7e 04 ab 81 dd 17 ad 8d cf 6a 75 36 81 9a 57 39 f6 7b eb 2a a1 6b 9d c9 b1 54 47 d0 0f e3 c4 f2 7e 2e 59 74 06 47 30 b5 bf dd 5f ae 46 9b ed 1d 3e 95 96 50 21 d4 56 29 a1 60 73 b0 0c b1 16 ca cc 7a 92 d0 ff 00 d6 b6 40 08 20 7f 9d 6b 4c 23 35 f6 9a 23 01 Data Ascii: qIu.pvrT"e:#\19:3OQ4`pg8't@=L#. _k{0{xn@B1183\|ms(3FCXA jXxqacl~ju6W9{*kTG~.YtG0_F>P!V)`sz@ kL#5#
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 77 66 71 22 c4 66 75 9c 4e d6 1b 9d bc ae 16 d9 9a 99 94 8f 4d 6b e5 c5 a1 e8 00 37 d8 68 3b f8 71 f3 5e f0 44 de 6f 96 41 81 c8 0c 73 07 3f ab e7 51 71 53 90 d6 b1 ae c0 2e c8 6a f1 a7 0e 6b 3c 3c 0e 5c c1 f3 23 d1 46 b7 88 30 87 34 0c 9e 2c 35 4b 08 71 21 a7 fa b7 97 7d d6 10 bc 37 55 d5 ac 1c 7e 1b b0 5b 8c 90 07 45 2f bc 6a 8b 26 9f ad 8a dd 5b 53 28 a8 95 85 ec 86 08 5d 21 c0 1c dc 71 f2 7e 9c 65 4d 5c d6 e0 35 b9 f2 e2 20 75 54 65 3c 2d 35 97 5b b4 cf 71 e3 af 78 e3 73 b2 78 47 26 81 f0 f8 2b c9 69 26 c4 36 71 cb a6 bc fe 9f 3d 15 bb a3 5e e4 0b f2 e5 f5 e1 ef 55 25 06 a3 b5 5c 1d e1 53 dc 63 33 63 21 ae 18 24 0f 81 f3 f9 94 43 a7 04 e5 83 39 1c c9 3e 6a d8 ea 5b dd 63 24 22 82 d9 4c f7 44 43 84 d3 48 ec 35 dd 70 38 79 e5 50 f3 f6 80 d5 fb 6f 79 92 Data Ascii: wfq"fuNMk7h;q^DoAs?QqS.jk<<\#F04,5Kq!}7U~[E/j&[S(]!q~eM\5 uTe<-5[qxsxG&+i&6q=^U%\Sc3c!$C9>j[c$"LDCH5p8yPoy
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: f5 d0 9f 15 e7 87 a3 cf 97 c4 ad a1 4e 61 bb da 5f ec 55 4c 7c 75 54 c7 c1 95 8e e2 6b 83 9b c9 c0 8e a3 04 1c ac 35 7f 60 9d ee 13 3f 11 5a 5c 0b ce 08 b9 75 e7 d7 9b 54 c3 16 c8 cd cf 18 26 03 0b ad 9a f6 17 de cb 5f f4 7f 53 90 a6 b6 64 4d 45 0c 27 2d ae 6d 7b 66 bf ba ea c4 32 0f 87 cf c9 7a c7 4c 70 09 6f 5f 82 be b1 76 0c de b1 82 e8 2d 5f a4 47 f3 54 16 ac ec 95 b8 1a 0e d4 db ae a4 fa dc 1b 24 cd 82 9e 08 2b 83 e5 a8 95 c4 06 c7 1b 31 97 38 e7 a0 f2 c9 50 c7 d1 aa 50 9a 5e f8 4e 00 71 b1 5b 26 1e 23 a2 46 88 19 0e 61 a4 9d 80 21 43 f6 6d b4 d4 4d a7 6e 14 fc 20 47 7c d5 d6 1b 63 78 99 9e 71 d4 3a ad ee f9 83 62 19 3f 15 55 5c 67 8e e1 a1 6a ee ef 8c 39 f3 e9 4d 55 77 8c 02 47 fb 2a bd 94 ec 60 f5 27 a8 f5 ca 9d 58 b4 8b 74 55 8a 9b 4c d8 0b 25 ae Data Ascii: Na_UL\|uTk5`?Z\uT&_SdME'-m{f2zLpo_v-_GT$+18PP^Nq[&#Fa!CmMn G\|cxq:b?U\gj9MUwG*`'XtUL%
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: b2 d3 7a d1 d7 6d 41 41 71 6d 4d 2b c6 90 bd d5 4d 2b 62 8d 8d 93 8d cd 89 bc d9 1f 1e 5c 01 ce 09 ca 82 d4 7b 09 7c db 98 f1 a8 2f f6 8a c7 41 28 8a 67 5b 2b 38 e4 83 2f 24 02 df 94 e3 8f ba f2 e9 c9 5d 8d 33 a2 b4 7e aa 7d 1e 96 da cb 7d 65 fe de ca 98 ea e4 a8 92 57 47 ee bb 9b a3 aa 32 34 0e 00 78 8b 4b 07 99 0a ea a7 56 87 92 1c c4 38 a7 aa 3a dc 0b 00 5a 41 b9 79 b5 af a0 ca 6d 98 5f 7e 16 92 12 2d 11 5f 05 cc 19 c6 9a 9d 6c 74 b0 02 f7 e2 6f c0 db 65 2f 97 4e 6a 2b c6 d7 be af 56 e8 4a 46 ea 06 d1 d2 91 35 2d 03 a0 a9 8a 9a 26 90 c7 c8 c6 0e 02 1e dc fb dd 4e 01 56 f6 3c 3d b9 6f 31 f0 3d 42 c9 9b 56 97 be 58 22 a8 b8 59 dd 14 fc 72 be dd 1b 68 a7 a8 95 a6 27 38 70 b3 de fb 98 c6 47 0f 3c b7 3c d5 80 d7 fa 46 af 44 6b 1b 86 98 a9 39 f6 69 cf 86 ff Data Ascii: zmAAqmM+M+b\{\|/A(g[+8/$]3~}}eWG24xKV8:ZAym_~-_ltoe/Nj+VJF5-&NV<=o1=BVX"Yrh'8pG<<FDk9i
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 7e fd dd fe 1b 0f bc b2 82 24 39 09 61 36 d0 33 1d 20 83 c0 03 67 45 23 9d c6 56 7f 8a e7 76 29 05 b3 49 d9 2c 36 e8 2d 11 db 59 4f 4d 4c de 18 69 a2 e8 c1 9c 90 3d 32 79 9c 79 a9 dd 2d fe d7 66 85 91 43 48 c6 1c e1 be 1b 7d f7 e4 8c 03 e6 ee 7d 02 98 56 d2 50 36 8d d5 57 26 12 31 c8 01 e6 7a 7c ea a7 d8 ee ca f7 fb ce a9 93 59 6e 73 df 15 0c 32 36 5b 25 1d 35 41 64 ae 70 20 b6 67 16 fc 90 3c 9b e7 d5 61 71 1e 25 a4 61 7a 61 99 9b 70 00 0e c3 06 ee 3c 9a 3e 67 60 37 4c 3b 87 6a 78 a2 a0 61 42 b9 be af 79 bd 80 3c 49 e6 6d a0 dc 95 4c ea 1d 9a dd dd e1 b3 d2 5a 61 d2 33 d1 d9 6a ab 8b 2e 75 75 a0 33 c2 89 80 39 c5 d1 9f 7b 84 83 80 ec 63 3f 32 b9 bb 39 61 d3 5b 45 6d f6 6d 2f 69 a7 34 50 b5 d1 b0 3f 2e e3 6e 31 c4 09 e7 d3 a7 c3 e7 55 66 eb ea 4d 43 53 39 Data Ascii: ~$9a63 gE#Vv)I,6-YOMLi=2yy-fCH}}VP6W&1z\|Yns26[%5Adp g<aq%azap<>g`7L;jxaBy<ImLZa3j.uu39{c?29a[Emm/i4P?.n1UfMCS9
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 08 e5 98 78 af 2e ce 31 c0 ce 16 f3 e8 18 b1 2f 62 ed 35 dd bf fb c0 ae 5b d1 7b a5 74 ba 4b 4c 54 b2 a6 08 e5 8f dc 30 42 e2 da 2a 72 0f 2c bd c0 ca e1 e6 03 fd 57 d8 53 90 6a d8 c2 6a b7 31 ac bc a0 b8 e4 4b 74 60 1d ee 75 dc 3b d7 a8 f4 a9 ac 31 d1 6d 37 08 48 e9 3b 52 21 ae e6 d0 fb 3e 33 9d dc c6 59 87 bb c1 65 f7 62 2d 8b 3d 9f 7b 38 58 34 45 6d 38 65 d2 a2 0f ae 17 b3 e7 ed 73 80 e7 34 ff 00 10 70 c7 fd e7 c5 5d b7 72 66 57 2c 1c 23 24 a9 2e e3 eb 9b 46 db e8 2b ce bf be 3f 14 96 5b 64 f5 b3 8c e0 b9 b1 b0 bb 84 7c 49 00 0f 89 0b 58 4c cc 4c d5 27 df 19 fa c4 88 e2 7c dc 76 1f c9 74 45 3e 4a 43 0e d1 61 ca c2 ec c1 80 c0 d1 7e 0d 63 6d 73 e4 2e 4f 9a d6 cf 7b 7e f5 3b 70 3b 42 43 b6 96 da de 3b 7e 8d a2 10 4a d6 bb 2d 75 64 c0 49 29 f9 da df 0d 9f Data Ascii: x.1/b5[{tKLT0B*r,WSjj1Kt`u;1m7H;R!>3Yeb-={8X4Em8es4p]rfW,#$.F+?[d\|IXLL'\|vtE>JCa~cms.O{~;p;BC;~J-udI)
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: d8 ce a9 ce 9b 47 6d f5 8a a3 53 6b e1 13 bd d7 d6 4f 11 86 8a 07 60 f5 6f 1b 64 c7 98 71 1e 4b e0 00 94 e0 b3 2f 4f df ad 1a a6 c5 47 a9 6c 15 cc aa a1 b8 52 c7 53 47 53 11 cb 65 89 ed 0e 63 c7 c0 b4 82 ad 37 66 3e d7 54 bd a3 f7 43 75 36 da 9f 40 cd 68 76 d8 ea f7 d8 e5 ac 96 e2 d9 c5 c4 b5 d2 37 c6 6b 43 1a 62 1f 6b cf 09 2e eb d7 92 b5 dd d2 bb a1 a8 a1 da ad 43 d9 13 73 2a 1c 75 5e cc df a5 b1 54 78 a4 71 4f 6f e3 71 a5 94 7a 8c 07 33 23 90 0d 67 32 a4 dd d7 c7 3d a9 3b 57 ff 00 76 09 bf c6 d4 a6 5b 5d 2e b3 45 dd 15 2f bb bb bb b7 9b 15 b7 97 3d d4 dd 3d 47 0d aa c7 68 83 c5 ad ac 9b 27 03 20 35 ad 6b 72 5e f7 38 86 b5 a0 12 49 00 2a 9d cf 58 3d df 50 ea 5b 9d b3 64 f4 66 ad ab 7c 5a 42 f3 bb 14 b1 6a 9c c8 5b 13 a1 0d 03 0f 39 00 00 c7 4a ef ef 73 Data Ascii: GmSkO`odqK/OGlRSGSec7f>TCu6@hv7kCbk.Csu^TxqOoqz3#g2=;Wv[].E/==Gh' 5kr^8IX=P[df\|ZBj[9Js
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 5e 5a 1d de f6 b4 0d c0 e0 ba f6 57 a2 ed 45 36 99 ae d5 3d a8 6f d6 df ae 37 69 e3 9a dd a7 ad b4 4c 8d b6 78 83 48 31 39 ed cf 1b 9d c8 90 4b b8 48 f9 47 38 17 5d a3 03 08 c6 f0 8c 7c 17 2b 5f cd cc 99 b9 97 46 c8 d6 df 83 45 9a 38 58 01 fe e7 72 49 5b c2 99 20 29 92 10 e5 44 47 c4 ca 3d 68 8e 2e 7b 8d ee 4b 9c 78 92 76 16 00 68 d0 00 00 11 11 5b 2b f4 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 58 e3 de ed fd 8c fd ed fe e7 77 0f f0 02 c8 e5 62 3b cd b4 06 b7 dd 5e c0 9b b7 b7 3b 6f a5 ab 6f 77 db ce 87 ad a5 b5 5a 6d f1 87 cd 57 3b 9a 03 63 60 24 65 c7 e7 57 32 64 36 6e 19 3b 66 1f 35 46 60 13 2e f0 39 1f 92 bc da 43 fa d4 b6 7f b9 f0 7f 8b 6a 98 a8 0d 2d 0c d4 da 6e df 4b 53 13 99 24 54 30 b6 46 38 73 6b 83 00 20 a8 f5 6e 77 55 46 c8 88 8b Data Ascii: ^ZWE6=o7iLxH19KHG8]\|+_FE8XrI[ )DG=h.{Kxvh[+DDDDDDDDDDDDDDDDDDXwb;^;oowZmW;c`$eW2d6n;f5F`.9Cj-nKS$T0F8sk nwUF
2024-04-24 05:31:55 UTC	16384	IN	Data Raw: 7c 4c 7c a0 39 ab 79 ae 36 e0 69 5b d1 14 b1 b8 41 58 c7 4b 06 1b f2 64 1f 2d bf e7 fa 56 79 93 cd 8c 03 6f ad 82 c7 b6 53 ab 79 77 8a a5 62 b2 c6 5c c7 96 1c 79 85 ed 25 ba 99 ad 24 00 00 ea a7 70 d3 c4 fa 41 c2 1b 90 30 47 a2 96 d6 c5 e2 c8 63 c6 07 f2 af b9 89 2a bb 48 d9 4a aa 69 a1 e1 3c 2d e5 eb 95 06 fa 66 b8 91 8e 4a 75 3d 18 64 5c 2d 6e 54 1b e9 71 26 00 e6 4a f6 1c be 90 a9 9b ad aa 46 3c 4f 17 2c 1f 21 d5 75 b3 c5 51 40 d9 1c c9 0b 5e 5f c4 07 91 55 54 96 c8 ab 07 01 68 38 1c f0 14 9e b6 d6 fa 62 f0 d6 13 cb 90 ea aa 88 99 85 8a a5 d4 80 ec c1 54 9a 63 52 37 c1 c7 18 0f 04 71 05 3f a9 d4 8d 10 0c cc 41 03 a6 55 98 83 58 8b 45 cc c5 54 1e 1a d3 c2 f2 47 4f 8a ae 74 fd ce 96 eb 47 f5 c6 5a 81 e1 b4 13 92 ee 58 f9 d5 28 d0 32 0c c7 65 ee 1c 56 c5 Data Ascii: \|L\|9y6i[AXKd-VyoSywb\y%$pA0Gc*HJi<-fJu=d\-nTq&JF<O,!uQ@^_UTh8bTcR7q?AUXETGOtGZX(2eV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:55 UTC	920	OUT	GET /js/dnn.modalpopup.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:55 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:55 GMT Content-Type: application/javascript Content-Length: 7223 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:55 UTC	7223	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 69 2e 6f 70 74 69 6f 6e 73 2c 66 3d 74 2e 70 61 72 73 65 72 5b 74 2e 73 74 72 69 63 74 4d 6f 64 65 3f 22 73 74 72 69 63 74 22 3a 22 6c 6f 6f 73 65 22 5d 2e 65 78 65 63 28 6e 29 2c 72 3d 7b 7d 2c 75 3d 31 34 3b 75 2d 2d 3b 29 72 5b 74 2e 6b 65 79 5b 75 5d 5d 3d 66 5b 75 5d 7c 7c 22 22 3b 72 65 74 75 72 6e 20 72 5b 74 2e 71 2e 6e 61 6d 65 5d 3d 7b 7d 2c 72 5b 74 2e 6b 65 79 5b 31 32 5d 5d 2e 72 65 70 6c 61 63 65 28 74 2e 71 2e 70 61 72 73 65 72 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 75 29 7b 69 26 26 28 72 5b 74 2e 71 2e 6e 61 6d 65 5d 5b 69 5d 3d 75 29 7d 29 2c 72 7d 69 2e 6f 70 74 69 6f 6e 73 3d 7b 73 74 72 69 63 74 4d 6f 64 65 Data Ascii: (function(n,t){function i(n){for(var t=i.options,f=t.parser[t.strictMode?"strict":"loose"].exec(n),r={},u=14;u--;)r[t.key[u]]=f[u]\|\|"";return r[t.q.name]={},r[t.key[12]].replace(t.q.parser,function(n,i,u){i&&(r[t.q.name][i]=u)}),r}i.options={strictMode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49769	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:55 UTC	957	OUT	GET /Resources/Shared/Scripts/jquery/jquery.hoverIntent.min.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:56 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:56 GMT Content-Type: application/javascript Content-Length: 2671 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:56 UTC	2671	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 76 31 2e 31 30 2e 32 20 2f 2f 20 32 30 32 30 2e 30 34 2e 32 38 20 2f 2f 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 30 2b 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 72 69 61 6e 63 68 65 72 6e 65 2e 67 69 74 68 75 62 2e 69 6f 2f 6a 71 75 65 72 79 2d 68 6f 76 65 72 49 6e 74 65 6e 74 2f 0d 0a 20 2a 0d 0a 20 2a 20 59 6f 75 20 6d 61 79 20 75 73 65 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 20 42 61 73 69 63 61 6c 6c 79 20 74 68 61 74 0d 0a 20 2a 20 6d 65 61 6e 73 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 61 73 20 6c 6f 6e 67 20 61 73 20 74 68 69 73 20 68 Data Ascii: /! hoverIntent v1.10.2 // 2020.04.28 // jQuery v1.7.0+ * http://briancherne.github.io/jquery-hoverIntent/ * * You may use hoverIntent under the terms of the MIT license. Basically that * means you are free to use hoverIntent as long as this h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:55 UTC	911	OUT	GET /js/aesop.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:56 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:55 GMT Content-Type: application/javascript Content-Length: 96180 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:56 UTC	15701	IN	Data Raw: ef bb bf 76 61 72 20 64 6f 6e 61 74 69 6f 6e 41 6d 6f 75 6e 74 4f 62 6a 3b 0a 76 61 72 20 69 6e 73 69 64 65 43 68 65 63 6b 41 6c 6c 3d 66 61 6c 73 65 3b 0a 76 61 72 20 61 6c 65 72 74 64 74 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 76 61 72 20 64 65 6c 69 6d 69 74 65 72 41 20 3d 20 27 3a 3a 2d 2d 3a 3a 27 3b 0a 76 61 72 20 74 6f 74 61 6c 41 6d 6f 75 6e 74 56 61 6c 3b 0a 76 61 72 20 72 65 63 75 72 72 41 6d 6f 75 6e 74 56 61 6c 3d 30 3b 0a 76 61 72 20 74 6f 74 61 6c 50 65 72 63 65 6e 74 61 67 65 41 6d 6f 75 6e 74 56 61 6c 3b 0a 76 61 72 20 70 65 72 63 65 6e 74 61 67 65 4c 69 73 74 4e 61 6d 65 3b 0a 76 61 72 20 70 65 72 63 65 6e 74 61 67 65 41 6d 6f 75 6e 74 4c 69 73 74 4e 61 6d 65 3b 0a 76 61 72 20 69 6e 73 69 64 65 53 65 74 52 65 70 6f 72 74 44 61 74 65 Data Ascii: var donationAmountObj;var insideCheckAll=false;var alertdt = new Date();var delimiterA = '::--::';var totalAmountVal;var recurrAmountVal=0;var totalPercentageAmountVal;var percentageListName;var percentageAmountListName;var insideSetReportDate
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 64 2e 22 29 3b 0a 20 7d 0a 20 65 6c 73 65 20 69 66 20 28 74 61 72 67 65 74 20 3d 3d 20 62 74 6e 72 65 73 65 74 63 6c 69 65 6e 74 69 64 20 7c 7c 20 74 61 72 67 65 74 20 3d 3d 20 62 74 6e 61 6e 6f 74 68 65 72 63 6c 69 65 6e 74 69 64 20 29 0a 20 7b 0a 20 20 73 65 74 4c 61 62 65 6c 56 61 6c 75 65 28 27 70 72 6f 63 65 73 73 69 6e 67 4c 62 6c 27 2c 22 52 65 73 65 74 74 69 6e 67 2e 2e 2e 22 29 3b 20 0a 20 7d 0a 20 65 6c 73 65 20 69 66 20 28 74 61 72 67 65 74 20 3d 3d 20 62 6e 74 6e 65 78 74 63 6c 69 65 6e 74 69 64 20 7c 7c 20 74 61 72 67 65 74 20 3d 3d 20 62 6e 74 62 61 63 6b 63 6c 69 65 6e 74 69 64 20 29 0a 20 7b 0a 20 20 73 65 74 4c 61 62 65 6c 56 61 6c 75 65 28 27 70 72 6f 63 65 73 73 69 6e 67 4c 62 6c 27 2c 22 43 68 61 6e 67 69 6e 67 20 70 61 67 65 2e 2e 2e Data Ascii: d."); } else if (target == btnresetclientid \|\| target == btnanotherclientid ) { setLabelValue('processingLbl',"Resetting..."); } else if (target == bntnextclientid \|\| target == bntbackclientid ) { setLabelValue('processingLbl',"Changing page...
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 20 20 74 6f 74 61 6c 20 3d 20 74 6f 74 61 6c 20 2b 20 63 75 72 72 56 61 6c 3b 0a 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 69 66 20 28 44 65 73 69 67 6e 61 74 69 6f 6e 73 41 6d 6f 75 6e 74 4c 69 73 74 20 21 3d 20 6e 75 6c 6c 20 26 26 20 6f 74 68 65 72 41 6d 6f 75 6e 74 20 21 3d 20 6e 75 6c 6c 20 29 0a 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 63 75 72 72 41 6d 6f 75 6e 74 4f 62 6a 20 3d 20 61 5f 67 65 74 42 79 49 64 28 44 65 73 69 67 6e 61 74 69 6f 6e 73 41 6d 6f 75 6e 74 4c 69 73 74 5b 78 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 41 6d 6f 75 6e 74 4f 62 6a 29 0a 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 41 6d 6f 75 6e 74 56 61 6c 20 3d 20 20 28 63 75 72 72 56 61 6c 20 2a 20 6f 74 Data Ascii: total = total + currVal; if (DesignationsAmountList != null && otherAmount != null ) { currAmountObj = a_getById(DesignationsAmountList[x]); if (currAmountObj) { currAmountVal = (currVal * ot
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 6a 20 21 3d 20 6e 75 6c 6c 29 0a 20 20 20 20 20 2f 2f 76 61 6c 45 6e 61 62 6c 65 28 76 61 6c 4f 62 6a 2c 20 72 61 64 69 6f 4f 70 74 69 6f 6e 73 4f 62 6a 2e 63 68 65 63 6b 65 64 29 3b 20 0a 20 20 20 20 20 20 2f 2f 76 61 6c 4f 62 6a 2e 65 6e 61 62 6c 65 64 20 3d 20 72 61 64 69 6f 4f 70 74 69 6f 6e 73 4f 62 6a 2e 63 68 65 63 6b 65 64 3b 0a 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 45 6e 61 62 6c 65 41 28 76 61 6c 4f 62 6a 2c 69 73 43 68 65 63 6b 65 64 29 3b 0a 20 20 20 20 69 66 20 28 76 61 6c 32 4f 62 6a 20 21 3d 20 6e 75 6c 6c 29 0a 20 20 20 20 20 20 2f 2f 20 76 61 6c 45 6e 61 62 6c 65 28 76 61 6c 32 4f 62 6a 2c 20 72 61 64 69 6f 4f 70 74 69 6f 6e 73 4f 62 6a 2e 63 68 65 63 6b 65 64 29 3b 20 0a 20 20 20 20 20 20 2f 2f 76 61 6c 32 4f 62 6a 2e 65 6e 61 62 Data Ascii: j != null) //valEnable(valObj, radioOptionsObj.checked); //valObj.enabled = radioOptionsObj.checked; ValidatorEnableA(valObj,isChecked); if (val2Obj != null) // valEnable(val2Obj, radioOptionsObj.checked); //val2Obj.enab
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 46 69 6e 69 73 68 29 20 7b 0a 20 20 20 20 20 20 20 66 69 6e 69 73 68 44 61 74 65 20 3d 20 61 64 64 4d 6f 6e 74 68 73 28 66 69 6e 69 73 68 44 61 74 65 2c 72 65 63 75 72 72 4e 75 6d 62 65 72 20 2a 20 36 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 7d 0a 20 20 20 20 20 69 66 20 28 66 72 65 71 20 3d 3d 20 27 41 6e 6e 75 61 6c 6c 79 27 29 20 7b 0a 20 20 20 20 20 20 73 74 61 72 74 44 61 74 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 73 74 61 72 74 44 61 74 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 20 2b 20 31 29 3b 0a 20 20 20 20 20 20 69 66 20 28 6e 65 65 64 46 69 6e 69 73 68 29 20 7b 0a 20 20 20 20 20 20 20 66 69 6e 69 73 68 44 61 74 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 66 69 6e 69 73 68 44 61 74 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 20 2b 20 Data Ascii: Finish) { finishDate = addMonths(finishDate,recurrNumber * 6); } } if (freq == 'Annually') { startDate.setFullYear(startDate.getFullYear() + 1); if (needFinish) { finishDate.setFullYear(finishDate.getFullYear() +
2024-04-24 05:31:56 UTC	14943	IN	Data Raw: 64 28 64 64 6c 53 74 61 74 65 4e 61 6d 65 29 3b 0a 20 20 69 66 20 28 63 6f 75 6e 74 72 79 20 3d 3d 20 27 55 6e 69 74 65 64 20 53 74 61 74 65 73 27 29 20 7b 0a 20 20 20 20 69 66 20 28 64 64 6c 53 74 61 74 65 4f 62 6a 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 64 64 6c 53 74 61 74 65 4f 62 6a 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 41 72 67 73 2e 49 73 56 61 6c 69 64 20 3d 20 66 61 6c 73 65 3b 20 20 20 20 0a 20 20 20 20 20 20 7d 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 41 72 67 73 2e 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 41 72 67 73 2e 49 73 56 61 6c 69 64 20 3d 20 74 Data Ascii: d(ddlStateName); if (country == 'United States') { if (ddlStateObj) { if (ddlStateObj.selectedIndex == 0) { objArgs.IsValid = false; }else { objArgs.IsValid = true; } } else { objArgs.IsValid = t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49772	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:55 UTC	910	OUT	GET /js/help.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:55 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:55 GMT Content-Type: application/javascript Content-Length: 4314 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:55 UTC	4314	IN	Data Raw: ef bb bf 0d 0a 76 61 72 20 62 61 73 65 48 65 6c 70 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 67 72 65 61 74 65 72 67 69 76 69 6e 67 68 65 6c 70 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 27 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 48 65 6c 70 57 69 6e 64 6f 77 28 55 72 6c 54 6f 4f 70 65 6e 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6f 70 65 6e 57 69 6e 2c 20 6c 55 72 6c 54 6f 4f 70 65 6e 3b 0d 0a 20 20 20 20 69 66 20 28 55 72 6c 54 6f 4f 70 65 6e 20 21 3d 20 6e 75 6c 6c 20 26 26 20 55 72 6c 54 6f 4f 70 65 6e 20 21 3d 20 22 22 29 20 0d 0a 20 20 20 20 20 20 20 20 6c 55 72 6c 54 6f 4f 70 65 6e 20 3d 20 55 72 6c 54 6f 4f 70 65 6e 3b 0d 0a 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 6c 55 72 6c 54 6f 4f 70 65 6e 20 3d Data Ascii: var baseHelpUrl = 'https://greatergivinghelp.zendesk.com/hc/en-us';function openHelpWindow(UrlToOpen) { var openWin, lUrlToOpen; if (UrlToOpen != null && UrlToOpen != "") lUrlToOpen = UrlToOpen; else lUrlToOpen =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49773	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:55 UTC	913	OUT	GET /js/dnncore.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:56 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:55 GMT Content-Type: application/javascript Content-Length: 8406 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:56 UTC	8406	IN	Data Raw: 76 61 72 20 44 4e 4e 5f 43 4f 4c 5f 44 45 4c 49 4d 49 54 45 52 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 31 36 29 3b 76 61 72 20 44 4e 4e 5f 52 4f 57 5f 44 45 4c 49 4d 49 54 45 52 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 31 35 29 3b 76 61 72 20 5f 5f 64 6e 6e 5f 6d 5f 62 50 61 67 65 4c 6f 61 64 65 64 3d 66 61 6c 73 65 3b 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 5f 5f 64 6e 6e 5f 50 61 67 65 5f 4f 6e 4c 6f 61 64 2c 66 61 6c 73 65 29 7d 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 5f 5f 64 6e 6e 5f 50 61 67 65 5f 4f 6e 4c 6f 61 Data Ascii: var DNN_COL_DELIMITER=String.fromCharCode(16);var DNN_ROW_DELIMITER=String.fromCharCode(15);var __dnn_m_bPageLoaded=false;if(window.addEventListener){window.addEventListener("load",__dnn_Page_OnLoad,false)}else{window.attachEvent("onload",__dnn_Page_OnLoa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49774	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:56 UTC	938	OUT	GET /Resources/Shared/Scripts/dnn.jquery.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:56 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:56 GMT Content-Type: application/javascript Content-Length: 171857 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:56 UTC	15700	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 20 20 20 20 24 2e 66 6e 2e 64 6e 6e 54 61 62 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 70 74 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 24 2e 66 6e 2e 64 6e 6e 54 61 62 73 2e 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 2c 0d 0a 20 20 20 20 20 20 20 20 24 77 72 61 70 20 3d 20 74 68 69 73 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 70 61 74 63 68 20 66 6f 72 20 70 65 72 69 6f 64 20 69 6e 20 73 65 6c 65 63 74 6f 72 20 2d 20 68 74 74 70 3a 2f 2f 6a 73 66 69 64 64 6c 65 2e 6e 65 74 2f 39 4d 73 74 39 2f 32 2f 0d 0a 20 20 20 20 20 20 20 20 24 2e 75 69 2e 74 61 62 73 2e 70 72 6f 74 6f 74 79 Data Ascii: (function ($) { $.fn.dnnTabs = function (options) { var opts = $.extend({}, $.fn.dnnTabs.defaultOptions, options), $wrap = this; // patch for period in selector - http://jsfiddle.net/9Mst9/2/ $.ui.tabs.prototy
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 65 78 70 61 6e 64 65 64 27 29 2e 74 65 78 74 28 6f 70 74 73 2e 65 78 70 61 6e 64 54 65 78 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 6f 70 74 73 2e 74 61 72 67 65 74 41 72 65 61 29 2e 66 69 6e 64 28 6f 70 74 73 2e 74 61 72 67 65 74 53 65 6c 65 63 74 6f 72 20 2b 20 6f 70 74 73 2e 74 61 72 67 65 74 45 78 70 61 6e 64 65 64 53 65 6c 65 63 74 6f 72 20 2b 20 27 3a 76 69 73 69 62 6c 65 27 29 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 65 78 70 61 6e 64 65 64 Data Ascii: $this.removeClass('expanded').text(opts.expandText); $(opts.targetArea).find(opts.targetSelector + opts.targetExpandedSelector + ':visible').click(); } else { $this.addClass('expanded
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 6b 65 79 70 72 65 73 73 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5b 30 2d 39 5d 2b 24 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6b 65 79 20 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 21 65 2e 63 68 61 72 43 6f 64 65 20 3f 20 65 2e 77 68 69 63 68 20 3a 20 65 2e 63 68 61 72 43 6f 64 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: }).keypress(function (e) { var regex = new RegExp("^[0-9]+$"); var key = String.fromCharCode(!e.charCode ? e.which : e.charCode); if (!regex.test(key)) {
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 63 61 63 68 65 44 61 74 61 5f 5b 66 69 6c 74 65 72 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 61 63 68 65 4c 65 6e 67 74 68 5f 2b 2b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 61 63 68 65 44 61 74 61 5f 5b 66 69 6c 74 65 72 5d 20 3d 20 64 61 74 61 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 63 68 65 44 61 74 61 5f 5b 66 69 6c 74 65 72 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 24 2e 64 6e 6e 41 75 74 6f 63 6f 6d 70 6c 65 74 65 72 2e 70 72 6f 74 6f 74 79 70 Data Ascii: cacheData_[filter] !== undefined) { this.cacheLength_++; } this.cacheData_[filter] = data; return this.cacheData_[filter]; } return false; }; $.dnnAutocompleter.prototyp
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 2e 64 75 70 6c 69 63 61 74 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 2e 6d 6f 76 65 53 74 61 72 74 28 27 63 68 61 72 61 63 74 65 72 27 2c 20 2d 76 61 6c 2e 6c 65 6e 67 74 68 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 72 61 6e 67 65 2e 74 65 78 74 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 61 6e 67 65 20 3d 20 73 65 6c 65 63 74 69 6f 6e 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 6f 72 65 64 52 61 6e 67 65 20 3d 20 72 61 6e 67 65 2e 64 75 70 6c 69 63 61 74 65 28 29 3b 0d 0a Data Ascii: .createRange().duplicate(); range.moveStart('character', -val.length); e = range.text.length; } else { range = selection.createRange(); var storedRange = range.duplicate();
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 76 61 6c 28 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6f 6e 45 72 72 6f 72 4c 65 73 73 54 68 61 6e 4d 69 6e 43 68 61 72 73 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 69 67 67 65 72 4f 6e 45 72 72 6f 72 28 65 76 65 6e 74 2e 64 61 74 61 2e 6f 6e 45 72 72 6f 72 4c 65 73 73 54 68 61 6e 4d 69 6e 43 68 61 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 64 61 74 61 2e 66 61 6b 65 5f 69 6e 70 75 74 29 2e 76 61 6c 28 27 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: val().length) { if (event.data.onErrorLessThanMinChars) triggerOnError(event.data.onErrorLessThanMinChars); $(data.fake_input).val(''); }
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0d 0a 20 20 20 20 20 20 20 20 6d 6f 75 73 65 77 68 65 65 6c 3a 20 66 75 6e 63 74 69 6f 6e 20 28 66 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 6e 20 3f 20 74 68 69 73 2e 62 69 6e 64 28 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 20 66 6e 29 20 3a 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 77 68 65 65 6c 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 2c 0d 0a 0d 0a 20 20 20 20 20 20 20 20 75 6e 6d 6f 75 73 Data Ascii: else { this.onmousewheel = null; } } }; $.fn.extend({ mousewheel: function (fn) { return fn ? this.bind("mousewheel", fn) : this.trigger("mousewheel"); }, unmous
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 69 74 69 61 6c 69 73 65 28 73 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 2f 2a 66 69 72 73 74 43 68 69 6c 64 2c 20 6c 61 73 74 43 68 69 6c 64 2c 20 2a 2f 69 73 4d 61 69 6e 74 61 69 6e 69 6e 67 50 6f 73 69 74 6f 6e 2c 20 6c 61 73 74 43 6f 6e 74 65 6e 74 58 2c 20 6c 61 73 74 43 6f 6e 74 65 6e 74 59 2c 0d 0a 09 09 09 09 09 09 68 61 73 43 6f 6e 74 61 69 6e 69 6e 67 53 70 61 63 65 43 68 61 6e 67 65 64 2c 20 6f 72 69 67 69 6e 61 6c 53 63 72 6f 6c 6c 54 6f 70 2c 20 6f 72 69 67 69 6e 61 6c 53 63 72 6f 6c 6c 4c 65 66 74 2c 0d 0a 09 09 09 09 09 09 6d 61 69 6e 74 61 69 6e 41 74 42 6f 74 74 6f 6d 20 3d 20 66 61 6c 73 65 2c 20 6d 61 69 6e 74 61 69 6e 41 74 52 69 67 68 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 Data Ascii: itialise(s) { var /firstChild, lastChild, /isMaintainingPositon, lastContentX, lastContentY,hasContainingSpaceChanged, originalScrollTop, originalScrollLeft,maintainAtBottom = false, maintainAtRight = false;
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 09 09 09 09 09 20 20 20 20 69 66 20 28 64 69 72 58 20 21 3d 3d 20 30 29 20 7b 0d 0a 09 09 09 09 09 20 20 20 20 20 20 20 20 6a 73 70 2e 73 63 72 6f 6c 6c 42 79 58 28 64 69 72 58 20 2a 20 73 65 74 74 69 6e 67 73 2e 61 72 72 6f 77 42 75 74 74 6f 6e 53 70 65 65 64 29 3b 0d 0a 09 09 09 09 09 20 20 20 20 7d 0d 0a 09 09 09 09 09 20 20 20 20 69 66 20 28 64 69 72 59 20 21 3d 3d 20 30 29 20 7b 0d 0a 09 09 09 09 09 20 20 20 20 20 20 20 20 6a 73 70 2e 73 63 72 6f 6c 6c 42 79 59 28 64 69 72 59 20 2a 20 73 65 74 74 69 6e 67 73 2e 61 72 72 6f 77 42 75 74 74 6f 6e 53 70 65 65 64 29 3b 0d 0a 09 09 09 09 09 20 20 20 20 7d 0d 0a 09 09 09 09 09 20 20 20 20 73 63 72 6f 6c 6c 54 69 6d 65 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 64 6f 53 63 72 6f 6c 6c 2c 20 69 73 46 Data Ascii: if (dirX !== 0) { jsp.scrollByX(dirX * settings.arrowButtonSpeed); } if (dirY !== 0) { jsp.scrollByY(dirY * settings.arrowButtonSpeed); } scrollTimeout = setTimeout(doScroll, isF
2024-04-24 05:31:56 UTC	16384	IN	Data Raw: 64 6c 65 72 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 58 20 3d 20 68 6f 72 69 7a 6f 6e 74 61 6c 44 72 61 67 50 6f 73 69 74 69 6f 6e 2c 20 64 59 20 3d 20 76 65 72 74 69 63 61 6c 44 72 61 67 50 6f 73 69 74 69 6f 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 6b 65 79 44 6f 77 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 34 30 3a 20 2f 2f 20 64 6f 77 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 2e 73 63 72 6f 6c 6c 42 79 59 28 73 65 74 74 69 6e 67 73 2e 6b 65 79 62 6f 61 72 64 53 70 65 65 64 2c 20 66 61 6c 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: dler() { var dX = horizontalDragPosition, dY = verticalDragPosition; switch (keyDown) { case 40: // down jsp.scrollByY(settings.keyboardSpeed, false);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49775	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:56 UTC	927	OUT	GET /js/dnn.servicesframework.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:56 UTC	681	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:56 GMT Content-Type: application/javascript Content-Length: 952 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:56 UTC	952	IN	Data Raw: ef bb bf 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 20 24 2e 64 6e 6e 53 46 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 6f 64 75 6c 65 49 64 29 20 7b 20 76 61 72 20 62 61 73 65 20 3d 20 74 68 69 73 3b 20 62 61 73 65 2e 67 65 74 53 65 72 76 69 63 65 52 6f 6f 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 6f 64 75 6c 65 4e 61 6d 65 29 20 7b 20 76 61 72 20 73 65 72 76 69 63 65 52 6f 6f 74 20 3d 20 64 6e 6e 2e 67 65 74 56 61 72 28 22 73 66 5f 73 69 74 65 52 6f 6f 74 22 2c 20 22 2f 22 29 3b 20 73 65 72 76 69 63 65 52 6f 6f 74 20 2b 3d 20 22 44 65 73 6b 74 6f 70 4d 6f 64 75 6c 65 73 2f 22 20 2b 20 6d 6f 64 75 6c 65 4e 61 6d 65 20 2b 20 22 2f 41 50 49 2f 22 3b 20 72 65 74 75 72 6e 20 73 65 72 76 69 63 65 52 6f 6f 74 3b 20 7d 3b 20 62 61 73 65 2e 67 65 74 54 Data Ascii: (function ($) { $.dnnSF = function (moduleId) { var base = this; base.getServiceRoot = function (moduleName) { var serviceRoot = dnn.getVar("sf_siteRoot", "/"); serviceRoot += "DesktopModules/" + moduleName + "/API/"; return serviceRoot; }; base.getT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49776	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:56 UTC	967	OUT	GET /portals/_default/skins/customizable/bootstrap-3/js/bootstrap.min.js?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:57 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:56 GMT Content-Type: application/javascript Content-Length: 37051 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:10 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:57 UTC	15701	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.
2024-04-24 05:31:57 UTC	16384	IN	Data Raw: 22 66 6f 63 75 73 22 29 2e 74 72 69 67 67 65 72 28 66 29 7d 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 3d 61 2e 45 76 65 6e 74 28 22 68 69 64 65 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 62 29 2c 74 68 69 73 2e 69 73 53 68 6f 77 6e 26 26 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 28 74 68 69 73 2e 69 73 53 68 6f 77 6e 3d 21 31 2c 74 68 69 73 2e 65 73 63 61 70 65 28 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 28 29 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 65 6c Data Ascii: "focus").trigger(f)}))},c.prototype.hide=function(b){b&&b.preventDefault(),b=a.Event("hide.bs.modal"),this.$element.trigger(b),this.isShown&&!b.isDefaultPrevented()&&(this.isShown=!1,this.escape(),this.resize(),a(document).off("focusin.bs.modal"),this.$el
2024-04-24 05:31:57 UTC	4966	IN	Data Raw: 20 30 3d 3d 3d 65 5b 61 2b 31 5d 7c 7c 62 3c 65 5b 61 2b 31 5d 29 26 26 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 66 5b 61 5d 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 0d 0a 74 68 69 73 2e 61 63 74 69 76 65 54 61 72 67 65 74 3d 62 2c 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 27 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 27 2b 62 2b 27 22 5d 2c 27 2b 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 27 5b 68 72 65 66 3d 22 27 2b 62 2b 27 22 5d 27 2c 64 3d 61 28 63 29 2e 70 61 72 65 6e 74 73 28 22 6c 69 22 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 3b 64 2e 70 61 72 65 6e 74 28 22 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 22 29 Data Ascii: 0===e[a+1]\|\|b<e[a+1])&&this.activate(f[a])},b.prototype.activate=function(b){this.activeTarget=b,this.clear();var c=this.selector+'[data-target="'+b+'"],'+this.selector+'[href="'+b+'"]',d=a(c).parents("li").addClass("active");d.parent(".dropdown-menu")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49778	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:57 UTC	707	OUT	GET /Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:31:57 UTC	194	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:57 GMT Content-Type: image/jpeg Content-Length: 131072 Connection: close Cache-Control: public, max-age=31536000 Server: Microsoft-IIS/10.0
2024-04-24 05:31:57 UTC	16190	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 07 d0 00 a6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 05 06 08 09 01 04 0a 02 03 ff c4 00 78 10 00 01 03 03 03 02 03 04 04 06 07 0e 10 06 0a 13 01 02 03 04 00 05 06 07 08 11 12 21 09 13 31 14 22 41 51 0a 15 32 61 16 23 Data Ascii: JFIFCC"x!1"AQ2a#
2024-04-24 05:31:57 UTC	16384	IN	Data Raw: 23 a5 18 5c 95 4c 9e 95 94 06 c0 29 0c 7b 28 6d 00 a4 21 64 20 72 4f 04 8e 2a fa fd cf 1e da 3f a5 4c 67 fb 9b 87 f2 8a 7e e7 93 6d 27 d7 15 c6 7f 55 c3 f9 45 44 af e9 26 c2 e6 b5 2a b5 70 cc 41 ce 64 ea ef 54 74 e6 df 47 56 2d 1e 10 04 79 ea a5 50 c1 78 86 da 95 4a 74 e9 d1 6b 5f 1a 0c ed 88 f1 04 13 e3 27 e5 a2 8c 37 bb e2 7f e1 f7 ad 78 c6 86 6d 87 15 dc dc 8b ee 11 6e cf ed 53 f5 3f 24 ba da 6e 2b 79 56 cb 4b 5e 73 68 7f cc 60 2e 43 92 64 21 a0 a2 94 a8 f2 0a 8f 1e b5 8b be 3e fe 21 fa 47 bd fd 59 c1 71 bd b9 e7 2a bf e1 d8 9d 8a 43 ee 4f 44 17 e3 a5 cb 94 a7 40 71 3d 0f a1 0a 3d 0c b2 d0 07 a7 8e 5c 50 04 d6 78 fe e7 93 6d 3f d2 ae 33 fa ae 1f ca 29 fb 9e 3d b4 7f 4a 98 cf f7 37 0f e5 15 5c 3b d2 36 0d 86 dc 52 ad 4f 07 be 26 9e 68 9f 55 89 7e ee 31 Data Ascii: #\L){(m!d rO?Lg~m'UED&pAdTtGV-yPxJtk_'7xmnS?$n+yVK^sh`.Cd!>!GYq*COD@q==\Pxm?3)=J7\;6RO&hU~1
2024-04-24 05:31:57 UTC	16384	IN	Data Raw: 7e f8 df 3f 0e a4 8e 7e 15 a9 71 b4 bf a3 4c 3b 8d ee 64 5f c6 87 ff 00 90 56 42 78 63 68 5f 83 2e 9b 6e a2 3e 43 b1 ed d0 de f2 5c ed dc 7e 73 09 b4 4a bf 3c f3 6f c3 21 0a 78 a9 0a 8a d8 57 4f 4a 14 39 57 63 dc 03 51 f1 2c 1b 07 a5 6a fa 96 ec ae d7 01 3d f6 77 7d e6 04 79 f2 52 70 cc 67 1a ab 74 ca 77 2e b7 73 49 8e e3 fb de e1 26 4f 82 d9 28 ee 39 a5 70 9f b2 3f 35 73 5c 62 ed 52 94 a5 11 29 4a 51 15 ad ad f8 65 bb 51 b4 77 2c d3 eb c5 ed 76 d8 97 ec 62 7d ba 55 c1 0c f9 86 2b 6f c6 71 a5 3a 13 f9 45 21 45 5c 7c 78 e2 b5 15 2b e8 f9 6c ba d3 a3 b0 35 f2 e5 e2 6e d3 18 45 c1 11 c4 0c b1 eb 3c 14 40 91 e7 38 1a 6b a5 e3 23 a4 95 38 7a 40 e7 9e 79 1f 03 5b 9d 5a 42 85 63 65 83 c3 3b 49 6d fa b9 79 c9 b2 2c 82 55 ef 00 97 3e e3 75 b1 69 35 c6 13 6a b3 d9 Data Ascii: ~?~qL;d_VBxch_.n>C\~sJ<o!xWOJ9WcQ,j=w}yRpgtw.sI&O(9p?5s\bR)JQeQw,vb}U+oq:E!E\\|x+l5nE<@8k#8z@y[ZBce;Imy,U>ui5j
2024-04-24 05:31:57 UTC	16384	IN	Data Raw: 9c 8e b7 6d 73 96 d0 74 0f 82 d2 0f 4b 89 fe c5 40 8f ba bc a7 8c fd 1a 7d 3f 8b b3 1a c2 ee 4d bd e3 23 bd bb 5c 5b a0 9e 60 c6 84 89 04 68 5a 57 ab 70 5f a4 cf a0 30 87 e0 98 a5 b0 b8 b2 7c cb 76 73 73 6a 63 91 13 a8 1a 10 75 0e 0b 63 db 22 99 be 7f 01 2d 5d cb 75 df 48 76 a7 8e ea eb f7 cb 1f d5 11 f2 84 4a 9c e2 20 5b cb c8 79 d4 98 91 9c 4b 88 52 d6 d3 04 a9 69 50 48 6b 84 ab 85 28 9c 42 f1 41 df 9e 53 e2 47 ba cb 8e e8 f5 0f 47 2c f8 5e 4f 72 b6 c5 85 90 42 b2 4a 96 b6 64 bb 19 b0 c3 6e 94 49 5a 94 d2 83 28 69 b2 94 f0 93 e5 f5 71 d4 54 4c 8b a5 9e 38 3b b0 c3 1b 6a 1e a0 d9 31 cc bd 96 d1 c1 91 2e 12 a1 ca 51 f9 97 23 94 a3 9e 3f f9 ba 92 2e 1e 2f 5b 3c d6 96 5b 6b 72 7b 28 4c f7 0a 40 72 42 5b 85 72 52 15 f1 29 53 c8 69 c1 fd d7 35 7d ae 39 e9 33 Data Ascii: mstK@}?M#\[`hZWp_0\|vssjcuc"-]uHvJ [yKRiPHk(BASGG,^OrBJdnIZ(iqTL8;j1.Q#?./[<[kr{(L@rB[rR)Si5}93
2024-04-24 05:31:57 UTC	16384	IN	Data Raw: bb b5 47 ff 00 dd 66 b0 87 fc 95 27 32 a5 ad b4 a9 c6 fa 14 40 25 24 f3 c1 e3 d2 be b8 1f 21 4a cd 46 95 4a 53 9a a1 77 9e 5d 3f 65 a3 e6 a3 5c 57 a5 5a 32 52 6b 23 f3 4b b5 f3 cc e7 7c a1 29 4a 56 75 19 29 4a 51 12 94 a5 11 29 4a 51 12 94 24 0a fc 95 36 22 5d f2 15 25 b0 be 40 e8 2e 0e 7f 55 50 90 37 45 fa d2 9c d7 ca 9c 4a 47 27 d0 7a 93 f0 aa a2 fa a5 53 91 97 62 eb 95 ec 48 c8 ed e5 ee 78 f2 84 d6 ca b9 fc dc f3 55 00 b0 6a d6 bd 8f f6 4c aa 02 0e cb 9a 50 9e 07 35 f8 ae e3 01 b5 96 dc 9a d2 54 0f 04 17 52 08 ff 00 0d 54 90 37 55 5f b5 2b f0 fa d2 db ff 00 cb d8 ff 00 f6 c9 ff 00 9e 82 e9 6e 27 81 3d 9f ff 00 6c 9f f9 ea 99 db d5 52 42 fd e9 40 79 a5 5c aa 94 a5 28 89 4a 52 88 94 a5 28 89 4a 52 88 94 27 8a 54 7d b8 cd c1 62 7b 79 c0 1e cb 72 05 25 f9 Data Ascii: Gf'2@%$!JFJSw]?e\WZ2Rk#K\|)JVu)JQ)JQ$6"]%@.UP7EJG'zSbHxUjLP5TRT7U_+n'=lRB@y\(JR(JR'T}b{yr%
2024-04-24 05:31:58 UTC	16384	IN	Data Raw: cc 77 1d 92 64 64 16 a7 2d 91 9b 87 71 44 64 84 ae 74 24 49 0b 51 4a 0a 92 79 1d fb 72 29 1b a0 d1 6c 3b 30 d2 7c 0b 56 36 4f b0 cc fb 06 db f5 a7 58 6e 77 1c f3 16 cd f4 ca e5 77 b7 5c a5 2e 03 0d c2 bd 0c 71 b9 69 7d eb 7b 6a 4b ed 79 49 0d 25 0e a8 28 a5 60 f6 de e9 6c 1f 5f f1 9a 79 63 8e 39 fd 3c 9e 69 9c a2 d3 fe d7 74 13 50 ed 1e 10 3b bf 95 85 db af f2 2c 39 dd aa ed 23 06 c1 22 e9 05 c7 17 8d 15 ff 00 60 52 1f 55 aa d9 2a 44 87 bd 9e 42 fc b2 94 27 a7 85 b6 b0 13 de ad 7c 8b c3 3b 23 d1 6c 0b 63 7a d3 8d 66 3a e9 95 dd 67 6a be 13 27 2e c4 72 8b d4 bb 9d af 18 64 c7 4b cf b8 88 3e 50 f6 04 32 b4 f9 5c ac 80 da 09 41 23 9a dd 47 96 38 e3 9f d3 c9 ae 7a 3e fa a6 72 8b ce ed f3 6a bb 86 95 ad d9 7e 8f 6b 86 1d 78 b5 6b 5d e7 5b de ba da b5 16 d7 b7 Data Ascii: wdd-qDdt$IQJyr)l;0\|V6OXnww\.qi}{jKyI%(`l_yc9<itP;,9#"`RU*DB'\|;#lczf:gj'.rdK>P2\A#G8z>rj~kxk][
2024-04-24 05:31:58 UTC	16384	IN	Data Raw: 16 6b 76 77 90 25 c4 5f 72 b8 ad ac 4d b8 21 7d 3c a1 e7 3a b9 75 03 a1 1d 29 57 21 1d 23 a4 27 8a d3 ef ed fc de 9f f5 cd 65 df df 2f fb 29 fb 7f 37 a7 fd 73 59 77 f7 cb fe ca 99 fc cd e3 5f da 29 ff 00 ab ee 5a df fc 47 70 d7 f6 4a df e8 ff 00 72 db b6 71 b2 3d a3 ea 46 bd 59 77 45 9b ed fb 16 b8 ea 16 3c b6 15 67 cc 1f b6 8f 6f 8e a6 49 f2 88 75 3c 15 14 75 10 92 ae 78 07 81 db b5 5e 3a b1 a4 da 69 ae 9a 79 73 d2 7d 5c c4 61 5f f1 bb d3 01 8b b5 9a e0 92 a6 25 b4 14 15 e5 b8 90 47 52 49 48 e5 27 b1 f4 20 8a d2 c7 ed fc de 9f f5 cd 65 df df 2f fb 29 fb 7f 37 a7 fd 73 59 77 f7 cb fe ca 7f 33 78 d7 f6 8a 7f ea fb 93 ff 00 11 dc 33 fd 92 b7 fa 3f dc b6 d3 96 ec ab 46 a5 ed 46 f1 b3 fd 2d b5 b5 84 e2 97 28 2b 8b 12 2d 91 8e a6 ed e9 53 a9 70 86 5a 71 45 28 Data Ascii: kvw%_rM!}<:u)W!#'e/)7sYw_)ZGpJrq=FYwE<goIu<ux^:iys}\a_%GRIH' e/)7sYw3x3?FF-(+-SpZqE(
2024-04-24 05:31:58 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-24 05:31:58 UTC	194	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49777	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:57 UTC	994	OUT	GET /Portals/3922/Files/Please%20note%20(4).png HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:57 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:57 GMT Content-Type: image/png Content-Length: 45810 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Tue, 02 Apr 2024 19:32:26 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:57 UTC	15714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 00 c8 08 06 00 00 00 10 8f 85 1a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 69 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 Data Ascii: PNGIHDR pHYs+iiTXtXML:com.adobe.xmp<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x='adobe:ns:meta/'><rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Descrip
2024-04-24 05:31:57 UTC	16384	IN	Data Raw: 21 5f 9e 02 8d 91 00 ed c2 36 29 d8 45 60 0c e0 df d7 9d 20 84 bf f0 12 96 2e 6f f2 16 9d b4 dc 15 52 af 6e fd e2 11 64 ce e1 91 63 8c d6 b8 f2 fc 5b 7c fd 32 c8 18 b3 c2 19 36 8c 91 7f 3e 2b 1d 87 79 a2 dc 84 19 da fc 36 63 00 c3 ff 8c 15 82 1b e1 48 08 01 b4 3d 5c c1 47 b1 31 01 84 27 31 27 34 2c c1 0f 99 03 08 6f b2 92 30 d6 e1 ae 98 1f a6 25 7d bf ff 16 59 a0 58 cc 55 e8 63 0c d1 b6 30 75 75 94 06 41 9b 37 ba 79 8f 4c 20 9c 2d 36 b6 78 e6 d8 a9 f2 69 05 e0 1b d2 e9 6a 66 20 94 6e da c4 c2 87 47 16 23 dd 0f 19 0b e7 5b e1 69 dc 21 8e 13 3c 5c d0 18 63 8a 31 67 de f9 b7 0f d7 8e 6b 8d cc 2d d5 59 33 fe fa 1b 5e 23 b4 85 85 18 3e e5 b9 4d af 8d 29 e4 51 9d 12 ea 8d 19 b4 e0 7c 12 5e bc f4 bb f2 7b c8 29 e6 1c 73 a2 e5 ed 6c fa 75 c0 0b 32 97 9d 0c 97 dd Data Ascii: !_6)E` .oRndc[\|26>+y6cH=\G1'1'4,o0%}YXUc0uuA7yL -6xijf nG#[i!<\c1gk-Y3^#>M)Q\|^{)slu2
2024-04-24 05:31:58 UTC	13712	IN	Data Raw: ea 86 7c a1 05 f0 28 f3 0c f9 a8 6d 03 3f 71 0b fc 9f 3d b9 48 14 b9 50 c9 0e db 86 b3 86 32 e0 1b e5 41 64 18 eb 18 f5 43 f7 3d 9e 77 f3 ff 6f ef 4c bc 2d ab ea 3b ff 17 74 af ac ee f4 b4 62 ba 4d 1b 5b a4 28 aa 40 8a aa 00 25 12 45 8d 53 5c b1 3b dd 49 5a 42 04 87 c6 31 71 8c 9a a0 ad 28 12 5a 20 44 85 c6 44 a3 2d 83 cc f3 8c 32 8a 22 63 41 0d 50 14 35 30 d4 f8 28 6a 1e de ab db e7 73 ee fe de fb bb fb 9d 73 ee b9 af 8a 47 a1 df ef 5a af de ab 73 cf dd c3 6f ef fd db bf 71 6f c2 63 c8 f5 60 cd ed 9c 98 28 f9 23 e3 c7 fa 3b 3b 8d 15 21 1a ac 61 e6 d4 5f fd e2 99 de 77 19 7b 68 f9 f6 82 d7 bc 90 9d 5e a8 bf 45 1b 04 b9 2a 9e 42 f2 ba da 88 f0 c9 7a 63 4c d9 57 99 13 d0 0a 7e bc 6b 62 50 01 84 97 b3 0f d1 27 e5 ab 88 8f 80 ef 35 f0 e0 a7 12 0f 66 ec 98 9b Data Ascii: \|(m?q=HP2AdC=woL-;tbM[(@%ES\;IZB1q(Z DD-2"cAP50(jssGZsoqoc`(#;;!a_w{h^E*BzcLW~kbP'5f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49779	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:57 UTC	984	OUT	GET /images/PoweredBy_Logo_136x52.png HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:58 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:57 GMT Content-Type: image/png Content-Length: 59766 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:58 UTC	15714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 34 08 06 00 00 00 51 b2 70 5c 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a 8c 00 00 0a 8c 01 bd c6 cf d8 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 30 2f 31 37 2f 31 33 f2 d2 96 0c 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 15 ec 70 72 56 57 78 9c c5 5b 09 78 14 55 b6 2e 20 a1 15 3a b6 18 12 1a c5 46 48 88 30 6e 60 c0 ec 01 67 40 41 05 41 45 45 61 04 eb f4 96 de d2 7b 57 f5 5d c4 0d 15 51 54 50 22 a2 a0 2c 6e 88 28 90 3d 80 fb 12 1c 45 d9 5c 90 45 11 14 c4 05 48 67 e5 dd 5b 7d 41 fc de d3 61 e6 0d 35 95 fc 5d 75 97 3a ff 3d ff 3d f7 54 55 a7 f2 Data Ascii: PNGIHDR4Qp\sBIT\|dpHYstEXtCreation Time10/17/13tEXtSoftwareAdobe Fireworks CS4prVWx[xU. :FH0n`g@AAEEa{W]QTP",n(=E\EHg[}Aa5]u:==TU
2024-04-24 05:31:58 UTC	16384	IN	Data Raw: 30 69 5a 4b f6 cd 30 e9 04 e6 21 f8 34 82 e0 bf 31 88 b3 83 91 8a d2 18 62 60 b0 c4 62 d7 10 47 33 df 95 ae 3c 3f 00 be 72 81 41 08 83 10 6e 53 92 90 8e 49 3e b8 21 f8 12 4c bf f4 b9 31 09 4d a4 09 d9 88 75 29 ce 1c e6 49 e1 27 2e 05 7a 1a 92 8b d9 af 57 fc 8d a2 c1 13 c2 42 82 29 4f 27 b4 94 aa a8 62 4b d9 24 ae d8 82 35 85 a1 b6 24 97 94 b2 40 0d 1e 23 32 78 68 9d 95 c8 25 5c 3c d1 f1 ad cf 85 13 0b 66 a2 b4 22 53 65 76 7c a6 0c ec 7d bf db eb dc cc 37 ee 01 50 dd a8 17 47 15 e2 8f 7d 00 8f 4d a8 52 74 cf 59 ea 9e 6a 55 d2 a9 4a ac 38 08 6b f4 02 1f d6 13 cc 47 4c b8 36 5e 47 a6 7c ae 42 2e 76 79 ce c7 47 fe b4 9c d7 e1 ec 45 f7 e0 15 03 1e 1e 66 04 17 3f 62 df 0f e0 89 44 ec fb 1e 3d f0 05 fe f9 91 5d 5a b0 8b 3f 7f 05 f6 bd 81 7d ea ed af a3 55 bc 44 Data Ascii: 0iZK0!41b`bG3<?rAnSI>!L1Mu)I'.zWB)O'bK$5$@#2xh%\<f"Sev\|}7PG}MRtYjUJ8kGL6^G\|B.vyGEf?bD=]Z?}UD
2024-04-24 05:31:58 UTC	16384	IN	Data Raw: d1 7f d7 00 00 2a 17 6d 6b 42 54 fa ce ca fe 00 7f d4 f0 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 9c ed 7d 2b b8 ec 28 d6 f6 92 48 2c 12 89 c4 22 91 48 24 16 19 89 c4 22 23 91 58 24 12 19 89 8d 8c 8c 8c 8d 2c 99 7f 51 fb 9c ee 9e 9e e9 f9 d4 ff d4 88 5a 73 e9 3e 55 7b d7 09 b0 2e ef bb 2e 54 e6 e7 7d 36 9e 00 da b3 91 2d c6 d7 46 60 87 a3 c3 02 70 5d c5 05 6b 00 df 85 7e c3 f3 62 1d e0 81 0a 10 01 b6 0a 1b d0 9e 24 c1 77 dd 93 d9 b1 84 c1 f1 cd 7c 73 fc f1 43 6f 00 95 9b dd 41 2b d5 71 33 b6 be 6c 4f 15 14 e0 78 9d 40 e1 28 e9 30 f0 61 b9 af 2b 3f f7 09 12 a0 dc 54 2c a4 5f 8d 03 af 37 81 b8 Data Ascii: *mkBTx}+(H,"H$"#X$,QZs>U{..T}6-F`p]k~b$w\|sCoA+q3lOx@(0a+?T,_7
2024-04-24 05:31:58 UTC	11284	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49780	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:57 UTC	931	OUT	GET /Resources/Shared/scripts/initWidgets.js HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:57 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:57 GMT Content-Type: application/javascript Content-Length: 1308 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:57 UTC	1308	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 57 69 64 67 65 74 73 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 28 44 6f 74 4e 65 74 4e 75 6b 65 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 0d 0a 20 20 20 20 20 20 20 20 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 44 6f 74 4e 65 74 4e 75 6b 65 2e 55 49 2e 57 65 62 43 6f 6e 74 72 6f 6c 73 22 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 28 44 6f 74 4e 65 74 4e 75 6b 65 2e 55 49 2e 57 65 62 43 6f 6e 74 72 6f 6c 73 2e 55 74 69 6c 69 74 79 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 67 65 74 53 63 72 69 70 74 28 24 64 6e 6e 2e 62 61 73 65 52 65 73 6f 75 72 63 65 73 55 72 6c 20 2b 20 22 Data Ascii: function loadWidgets() { if (typeof (DotNetNuke) === "undefined") Type.registerNamespace("DotNetNuke.UI.WebControls"); if (typeof (DotNetNuke.UI.WebControls.Utility) === "undefined") jQuery.getScript($dnn.baseResourcesUrl + "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:59 UTC	632	OUT	GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:31:59 UTC	176	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:59 GMT Content-Type: image/jpeg Content-Length: 524288 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:31:59 UTC	16208	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 05 35 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 08 ff c4 00 4b 10 00 01 03 03 03 02 05 02 04 04 05 03 03 01 02 0f 01 02 03 11 00 04 21 05 12 31 41 51 06 13 22 61 71 81 91 07 14 32 a1 23 42 b1 c1 Data Ascii: JFIFCC5"K!1AQ"aq2#B
2024-04-24 05:31:59 UTC	16384	IN	Data Raw: bb c1 b6 97 17 5a ca b5 5b ab b6 85 bb 6d 6d 50 54 c9 52 48 21 00 08 93 1e f5 6b c4 a0 9d 0d c7 90 c2 43 d7 37 ed 97 4e d1 fa 4a f9 ff 00 cd 7c e3 5d 8f 16 2f ea 05 18 3e 67 17 f0 6d a6 d1 f5 5d 3c e5 3f 05 72 97 1d 0f e6 92 e4 a8 e3 61 6f a9 68 24 29 24 c5 7d 1b ff 00 a7 cb 8d 4d df 08 5d 5f 6b f6 6c b5 3a 8a db b0 5b 4a c3 8c a0 00 09 12 76 9d d3 23 99 cd 7c fa c1 95 5c 38 b5 ab a9 27 15 ed ff 00 05 5f 2b d3 ef ec 6e 5f 4f 97 65 a9 29 0c 20 74 0a 48 51 3e f2 49 af 79 ad c7 07 1e a5 ce c9 fc 37 3e 69 83 2c fd 8b c6 f8 5b af 4e 13 fd 8f a7 b2 f0 58 dc 0e 29 92 4a 73 d3 3c 55 2b 3b 96 95 e9 42 b1 d8 55 b4 2e 51 0a c8 26 b8 ed 34 c6 4e ce 59 93 f4 aa 7a 93 61 c6 55 29 e6 ad b8 67 83 db 8a 45 c9 fe 19 07 b7 de a6 3f 88 89 13 a7 ba a7 ac 1a 52 8e 42 60 cf b6 Data Ascii: Z[mmPTRH!kC7NJ\|]/>gm]<?raoh$)$}M]_kl:[Jv#\|\8'_+n_Oe) tHQ>Iy7>i,[NX)Js<U+;BU.Q&4NYzaU)gE?RB`
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 05 22 aa 6a 20 e6 53 06 33 8a d0 b9 32 27 b9 a3 a2 25 0f 59 a5 f2 24 c9 13 f1 57 77 40 dc 0c e7 b5 66 f8 61 44 69 c5 3f e5 74 f3 57 9c 58 da 64 f1 54 c9 be a6 0d 50 6b 52 4a 48 f6 a0 2e 22 08 9f b5 25 6e 92 ac a7 e9 41 2a 19 80 07 f7 a9 20 7a 9d 8c 0e 9d e9 66 e0 f0 4c f7 a1 f3 01 f5 1e 83 06 80 a2 64 84 f3 40 0f 6d e5 39 e9 04 4c 72 68 f1 1b a0 18 aa c8 84 80 52 39 e2 2a c3 6e 02 99 31 8e 28 00 c1 27 27 34 69 4c 24 24 72 a3 c4 d2 c2 b3 44 85 00 7d 27 9f 7e b4 ae 23 3a a0 88 8e 62 81 69 48 3c 08 f9 a3 29 dc 64 ff 00 b5 40 48 9c 99 1d bb d4 ad 85 03 ca 99 24 74 e2 ba 36 e4 09 9e f4 c0 80 15 09 48 c8 c9 a8 20 46 dc 8e bc 50 9d 8a d1 2d 2c a2 08 04 75 35 6d a7 02 91 93 33 dc d5 2e 00 1c cf 4a 36 d4 5b 27 12 3a d4 f2 29 71 51 26 07 3c 50 38 25 46 00 a0 0e 6e Data Ascii: "j S32'%Y$Ww@faDi?tWXdTPkRJH."%nA* zfLd@m9LrhR9*n1(''4iL$$rD}'~#:biH<)d@H$t6H FP-,u5m3.J6[':)qQ&<P8%Fn
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 7c 92 fb ee ea 32 e3 88 84 c2 7d 29 f7 8f e9 57 d4 41 4c 9c d2 96 a5 64 cf 4a 64 88 eb 69 6c 45 8d ba 2c ed 51 6e 09 56 d1 ea 59 fe 65 75 26 98 5f 49 51 4a 56 99 1c 8e d5 56 eb 52 66 de 41 5c 94 e0 a4 0c 9a a8 db 97 07 57 4a da 69 3b 5c 6e 56 67 29 4f 73 3d 6a 69 b0 57 c9 a8 e1 43 89 da b0 0f 5c a6 69 6b 70 98 91 31 ef 50 56 24 83 24 c6 69 57 0a 90 00 92 24 13 9a 91 06 17 63 2a 81 42 5e c1 8e 9e d4 b5 95 12 7d 22 3a 19 cd 2d 4b 5a 56 4e 02 47 06 79 a1 2b 01 e1 7e ad ca 14 cd e2 3d 33 f1 15 5c ac 6d 20 28 71 5c 97 3d 01 25 59 a9 e9 62 bd cf 9f b6 90 91 b6 49 03 da 8f 6c 8c 7f 5a 80 90 ae 49 fb d4 fe 88 03 3d eb b6 79 97 b9 c7 72 44 cf d8 d4 a5 44 e7 b8 a8 24 90 09 ff 00 37 6a ed d1 8a 00 82 77 19 f8 a2 a8 0a 11 5c 48 3c 50 00 ad 42 67 da b9 b2 a2 73 da b8 Data Ascii: \|2})WALdJdilE,QnVYeu&_IQJVVRfA\WJi;\nVg)Os=jiWC\ikp1PV$$iW$c*B^}":-KZVNGy+~=3\m (q\=%YbIlZI=yrDD$7jw\H<PBgs
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: c0 99 e9 4f d8 02 36 25 5c 7b d2 9d 93 29 8c fc 53 02 76 cc 6d 45 b2 95 13 1c d0 df cb 96 69 27 8d 98 ab 1a 8a 44 10 4e 7d a9 2b 46 ed 35 27 e7 1f 5a b2 cb 17 26 ef 83 5c f3 34 3b 64 a8 fe 94 94 fb e0 9a db 56 33 9a c2 f0 6c a7 49 48 29 88 52 88 13 ef 5b 7b 94 ac c5 65 92 a9 10 f9 2b 5d 99 06 0c 63 26 b3 ae 41 23 d2 20 11 15 a4 f4 29 24 88 eb 15 9f 72 98 99 f9 a7 80 19 ef 8f 58 20 62 84 03 11 1c d3 1c 48 51 13 13 de 85 48 da 9f a5 5a 9a a0 14 49 42 f7 4c 76 8a d1 d3 df f3 53 0a 39 02 b3 dc 19 89 ef d6 9d a5 28 a5 e2 9c fd 45 12 49 c4 0d 74 11 d6 b9 70 99 31 d3 a9 a1 41 00 49 3f 4a 93 ea 56 6a 92 b2 77 28 e4 00 2b 89 57 71 f6 a8 50 f7 8a e0 85 0e a0 d0 04 85 10 a1 d6 7a 53 1b 5e 27 3e f3 49 20 cc c4 45 1b 72 48 9c 50 05 a4 2f 6f 34 69 59 88 02 ab a0 89 13 Data Ascii: O6%\{)SvmEi'DN}+F5'Z&\4;dV3lIH)R[{e+]c&A# )$rX bHQHZIBLvS9(EItp1AI?JVjw(+WqPzS^'>I ErHP/o4iY
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 0a 32 3f 7a b7 71 6b e6 0e d1 91 8e 2b 35 f4 a9 87 36 2c 9e 69 93 b2 1a b1 ea 00 83 fb 8a 4d c8 25 1e 6a 9b 33 bc 85 2e 79 c0 e9 fd ea 12 f8 02 4a a3 a7 15 cc a5 17 6f a6 cc a6 7c d5 2a 14 06 52 76 98 3f 03 98 a9 64 c1 6f 45 2b 86 a4 e7 ed 54 1f 48 48 04 03 ff 00 71 24 44 cf 4f a4 56 8b de 62 5d 71 87 0a 77 b4 b2 85 c1 c4 f3 3f 51 54 9e 10 a2 b0 91 90 47 a9 33 13 d6 38 9a b0 65 69 d1 4d 40 aa 49 4c 18 ef 42 a5 89 e7 8e e6 98 a6 94 a0 a0 d9 c2 1b 95 6e 30 7e 94 80 95 83 00 92 3e 6a c4 ec 7a 2e e9 ef 21 b3 c8 9e 86 b5 5a 5a 16 99 44 f0 39 3d 7f d2 bc fb 68 5a 56 0c 91 5b 56 0a 0a 40 f4 f0 33 55 c9 57 02 34 58 29 1c ed a8 0d a0 9f d3 46 20 e3 6f cd 12 50 d9 1d 29 7a 98 a2 c3 69 41 c0 a9 54 47 e9 e0 f4 a3 f2 81 26 07 5e 3b d7 79 39 92 73 50 dd 80 b2 a2 44 0c Data Ascii: 2?zqk+56,iM%j3.yJo\|*Rv?doE+THHq$DOVb]qw?QTG38eiM@ILBn0~>jz.!ZZD9=hZV[V@3UW4X)F oP)ziATG&^;y9sPD
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: f4 56 3c 4d e1 e5 58 bd a3 a2 f5 c6 1e 42 db 69 77 05 b1 01 43 32 32 23 33 1c 8a f9 6e 8f 57 93 c3 3c 47 aa 3b 53 a7 b6 f5 df 93 eb 1a ad 3e 3d 76 8e 9f 96 c7 c5 75 3d 42 c7 ff 00 dd 5b 8c de b8 da ae 74 bd 75 29 43 8e b8 b2 a4 a1 66 61 1b 4c 13 fa 89 dc 23 68 3d 62 83 44 bc 6d d1 bc 39 32 91 0a 07 9a f5 7a df 84 ed 9d b6 d6 75 7d 33 49 6e cb 41 be de c3 f6 a9 48 2e b4 94 2f 68 7b 64 c2 8a 54 24 67 20 82 47 35 8b ac 7e 0f ea df 87 cf bf a8 d8 dc b8 fe 90 86 d0 a4 5c ad 69 50 40 30 09 54 44 49 50 22 24 41 af 73 e1 fe 2d a2 c1 91 ab f7 72 37 25 e8 dd 75 45 fa a7 cf c6 cf 2b ab f0 fd 56 48 26 d6 f0 49 7c 52 ba 7f 34 5a 61 c0 15 13 34 6b 58 22 00 91 54 2c ae 8c 96 dc 80 a4 ab 69 4c cc 11 de ad 95 ce 12 a1 f7 af 53 19 29 2b 5c 1e 7a 58 dc 5d 33 c9 78 b2 e5 5e Data Ascii: V<MXBiwC22#3nW<G;S>=vu=B[tu)CfaL#h=bDm92zu}3InAH./h{dT$g G5~\iP@0TDIP"$As-r7%uE+VH&I\|R4Za4kX"T,iLS)+\zX]3x^
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 49 31 83 8a 88 1f a7 da a5 44 a4 00 3b 75 14 82 90 54 01 8f 9e 95 c1 40 89 93 8f 6a 82 94 9f fc d4 a5 20 7f e6 80 20 ac 12 40 3c 1e d5 c6 23 26 a5 49 1c 90 3e a2 96 40 98 1d 28 03 8c 15 48 ff 00 cd 2d c6 d4 73 1d 28 9c 31 9c d7 24 02 64 ff 00 5a 00 42 d0 48 82 22 82 08 30 a1 f6 cd 59 75 29 23 8a 41 03 99 39 f7 a7 5c 02 06 4f 02 7e d4 b7 5b 26 78 c9 ef 44 ad fb 88 07 a4 83 50 a5 92 0c c0 81 d6 a4 0a ea 00 09 f7 eb d2 84 a9 20 6e 3f 7a 37 92 52 98 27 1d e8 21 39 00 62 78 9a 78 f0 49 c4 24 89 c7 1d ea 50 32 09 ef 5c 91 9f bd 1a 3d 23 68 f9 e2 a4 80 d0 84 1e 0f 4e 28 d2 89 27 74 62 b9 b4 7f 32 a2 4f 34 c4 24 10 41 eb ef 48 db 65 64 04 ce 07 d7 14 49 40 c0 c1 9a 92 99 89 9a 30 91 fa be 28 6e c0 80 80 32 a0 0f 58 14 69 03 84 01 34 49 48 03 9e 98 15 c1 b2 08 32 Data Ascii: I1D;uT@j @<#&I>@(H-s(1$dZBH"0Yu)#A9\O~[&xDP n?z7R'!9bxxI$P2\=#hN('tb2O4$AHedI@0(n2Xi4IH2
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 40 33 f6 a6 a4 19 dd 02 a2 85 27 68 22 7d b9 8a 5a d5 e5 2a 54 38 e9 34 6f 3e 90 4a 82 63 77 00 74 aa 8f b8 b7 56 63 39 a1 2b 27 86 02 ef de 6c 9f 29 24 f5 83 c5 50 d5 6c b4 fd 71 a5 59 5d 0f ca ae e5 10 66 42 a2 7f 52 48 eb da ae 6c 27 f9 33 de 7f 6a 15 a6 42 43 a8 0a 00 e0 2c 48 4f de a5 c7 62 e8 4d 45 d9 a3 f8 63 e2 c7 1f 73 ff 00 4d 6b 6e 14 ea 16 48 d8 a2 e1 cd c3 63 f4 bb 8e a4 73 ef 5f 44 b7 4a 5d 6f 6a 81 ce 62 be 33 a9 35 a8 59 ad bd 63 47 1f fb 8b 57 37 b5 22 7d 24 ca 9b 24 f2 9c 63 a8 3f 02 be 9b e0 1f 19 69 5e 34 d1 3f c4 f4 a5 29 05 a7 0b 57 2c 3a 21 c6 1c 19 d8 a1 de 33 23 04 66 b0 e5 52 8c a9 f1 db ef ee c9 cf 8a 32 8f b4 87 cd 79 7f 83 45 fd 3c bd 70 10 88 0b da 76 ff 00 dc 41 e3 fd fd a8 74 eb 9b 9b 2d 49 5a be 92 80 8b e2 94 8b a4 79 73 Data Ascii: @3'h"}Z*T84o>JcwtVc9+'l)$PlqY]fBRHl'3jBC,HObMEcsMknHcs_DJ]ojb35YcGW7"}$$c?i^4?)W,:!3#fR2yE<pvAt-IZys
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 6a 8a 44 a9 79 84 e9 49 4c f6 eb 35 9f 7a 1b 58 36 ae fe 85 77 1c 55 d5 09 49 04 9e 3b d5 6b d6 12 f2 54 3a f4 34 d1 d9 89 27 6b 73 e4 fa cf e6 7f 07 bc 7a df 8c ed 12 a5 69 97 60 5b ea 8c 05 60 b4 4e 17 9e 76 c9 3f 12 2a cf 8e f4 4b 67 df 71 3a 63 ad fe 5e e4 07 ed 14 82 00 52 0e 53 0a fe 6e 63 ea 2b d7 78 97 44 b4 d7 b4 d7 74 9d 49 80 a4 ad 04 49 1c 8f f5 af 9b 78 3a e6 f3 45 d4 1d fc 1f f1 18 42 9c 40 5b de 19 b8 58 f4 a9 a8 f5 30 0f b6 4a 47 c8 ed 55 f8 96 9a 7a 9c 0b 26 37 59 20 d3 5f 15 c7 d7 8f 89 db f0 2d 7c 70 67 e8 c9 f8 5a e9 97 ff 00 4b ff 00 fc 7f 4b 2b e9 6d bc cb 8e 5b 3e 7f 88 d9 85 14 90 47 de b5 ed 46 e3 02 0f 7a c3 bc 6a fb 44 d6 16 6f 02 94 87 15 ea 2a 8c 7b 62 b7 b4 90 d2 91 e6 36 26 47 7a ea 69 b3 c7 51 a7 8e 48 bb b5 bf c7 ba f9 33 Data Ascii: jDyIL5zX6wUI;kT:4'kszi`[`Nv?Kgq:c^RSnc+xDtIIx:EB@[X0JGUz&7Y _-\|pgZKK+m[>GFzjDo{b6&GziQH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49784	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:31:59 UTC	1085	OUT	GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936714250 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2
2024-04-24 05:31:59 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:31:59 GMT Content-Type: application/javascript Content-Length: 9847 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Thu, 01 Feb 2024 22:07:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:31:59 UTC	9847	IN	Data Raw: 2f 2a 0a 20 20 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0a 20 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 0a 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0a 20 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 Data Ascii: /* DotNetNuke - http://www.dotnetnuke.com Copyright (c) 2002-2007 by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49788	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:00 UTC	1147	OUT	GET /Resources/Shared/scripts/widgets.js?_=1713936714251 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:00 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:00 GMT Content-Type: application/javascript Content-Length: 11494 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:00 UTC	11494	IN	Data Raw: 2f 2a 0d 0a 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0d 0a 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 20 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0d 0a 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c Data Ascii: /*DotNetNuke - http://www.dotnetnuke.comCopyright (c) 2002-2007by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49789	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:00 UTC	400	OUT	GET /Image/379F56AD-BA05-4256-9D4F-81856E8EFECB?w=450&r=s HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:00 UTC	194	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:00 GMT Content-Type: image/jpeg Content-Length: 131072 Connection: close Cache-Control: public, max-age=31536000 Server: Microsoft-IIS/10.0
2024-04-24 05:32:00 UTC	16190	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 07 d0 00 a6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 05 06 08 09 01 04 0a 02 03 ff c4 00 78 10 00 01 03 03 03 02 03 04 04 06 07 0e 10 06 0a 13 01 02 03 04 00 05 06 07 08 11 12 21 09 13 31 14 22 41 51 0a 15 32 61 16 23 Data Ascii: JFIFCC"x!1"AQ2a#
2024-04-24 05:32:00 UTC	16384	IN	Data Raw: 23 a5 18 5c 95 4c 9e 95 94 06 c0 29 0c 7b 28 6d 00 a4 21 64 20 72 4f 04 8e 2a fa fd cf 1e da 3f a5 4c 67 fb 9b 87 f2 8a 7e e7 93 6d 27 d7 15 c6 7f 55 c3 f9 45 44 af e9 26 c2 e6 b5 2a b5 70 cc 41 ce 64 ea ef 54 74 e6 df 47 56 2d 1e 10 04 79 ea a5 50 c1 78 86 da 95 4a 74 e9 d1 6b 5f 1a 0c ed 88 f1 04 13 e3 27 e5 a2 8c 37 bb e2 7f e1 f7 ad 78 c6 86 6d 87 15 dc dc 8b ee 11 6e cf ed 53 f5 3f 24 ba da 6e 2b 79 56 cb 4b 5e 73 68 7f cc 60 2e 43 92 64 21 a0 a2 94 a8 f2 0a 8f 1e b5 8b be 3e fe 21 fa 47 bd fd 59 c1 71 bd b9 e7 2a bf e1 d8 9d 8a 43 ee 4f 44 17 e3 a5 cb 94 a7 40 71 3d 0f a1 0a 3d 0c b2 d0 07 a7 8e 5c 50 04 d6 78 fe e7 93 6d 3f d2 ae 33 fa ae 1f ca 29 fb 9e 3d b4 7f 4a 98 cf f7 37 0f e5 15 5c 3b d2 36 0d 86 dc 52 ad 4f 07 be 26 9e 68 9f 55 89 7e ee 31 Data Ascii: #\L){(m!d rO?Lg~m'UED&pAdTtGV-yPxJtk_'7xmnS?$n+yVK^sh`.Cd!>!GYq*COD@q==\Pxm?3)=J7\;6RO&hU~1
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 7e f8 df 3f 0e a4 8e 7e 15 a9 71 b4 bf a3 4c 3b 8d ee 64 5f c6 87 ff 00 90 56 42 78 63 68 5f 83 2e 9b 6e a2 3e 43 b1 ed d0 de f2 5c ed dc 7e 73 09 b4 4a bf 3c f3 6f c3 21 0a 78 a9 0a 8a d8 57 4f 4a 14 39 57 63 dc 03 51 f1 2c 1b 07 a5 6a fa 96 ec ae d7 01 3d f6 77 7d e6 04 79 f2 52 70 cc 67 1a ab 74 ca 77 2e b7 73 49 8e e3 fb de e1 26 4f 82 d9 28 ee 39 a5 70 9f b2 3f 35 73 5c 62 ed 52 94 a5 11 29 4a 51 15 ad ad f8 65 bb 51 b4 77 2c d3 eb c5 ed 76 d8 97 ec 62 7d ba 55 c1 0c f9 86 2b 6f c6 71 a5 3a 13 f9 45 21 45 5c 7c 78 e2 b5 15 2b e8 f9 6c ba d3 a3 b0 35 f2 e5 e2 6e d3 18 45 c1 11 c4 0c b1 eb 3c 14 40 91 e7 38 1a 6b a5 e3 23 a4 95 38 7a 40 e7 9e 79 1f 03 5b 9d 5a 42 85 63 65 83 c3 3b 49 6d fa b9 79 c9 b2 2c 82 55 ef 00 97 3e e3 75 b1 69 35 c6 13 6a b3 d9 Data Ascii: ~?~qL;d_VBxch_.n>C\~sJ<o!xWOJ9WcQ,j=w}yRpgtw.sI&O(9p?5s\bR)JQeQw,vb}U+oq:E!E\\|x+l5nE<@8k#8z@y[ZBce;Imy,U>ui5j
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 9c 8e b7 6d 73 96 d0 74 0f 82 d2 0f 4b 89 fe c5 40 8f ba bc a7 8c fd 1a 7d 3f 8b b3 1a c2 ee 4d bd e3 23 bd bb 5c 5b a0 9e 60 c6 84 89 04 68 5a 57 ab 70 5f a4 cf a0 30 87 e0 98 a5 b0 b8 b2 7c cb 76 73 73 6a 63 91 13 a8 1a 10 75 0e 0b 63 db 22 99 be 7f 01 2d 5d cb 75 df 48 76 a7 8e ea eb f7 cb 1f d5 11 f2 84 4a 9c e2 20 5b cb c8 79 d4 98 91 9c 4b 88 52 d6 d3 04 a9 69 50 48 6b 84 ab 85 28 9c 42 f1 41 df 9e 53 e2 47 ba cb 8e e8 f5 0f 47 2c f8 5e 4f 72 b6 c5 85 90 42 b2 4a 96 b6 64 bb 19 b0 c3 6e 94 49 5a 94 d2 83 28 69 b2 94 f0 93 e5 f5 71 d4 54 4c 8b a5 9e 38 3b b0 c3 1b 6a 1e a0 d9 31 cc bd 96 d1 c1 91 2e 12 a1 ca 51 f9 97 23 94 a3 9e 3f f9 ba 92 2e 1e 2f 5b 3c d6 96 5b 6b 72 7b 28 4c f7 0a 40 72 42 5b 85 72 52 15 f1 29 53 c8 69 c1 fd d7 35 7d ae 39 e9 33 Data Ascii: mstK@}?M#\[`hZWp_0\|vssjcuc"-]uHvJ [yKRiPHk(BASGG,^OrBJdnIZ(iqTL8;j1.Q#?./[<[kr{(L@rB[rR)Si5}93
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: bb b5 47 ff 00 dd 66 b0 87 fc 95 27 32 a5 ad b4 a9 c6 fa 14 40 25 24 f3 c1 e3 d2 be b8 1f 21 4a cd 46 95 4a 53 9a a1 77 9e 5d 3f 65 a3 e6 a3 5c 57 a5 5a 32 52 6b 23 f3 4b b5 f3 cc e7 7c a1 29 4a 56 75 19 29 4a 51 12 94 a5 11 29 4a 51 12 94 24 0a fc 95 36 22 5d f2 15 25 b0 be 40 e8 2e 0e 7f 55 50 90 37 45 fa d2 9c d7 ca 9c 4a 47 27 d0 7a 93 f0 aa a2 fa a5 53 91 97 62 eb 95 ec 48 c8 ed e5 ee 78 f2 84 d6 ca b9 fc dc f3 55 00 b0 6a d6 bd 8f f6 4c aa 02 0e cb 9a 50 9e 07 35 f8 ae e3 01 b5 96 dc 9a d2 54 0f 04 17 52 08 ff 00 0d 54 90 37 55 5f b5 2b f0 fa d2 db ff 00 cb d8 ff 00 f6 c9 ff 00 9e 82 e9 6e 27 81 3d 9f ff 00 6c 9f f9 ea 99 db d5 52 42 fd e9 40 79 a5 5c aa 94 a5 28 89 4a 52 88 94 a5 28 89 4a 52 88 94 27 8a 54 7d b8 cd c1 62 7b 79 c0 1e cb 72 05 25 f9 Data Ascii: Gf'2@%$!JFJSw]?e\WZ2Rk#K\|)JVu)JQ)JQ$6"]%@.UP7EJG'zSbHxUjLP5TRT7U_+n'=lRB@y\(JR(JR'T}b{yr%
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: cc 77 1d 92 64 64 16 a7 2d 91 9b 87 71 44 64 84 ae 74 24 49 0b 51 4a 0a 92 79 1d fb 72 29 1b a0 d1 6c 3b 30 d2 7c 0b 56 36 4f b0 cc fb 06 db f5 a7 58 6e 77 1c f3 16 cd f4 ca e5 77 b7 5c a5 2e 03 0d c2 bd 0c 71 b9 69 7d eb 7b 6a 4b ed 79 49 0d 25 0e a8 28 a5 60 f6 de e9 6c 1f 5f f1 9a 79 63 8e 39 fd 3c 9e 69 9c a2 d3 fe d7 74 13 50 ed 1e 10 3b bf 95 85 db af f2 2c 39 dd aa ed 23 06 c1 22 e9 05 c7 17 8d 15 ff 00 60 52 1f 55 aa d9 2a 44 87 bd 9e 42 fc b2 94 27 a7 85 b6 b0 13 de ad 7c 8b c3 3b 23 d1 6c 0b 63 7a d3 8d 66 3a e9 95 dd 67 6a be 13 27 2e c4 72 8b d4 bb 9d af 18 64 c7 4b cf b8 88 3e 50 f6 04 32 b4 f9 5c ac 80 da 09 41 23 9a dd 47 96 38 e3 9f d3 c9 ae 7a 3e fa a6 72 8b ce ed f3 6a bb 86 95 ad d9 7e 8f 6b 86 1d 78 b5 6b 5d e7 5b de ba da b5 16 d7 b7 Data Ascii: wdd-qDdt$IQJyr)l;0\|V6OXnww\.qi}{jKyI%(`l_yc9<itP;,9#"`RU*DB'\|;#lczf:gj'.rdK>P2\A#G8z>rj~kxk][
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 16 6b 76 77 90 25 c4 5f 72 b8 ad ac 4d b8 21 7d 3c a1 e7 3a b9 75 03 a1 1d 29 57 21 1d 23 a4 27 8a d3 ef ed fc de 9f f5 cd 65 df df 2f fb 29 fb 7f 37 a7 fd 73 59 77 f7 cb fe ca 99 fc cd e3 5f da 29 ff 00 ab ee 5a df fc 47 70 d7 f6 4a df e8 ff 00 72 db b6 71 b2 3d a3 ea 46 bd 59 77 45 9b ed fb 16 b8 ea 16 3c b6 15 67 cc 1f b6 8f 6f 8e a6 49 f2 88 75 3c 15 14 75 10 92 ae 78 07 81 db b5 5e 3a b1 a4 da 69 ae 9a 79 73 d2 7d 5c c4 61 5f f1 bb d3 01 8b b5 9a e0 92 a6 25 b4 14 15 e5 b8 90 47 52 49 48 e5 27 b1 f4 20 8a d2 c7 ed fc de 9f f5 cd 65 df df 2f fb 29 fb 7f 37 a7 fd 73 59 77 f7 cb fe ca 7f 33 78 d7 f6 8a 7f ea fb 93 ff 00 11 dc 33 fd 92 b7 fa 3f dc b6 d3 96 ec ab 46 a5 ed 46 f1 b3 fd 2d b5 b5 84 e2 97 28 2b 8b 12 2d 91 8e a6 ed e9 53 a9 70 86 5a 71 45 28 Data Ascii: kvw%_rM!}<:u)W!#'e/)7sYw_)ZGpJrq=FYwE<goIu<ux^:iys}\a_%GRIH' e/)7sYw3x3?FF-(+-SpZqE(
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-24 05:32:01 UTC	194	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:00 UTC	761	OUT	GET /Portals/3922/Files/Please%20note%20(4).png HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:01 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:00 GMT Content-Type: image/png Content-Length: 45810 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Tue, 02 Apr 2024 19:32:26 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:01 UTC	15714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 00 c8 08 06 00 00 00 10 8f 85 1a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 69 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 Data Ascii: PNGIHDR pHYs+iiTXtXML:com.adobe.xmp<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x='adobe:ns:meta/'><rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Descrip
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 21 5f 9e 02 8d 91 00 ed c2 36 29 d8 45 60 0c e0 df d7 9d 20 84 bf f0 12 96 2e 6f f2 16 9d b4 dc 15 52 af 6e fd e2 11 64 ce e1 91 63 8c d6 b8 f2 fc 5b 7c fd 32 c8 18 b3 c2 19 36 8c 91 7f 3e 2b 1d 87 79 a2 dc 84 19 da fc 36 63 00 c3 ff 8c 15 82 1b e1 48 08 01 b4 3d 5c c1 47 b1 31 01 84 27 31 27 34 2c c1 0f 99 03 08 6f b2 92 30 d6 e1 ae 98 1f a6 25 7d bf ff 16 59 a0 58 cc 55 e8 63 0c d1 b6 30 75 75 94 06 41 9b 37 ba 79 8f 4c 20 9c 2d 36 b6 78 e6 d8 a9 f2 69 05 e0 1b d2 e9 6a 66 20 94 6e da c4 c2 87 47 16 23 dd 0f 19 0b e7 5b e1 69 dc 21 8e 13 3c 5c d0 18 63 8a 31 67 de f9 b7 0f d7 8e 6b 8d cc 2d d5 59 33 fe fa 1b 5e 23 b4 85 85 18 3e e5 b9 4d af 8d 29 e4 51 9d 12 ea 8d 19 b4 e0 7c 12 5e bc f4 bb f2 7b c8 29 e6 1c 73 a2 e5 ed 6c fa 75 c0 0b 32 97 9d 0c 97 dd Data Ascii: !_6)E` .oRndc[\|26>+y6cH=\G1'1'4,o0%}YXUc0uuA7yL -6xijf nG#[i!<\c1gk-Y3^#>M)Q\|^{)slu2
2024-04-24 05:32:01 UTC	13712	IN	Data Raw: ea 86 7c a1 05 f0 28 f3 0c f9 a8 6d 03 3f 71 0b fc 9f 3d b9 48 14 b9 50 c9 0e db 86 b3 86 32 e0 1b e5 41 64 18 eb 18 f5 43 f7 3d 9e 77 f3 ff 6f ef 4c bc 2d ab ea 3b ff 17 74 af ac ee f4 b4 62 ba 4d 1b 5b a4 28 aa 40 8a aa 00 25 12 45 8d 53 5c b1 3b dd 49 5a 42 04 87 c6 31 71 8c 9a a0 ad 28 12 5a 20 44 85 c6 44 a3 2d 83 cc f3 8c 32 8a 22 63 41 0d 50 14 35 30 d4 f8 28 6a 1e de ab db e7 73 ee fe de fb bb fb 9d 73 ee b9 af 8a 47 a1 df ef 5a af de ab 73 cf dd c3 6f ef fd db bf 71 6f c2 63 c8 f5 60 cd ed 9c 98 28 f9 23 e3 c7 fa 3b 3b 8d 15 21 1a ac 61 e6 d4 5f fd e2 99 de 77 19 7b 68 f9 f6 82 d7 bc 90 9d 5e a8 bf 45 1b 04 b9 2a 9e 42 f2 ba da 88 f0 c9 7a 63 4c d9 57 99 13 d0 0a 7e bc 6b 62 50 01 84 97 b3 0f d1 27 e5 ab 88 8f 80 ef 35 f0 e0 a7 12 0f 66 ec 98 9b Data Ascii: \|(m?q=HP2AdC=woL-;tbM[(@%ES\;IZB1q(Z DD-2"cAP50(jssGZsoqoc`(#;;!a_w{h^E*BzcLW~kbP'5f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49790	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:00 UTC	751	OUT	GET /images/PoweredBy_Logo_136x52.png HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:01 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:00 GMT Content-Type: image/png Content-Length: 59766 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:22 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:01 UTC	15714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 34 08 06 00 00 00 51 b2 70 5c 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a 8c 00 00 0a 8c 01 bd c6 cf d8 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 30 2f 31 37 2f 31 33 f2 d2 96 0c 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 15 ec 70 72 56 57 78 9c c5 5b 09 78 14 55 b6 2e 20 a1 15 3a b6 18 12 1a c5 46 48 88 30 6e 60 c0 ec 01 67 40 41 05 41 45 45 61 04 eb f4 96 de d2 7b 57 f5 5d c4 0d 15 51 54 50 22 a2 a0 2c 6e 88 28 90 3d 80 fb 12 1c 45 d9 5c 90 45 11 14 c4 05 48 67 e5 dd 5b 7d 41 fc de d3 61 e6 0d 35 95 fc 5d 75 97 3a ff 3d ff 3d f7 54 55 a7 f2 Data Ascii: PNGIHDR4Qp\sBIT\|dpHYstEXtCreation Time10/17/13tEXtSoftwareAdobe Fireworks CS4prVWx[xU. :FH0n`g@AAEEa{W]QTP",n(=E\EHg[}Aa5]u:==TU
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 30 69 5a 4b f6 cd 30 e9 04 e6 21 f8 34 82 e0 bf 31 88 b3 83 91 8a d2 18 62 60 b0 c4 62 d7 10 47 33 df 95 ae 3c 3f 00 be 72 81 41 08 83 10 6e 53 92 90 8e 49 3e b8 21 f8 12 4c bf f4 b9 31 09 4d a4 09 d9 88 75 29 ce 1c e6 49 e1 27 2e 05 7a 1a 92 8b d9 af 57 fc 8d a2 c1 13 c2 42 82 29 4f 27 b4 94 aa a8 62 4b d9 24 ae d8 82 35 85 a1 b6 24 97 94 b2 40 0d 1e 23 32 78 68 9d 95 c8 25 5c 3c d1 f1 ad cf 85 13 0b 66 a2 b4 22 53 65 76 7c a6 0c ec 7d bf db eb dc cc 37 ee 01 50 dd a8 17 47 15 e2 8f 7d 00 8f 4d a8 52 74 cf 59 ea 9e 6a 55 d2 a9 4a ac 38 08 6b f4 02 1f d6 13 cc 47 4c b8 36 5e 47 a6 7c ae 42 2e 76 79 ce c7 47 fe b4 9c d7 e1 ec 45 f7 e0 15 03 1e 1e 66 04 17 3f 62 df 0f e0 89 44 ec fb 1e 3d f0 05 fe f9 91 5d 5a b0 8b 3f 7f 05 f6 bd 81 7d ea ed af a3 55 bc 44 Data Ascii: 0iZK0!41b`bG3<?rAnSI>!L1Mu)I'.zWB)O'bK$5$@#2xh%\<f"Sev\|}7PG}MRtYjUJ8kGL6^G\|B.vyGEf?bD=]Z?}UD
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: d1 7f d7 00 00 2a 17 6d 6b 42 54 fa ce ca fe 00 7f d4 f0 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 9c ed 7d 2b b8 ec 28 d6 f6 92 48 2c 12 89 c4 22 91 48 24 16 19 89 c4 22 23 91 58 24 12 19 89 8d 8c 8c 8c 8d 2c 99 7f 51 fb 9c ee 9e 9e e9 f9 d4 ff d4 88 5a 73 e9 3e 55 7b d7 09 b0 2e ef bb 2e 54 e6 e7 7d 36 9e 00 da b3 91 2d c6 d7 46 60 87 a3 c3 02 70 5d c5 05 6b 00 df 85 7e c3 f3 62 1d e0 81 0a 10 01 b6 0a 1b d0 9e 24 c1 77 dd 93 d9 b1 84 c1 f1 cd 7c 73 fc f1 43 6f 00 95 9b dd 41 2b d5 71 33 b6 be 6c 4f 15 14 e0 78 9d 40 e1 28 e9 30 f0 61 b9 af 2b 3f f7 09 12 a0 dc 54 2c a4 5f 8d 03 af 37 81 b8 Data Ascii: *mkBTx}+(H,"H$"#X$,QZs>U{..T}6-F`p]k~b$w\|sCoA+q3lOx@(0a+?T,_7
2024-04-24 05:32:01 UTC	11284	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:00 UTC	783	OUT	GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936714250 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:00 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:00 GMT Content-Type: application/javascript Content-Length: 9847 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Thu, 01 Feb 2024 22:07:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:00 UTC	9847	IN	Data Raw: 2f 2a 0a 20 20 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0a 20 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 0a 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0a 20 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 Data Ascii: /* DotNetNuke - http://www.dotnetnuke.com Copyright (c) 2002-2007 by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:01 UTC	1104	OUT	GET /portals/_default/skins/customizable/font-awesome/font/fontawesome-webfont.woff?v=3.2.1 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://overlakehf.ejoinme.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://overlakehf.ejoinme.org/portals/_default/skins/customizable/font-awesome/css/font-awesome.min.css?cdv=158 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:01 UTC	672	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:01 GMT Content-Type: font/x-woff Content-Length: 43572 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:01 UTC	15712	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 aa 34 00 0e 00 00 00 01 34 e4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 44 00 00 00 1c 00 00 00 1c 65 70 61 d1 47 44 45 46 00 00 01 60 00 00 00 1f 00 00 00 20 01 b4 00 04 4f 53 2f 32 00 00 01 80 00 00 00 3e 00 00 00 60 8b 02 7a 12 63 6d 61 70 00 00 01 c0 00 00 01 20 00 00 02 6a e9 35 b0 f2 67 61 73 70 00 00 02 e0 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 02 e8 00 00 96 af 00 01 13 c4 81 32 87 f7 68 65 61 64 00 00 99 98 00 00 00 31 00 00 00 36 02 5c c3 22 68 68 65 61 00 00 99 cc 00 00 00 1f 00 00 00 24 0d 82 07 e1 68 6d 74 78 00 00 99 ec 00 00 01 c2 00 00 06 16 d9 ec 0e 11 6c 6f 63 61 00 00 9b b0 00 00 02 f5 00 00 03 10 71 10 b5 ea 6d 61 78 70 00 00 9e a8 00 00 00 Data Ascii: wOFF44FFTMDepaGDEF` OS/2>`zcmap j5gaspglyf2head16\"hhea$hmtxlocaqmaxp
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: 9f 6e aa 6f 30 a7 bf dd 68 56 02 b7 4c 48 d5 54 7f d3 4d f5 4d e3 d3 90 fc 84 6c c4 43 b3 99 9a c6 b2 35 fb c7 17 dd a4 98 1b 6e bd 35 60 52 c6 a5 a9 7c 9b 8c ae e9 34 b7 65 22 ef 91 09 f6 51 15 16 b9 74 13 40 b9 69 b8 c7 55 f3 1e cb fc 34 a9 c4 7c 2c 69 d5 96 4f eb 1e 91 e2 6a 82 7e 43 12 aa 70 1e c5 c7 97 76 14 0b 81 68 e0 8c 85 35 7d 35 96 c6 45 0b 03 f3 17 06 83 8b 9e 7d 7e f9 d1 12 c7 11 fa 11 ea 3e 71 c1 11 21 c4 b8 8e 37 1e fd cc ec 12 cb 31 a8 78 6b dc 75 d6 1a 32 27 62 69 0c b7 f5 c6 af 79 d4 03 97 57 33 1e 5d 33 d3 2b 5b e6 76 df 3a cd 9d 5b be bc 76 66 31 9f cb 55 33 1c 07 d2 17 1c ee 99 a9 73 1b e7 cf d6 d9 66 46 d5 e1 b7 f9 f9 25 59 f7 8a 9e 5c 64 ff 9e 79 5d 87 b9 aa f1 c9 e2 2e 71 19 52 80 49 87 8e b7 e8 76 be 5a 05 76 cb 85 18 28 fb 6a 1b Data Ascii: no0hVLHTMMlC5n5`R\|4e"Qt@iU4\|,iOj~Cpvh5}5E}~>q!71xku2'biyW3]3+[v:[vf1U3sfF%Y\dy].qRIvZv(j
2024-04-24 05:32:01 UTC	11476	IN	Data Raw: 0a b6 d5 d7 5d d3 1a 0a 08 74 ea e9 69 65 47 af 9a b8 7e 42 9d 85 39 7d 0a 0c 53 a7 c1 33 51 70 04 00 77 ef bd 00 0c 7f 09 bf 18 56 b8 5b cf cb dc 11 68 0a d8 b5 1c 94 1e 03 34 ab 35 38 7c 11 f0 95 37 ea b5 aa 39 00 a4 97 d1 d4 a3 e4 ad ee 48 91 8d c2 28 c7 ae 8e 88 64 47 13 7f d0 8b 91 b5 90 28 9b 07 d9 c0 5c 2c e5 12 3d bb 01 34 35 d0 d4 f0 50 0e 43 03 a3 6a a5 40 46 df 20 bd d8 20 cb 81 79 6c 90 7a ec 59 72 56 cc f9 33 3d fb cc 70 20 60 ec 52 0d e6 97 70 80 2f ec 5e 78 86 a2 a2 b2 fa 4e 53 dc 6e 0e a3 e6 07 a8 6e 6a 36 6a 87 28 a6 9a f2 2b d0 04 06 64 ec aa dc 92 4b 1e 21 c8 4a 8c c5 c4 69 f1 4e 80 29 31 b0 b7 0c 66 c5 00 48 60 31 e3 84 31 11 33 5e 84 fd 8a 28 de 8a 51 91 79 e0 bb 93 b4 98 5a 91 c9 7c a6 96 7e 82 3d 2a a4 34 d6 de a5 c9 10 81 dd 63 7a Data Ascii: ]tieG~B9}S3QpwV[h458\|79H(dG(\,=45PCj@F ylzYrV3=p `Rp/^xNSnnj6j(+dK!JiN)1fH`113^(QyZ\|~=*4cz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49794	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:01 UTC	770	OUT	GET /Resources/Shared/scripts/widgets.js?_=1713936714251 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:01 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:01 GMT Content-Type: application/javascript Content-Length: 11494 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:01 UTC	11494	IN	Data Raw: 2f 2a 0d 0a 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0d 0a 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 20 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0d 0a 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c Data Ascii: /*DotNetNuke - http://www.dotnetnuke.comCopyright (c) 2002-2007by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49796	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:01 UTC	390	OUT	GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:01 UTC	176	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:01 GMT Content-Type: image/jpeg Content-Length: 524288 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:01 UTC	16208	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 05 35 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 08 ff c4 00 4b 10 00 01 03 03 03 02 05 02 04 04 05 03 03 01 02 0f 01 02 03 11 00 04 21 05 12 31 41 51 06 13 22 61 71 81 91 07 14 32 a1 23 42 b1 c1 Data Ascii: JFIFCC5"K!1AQ"aq2#B
2024-04-24 05:32:01 UTC	16384	IN	Data Raw: bb c1 b6 97 17 5a ca b5 5b ab b6 85 bb 6d 6d 50 54 c9 52 48 21 00 08 93 1e f5 6b c4 a0 9d 0d c7 90 c2 43 d7 37 ed 97 4e d1 fa 4a f9 ff 00 cd 7c e3 5d 8f 16 2f ea 05 18 3e 67 17 f0 6d a6 d1 f5 5d 3c e5 3f 05 72 97 1d 0f e6 92 e4 a8 e3 61 6f a9 68 24 29 24 c5 7d 1b ff 00 a7 cb 8d 4d df 08 5d 5f 6b f6 6c b5 3a 8a db b0 5b 4a c3 8c a0 00 09 12 76 9d d3 23 99 cd 7c fa c1 95 5c 38 b5 ab a9 27 15 ed ff 00 05 5f 2b d3 ef ec 6e 5f 4f 97 65 a9 29 0c 20 74 0a 48 51 3e f2 49 af 79 ad c7 07 1e a5 ce c9 fc 37 3e 69 83 2c fd 8b c6 f8 5b af 4e 13 fd 8f a7 b2 f0 58 dc 0e 29 92 4a 73 d3 3c 55 2b 3b 96 95 e9 42 b1 d8 55 b4 2e 51 0a c8 26 b8 ed 34 c6 4e ce 59 93 f4 aa 7a 93 61 c6 55 29 e6 ad b8 67 83 db 8a 45 c9 fe 19 07 b7 de a6 3f 88 89 13 a7 ba a7 ac 1a 52 8e 42 60 cf b6 Data Ascii: Z[mmPTRH!kC7NJ\|]/>gm]<?raoh$)$}M]_kl:[Jv#\|\8'_+n_Oe) tHQ>Iy7>i,[NX)Js<U+;BU.Q&4NYzaU)gE?RB`
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 05 22 aa 6a 20 e6 53 06 33 8a d0 b9 32 27 b9 a3 a2 25 0f 59 a5 f2 24 c9 13 f1 57 77 40 dc 0c e7 b5 66 f8 61 44 69 c5 3f e5 74 f3 57 9c 58 da 64 f1 54 c9 be a6 0d 50 6b 52 4a 48 f6 a0 2e 22 08 9f b5 25 6e 92 ac a7 e9 41 2a 19 80 07 f7 a9 20 7a 9d 8c 0e 9d e9 66 e0 f0 4c f7 a1 f3 01 f5 1e 83 06 80 a2 64 84 f3 40 0f 6d e5 39 e9 04 4c 72 68 f1 1b a0 18 aa c8 84 80 52 39 e2 2a c3 6e 02 99 31 8e 28 00 c1 27 27 34 69 4c 24 24 72 a3 c4 d2 c2 b3 44 85 00 7d 27 9f 7e b4 ae 23 3a a0 88 8e 62 81 69 48 3c 08 f9 a3 29 dc 64 ff 00 b5 40 48 9c 99 1d bb d4 ad 85 03 ca 99 24 74 e2 ba 36 e4 09 9e f4 c0 80 15 09 48 c8 c9 a8 20 46 dc 8e bc 50 9d 8a d1 2d 2c a2 08 04 75 35 6d a7 02 91 93 33 dc d5 2e 00 1c cf 4a 36 d4 5b 27 12 3a d4 f2 29 71 51 26 07 3c 50 38 25 46 00 a0 0e 6e Data Ascii: "j S32'%Y$Ww@faDi?tWXdTPkRJH."%nA* zfLd@m9LrhR9*n1(''4iL$$rD}'~#:biH<)d@H$t6H FP-,u5m3.J6[':)qQ&<P8%Fn
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 7c 92 fb ee ea 32 e3 88 84 c2 7d 29 f7 8f e9 57 d4 41 4c 9c d2 96 a5 64 cf 4a 64 88 eb 69 6c 45 8d ba 2c ed 51 6e 09 56 d1 ea 59 fe 65 75 26 98 5f 49 51 4a 56 99 1c 8e d5 56 eb 52 66 de 41 5c 94 e0 a4 0c 9a a8 db 97 07 57 4a da 69 3b 5c 6e 56 67 29 4f 73 3d 6a 69 b0 57 c9 a8 e1 43 89 da b0 0f 5c a6 69 6b 70 98 91 31 ef 50 56 24 83 24 c6 69 57 0a 90 00 92 24 13 9a 91 06 17 63 2a 81 42 5e c1 8e 9e d4 b5 95 12 7d 22 3a 19 cd 2d 4b 5a 56 4e 02 47 06 79 a1 2b 01 e1 7e ad ca 14 cd e2 3d 33 f1 15 5c ac 6d 20 28 71 5c 97 3d 01 25 59 a9 e9 62 bd cf 9f b6 90 91 b6 49 03 da 8f 6c 8c 7f 5a 80 90 ae 49 fb d4 fe 88 03 3d eb b6 79 97 b9 c7 72 44 cf d8 d4 a5 44 e7 b8 a8 24 90 09 ff 00 37 6a ed d1 8a 00 82 77 19 f8 a2 a8 0a 11 5c 48 3c 50 00 ad 42 67 da b9 b2 a2 73 da b8 Data Ascii: \|2})WALdJdilE,QnVYeu&_IQJVVRfA\WJi;\nVg)Os=jiWC\ikp1PV$$iW$c*B^}":-KZVNGy+~=3\m (q\=%YbIlZI=yrDD$7jw\H<PBgs
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: c0 99 e9 4f d8 02 36 25 5c 7b d2 9d 93 29 8c fc 53 02 76 cc 6d 45 b2 95 13 1c d0 df cb 96 69 27 8d 98 ab 1a 8a 44 10 4e 7d a9 2b 46 ed 35 27 e7 1f 5a b2 cb 17 26 ef 83 5c f3 34 3b 64 a8 fe 94 94 fb e0 9a db 56 33 9a c2 f0 6c a7 49 48 29 88 52 88 13 ef 5b 7b 94 ac c5 65 92 a9 10 f9 2b 5d 99 06 0c 63 26 b3 ae 41 23 d2 20 11 15 a4 f4 29 24 88 eb 15 9f 72 98 99 f9 a7 80 19 ef 8f 58 20 62 84 03 11 1c d3 1c 48 51 13 13 de 85 48 da 9f a5 5a 9a a0 14 49 42 f7 4c 76 8a d1 d3 df f3 53 0a 39 02 b3 dc 19 89 ef d6 9d a5 28 a5 e2 9c fd 45 12 49 c4 0d 74 11 d6 b9 70 99 31 d3 a9 a1 41 00 49 3f 4a 93 ea 56 6a 92 b2 77 28 e4 00 2b 89 57 71 f6 a8 50 f7 8a e0 85 0e a0 d0 04 85 10 a1 d6 7a 53 1b 5e 27 3e f3 49 20 cc c4 45 1b 72 48 9c 50 05 a4 2f 6f 34 69 59 88 02 ab a0 89 13 Data Ascii: O6%\{)SvmEi'DN}+F5'Z&\4;dV3lIH)R[{e+]c&A# )$rX bHQHZIBLvS9(EItp1AI?JVjw(+WqPzS^'>I ErHP/o4iY
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 0a 32 3f 7a b7 71 6b e6 0e d1 91 8e 2b 35 f4 a9 87 36 2c 9e 69 93 b2 1a b1 ea 00 83 fb 8a 4d c8 25 1e 6a 9b 33 bc 85 2e 79 c0 e9 fd ea 12 f8 02 4a a3 a7 15 cc a5 17 6f a6 cc a6 7c d5 2a 14 06 52 76 98 3f 03 98 a9 64 c1 6f 45 2b 86 a4 e7 ed 54 1f 48 48 04 03 ff 00 71 24 44 cf 4f a4 56 8b de 62 5d 71 87 0a 77 b4 b2 85 c1 c4 f3 3f 51 54 9e 10 a2 b0 91 90 47 a9 33 13 d6 38 9a b0 65 69 d1 4d 40 aa 49 4c 18 ef 42 a5 89 e7 8e e6 98 a6 94 a0 a0 d9 c2 1b 95 6e 30 7e 94 80 95 83 00 92 3e 6a c4 ec 7a 2e e9 ef 21 b3 c8 9e 86 b5 5a 5a 16 99 44 f0 39 3d 7f d2 bc fb 68 5a 56 0c 91 5b 56 0a 0a 40 f4 f0 33 55 c9 57 02 34 58 29 1c ed a8 0d a0 9f d3 46 20 e3 6f cd 12 50 d9 1d 29 7a 98 a2 c3 69 41 c0 a9 54 47 e9 e0 f4 a3 f2 81 26 07 5e 3b d7 79 39 92 73 50 dd 80 b2 a2 44 0c Data Ascii: 2?zqk+56,iM%j3.yJo\|*Rv?doE+THHq$DOVb]qw?QTG38eiM@ILBn0~>jz.!ZZD9=hZV[V@3UW4X)F oP)ziATG&^;y9sPD
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: f4 56 3c 4d e1 e5 58 bd a3 a2 f5 c6 1e 42 db 69 77 05 b1 01 43 32 32 23 33 1c 8a f9 6e 8f 57 93 c3 3c 47 aa 3b 53 a7 b6 f5 df 93 eb 1a ad 3e 3d 76 8e 9f 96 c7 c5 75 3d 42 c7 ff 00 dd 5b 8c de b8 da ae 74 bd 75 29 43 8e b8 b2 a4 a1 66 61 1b 4c 13 fa 89 dc 23 68 3d 62 83 44 bc 6d d1 bc 39 32 91 0a 07 9a f5 7a df 84 ed 9d b6 d6 75 7d 33 49 6e cb 41 be de c3 f6 a9 48 2e b4 94 2f 68 7b 64 c2 8a 54 24 67 20 82 47 35 8b ac 7e 0f ea df 87 cf bf a8 d8 dc b8 fe 90 86 d0 a4 5c ad 69 50 40 30 09 54 44 49 50 22 24 41 af 73 e1 fe 2d a2 c1 91 ab f7 72 37 25 e8 dd 75 45 fa a7 cf c6 cf 2b ab f0 fd 56 48 26 d6 f0 49 7c 52 ba 7f 34 5a 61 c0 15 13 34 6b 58 22 00 91 54 2c ae 8c 96 dc 80 a4 ab 69 4c cc 11 de ad 95 ce 12 a1 f7 af 53 19 29 2b 5c 1e 7a 58 dc 5d 33 c9 78 b2 e5 5e Data Ascii: V<MXBiwC22#3nW<G;S>=vu=B[tu)CfaL#h=bDm92zu}3InAH./h{dT$g G5~\iP@0TDIP"$As-r7%uE+VH&I\|R4Za4kX"T,iLS)+\zX]3x^
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 49 31 83 8a 88 1f a7 da a5 44 a4 00 3b 75 14 82 90 54 01 8f 9e 95 c1 40 89 93 8f 6a 82 94 9f fc d4 a5 20 7f e6 80 20 ac 12 40 3c 1e d5 c6 23 26 a5 49 1c 90 3e a2 96 40 98 1d 28 03 8c 15 48 ff 00 cd 2d c6 d4 73 1d 28 9c 31 9c d7 24 02 64 ff 00 5a 00 42 d0 48 82 22 82 08 30 a1 f6 cd 59 75 29 23 8a 41 03 99 39 f7 a7 5c 02 06 4f 02 7e d4 b7 5b 26 78 c9 ef 44 ad fb 88 07 a4 83 50 a5 92 0c c0 81 d6 a4 0a ea 00 09 f7 eb d2 84 a9 20 6e 3f 7a 37 92 52 98 27 1d e8 21 39 00 62 78 9a 78 f0 49 c4 24 89 c7 1d ea 50 32 09 ef 5c 91 9f bd 1a 3d 23 68 f9 e2 a4 80 d0 84 1e 0f 4e 28 d2 89 27 74 62 b9 b4 7f 32 a2 4f 34 c4 24 10 41 eb ef 48 db 65 64 04 ce 07 d7 14 49 40 c0 c1 9a 92 99 89 9a 30 91 fa be 28 6e c0 80 80 32 a0 0f 58 14 69 03 84 01 34 49 48 03 9e 98 15 c1 b2 08 32 Data Ascii: I1D;uT@j @<#&I>@(H-s(1$dZBH"0Yu)#A9\O~[&xDP n?z7R'!9bxxI$P2\=#hN('tb2O4$AHedI@0(n2Xi4IH2
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 40 33 f6 a6 a4 19 dd 02 a2 85 27 68 22 7d b9 8a 5a d5 e5 2a 54 38 e9 34 6f 3e 90 4a 82 63 77 00 74 aa 8f b8 b7 56 63 39 a1 2b 27 86 02 ef de 6c 9f 29 24 f5 83 c5 50 d5 6c b4 fd 71 a5 59 5d 0f ca ae e5 10 66 42 a2 7f 52 48 eb da ae 6c 27 f9 33 de 7f 6a 15 a6 42 43 a8 0a 00 e0 2c 48 4f de a5 c7 62 e8 4d 45 d9 a3 f8 63 e2 c7 1f 73 ff 00 4d 6b 6e 14 ea 16 48 d8 a2 e1 cd c3 63 f4 bb 8e a4 73 ef 5f 44 b7 4a 5d 6f 6a 81 ce 62 be 33 a9 35 a8 59 ad bd 63 47 1f fb 8b 57 37 b5 22 7d 24 ca 9b 24 f2 9c 63 a8 3f 02 be 9b e0 1f 19 69 5e 34 d1 3f c4 f4 a5 29 05 a7 0b 57 2c 3a 21 c6 1c 19 d8 a1 de 33 23 04 66 b0 e5 52 8c a9 f1 db ef ee c9 cf 8a 32 8f b4 87 cd 79 7f 83 45 fd 3c bd 70 10 88 0b da 76 ff 00 dc 41 e3 fd fd a8 74 eb 9b 9b 2d 49 5a be 92 80 8b e2 94 8b a4 79 73 Data Ascii: @3'h"}Z*T84o>JcwtVc9+'l)$PlqY]fBRHl'3jBC,HObMEcsMknHcs_DJ]ojb35YcGW7"}$$c?i^4?)W,:!3#fR2yE<pvAt-IZys
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 6a 8a 44 a9 79 84 e9 49 4c f6 eb 35 9f 7a 1b 58 36 ae fe 85 77 1c 55 d5 09 49 04 9e 3b d5 6b d6 12 f2 54 3a f4 34 d1 d9 89 27 6b 73 e4 fa cf e6 7f 07 bc 7a df 8c ed 12 a5 69 97 60 5b ea 8c 05 60 b4 4e 17 9e 76 c9 3f 12 2a cf 8e f4 4b 67 df 71 3a 63 ad fe 5e e4 07 ed 14 82 00 52 0e 53 0a fe 6e 63 ea 2b d7 78 97 44 b4 d7 b4 d7 74 9d 49 80 a4 ad 04 49 1c 8f f5 af 9b 78 3a e6 f3 45 d4 1d fc 1f f1 18 42 9c 40 5b de 19 b8 58 f4 a9 a8 f5 30 0f b6 4a 47 c8 ed 55 f8 96 9a 7a 9c 0b 26 37 59 20 d3 5f 15 c7 d7 8f 89 db f0 2d 7c 70 67 e8 c9 f8 5a e9 97 ff 00 4b ff 00 fc 7f 4b 2b e9 6d bc cb 8e 5b 3e 7f 88 d9 85 14 90 47 de b5 ed 46 e3 02 0f 7a c3 bc 6a fb 44 d6 16 6f 02 94 87 15 ea 2a 8c 7b 62 b7 b4 90 d2 91 e6 36 26 47 7a ea 69 b3 c7 51 a7 8e 48 bb b5 bf c7 ba f9 33 Data Ascii: jDyIL5zX6wUI;kT:4'kszi`[`Nv?Kgq:c^RSnc+xDtIIx:EB@[X0JGUz&7Y _-\|pgZKK+m[>GFzjDo{b6&GziQH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49798	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:02 UTC	1038	OUT	GET /favicon.ico HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/RegisterToday/tabid/1417494/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:02 UTC	673	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:02 GMT Content-Type: image/x-icon Content-Length: 32988 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:20 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:02 UTC	15711	IN	Data Raw: 00 00 01 00 04 00 40 40 00 00 01 00 20 00 28 40 00 00 46 00 00 00 20 20 00 00 01 00 20 00 28 10 00 00 6e 40 00 00 18 18 00 00 01 00 20 00 28 09 00 00 96 50 00 00 10 10 00 00 01 00 20 00 28 04 00 00 be 59 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 04 ff ff ff 21 fa fa fa 36 ff ff ff 4b ff ff ff 5c fd fd fd 68 fd fd fd 6f fd fd fd 6e fd fd fd 68 fc fc fc 5e ff ff ff 4c fb Data Ascii: @@ (@F (n@ (P (Y(@ !6K\honh^L
2024-04-24 05:32:02 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a 8a 00 23 3e 87 00 77 3d 85 00 c8 3d 85 00 fa 40 8d 00 ff 3b 8a 00 ff 33 83 00 ff 3b 83 00 fe 53 94 20 f9 7a aa 53 ef 8f b8 70 fa a2 c4 86 f7 ac ca 95 ef ac c9 91 f0 9d c0 7f fa 8b b6 6b f7 72 a7 47 ee 4e 90 19 fa 38 82 00 fe 33 84 00 ff 3c 8b 00 ff 40 8d 00 ff 3c 85 00 fe 3e 86 00 cf 3d 87 00 82 17 6c 00 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: :#>w==@;3;S zSpkrGN83<@<>=l-
2024-04-24 05:32:02 UTC	893	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49800	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:04 UTC	730	OUT	GET /favicon.ico HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:04 UTC	673	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:04 GMT Content-Type: image/x-icon Content-Length: 32988 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:20 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:04 UTC	15711	IN	Data Raw: 00 00 01 00 04 00 40 40 00 00 01 00 20 00 28 40 00 00 46 00 00 00 20 20 00 00 01 00 20 00 28 10 00 00 6e 40 00 00 18 18 00 00 01 00 20 00 28 09 00 00 96 50 00 00 10 10 00 00 01 00 20 00 28 04 00 00 be 59 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 04 ff ff ff 21 fa fa fa 36 ff ff ff 4b ff ff ff 5c fd fd fd 68 fd fd fd 6f fd fd fd 6e fd fd fd 68 fc fc fc 5e ff ff ff 4c fb Data Ascii: @@ (@F (n@ (P (Y(@ !6K\honh^L
2024-04-24 05:32:04 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a 8a 00 23 3e 87 00 77 3d 85 00 c8 3d 85 00 fa 40 8d 00 ff 3b 8a 00 ff 33 83 00 ff 3b 83 00 fe 53 94 20 f9 7a aa 53 ef 8f b8 70 fa a2 c4 86 f7 ac ca 95 ef ac c9 91 f0 9d c0 7f fa 8b b6 6b f7 72 a7 47 ee 4e 90 19 fa 38 82 00 fe 33 84 00 ff 3c 8b 00 ff 40 8d 00 ff 3c 85 00 fe 3e 86 00 cf 3d 87 00 82 17 6c 00 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: :#>w==@;3;S zSpkrGN83<@<>=l-
2024-04-24 05:32:04 UTC	893	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49806	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:09 UTC	1069	OUT	GET /MyEvents/BandageBall2024/tabid/1417493/Default.aspx HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:10 UTC	690	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 36142 Connection: close Cache-Control: private Vary: Accept-Encoding X-UA-Compatible: IE=edge,chome=1 Set-Cookie: language=en-US; path=/; secure; HttpOnly X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:10 UTC	15694	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 48 65 61 64 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 3c 21 2d 2d 20 52 65 73 70 6f 6e 73 69 76 65 20 44 65 73 69 67 6e 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 6f 6d 65 3d 31 22 20 2f 3e 3c 6d 65 74 61 Data Ascii: <!DOCTYPE html><html lang="en-US"><head id="Head"><meta charset="utf-8" /> ... Responsive Design --> <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chome=1" /><meta
2024-04-24 05:32:10 UTC	16384	IN	Data Raw: 72 3a 23 46 46 46 46 46 46 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 67 2d 64 6e 6e 2d 62 61 6e 6e 65 72 2d 70 61 6e 65 20 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 67 2d 64 6e 6e 2d 63 6f 6e 74 65 6e 74 2d 70 61 6e 65 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 67 2d 64 6e 6e 2d 63 6f 6e 74 65 6e 74 2d 70 61 6e 65 2d 32 20 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 3b 0d 0a 7d 0d 0a 0d 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0d 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 20 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 6f 70 2d Data Ascii: r:#FFFFFF;}.gg-dnn-banner-pane {background-color:#FFFFFF;background-repeat:repeat;}.gg-dnn-content-pane{background-repeat:repeat;}.gg-dnn-content-pane-2 {background-image: ;}blockquote {border-left:5px solid ;}.top-
2024-04-24 05:32:10 UTC	4064	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 6e 6e 5f 46 6f 6f 74 65 72 32 52 69 67 68 74 50 61 6e 65 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 34 20 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 20 66 6f 6f 74 65 72 2d 32 2d 72 69 67 68 74 2d 70 61 6e 65 20 70 75 6c 6c 2d 72 69 67 68 74 22 3e 3c 64 69 76 20 69 64 3d 22 64 6e 6e 5f 64 6e 6e 54 45 58 54 53 4f 32 5f 73 70 6e 22 3e 3c 68 34 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 68 34 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 43 61 6c 69 62 72 69 3b 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 69 6e 68 65 72 69 74 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: <div id="dnn_Footer2RightPane" class="col-sm-4 col-sm-offset-1 footer-2-right-pane pull-right"><div id="dnn_dnnTEXTSO2_spn"><h4>Contact Us</h4><span style="font-family: Calibri;"><span style="box-sizing: inherit; text-align: center; background-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:10 UTC	1018	OUT	GET /DesktopModules/AESOPEventLanding/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:10 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:10 GMT Content-Type: text/css Content-Length: 85 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:10 UTC	85	IN	Data Raw: ef bb bf 2f 2a 20 62 6f 6f 74 73 74 72 61 70 20 64 65 66 69 6e 69 74 69 6f 6e 73 20 6e 65 65 64 65 64 20 69 6e 20 6e 6f 6e 2d 62 6f 6f 74 73 74 72 61 70 20 73 6b 69 6e 73 2a 2f 0d 0a 0d 0a 2f 2a 20 47 47 20 44 4e 4e 20 46 6f 72 6d 73 20 2a 2f 0d 0a 0d 0a Data Ascii: /* bootstrap definitions needed in non-bootstrap skins// GG DNN Forms */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49807	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:10 UTC	632	OUT	GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:11 UTC	176	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:11 GMT Content-Type: image/jpeg Content-Length: 524288 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:11 UTC	16208	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 05 35 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 08 ff c4 00 4b 10 00 01 03 03 03 02 05 02 04 04 05 03 03 01 02 0f 01 02 03 11 00 04 21 05 12 31 41 51 06 13 22 61 71 81 91 07 14 32 a1 23 42 b1 c1 Data Ascii: JFIFCC5"K!1AQ"aq2#B
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: bb c1 b6 97 17 5a ca b5 5b ab b6 85 bb 6d 6d 50 54 c9 52 48 21 00 08 93 1e f5 6b c4 a0 9d 0d c7 90 c2 43 d7 37 ed 97 4e d1 fa 4a f9 ff 00 cd 7c e3 5d 8f 16 2f ea 05 18 3e 67 17 f0 6d a6 d1 f5 5d 3c e5 3f 05 72 97 1d 0f e6 92 e4 a8 e3 61 6f a9 68 24 29 24 c5 7d 1b ff 00 a7 cb 8d 4d df 08 5d 5f 6b f6 6c b5 3a 8a db b0 5b 4a c3 8c a0 00 09 12 76 9d d3 23 99 cd 7c fa c1 95 5c 38 b5 ab a9 27 15 ed ff 00 05 5f 2b d3 ef ec 6e 5f 4f 97 65 a9 29 0c 20 74 0a 48 51 3e f2 49 af 79 ad c7 07 1e a5 ce c9 fc 37 3e 69 83 2c fd 8b c6 f8 5b af 4e 13 fd 8f a7 b2 f0 58 dc 0e 29 92 4a 73 d3 3c 55 2b 3b 96 95 e9 42 b1 d8 55 b4 2e 51 0a c8 26 b8 ed 34 c6 4e ce 59 93 f4 aa 7a 93 61 c6 55 29 e6 ad b8 67 83 db 8a 45 c9 fe 19 07 b7 de a6 3f 88 89 13 a7 ba a7 ac 1a 52 8e 42 60 cf b6 Data Ascii: Z[mmPTRH!kC7NJ\|]/>gm]<?raoh$)$}M]_kl:[Jv#\|\8'_+n_Oe) tHQ>Iy7>i,[NX)Js<U+;BU.Q&4NYzaU)gE?RB`
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 05 22 aa 6a 20 e6 53 06 33 8a d0 b9 32 27 b9 a3 a2 25 0f 59 a5 f2 24 c9 13 f1 57 77 40 dc 0c e7 b5 66 f8 61 44 69 c5 3f e5 74 f3 57 9c 58 da 64 f1 54 c9 be a6 0d 50 6b 52 4a 48 f6 a0 2e 22 08 9f b5 25 6e 92 ac a7 e9 41 2a 19 80 07 f7 a9 20 7a 9d 8c 0e 9d e9 66 e0 f0 4c f7 a1 f3 01 f5 1e 83 06 80 a2 64 84 f3 40 0f 6d e5 39 e9 04 4c 72 68 f1 1b a0 18 aa c8 84 80 52 39 e2 2a c3 6e 02 99 31 8e 28 00 c1 27 27 34 69 4c 24 24 72 a3 c4 d2 c2 b3 44 85 00 7d 27 9f 7e b4 ae 23 3a a0 88 8e 62 81 69 48 3c 08 f9 a3 29 dc 64 ff 00 b5 40 48 9c 99 1d bb d4 ad 85 03 ca 99 24 74 e2 ba 36 e4 09 9e f4 c0 80 15 09 48 c8 c9 a8 20 46 dc 8e bc 50 9d 8a d1 2d 2c a2 08 04 75 35 6d a7 02 91 93 33 dc d5 2e 00 1c cf 4a 36 d4 5b 27 12 3a d4 f2 29 71 51 26 07 3c 50 38 25 46 00 a0 0e 6e Data Ascii: "j S32'%Y$Ww@faDi?tWXdTPkRJH."%nA* zfLd@m9LrhR9*n1(''4iL$$rD}'~#:biH<)d@H$t6H FP-,u5m3.J6[':)qQ&<P8%Fn
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 7c 92 fb ee ea 32 e3 88 84 c2 7d 29 f7 8f e9 57 d4 41 4c 9c d2 96 a5 64 cf 4a 64 88 eb 69 6c 45 8d ba 2c ed 51 6e 09 56 d1 ea 59 fe 65 75 26 98 5f 49 51 4a 56 99 1c 8e d5 56 eb 52 66 de 41 5c 94 e0 a4 0c 9a a8 db 97 07 57 4a da 69 3b 5c 6e 56 67 29 4f 73 3d 6a 69 b0 57 c9 a8 e1 43 89 da b0 0f 5c a6 69 6b 70 98 91 31 ef 50 56 24 83 24 c6 69 57 0a 90 00 92 24 13 9a 91 06 17 63 2a 81 42 5e c1 8e 9e d4 b5 95 12 7d 22 3a 19 cd 2d 4b 5a 56 4e 02 47 06 79 a1 2b 01 e1 7e ad ca 14 cd e2 3d 33 f1 15 5c ac 6d 20 28 71 5c 97 3d 01 25 59 a9 e9 62 bd cf 9f b6 90 91 b6 49 03 da 8f 6c 8c 7f 5a 80 90 ae 49 fb d4 fe 88 03 3d eb b6 79 97 b9 c7 72 44 cf d8 d4 a5 44 e7 b8 a8 24 90 09 ff 00 37 6a ed d1 8a 00 82 77 19 f8 a2 a8 0a 11 5c 48 3c 50 00 ad 42 67 da b9 b2 a2 73 da b8 Data Ascii: \|2})WALdJdilE,QnVYeu&_IQJVVRfA\WJi;\nVg)Os=jiWC\ikp1PV$$iW$c*B^}":-KZVNGy+~=3\m (q\=%YbIlZI=yrDD$7jw\H<PBgs
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: c0 99 e9 4f d8 02 36 25 5c 7b d2 9d 93 29 8c fc 53 02 76 cc 6d 45 b2 95 13 1c d0 df cb 96 69 27 8d 98 ab 1a 8a 44 10 4e 7d a9 2b 46 ed 35 27 e7 1f 5a b2 cb 17 26 ef 83 5c f3 34 3b 64 a8 fe 94 94 fb e0 9a db 56 33 9a c2 f0 6c a7 49 48 29 88 52 88 13 ef 5b 7b 94 ac c5 65 92 a9 10 f9 2b 5d 99 06 0c 63 26 b3 ae 41 23 d2 20 11 15 a4 f4 29 24 88 eb 15 9f 72 98 99 f9 a7 80 19 ef 8f 58 20 62 84 03 11 1c d3 1c 48 51 13 13 de 85 48 da 9f a5 5a 9a a0 14 49 42 f7 4c 76 8a d1 d3 df f3 53 0a 39 02 b3 dc 19 89 ef d6 9d a5 28 a5 e2 9c fd 45 12 49 c4 0d 74 11 d6 b9 70 99 31 d3 a9 a1 41 00 49 3f 4a 93 ea 56 6a 92 b2 77 28 e4 00 2b 89 57 71 f6 a8 50 f7 8a e0 85 0e a0 d0 04 85 10 a1 d6 7a 53 1b 5e 27 3e f3 49 20 cc c4 45 1b 72 48 9c 50 05 a4 2f 6f 34 69 59 88 02 ab a0 89 13 Data Ascii: O6%\{)SvmEi'DN}+F5'Z&\4;dV3lIH)R[{e+]c&A# )$rX bHQHZIBLvS9(EItp1AI?JVjw(+WqPzS^'>I ErHP/o4iY
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 0a 32 3f 7a b7 71 6b e6 0e d1 91 8e 2b 35 f4 a9 87 36 2c 9e 69 93 b2 1a b1 ea 00 83 fb 8a 4d c8 25 1e 6a 9b 33 bc 85 2e 79 c0 e9 fd ea 12 f8 02 4a a3 a7 15 cc a5 17 6f a6 cc a6 7c d5 2a 14 06 52 76 98 3f 03 98 a9 64 c1 6f 45 2b 86 a4 e7 ed 54 1f 48 48 04 03 ff 00 71 24 44 cf 4f a4 56 8b de 62 5d 71 87 0a 77 b4 b2 85 c1 c4 f3 3f 51 54 9e 10 a2 b0 91 90 47 a9 33 13 d6 38 9a b0 65 69 d1 4d 40 aa 49 4c 18 ef 42 a5 89 e7 8e e6 98 a6 94 a0 a0 d9 c2 1b 95 6e 30 7e 94 80 95 83 00 92 3e 6a c4 ec 7a 2e e9 ef 21 b3 c8 9e 86 b5 5a 5a 16 99 44 f0 39 3d 7f d2 bc fb 68 5a 56 0c 91 5b 56 0a 0a 40 f4 f0 33 55 c9 57 02 34 58 29 1c ed a8 0d a0 9f d3 46 20 e3 6f cd 12 50 d9 1d 29 7a 98 a2 c3 69 41 c0 a9 54 47 e9 e0 f4 a3 f2 81 26 07 5e 3b d7 79 39 92 73 50 dd 80 b2 a2 44 0c Data Ascii: 2?zqk+56,iM%j3.yJo\|*Rv?doE+THHq$DOVb]qw?QTG38eiM@ILBn0~>jz.!ZZD9=hZV[V@3UW4X)F oP)ziATG&^;y9sPD
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: f4 56 3c 4d e1 e5 58 bd a3 a2 f5 c6 1e 42 db 69 77 05 b1 01 43 32 32 23 33 1c 8a f9 6e 8f 57 93 c3 3c 47 aa 3b 53 a7 b6 f5 df 93 eb 1a ad 3e 3d 76 8e 9f 96 c7 c5 75 3d 42 c7 ff 00 dd 5b 8c de b8 da ae 74 bd 75 29 43 8e b8 b2 a4 a1 66 61 1b 4c 13 fa 89 dc 23 68 3d 62 83 44 bc 6d d1 bc 39 32 91 0a 07 9a f5 7a df 84 ed 9d b6 d6 75 7d 33 49 6e cb 41 be de c3 f6 a9 48 2e b4 94 2f 68 7b 64 c2 8a 54 24 67 20 82 47 35 8b ac 7e 0f ea df 87 cf bf a8 d8 dc b8 fe 90 86 d0 a4 5c ad 69 50 40 30 09 54 44 49 50 22 24 41 af 73 e1 fe 2d a2 c1 91 ab f7 72 37 25 e8 dd 75 45 fa a7 cf c6 cf 2b ab f0 fd 56 48 26 d6 f0 49 7c 52 ba 7f 34 5a 61 c0 15 13 34 6b 58 22 00 91 54 2c ae 8c 96 dc 80 a4 ab 69 4c cc 11 de ad 95 ce 12 a1 f7 af 53 19 29 2b 5c 1e 7a 58 dc 5d 33 c9 78 b2 e5 5e Data Ascii: V<MXBiwC22#3nW<G;S>=vu=B[tu)CfaL#h=bDm92zu}3InAH./h{dT$g G5~\iP@0TDIP"$As-r7%uE+VH&I\|R4Za4kX"T,iLS)+\zX]3x^
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 49 31 83 8a 88 1f a7 da a5 44 a4 00 3b 75 14 82 90 54 01 8f 9e 95 c1 40 89 93 8f 6a 82 94 9f fc d4 a5 20 7f e6 80 20 ac 12 40 3c 1e d5 c6 23 26 a5 49 1c 90 3e a2 96 40 98 1d 28 03 8c 15 48 ff 00 cd 2d c6 d4 73 1d 28 9c 31 9c d7 24 02 64 ff 00 5a 00 42 d0 48 82 22 82 08 30 a1 f6 cd 59 75 29 23 8a 41 03 99 39 f7 a7 5c 02 06 4f 02 7e d4 b7 5b 26 78 c9 ef 44 ad fb 88 07 a4 83 50 a5 92 0c c0 81 d6 a4 0a ea 00 09 f7 eb d2 84 a9 20 6e 3f 7a 37 92 52 98 27 1d e8 21 39 00 62 78 9a 78 f0 49 c4 24 89 c7 1d ea 50 32 09 ef 5c 91 9f bd 1a 3d 23 68 f9 e2 a4 80 d0 84 1e 0f 4e 28 d2 89 27 74 62 b9 b4 7f 32 a2 4f 34 c4 24 10 41 eb ef 48 db 65 64 04 ce 07 d7 14 49 40 c0 c1 9a 92 99 89 9a 30 91 fa be 28 6e c0 80 80 32 a0 0f 58 14 69 03 84 01 34 49 48 03 9e 98 15 c1 b2 08 32 Data Ascii: I1D;uT@j @<#&I>@(H-s(1$dZBH"0Yu)#A9\O~[&xDP n?z7R'!9bxxI$P2\=#hN('tb2O4$AHedI@0(n2Xi4IH2
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 40 33 f6 a6 a4 19 dd 02 a2 85 27 68 22 7d b9 8a 5a d5 e5 2a 54 38 e9 34 6f 3e 90 4a 82 63 77 00 74 aa 8f b8 b7 56 63 39 a1 2b 27 86 02 ef de 6c 9f 29 24 f5 83 c5 50 d5 6c b4 fd 71 a5 59 5d 0f ca ae e5 10 66 42 a2 7f 52 48 eb da ae 6c 27 f9 33 de 7f 6a 15 a6 42 43 a8 0a 00 e0 2c 48 4f de a5 c7 62 e8 4d 45 d9 a3 f8 63 e2 c7 1f 73 ff 00 4d 6b 6e 14 ea 16 48 d8 a2 e1 cd c3 63 f4 bb 8e a4 73 ef 5f 44 b7 4a 5d 6f 6a 81 ce 62 be 33 a9 35 a8 59 ad bd 63 47 1f fb 8b 57 37 b5 22 7d 24 ca 9b 24 f2 9c 63 a8 3f 02 be 9b e0 1f 19 69 5e 34 d1 3f c4 f4 a5 29 05 a7 0b 57 2c 3a 21 c6 1c 19 d8 a1 de 33 23 04 66 b0 e5 52 8c a9 f1 db ef ee c9 cf 8a 32 8f b4 87 cd 79 7f 83 45 fd 3c bd 70 10 88 0b da 76 ff 00 dc 41 e3 fd fd a8 74 eb 9b 9b 2d 49 5a be 92 80 8b e2 94 8b a4 79 73 Data Ascii: @3'h"}Z*T84o>JcwtVc9+'l)$PlqY]fBRHl'3jBC,HObMEcsMknHcs_DJ]ojb35YcGW7"}$$c?i^4?)W,:!3#fR2yE<pvAt-IZys
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 6a 8a 44 a9 79 84 e9 49 4c f6 eb 35 9f 7a 1b 58 36 ae fe 85 77 1c 55 d5 09 49 04 9e 3b d5 6b d6 12 f2 54 3a f4 34 d1 d9 89 27 6b 73 e4 fa cf e6 7f 07 bc 7a df 8c ed 12 a5 69 97 60 5b ea 8c 05 60 b4 4e 17 9e 76 c9 3f 12 2a cf 8e f4 4b 67 df 71 3a 63 ad fe 5e e4 07 ed 14 82 00 52 0e 53 0a fe 6e 63 ea 2b d7 78 97 44 b4 d7 b4 d7 74 9d 49 80 a4 ad 04 49 1c 8f f5 af 9b 78 3a e6 f3 45 d4 1d fc 1f f1 18 42 9c 40 5b de 19 b8 58 f4 a9 a8 f5 30 0f b6 4a 47 c8 ed 55 f8 96 9a 7a 9c 0b 26 37 59 20 d3 5f 15 c7 d7 8f 89 db f0 2d 7c 70 67 e8 c9 f8 5a e9 97 ff 00 4b ff 00 fc 7f 4b 2b e9 6d bc cb 8e 5b 3e 7f 88 d9 85 14 90 47 de b5 ed 46 e3 02 0f 7a c3 bc 6a fb 44 d6 16 6f 02 94 87 15 ea 2a 8c 7b 62 b7 b4 90 d2 91 e6 36 26 47 7a ea 69 b3 c7 51 a7 8e 48 bb b5 bf c7 ba f9 33 Data Ascii: jDyIL5zX6wUI;kT:4'kszi`[`Nv?Kgq:c^RSnc+xDtIIx:EB@[X0JGUz&7Y _-\|pgZKK+m[>GFzjDo{b6&GziQH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49811	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:11 UTC	1146	OUT	GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936729825 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:11 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:11 GMT Content-Type: application/javascript Content-Length: 9847 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Thu, 01 Feb 2024 22:07:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:11 UTC	9847	IN	Data Raw: 2f 2a 0a 20 20 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0a 20 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 0a 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0a 20 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 Data Ascii: /* DotNetNuke - http://www.dotnetnuke.com Copyright (c) 2002-2007 by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:11 UTC	683	OUT	GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:11 UTC	175	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:11 GMT Content-Type: image/png Content-Length: 262144 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:11 UTC	16209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 d6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 01 02 03 0a ff c4 00 7d 10 00 01 03 03 02 03 05 03 03 0d 06 0e 06 14 07 11 01 00 02 03 04 05 11 06 07 12 21 31 08 09 13 41 51 14 22 61 32 71 81 0a 15 Data Ascii: JFIFCC"}!1AQ"a2q
2024-04-24 05:32:11 UTC	16384	IN	Data Raw: 99 71 e6 49 e6 df a5 75 14 af c1 2e c9 00 f2 70 76 72 54 d2 03 83 9a 0d d4 22 65 a5 af 3a 23 9a 5c d1 d7 a1 f3 e8 b8 31 39 dc f8 3a 00 33 9f 4f e4 51 34 f1 60 70 f1 67 38 27 03 a2 f7 74 40 8f a3 cf 9a b9 ce 16 3d c1 c4 a9 4c f4 ae 1c c8 23 2e c7 20 ad 5f 6b 7b 30 a9 db 8a 7b 9b 1a 78 a8 6e b1 92 ef 40 f6 b9 9f ca 42 bc d5 31 31 a3 8b 19 38 ea 15 13 be f6 33 7c da ab e5 14 6d e2 73 28 0c d1 90 33 97 46 43 f3 f9 01 58 9c 41 03 ed d4 19 98 20 6a 58 eb 78 81 71 f1 b2 cc 61 d9 9f b0 d7 e5 63 9d 83 db 7f 02 6c 7e 04 ab 81 dd 17 ad 8d cf 6a 75 36 81 9a 57 39 f6 7b eb 2a a1 6b 9d c9 b1 54 47 d0 0f e3 c4 f2 7e 2e 59 74 06 47 30 b5 bf dd 5f ae 46 9b ed 1d 3e 95 96 50 21 d4 56 29 a1 60 73 b0 0c b1 16 ca cc 7a 92 d0 ff 00 d6 b6 40 08 20 7f 9d 6b 4c 23 35 f6 9a 23 01 Data Ascii: qIu.pvrT"e:#\19:3OQ4`pg8't@=L#. _k{0{xn@B1183\|ms(3FCXA jXxqacl~ju6W9{*kTG~.YtG0_F>P!V)`sz@ kL#5#
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: 77 66 71 22 c4 66 75 9c 4e d6 1b 9d bc ae 16 d9 9a 99 94 8f 4d 6b e5 c5 a1 e8 00 37 d8 68 3b f8 71 f3 5e f0 44 de 6f 96 41 81 c8 0c 73 07 3f ab e7 51 71 53 90 d6 b1 ae c0 2e c8 6a f1 a7 0e 6b 3c 3c 0e 5c c1 f3 23 d1 46 b7 88 30 87 34 0c 9e 2c 35 4b 08 71 21 a7 fa b7 97 7d d6 10 bc 37 55 d5 ac 1c 7e 1b b0 5b 8c 90 07 45 2f bc 6a 8b 26 9f ad 8a dd 5b 53 28 a8 95 85 ec 86 08 5d 21 c0 1c dc 71 f2 7e 9c 65 4d 5c d6 e0 35 b9 f2 e2 20 75 54 65 3c 2d 35 97 5b b4 cf 71 e3 af 78 e3 73 b2 78 47 26 81 f0 f8 2b c9 69 26 c4 36 71 cb a6 bc fe 9f 3d 15 bb a3 5e e4 0b f2 e5 f5 e1 ef 55 25 06 a3 b5 5c 1d e1 53 dc 63 33 63 21 ae 18 24 0f 81 f3 f9 94 43 a7 04 e5 83 39 1c c9 3e 6a d8 ea 5b dd 63 24 22 82 d9 4c f7 44 43 84 d3 48 ec 35 dd 70 38 79 e5 50 f3 f6 80 d5 fb 6f 79 92 Data Ascii: wfq"fuNMk7h;q^DoAs?QqS.jk<<\#F04,5Kq!}7U~[E/j&[S(]!q~eM\5 uTe<-5[qxsxG&+i&6q=^U%\Sc3c!$C9>j[c$"LDCH5p8yPoy
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: f5 d0 9f 15 e7 87 a3 cf 97 c4 ad a1 4e 61 bb da 5f ec 55 4c 7c 75 54 c7 c1 95 8e e2 6b 83 9b c9 c0 8e a3 04 1c ac 35 7f 60 9d ee 13 3f 11 5a 5c 0b ce 08 b9 75 e7 d7 9b 54 c3 16 c8 cd cf 18 26 03 0b ad 9a f6 17 de cb 5f f4 7f 53 90 a6 b6 64 4d 45 0c 27 2d ae 6d 7b 66 bf ba ea c4 32 0f 87 cf c9 7a c7 4c 70 09 6f 5f 82 be b1 76 0c de b1 82 e8 2d 5f a4 47 f3 54 16 ac ec 95 b8 1a 0e d4 db ae a4 fa dc 1b 24 cd 82 9e 08 2b 83 e5 a8 95 c4 06 c7 1b 31 97 38 e7 a0 f2 c9 50 c7 d1 aa 50 9a 5e f8 4e 00 71 b1 5b 26 1e 23 a2 46 88 19 0e 61 a4 9d 80 21 43 f6 6d b4 d4 4d a7 6e 14 fc 20 47 7c d5 d6 1b 63 78 99 9e 71 d4 3a ad ee f9 83 62 19 3f 15 55 5c 67 8e e1 a1 6a ee ef 8c 39 f3 e9 4d 55 77 8c 02 47 fb 2a bd 94 ec 60 f5 27 a8 f5 ca 9d 58 b4 8b 74 55 8a 9b 4c d8 0b 25 ae Data Ascii: Na_UL\|uTk5`?Z\uT&_SdME'-m{f2zLpo_v-_GT$+18PP^Nq[&#Fa!CmMn G\|cxq:b?U\gj9MUwG*`'XtUL%
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: b2 d3 7a d1 d7 6d 41 41 71 6d 4d 2b c6 90 bd d5 4d 2b 62 8d 8d 93 8d cd 89 bc d9 1f 1e 5c 01 ce 09 ca 82 d4 7b 09 7c db 98 f1 a8 2f f6 8a c7 41 28 8a 67 5b 2b 38 e4 83 2f 24 02 df 94 e3 8f ba f2 e9 c9 5d 8d 33 a2 b4 7e aa 7d 1e 96 da cb 7d 65 fe de ca 98 ea e4 a8 92 57 47 ee bb 9b a3 aa 32 34 0e 00 78 8b 4b 07 99 0a ea a7 56 87 92 1c c4 38 a7 aa 3a dc 0b 00 5a 41 b9 79 b5 af a0 ca 6d 98 5f 7e 16 92 12 2d 11 5f 05 cc 19 c6 9a 9d 6c 74 b0 02 f7 e2 6f c0 db 65 2f 97 4e 6a 2b c6 d7 be af 56 e8 4a 46 ea 06 d1 d2 91 35 2d 03 a0 a9 8a 9a 26 90 c7 c8 c6 0e 02 1e dc fb dd 4e 01 56 f6 3c 3d b9 6f 31 f0 3d 42 c9 9b 56 97 be 58 22 a8 b8 59 dd 14 fc 72 be dd 1b 68 a7 a8 95 a6 27 38 70 b3 de fb 98 c6 47 0f 3c b7 3c d5 80 d7 fa 46 af 44 6b 1b 86 98 a9 39 f6 69 cf 86 ff Data Ascii: zmAAqmM+M+b\{\|/A(g[+8/$]3~}}eWG24xKV8:ZAym_~-_ltoe/Nj+VJF5-&NV<=o1=BVX"Yrh'8pG<<FDk9i
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: 7e fd dd fe 1b 0f bc b2 82 24 39 09 61 36 d0 33 1d 20 83 c0 03 67 45 23 9d c6 56 7f 8a e7 76 29 05 b3 49 d9 2c 36 e8 2d 11 db 59 4f 4d 4c de 18 69 a2 e8 c1 9c 90 3d 32 79 9c 79 a9 dd 2d fe d7 66 85 91 43 48 c6 1c e1 be 1b 7d f7 e4 8c 03 e6 ee 7d 02 98 56 d2 50 36 8d d5 57 26 12 31 c8 01 e6 7a 7c ea a7 d8 ee ca f7 fb ce a9 93 59 6e 73 df 15 0c 32 36 5b 25 1d 35 41 64 ae 70 20 b6 67 16 fc 90 3c 9b e7 d5 61 71 1e 25 a4 61 7a 61 99 9b 70 00 0e c3 06 ee 3c 9a 3e 67 60 37 4c 3b 87 6a 78 a2 a0 61 42 b9 be af 79 bd 80 3c 49 e6 6d a0 dc 95 4c ea 1d 9a dd dd e1 b3 d2 5a 61 d2 33 d1 d9 6a ab 8b 2e 75 75 a0 33 c2 89 80 39 c5 d1 9f 7b 84 83 80 ec 63 3f 32 b9 bb 39 61 d3 5b 45 6d f6 6d 2f 69 a7 34 50 b5 d1 b0 3f 2e e3 6e 31 c4 09 e7 d3 a7 c3 e7 55 66 eb ea 4d 43 53 39 Data Ascii: ~$9a63 gE#Vv)I,6-YOMLi=2yy-fCH}}VP6W&1z\|Yns26[%5Adp g<aq%azap<>g`7L;jxaBy<ImLZa3j.uu39{c?29a[Emm/i4P?.n1UfMCS9
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: 08 e5 98 78 af 2e ce 31 c0 ce 16 f3 e8 18 b1 2f 62 ed 35 dd bf fb c0 ae 5b d1 7b a5 74 ba 4b 4c 54 b2 a6 08 e5 8f dc 30 42 e2 da 2a 72 0f 2c bd c0 ca e1 e6 03 fd 57 d8 53 90 6a d8 c2 6a b7 31 ac bc a0 b8 e4 4b 74 60 1d ee 75 dc 3b d7 a8 f4 a9 ac 31 d1 6d 37 08 48 e9 3b 52 21 ae e6 d0 fb 3e 33 9d dc c6 59 87 bb c1 65 f7 62 2d 8b 3d 9f 7b 38 58 34 45 6d 38 65 d2 a2 0f ae 17 b3 e7 ed 73 80 e7 34 ff 00 10 70 c7 fd e7 c5 5d b7 72 66 57 2c 1c 23 24 a9 2e e3 eb 9b 46 db e8 2b ce bf be 3f 14 96 5b 64 f5 b3 8c e0 b9 b1 b0 bb 84 7c 49 00 0f 89 0b 58 4c cc 4c d5 27 df 19 fa c4 88 e2 7c dc 76 1f c9 74 45 3e 4a 43 0e d1 61 ca c2 ec c1 80 c0 d1 7e 0d 63 6d 73 e4 2e 4f 9a d6 cf 7b 7e f5 3b 70 3b 42 43 b6 96 da de 3b 7e 8d a2 10 4a d6 bb 2d 75 64 c0 49 29 f9 da df 0d 9f Data Ascii: x.1/b5[{tKLT0B*r,WSjj1Kt`u;1m7H;R!>3Yeb-={8X4Em8es4p]rfW,#$.F+?[d\|IXLL'\|vtE>JCa~cms.O{~;p;BC;~J-udI)
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: d8 ce a9 ce 9b 47 6d f5 8a a3 53 6b e1 13 bd d7 d6 4f 11 86 8a 07 60 f5 6f 1b 64 c7 98 71 1e 4b e0 00 94 e0 b3 2f 4f df ad 1a a6 c5 47 a9 6c 15 cc aa a1 b8 52 c7 53 47 53 11 cb 65 89 ed 0e 63 c7 c0 b4 82 ad 37 66 3e d7 54 bd a3 f7 43 75 36 da 9f 40 cd 68 76 d8 ea f7 d8 e5 ac 96 e2 d9 c5 c4 b5 d2 37 c6 6b 43 1a 62 1f 6b cf 09 2e eb d7 92 b5 dd d2 bb a1 a8 a1 da ad 43 d9 13 73 2a 1c 75 5e cc df a5 b1 54 78 a4 71 4f 6f e3 71 a5 94 7a 8c 07 33 23 90 0d 67 32 a4 dd d7 c7 3d a9 3b 57 ff 00 76 09 bf c6 d4 a6 5b 5d 2e b3 45 dd 15 2f bb bb bb b7 9b 15 b7 97 3d d4 dd 3d 47 0d aa c7 68 83 c5 ad ac 9b 27 03 20 35 ad 6b 72 5e f7 38 86 b5 a0 12 49 00 2a 9d cf 58 3d df 50 ea 5b 9d b3 64 f4 66 ad ab 7c 5a 42 f3 bb 14 b1 6a 9c c8 5b 13 a1 0d 03 0f 39 00 00 c7 4a ef ef 73 Data Ascii: GmSkO`odqK/OGlRSGSec7f>TCu6@hv7kCbk.Csu^TxqOoqz3#g2=;Wv[].E/==Gh' 5kr^8IX=P[df\|ZBj[9Js
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: 5e 5a 1d de f6 b4 0d c0 e0 ba f6 57 a2 ed 45 36 99 ae d5 3d a8 6f d6 df ae 37 69 e3 9a dd a7 ad b4 4c 8d b6 78 83 48 31 39 ed cf 1b 9d c8 90 4b b8 48 f9 47 38 17 5d a3 03 08 c6 f0 8c 7c 17 2b 5f cd cc 99 b9 97 46 c8 d6 df 83 45 9a 38 58 01 fe e7 72 49 5b c2 99 20 29 92 10 e5 44 47 c4 ca 3d 68 8e 2e 7b 8d ee 4b 9c 78 92 76 16 00 68 d0 00 00 11 11 5b 2b f4 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 58 e3 de ed fd 8c fd ed fe e7 77 0f f0 02 c8 e5 62 3b cd b4 06 b7 dd 5e c0 9b b7 b7 3b 6f a5 ab 6f 77 db ce 87 ad a5 b5 5a 6d f1 87 cd 57 3b 9a 03 63 60 24 65 c7 e7 57 32 64 36 6e 19 3b 66 1f 35 46 60 13 2e f0 39 1f 92 bc da 43 fa d4 b6 7f b9 f0 7f 8b 6a 98 a8 0d 2d 0c d4 da 6e df 4b 53 13 99 24 54 30 b6 46 38 73 6b 83 00 20 a8 f5 6e 77 55 46 c8 88 8b Data Ascii: ^ZWE6=o7iLxH19KHG8]\|+_FE8XrI[ )DG=h.{Kxvh[+DDDDDDDDDDDDDDDDDDXwb;^;oowZmW;c`$eW2d6n;f5F`.9Cj-nKS$T0F8sk nwUF
2024-04-24 05:32:12 UTC	16384	IN	Data Raw: 7c 4c 7c a0 39 ab 79 ae 36 e0 69 5b d1 14 b1 b8 41 58 c7 4b 06 1b f2 64 1f 2d bf e7 fa 56 79 93 cd 8c 03 6f ad 82 c7 b6 53 ab 79 77 8a a5 62 b2 c6 5c c7 96 1c 79 85 ed 25 ba 99 ad 24 00 00 ea a7 70 d3 c4 fa 41 c2 1b 90 30 47 a2 96 d6 c5 e2 c8 63 c6 07 f2 af b9 89 2a bb 48 d9 4a aa 69 a1 e1 3c 2d e5 eb 95 06 fa 66 b8 91 8e 4a 75 3d 18 64 5c 2d 6e 54 1b e9 71 26 00 e6 4a f6 1c be 90 a9 9b ad aa 46 3c 4f 17 2c 1f 21 d5 75 b3 c5 51 40 d9 1c c9 0b 5e 5f c4 07 91 55 54 96 c8 ab 07 01 68 38 1c f0 14 9e b6 d6 fa 62 f0 d6 13 cb 90 ea aa 88 99 85 8a a5 d4 80 ec c1 54 9a 63 52 37 c1 c7 18 0f 04 71 05 3f a9 d4 8d 10 0c cc 41 03 a6 55 98 83 58 8b 45 cc c5 54 1e 1a d3 c2 f2 47 4f 8a ae 74 fd ce 96 eb 47 f5 c6 5a 81 e1 b4 13 92 ee 58 f9 d5 28 d0 32 0c c7 65 ee 1c 56 c5 Data Ascii: \|L\|9y6i[AXKd-VyoSywb\y%$pA0Gc*HJi<-fJu=d\-nTq&JF<O,!uQ@^_UTh8bTcR7q?AUXETGOtGZX(2eV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49815	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:12 UTC	783	OUT	GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936729825 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:12 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:12 GMT Content-Type: application/javascript Content-Length: 9847 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Thu, 01 Feb 2024 22:07:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:12 UTC	9847	IN	Data Raw: 2f 2a 0a 20 20 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0a 20 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 0a 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0a 20 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 Data Ascii: /* DotNetNuke - http://www.dotnetnuke.com Copyright (c) 2002-2007 by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49814	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:12 UTC	1133	OUT	GET /Resources/Shared/scripts/widgets.js?_=1713936729826 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/tabid/1417493/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:12 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:12 GMT Content-Type: application/javascript Content-Length: 11494 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:12 UTC	11494	IN	Data Raw: 2f 2a 0d 0a 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0d 0a 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 20 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0d 0a 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c Data Ascii: /*DotNetNuke - http://www.dotnetnuke.comCopyright (c) 2002-2007by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49816	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:12 UTC	390	OUT	GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:13 UTC	176	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:12 GMT Content-Type: image/jpeg Content-Length: 524288 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:13 UTC	16208	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 05 35 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 08 ff c4 00 4b 10 00 01 03 03 03 02 05 02 04 04 05 03 03 01 02 0f 01 02 03 11 00 04 21 05 12 31 41 51 06 13 22 61 71 81 91 07 14 32 a1 23 42 b1 c1 Data Ascii: JFIFCC5"K!1AQ"aq2#B
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: bb c1 b6 97 17 5a ca b5 5b ab b6 85 bb 6d 6d 50 54 c9 52 48 21 00 08 93 1e f5 6b c4 a0 9d 0d c7 90 c2 43 d7 37 ed 97 4e d1 fa 4a f9 ff 00 cd 7c e3 5d 8f 16 2f ea 05 18 3e 67 17 f0 6d a6 d1 f5 5d 3c e5 3f 05 72 97 1d 0f e6 92 e4 a8 e3 61 6f a9 68 24 29 24 c5 7d 1b ff 00 a7 cb 8d 4d df 08 5d 5f 6b f6 6c b5 3a 8a db b0 5b 4a c3 8c a0 00 09 12 76 9d d3 23 99 cd 7c fa c1 95 5c 38 b5 ab a9 27 15 ed ff 00 05 5f 2b d3 ef ec 6e 5f 4f 97 65 a9 29 0c 20 74 0a 48 51 3e f2 49 af 79 ad c7 07 1e a5 ce c9 fc 37 3e 69 83 2c fd 8b c6 f8 5b af 4e 13 fd 8f a7 b2 f0 58 dc 0e 29 92 4a 73 d3 3c 55 2b 3b 96 95 e9 42 b1 d8 55 b4 2e 51 0a c8 26 b8 ed 34 c6 4e ce 59 93 f4 aa 7a 93 61 c6 55 29 e6 ad b8 67 83 db 8a 45 c9 fe 19 07 b7 de a6 3f 88 89 13 a7 ba a7 ac 1a 52 8e 42 60 cf b6 Data Ascii: Z[mmPTRH!kC7NJ\|]/>gm]<?raoh$)$}M]_kl:[Jv#\|\8'_+n_Oe) tHQ>Iy7>i,[NX)Js<U+;BU.Q&4NYzaU)gE?RB`
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 05 22 aa 6a 20 e6 53 06 33 8a d0 b9 32 27 b9 a3 a2 25 0f 59 a5 f2 24 c9 13 f1 57 77 40 dc 0c e7 b5 66 f8 61 44 69 c5 3f e5 74 f3 57 9c 58 da 64 f1 54 c9 be a6 0d 50 6b 52 4a 48 f6 a0 2e 22 08 9f b5 25 6e 92 ac a7 e9 41 2a 19 80 07 f7 a9 20 7a 9d 8c 0e 9d e9 66 e0 f0 4c f7 a1 f3 01 f5 1e 83 06 80 a2 64 84 f3 40 0f 6d e5 39 e9 04 4c 72 68 f1 1b a0 18 aa c8 84 80 52 39 e2 2a c3 6e 02 99 31 8e 28 00 c1 27 27 34 69 4c 24 24 72 a3 c4 d2 c2 b3 44 85 00 7d 27 9f 7e b4 ae 23 3a a0 88 8e 62 81 69 48 3c 08 f9 a3 29 dc 64 ff 00 b5 40 48 9c 99 1d bb d4 ad 85 03 ca 99 24 74 e2 ba 36 e4 09 9e f4 c0 80 15 09 48 c8 c9 a8 20 46 dc 8e bc 50 9d 8a d1 2d 2c a2 08 04 75 35 6d a7 02 91 93 33 dc d5 2e 00 1c cf 4a 36 d4 5b 27 12 3a d4 f2 29 71 51 26 07 3c 50 38 25 46 00 a0 0e 6e Data Ascii: "j S32'%Y$Ww@faDi?tWXdTPkRJH."%nA* zfLd@m9LrhR9*n1(''4iL$$rD}'~#:biH<)d@H$t6H FP-,u5m3.J6[':)qQ&<P8%Fn
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 7c 92 fb ee ea 32 e3 88 84 c2 7d 29 f7 8f e9 57 d4 41 4c 9c d2 96 a5 64 cf 4a 64 88 eb 69 6c 45 8d ba 2c ed 51 6e 09 56 d1 ea 59 fe 65 75 26 98 5f 49 51 4a 56 99 1c 8e d5 56 eb 52 66 de 41 5c 94 e0 a4 0c 9a a8 db 97 07 57 4a da 69 3b 5c 6e 56 67 29 4f 73 3d 6a 69 b0 57 c9 a8 e1 43 89 da b0 0f 5c a6 69 6b 70 98 91 31 ef 50 56 24 83 24 c6 69 57 0a 90 00 92 24 13 9a 91 06 17 63 2a 81 42 5e c1 8e 9e d4 b5 95 12 7d 22 3a 19 cd 2d 4b 5a 56 4e 02 47 06 79 a1 2b 01 e1 7e ad ca 14 cd e2 3d 33 f1 15 5c ac 6d 20 28 71 5c 97 3d 01 25 59 a9 e9 62 bd cf 9f b6 90 91 b6 49 03 da 8f 6c 8c 7f 5a 80 90 ae 49 fb d4 fe 88 03 3d eb b6 79 97 b9 c7 72 44 cf d8 d4 a5 44 e7 b8 a8 24 90 09 ff 00 37 6a ed d1 8a 00 82 77 19 f8 a2 a8 0a 11 5c 48 3c 50 00 ad 42 67 da b9 b2 a2 73 da b8 Data Ascii: \|2})WALdJdilE,QnVYeu&_IQJVVRfA\WJi;\nVg)Os=jiWC\ikp1PV$$iW$c*B^}":-KZVNGy+~=3\m (q\=%YbIlZI=yrDD$7jw\H<PBgs
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: c0 99 e9 4f d8 02 36 25 5c 7b d2 9d 93 29 8c fc 53 02 76 cc 6d 45 b2 95 13 1c d0 df cb 96 69 27 8d 98 ab 1a 8a 44 10 4e 7d a9 2b 46 ed 35 27 e7 1f 5a b2 cb 17 26 ef 83 5c f3 34 3b 64 a8 fe 94 94 fb e0 9a db 56 33 9a c2 f0 6c a7 49 48 29 88 52 88 13 ef 5b 7b 94 ac c5 65 92 a9 10 f9 2b 5d 99 06 0c 63 26 b3 ae 41 23 d2 20 11 15 a4 f4 29 24 88 eb 15 9f 72 98 99 f9 a7 80 19 ef 8f 58 20 62 84 03 11 1c d3 1c 48 51 13 13 de 85 48 da 9f a5 5a 9a a0 14 49 42 f7 4c 76 8a d1 d3 df f3 53 0a 39 02 b3 dc 19 89 ef d6 9d a5 28 a5 e2 9c fd 45 12 49 c4 0d 74 11 d6 b9 70 99 31 d3 a9 a1 41 00 49 3f 4a 93 ea 56 6a 92 b2 77 28 e4 00 2b 89 57 71 f6 a8 50 f7 8a e0 85 0e a0 d0 04 85 10 a1 d6 7a 53 1b 5e 27 3e f3 49 20 cc c4 45 1b 72 48 9c 50 05 a4 2f 6f 34 69 59 88 02 ab a0 89 13 Data Ascii: O6%\{)SvmEi'DN}+F5'Z&\4;dV3lIH)R[{e+]c&A# )$rX bHQHZIBLvS9(EItp1AI?JVjw(+WqPzS^'>I ErHP/o4iY
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 0a 32 3f 7a b7 71 6b e6 0e d1 91 8e 2b 35 f4 a9 87 36 2c 9e 69 93 b2 1a b1 ea 00 83 fb 8a 4d c8 25 1e 6a 9b 33 bc 85 2e 79 c0 e9 fd ea 12 f8 02 4a a3 a7 15 cc a5 17 6f a6 cc a6 7c d5 2a 14 06 52 76 98 3f 03 98 a9 64 c1 6f 45 2b 86 a4 e7 ed 54 1f 48 48 04 03 ff 00 71 24 44 cf 4f a4 56 8b de 62 5d 71 87 0a 77 b4 b2 85 c1 c4 f3 3f 51 54 9e 10 a2 b0 91 90 47 a9 33 13 d6 38 9a b0 65 69 d1 4d 40 aa 49 4c 18 ef 42 a5 89 e7 8e e6 98 a6 94 a0 a0 d9 c2 1b 95 6e 30 7e 94 80 95 83 00 92 3e 6a c4 ec 7a 2e e9 ef 21 b3 c8 9e 86 b5 5a 5a 16 99 44 f0 39 3d 7f d2 bc fb 68 5a 56 0c 91 5b 56 0a 0a 40 f4 f0 33 55 c9 57 02 34 58 29 1c ed a8 0d a0 9f d3 46 20 e3 6f cd 12 50 d9 1d 29 7a 98 a2 c3 69 41 c0 a9 54 47 e9 e0 f4 a3 f2 81 26 07 5e 3b d7 79 39 92 73 50 dd 80 b2 a2 44 0c Data Ascii: 2?zqk+56,iM%j3.yJo\|*Rv?doE+THHq$DOVb]qw?QTG38eiM@ILBn0~>jz.!ZZD9=hZV[V@3UW4X)F oP)ziATG&^;y9sPD
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: f4 56 3c 4d e1 e5 58 bd a3 a2 f5 c6 1e 42 db 69 77 05 b1 01 43 32 32 23 33 1c 8a f9 6e 8f 57 93 c3 3c 47 aa 3b 53 a7 b6 f5 df 93 eb 1a ad 3e 3d 76 8e 9f 96 c7 c5 75 3d 42 c7 ff 00 dd 5b 8c de b8 da ae 74 bd 75 29 43 8e b8 b2 a4 a1 66 61 1b 4c 13 fa 89 dc 23 68 3d 62 83 44 bc 6d d1 bc 39 32 91 0a 07 9a f5 7a df 84 ed 9d b6 d6 75 7d 33 49 6e cb 41 be de c3 f6 a9 48 2e b4 94 2f 68 7b 64 c2 8a 54 24 67 20 82 47 35 8b ac 7e 0f ea df 87 cf bf a8 d8 dc b8 fe 90 86 d0 a4 5c ad 69 50 40 30 09 54 44 49 50 22 24 41 af 73 e1 fe 2d a2 c1 91 ab f7 72 37 25 e8 dd 75 45 fa a7 cf c6 cf 2b ab f0 fd 56 48 26 d6 f0 49 7c 52 ba 7f 34 5a 61 c0 15 13 34 6b 58 22 00 91 54 2c ae 8c 96 dc 80 a4 ab 69 4c cc 11 de ad 95 ce 12 a1 f7 af 53 19 29 2b 5c 1e 7a 58 dc 5d 33 c9 78 b2 e5 5e Data Ascii: V<MXBiwC22#3nW<G;S>=vu=B[tu)CfaL#h=bDm92zu}3InAH./h{dT$g G5~\iP@0TDIP"$As-r7%uE+VH&I\|R4Za4kX"T,iLS)+\zX]3x^
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 49 31 83 8a 88 1f a7 da a5 44 a4 00 3b 75 14 82 90 54 01 8f 9e 95 c1 40 89 93 8f 6a 82 94 9f fc d4 a5 20 7f e6 80 20 ac 12 40 3c 1e d5 c6 23 26 a5 49 1c 90 3e a2 96 40 98 1d 28 03 8c 15 48 ff 00 cd 2d c6 d4 73 1d 28 9c 31 9c d7 24 02 64 ff 00 5a 00 42 d0 48 82 22 82 08 30 a1 f6 cd 59 75 29 23 8a 41 03 99 39 f7 a7 5c 02 06 4f 02 7e d4 b7 5b 26 78 c9 ef 44 ad fb 88 07 a4 83 50 a5 92 0c c0 81 d6 a4 0a ea 00 09 f7 eb d2 84 a9 20 6e 3f 7a 37 92 52 98 27 1d e8 21 39 00 62 78 9a 78 f0 49 c4 24 89 c7 1d ea 50 32 09 ef 5c 91 9f bd 1a 3d 23 68 f9 e2 a4 80 d0 84 1e 0f 4e 28 d2 89 27 74 62 b9 b4 7f 32 a2 4f 34 c4 24 10 41 eb ef 48 db 65 64 04 ce 07 d7 14 49 40 c0 c1 9a 92 99 89 9a 30 91 fa be 28 6e c0 80 80 32 a0 0f 58 14 69 03 84 01 34 49 48 03 9e 98 15 c1 b2 08 32 Data Ascii: I1D;uT@j @<#&I>@(H-s(1$dZBH"0Yu)#A9\O~[&xDP n?z7R'!9bxxI$P2\=#hN('tb2O4$AHedI@0(n2Xi4IH2
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 40 33 f6 a6 a4 19 dd 02 a2 85 27 68 22 7d b9 8a 5a d5 e5 2a 54 38 e9 34 6f 3e 90 4a 82 63 77 00 74 aa 8f b8 b7 56 63 39 a1 2b 27 86 02 ef de 6c 9f 29 24 f5 83 c5 50 d5 6c b4 fd 71 a5 59 5d 0f ca ae e5 10 66 42 a2 7f 52 48 eb da ae 6c 27 f9 33 de 7f 6a 15 a6 42 43 a8 0a 00 e0 2c 48 4f de a5 c7 62 e8 4d 45 d9 a3 f8 63 e2 c7 1f 73 ff 00 4d 6b 6e 14 ea 16 48 d8 a2 e1 cd c3 63 f4 bb 8e a4 73 ef 5f 44 b7 4a 5d 6f 6a 81 ce 62 be 33 a9 35 a8 59 ad bd 63 47 1f fb 8b 57 37 b5 22 7d 24 ca 9b 24 f2 9c 63 a8 3f 02 be 9b e0 1f 19 69 5e 34 d1 3f c4 f4 a5 29 05 a7 0b 57 2c 3a 21 c6 1c 19 d8 a1 de 33 23 04 66 b0 e5 52 8c a9 f1 db ef ee c9 cf 8a 32 8f b4 87 cd 79 7f 83 45 fd 3c bd 70 10 88 0b da 76 ff 00 dc 41 e3 fd fd a8 74 eb 9b 9b 2d 49 5a be 92 80 8b e2 94 8b a4 79 73 Data Ascii: @3'h"}Z*T84o>JcwtVc9+'l)$PlqY]fBRHl'3jBC,HObMEcsMknHcs_DJ]ojb35YcGW7"}$$c?i^4?)W,:!3#fR2yE<pvAt-IZys
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 6a 8a 44 a9 79 84 e9 49 4c f6 eb 35 9f 7a 1b 58 36 ae fe 85 77 1c 55 d5 09 49 04 9e 3b d5 6b d6 12 f2 54 3a f4 34 d1 d9 89 27 6b 73 e4 fa cf e6 7f 07 bc 7a df 8c ed 12 a5 69 97 60 5b ea 8c 05 60 b4 4e 17 9e 76 c9 3f 12 2a cf 8e f4 4b 67 df 71 3a 63 ad fe 5e e4 07 ed 14 82 00 52 0e 53 0a fe 6e 63 ea 2b d7 78 97 44 b4 d7 b4 d7 74 9d 49 80 a4 ad 04 49 1c 8f f5 af 9b 78 3a e6 f3 45 d4 1d fc 1f f1 18 42 9c 40 5b de 19 b8 58 f4 a9 a8 f5 30 0f b6 4a 47 c8 ed 55 f8 96 9a 7a 9c 0b 26 37 59 20 d3 5f 15 c7 d7 8f 89 db f0 2d 7c 70 67 e8 c9 f8 5a e9 97 ff 00 4b ff 00 fc 7f 4b 2b e9 6d bc cb 8e 5b 3e 7f 88 d9 85 14 90 47 de b5 ed 46 e3 02 0f 7a c3 bc 6a fb 44 d6 16 6f 02 94 87 15 ea 2a 8c 7b 62 b7 b4 90 d2 91 e6 36 26 47 7a ea 69 b3 c7 51 a7 8e 48 bb b5 bf c7 ba f9 33 Data Ascii: jDyIL5zX6wUI;kT:4'kszi`[`Nv?Kgq:c^RSnc+xDtIIx:EB@[X0JGUz&7Y _-\|pgZKK+m[>GFzjDo{b6&GziQH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49817	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:13 UTC	390	OUT	GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:13 UTC	175	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:13 GMT Content-Type: image/png Content-Length: 262144 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:13 UTC	16209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 d6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 01 02 03 0a ff c4 00 7d 10 00 01 03 03 02 03 05 03 03 0d 06 0e 06 14 07 11 01 00 02 03 04 05 11 06 07 12 21 31 08 09 13 41 51 14 22 61 32 71 81 0a 15 Data Ascii: JFIFCC"}!1AQ"a2q
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 99 71 e6 49 e6 df a5 75 14 af c1 2e c9 00 f2 70 76 72 54 d2 03 83 9a 0d d4 22 65 a5 af 3a 23 9a 5c d1 d7 a1 f3 e8 b8 31 39 dc f8 3a 00 33 9f 4f e4 51 34 f1 60 70 f1 67 38 27 03 a2 f7 74 40 8f a3 cf 9a b9 ce 16 3d c1 c4 a9 4c f4 ae 1c c8 23 2e c7 20 ad 5f 6b 7b 30 a9 db 8a 7b 9b 1a 78 a8 6e b1 92 ef 40 f6 b9 9f ca 42 bc d5 31 31 a3 8b 19 38 ea 15 13 be f6 33 7c da ab e5 14 6d e2 73 28 0c d1 90 33 97 46 43 f3 f9 01 58 9c 41 03 ed d4 19 98 20 6a 58 eb 78 81 71 f1 b2 cc 61 d9 9f b0 d7 e5 63 9d 83 db 7f 02 6c 7e 04 ab 81 dd 17 ad 8d cf 6a 75 36 81 9a 57 39 f6 7b eb 2a a1 6b 9d c9 b1 54 47 d0 0f e3 c4 f2 7e 2e 59 74 06 47 30 b5 bf dd 5f ae 46 9b ed 1d 3e 95 96 50 21 d4 56 29 a1 60 73 b0 0c b1 16 ca cc 7a 92 d0 ff 00 d6 b6 40 08 20 7f 9d 6b 4c 23 35 f6 9a 23 01 Data Ascii: qIu.pvrT"e:#\19:3OQ4`pg8't@=L#. _k{0{xn@B1183\|ms(3FCXA jXxqacl~ju6W9{*kTG~.YtG0_F>P!V)`sz@ kL#5#
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 77 66 71 22 c4 66 75 9c 4e d6 1b 9d bc ae 16 d9 9a 99 94 8f 4d 6b e5 c5 a1 e8 00 37 d8 68 3b f8 71 f3 5e f0 44 de 6f 96 41 81 c8 0c 73 07 3f ab e7 51 71 53 90 d6 b1 ae c0 2e c8 6a f1 a7 0e 6b 3c 3c 0e 5c c1 f3 23 d1 46 b7 88 30 87 34 0c 9e 2c 35 4b 08 71 21 a7 fa b7 97 7d d6 10 bc 37 55 d5 ac 1c 7e 1b b0 5b 8c 90 07 45 2f bc 6a 8b 26 9f ad 8a dd 5b 53 28 a8 95 85 ec 86 08 5d 21 c0 1c dc 71 f2 7e 9c 65 4d 5c d6 e0 35 b9 f2 e2 20 75 54 65 3c 2d 35 97 5b b4 cf 71 e3 af 78 e3 73 b2 78 47 26 81 f0 f8 2b c9 69 26 c4 36 71 cb a6 bc fe 9f 3d 15 bb a3 5e e4 0b f2 e5 f5 e1 ef 55 25 06 a3 b5 5c 1d e1 53 dc 63 33 63 21 ae 18 24 0f 81 f3 f9 94 43 a7 04 e5 83 39 1c c9 3e 6a d8 ea 5b dd 63 24 22 82 d9 4c f7 44 43 84 d3 48 ec 35 dd 70 38 79 e5 50 f3 f6 80 d5 fb 6f 79 92 Data Ascii: wfq"fuNMk7h;q^DoAs?QqS.jk<<\#F04,5Kq!}7U~[E/j&[S(]!q~eM\5 uTe<-5[qxsxG&+i&6q=^U%\Sc3c!$C9>j[c$"LDCH5p8yPoy
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: f5 d0 9f 15 e7 87 a3 cf 97 c4 ad a1 4e 61 bb da 5f ec 55 4c 7c 75 54 c7 c1 95 8e e2 6b 83 9b c9 c0 8e a3 04 1c ac 35 7f 60 9d ee 13 3f 11 5a 5c 0b ce 08 b9 75 e7 d7 9b 54 c3 16 c8 cd cf 18 26 03 0b ad 9a f6 17 de cb 5f f4 7f 53 90 a6 b6 64 4d 45 0c 27 2d ae 6d 7b 66 bf ba ea c4 32 0f 87 cf c9 7a c7 4c 70 09 6f 5f 82 be b1 76 0c de b1 82 e8 2d 5f a4 47 f3 54 16 ac ec 95 b8 1a 0e d4 db ae a4 fa dc 1b 24 cd 82 9e 08 2b 83 e5 a8 95 c4 06 c7 1b 31 97 38 e7 a0 f2 c9 50 c7 d1 aa 50 9a 5e f8 4e 00 71 b1 5b 26 1e 23 a2 46 88 19 0e 61 a4 9d 80 21 43 f6 6d b4 d4 4d a7 6e 14 fc 20 47 7c d5 d6 1b 63 78 99 9e 71 d4 3a ad ee f9 83 62 19 3f 15 55 5c 67 8e e1 a1 6a ee ef 8c 39 f3 e9 4d 55 77 8c 02 47 fb 2a bd 94 ec 60 f5 27 a8 f5 ca 9d 58 b4 8b 74 55 8a 9b 4c d8 0b 25 ae Data Ascii: Na_UL\|uTk5`?Z\uT&_SdME'-m{f2zLpo_v-_GT$+18PP^Nq[&#Fa!CmMn G\|cxq:b?U\gj9MUwG*`'XtUL%
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: b2 d3 7a d1 d7 6d 41 41 71 6d 4d 2b c6 90 bd d5 4d 2b 62 8d 8d 93 8d cd 89 bc d9 1f 1e 5c 01 ce 09 ca 82 d4 7b 09 7c db 98 f1 a8 2f f6 8a c7 41 28 8a 67 5b 2b 38 e4 83 2f 24 02 df 94 e3 8f ba f2 e9 c9 5d 8d 33 a2 b4 7e aa 7d 1e 96 da cb 7d 65 fe de ca 98 ea e4 a8 92 57 47 ee bb 9b a3 aa 32 34 0e 00 78 8b 4b 07 99 0a ea a7 56 87 92 1c c4 38 a7 aa 3a dc 0b 00 5a 41 b9 79 b5 af a0 ca 6d 98 5f 7e 16 92 12 2d 11 5f 05 cc 19 c6 9a 9d 6c 74 b0 02 f7 e2 6f c0 db 65 2f 97 4e 6a 2b c6 d7 be af 56 e8 4a 46 ea 06 d1 d2 91 35 2d 03 a0 a9 8a 9a 26 90 c7 c8 c6 0e 02 1e dc fb dd 4e 01 56 f6 3c 3d b9 6f 31 f0 3d 42 c9 9b 56 97 be 58 22 a8 b8 59 dd 14 fc 72 be dd 1b 68 a7 a8 95 a6 27 38 70 b3 de fb 98 c6 47 0f 3c b7 3c d5 80 d7 fa 46 af 44 6b 1b 86 98 a9 39 f6 69 cf 86 ff Data Ascii: zmAAqmM+M+b\{\|/A(g[+8/$]3~}}eWG24xKV8:ZAym_~-_ltoe/Nj+VJF5-&NV<=o1=BVX"Yrh'8pG<<FDk9i
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 7e fd dd fe 1b 0f bc b2 82 24 39 09 61 36 d0 33 1d 20 83 c0 03 67 45 23 9d c6 56 7f 8a e7 76 29 05 b3 49 d9 2c 36 e8 2d 11 db 59 4f 4d 4c de 18 69 a2 e8 c1 9c 90 3d 32 79 9c 79 a9 dd 2d fe d7 66 85 91 43 48 c6 1c e1 be 1b 7d f7 e4 8c 03 e6 ee 7d 02 98 56 d2 50 36 8d d5 57 26 12 31 c8 01 e6 7a 7c ea a7 d8 ee ca f7 fb ce a9 93 59 6e 73 df 15 0c 32 36 5b 25 1d 35 41 64 ae 70 20 b6 67 16 fc 90 3c 9b e7 d5 61 71 1e 25 a4 61 7a 61 99 9b 70 00 0e c3 06 ee 3c 9a 3e 67 60 37 4c 3b 87 6a 78 a2 a0 61 42 b9 be af 79 bd 80 3c 49 e6 6d a0 dc 95 4c ea 1d 9a dd dd e1 b3 d2 5a 61 d2 33 d1 d9 6a ab 8b 2e 75 75 a0 33 c2 89 80 39 c5 d1 9f 7b 84 83 80 ec 63 3f 32 b9 bb 39 61 d3 5b 45 6d f6 6d 2f 69 a7 34 50 b5 d1 b0 3f 2e e3 6e 31 c4 09 e7 d3 a7 c3 e7 55 66 eb ea 4d 43 53 39 Data Ascii: ~$9a63 gE#Vv)I,6-YOMLi=2yy-fCH}}VP6W&1z\|Yns26[%5Adp g<aq%azap<>g`7L;jxaBy<ImLZa3j.uu39{c?29a[Emm/i4P?.n1UfMCS9
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 08 e5 98 78 af 2e ce 31 c0 ce 16 f3 e8 18 b1 2f 62 ed 35 dd bf fb c0 ae 5b d1 7b a5 74 ba 4b 4c 54 b2 a6 08 e5 8f dc 30 42 e2 da 2a 72 0f 2c bd c0 ca e1 e6 03 fd 57 d8 53 90 6a d8 c2 6a b7 31 ac bc a0 b8 e4 4b 74 60 1d ee 75 dc 3b d7 a8 f4 a9 ac 31 d1 6d 37 08 48 e9 3b 52 21 ae e6 d0 fb 3e 33 9d dc c6 59 87 bb c1 65 f7 62 2d 8b 3d 9f 7b 38 58 34 45 6d 38 65 d2 a2 0f ae 17 b3 e7 ed 73 80 e7 34 ff 00 10 70 c7 fd e7 c5 5d b7 72 66 57 2c 1c 23 24 a9 2e e3 eb 9b 46 db e8 2b ce bf be 3f 14 96 5b 64 f5 b3 8c e0 b9 b1 b0 bb 84 7c 49 00 0f 89 0b 58 4c cc 4c d5 27 df 19 fa c4 88 e2 7c dc 76 1f c9 74 45 3e 4a 43 0e d1 61 ca c2 ec c1 80 c0 d1 7e 0d 63 6d 73 e4 2e 4f 9a d6 cf 7b 7e f5 3b 70 3b 42 43 b6 96 da de 3b 7e 8d a2 10 4a d6 bb 2d 75 64 c0 49 29 f9 da df 0d 9f Data Ascii: x.1/b5[{tKLT0B*r,WSjj1Kt`u;1m7H;R!>3Yeb-={8X4Em8es4p]rfW,#$.F+?[d\|IXLL'\|vtE>JCa~cms.O{~;p;BC;~J-udI)
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: d8 ce a9 ce 9b 47 6d f5 8a a3 53 6b e1 13 bd d7 d6 4f 11 86 8a 07 60 f5 6f 1b 64 c7 98 71 1e 4b e0 00 94 e0 b3 2f 4f df ad 1a a6 c5 47 a9 6c 15 cc aa a1 b8 52 c7 53 47 53 11 cb 65 89 ed 0e 63 c7 c0 b4 82 ad 37 66 3e d7 54 bd a3 f7 43 75 36 da 9f 40 cd 68 76 d8 ea f7 d8 e5 ac 96 e2 d9 c5 c4 b5 d2 37 c6 6b 43 1a 62 1f 6b cf 09 2e eb d7 92 b5 dd d2 bb a1 a8 a1 da ad 43 d9 13 73 2a 1c 75 5e cc df a5 b1 54 78 a4 71 4f 6f e3 71 a5 94 7a 8c 07 33 23 90 0d 67 32 a4 dd d7 c7 3d a9 3b 57 ff 00 76 09 bf c6 d4 a6 5b 5d 2e b3 45 dd 15 2f bb bb bb b7 9b 15 b7 97 3d d4 dd 3d 47 0d aa c7 68 83 c5 ad ac 9b 27 03 20 35 ad 6b 72 5e f7 38 86 b5 a0 12 49 00 2a 9d cf 58 3d df 50 ea 5b 9d b3 64 f4 66 ad ab 7c 5a 42 f3 bb 14 b1 6a 9c c8 5b 13 a1 0d 03 0f 39 00 00 c7 4a ef ef 73 Data Ascii: GmSkO`odqK/OGlRSGSec7f>TCu6@hv7kCbk.Csu^TxqOoqz3#g2=;Wv[].E/==Gh' 5kr^8IX=P[df\|ZBj[9Js
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 5e 5a 1d de f6 b4 0d c0 e0 ba f6 57 a2 ed 45 36 99 ae d5 3d a8 6f d6 df ae 37 69 e3 9a dd a7 ad b4 4c 8d b6 78 83 48 31 39 ed cf 1b 9d c8 90 4b b8 48 f9 47 38 17 5d a3 03 08 c6 f0 8c 7c 17 2b 5f cd cc 99 b9 97 46 c8 d6 df 83 45 9a 38 58 01 fe e7 72 49 5b c2 99 20 29 92 10 e5 44 47 c4 ca 3d 68 8e 2e 7b 8d ee 4b 9c 78 92 76 16 00 68 d0 00 00 11 11 5b 2b f4 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 58 e3 de ed fd 8c fd ed fe e7 77 0f f0 02 c8 e5 62 3b cd b4 06 b7 dd 5e c0 9b b7 b7 3b 6f a5 ab 6f 77 db ce 87 ad a5 b5 5a 6d f1 87 cd 57 3b 9a 03 63 60 24 65 c7 e7 57 32 64 36 6e 19 3b 66 1f 35 46 60 13 2e f0 39 1f 92 bc da 43 fa d4 b6 7f b9 f0 7f 8b 6a 98 a8 0d 2d 0c d4 da 6e df 4b 53 13 99 24 54 30 b6 46 38 73 6b 83 00 20 a8 f5 6e 77 55 46 c8 88 8b Data Ascii: ^ZWE6=o7iLxH19KHG8]\|+_FE8XrI[ )DG=h.{Kxvh[+DDDDDDDDDDDDDDDDDDXwb;^;oowZmW;c`$eW2d6n;f5F`.9Cj-nKS$T0F8sk nwUF
2024-04-24 05:32:13 UTC	16384	IN	Data Raw: 7c 4c 7c a0 39 ab 79 ae 36 e0 69 5b d1 14 b1 b8 41 58 c7 4b 06 1b f2 64 1f 2d bf e7 fa 56 79 93 cd 8c 03 6f ad 82 c7 b6 53 ab 79 77 8a a5 62 b2 c6 5c c7 96 1c 79 85 ed 25 ba 99 ad 24 00 00 ea a7 70 d3 c4 fa 41 c2 1b 90 30 47 a2 96 d6 c5 e2 c8 63 c6 07 f2 af b9 89 2a bb 48 d9 4a aa 69 a1 e1 3c 2d e5 eb 95 06 fa 66 b8 91 8e 4a 75 3d 18 64 5c 2d 6e 54 1b e9 71 26 00 e6 4a f6 1c be 90 a9 9b ad aa 46 3c 4f 17 2c 1f 21 d5 75 b3 c5 51 40 d9 1c c9 0b 5e 5f c4 07 91 55 54 96 c8 ab 07 01 68 38 1c f0 14 9e b6 d6 fa 62 f0 d6 13 cb 90 ea aa 88 99 85 8a a5 d4 80 ec c1 54 9a 63 52 37 c1 c7 18 0f 04 71 05 3f a9 d4 8d 10 0c cc 41 03 a6 55 98 83 58 8b 45 cc c5 54 1e 1a d3 c2 f2 47 4f 8a ae 74 fd ce 96 eb 47 f5 c6 5a 81 e1 b4 13 92 ee 58 f9 d5 28 d0 32 0c c7 65 ee 1c 56 c5 Data Ascii: \|L\|9y6i[AXKd-VyoSywb\y%$pA0Gc*HJi<-fJu=d\-nTq&JF<O,!uQ@^_UTh8bTcR7q?AUXETGOtGZX(2eV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49818	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:13 UTC	770	OUT	GET /Resources/Shared/scripts/widgets.js?_=1713936729826 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:13 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:13 GMT Content-Type: application/javascript Content-Length: 11494 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:13 UTC	11494	IN	Data Raw: 2f 2a 0d 0a 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0d 0a 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 20 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0d 0a 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c Data Ascii: /*DotNetNuke - http://www.dotnetnuke.comCopyright (c) 2002-2007by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49820	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:13 UTC	1079	OUT	GET /MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:14 UTC	690	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 66445 Connection: close Cache-Control: private Vary: Accept-Encoding X-UA-Compatible: IE=edge,chome=1 Set-Cookie: language=en-US; path=/; secure; HttpOnly X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:14 UTC	15694	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 48 65 61 64 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 3c 21 2d 2d 20 52 65 73 70 6f 6e 73 69 76 65 20 44 65 73 69 67 6e 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 6f 6d 65 3d 31 22 20 2f 3e 3c 6d 65 74 61 Data Ascii: <!DOCTYPE html><html lang="en-US"><head id="Head"><meta charset="utf-8" /> ... Responsive Design --> <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chome=1" /><meta
2024-04-24 05:32:14 UTC	16384	IN	Data Raw: 73 73 79 42 37 73 5a 4b 45 42 7a 43 44 69 36 44 79 36 51 48 78 2b 39 67 2b 62 2b 56 39 6b 65 42 46 78 5a 78 35 34 56 6c 79 64 59 6c 76 2f 78 33 32 79 78 32 6a 68 4d 49 72 53 48 65 6e 6c 4b 58 57 6a 37 33 49 64 6e 50 32 4a 2f 4b 46 75 62 50 53 54 70 4a 68 4c 6e 38 32 6e 4e 59 6d 6e 4b 52 76 4c 50 36 62 4f 46 52 64 32 61 41 4f 6b 57 6d 46 34 52 42 35 6e 64 55 6d 67 4f 6c 30 59 6c 31 50 4e 74 71 51 49 2f 39 4c 75 62 32 39 57 63 58 42 2f 34 73 73 7a 50 2b 62 66 33 7a 56 51 63 33 33 6a 57 45 54 35 54 30 36 79 78 74 71 59 41 77 42 64 75 49 7a 6d 43 2f 63 63 57 74 70 69 78 48 58 71 6e 48 6d 56 67 6c 50 32 77 6e 6b 62 43 7a 39 53 41 68 38 76 36 58 71 4b 65 4b 64 32 4f 5a 43 68 71 4e 32 32 47 52 4e 71 64 61 4e 49 75 6d 71 6a 57 6f 43 4a 55 32 62 39 66 6c 62 69 30 Data Ascii: ssyB7sZKEBzCDi6Dy6QHx+9g+b+V9keBFxZx54VlydYlv/x32yx2jhMIrSHenlKXWj73IdnP2J/KFubPSTpJhLn82nNYmnKRvLP6bOFRd2aAOkWmF4RB5ndUmgOl0Yl1PNtqQI/9Lub29WcXB/4sszP+bf3zVQc33jWET5T06yxtqYAwBduIzmC/ccWtpixHXqnHmVglP2wnkbCz9SAh8v6XqKeKd2OZChqN22GRNqdaNIumqjWoCJU2b9flbi0
2024-04-24 05:32:14 UTC	16384	IN	Data Raw: 6e 3a 6c 69 6e 6b 2c 20 61 2e 62 74 6e 3a 68 6f 76 65 72 2c 20 61 2e 62 74 6e 3a 66 6f 63 75 73 2c 20 61 2e 62 74 6e 3a 61 63 74 69 76 65 2c 20 61 2e 62 74 6e 2e 61 63 74 69 76 65 2c 20 61 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 61 2e 62 74 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 20 2e 62 74 6e 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 3a 61 63 74 69 76 65 2c 20 2e 62 74 6e 2e 61 63 74 69 76 65 2c 20 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 2e 62 74 6e 5b 64 69 73 61 62 6c 65 64 5d 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 42 44 36 42 34 38 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0d 0a 7d 0d 0a 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: n:link, a.btn:hover, a.btn:focus, a.btn:active, a.btn.active, a.btn.disabled, a.btn[disabled], .btn:hover, .btn:focus, .btn:active, .btn.active, .btn.disabled, .btn[disabled] { background: #BD6B48; color: #FFFFFF;}</style><style type="text
2024-04-24 05:32:14 UTC	16384	IN	Data Raw: 68 65 63 6b 62 6f 78 26 23 33 39 3b 2c 26 23 33 39 3b 64 6e 6e 5f 63 74 72 32 39 30 35 37 31 35 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 6d 6f 64 75 6c 65 5f 73 75 62 54 6f 74 61 6c 74 65 78 74 62 6f 78 26 23 33 39 3b 2c 26 23 33 39 3b 64 6e 6e 5f 63 74 72 32 39 30 35 37 31 35 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 6d 6f 64 75 6c 65 5f 64 6f 6e 61 74 69 6f 6e 49 6e 66 6f 5f 6f 74 68 65 72 41 6d 6f 75 6e 74 54 65 78 74 26 23 33 39 3b 2c 26 23 33 39 3b 64 6e 6e 5f 63 74 72 32 39 30 35 37 31 35 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 6d 6f 64 75 6c 65 5f 64 65 6c 69 76 65 72 79 4f 70 74 69 6f 6e 73 44 72 6f 70 64 6f 77 6e 26 23 33 39 3b 29 3b 66 6f 72 6d 61 74 43 Data Ascii: heckbox','dnn_ctr2905715_ViewAESOPRegistration_rmodule_subTotaltextbox','dnn_ctr2905715_ViewAESOPRegistration_rmodule_donationInfo_otherAmountText','dnn_ctr2905715_ViewAESOPRegistration_rmodule_deliveryOptionsDropdown');formatC
2024-04-24 05:32:14 UTC	1599	IN	Data Raw: 6e 5f 63 74 72 32 39 30 35 37 31 35 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 62 74 6e 52 65 73 65 74 27 2c 20 27 64 6e 6e 5f 63 74 72 32 39 30 35 37 31 35 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 62 74 6e 41 6e 6f 74 68 65 72 27 2c 20 27 64 6e 6e 5f 63 74 72 32 39 30 35 37 31 35 5f 56 69 65 77 41 45 53 4f 50 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 62 74 6e 55 70 64 61 74 65 27 29 3b 0d 0a 7d 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 62 65 66 6f 72 65 75 6e 6c 6f 61 64 20 3d 20 44 69 73 61 62 6c 65 53 75 62 6d 69 74 42 75 74 74 6f 6e 3b 0d 0a 0d 0a 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 41 63 74 69 76 65 20 3d 20 66 61 6c 73 65 3b 0d 0a 69 66 20 28 74 79 70 65 6f 66 28 56 61 6c 69 64 61 74 6f Data Ascii: n_ctr2905715_ViewAESOPRegistration_btnReset', 'dnn_ctr2905715_ViewAESOPRegistration_btnAnother', 'dnn_ctr2905715_ViewAESOPRegistration_btnUpdate');}window.onbeforeunload = DisableSubmitButton;var Page_ValidationActive = false;if (typeof(Validato

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49819	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:14 UTC	1015	OUT	GET /DesktopModules/HTML/module.css?cdv=158 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:14 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:14 GMT Content-Type: text/css Content-Length: 574 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:04:46 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:14 UTC	574	IN	Data Raw: ef bb bf 2e 64 6e 6e 48 54 4d 4c 53 65 74 74 69 6e 67 73 2c 20 2e 64 6e 6e 4d 79 57 6f 72 6b 2c 20 2e 64 6e 6e 45 64 69 74 48 74 6d 6c 7b 6d 61 72 67 69 6e 3a 32 65 6d 20 61 75 74 6f 3b 7d 0d 0a 09 2e 64 6e 6e 46 6f 72 6d 49 74 65 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 20 2e 64 6e 6e 50 61 67 65 53 65 74 74 69 6e 67 73 20 2e 64 6e 6e 46 6f 72 6d 49 74 65 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 77 69 64 74 68 3a 61 75 74 6f 3b 7d 0d 0a 09 2e 64 6e 6e 46 6f 72 6d 49 74 65 6d 20 2e 64 6e 6e 48 54 4d 4c 53 52 61 64 69 6f 42 75 74 74 6f 6e 73 20 6c 61 62 65 6c 2c 20 2e 64 6e 6e 46 6f 72 6d 49 74 65 6d 20 2e 64 6e 6e 50 53 52 61 64 69 6f 42 75 74 74 6f 6e 73 20 69 6e 70 75 74 2c 20 2e 64 6e 6e 46 6f 72 6d 49 74 Data Ascii: .dnnHTMLSettings, .dnnMyWork, .dnnEditHtml{margin:2em auto;}.dnnFormItem input[type=checkbox], .dnnPageSettings .dnnFormItem input[type=radio]{width:auto;}.dnnFormItem .dnnHTMLSRadioButtons label, .dnnFormItem .dnnPSRadioButtons input, .dnnFormIt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49823	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:15 UTC	632	OUT	GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:15 UTC	176	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:15 GMT Content-Type: image/jpeg Content-Length: 524288 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:15 UTC	16208	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 05 35 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 08 ff c4 00 4b 10 00 01 03 03 03 02 05 02 04 04 05 03 03 01 02 0f 01 02 03 11 00 04 21 05 12 31 41 51 06 13 22 61 71 81 91 07 14 32 a1 23 42 b1 c1 Data Ascii: JFIFCC5"K!1AQ"aq2#B
2024-04-24 05:32:15 UTC	16384	IN	Data Raw: bb c1 b6 97 17 5a ca b5 5b ab b6 85 bb 6d 6d 50 54 c9 52 48 21 00 08 93 1e f5 6b c4 a0 9d 0d c7 90 c2 43 d7 37 ed 97 4e d1 fa 4a f9 ff 00 cd 7c e3 5d 8f 16 2f ea 05 18 3e 67 17 f0 6d a6 d1 f5 5d 3c e5 3f 05 72 97 1d 0f e6 92 e4 a8 e3 61 6f a9 68 24 29 24 c5 7d 1b ff 00 a7 cb 8d 4d df 08 5d 5f 6b f6 6c b5 3a 8a db b0 5b 4a c3 8c a0 00 09 12 76 9d d3 23 99 cd 7c fa c1 95 5c 38 b5 ab a9 27 15 ed ff 00 05 5f 2b d3 ef ec 6e 5f 4f 97 65 a9 29 0c 20 74 0a 48 51 3e f2 49 af 79 ad c7 07 1e a5 ce c9 fc 37 3e 69 83 2c fd 8b c6 f8 5b af 4e 13 fd 8f a7 b2 f0 58 dc 0e 29 92 4a 73 d3 3c 55 2b 3b 96 95 e9 42 b1 d8 55 b4 2e 51 0a c8 26 b8 ed 34 c6 4e ce 59 93 f4 aa 7a 93 61 c6 55 29 e6 ad b8 67 83 db 8a 45 c9 fe 19 07 b7 de a6 3f 88 89 13 a7 ba a7 ac 1a 52 8e 42 60 cf b6 Data Ascii: Z[mmPTRH!kC7NJ\|]/>gm]<?raoh$)$}M]_kl:[Jv#\|\8'_+n_Oe) tHQ>Iy7>i,[NX)Js<U+;BU.Q&4NYzaU)gE?RB`
2024-04-24 05:32:15 UTC	16384	IN	Data Raw: 05 22 aa 6a 20 e6 53 06 33 8a d0 b9 32 27 b9 a3 a2 25 0f 59 a5 f2 24 c9 13 f1 57 77 40 dc 0c e7 b5 66 f8 61 44 69 c5 3f e5 74 f3 57 9c 58 da 64 f1 54 c9 be a6 0d 50 6b 52 4a 48 f6 a0 2e 22 08 9f b5 25 6e 92 ac a7 e9 41 2a 19 80 07 f7 a9 20 7a 9d 8c 0e 9d e9 66 e0 f0 4c f7 a1 f3 01 f5 1e 83 06 80 a2 64 84 f3 40 0f 6d e5 39 e9 04 4c 72 68 f1 1b a0 18 aa c8 84 80 52 39 e2 2a c3 6e 02 99 31 8e 28 00 c1 27 27 34 69 4c 24 24 72 a3 c4 d2 c2 b3 44 85 00 7d 27 9f 7e b4 ae 23 3a a0 88 8e 62 81 69 48 3c 08 f9 a3 29 dc 64 ff 00 b5 40 48 9c 99 1d bb d4 ad 85 03 ca 99 24 74 e2 ba 36 e4 09 9e f4 c0 80 15 09 48 c8 c9 a8 20 46 dc 8e bc 50 9d 8a d1 2d 2c a2 08 04 75 35 6d a7 02 91 93 33 dc d5 2e 00 1c cf 4a 36 d4 5b 27 12 3a d4 f2 29 71 51 26 07 3c 50 38 25 46 00 a0 0e 6e Data Ascii: "j S32'%Y$Ww@faDi?tWXdTPkRJH."%nA* zfLd@m9LrhR9*n1(''4iL$$rD}'~#:biH<)d@H$t6H FP-,u5m3.J6[':)qQ&<P8%Fn
2024-04-24 05:32:15 UTC	16384	IN	Data Raw: 7c 92 fb ee ea 32 e3 88 84 c2 7d 29 f7 8f e9 57 d4 41 4c 9c d2 96 a5 64 cf 4a 64 88 eb 69 6c 45 8d ba 2c ed 51 6e 09 56 d1 ea 59 fe 65 75 26 98 5f 49 51 4a 56 99 1c 8e d5 56 eb 52 66 de 41 5c 94 e0 a4 0c 9a a8 db 97 07 57 4a da 69 3b 5c 6e 56 67 29 4f 73 3d 6a 69 b0 57 c9 a8 e1 43 89 da b0 0f 5c a6 69 6b 70 98 91 31 ef 50 56 24 83 24 c6 69 57 0a 90 00 92 24 13 9a 91 06 17 63 2a 81 42 5e c1 8e 9e d4 b5 95 12 7d 22 3a 19 cd 2d 4b 5a 56 4e 02 47 06 79 a1 2b 01 e1 7e ad ca 14 cd e2 3d 33 f1 15 5c ac 6d 20 28 71 5c 97 3d 01 25 59 a9 e9 62 bd cf 9f b6 90 91 b6 49 03 da 8f 6c 8c 7f 5a 80 90 ae 49 fb d4 fe 88 03 3d eb b6 79 97 b9 c7 72 44 cf d8 d4 a5 44 e7 b8 a8 24 90 09 ff 00 37 6a ed d1 8a 00 82 77 19 f8 a2 a8 0a 11 5c 48 3c 50 00 ad 42 67 da b9 b2 a2 73 da b8 Data Ascii: \|2})WALdJdilE,QnVYeu&_IQJVVRfA\WJi;\nVg)Os=jiWC\ikp1PV$$iW$c*B^}":-KZVNGy+~=3\m (q\=%YbIlZI=yrDD$7jw\H<PBgs
2024-04-24 05:32:15 UTC	16384	IN	Data Raw: c0 99 e9 4f d8 02 36 25 5c 7b d2 9d 93 29 8c fc 53 02 76 cc 6d 45 b2 95 13 1c d0 df cb 96 69 27 8d 98 ab 1a 8a 44 10 4e 7d a9 2b 46 ed 35 27 e7 1f 5a b2 cb 17 26 ef 83 5c f3 34 3b 64 a8 fe 94 94 fb e0 9a db 56 33 9a c2 f0 6c a7 49 48 29 88 52 88 13 ef 5b 7b 94 ac c5 65 92 a9 10 f9 2b 5d 99 06 0c 63 26 b3 ae 41 23 d2 20 11 15 a4 f4 29 24 88 eb 15 9f 72 98 99 f9 a7 80 19 ef 8f 58 20 62 84 03 11 1c d3 1c 48 51 13 13 de 85 48 da 9f a5 5a 9a a0 14 49 42 f7 4c 76 8a d1 d3 df f3 53 0a 39 02 b3 dc 19 89 ef d6 9d a5 28 a5 e2 9c fd 45 12 49 c4 0d 74 11 d6 b9 70 99 31 d3 a9 a1 41 00 49 3f 4a 93 ea 56 6a 92 b2 77 28 e4 00 2b 89 57 71 f6 a8 50 f7 8a e0 85 0e a0 d0 04 85 10 a1 d6 7a 53 1b 5e 27 3e f3 49 20 cc c4 45 1b 72 48 9c 50 05 a4 2f 6f 34 69 59 88 02 ab a0 89 13 Data Ascii: O6%\{)SvmEi'DN}+F5'Z&\4;dV3lIH)R[{e+]c&A# )$rX bHQHZIBLvS9(EItp1AI?JVjw(+WqPzS^'>I ErHP/o4iY
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 0a 32 3f 7a b7 71 6b e6 0e d1 91 8e 2b 35 f4 a9 87 36 2c 9e 69 93 b2 1a b1 ea 00 83 fb 8a 4d c8 25 1e 6a 9b 33 bc 85 2e 79 c0 e9 fd ea 12 f8 02 4a a3 a7 15 cc a5 17 6f a6 cc a6 7c d5 2a 14 06 52 76 98 3f 03 98 a9 64 c1 6f 45 2b 86 a4 e7 ed 54 1f 48 48 04 03 ff 00 71 24 44 cf 4f a4 56 8b de 62 5d 71 87 0a 77 b4 b2 85 c1 c4 f3 3f 51 54 9e 10 a2 b0 91 90 47 a9 33 13 d6 38 9a b0 65 69 d1 4d 40 aa 49 4c 18 ef 42 a5 89 e7 8e e6 98 a6 94 a0 a0 d9 c2 1b 95 6e 30 7e 94 80 95 83 00 92 3e 6a c4 ec 7a 2e e9 ef 21 b3 c8 9e 86 b5 5a 5a 16 99 44 f0 39 3d 7f d2 bc fb 68 5a 56 0c 91 5b 56 0a 0a 40 f4 f0 33 55 c9 57 02 34 58 29 1c ed a8 0d a0 9f d3 46 20 e3 6f cd 12 50 d9 1d 29 7a 98 a2 c3 69 41 c0 a9 54 47 e9 e0 f4 a3 f2 81 26 07 5e 3b d7 79 39 92 73 50 dd 80 b2 a2 44 0c Data Ascii: 2?zqk+56,iM%j3.yJo\|*Rv?doE+THHq$DOVb]qw?QTG38eiM@ILBn0~>jz.!ZZD9=hZV[V@3UW4X)F oP)ziATG&^;y9sPD
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: f4 56 3c 4d e1 e5 58 bd a3 a2 f5 c6 1e 42 db 69 77 05 b1 01 43 32 32 23 33 1c 8a f9 6e 8f 57 93 c3 3c 47 aa 3b 53 a7 b6 f5 df 93 eb 1a ad 3e 3d 76 8e 9f 96 c7 c5 75 3d 42 c7 ff 00 dd 5b 8c de b8 da ae 74 bd 75 29 43 8e b8 b2 a4 a1 66 61 1b 4c 13 fa 89 dc 23 68 3d 62 83 44 bc 6d d1 bc 39 32 91 0a 07 9a f5 7a df 84 ed 9d b6 d6 75 7d 33 49 6e cb 41 be de c3 f6 a9 48 2e b4 94 2f 68 7b 64 c2 8a 54 24 67 20 82 47 35 8b ac 7e 0f ea df 87 cf bf a8 d8 dc b8 fe 90 86 d0 a4 5c ad 69 50 40 30 09 54 44 49 50 22 24 41 af 73 e1 fe 2d a2 c1 91 ab f7 72 37 25 e8 dd 75 45 fa a7 cf c6 cf 2b ab f0 fd 56 48 26 d6 f0 49 7c 52 ba 7f 34 5a 61 c0 15 13 34 6b 58 22 00 91 54 2c ae 8c 96 dc 80 a4 ab 69 4c cc 11 de ad 95 ce 12 a1 f7 af 53 19 29 2b 5c 1e 7a 58 dc 5d 33 c9 78 b2 e5 5e Data Ascii: V<MXBiwC22#3nW<G;S>=vu=B[tu)CfaL#h=bDm92zu}3InAH./h{dT$g G5~\iP@0TDIP"$As-r7%uE+VH&I\|R4Za4kX"T,iLS)+\zX]3x^
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 49 31 83 8a 88 1f a7 da a5 44 a4 00 3b 75 14 82 90 54 01 8f 9e 95 c1 40 89 93 8f 6a 82 94 9f fc d4 a5 20 7f e6 80 20 ac 12 40 3c 1e d5 c6 23 26 a5 49 1c 90 3e a2 96 40 98 1d 28 03 8c 15 48 ff 00 cd 2d c6 d4 73 1d 28 9c 31 9c d7 24 02 64 ff 00 5a 00 42 d0 48 82 22 82 08 30 a1 f6 cd 59 75 29 23 8a 41 03 99 39 f7 a7 5c 02 06 4f 02 7e d4 b7 5b 26 78 c9 ef 44 ad fb 88 07 a4 83 50 a5 92 0c c0 81 d6 a4 0a ea 00 09 f7 eb d2 84 a9 20 6e 3f 7a 37 92 52 98 27 1d e8 21 39 00 62 78 9a 78 f0 49 c4 24 89 c7 1d ea 50 32 09 ef 5c 91 9f bd 1a 3d 23 68 f9 e2 a4 80 d0 84 1e 0f 4e 28 d2 89 27 74 62 b9 b4 7f 32 a2 4f 34 c4 24 10 41 eb ef 48 db 65 64 04 ce 07 d7 14 49 40 c0 c1 9a 92 99 89 9a 30 91 fa be 28 6e c0 80 80 32 a0 0f 58 14 69 03 84 01 34 49 48 03 9e 98 15 c1 b2 08 32 Data Ascii: I1D;uT@j @<#&I>@(H-s(1$dZBH"0Yu)#A9\O~[&xDP n?z7R'!9bxxI$P2\=#hN('tb2O4$AHedI@0(n2Xi4IH2
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 40 33 f6 a6 a4 19 dd 02 a2 85 27 68 22 7d b9 8a 5a d5 e5 2a 54 38 e9 34 6f 3e 90 4a 82 63 77 00 74 aa 8f b8 b7 56 63 39 a1 2b 27 86 02 ef de 6c 9f 29 24 f5 83 c5 50 d5 6c b4 fd 71 a5 59 5d 0f ca ae e5 10 66 42 a2 7f 52 48 eb da ae 6c 27 f9 33 de 7f 6a 15 a6 42 43 a8 0a 00 e0 2c 48 4f de a5 c7 62 e8 4d 45 d9 a3 f8 63 e2 c7 1f 73 ff 00 4d 6b 6e 14 ea 16 48 d8 a2 e1 cd c3 63 f4 bb 8e a4 73 ef 5f 44 b7 4a 5d 6f 6a 81 ce 62 be 33 a9 35 a8 59 ad bd 63 47 1f fb 8b 57 37 b5 22 7d 24 ca 9b 24 f2 9c 63 a8 3f 02 be 9b e0 1f 19 69 5e 34 d1 3f c4 f4 a5 29 05 a7 0b 57 2c 3a 21 c6 1c 19 d8 a1 de 33 23 04 66 b0 e5 52 8c a9 f1 db ef ee c9 cf 8a 32 8f b4 87 cd 79 7f 83 45 fd 3c bd 70 10 88 0b da 76 ff 00 dc 41 e3 fd fd a8 74 eb 9b 9b 2d 49 5a be 92 80 8b e2 94 8b a4 79 73 Data Ascii: @3'h"}Z*T84o>JcwtVc9+'l)$PlqY]fBRHl'3jBC,HObMEcsMknHcs_DJ]ojb35YcGW7"}$$c?i^4?)W,:!3#fR2yE<pvAt-IZys
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 6a 8a 44 a9 79 84 e9 49 4c f6 eb 35 9f 7a 1b 58 36 ae fe 85 77 1c 55 d5 09 49 04 9e 3b d5 6b d6 12 f2 54 3a f4 34 d1 d9 89 27 6b 73 e4 fa cf e6 7f 07 bc 7a df 8c ed 12 a5 69 97 60 5b ea 8c 05 60 b4 4e 17 9e 76 c9 3f 12 2a cf 8e f4 4b 67 df 71 3a 63 ad fe 5e e4 07 ed 14 82 00 52 0e 53 0a fe 6e 63 ea 2b d7 78 97 44 b4 d7 b4 d7 74 9d 49 80 a4 ad 04 49 1c 8f f5 af 9b 78 3a e6 f3 45 d4 1d fc 1f f1 18 42 9c 40 5b de 19 b8 58 f4 a9 a8 f5 30 0f b6 4a 47 c8 ed 55 f8 96 9a 7a 9c 0b 26 37 59 20 d3 5f 15 c7 d7 8f 89 db f0 2d 7c 70 67 e8 c9 f8 5a e9 97 ff 00 4b ff 00 fc 7f 4b 2b e9 6d bc cb 8e 5b 3e 7f 88 d9 85 14 90 47 de b5 ed 46 e3 02 0f 7a c3 bc 6a fb 44 d6 16 6f 02 94 87 15 ea 2a 8c 7b 62 b7 b4 90 d2 91 e6 36 26 47 7a ea 69 b3 c7 51 a7 8e 48 bb b5 bf c7 ba f9 33 Data Ascii: jDyIL5zX6wUI;kT:4'kszi`[`Nv?Kgq:c^RSnc+xDtIIx:EB@[X0JGUz&7Y _-\|pgZKK+m[>GFzjDo{b6&GziQH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:15 UTC	1156	OUT	GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936733934 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:15 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:15 GMT Content-Type: application/javascript Content-Length: 9847 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Thu, 01 Feb 2024 22:07:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:15 UTC	9847	IN	Data Raw: 2f 2a 0a 20 20 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0a 20 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 0a 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0a 20 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 Data Ascii: /* DotNetNuke - http://www.dotnetnuke.com Copyright (c) 2002-2007 by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49827	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:15 UTC	693	OUT	GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:16 UTC	175	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:15 GMT Content-Type: image/png Content-Length: 262144 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:16 UTC	16209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 d6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 01 02 03 0a ff c4 00 7d 10 00 01 03 03 02 03 05 03 03 0d 06 0e 06 14 07 11 01 00 02 03 04 05 11 06 07 12 21 31 08 09 13 41 51 14 22 61 32 71 81 0a 15 Data Ascii: JFIFCC"}!1AQ"a2q
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 99 71 e6 49 e6 df a5 75 14 af c1 2e c9 00 f2 70 76 72 54 d2 03 83 9a 0d d4 22 65 a5 af 3a 23 9a 5c d1 d7 a1 f3 e8 b8 31 39 dc f8 3a 00 33 9f 4f e4 51 34 f1 60 70 f1 67 38 27 03 a2 f7 74 40 8f a3 cf 9a b9 ce 16 3d c1 c4 a9 4c f4 ae 1c c8 23 2e c7 20 ad 5f 6b 7b 30 a9 db 8a 7b 9b 1a 78 a8 6e b1 92 ef 40 f6 b9 9f ca 42 bc d5 31 31 a3 8b 19 38 ea 15 13 be f6 33 7c da ab e5 14 6d e2 73 28 0c d1 90 33 97 46 43 f3 f9 01 58 9c 41 03 ed d4 19 98 20 6a 58 eb 78 81 71 f1 b2 cc 61 d9 9f b0 d7 e5 63 9d 83 db 7f 02 6c 7e 04 ab 81 dd 17 ad 8d cf 6a 75 36 81 9a 57 39 f6 7b eb 2a a1 6b 9d c9 b1 54 47 d0 0f e3 c4 f2 7e 2e 59 74 06 47 30 b5 bf dd 5f ae 46 9b ed 1d 3e 95 96 50 21 d4 56 29 a1 60 73 b0 0c b1 16 ca cc 7a 92 d0 ff 00 d6 b6 40 08 20 7f 9d 6b 4c 23 35 f6 9a 23 01 Data Ascii: qIu.pvrT"e:#\19:3OQ4`pg8't@=L#. _k{0{xn@B1183\|ms(3FCXA jXxqacl~ju6W9{*kTG~.YtG0_F>P!V)`sz@ kL#5#
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 77 66 71 22 c4 66 75 9c 4e d6 1b 9d bc ae 16 d9 9a 99 94 8f 4d 6b e5 c5 a1 e8 00 37 d8 68 3b f8 71 f3 5e f0 44 de 6f 96 41 81 c8 0c 73 07 3f ab e7 51 71 53 90 d6 b1 ae c0 2e c8 6a f1 a7 0e 6b 3c 3c 0e 5c c1 f3 23 d1 46 b7 88 30 87 34 0c 9e 2c 35 4b 08 71 21 a7 fa b7 97 7d d6 10 bc 37 55 d5 ac 1c 7e 1b b0 5b 8c 90 07 45 2f bc 6a 8b 26 9f ad 8a dd 5b 53 28 a8 95 85 ec 86 08 5d 21 c0 1c dc 71 f2 7e 9c 65 4d 5c d6 e0 35 b9 f2 e2 20 75 54 65 3c 2d 35 97 5b b4 cf 71 e3 af 78 e3 73 b2 78 47 26 81 f0 f8 2b c9 69 26 c4 36 71 cb a6 bc fe 9f 3d 15 bb a3 5e e4 0b f2 e5 f5 e1 ef 55 25 06 a3 b5 5c 1d e1 53 dc 63 33 63 21 ae 18 24 0f 81 f3 f9 94 43 a7 04 e5 83 39 1c c9 3e 6a d8 ea 5b dd 63 24 22 82 d9 4c f7 44 43 84 d3 48 ec 35 dd 70 38 79 e5 50 f3 f6 80 d5 fb 6f 79 92 Data Ascii: wfq"fuNMk7h;q^DoAs?QqS.jk<<\#F04,5Kq!}7U~[E/j&[S(]!q~eM\5 uTe<-5[qxsxG&+i&6q=^U%\Sc3c!$C9>j[c$"LDCH5p8yPoy
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: f5 d0 9f 15 e7 87 a3 cf 97 c4 ad a1 4e 61 bb da 5f ec 55 4c 7c 75 54 c7 c1 95 8e e2 6b 83 9b c9 c0 8e a3 04 1c ac 35 7f 60 9d ee 13 3f 11 5a 5c 0b ce 08 b9 75 e7 d7 9b 54 c3 16 c8 cd cf 18 26 03 0b ad 9a f6 17 de cb 5f f4 7f 53 90 a6 b6 64 4d 45 0c 27 2d ae 6d 7b 66 bf ba ea c4 32 0f 87 cf c9 7a c7 4c 70 09 6f 5f 82 be b1 76 0c de b1 82 e8 2d 5f a4 47 f3 54 16 ac ec 95 b8 1a 0e d4 db ae a4 fa dc 1b 24 cd 82 9e 08 2b 83 e5 a8 95 c4 06 c7 1b 31 97 38 e7 a0 f2 c9 50 c7 d1 aa 50 9a 5e f8 4e 00 71 b1 5b 26 1e 23 a2 46 88 19 0e 61 a4 9d 80 21 43 f6 6d b4 d4 4d a7 6e 14 fc 20 47 7c d5 d6 1b 63 78 99 9e 71 d4 3a ad ee f9 83 62 19 3f 15 55 5c 67 8e e1 a1 6a ee ef 8c 39 f3 e9 4d 55 77 8c 02 47 fb 2a bd 94 ec 60 f5 27 a8 f5 ca 9d 58 b4 8b 74 55 8a 9b 4c d8 0b 25 ae Data Ascii: Na_UL\|uTk5`?Z\uT&_SdME'-m{f2zLpo_v-_GT$+18PP^Nq[&#Fa!CmMn G\|cxq:b?U\gj9MUwG*`'XtUL%
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: b2 d3 7a d1 d7 6d 41 41 71 6d 4d 2b c6 90 bd d5 4d 2b 62 8d 8d 93 8d cd 89 bc d9 1f 1e 5c 01 ce 09 ca 82 d4 7b 09 7c db 98 f1 a8 2f f6 8a c7 41 28 8a 67 5b 2b 38 e4 83 2f 24 02 df 94 e3 8f ba f2 e9 c9 5d 8d 33 a2 b4 7e aa 7d 1e 96 da cb 7d 65 fe de ca 98 ea e4 a8 92 57 47 ee bb 9b a3 aa 32 34 0e 00 78 8b 4b 07 99 0a ea a7 56 87 92 1c c4 38 a7 aa 3a dc 0b 00 5a 41 b9 79 b5 af a0 ca 6d 98 5f 7e 16 92 12 2d 11 5f 05 cc 19 c6 9a 9d 6c 74 b0 02 f7 e2 6f c0 db 65 2f 97 4e 6a 2b c6 d7 be af 56 e8 4a 46 ea 06 d1 d2 91 35 2d 03 a0 a9 8a 9a 26 90 c7 c8 c6 0e 02 1e dc fb dd 4e 01 56 f6 3c 3d b9 6f 31 f0 3d 42 c9 9b 56 97 be 58 22 a8 b8 59 dd 14 fc 72 be dd 1b 68 a7 a8 95 a6 27 38 70 b3 de fb 98 c6 47 0f 3c b7 3c d5 80 d7 fa 46 af 44 6b 1b 86 98 a9 39 f6 69 cf 86 ff Data Ascii: zmAAqmM+M+b\{\|/A(g[+8/$]3~}}eWG24xKV8:ZAym_~-_ltoe/Nj+VJF5-&NV<=o1=BVX"Yrh'8pG<<FDk9i
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 7e fd dd fe 1b 0f bc b2 82 24 39 09 61 36 d0 33 1d 20 83 c0 03 67 45 23 9d c6 56 7f 8a e7 76 29 05 b3 49 d9 2c 36 e8 2d 11 db 59 4f 4d 4c de 18 69 a2 e8 c1 9c 90 3d 32 79 9c 79 a9 dd 2d fe d7 66 85 91 43 48 c6 1c e1 be 1b 7d f7 e4 8c 03 e6 ee 7d 02 98 56 d2 50 36 8d d5 57 26 12 31 c8 01 e6 7a 7c ea a7 d8 ee ca f7 fb ce a9 93 59 6e 73 df 15 0c 32 36 5b 25 1d 35 41 64 ae 70 20 b6 67 16 fc 90 3c 9b e7 d5 61 71 1e 25 a4 61 7a 61 99 9b 70 00 0e c3 06 ee 3c 9a 3e 67 60 37 4c 3b 87 6a 78 a2 a0 61 42 b9 be af 79 bd 80 3c 49 e6 6d a0 dc 95 4c ea 1d 9a dd dd e1 b3 d2 5a 61 d2 33 d1 d9 6a ab 8b 2e 75 75 a0 33 c2 89 80 39 c5 d1 9f 7b 84 83 80 ec 63 3f 32 b9 bb 39 61 d3 5b 45 6d f6 6d 2f 69 a7 34 50 b5 d1 b0 3f 2e e3 6e 31 c4 09 e7 d3 a7 c3 e7 55 66 eb ea 4d 43 53 39 Data Ascii: ~$9a63 gE#Vv)I,6-YOMLi=2yy-fCH}}VP6W&1z\|Yns26[%5Adp g<aq%azap<>g`7L;jxaBy<ImLZa3j.uu39{c?29a[Emm/i4P?.n1UfMCS9
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 08 e5 98 78 af 2e ce 31 c0 ce 16 f3 e8 18 b1 2f 62 ed 35 dd bf fb c0 ae 5b d1 7b a5 74 ba 4b 4c 54 b2 a6 08 e5 8f dc 30 42 e2 da 2a 72 0f 2c bd c0 ca e1 e6 03 fd 57 d8 53 90 6a d8 c2 6a b7 31 ac bc a0 b8 e4 4b 74 60 1d ee 75 dc 3b d7 a8 f4 a9 ac 31 d1 6d 37 08 48 e9 3b 52 21 ae e6 d0 fb 3e 33 9d dc c6 59 87 bb c1 65 f7 62 2d 8b 3d 9f 7b 38 58 34 45 6d 38 65 d2 a2 0f ae 17 b3 e7 ed 73 80 e7 34 ff 00 10 70 c7 fd e7 c5 5d b7 72 66 57 2c 1c 23 24 a9 2e e3 eb 9b 46 db e8 2b ce bf be 3f 14 96 5b 64 f5 b3 8c e0 b9 b1 b0 bb 84 7c 49 00 0f 89 0b 58 4c cc 4c d5 27 df 19 fa c4 88 e2 7c dc 76 1f c9 74 45 3e 4a 43 0e d1 61 ca c2 ec c1 80 c0 d1 7e 0d 63 6d 73 e4 2e 4f 9a d6 cf 7b 7e f5 3b 70 3b 42 43 b6 96 da de 3b 7e 8d a2 10 4a d6 bb 2d 75 64 c0 49 29 f9 da df 0d 9f Data Ascii: x.1/b5[{tKLT0B*r,WSjj1Kt`u;1m7H;R!>3Yeb-={8X4Em8es4p]rfW,#$.F+?[d\|IXLL'\|vtE>JCa~cms.O{~;p;BC;~J-udI)
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: d8 ce a9 ce 9b 47 6d f5 8a a3 53 6b e1 13 bd d7 d6 4f 11 86 8a 07 60 f5 6f 1b 64 c7 98 71 1e 4b e0 00 94 e0 b3 2f 4f df ad 1a a6 c5 47 a9 6c 15 cc aa a1 b8 52 c7 53 47 53 11 cb 65 89 ed 0e 63 c7 c0 b4 82 ad 37 66 3e d7 54 bd a3 f7 43 75 36 da 9f 40 cd 68 76 d8 ea f7 d8 e5 ac 96 e2 d9 c5 c4 b5 d2 37 c6 6b 43 1a 62 1f 6b cf 09 2e eb d7 92 b5 dd d2 bb a1 a8 a1 da ad 43 d9 13 73 2a 1c 75 5e cc df a5 b1 54 78 a4 71 4f 6f e3 71 a5 94 7a 8c 07 33 23 90 0d 67 32 a4 dd d7 c7 3d a9 3b 57 ff 00 76 09 bf c6 d4 a6 5b 5d 2e b3 45 dd 15 2f bb bb bb b7 9b 15 b7 97 3d d4 dd 3d 47 0d aa c7 68 83 c5 ad ac 9b 27 03 20 35 ad 6b 72 5e f7 38 86 b5 a0 12 49 00 2a 9d cf 58 3d df 50 ea 5b 9d b3 64 f4 66 ad ab 7c 5a 42 f3 bb 14 b1 6a 9c c8 5b 13 a1 0d 03 0f 39 00 00 c7 4a ef ef 73 Data Ascii: GmSkO`odqK/OGlRSGSec7f>TCu6@hv7kCbk.Csu^TxqOoqz3#g2=;Wv[].E/==Gh' 5kr^8IX=P[df\|ZBj[9Js
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 5e 5a 1d de f6 b4 0d c0 e0 ba f6 57 a2 ed 45 36 99 ae d5 3d a8 6f d6 df ae 37 69 e3 9a dd a7 ad b4 4c 8d b6 78 83 48 31 39 ed cf 1b 9d c8 90 4b b8 48 f9 47 38 17 5d a3 03 08 c6 f0 8c 7c 17 2b 5f cd cc 99 b9 97 46 c8 d6 df 83 45 9a 38 58 01 fe e7 72 49 5b c2 99 20 29 92 10 e5 44 47 c4 ca 3d 68 8e 2e 7b 8d ee 4b 9c 78 92 76 16 00 68 d0 00 00 11 11 5b 2b f4 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 58 e3 de ed fd 8c fd ed fe e7 77 0f f0 02 c8 e5 62 3b cd b4 06 b7 dd 5e c0 9b b7 b7 3b 6f a5 ab 6f 77 db ce 87 ad a5 b5 5a 6d f1 87 cd 57 3b 9a 03 63 60 24 65 c7 e7 57 32 64 36 6e 19 3b 66 1f 35 46 60 13 2e f0 39 1f 92 bc da 43 fa d4 b6 7f b9 f0 7f 8b 6a 98 a8 0d 2d 0c d4 da 6e df 4b 53 13 99 24 54 30 b6 46 38 73 6b 83 00 20 a8 f5 6e 77 55 46 c8 88 8b Data Ascii: ^ZWE6=o7iLxH19KHG8]\|+_FE8XrI[ )DG=h.{Kxvh[+DDDDDDDDDDDDDDDDDDXwb;^;oowZmW;c`$eW2d6n;f5F`.9Cj-nKS$T0F8sk nwUF
2024-04-24 05:32:16 UTC	16384	IN	Data Raw: 7c 4c 7c a0 39 ab 79 ae 36 e0 69 5b d1 14 b1 b8 41 58 c7 4b 06 1b f2 64 1f 2d bf e7 fa 56 79 93 cd 8c 03 6f ad 82 c7 b6 53 ab 79 77 8a a5 62 b2 c6 5c c7 96 1c 79 85 ed 25 ba 99 ad 24 00 00 ea a7 70 d3 c4 fa 41 c2 1b 90 30 47 a2 96 d6 c5 e2 c8 63 c6 07 f2 af b9 89 2a bb 48 d9 4a aa 69 a1 e1 3c 2d e5 eb 95 06 fa 66 b8 91 8e 4a 75 3d 18 64 5c 2d 6e 54 1b e9 71 26 00 e6 4a f6 1c be 90 a9 9b ad aa 46 3c 4f 17 2c 1f 21 d5 75 b3 c5 51 40 d9 1c c9 0b 5e 5f c4 07 91 55 54 96 c8 ab 07 01 68 38 1c f0 14 9e b6 d6 fa 62 f0 d6 13 cb 90 ea aa 88 99 85 8a a5 d4 80 ec c1 54 9a 63 52 37 c1 c7 18 0f 04 71 05 3f a9 d4 8d 10 0c cc 41 03 a6 55 98 83 58 8b 45 cc c5 54 1e 1a d3 c2 f2 47 4f 8a ae 74 fd ce 96 eb 47 f5 c6 5a 81 e1 b4 13 92 ee 58 f9 d5 28 d0 32 0c c7 65 ee 1c 56 c5 Data Ascii: \|L\|9y6i[AXKd-VyoSywb\y%$pA0Gc*HJi<-fJu=d\-nTq&JF<O,!uQ@^_UTh8bTcR7q?AUXETGOtGZX(2eV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49830	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:16 UTC	1143	OUT	GET /Resources/Shared/scripts/widgets.js?_=1713936733935 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://overlakehf.ejoinme.org/MyEvents/BandageBall2024/GiveToday/tabid/1423446/Default.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:16 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:16 GMT Content-Type: application/javascript Content-Length: 11494 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:16 UTC	11494	IN	Data Raw: 2f 2a 0d 0a 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0d 0a 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 20 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0d 0a 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c Data Ascii: /*DotNetNuke - http://www.dotnetnuke.comCopyright (c) 2002-2007by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:16 UTC	783	OUT	GET /Resources/Shared/scripts/DotNetNukeAjaxShared.js?_=1713936733934 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:16 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:16 GMT Content-Type: application/javascript Content-Length: 9847 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Thu, 01 Feb 2024 22:07:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:16 UTC	9847	IN	Data Raw: 2f 2a 0a 20 20 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0a 20 20 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 20 0a 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0a 20 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 Data Ascii: /* DotNetNuke - http://www.dotnetnuke.com Copyright (c) 2002-2007 by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49832	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:17 UTC	390	OUT	GET /Image/660136B2-6730-420F-977B-BFABA1CC08B4 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:17 UTC	176	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:17 GMT Content-Type: image/jpeg Content-Length: 524288 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:17 UTC	16208	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 05 35 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 08 ff c4 00 4b 10 00 01 03 03 03 02 05 02 04 04 05 03 03 01 02 0f 01 02 03 11 00 04 21 05 12 31 41 51 06 13 22 61 71 81 91 07 14 32 a1 23 42 b1 c1 Data Ascii: JFIFCC5"K!1AQ"aq2#B
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: bb c1 b6 97 17 5a ca b5 5b ab b6 85 bb 6d 6d 50 54 c9 52 48 21 00 08 93 1e f5 6b c4 a0 9d 0d c7 90 c2 43 d7 37 ed 97 4e d1 fa 4a f9 ff 00 cd 7c e3 5d 8f 16 2f ea 05 18 3e 67 17 f0 6d a6 d1 f5 5d 3c e5 3f 05 72 97 1d 0f e6 92 e4 a8 e3 61 6f a9 68 24 29 24 c5 7d 1b ff 00 a7 cb 8d 4d df 08 5d 5f 6b f6 6c b5 3a 8a db b0 5b 4a c3 8c a0 00 09 12 76 9d d3 23 99 cd 7c fa c1 95 5c 38 b5 ab a9 27 15 ed ff 00 05 5f 2b d3 ef ec 6e 5f 4f 97 65 a9 29 0c 20 74 0a 48 51 3e f2 49 af 79 ad c7 07 1e a5 ce c9 fc 37 3e 69 83 2c fd 8b c6 f8 5b af 4e 13 fd 8f a7 b2 f0 58 dc 0e 29 92 4a 73 d3 3c 55 2b 3b 96 95 e9 42 b1 d8 55 b4 2e 51 0a c8 26 b8 ed 34 c6 4e ce 59 93 f4 aa 7a 93 61 c6 55 29 e6 ad b8 67 83 db 8a 45 c9 fe 19 07 b7 de a6 3f 88 89 13 a7 ba a7 ac 1a 52 8e 42 60 cf b6 Data Ascii: Z[mmPTRH!kC7NJ\|]/>gm]<?raoh$)$}M]_kl:[Jv#\|\8'_+n_Oe) tHQ>Iy7>i,[NX)Js<U+;BU.Q&4NYzaU)gE?RB`
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 05 22 aa 6a 20 e6 53 06 33 8a d0 b9 32 27 b9 a3 a2 25 0f 59 a5 f2 24 c9 13 f1 57 77 40 dc 0c e7 b5 66 f8 61 44 69 c5 3f e5 74 f3 57 9c 58 da 64 f1 54 c9 be a6 0d 50 6b 52 4a 48 f6 a0 2e 22 08 9f b5 25 6e 92 ac a7 e9 41 2a 19 80 07 f7 a9 20 7a 9d 8c 0e 9d e9 66 e0 f0 4c f7 a1 f3 01 f5 1e 83 06 80 a2 64 84 f3 40 0f 6d e5 39 e9 04 4c 72 68 f1 1b a0 18 aa c8 84 80 52 39 e2 2a c3 6e 02 99 31 8e 28 00 c1 27 27 34 69 4c 24 24 72 a3 c4 d2 c2 b3 44 85 00 7d 27 9f 7e b4 ae 23 3a a0 88 8e 62 81 69 48 3c 08 f9 a3 29 dc 64 ff 00 b5 40 48 9c 99 1d bb d4 ad 85 03 ca 99 24 74 e2 ba 36 e4 09 9e f4 c0 80 15 09 48 c8 c9 a8 20 46 dc 8e bc 50 9d 8a d1 2d 2c a2 08 04 75 35 6d a7 02 91 93 33 dc d5 2e 00 1c cf 4a 36 d4 5b 27 12 3a d4 f2 29 71 51 26 07 3c 50 38 25 46 00 a0 0e 6e Data Ascii: "j S32'%Y$Ww@faDi?tWXdTPkRJH."%nA* zfLd@m9LrhR9*n1(''4iL$$rD}'~#:biH<)d@H$t6H FP-,u5m3.J6[':)qQ&<P8%Fn
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 7c 92 fb ee ea 32 e3 88 84 c2 7d 29 f7 8f e9 57 d4 41 4c 9c d2 96 a5 64 cf 4a 64 88 eb 69 6c 45 8d ba 2c ed 51 6e 09 56 d1 ea 59 fe 65 75 26 98 5f 49 51 4a 56 99 1c 8e d5 56 eb 52 66 de 41 5c 94 e0 a4 0c 9a a8 db 97 07 57 4a da 69 3b 5c 6e 56 67 29 4f 73 3d 6a 69 b0 57 c9 a8 e1 43 89 da b0 0f 5c a6 69 6b 70 98 91 31 ef 50 56 24 83 24 c6 69 57 0a 90 00 92 24 13 9a 91 06 17 63 2a 81 42 5e c1 8e 9e d4 b5 95 12 7d 22 3a 19 cd 2d 4b 5a 56 4e 02 47 06 79 a1 2b 01 e1 7e ad ca 14 cd e2 3d 33 f1 15 5c ac 6d 20 28 71 5c 97 3d 01 25 59 a9 e9 62 bd cf 9f b6 90 91 b6 49 03 da 8f 6c 8c 7f 5a 80 90 ae 49 fb d4 fe 88 03 3d eb b6 79 97 b9 c7 72 44 cf d8 d4 a5 44 e7 b8 a8 24 90 09 ff 00 37 6a ed d1 8a 00 82 77 19 f8 a2 a8 0a 11 5c 48 3c 50 00 ad 42 67 da b9 b2 a2 73 da b8 Data Ascii: \|2})WALdJdilE,QnVYeu&_IQJVVRfA\WJi;\nVg)Os=jiWC\ikp1PV$$iW$c*B^}":-KZVNGy+~=3\m (q\=%YbIlZI=yrDD$7jw\H<PBgs
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: c0 99 e9 4f d8 02 36 25 5c 7b d2 9d 93 29 8c fc 53 02 76 cc 6d 45 b2 95 13 1c d0 df cb 96 69 27 8d 98 ab 1a 8a 44 10 4e 7d a9 2b 46 ed 35 27 e7 1f 5a b2 cb 17 26 ef 83 5c f3 34 3b 64 a8 fe 94 94 fb e0 9a db 56 33 9a c2 f0 6c a7 49 48 29 88 52 88 13 ef 5b 7b 94 ac c5 65 92 a9 10 f9 2b 5d 99 06 0c 63 26 b3 ae 41 23 d2 20 11 15 a4 f4 29 24 88 eb 15 9f 72 98 99 f9 a7 80 19 ef 8f 58 20 62 84 03 11 1c d3 1c 48 51 13 13 de 85 48 da 9f a5 5a 9a a0 14 49 42 f7 4c 76 8a d1 d3 df f3 53 0a 39 02 b3 dc 19 89 ef d6 9d a5 28 a5 e2 9c fd 45 12 49 c4 0d 74 11 d6 b9 70 99 31 d3 a9 a1 41 00 49 3f 4a 93 ea 56 6a 92 b2 77 28 e4 00 2b 89 57 71 f6 a8 50 f7 8a e0 85 0e a0 d0 04 85 10 a1 d6 7a 53 1b 5e 27 3e f3 49 20 cc c4 45 1b 72 48 9c 50 05 a4 2f 6f 34 69 59 88 02 ab a0 89 13 Data Ascii: O6%\{)SvmEi'DN}+F5'Z&\4;dV3lIH)R[{e+]c&A# )$rX bHQHZIBLvS9(EItp1AI?JVjw(+WqPzS^'>I ErHP/o4iY
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 0a 32 3f 7a b7 71 6b e6 0e d1 91 8e 2b 35 f4 a9 87 36 2c 9e 69 93 b2 1a b1 ea 00 83 fb 8a 4d c8 25 1e 6a 9b 33 bc 85 2e 79 c0 e9 fd ea 12 f8 02 4a a3 a7 15 cc a5 17 6f a6 cc a6 7c d5 2a 14 06 52 76 98 3f 03 98 a9 64 c1 6f 45 2b 86 a4 e7 ed 54 1f 48 48 04 03 ff 00 71 24 44 cf 4f a4 56 8b de 62 5d 71 87 0a 77 b4 b2 85 c1 c4 f3 3f 51 54 9e 10 a2 b0 91 90 47 a9 33 13 d6 38 9a b0 65 69 d1 4d 40 aa 49 4c 18 ef 42 a5 89 e7 8e e6 98 a6 94 a0 a0 d9 c2 1b 95 6e 30 7e 94 80 95 83 00 92 3e 6a c4 ec 7a 2e e9 ef 21 b3 c8 9e 86 b5 5a 5a 16 99 44 f0 39 3d 7f d2 bc fb 68 5a 56 0c 91 5b 56 0a 0a 40 f4 f0 33 55 c9 57 02 34 58 29 1c ed a8 0d a0 9f d3 46 20 e3 6f cd 12 50 d9 1d 29 7a 98 a2 c3 69 41 c0 a9 54 47 e9 e0 f4 a3 f2 81 26 07 5e 3b d7 79 39 92 73 50 dd 80 b2 a2 44 0c Data Ascii: 2?zqk+56,iM%j3.yJo\|*Rv?doE+THHq$DOVb]qw?QTG38eiM@ILBn0~>jz.!ZZD9=hZV[V@3UW4X)F oP)ziATG&^;y9sPD
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: f4 56 3c 4d e1 e5 58 bd a3 a2 f5 c6 1e 42 db 69 77 05 b1 01 43 32 32 23 33 1c 8a f9 6e 8f 57 93 c3 3c 47 aa 3b 53 a7 b6 f5 df 93 eb 1a ad 3e 3d 76 8e 9f 96 c7 c5 75 3d 42 c7 ff 00 dd 5b 8c de b8 da ae 74 bd 75 29 43 8e b8 b2 a4 a1 66 61 1b 4c 13 fa 89 dc 23 68 3d 62 83 44 bc 6d d1 bc 39 32 91 0a 07 9a f5 7a df 84 ed 9d b6 d6 75 7d 33 49 6e cb 41 be de c3 f6 a9 48 2e b4 94 2f 68 7b 64 c2 8a 54 24 67 20 82 47 35 8b ac 7e 0f ea df 87 cf bf a8 d8 dc b8 fe 90 86 d0 a4 5c ad 69 50 40 30 09 54 44 49 50 22 24 41 af 73 e1 fe 2d a2 c1 91 ab f7 72 37 25 e8 dd 75 45 fa a7 cf c6 cf 2b ab f0 fd 56 48 26 d6 f0 49 7c 52 ba 7f 34 5a 61 c0 15 13 34 6b 58 22 00 91 54 2c ae 8c 96 dc 80 a4 ab 69 4c cc 11 de ad 95 ce 12 a1 f7 af 53 19 29 2b 5c 1e 7a 58 dc 5d 33 c9 78 b2 e5 5e Data Ascii: V<MXBiwC22#3nW<G;S>=vu=B[tu)CfaL#h=bDm92zu}3InAH./h{dT$g G5~\iP@0TDIP"$As-r7%uE+VH&I\|R4Za4kX"T,iLS)+\zX]3x^
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 49 31 83 8a 88 1f a7 da a5 44 a4 00 3b 75 14 82 90 54 01 8f 9e 95 c1 40 89 93 8f 6a 82 94 9f fc d4 a5 20 7f e6 80 20 ac 12 40 3c 1e d5 c6 23 26 a5 49 1c 90 3e a2 96 40 98 1d 28 03 8c 15 48 ff 00 cd 2d c6 d4 73 1d 28 9c 31 9c d7 24 02 64 ff 00 5a 00 42 d0 48 82 22 82 08 30 a1 f6 cd 59 75 29 23 8a 41 03 99 39 f7 a7 5c 02 06 4f 02 7e d4 b7 5b 26 78 c9 ef 44 ad fb 88 07 a4 83 50 a5 92 0c c0 81 d6 a4 0a ea 00 09 f7 eb d2 84 a9 20 6e 3f 7a 37 92 52 98 27 1d e8 21 39 00 62 78 9a 78 f0 49 c4 24 89 c7 1d ea 50 32 09 ef 5c 91 9f bd 1a 3d 23 68 f9 e2 a4 80 d0 84 1e 0f 4e 28 d2 89 27 74 62 b9 b4 7f 32 a2 4f 34 c4 24 10 41 eb ef 48 db 65 64 04 ce 07 d7 14 49 40 c0 c1 9a 92 99 89 9a 30 91 fa be 28 6e c0 80 80 32 a0 0f 58 14 69 03 84 01 34 49 48 03 9e 98 15 c1 b2 08 32 Data Ascii: I1D;uT@j @<#&I>@(H-s(1$dZBH"0Yu)#A9\O~[&xDP n?z7R'!9bxxI$P2\=#hN('tb2O4$AHedI@0(n2Xi4IH2
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 40 33 f6 a6 a4 19 dd 02 a2 85 27 68 22 7d b9 8a 5a d5 e5 2a 54 38 e9 34 6f 3e 90 4a 82 63 77 00 74 aa 8f b8 b7 56 63 39 a1 2b 27 86 02 ef de 6c 9f 29 24 f5 83 c5 50 d5 6c b4 fd 71 a5 59 5d 0f ca ae e5 10 66 42 a2 7f 52 48 eb da ae 6c 27 f9 33 de 7f 6a 15 a6 42 43 a8 0a 00 e0 2c 48 4f de a5 c7 62 e8 4d 45 d9 a3 f8 63 e2 c7 1f 73 ff 00 4d 6b 6e 14 ea 16 48 d8 a2 e1 cd c3 63 f4 bb 8e a4 73 ef 5f 44 b7 4a 5d 6f 6a 81 ce 62 be 33 a9 35 a8 59 ad bd 63 47 1f fb 8b 57 37 b5 22 7d 24 ca 9b 24 f2 9c 63 a8 3f 02 be 9b e0 1f 19 69 5e 34 d1 3f c4 f4 a5 29 05 a7 0b 57 2c 3a 21 c6 1c 19 d8 a1 de 33 23 04 66 b0 e5 52 8c a9 f1 db ef ee c9 cf 8a 32 8f b4 87 cd 79 7f 83 45 fd 3c bd 70 10 88 0b da 76 ff 00 dc 41 e3 fd fd a8 74 eb 9b 9b 2d 49 5a be 92 80 8b e2 94 8b a4 79 73 Data Ascii: @3'h"}Z*T84o>JcwtVc9+'l)$PlqY]fBRHl'3jBC,HObMEcsMknHcs_DJ]ojb35YcGW7"}$$c?i^4?)W,:!3#fR2yE<pvAt-IZys
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 6a 8a 44 a9 79 84 e9 49 4c f6 eb 35 9f 7a 1b 58 36 ae fe 85 77 1c 55 d5 09 49 04 9e 3b d5 6b d6 12 f2 54 3a f4 34 d1 d9 89 27 6b 73 e4 fa cf e6 7f 07 bc 7a df 8c ed 12 a5 69 97 60 5b ea 8c 05 60 b4 4e 17 9e 76 c9 3f 12 2a cf 8e f4 4b 67 df 71 3a 63 ad fe 5e e4 07 ed 14 82 00 52 0e 53 0a fe 6e 63 ea 2b d7 78 97 44 b4 d7 b4 d7 74 9d 49 80 a4 ad 04 49 1c 8f f5 af 9b 78 3a e6 f3 45 d4 1d fc 1f f1 18 42 9c 40 5b de 19 b8 58 f4 a9 a8 f5 30 0f b6 4a 47 c8 ed 55 f8 96 9a 7a 9c 0b 26 37 59 20 d3 5f 15 c7 d7 8f 89 db f0 2d 7c 70 67 e8 c9 f8 5a e9 97 ff 00 4b ff 00 fc 7f 4b 2b e9 6d bc cb 8e 5b 3e 7f 88 d9 85 14 90 47 de b5 ed 46 e3 02 0f 7a c3 bc 6a fb 44 d6 16 6f 02 94 87 15 ea 2a 8c 7b 62 b7 b4 90 d2 91 e6 36 26 47 7a ea 69 b3 c7 51 a7 8e 48 bb b5 bf c7 ba f9 33 Data Ascii: jDyIL5zX6wUI;kT:4'kszi`[`Nv?Kgq:c^RSnc+xDtIIx:EB@[X0JGUz&7Y _-\|pgZKK+m[>GFzjDo{b6&GziQH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49833	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:17 UTC	390	OUT	GET /Image/87ACC56B-2320-449E-A576-99DC53126C80 HTTP/1.1 Host: greatergivingcontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:17 UTC	175	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:17 GMT Content-Type: image/png Content-Length: 262144 Connection: close Cache-Control: public Server: Microsoft-IIS/10.0
2024-04-24 05:32:17 UTC	16209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 d6 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 01 02 03 0a ff c4 00 7d 10 00 01 03 03 02 03 05 03 03 0d 06 0e 06 14 07 11 01 00 02 03 04 05 11 06 07 12 21 31 08 09 13 41 51 14 22 61 32 71 81 0a 15 Data Ascii: JFIFCC"}!1AQ"a2q
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 99 71 e6 49 e6 df a5 75 14 af c1 2e c9 00 f2 70 76 72 54 d2 03 83 9a 0d d4 22 65 a5 af 3a 23 9a 5c d1 d7 a1 f3 e8 b8 31 39 dc f8 3a 00 33 9f 4f e4 51 34 f1 60 70 f1 67 38 27 03 a2 f7 74 40 8f a3 cf 9a b9 ce 16 3d c1 c4 a9 4c f4 ae 1c c8 23 2e c7 20 ad 5f 6b 7b 30 a9 db 8a 7b 9b 1a 78 a8 6e b1 92 ef 40 f6 b9 9f ca 42 bc d5 31 31 a3 8b 19 38 ea 15 13 be f6 33 7c da ab e5 14 6d e2 73 28 0c d1 90 33 97 46 43 f3 f9 01 58 9c 41 03 ed d4 19 98 20 6a 58 eb 78 81 71 f1 b2 cc 61 d9 9f b0 d7 e5 63 9d 83 db 7f 02 6c 7e 04 ab 81 dd 17 ad 8d cf 6a 75 36 81 9a 57 39 f6 7b eb 2a a1 6b 9d c9 b1 54 47 d0 0f e3 c4 f2 7e 2e 59 74 06 47 30 b5 bf dd 5f ae 46 9b ed 1d 3e 95 96 50 21 d4 56 29 a1 60 73 b0 0c b1 16 ca cc 7a 92 d0 ff 00 d6 b6 40 08 20 7f 9d 6b 4c 23 35 f6 9a 23 01 Data Ascii: qIu.pvrT"e:#\19:3OQ4`pg8't@=L#. _k{0{xn@B1183\|ms(3FCXA jXxqacl~ju6W9{*kTG~.YtG0_F>P!V)`sz@ kL#5#
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: 77 66 71 22 c4 66 75 9c 4e d6 1b 9d bc ae 16 d9 9a 99 94 8f 4d 6b e5 c5 a1 e8 00 37 d8 68 3b f8 71 f3 5e f0 44 de 6f 96 41 81 c8 0c 73 07 3f ab e7 51 71 53 90 d6 b1 ae c0 2e c8 6a f1 a7 0e 6b 3c 3c 0e 5c c1 f3 23 d1 46 b7 88 30 87 34 0c 9e 2c 35 4b 08 71 21 a7 fa b7 97 7d d6 10 bc 37 55 d5 ac 1c 7e 1b b0 5b 8c 90 07 45 2f bc 6a 8b 26 9f ad 8a dd 5b 53 28 a8 95 85 ec 86 08 5d 21 c0 1c dc 71 f2 7e 9c 65 4d 5c d6 e0 35 b9 f2 e2 20 75 54 65 3c 2d 35 97 5b b4 cf 71 e3 af 78 e3 73 b2 78 47 26 81 f0 f8 2b c9 69 26 c4 36 71 cb a6 bc fe 9f 3d 15 bb a3 5e e4 0b f2 e5 f5 e1 ef 55 25 06 a3 b5 5c 1d e1 53 dc 63 33 63 21 ae 18 24 0f 81 f3 f9 94 43 a7 04 e5 83 39 1c c9 3e 6a d8 ea 5b dd 63 24 22 82 d9 4c f7 44 43 84 d3 48 ec 35 dd 70 38 79 e5 50 f3 f6 80 d5 fb 6f 79 92 Data Ascii: wfq"fuNMk7h;q^DoAs?QqS.jk<<\#F04,5Kq!}7U~[E/j&[S(]!q~eM\5 uTe<-5[qxsxG&+i&6q=^U%\Sc3c!$C9>j[c$"LDCH5p8yPoy
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: f5 d0 9f 15 e7 87 a3 cf 97 c4 ad a1 4e 61 bb da 5f ec 55 4c 7c 75 54 c7 c1 95 8e e2 6b 83 9b c9 c0 8e a3 04 1c ac 35 7f 60 9d ee 13 3f 11 5a 5c 0b ce 08 b9 75 e7 d7 9b 54 c3 16 c8 cd cf 18 26 03 0b ad 9a f6 17 de cb 5f f4 7f 53 90 a6 b6 64 4d 45 0c 27 2d ae 6d 7b 66 bf ba ea c4 32 0f 87 cf c9 7a c7 4c 70 09 6f 5f 82 be b1 76 0c de b1 82 e8 2d 5f a4 47 f3 54 16 ac ec 95 b8 1a 0e d4 db ae a4 fa dc 1b 24 cd 82 9e 08 2b 83 e5 a8 95 c4 06 c7 1b 31 97 38 e7 a0 f2 c9 50 c7 d1 aa 50 9a 5e f8 4e 00 71 b1 5b 26 1e 23 a2 46 88 19 0e 61 a4 9d 80 21 43 f6 6d b4 d4 4d a7 6e 14 fc 20 47 7c d5 d6 1b 63 78 99 9e 71 d4 3a ad ee f9 83 62 19 3f 15 55 5c 67 8e e1 a1 6a ee ef 8c 39 f3 e9 4d 55 77 8c 02 47 fb 2a bd 94 ec 60 f5 27 a8 f5 ca 9d 58 b4 8b 74 55 8a 9b 4c d8 0b 25 ae Data Ascii: Na_UL\|uTk5`?Z\uT&_SdME'-m{f2zLpo_v-_GT$+18PP^Nq[&#Fa!CmMn G\|cxq:b?U\gj9MUwG*`'XtUL%
2024-04-24 05:32:17 UTC	16384	IN	Data Raw: b2 d3 7a d1 d7 6d 41 41 71 6d 4d 2b c6 90 bd d5 4d 2b 62 8d 8d 93 8d cd 89 bc d9 1f 1e 5c 01 ce 09 ca 82 d4 7b 09 7c db 98 f1 a8 2f f6 8a c7 41 28 8a 67 5b 2b 38 e4 83 2f 24 02 df 94 e3 8f ba f2 e9 c9 5d 8d 33 a2 b4 7e aa 7d 1e 96 da cb 7d 65 fe de ca 98 ea e4 a8 92 57 47 ee bb 9b a3 aa 32 34 0e 00 78 8b 4b 07 99 0a ea a7 56 87 92 1c c4 38 a7 aa 3a dc 0b 00 5a 41 b9 79 b5 af a0 ca 6d 98 5f 7e 16 92 12 2d 11 5f 05 cc 19 c6 9a 9d 6c 74 b0 02 f7 e2 6f c0 db 65 2f 97 4e 6a 2b c6 d7 be af 56 e8 4a 46 ea 06 d1 d2 91 35 2d 03 a0 a9 8a 9a 26 90 c7 c8 c6 0e 02 1e dc fb dd 4e 01 56 f6 3c 3d b9 6f 31 f0 3d 42 c9 9b 56 97 be 58 22 a8 b8 59 dd 14 fc 72 be dd 1b 68 a7 a8 95 a6 27 38 70 b3 de fb 98 c6 47 0f 3c b7 3c d5 80 d7 fa 46 af 44 6b 1b 86 98 a9 39 f6 69 cf 86 ff Data Ascii: zmAAqmM+M+b\{\|/A(g[+8/$]3~}}eWG24xKV8:ZAym_~-_ltoe/Nj+VJF5-&NV<=o1=BVX"Yrh'8pG<<FDk9i
2024-04-24 05:32:18 UTC	16384	IN	Data Raw: 7e fd dd fe 1b 0f bc b2 82 24 39 09 61 36 d0 33 1d 20 83 c0 03 67 45 23 9d c6 56 7f 8a e7 76 29 05 b3 49 d9 2c 36 e8 2d 11 db 59 4f 4d 4c de 18 69 a2 e8 c1 9c 90 3d 32 79 9c 79 a9 dd 2d fe d7 66 85 91 43 48 c6 1c e1 be 1b 7d f7 e4 8c 03 e6 ee 7d 02 98 56 d2 50 36 8d d5 57 26 12 31 c8 01 e6 7a 7c ea a7 d8 ee ca f7 fb ce a9 93 59 6e 73 df 15 0c 32 36 5b 25 1d 35 41 64 ae 70 20 b6 67 16 fc 90 3c 9b e7 d5 61 71 1e 25 a4 61 7a 61 99 9b 70 00 0e c3 06 ee 3c 9a 3e 67 60 37 4c 3b 87 6a 78 a2 a0 61 42 b9 be af 79 bd 80 3c 49 e6 6d a0 dc 95 4c ea 1d 9a dd dd e1 b3 d2 5a 61 d2 33 d1 d9 6a ab 8b 2e 75 75 a0 33 c2 89 80 39 c5 d1 9f 7b 84 83 80 ec 63 3f 32 b9 bb 39 61 d3 5b 45 6d f6 6d 2f 69 a7 34 50 b5 d1 b0 3f 2e e3 6e 31 c4 09 e7 d3 a7 c3 e7 55 66 eb ea 4d 43 53 39 Data Ascii: ~$9a63 gE#Vv)I,6-YOMLi=2yy-fCH}}VP6W&1z\|Yns26[%5Adp g<aq%azap<>g`7L;jxaBy<ImLZa3j.uu39{c?29a[Emm/i4P?.n1UfMCS9
2024-04-24 05:32:18 UTC	16384	IN	Data Raw: 08 e5 98 78 af 2e ce 31 c0 ce 16 f3 e8 18 b1 2f 62 ed 35 dd bf fb c0 ae 5b d1 7b a5 74 ba 4b 4c 54 b2 a6 08 e5 8f dc 30 42 e2 da 2a 72 0f 2c bd c0 ca e1 e6 03 fd 57 d8 53 90 6a d8 c2 6a b7 31 ac bc a0 b8 e4 4b 74 60 1d ee 75 dc 3b d7 a8 f4 a9 ac 31 d1 6d 37 08 48 e9 3b 52 21 ae e6 d0 fb 3e 33 9d dc c6 59 87 bb c1 65 f7 62 2d 8b 3d 9f 7b 38 58 34 45 6d 38 65 d2 a2 0f ae 17 b3 e7 ed 73 80 e7 34 ff 00 10 70 c7 fd e7 c5 5d b7 72 66 57 2c 1c 23 24 a9 2e e3 eb 9b 46 db e8 2b ce bf be 3f 14 96 5b 64 f5 b3 8c e0 b9 b1 b0 bb 84 7c 49 00 0f 89 0b 58 4c cc 4c d5 27 df 19 fa c4 88 e2 7c dc 76 1f c9 74 45 3e 4a 43 0e d1 61 ca c2 ec c1 80 c0 d1 7e 0d 63 6d 73 e4 2e 4f 9a d6 cf 7b 7e f5 3b 70 3b 42 43 b6 96 da de 3b 7e 8d a2 10 4a d6 bb 2d 75 64 c0 49 29 f9 da df 0d 9f Data Ascii: x.1/b5[{tKLT0B*r,WSjj1Kt`u;1m7H;R!>3Yeb-={8X4Em8es4p]rfW,#$.F+?[d\|IXLL'\|vtE>JCa~cms.O{~;p;BC;~J-udI)
2024-04-24 05:32:18 UTC	16384	IN	Data Raw: d8 ce a9 ce 9b 47 6d f5 8a a3 53 6b e1 13 bd d7 d6 4f 11 86 8a 07 60 f5 6f 1b 64 c7 98 71 1e 4b e0 00 94 e0 b3 2f 4f df ad 1a a6 c5 47 a9 6c 15 cc aa a1 b8 52 c7 53 47 53 11 cb 65 89 ed 0e 63 c7 c0 b4 82 ad 37 66 3e d7 54 bd a3 f7 43 75 36 da 9f 40 cd 68 76 d8 ea f7 d8 e5 ac 96 e2 d9 c5 c4 b5 d2 37 c6 6b 43 1a 62 1f 6b cf 09 2e eb d7 92 b5 dd d2 bb a1 a8 a1 da ad 43 d9 13 73 2a 1c 75 5e cc df a5 b1 54 78 a4 71 4f 6f e3 71 a5 94 7a 8c 07 33 23 90 0d 67 32 a4 dd d7 c7 3d a9 3b 57 ff 00 76 09 bf c6 d4 a6 5b 5d 2e b3 45 dd 15 2f bb bb bb b7 9b 15 b7 97 3d d4 dd 3d 47 0d aa c7 68 83 c5 ad ac 9b 27 03 20 35 ad 6b 72 5e f7 38 86 b5 a0 12 49 00 2a 9d cf 58 3d df 50 ea 5b 9d b3 64 f4 66 ad ab 7c 5a 42 f3 bb 14 b1 6a 9c c8 5b 13 a1 0d 03 0f 39 00 00 c7 4a ef ef 73 Data Ascii: GmSkO`odqK/OGlRSGSec7f>TCu6@hv7kCbk.Csu^TxqOoqz3#g2=;Wv[].E/==Gh' 5kr^8IX=P[df\|ZBj[9Js
2024-04-24 05:32:18 UTC	16384	IN	Data Raw: 5e 5a 1d de f6 b4 0d c0 e0 ba f6 57 a2 ed 45 36 99 ae d5 3d a8 6f d6 df ae 37 69 e3 9a dd a7 ad b4 4c 8d b6 78 83 48 31 39 ed cf 1b 9d c8 90 4b b8 48 f9 47 38 17 5d a3 03 08 c6 f0 8c 7c 17 2b 5f cd cc 99 b9 97 46 c8 d6 df 83 45 9a 38 58 01 fe e7 72 49 5b c2 99 20 29 92 10 e5 44 47 c4 ca 3d 68 8e 2e 7b 8d ee 4b 9c 78 92 76 16 00 68 d0 00 00 11 11 5b 2b f4 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 58 e3 de ed fd 8c fd ed fe e7 77 0f f0 02 c8 e5 62 3b cd b4 06 b7 dd 5e c0 9b b7 b7 3b 6f a5 ab 6f 77 db ce 87 ad a5 b5 5a 6d f1 87 cd 57 3b 9a 03 63 60 24 65 c7 e7 57 32 64 36 6e 19 3b 66 1f 35 46 60 13 2e f0 39 1f 92 bc da 43 fa d4 b6 7f b9 f0 7f 8b 6a 98 a8 0d 2d 0c d4 da 6e df 4b 53 13 99 24 54 30 b6 46 38 73 6b 83 00 20 a8 f5 6e 77 55 46 c8 88 8b Data Ascii: ^ZWE6=o7iLxH19KHG8]\|+_FE8XrI[ )DG=h.{Kxvh[+DDDDDDDDDDDDDDDDDDXwb;^;oowZmW;c`$eW2d6n;f5F`.9Cj-nKS$T0F8sk nwUF
2024-04-24 05:32:18 UTC	16384	IN	Data Raw: 7c 4c 7c a0 39 ab 79 ae 36 e0 69 5b d1 14 b1 b8 41 58 c7 4b 06 1b f2 64 1f 2d bf e7 fa 56 79 93 cd 8c 03 6f ad 82 c7 b6 53 ab 79 77 8a a5 62 b2 c6 5c c7 96 1c 79 85 ed 25 ba 99 ad 24 00 00 ea a7 70 d3 c4 fa 41 c2 1b 90 30 47 a2 96 d6 c5 e2 c8 63 c6 07 f2 af b9 89 2a bb 48 d9 4a aa 69 a1 e1 3c 2d e5 eb 95 06 fa 66 b8 91 8e 4a 75 3d 18 64 5c 2d 6e 54 1b e9 71 26 00 e6 4a f6 1c be 90 a9 9b ad aa 46 3c 4f 17 2c 1f 21 d5 75 b3 c5 51 40 d9 1c c9 0b 5e 5f c4 07 91 55 54 96 c8 ab 07 01 68 38 1c f0 14 9e b6 d6 fa 62 f0 d6 13 cb 90 ea aa 88 99 85 8a a5 d4 80 ec c1 54 9a 63 52 37 c1 c7 18 0f 04 71 05 3f a9 d4 8d 10 0c cc 41 03 a6 55 98 83 58 8b 45 cc c5 54 1e 1a d3 c2 f2 47 4f 8a ae 74 fd ce 96 eb 47 f5 c6 5a 81 e1 b4 13 92 ee 58 f9 d5 28 d0 32 0c c7 65 ee 1c 56 c5 Data Ascii: \|L\|9y6i[AXKd-VyoSywb\y%$pA0Gc*HJi<-fJu=d\-nTq&JF<O,!uQ@^_UTh8bTcR7q?AUXETGOtGZX(2eV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49834	52.137.90.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:17 UTC	770	OUT	GET /Resources/Shared/scripts/widgets.js?_=1713936733935 HTTP/1.1 Host: overlakehf.ejoinme.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .ASPXANONYMOUS=hAVywGg0NTxtDkpPuQkghMadQGBs1CcQXIud9bmKe6cdyFVdQFbrQhJRhjbY3e6eeZKex-V7aubiXAL_s17vKrbVZsVRjyM5OZlVYyKw41eQ5Xi50; ASP.NET_SessionId=yh0qglepfwlw5poydgyxaou5; language=en-US; __RequestVerificationToken=ge2PliDCd_XyCsxnXxupO5LmWBcHce_2gJISjQGXT4uuxqIFemvFh8f0-VV5VwHrBiUGSA2; _ga=GA1.2.1721714103.1713936719; _gid=GA1.2.1856786430.1713936719; _gat=1
2024-04-24 05:32:17 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 05:32:17 GMT Content-Type: application/javascript Content-Length: 11494 Connection: close Cache-Control: public,max-age=7776000 Last-Modified: Wed, 08 Mar 2023 18:05:16 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: fullscreen=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=()
2024-04-24 05:32:17 UTC	11494	IN	Data Raw: 2f 2a 0d 0a 44 6f 74 4e 65 74 4e 75 6b 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6f 74 6e 65 74 6e 75 6b 65 2e 63 6f 6d 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 37 0d 0a 62 79 20 44 6f 74 4e 65 74 4e 75 6b 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 20 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 0d 0a 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c Data Ascii: /*DotNetNuke - http://www.dotnetnuke.comCopyright (c) 2002-2007by DotNetNuke Corporation Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49836	104.244.42.65	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:19 UTC	645	OUT	GET /OverlakeHMC HTTP/1.1 Host: twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:20 UTC	5608	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:20 GMT perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_p set-cookie: guest_id_marketing=v1%3A171393674004282413; Max-Age=63072000; Expires=Fri, 24 Apr 2026 05:32:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171393674004282413; Max-Age=63072000; Expires=Fri, 24 Apr 2026 05:32:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_5MYWA3dE5lF94/qGKUq2Nw=="; Max-Age=63072000; Expires=Fri, 24 Apr 2026 05:32:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171393674004282413; Max-Age=63072000; Expires=Fri, 24 Apr 2026 05:32:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: ct0=; Max-Age=-1713936739; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax content-type: text/html; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:20 GMT x-frame-options: DENY x-transaction-id: 1d7e6d060b80ae84 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://api.x.ai https://api.x.com https://.pscp.tv https://.video.pscp.tv https://.twimg.com https://api.twitter.com https://api.x.com https://api-stream.twitter.com https://api-stream.x.com https://ads-api.twitter.com https://ads-api.x.com https://aa.twitter.com https://aa.x.com https://caps.twitter.com https://caps.x.com https://pay.twitter.com https://pay.x.com https://sentry.io https://ton.twitter.com https://ton.x.com https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://twitter.com https://x.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://accounts.google.com/gsi/status https://accounts.google.com/gsi/log https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net https://media.riffsy.com https://.giphy.com https://media.tenor.com https://c.tenor.com https://ads-twitter.com https://analytics.twitter.com https://analytics.x.com ; default-src 'self'; form-action 'self' https://twitter.com https://.twitter.com https://x.com https://.x.com https://localhost.twitter.com:3443 https://localhost.x.com:3443; font-src 'self' https://.twimg.com; frame-src 'self' https://twitter.com https://x.com https://mobile.twitter.com https://mobile.x.com https://pay.twitter.com https://pay.x.com https://cards-frame.twitter.com https://accounts.google.com/ https://client-api.arkoselabs.com/ https://iframe.arkoselabs.com/ https://vaultjs.apideck.com/ https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; img-src 'self' blob: data: https://.cdn.twitter.com https://.cdn.x.com https://ton.twitter.com https://ton.x.com https://.twimg.com https://analytics.twitter.com https://analytics.x.com https://cm.g.doubleclick.net https://www.google-analytics.com https://maps.googleapis.com https://www.periscope.tv https://www.pscp.tv https://ads-twitter.com https://ads-api.twitter.com https://ads-api.x.com https://media.riffsy.com https://.giphy.com https://media.tenor.com https://c.tenor.com https://.pscp.tv https://.periscope.tv https://prod-periscope-profile.s3-us-west-2.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://scontent-sea1-1.xx.fbcdn.net https://.googleusercontent.com https://t.co/1/i/adsct; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://x.com https://.twimg.com https://.vine.co https://.pscp.tv https://.video.pscp.tv https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://.twimg.com https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://client-api.arkoselabs.com/ https://www.google-analytics.com https://twitter.com https://x.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://static.ads-twitter.com 'nonce-NDg3YzViNDgtYWU3ZS00MDA2LWEyZjUtMDU1ZjU0MDUxMDI3'; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false strict-transport-security: max-age=631138519 cross-origin-opener-policy: same-origin-allow-popups cross-origin-embedder-policy: unsafe-none x-response-time: 25 x-connection-hash: 300203cce54260c39b0326abf37e31366752178eba3f06c447a54d45fdf7e2da connection: close transfer-encoding: chunked
2024-04-24 05:32:20 UTC	717	IN	Data Raw: 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 31 61 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 38 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 37 38 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 2f 3e 0d 0a 36 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 61 Data Ascii: f<!DOCTYPE html>1a<html dir="ltr" lang="en">6<head>18<meta charset="utf-8" />78<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0,viewport-fit=cover" />62<link rel="preconnect" href="//a
2024-04-24 05:32:20 UTC	3006	IN	Data Raw: 36 36 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 76 69 64 65 6f 2e 74 77 69 6d 67 2e 63 6f 6d 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 76 69 64 65 6f 2e 74 77 69 6d 67 2e 63 6f 6d 22 20 2f 3e 0d 0a 62 64 0d 0a 3c 6c 69 6e 6b 20 6e 6f 6e 63 65 3d 22 4e 44 67 33 59 7a 56 69 4e 44 67 74 59 57 55 33 5a 53 30 30 4d 44 41 32 4c 57 45 79 5a 6a 55 74 4d 44 55 31 5a 6a 55 30 4d 44 55 78 4d 44 49 33 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 72 65 Data Ascii: 66<link rel="preconnect" href="//video.twimg.com" /><link rel="dns-prefetch" href="//video.twimg.com" />bd<link nonce="NDg3YzViNDgtYWU3ZS00MDA2LWEyZjUtMDU1ZjU0MDUxMDI3" rel="preload" as="script" crossorigin="anonymous" href="https://abs.twimg.com/re
2024-04-24 05:32:20 UTC	11916	IN	Data Raw: 32 31 39 0d 0a 3c 73 74 79 6c 65 3e 0a 23 53 63 72 69 70 74 4c 6f 61 64 46 61 69 6c 75 72 65 20 62 75 74 74 6f 6e 20 3e 20 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 3a 68 6f 76 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 33 39 2c 20 34 34 2c 20 34 38 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 20 7b 0a 20 20 23 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 20 7d 0a 20 20 23 53 63 72 69 70 74 4c 6f 61 64 46 61 69 6c 75 72 65 20 73 70 61 6e 2c 20 23 70 6c 61 63 65 68 6f 6c 64 65 72 20 73 76 67 20 7b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 Data Ascii: 219<style>#ScriptLoadFailure button > [role=button]:hover { background-color: rgb(39, 44, 48) !important; }@media (prefers-color-scheme: dark) { #placeholder { background-color: #000000 } #ScriptLoadFailure span, #placeholder svg { color: #FFFFFF
2024-04-24 05:32:20 UTC	1337	IN	Data Raw: 33 31 37 0d 0a 0a 20 20 20 20 20 20 23 70 6c 61 63 65 68 6f 6c 64 65 72 2c 0a 20 20 20 20 20 20 23 72 65 61 63 74 2d 72 6f 6f 74 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 3c 69 6d 67 20 77 69 64 74 68 3d 22 34 36 22 20 68 65 69 67 68 74 3d 22 33 38 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 Data Ascii: 317 #placeholder, #react-root { display: none !important; } body { background-color: #FFF !important; } </style> <div class="errorContainer"> <img width="46" height="38" srcset="https://abs.twi
2024-04-24 05:32:20 UTC	2109	IN	Data Raw: 31 31 0d 0a 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0d 0a 38 31 66 0d 0a 3c 64 69 76 20 69 64 3d 22 72 65 61 63 74 2d 72 6f 6f 74 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 73 73 2d 31 37 35 6f 69 32 72 20 72 2d 31 33 61 77 67 74 30 20 72 2d 31 32 76 66 66 6b 76 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 73 73 2d 31 37 35 6f 69 32 72 20 72 2d 31 33 61 77 67 74 30 20 72 2d 31 32 76 66 66 6b 76 22 3e 3c 64 69 76 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4c 6f 61 64 69 6e 67 e2 80 a6 22 20 63 6c 61 73 73 3d 22 63 73 73 2d 31 37 35 6f 69 32 72 20 72 2d 31 34 6c 77 39 6f 74 20 72 2d 31 70 30 64 74 61 69 20 72 2d 7a 63 68 6c 6e 6a 20 72 2d 31 78 63 Data Ascii: 11</div></noscript>81f<div id="react-root" style="height:100%;display:flex;"><div class="css-175oi2r r-13awgt0 r-12vffkv"><div class="css-175oi2r r-13awgt0 r-12vffkv"><div aria-label="Loading" class="css-175oi2r r-14lw9ot r-1p0dtai r-zchlnj r-1xc
2024-04-24 05:32:20 UTC	4704	IN	Data Raw: 33 66 38 0d 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 69 64 3d 22 6c 6f 61 64 69 6e 67 2d 78 2d 61 6e 69 6d 2d 30 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 72 2d 31 70 30 64 74 61 69 20 72 2d 31 33 67 78 70 75 39 20 72 2d 34 71 74 71 70 39 20 72 2d 79 79 79 79 6f 6f 20 72 2d 77 79 36 31 78 66 20 72 2d 31 64 32 66 34 39 30 20 72 2d 61 34 70 63 30 20 72 2d 79 77 6a 65 35 31 20 72 2d 64 6e 6d 72 7a 73 20 72 2d 75 38 73 31 64 20 72 2d 7a 63 68 6c 6e 6a 20 72 2d 31 70 6c 63 72 75 69 20 72 2d 69 70 6d 35 61 66 20 72 2d 6c 72 76 69 62 72 20 72 2d 31 62 6c 6e 70 32 62 22 3e 3c 67 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 32 34 34 20 32 2e 32 35 68 33 2e 33 30 38 6c 2d 37 2e 32 32 37 20 Data Ascii: 3f8<svg viewBox="0 0 24 24" id="loading-x-anim-0" aria-hidden="true" class="r-1p0dtai r-13gxpu9 r-4qtqp9 r-yyyyoo r-wy61xf r-1d2f490 r-a4pc0 r-ywje51 r-dnmrzs r-u8s1d r-zchlnj r-1plcrui r-ipm5af r-lrvibr r-1blnp2b"><g><path d="M18.244 2.25h3.308l-7.227
2024-04-24 05:32:20 UTC	16384	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 44 67 33 59 7a 56 69 4e 44 67 74 59 57 55 33 5a 53 30 30 4d 44 41 32 4c 57 45 79 5a 6a 55 74 4d 44 55 31 5a 6a 55 30 4d 44 55 78 4d 44 49 33 22 3e 0d 0a 61 61 0d 0a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 67 75 65 73 74 5f 69 64 5f 6d 61 72 6b 65 74 69 6e 67 3d 76 31 25 33 41 31 37 31 33 39 33 36 37 34 30 30 34 32 38 32 34 31 33 3b 20 4d 61 78 2d 41 67 65 3d 36 33 30 37 32 30 30 30 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 34 20 41 70 72 20 32 30 32 36 20 30 35 3a 33 32 3a 32 30 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 74 77 69 74 74 65 72 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 22 3b 0d 0a 61 34 0d 0a 64 6f 63 75 Data Ascii: 41<script nonce="NDg3YzViNDgtYWU3ZS00MDA2LWEyZjUtMDU1ZjU0MDUxMDI3">aadocument.cookie="guest_id_marketing=v1%3A171393674004282413; Max-Age=63072000; Expires=Fri, 24 Apr 2026 05:32:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None";a4docu
2024-04-24 05:32:20 UTC	16384	IN	Data Raw: 3a 35 31 32 7d 2c 22 6d 65 64 69 61 5f 65 64 67 65 5f 74 6f 5f 65 64 67 65 5f 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 64 69 61 5f 76 69 73 69 62 69 6c 69 74 79 5f 74 72 65 61 74 6d 65 6e 74 73 5f 62 6c 75 72 72 65 64 5f 6d 65 64 69 61 5f 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 65 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 22 6e 65 74 77 6f 72 6b 5f 6c 61 79 65 72 5f 35 30 33 5f 62 61 63 6b 6f 66 66 5f 6d 6f 64 65 22 3a 7b 22 76 61 6c 75 65 22 3a 22 68 6f 73 74 22 7d 2c 22 6e 65 74 7a 64 67 5f 69 6e 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6f 73 74 73 5f 65 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 22 6e 65 74 7a 64 67 5f 69 6e 5f 73 70 Data Ascii: :512},"media_edge_to_edge_content_enabled":{"value":false},"media_visibility_treatments_blurred_media_interstitial_enabled":{"value":false},"network_layer_503_backoff_mode":{"value":"host"},"netzdg_in_loggedout_posts_enabled":{"value":false},"netzdg_in_sp
2024-04-24 05:32:20 UTC	12725	IN	Data Raw: 65 5f 77 65 62 5f 76 65 72 69 66 69 65 64 5f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 5f 69 6e 76 6f 69 63 65 5f 65 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 76 65 72 69 66 69 65 64 5f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 5f 69 6e 76 6f 69 63 65 5f 75 70 64 61 74 65 5f 65 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 76 65 72 69 66 69 65 64 5f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 5f 70 61 69 64 5f 74 6f 5f 69 6e 76 6f 69 63 65 5f 65 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 76 69 64 65 6f 5f 70 63 6f 6d 70 6c 65 74 65 5f 65 6e Data Ascii: e_web_verified_organizations_invoice_enabled":{"value":false},"responsive_web_verified_organizations_invoice_update_enabled":{"value":false},"responsive_web_verified_organizations_paid_to_invoice_enabled":{"value":false},"responsive_web_video_pcomplete_en
2024-04-24 05:32:20 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 6d 22 2c 22 73 68 61 72 65 5f 74 77 65 65 74 5f 76 69 61 22 2c 22 76 69 65 77 5f 68 69 64 64 65 6e 5f 72 65 70 6c 69 65 73 22 2c 22 76 69 65 77 5f 74 77 65 65 74 5f 61 63 74 69 76 69 74 79 22 2c 22 76 6f 74 65 5f 6f 6e 5f 70 6f 6c 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 5d 7d 2c 22 74 77 65 65 74 5f 6c 69 6d 69 74 65 64 5f 61 63 74 69 6f 6e 73 5f 63 6f 6e 66 69 67 5f 63 6f 6d 6d 75 6e 69 74 79 5f 74 77 65 65 74 5f 68 69 64 64 65 6e 22 3a 7b 22 76 61 6c 75 65 22 3a 5b 22 61 64 64 5f 74 6f 5f 62 6f 6f 6b 6d 61 72 6b 73 22 2c 22 61 64 64 5f 74 6f 5f 6d 6f 6d 65 6e 74 22 2c 22 65 6d 62 65 64 22 2c 22 66 6f 6c 6c 6f 77 22 2c 22 68 69 64 65 5f 63 6f 6d 6d 75 6e 69 74 79 5f 74 77 65 65 74 22 2c 22 6c 69 6b 65 22 2c 22 6c 69 73 74 73 5f 61 64 Data Ascii: 4000m","share_tweet_via","view_hidden_replies","view_tweet_activity","vote_on_poll","highlight"]},"tweet_limited_actions_config_community_tweet_hidden":{"value":["add_to_bookmarks","add_to_moment","embed","follow","hide_community_tweet","like","lists_ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49837	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:20 UTC	578	OUT	GET /responsive-web/client-web/vendor.6c559eba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:21 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143669 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:21 GMT Etag: "ZQCLB546VKBYuB3OfSnDCA==+ident" expires: Thu, 24 Apr 2025 05:32:21 GMT Last-Modified: Mon, 22 Apr 2024 13:31:45 GMT perf: 7402827104 Server: ECAcc (lac/558B) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 1c8f02f8751e0a2b1ac7c81bb05973882b19edf06dfe22bfe1a8024f04300dd6 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 41 x-ton-expected-size: 684985 x-transaction-id: a39cf6066b9908cd Content-Length: 684985 Connection: close
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 5f 53 43 52 49 50 54 53 5f 4c 4f 41 44 45 44 5f 5f 2e 72 75 6e 74 69 6d 65 26 26 28 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 22 5d 2c 7b 38 36 37 30 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 7a 74 3a 28 29 3d 3e 48 2c 24 6a 3a 28 29 3d 3e 42 2c 49 30 3a 28 29 3d 3e 47 2c 76 39 3a 28 29 3d 3e 62 2c 6f 52 3a 28 29 3d 3e 71 7d 29 3b 76 61 72 20 6e 3d 72 28 34 33 31 30 30 29 2c 61 3d 72 28 34 31 31 31 30 29 2c 69 3d 72 28 Data Ascii: window.__SCRIPTS_LOADED__.runtime&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["vendor"],{86706:(e,t,r)=>{"use strict";r.d(t,{zt:()=>H,$j:()=>B,I0:()=>G,v9:()=>b,oR:()=>q});var n=r(43100),a=r(41110),i=r(
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 2c 74 29 3d 3e 74 3f 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 72 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 5b 72 5d 2c 6f 3d 74 5b 72 5d 3b 76 6f 69 64 20 30 3d 3d 3d 6f 3f 64 65 6c 65 74 65 20 65 5b 72 5d 3a 61 28 6e 29 3f 61 28 6f 29 3f 65 5b 72 5d 3d 6f 3a 65 5b 72 5d 3d 69 28 7b 7d 2c 6f 29 3a 61 28 6f 29 3f 65 5b 72 5d 3d 6f 3a 65 5b 72 5d 3d 69 28 6e 2c 6f 29 7d 29 29 2c 65 29 3a 65 7d 2c 31 32 30 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 35 31 32 37 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b Data Ascii: ,t)=>t?(Object.keys(t).forEach((r=>{const n=e[r],o=t[r];void 0===o?delete e[r]:a(n)?a(o)?e[r]=o:e[r]=i({},o):a(o)?e[r]=o:e[r]=i(n,o)})),e):e},1206:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});const n=function(){}},51276:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 61 74 68 43 68 61 72 73 7d 2b 2f 29 29 22 2c 7b 76 61 6c 69 64 47 65 6e 65 72 61 6c 55 72 6c 50 61 74 68 43 68 61 72 73 3a 6b 2c 76 61 6c 69 64 55 72 6c 42 61 6c 61 6e 63 65 64 50 61 72 65 6e 73 3a 52 2c 76 61 6c 69 64 55 72 6c 50 61 74 68 45 6e 64 69 6e 67 43 68 61 72 73 3a 78 7d 2c 22 69 22 29 2c 43 3d 28 30 2c 61 2e 5a 29 28 2f 28 3f 3a 5b 5e 41 2d 5a 61 2d 7a 30 2d 39 40 ef bc a0 24 23 ef bc 83 23 7b 69 6e 76 61 6c 69 64 43 68 61 72 73 47 72 6f 75 70 7d 5d 7c 5b 23 7b 64 69 72 65 63 74 69 6f 6e 61 6c 4d 61 72 6b 65 72 73 47 72 6f 75 70 7d 5d 7c 5e 29 2f 2c 7b 69 6e 76 61 6c 69 64 43 68 61 72 73 47 72 6f 75 70 3a 66 2e 5a 2c 64 69 72 65 63 74 69 6f 6e 61 6c 4d 61 72 6b 65 72 73 47 72 6f 75 70 3a 64 7d 29 2c 50 3d 2f 5b 61 2d 7a 30 2d 39 21 3f 5c 2a 27 Data Ascii: athChars}+/))",{validGeneralUrlPathChars:k,validUrlBalancedParens:R,validUrlPathEndingChars:x},"i"),C=(0,a.Z)(/(?:[^A-Za-z0-9@$##{invalidCharsGroup}]\|[#{directionalMarkersGroup}]\|^)/,{invalidCharsGroup:f.Z,directionalMarkersGroup:d}),P=/[a-z0-9!?\*'
2024-04-24 05:32:21 UTC	3	IN	Data Raw: 2c 7b 62 Data Ascii: ,{b
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 6d 70 4c 65 74 74 65 72 41 6e 64 4d 61 72 6b 73 3a 6f 2c 62 6d 70 4e 75 6d 65 72 61 6c 73 3a 63 2c 68 61 73 68 74 61 67 53 70 65 63 69 61 6c 43 68 61 72 73 3a 64 2c 6e 6f 6e 42 6d 70 43 6f 64 65 50 61 69 72 73 3a 75 2e 5a 2c 61 73 74 72 61 6c 4c 65 74 74 65 72 41 6e 64 4d 61 72 6b 73 3a 69 2c 61 73 74 72 61 6c 4e 75 6d 65 72 61 6c 73 3a 6c 7d 29 2c 70 3d 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2c 68 3d 28 30 2c 6e 2e 5a 29 28 2f 28 3f 3a 5e 7c 5c 75 46 45 30 45 7c 5c 75 46 45 30 46 7c 24 7c 28 3f 21 23 7b 68 61 73 68 74 61 67 41 6c 70 68 61 4e 75 6d 65 72 69 63 7d 7c 26 29 23 7b 63 6f 64 65 50 6f 69 6e 74 7d 29 2f 2c 7b 63 6f 64 65 50 6f Data Ascii: mpLetterAndMarks:o,bmpNumerals:c,hashtagSpecialChars:d,nonBmpCodePairs:u.Z,astralLetterAndMarks:i,astralNumerals:l}),p=/(?:[^\uD800-\uDFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF])/,h=(0,n.Z)(/(?:^\|\uFE0E\|\uFE0F\|$\|(?!#{hashtagAlphaNumeric}\|&)#{codePoint})/,{codePo
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 79 3a 30 2c 4e 61 6d 65 64 4e 6f 64 65 4d 61 70 3a 30 2c 4e 6f 64 65 4c 69 73 74 3a 31 2c 50 61 69 6e 74 52 65 71 75 65 73 74 4c 69 73 74 3a 30 2c 50 6c 75 67 69 6e 3a 30 2c 50 6c 75 67 69 6e 41 72 72 61 79 3a 30 2c 53 56 47 4c 65 6e 67 74 68 4c 69 73 74 3a 30 2c 53 56 47 4e 75 6d 62 65 72 4c 69 73 74 3a 30 2c 53 56 47 50 61 74 68 53 65 67 4c 69 73 74 3a 30 2c 53 56 47 50 6f 69 6e 74 4c 69 73 74 3a 30 2c 53 56 47 53 74 72 69 6e 67 4c 69 73 74 3a 30 2c 53 56 47 54 72 61 6e 73 66 6f 72 6d 4c 69 73 74 3a 30 2c 53 6f 75 72 63 65 42 75 66 66 65 72 4c 69 73 74 3a 30 2c 53 74 79 6c 65 53 68 65 65 74 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 43 75 65 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 3a 30 2c 54 6f 75 63 68 4c 69 73 74 3a 30 7d 7d Data Ascii: y:0,NamedNodeMap:0,NodeList:1,PaintRequestList:0,Plugin:0,PluginArray:0,SVGLengthList:0,SVGNumberList:0,SVGPathSegList:0,SVGPointList:0,SVGStringList:0,SVGTransformList:0,SourceBufferList:0,StyleSheetList:0,TextTrackCueList:0,TextTrackList:0,TouchList:0}}
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 64 3d 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 66 3d 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 2c 70 3d 22 77 72 69 74 61 62 6c 65 22 3b 74 2e 66 3d 6e 3f 69 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 6f 28 65 29 2c 74 3d 75 28 74 29 2c 6f 28 72 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 70 72 6f 74 6f 74 79 70 65 22 3d 3d 3d 74 26 26 22 76 61 6c 75 65 22 69 6e 20 72 26 26 70 20 69 6e 20 72 26 26 21 72 5b 70 5d 29 7b 76 61 72 20 6e 3d 63 28 65 2c 74 29 3b 6e 26 26 6e 5b 70 5d 26 26 28 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 2c 72 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 66 20 69 6e 20 72 3f 72 5b 66 5d 3a 6e 5b 66 5d 2c 65 6e 75 6d 65 72 Data Ascii: etOwnPropertyDescriptor,d="enumerable",f="configurable",p="writable";t.f=n?i?function(e,t,r){if(o(e),t=u(t),o(r),"function"==typeof e&&"prototype"===t&&"value"in r&&p in r&&!r[p]){var n=c(e,t);n&&n[p]&&(e[t]=r.value,r={configurable:f in r?r[f]:n[f],enumer
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 29 2c 74 68 69 73 26 26 6f 28 53 2c 74 68 69 73 29 26 26 63 28 6e 2c 74 68 69 73 2c 6b 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 79 26 26 66 28 6e 2c 61 72 67 75 6d 65 6e 74 73 5b 79 5d 29 2c 6e 7d 29 29 3b 69 66 28 6b 2e 70 72 6f 74 6f 74 79 70 65 3d 53 2c 22 45 72 72 6f 72 22 21 3d 3d 5f 3f 75 3f 75 28 6b 2c 77 29 3a 73 28 6b 2c 77 2c 7b 6e 61 6d 65 3a 21 30 7d 29 3a 68 26 26 6d 20 69 6e 20 45 26 26 28 6c 28 6b 2c 45 2c 6d 29 2c 6c 28 6b 2c 45 2c 22 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 22 29 29 2c 73 28 6b 2c 45 29 2c 21 76 29 74 72 79 7b 53 2e 6e 61 6d 65 21 3d 3d 5f 26 26 69 28 53 2c 22 6e 61 6d 65 22 2c 5f 29 2c 53 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6b 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6b 7d 7d 7d Data Ascii: ),this&&o(S,this)&&c(n,this,k),arguments.length>y&&f(n,arguments[y]),n}));if(k.prototype=S,"Error"!==_?u?u(k,w):s(k,w,{name:!0}):h&&m in E&&(l(k,E,m),l(k,E,"prepareStackTrace")),s(k,E),!v)try{S.name!==_&&i(S,"name",_),S.constructor=k}catch(e){}return k}}}
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 67 65 74 74 65 72 46 6f 72 28 22 55 52 4c 22 29 2c 78 3d 53 2e 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 54 3d 53 2e 67 65 74 53 74 61 74 65 2c 43 3d 75 2e 55 52 4c 2c 50 3d 75 2e 54 79 70 65 45 72 72 6f 72 2c 41 3d 75 2e 70 61 72 73 65 49 6e 74 2c 49 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 4f 3d 4d 61 74 68 2e 70 6f 77 2c 44 3d 6c 28 22 22 2e 63 68 61 72 41 74 29 2c 4e 3d 6c 28 2f 2e 2f 2e 65 78 65 63 29 2c 4c 3d 6c 28 5b 5d 2e 6a 6f 69 6e 29 2c 46 3d 6c 28 31 2e 2e 74 6f 53 74 72 69 6e 67 29 2c 4d 3d 6c 28 5b 5d 2e 70 6f 70 29 2c 6a 3d 6c 28 5b 5d 2e 70 75 73 68 29 2c 7a 3d 6c 28 22 22 2e 72 65 70 6c 61 63 65 29 2c 55 3d 6c 28 5b 5d 2e 73 68 69 66 74 29 2c 56 3d 6c 28 22 22 2e 73 70 6c 69 74 29 2c 42 3d 6c 28 22 22 2e 73 6c 69 63 65 29 2c 48 3d 6c 28 Data Ascii: getterFor("URL"),x=S.URLSearchParams,T=S.getState,C=u.URL,P=u.TypeError,A=u.parseInt,I=Math.floor,O=Math.pow,D=l("".charAt),N=l(/./.exec),L=l([].join),F=l(1..toString),M=l([].pop),j=l([].push),z=l("".replace),U=l([].shift),V=l("".split),B=l("".slice),H=l(
2024-04-24 05:32:21 UTC	5	IN	Data Raw: 7b 22 75 73 65 Data Ascii: {"use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49838	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:20 UTC	579	OUT	GET /responsive-web/client-web/i18n/en.0a146e9a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:21 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 360034 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:21 GMT Etag: "HJp+SCXgYBMvPdjmddo1cw==+ident" expires: Thu, 24 Apr 2025 05:32:21 GMT Last-Modified: Sat, 20 Apr 2024 01:19:52 GMT perf: 7402827104 Server: ECAcc (lac/55C3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: b14f132459d80ca2bd5b488f7cd26442225286acce4655d8d12685278cdc2388 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 35 x-ton-expected-size: 435355 x-transaction-id: 5b312965fe45f229 Content-Length: 435355 Connection: close
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 31 38 6e 2f 65 6e 22 5d 2c 7b 31 37 33 34 36 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 76 61 72 20 61 3d 6f 28 37 39 34 30 34 29 2e 5f 72 65 67 69 73 74 65 72 28 22 65 6e 22 2c 7b 67 65 74 20 65 6d 6f 6a 69 28 29 7b 72 65 74 75 72 6e 20 6f 2e 65 28 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 65 6e 22 29 2e 74 68 65 6e 28 6f 2e 74 2e 62 69 6e 64 28 6f 2c 32 30 37 34 37 2c 32 33 29 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 6f 29 7b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/en"],{17346:(e,t,o)=>{var a=o(79404)._register("en",{get emoji(){return o.e("i18n/emoji-en").then(o.t.bind(o,20747,23))}});function n(e,t,o){
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 70 70 73 20 61 6e 64 20 73 65 73 73 69 6f 6e 73 22 29 2c 61 28 22 61 31 65 38 65 36 38 32 22 2c 22 52 65 67 69 73 74 65 72 65 64 20 64 65 76 69 63 65 73 22 29 2c 61 28 22 68 31 61 62 66 62 63 65 22 2c 22 43 6f 6e 6e 65 63 74 65 64 20 61 63 63 6f 75 6e 74 73 22 29 2c 61 28 22 63 61 64 35 33 39 34 34 22 2c 22 50 72 69 76 61 63 79 20 61 6e 64 20 73 61 66 65 74 79 22 29 2c 61 28 22 65 39 30 38 39 30 33 61 22 2c 22 41 75 64 69 65 6e 63 65 20 61 6e 64 20 74 61 67 67 69 6e 67 22 29 2c 61 28 22 62 35 63 38 35 64 32 63 22 2c 22 50 72 6f 74 65 63 74 20 79 6f 75 72 20 70 6f 73 74 73 22 29 2c 61 28 22 66 35 36 64 31 30 38 65 22 2c 22 50 68 6f 74 6f 20 74 61 67 67 69 6e 67 22 29 2c 61 28 22 63 36 66 36 37 65 33 32 22 2c 22 59 6f 75 72 20 70 6f 73 74 73 22 29 2c 61 28 Data Ascii: pps and sessions"),a("a1e8e682","Registered devices"),a("h1abfbce","Connected accounts"),a("cad53944","Privacy and safety"),a("e908903a","Audience and tagging"),a("b5c85d2c","Protect your posts"),a("f56d108e","Photo tagging"),a("c6f67e32","Your posts"),a(
2024-04-24 05:32:21 UTC	2	IN	Data Raw: 70 69 Data Ascii: pi
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 63 73 2c 20 50 61 72 61 6c 79 6d 70 69 63 73 2c 20 65 74 63 2e 29 2e 22 29 2c 61 28 22 63 34 65 30 64 33 34 36 22 2c 22 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 73 70 6f 72 74 73 20 65 6e 74 69 74 79 22 29 2c 61 28 22 65 33 63 65 38 31 66 61 22 2c 22 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 73 70 6f 72 74 73 20 6c 65 61 67 75 65 73 2c 20 74 65 61 6d 73 2c 20 61 6e 64 20 67 6c 6f 62 61 6c 20 63 6f 6d 70 65 74 69 74 69 6f 6e 73 20 28 65 2e 67 2e 20 4f 6c 79 6d 70 69 63 73 2c 20 50 61 72 61 6c 79 6d 70 69 63 73 2c 20 65 74 63 2e 29 2e 22 29 2c 61 28 22 62 32 38 30 38 66 34 38 22 2c 22 49 6e 64 69 76 69 64 75 61 6c 20 69 6e 20 67 61 6d 69 6e 67 22 29 2c 61 28 22 64 62 37 62 33 35 35 38 22 2c 22 49 6e 64 69 76 69 64 75 61 6c 20 61 63 63 6f 75 6e 74 73 20 6f 66 20 Data Ascii: cs, Paralympics, etc.)."),a("c4e0d346","Professional sports entity"),a("e3ce81fa","Professional sports leagues, teams, and global competitions (e.g. Olympics, Paralympics, etc.)."),a("b2808f48","Individual in gaming"),a("db7b3558","Individual accounts of
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 2c 20 74 68 69 73 20 61 6c 6c 6f 77 73 20 58 20 74 6f 20 73 68 61 72 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 6f 73 65 20 70 61 72 74 6e 65 72 73 20 74 6f 20 68 65 6c 70 20 73 75 70 70 6f 72 74 20 72 75 6e 6e 69 6e 67 20 58 e2 80 99 73 20 62 75 73 69 6e 65 73 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6d 61 6b 69 6e 67 20 58 e2 80 99 73 20 6d 61 72 6b 65 74 69 6e 67 20 61 63 74 69 76 69 74 69 65 73 20 6f 6e 20 6f 74 68 65 72 20 73 69 74 65 73 20 61 6e 64 20 61 70 70 73 20 6d 6f 72 65 20 72 65 6c 65 76 61 6e 74 20 66 6f 72 20 79 6f 75 2e 22 29 2c 61 28 22 64 63 32 30 64 39 31 38 22 2c 22 50 65 72 73 6f 6e 61 6c 69 7a 65 20 62 61 73 65 64 20 6f 6e 20 70 6c 61 63 65 73 20 79 6f 75 e2 80 99 76 65 20 62 65 65 Data Ascii: , this allows X to share additional information with those partners to help support running Xs business, including making Xs marketing activities on other sites and apps more relevant for you."),a("dc20d918","Personalize based on places youve bee
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 65 20 63 6f 76 65 72 20 69 6d 61 67 65 22 29 2c 61 28 22 62 64 62 61 33 65 31 61 22 2c 22 54 75 72 6e 20 6f 6e 20 70 6f 73 74 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 29 2c 61 28 22 63 34 64 61 37 64 32 38 22 2c 22 54 75 72 6e 20 6f 66 66 20 70 6f 73 74 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 29 2c 61 28 22 6a 38 37 63 32 31 66 34 22 2c 22 4e 6f 74 69 66 79 22 29 2c 61 28 22 69 65 62 63 33 30 63 61 22 2c 22 54 75 72 6e 20 6f 66 66 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 29 2c 61 28 22 64 63 37 34 30 65 62 32 22 2c 22 59 6f 75 20 77 69 6c 6c 20 73 65 65 20 70 6f 73 74 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 61 63 63 6f 75 6e 74 20 69 6e 20 74 68 65 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 74 69 6d 65 6c Data Ascii: e cover image"),a("bdba3e1a","Turn on post notifications"),a("c4da7d28","Turn off post notifications"),a("j87c21f4","Notify"),a("iebc30ca","Turn off notifications"),a("dc740eb2","You will see post notifications from this account in the Notifications timel
2024-04-24 05:32:21 UTC	3	IN	Data Raw: 20 61 6e Data Ascii: an
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 79 20 63 6f 6e 74 61 63 74 73 20 79 6f 75 e2 80 99 76 65 20 70 72 65 76 69 6f 75 73 6c 79 20 75 70 6c 6f 61 64 65 64 20 61 6e 64 20 74 75 72 6e 73 20 6f 66 66 20 73 79 6e 63 69 6e 67 20 77 69 74 68 20 58 20 6f 6e 20 61 6c 6c 20 64 65 76 69 63 65 73 2e 20 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 73 20 74 61 6b 65 73 20 61 20 6c 69 74 74 6c 65 20 74 69 6d 65 2c 20 63 61 6e 6e 6f 74 20 62 65 20 75 6e 64 6f 6e 65 2c 20 61 6e 64 20 79 6f 75 20 6d 61 79 20 73 74 69 6c 6c 20 6e 6f 74 69 63 65 20 73 6f 6d 65 20 73 75 67 67 65 73 74 69 6f 6e 73 20 6f 6e 20 58 20 28 62 61 73 65 64 20 6f 6e 20 79 6f 75 72 20 63 6f 6e 74 61 63 74 73 29 20 69 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2e 22 29 2c 61 28 22 63 61 32 34 35 38 39 65 22 2c 22 Data Ascii: y contacts youve previously uploaded and turns off syncing with X on all devices. Please be aware that this takes a little time, cannot be undone, and you may still notice some suggestions on X (based on your contacts) in the meantime."),a("ca24589e","
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 65 20 63 68 6f 6f 73 65 20 75 70 20 74 6f 20 22 2b 65 2e 6d 61 78 4d 65 64 69 61 43 61 70 2b 22 20 70 68 6f 74 6f 73 2c 20 76 69 64 65 6f 73 2c 20 6f 72 20 47 49 46 73 2e 22 7d 29 29 2c 61 28 22 64 64 36 37 33 34 63 32 22 2c 22 52 65 61 64 20 6d 6f 72 65 22 29 2c 61 28 22 67 35 38 39 63 32 65 32 22 2c 22 43 68 6f 69 63 65 20 31 22 29 2c 61 28 22 61 31 65 36 63 33 61 32 22 2c 22 43 68 6f 69 63 65 20 32 22 29 2c 61 28 22 61 37 33 39 65 30 30 36 22 2c 22 43 68 6f 69 63 65 20 33 20 28 6f 70 74 69 6f 6e 61 6c 29 22 29 2c 61 28 22 64 38 39 61 35 62 39 32 22 2c 22 43 68 6f 69 63 65 20 34 20 28 6f 70 74 69 6f 6e 61 6c 29 22 29 2c 61 28 22 63 32 61 38 31 31 38 65 22 2c 22 52 65 6d 6f 76 65 20 70 6f 6c 6c 22 29 2c 61 28 22 61 38 65 64 65 31 64 65 22 2c 22 41 64 64 Data Ascii: e choose up to "+e.maxMediaCap+" photos, videos, or GIFs."})),a("dd6734c2","Read more"),a("g589c2e2","Choice 1"),a("a1e6c3a2","Choice 2"),a("a739e006","Choice 3 (optional)"),a("d89a5b92","Choice 4 (optional)"),a("c2a8118e","Remove poll"),a("a8ede1de","Add
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 29 2c 61 28 22 65 30 36 62 38 36 34 63 22 2c 22 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 e2 80 99 72 65 20 65 6e 6a 6f 79 69 6e 67 20 74 68 69 73 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 22 29 2c 61 28 22 61 30 37 38 66 66 37 30 22 2c 22 57 61 6e 74 20 74 6f 20 73 65 65 20 73 6f 6d 65 20 6d 6f 72 65 20 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 70 65 6f 70 6c 65 20 79 6f 75 20 69 6e 74 65 72 61 63 74 65 64 20 77 69 74 68 20 69 6e 20 74 68 69 73 20 74 68 72 65 61 64 3f 20 53 74 61 72 74 20 65 78 70 6c 6f 72 69 6e 67 20 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 6e 65 77 20 61 63 63 6f 75 6e 74 73 2e 22 29 2c 61 28 22 61 66 39 63 38 61 33 65 22 2c 22 4f 70 65 6e 20 61 70 70 22 29 2c 61 28 22 63 62 38 30 33 30 30 65 22 2c 22 53 6b 69 70 20 74 6f Data Ascii: ),a("e06b864c","It looks like youre enjoying this conversation"),a("a078ff70","Want to see some more content from the people you interacted with in this thread? Start exploring content from new accounts."),a("af9c8a3e","Open app"),a("cb80300e","Skip to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49839	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:20 UTC	576	OUT	GET /responsive-web/client-web/main.3e34201a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:21 UTC	777	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143669 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:21 GMT Etag: "nRUIYGIskm8b4Y5IHBRcWQ==+ident" expires: Thu, 24 Apr 2025 05:32:21 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55D8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a3ff51dbab6272733342732c43d859fd7cbd9ea73574cdabe30aeb439f74c85f x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 67 x-ton-expected-size: 2662193 x-transaction-id: d261128784d2bc86 Content-Length: 2662193 Connection: close
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 5f 53 43 52 49 50 54 53 5f 4c 4f 41 44 45 44 5f 5f 2e 76 65 6e 64 6f 72 26 26 28 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 61 69 6e 22 5d 2c 7b 32 36 37 33 38 3a 28 65 2c 64 2c 6e 29 3d 3e 7b 76 61 72 20 61 3d 6e 28 37 39 34 30 34 29 3b 61 2e 6c 6f 61 64 4c 61 6e 67 75 61 67 65 2e 72 65 67 69 73 74 65 72 43 68 75 6e 6b 4c 6f 61 64 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 33 31 38 39 33 29 28 60 2e 2f 24 7b 65 7d 60 29 7d 29 2c 5b 22 65 6e 22 2c 22 61 72 Data Ascii: window.__SCRIPTS_LOADED__.vendor&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["main"],{26738:(e,d,n)=>{var a=n(79404);a.loadLanguage.registerChunkLoader((function(e){return n(31893)(`./${e}`)}),["en","ar
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 69 74 68 5f 76 69 73 69 62 69 6c 69 74 79 5f 72 65 73 75 6c 74 73 5f 70 72 65 66 65 72 5f 67 71 6c 5f 6c 69 6d 69 74 65 64 5f 61 63 74 69 6f 6e 73 5f 70 6f 6c 69 63 79 5f 65 6e 61 62 6c 65 64 22 2c 22 74 77 65 65 74 5f 77 69 74 68 5f 76 69 73 69 62 69 6c 69 74 79 5f 72 65 73 75 6c 74 73 5f 70 72 65 66 65 72 5f 67 71 6c 5f 6d 65 64 69 61 5f 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 65 6e 61 62 6c 65 64 22 2c 22 72 77 65 62 5f 76 69 64 65 6f 5f 74 69 6d 65 73 74 61 6d 70 73 5f 65 6e 61 62 6c 65 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 5f 6e 6f 74 65 74 77 65 65 74 73 5f 72 69 63 68 5f 74 65 78 74 5f 72 65 61 64 5f 65 6e 61 62 6c 65 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 5f 6e 6f 74 65 74 77 65 65 74 73 5f 69 6e 6c 69 6e 65 5f 6d 65 64 69 61 5f 65 6e 61 62 6c 65 64 22 Data Ascii: ith_visibility_results_prefer_gql_limited_actions_policy_enabled","tweet_with_visibility_results_prefer_gql_media_interstitial_enabled","rweb_video_timestamps_enabled","longform_notetweets_rich_text_read_enabled","longform_notetweets_inline_media_enabled"
2024-04-24 05:32:21 UTC	2	IN	Data Raw: 22 2c Data Ascii: ",
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 22 67 72 61 70 68 71 6c 5f 69 73 5f 74 72 61 6e 73 6c 61 74 61 62 6c 65 5f 72 77 65 62 5f 74 77 65 65 74 5f 69 73 5f 74 72 61 6e 73 6c 61 74 61 62 6c 65 5f 65 6e 61 62 6c 65 64 22 2c 22 76 69 65 77 5f 63 6f 75 6e 74 73 5f 65 76 65 72 79 77 68 65 72 65 5f 61 70 69 5f 65 6e 61 62 6c 65 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 5f 6e 6f 74 65 74 77 65 65 74 73 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 74 77 69 74 74 65 72 5f 61 72 74 69 63 6c 65 5f 74 77 65 65 74 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 74 77 65 65 74 5f 61 77 61 72 64 73 5f 77 65 62 5f 74 69 70 70 69 6e 67 5f 65 6e 61 62 6c 65 64 22 2c 22 63 72 65 61 74 6f 72 5f 73 75 62 73 63 72 69 70 74 69 6f 6e Data Ascii: "graphql_is_translatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumption_enabled","tweet_awards_web_tipping_enabled","creator_subscription
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 72 61 6e 73 6c 61 74 61 62 6c 65 5f 72 77 65 62 5f 74 77 65 65 74 5f 69 73 5f 74 72 61 6e 73 6c 61 74 61 62 6c 65 5f 65 6e 61 62 6c 65 64 22 2c 22 76 69 65 77 5f 63 6f 75 6e 74 73 5f 65 76 65 72 79 77 68 65 72 65 5f 61 70 69 5f 65 6e 61 62 6c 65 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 5f 6e 6f 74 65 74 77 65 65 74 73 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 74 77 69 74 74 65 72 5f 61 72 74 69 63 6c 65 5f 74 77 65 65 74 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 74 77 65 65 74 5f 61 77 61 72 64 73 5f 77 65 62 5f 74 69 70 70 69 6e 67 5f 65 6e 61 62 6c 65 64 22 2c 22 63 72 65 61 74 6f 72 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5f 71 75 6f 74 65 5f 74 77 65 65 74 Data Ascii: ranslatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumption_enabled","tweet_awards_web_tipping_enabled","creator_subscriptions_quote_tweet
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 61 62 6c 65 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 5f 6e 6f 74 65 74 77 65 65 74 73 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 74 77 69 74 74 65 72 5f 61 72 74 69 63 6c 65 5f 74 77 65 65 74 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 74 77 65 65 74 5f 61 77 61 72 64 73 5f 77 65 62 5f 74 69 70 70 69 6e 67 5f 65 6e 61 62 6c 65 64 22 2c 22 63 72 65 61 74 6f 72 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5f 71 75 6f 74 65 5f 74 77 65 65 74 5f 70 72 65 76 69 65 77 5f 65 6e 61 62 6c 65 64 22 2c 22 66 72 65 65 64 6f 6d 5f 6f 66 5f 73 70 65 65 63 68 5f 6e 6f 74 5f 72 65 61 63 68 5f 66 65 74 63 68 5f 65 6e 61 62 6c 65 64 22 2c 22 73 74 61 6e 64 61 72 64 69 7a 65 64 5f 6e 75 Data Ascii: abled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumption_enabled","tweet_awards_web_tipping_enabled","creator_subscriptions_quote_tweet_preview_enabled","freedom_of_speech_not_reach_fetch_enabled","standardized_nu
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 74 68 41 75 78 69 6c 69 61 72 79 55 73 65 72 4c 61 62 65 6c 73 22 2c 22 77 69 74 68 41 72 74 69 63 6c 65 52 69 63 68 43 6f 6e 74 65 6e 74 53 74 61 74 65 22 2c 22 77 69 74 68 41 72 74 69 63 6c 65 50 6c 61 69 6e 54 65 78 74 22 5d 7d 7d 7d 2c 36 36 32 31 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 49 6d 77 4d 73 59 32 6e 62 6e 31 71 78 52 4e 63 55 4e 4c 32 44 41 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 55 73 65 72 54 77 65 65 74 73 41 6e 64 52 65 70 6c 69 65 73 22 2c 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 3a 22 71 75 65 72 79 22 2c 6d 65 74 61 64 61 74 61 3a 7b 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 5b 22 72 77 65 62 5f 74 69 70 6a 61 72 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 Data Ascii: thAuxiliaryUserLabels","withArticleRichContentState","withArticlePlainText"]}}},66214:e=>{e.exports={queryId:"ImwMsY2nbn1qxRNcUNL2DA",operationName:"UserTweetsAndReplies",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 64 61 74 61 3a 64 2c 68 65 61 64 65 72 73 3a 6e 7d 29 7d 7d 63 6f 6e 73 74 20 67 3d 28 7b 63 6c 69 65 6e 74 3a 65 2c 64 69 73 70 61 74 63 68 3a 64 2c 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 6e 7d 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 61 28 7b 6d 65 74 61 64 61 74 61 3a 65 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 64 2c 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 3a 6e 2c 71 75 65 72 79 3a 61 2c 71 75 65 72 79 49 64 3a 74 7d 2c 75 2c 73 3d 44 2c 63 29 7b 69 66 28 21 74 26 26 21 61 29 72 65 74 75 72 6e 28 30 2c 72 2e 5a 50 29 28 22 47 72 61 70 68 51 4c 3a 20 6f 70 65 72 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 73 70 65 63 69 66 79 20 6f 70 65 72 61 74 69 6f 6e 20 62 6f 64 79 20 6f 72 20 69 64 22 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 Data Ascii: data:d,headers:n})}}const g=({client:e,dispatch:d,featureSwitches:n})=>{function a({metadata:e,operationName:d,operationType:n,query:a,queryId:t},u,s=D,c){if(!t&&!a)return(0,r.ZP)("GraphQL: operation does not specify operation body or id"),Promise.reject(
2024-04-24 05:32:21 UTC	5	IN	Data Raw: 6f 6e 74 65 6e Data Ascii: onten
2024-04-24 05:32:21 UTC	16383	IN	Data Raw: 74 3a 21 31 2c 2e 2e 2e 28 30 2c 6c 2e 64 29 28 64 29 7d 2c 7a 28 22 53 75 62 73 63 72 69 62 65 64 22 29 29 2e 74 68 65 6e 28 48 29 2c 66 65 74 63 68 56 65 72 69 66 69 65 64 46 6f 6c 6c 6f 77 65 72 73 3a 28 7b 63 6f 75 6e 74 3a 6e 2c 63 75 72 73 6f 72 3a 61 2c 75 73 65 72 49 64 3a 72 7d 29 3d 3e 65 2e 67 72 61 70 68 51 4c 28 4d 28 29 2c 7b 75 73 65 72 49 64 3a 72 2c 63 6f 75 6e 74 3a 6e 2c 63 75 72 73 6f 72 3a 61 2c 69 6e 63 6c 75 64 65 50 72 6f 6d 6f 74 65 64 43 6f 6e 74 65 6e 74 3a 21 31 2c 2e 2e 2e 28 30 2c 6c 2e 64 29 28 64 29 7d 2c 7a 28 22 56 65 72 69 66 69 65 64 20 46 6f 6c 6c 6f 77 65 72 73 22 29 29 2e 74 68 65 6e 28 48 29 2c 66 65 74 63 68 56 69 65 77 65 72 54 65 61 6d 73 3a 28 29 3d 3e 65 2e 67 72 61 70 68 51 4c 46 75 6c 6c 52 65 73 70 6f 6e 73 Data Ascii: t:!1,...(0,l.d)(d)},z("Subscribed")).then(H),fetchVerifiedFollowers:({count:n,cursor:a,userId:r})=>e.graphQL(M(),{userId:r,count:n,cursor:a,includePromotedContent:!1,...(0,l.d)(d)},z("Verified Followers")).then(H),fetchViewerTeams:()=>e.graphQLFullRespons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49846	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:23 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:23 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984554 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:23 GMT Etag: "/97bHEL6drI+B0LP8o6YPA==+ident" expires: Thu, 24 Apr 2025 05:32:23 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55D9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e50c8facc3273364c793d1b9be3b6ed2e91f06b2c62c9c16b4ca7ae120fa4720 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 3407 x-transaction-id: 9874eb4b36ca842e Content-Length: 3407 Connection: close
2024-04-24 05:32:23 UTC	3407	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 48 6f 76 65 72 43 61 72 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6f 6e 64 65 6d 61 6e 64 2e 44 72 6f 70 64 6f 77 6e 7e 6c 22 5d 2c 7b 31 31 37 33 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 75 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l"],{11731:(t,e,i)=>{i.d(e,{Z:()=>u});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49848	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:23 UTC	589	OUT	GET /responsive-web/client-web/ondemand.Dropdown.c62e1b6a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:23 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984554 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:23 GMT Etag: "hQNl9/igTuG4Jp62Gg3tGQ==+ident" expires: Thu, 24 Apr 2025 05:32:23 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55CE) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 4bc6d72c25b2acecdb4744c4b896f1d1a421d63b551078ac478732433285b917 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 5696 x-transaction-id: 670d77db7e4298b7 Content-Length: 5696 Connection: close
2024-04-24 05:32:23 UTC	5696	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6f 6e 64 65 6d 61 6e 64 2e 44 72 6f 70 64 6f 77 6e 22 5d 2c 7b 36 36 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 69 3d 6e 28 37 38 39 36 29 2c 6f 3d 6e 28 32 37 38 34 29 2c 72 3d 6e 28 37 38 30 35 32 29 2c 61 3d 6e 28 32 35 36 38 36 29 2c 73 3d 6e 28 33 35 31 39 33 29 2c 6c 3d 6e 28 31 31 37 33 31 29 2c 63 3d 6e 28 35 35 32 34 39 29 2c 64 3d Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.Dropdown"],{666:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>y});var i=n(7896),o=n(2784),r=n(78052),a=n(25686),s=n(35193),l=n(11731),c=n(55249),d=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49847	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:23 UTC	582	OUT	GET /responsive-web/client-web/ondemand.s.8a0b95ca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:23 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 122743 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:23 GMT Etag: "tBzIDM4oHlj6L3+D+2cPaQ==+ident" expires: Thu, 24 Apr 2025 05:32:23 GMT Last-Modified: Mon, 22 Apr 2024 19:18:49 GMT perf: 7402827104 Server: ECAcc (lac/55CB) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e185db4f592f5c53caee3fe5954cccd23ef39d8d615a608529b3d075967084d9 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 21397 x-transaction-id: 39cdf43f3b251961 Content-Length: 21397 Connection: close
2024-04-24 05:32:23 UTC	15650	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6f 6e 64 65 6d 61 6e 64 2e 73 22 5d 2c 7b 37 31 32 36 39 3a 28 6e 2c 74 2c 57 29 3d 3e 7b 57 2e 72 28 74 29 2c 57 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 75 7d 29 3b 57 28 33 36 37 32 38 29 2c 57 28 36 38 38 36 29 2c 57 28 37 35 36 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 63 6f 6e 73 74 20 6e 3d 5b 22 63 30 42 64 4f 38 6f 4d 22 2c 22 6f 61 6a 33 63 43 6f 72 22 2c 22 72 43 6f 5a 61 4e 38 6c 22 2c 22 79 62 4e 64 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.s"],{71269:(n,t,W)=>{W.r(t),W.d(t,{default:()=>u});W(36728),W(6886),W(75640);function r(){const n=["c0BdO8oM","oaj3cCor","rCoZaN8l","ybNd
2024-04-24 05:32:23 UTC	5747	IN	Data Raw: 2d 33 39 34 2c 57 29 29 5d 28 6e 2c 74 29 3b 76 61 72 20 57 2c 72 7d 2c 72 52 49 69 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 70 72 5b 28 57 3d 2d 4d 2c 72 3d 22 36 4d 6a 2a 22 2c 6f 28 57 2d 20 2d 56 2c 72 29 29 5d 28 6e 2c 74 29 3b 76 61 72 20 57 2c 72 7d 2c 69 7a 49 49 63 3a 70 72 5b 59 28 63 74 2c 32 32 37 2c 65 74 2c 33 34 35 2c 33 35 39 29 5d 2c 58 41 67 4b 71 3a 70 72 5b 54 28 66 74 2c 31 31 30 30 2c 69 74 2c 38 33 34 2c 22 66 34 77 75 22 29 5d 2c 4f 6c 65 4f 49 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 70 72 5b 28 57 3d 37 39 2c 72 3d 22 5d 5e 6e 4d 22 2c 6f 3d 78 2c 59 28 72 2c 57 2d 32 35 36 2c 72 2d 34 30 33 2c 57 2d 20 2d 32 39 36 2c 6f 2d 32 34 38 29 29 5d 28 6e 2c 74 29 3b 76 61 72 20 57 2c Data Ascii: -394,W))](n,t);var W,r},rRIik:function(n,t){return pr[(W=-M,r="6Mj*",o(W- -V,r))](n,t);var W,r},izIIc:pr[Y(ct,227,et,345,359)],XAgKq:pr[T(ft,1100,it,834,"f4wu")],OleOI:function(n,t){return pr[(W=79,r="]^nM",o=x,Y(r,W-256,r-403,W- -296,o-248))](n,t);var W,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49849	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	586	OUT	GET /responsive-web/client-web/modules.common.5e0e27da.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 392836 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:24 GMT Etag: "Qpj8TfuWKlNGIohRbOo5GQ==+ident" expires: Thu, 24 Apr 2025 05:32:24 GMT Last-Modified: Fri, 19 Apr 2024 16:14:45 GMT perf: 7402827104 Server: ECAcc (lac/5590) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 1875a2c68e1cc79f2f7964daa7fd604b4714afd8dbf389783dc3f519674b1692 x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 70603 x-transaction-id: 013798314c1d2462 Content-Length: 70603 Connection: close
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 64 75 6c 65 73 2e 63 6f 6d 6d 6f 6e 22 5d 2c 7b 34 39 38 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 5f 7d 29 3b 76 61 72 20 6f 3d 6e 28 32 37 38 34 29 2c 69 3d 6e 28 36 35 35 35 29 2c 72 3d 6e 28 38 32 33 39 32 29 2c 73 3d 6e 28 34 30 30 29 2c 61 3d 6e 28 37 33 31 38 36 29 2c 6c 3d 6e 28 38 38 38 30 39 29 2c 63 3d 6e 28 32 34 39 34 39 29 2c 64 3d 6e 28 39 32 31 36 30 29 2c 68 3d 6e 28 31 36 36 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.common"],{49898:(e,t,n)=>{n.d(t,{Z:()=>_});var o=n(2784),i=n(6555),r=n(82392),s=n(400),a=n(73186),l=n(88809),c=n(24949),d=n(92160),h=n(166
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 6f 74 74 6f 6d 43 6f 6e 74 72 6f 6c 7c 7c 6e 75 6c 6c 29 7d 5f 72 65 6e 64 65 72 44 65 63 6f 72 61 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 7b 64 65 63 6f 72 61 74 69 6f 6e 3a 65 2c 6f 6e 46 6f 6c 6c 6f 77 43 6c 69 63 6b 3a 74 7d 3d 74 68 69 73 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 6e 64 65 72 43 6f 6e 74 72 6f 6c 28 65 2c 74 29 7d 5f 72 65 6e 64 65 72 43 6f 6e 74 72 6f 6c 28 65 2c 74 29 7b 63 6f 6e 73 74 7b 76 69 65 77 65 72 55 73 65 72 49 64 3a 6e 7d 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 7b 64 69 73 70 6c 61 79 4d 6f 64 65 3a 6f 2c 66 6f 6c 6c 6f 77 52 65 71 75 65 73 74 52 65 63 65 69 76 65 64 3a 69 2c 69 73 41 75 74 6f 62 6c 6f 63 6b 69 6e 67 3a 72 2c 69 73 42 6c 6f 63 6b 69 6e 67 3a 73 2c 69 73 44 65 76 69 63 65 46 6f 6c 6c Data Ascii: ottomControl\|\|null)}_renderDecoration(){const{decoration:e,onFollowClick:t}=this.props;return this._renderControl(e,t)}_renderControl(e,t){const{viewerUserId:n}=this.context,{displayMode:o,followRequestReceived:i,isAutoblocking:r,isBlocking:s,isDeviceFoll
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 34 30 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 2c 70 61 64 64 69 6e 67 45 6e 64 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 2c 70 61 64 64 69 6e 67 54 6f 70 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 32 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 32 2c 6c 69 6e 65 48 65 69 67 68 74 3a 65 2e 6c 69 6e 65 48 65 69 67 68 74 73 2e 73 75 62 74 65 78 74 31 2c 63 61 72 65 74 43 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 70 72 69 6d 61 72 79 2c 63 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 37 30 30 7d 2c 74 65 78 74 43 6f 6c 6f 72 3a 7b 63 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 74 65 78 74 7d 2c 66 6f 63 75 73 65 64 3a 7b 70 61 64 64 69 6e 67 45 Data Ascii: 40,paddingStart:e.spaces.space16,paddingEnd:e.spaces.space16,paddingTop:e.spaces.space12,paddingBottom:e.spaces.space12,lineHeight:e.lineHeights.subtext1,caretColor:e.colors.primary,color:e.colors.gray700},textColor:{color:e.colors.text},focused:{paddingE
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 36 34 30 29 2c 69 3d 6e 28 36 39 32 36 33 29 2c 72 3d 6e 28 34 39 30 38 39 29 2c 73 3d 6e 28 35 36 35 30 30 29 3b 63 6f 6e 73 74 20 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 61 73 68 74 61 67 3a 22 63 61 73 68 74 61 67 22 2c 48 61 73 68 74 61 67 3a 22 68 61 73 68 74 61 67 22 2c 4d 65 6e 74 69 6f 6e 3a 22 6d 65 6e 74 69 6f 6e 22 2c 55 72 6c 3a 22 75 72 6c 22 2c 4c 69 73 74 3a 22 74 77 69 74 74 65 72 4c 69 73 74 22 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 61 73 68 74 61 67 43 6c 69 63 6b 3a 22 63 61 73 68 74 61 67 5f 63 6c 69 63 6b 22 2c 48 61 73 68 74 61 67 43 6c 69 63 6b 3a 22 68 61 73 68 74 61 67 5f 63 6c 69 63 6b 22 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 4e 61 6d Data Ascii: 640),i=n(69263),r=n(49089),s=n(56500);const a=Object.freeze({Cashtag:"cashtag",Hashtag:"hashtag",Mention:"mention",Url:"url",List:"twitterList"}),l=Object.freeze({CashtagClick:"cashtag_click",HashtagClick:"hashtag_click"});function c(e){return e.screenNam
2024-04-24 05:32:24 UTC	5071	IN	Data Raw: 29 7c 7c 6e 2e 66 6f 63 75 73 28 29 3a 6e 75 6c 6c 3d 3d 28 6f 3d 74 68 69 73 2e 5f 73 74 61 72 74 54 68 75 6d 62 52 65 66 29 7c 7c 6f 2e 66 6f 63 75 73 28 29 29 7d 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 6e 6d 6f 75 6e 74 28 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 54 6f 75 63 68 4d 6f 76 65 54 6f 53 63 72 6f 6c 6c 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 5f 72 65 6d 6f 76 65 54 6f 75 63 68 4d 6f 76 65 54 6f 53 63 72 6f 6c 6c 4c 69 73 74 65 6e 65 72 28 29 7d 72 65 6e 64 65 72 28 29 7b 63 6f 6e 73 74 7b 63 6f 6c 6f 72 3a 65 2c 64 69 73 61 62 6c 65 64 3a 74 2c 65 6e 64 54 68 75 6d 62 4c 61 62 65 6c 3a 6e 2c 69 73 56 65 72 74 69 63 61 6c 3a 72 2c 73 74 61 72 74 54 68 75 6d 62 4c 61 62 65 6c 3a 73 2c 76 61 6c 75 65 3a 6c 2c 77 69 74 68 47 72 61 79 42 Data Ascii: )\|\|n.focus():null==(o=this._startThumbRef)\|\|o.focus())}componentWillUnmount(){this._removeTouchMoveToScrollListener&&this._removeTouchMoveToScrollListener()}render(){const{color:e,disabled:t,endThumbLabel:n,isVertical:r,startThumbLabel:s,value:l,withGrayB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49850	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	585	OUT	GET /responsive-web/client-web/modules.audio.54e3f0ea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143671 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:24 GMT Etag: "PnBbGJe6LsYT2xIUzNJAkA==+ident" expires: Thu, 24 Apr 2025 05:32:24 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55D3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: da77409c68f5db1ae66abaf630ae6bcad212698d13d59278af5edc66aee3c7e7 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 19 x-ton-expected-size: 231836 x-transaction-id: 3be47d9a82a51ecf Content-Length: 231836 Connection: close
2024-04-24 05:32:24 UTC	15627	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 64 75 6c 65 73 2e 61 75 64 69 6f 22 5d 2c 7b 36 36 33 32 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 62 58 64 39 64 57 50 34 39 6c 64 47 5a 41 6f 72 57 59 6e 38 64 67 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 41 75 64 69 6f 53 70 61 63 65 41 64 64 53 68 61 72 69 6e 67 22 2c 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 3a 22 6d 75 74 61 74 69 6f 6e 22 2c 6d 65 74 61 64 61 74 61 3a 7b 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.audio"],{66324:e=>{e.exports={queryId:"bXd9dWP49ldGZAorWYn8dg",operationName:"AudioSpaceAddSharing",operationType:"mutation",metadata:{featureSwitches:
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 28 21 65 7c 7c 21 74 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 5b 5d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 6e 2c 6f 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 3b 6c 65 74 20 73 3d 22 22 3b 63 6f 6e 73 74 20 6c 3d 6f 3d 3e 7b 69 66 28 6f 29 7b 63 6f 6e 73 74 7b 63 75 72 73 6f 72 3a 65 2c 6d 65 73 73 61 67 65 73 3a 74 7d 3d 6f 3b 69 66 28 21 65 29 7b 76 61 72 20 64 3b 63 6f 6e 73 74 20 65 3d 6e 75 6c 6c 3d 3d 28 64 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 28 75 2e 5a 2e 63 75 72 72 65 6e 74 54 72 61 63 6b 41 74 6f 6d 29 29 3f 76 6f 69 64 20 30 3a 64 2e 69 64 33 4e 74 70 54 69 6d 65 3b 72 65 74 75 72 6e 20 63 2e 68 34 28 65 2c 74 68 69 73 2e 73 74 6f 72 65 29 2c 6e 28 72 29 7d 73 3d Data Ascii: (!e\|\|!t)return Promise.resolve([]);try{return new Promise(((n,o)=>{const r=[];let s="";const l=o=>{if(o){const{cursor:e,messages:t}=o;if(!e){var d;const e=null==(d=this.store.get(u.Z.currentTrackAtom))?void 0:d.id3NtpTime;return c.h4(e,this.store),n(r)}s=
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 6d 61 78 48 65 69 67 68 74 3a 65 2e 6d 61 78 48 65 69 67 68 74 2c 74 72 61 6e 73 66 6f 72 6d 3a 5b 7b 74 72 61 6e 73 6c 61 74 65 33 64 3a 22 30 2c 20 30 2c 20 30 22 7d 2c 7b 74 72 61 6e 73 6c 61 74 65 59 3a 65 2e 61 6e 69 6d 61 74 69 6f 6e 2e 61 6e 69 6d 61 74 65 64 50 61 6e 7d 5d 7d 5d 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5f 2e 5a 2c 7b 73 74 79 6c 65 3a 67 65 2e 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 43 6f 6e 74 61 69 6e 65 72 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5f 2e 5a 2c 7b 73 74 79 6c 65 3a 67 65 2e 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 7d 2c 65 2e 63 68 69 6c 64 72 65 6e 29 29 29 29 7d 63 6f 6e 73 74 20 67 65 3d 6b 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 30 Data Ascii: maxHeight:e.maxHeight,transform:[{translate3d:"0, 0, 0"},{translateY:e.animation.animatedPan}]}]},o.createElement(_.Z,{style:ge.contentWrapperContainer},o.createElement(_.Z,{style:ge.contentWrapper},e.children))))}const ge=k.default.create((e=>{const t=(0
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 39 29 28 6e 74 2e 63 7a 29 2c 63 3d 6f 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 7b 73 28 7b 77 69 64 74 68 3a 65 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 74 2e 77 7d 29 7d 29 2c 5b 73 2c 65 2e 77 69 64 74 68 5d 29 2c 6c 3d 28 30 2c 4f 74 2e 24 29 28 65 2e 61 75 64 69 6f 53 70 61 63 65 49 64 29 2c 75 3d 28 30 2c 6e 74 2e 55 48 29 28 29 2c 64 3d 28 30 2c 70 2e 62 39 29 28 6e 74 2e 4e 24 29 2c 7b 72 6f 6c 65 3a 6d 7d 3d 28 30 2c 62 2e 6c 37 29 28 29 2c 68 3d 28 30 2c 66 2e 62 64 29 28 29 2c 76 3d 28 30 2c 70 2e 62 39 29 28 67 2e 64 71 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 6e 28 64 6e 2e 6d 61 69 6e 56 69 65 77 29 7d 63 6f 6e 73 74 20 53 3d 28 30 2c 70 2e 62 39 29 28 4e 74 29 3b 72 65 74 75 72 6e 20 6f 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: 9)(nt.cz),c=o.useCallback((()=>{s({width:e.width,height:nt.w})}),[s,e.width]),l=(0,Ot.$)(e.audioSpaceId),u=(0,nt.UH)(),d=(0,p.b9)(nt.N$),{role:m}=(0,b.l7)(),h=(0,f.bd)(),v=(0,p.b9)(g.dq);function E(){n(dn.mainView)}const S=(0,p.b9)(Nt);return o.createElem
2024-04-24 05:32:24 UTC	760	IN	Data Raw: 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 76 61 2c 7b 69 74 65 6d 3a 65 2c 6b 65 79 3a 65 2e 69 64 7c 7c 74 7d 29 29 29 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 61 2e 5a 50 2c 7b 63 6f 75 6e 74 3a 74 2e 6c 65 6e 67 74 68 2c 6b 65 79 3a 60 24 7b 6e 7d 2d 69 6e 64 69 63 61 74 6f 72 73 60 2c 6d 61 78 3a 45 61 2c 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3a 72 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 65 29 7b 63 6f 6e 73 74 7b 69 73 55 73 65 72 41 64 6d 69 6e 52 6f 6c 65 3a 74 2c 72 6f 6c 65 3a 6e 7d 3d 28 30 2c 62 2e 6c 37 29 28 29 2c 7b 61 63 74 69 76 65 49 74 65 6d 3a 61 7d 3d 4e 69 28 29 2c 7b 76 69 65 77 65 72 55 73 65 72 49 64 3a 69 7d 3d 28 30 2c 6c 2e 51 5a 29 28 29 2c 72 3d 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 Data Ascii: o.createElement(va,{item:e,key:e.id\|\|t})))),o.createElement(ma.ZP,{count:t.length,key:`${n}-indicators`,max:Ea,selectedIndex:r}))}function va(e){const{isUserAdminRole:t,role:n}=(0,b.l7)(),{activeItem:a}=Ni(),{viewerUserId:i}=(0,l.QZ)(),r=(null==a?void 0:a
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 73 73 69 62 69 6c 69 74 79 4c 61 62 65 6c 3a 6b 61 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 67 72 61 79 37 30 30 22 2c 68 6f 76 65 72 4c 61 62 65 6c 3a 43 61 2c 69 63 6f 6e 3a 77 61 2c 6f 6e 50 72 65 73 73 3a 28 29 3d 3e 7b 6f 74 2e 5a 2e 64 65 6c 65 74 65 53 68 61 72 69 6e 67 28 72 2c 65 2e 69 74 65 6d 2e 69 64 29 7d 2c 73 69 7a 65 3a 22 78 53 6d 61 6c 6c 22 2c 73 74 79 6c 65 3a 5f 61 2e 64 69 73 6d 69 73 73 42 75 74 74 6f 6e 7d 29 29 7d 63 6f 6e 73 74 20 45 61 3d 38 2c 53 61 3d 7b 73 68 61 72 65 64 42 79 3a 59 28 29 2e 62 64 66 61 39 33 65 62 7d 2c 5f 61 3d 6b 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 28 28 65 3d 3e 28 7b 73 68 61 72 65 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 3a 7b 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 Data Ascii: ssibilityLabel:ka,backgroundColor:"gray700",hoverLabel:Ca,icon:wa,onPress:()=>{ot.Z.deleteSharing(r,e.item.id)},size:"xSmall",style:_a.dismissButton}))}const Ea=8,Sa={sharedBy:Y().bdfa93eb},_a=k.default.create((e=>({sharedContentContainer:{paddingHorizont
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 71 75 65 73 74 65 64 54 69 6d 65 63 6f 64 65 3a 69 2e 73 74 61 72 74 54 69 6d 65 4d 73 2c 6f 6e 45 6e 64 65 64 3a 28 29 3d 3e 7b 73 26 26 65 2e 6c 6f 61 64 2e 76 6f 69 63 65 54 77 65 65 74 28 73 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 69 28 7b 61 75 64 69 6f 44 6f 63 6b 50 72 6f 70 73 3a 65 2c 63 6f 6d 6d 6f 6e 41 70 69 3a 74 2c 63 6f 6e 74 65 78 74 3a 6e 2c 68 69 73 74 6f 72 79 3a 61 7d 29 7b 63 6f 6e 73 74 5b 69 5d 3d 6e 2e 70 6c 61 79 65 72 41 70 69 2c 5b 72 5d 3d 6e 2e 70 6c 61 79 65 72 53 74 61 74 65 2c 73 3d 74 2e 63 75 72 72 65 6e 74 54 72 61 63 6b 3b 69 66 28 21 72 7c 7c 21 69 7c 7c 21 73 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 63 3d 4f 69 28 6e 29 3b 69 66 28 21 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 7b 61 63 Data Ascii: questedTimecode:i.startTimeMs,onEnded:()=>{s&&e.load.voiceTweet(s)}}}function zi({audioDockProps:e,commonApi:t,context:n,history:a}){const[i]=n.playerApi,[r]=n.playerState,s=t.currentTrack;if(!r\|\|!i\|\|!s)return null;const c=Oi(n);if(!c)return null;const{ac
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 3b 6e 28 33 36 37 32 38 29 3b 76 61 72 20 61 3d 6e 28 32 37 38 34 29 2c 69 3d 6e 28 31 34 39 38 33 29 2c 6f 3d 6e 2e 6e 28 69 29 2c 72 3d 6e 28 37 32 36 37 29 2c 73 3d 6e 28 38 35 36 35 31 29 2c 63 3d 6e 28 32 31 38 35 39 29 2c 6c 3d 6e 28 36 33 31 34 32 29 2c 75 3d 6e 28 39 37 38 31 33 29 2c 64 3d 6e 28 34 35 31 38 34 29 2c 70 3d 6e 2e 6e 28 64 29 2c 6d 3d 6e 28 35 30 33 33 37 29 2c 68 3d 6e 28 35 31 34 36 31 29 2c 66 3d 6e 28 34 39 36 39 30 29 2c 62 3d 6e 28 31 34 39 31 32 29 2c 67 3d 6e 28 39 38 34 30 29 2c 79 3d 6e 28 37 31 31 39 37 29 2c 76 3d 6e 28 32 38 34 34 39 29 2c 45 3d 6e 28 35 38 33 35 36 29 2c 53 3d 6e 28 37 38 32 37 35 29 2c 5f 3d 28 6e 28 36 38 38 36 29 2c 6e 28 37 31 33 37 32 29 2c 6e 28 34 33 34 30 36 29 29 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ;n(36728);var a=n(2784),i=n(14983),o=n.n(i),r=n(7267),s=n(85651),c=n(21859),l=n(63142),u=n(97813),d=n(45184),p=n.n(d),m=n(50337),h=n(51461),f=n(49690),b=n(14912),g=n(9840),y=n(71197),v=n(28449),E=n(58356),S=n(78275),_=(n(6886),n(71372),n(43406));function
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 22 29 2c 6e 2e 65 28 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 6c 6f 61 64 65 72 73 2e 76 69 64 65 6f 2e 56 69 64 65 6f 50 6c 61 79 65 72 44 65 66 61 75 6c 74 55 49 7e 6c 6f 61 64 65 72 73 2e 76 69 64 65 6f 2e 56 69 64 65 6f 50 6c 61 79 65 22 29 2c 6e 2e 65 28 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 Data Ascii: loader.AudioDock~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.Account~bundl"),n.e("shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye"),n.e("shared~bundle.TwitterArticle
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 28 29 2e 49 31 38 4e 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 2c 7b 24 69 31 38 6e 3a 22 63 39 61 66 33 66 66 37 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 5a 50 2c 7b 6c 69 6e 6b 3a 66 2e 6e 2e 68 65 6c 70 7d 2c 63 28 29 2e 63 62 31 37 61 30 66 33 29 29 29 2c 74 69 74 6c 65 3a 5f 2e 73 65 63 74 69 6f 6e 73 2e 73 70 61 63 65 73 41 72 65 50 75 62 6c 69 63 2e 74 69 74 6c 65 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 45 2c 7b 69 63 6f 6e 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2e 64 65 66 61 75 6c 74 2c 7b 73 74 79 6c 65 3a 77 2e 73 65 63 74 69 6f 6e 49 63 6f 6e 7d 29 2c 73 75 62 74 69 74 6c 65 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 2c 6e 75 6c 6c 2c Data Ascii: .createElement(c().I18NFormatMessage,{$i18n:"c9af3ff7"},a.createElement(o.ZP,{link:f.n.help},c().cb17a0f3))),title:_.sections.spacesArePublic.title}),a.createElement(E,{icon:a.createElement(u.default,{style:w.sectionIcon}),subtitle:a.createElement(S,null,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49851	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu.fc8f281a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 122744 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:24 GMT Etag: "hrpnuKbnZMBBTCy6HXZz/Q==+ident" expires: Thu, 24 Apr 2025 05:32:24 GMT Last-Modified: Mon, 22 Apr 2024 19:18:49 GMT perf: 7402827104 Server: ECAcc (lac/5588) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 13545a31a6d392e5e6010058850fcc3b4c65058eb51f6c54db63b6b87e51e6ff x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 23 x-ton-expected-size: 308358 x-transaction-id: 8dc7e29bad27f6c2 Content-Length: 308358 Connection: close
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 53 6f 72 74 55 70 2d 6a 73 22 5d 2c 7b 37 30 38 32 38 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu","icons/IconSortUp-js"],{70828:(e,t,i)=>{"use str
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 30 35 63 3b 63 6c 61 73 73 20 65 65 20 65 78 74 65 6e 64 73 20 72 2e 43 6f 6d 70 6f 6e 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 73 75 70 65 72 28 65 2c 74 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 45 6e 74 65 72 49 6d 6d 65 72 73 69 76 65 56 69 65 77 65 72 3d 28 29 3d 3e 7b 76 61 72 20 65 2c 74 3b 63 6f 6e 73 74 20 69 3d 28 6e 75 6c 6c 21 3d 28 65 3d 6e 75 6c 6c 3d 3d 28 74 3d 74 68 69 73 2e 5f 70 6c 61 79 65 72 53 74 61 74 65 29 3f 76 6f 69 64 20 30 3a 74 2e 74 72 61 63 6b 73 29 3f 65 3a 5b 5d 29 2e 66 69 6e 64 28 28 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 74 3d 74 68 69 73 2e 5f 70 6c 61 79 65 72 53 74 61 74 65 29 3f 76 6f 69 64 20 30 3a 74 2e 63 75 72 72 65 6e 74 54 72 61 63 Data Ascii: 05c;class ee extends r.Component{constructor(e,t){super(e,t),this._handleEnterImmersiveViewer=()=>{var e,t;const i=(null!=(e=null==(t=this._playerState)?void 0:t.tracks)?e:[]).find((e=>{var t;return e.id===(null==(t=this._playerState)?void 0:t.currentTrac
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 72 64 65 72 3a 7b 62 6f 72 64 65 72 53 74 79 6c 65 3a 22 64 61 73 68 65 64 22 7d 2c 70 69 76 6f 74 51 75 6f 74 65 54 77 65 65 74 43 6f 6e 74 61 69 6e 65 72 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 30 2c 62 6f 72 64 65 72 57 69 64 74 68 3a 22 6e 6f 6e 65 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 6e 6f 6e 65 22 2c 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 3a 65 2e 62 6f 72 64 65 72 57 69 64 74 68 73 2e 73 6d 61 6c 6c 7d 2c 68 65 61 64 65 72 43 6f 6e 74 61 69 6e 65 72 3a 7b 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 32 2c 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 Data Ascii: rder:{borderStyle:"dashed"},pivotQuoteTweetContainer:{marginTop:0,borderWidth:"none",backgroundColor:e.colors.gray0,borderRadius:"none",borderTopWidth:e.borderWidths.small},headerContainer:{paddingVertical:e.spaces.space12,paddingHorizontal:e.spaces.space
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 70 7d 7d 2c 33 30 37 30 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 55 7d 29 3b 76 61 72 20 6e 3d 69 28 37 38 39 36 29 2c 72 3d 28 69 28 36 38 38 36 29 2c 69 28 35 33 39 38 35 29 2c 69 28 32 37 38 34 29 29 2c 61 3d 69 28 32 35 36 38 36 29 2c 6f 3d 69 28 34 35 31 38 34 29 2c 73 3d 69 2e 6e 28 6f 29 2c 6c 3d 69 28 33 32 33 30 37 29 2c 63 3d 69 28 39 30 38 36 37 29 2c 64 3d 69 28 38 32 33 39 32 29 2c 75 3d 69 28 38 30 38 33 35 29 2c 68 3d 69 28 37 30 38 32 38 29 2c 70 3d 69 28 34 38 30 38 36 29 2c 6d 3d 69 28 37 37 30 38 39 29 2c 66 3d 69 28 38 37 35 39 39 29 2c 67 3d 69 28 33 33 36 35 32 29 2c 76 3d 69 28 37 37 32 32 37 29 2c 5f 3d 69 28 37 34 30 36 32 29 2c 79 3d 69 28 33 36 31 33 29 2c Data Ascii: p}},30700:(e,t,i)=>{"use strict";i.d(t,{Z:()=>U});var n=i(7896),r=(i(6886),i(53985),i(2784)),a=i(25686),o=i(45184),s=i.n(o),l=i(32307),c=i(90867),d=i(82392),u=i(80835),h=i(70828),p=i(48086),m=i(77089),f=i(87599),g=i(33652),v=i(77227),_=i(74062),y=i(3613),
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 3d 69 28 37 33 31 38 36 29 3b 63 6f 6e 73 74 20 73 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 63 6f 6e 73 74 5b 74 2c 69 5d 3d 6e 2e 75 73 65 53 74 61 74 65 28 31 29 3b 72 65 74 75 72 6e 20 6e 2e 75 73 65 45 66 66 65 63 74 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 28 29 3d 3e 7b 69 28 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 2e 31 29 29 7d 29 2c 73 29 3b 72 65 74 75 72 6e 28 29 3d 3e 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 65 29 7d 7d 29 2c 5b 5d 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 5a 2c 7b 73 74 79 6c 65 3a 65 2e 77 69 74 68 6f 75 74 4d 61 72 67 69 6e 3f 76 6f 69 64 20 30 3a 63 2e 6c 69 76 65 53 70 65 61 6b 69 6e 67 49 6e 64 69 63 61 74 6f 72 Data Ascii: =i(73186);const s=100;function l(e){const[t,i]=n.useState(1);return n.useEffect((()=>{const e=setInterval((()=>{i(Math.max(Math.random(),.1))}),s);return()=>{clearInterval(e)}}),[]),n.createElement(r.Z,{style:e.withoutMargin?void 0:c.liveSpeakingIndicator
2024-04-24 05:32:24 UTC	5	IN	Data Raw: 28 65 29 3b 6f Data Ascii: (e);o
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 2e 6c 65 6e 67 74 68 26 26 61 2e 70 75 73 68 28 6f 29 2c 72 3d 61 2e 6d 61 70 28 28 65 3d 3e 65 2e 6a 6f 69 6e 28 78 29 29 29 7d 65 6c 73 65 20 72 3d 5b 65 2e 74 65 78 74 5d 3b 72 65 74 75 72 6e 20 74 28 72 29 7d 29 29 7d 29 29 7d 56 2e 4d 45 41 53 55 52 45 4d 45 4e 54 5f 45 4c 45 4d 45 4e 54 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 42 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 69 2c 72 29 7b 63 6f 6e 73 74 5b 61 2c 6f 5d 3d 6e 2e 75 73 65 53 74 61 74 65 28 5b 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 75 73 65 45 66 66 65 63 74 28 28 28 29 3d 3e 7b 69 26 26 72 26 26 56 28 7b 74 65 78 74 3a 65 2c 77 69 64 74 68 3a 69 2c 68 65 69 67 68 74 3a 72 7d 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 6f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 Data Ascii: .length&&a.push(o),r=a.map((e=>e.join(x)))}else r=[e.text];return t(r)}))}))}V.MEASUREMENT_ELEMENT=void 0;const B=1;function O(e,t,i,r){const[a,o]=n.useState([]);return n.useEffect((()=>{i&&r&&V({text:e,width:i,height:r}).then((e=>{o(function(e,t){const i
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 74 3a 32 2c 7a 49 6e 64 65 78 3a 31 7d 2c 7b 74 6f 70 3a 33 2c 65 6e 64 3a 38 2c 7a 49 6e 64 65 78 3a 31 2c 77 69 74 68 6f 75 74 42 6f 72 64 65 72 53 69 7a 65 3a 21 30 7d 5d 2c 5b 7b 74 6f 70 3a 32 31 2c 73 74 61 72 74 3a 33 2c 7a 49 6e 64 65 78 3a 33 7d 2c 7b 74 6f 70 3a 33 2c 73 74 61 72 74 3a 31 38 2c 7a 49 6e 64 65 78 3a 32 7d 2c 7b 74 6f 70 3a 33 30 2c 65 6e 64 3a 33 2c 7a 49 6e 64 65 78 3a 32 7d 2c 7b 74 6f 70 3a 31 32 2c 65 6e 64 3a 34 2c 7a 49 6e 64 65 78 3a 31 2c 77 69 74 68 6f 75 74 42 6f 72 64 65 72 53 69 7a 65 3a 21 30 7d 5d 5d 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 7b 70 61 72 74 69 63 69 70 61 6e 74 73 3a 65 7d 29 7b 63 6f 6e 73 74 20 74 3d 79 2e 64 65 66 61 75 6c 74 2e 74 68 65 6d 65 2e 62 6f 72 64 65 72 57 69 64 74 68 73 50 78 2e 73 Data Ascii: t:2,zIndex:1},{top:3,end:8,zIndex:1,withoutBorderSize:!0}],[{top:21,start:3,zIndex:3},{top:3,start:18,zIndex:2},{top:30,end:3,zIndex:2},{top:12,end:4,zIndex:1,withoutBorderSize:!0}]]})};function k({participants:e}){const t=y.default.theme.borderWidthsPx.s
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 28 29 2e 65 62 65 34 31 33 36 37 2c 6d 3d 6f 28 29 2e 65 66 63 65 33 64 39 62 2c 66 3d 6f 28 29 2e 65 38 37 33 33 65 64 39 2c 67 3d 6f 28 29 2e 69 36 31 66 65 66 33 37 2c 76 3d 6f 28 29 2e 69 33 62 37 61 30 31 37 2c 5f 3d 6f 28 29 2e 62 65 35 39 64 38 63 33 2c 79 3d 6f 28 29 2e 62 61 37 30 35 65 32 37 2c 62 3d 6f 28 29 2e 69 65 35 64 31 31 30 66 2c 77 3d 6f 28 29 2e 69 33 64 30 38 37 64 62 2c 43 3d 6f 28 29 2e 6a 38 36 62 30 64 38 64 2c 45 3d 6f 28 29 2e 64 66 35 66 31 31 62 33 3b 63 6f 6e 73 74 20 53 3d 28 7b 68 6f 75 72 73 3a 65 2c 6d 69 6e 75 74 65 73 3a 74 2c 73 65 63 6f 6e 64 73 3a 69 7d 2c 6e 29 3d 3e 7b 69 66 28 21 28 69 7c 7c 74 7c 7c 65 29 29 72 65 74 75 72 6e 20 6e 2e 73 65 63 6f 6e 64 73 28 30 29 3b 72 65 74 75 72 6e 20 6d 28 7b 73 65 63 6f 6e Data Ascii: ().ebe41367,m=o().efce3d9b,f=o().e8733ed9,g=o().i61fef37,v=o().i3b7a017,_=o().be59d8c3,y=o().ba705e27,b=o().ie5d110f,w=o().i3d087db,C=o().j86b0d8d,E=o().df5f11b3;const S=({hours:e,minutes:t,seconds:i},n)=>{if(!(i\|\|t\|\|e))return n.seconds(0);return m({secon
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 74 3d 3e 74 2e 70 6c 61 79 65 72 53 74 61 74 65 3d 3d 3d 65 29 29 3b 74 68 69 73 2e 5f 70 6c 61 79 65 72 51 75 65 75 65 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 7d 43 65 2e 70 6f 6c 69 63 69 65 73 3d 62 65 3b 63 6f 6e 73 74 20 45 65 3d 28 7b 64 65 73 63 72 69 70 74 69 6f 6e 3a 65 2c 74 69 74 6c 65 3a 74 7d 29 3d 3e 74 7c 7c 65 3f 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 5a 2c 7b 73 74 79 6c 65 3a 53 65 2e 6d 65 74 61 64 61 74 61 43 6f 6e 74 61 69 6e 65 72 7d 2c 74 3f 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5f 2e 5a 50 2c 7b 73 74 79 6c 65 3a 53 65 2e 6d 65 74 61 64 61 74 61 2c 77 65 69 67 68 74 3a 22 62 6f 6c 64 22 2c 77 69 74 68 48 61 73 68 66 6c 61 67 73 3a 21 30 7d 2c 74 29 3a 6e 75 6c 6c 2c 65 3f 72 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: t=>t.playerState===e));this._playerQueue.splice(t,1)}}Ce.policies=be;const Ee=({description:e,title:t})=>t\|\|e?r.createElement(a.Z,{style:Se.metadataContainer},t?r.createElement(_.ZP,{style:Se.metadata,weight:"bold",withHashflags:!0},t):null,e?r.createElem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49852	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun.5e40379a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984555 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:24 GMT Etag: "hGBe2GshKV2m1YuUHsNieQ==+ident" expires: Thu, 24 Apr 2025 05:32:24 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55C1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e98cddb7d4f0eb6ae868ef8dabe4caab55a568aa3ad64093b709e29567b85b0c x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 50404 x-transaction-id: 17058ede435f3545 Content-Length: 50404 Connection: close
2024-04-24 05:32:24 UTC	15649	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 22 5d 2c 7b 33 37 38 30 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6f 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun"],{37800:(e,t,i)=>{i.d(t,{Z:()=>o});
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 2e 5a 2c 7b 73 74 79 6c 65 3a 68 2e 63 65 6c 6c 57 72 61 70 70 65 72 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 2e 5a 2c 7b 73 74 79 6c 65 3a 5b 68 2e 73 6f 63 69 61 6c 43 6f 6e 74 65 78 74 54 65 78 74 43 6f 6c 75 6d 6e 2c 6e 2e 73 6f 63 69 61 6c 43 6f 6e 74 65 78 74 52 65 66 72 65 73 68 45 6e 61 62 6c 65 64 28 29 26 26 21 76 26 26 68 2e 73 6f 63 69 61 6c 43 6f 6e 74 65 78 74 52 65 66 72 65 73 68 54 65 78 74 43 6f 6c 75 6d 6e 5d 7d 2c 4c 3f 74 68 69 73 2e 5f 72 65 6e 64 65 72 4c 69 6e 6b 28 4c 2c 42 29 3a 42 29 2c 64 7c 7c 6e 75 6c 6c 29 29 2c 74 7c 7c 6e 75 6c 6c 29 29 29 29 3a 6e 75 6c 6c 7d 5f 72 65 6e 64 65 72 4c 69 6e 6b 28 65 2c 74 29 7b 63 6f 6e 73 74 7b 63 6f 6e 74 65 78 74 54 79 70 65 Data Ascii: .createElement(l.Z,{style:h.cellWrapper},r.createElement(l.Z,{style:[h.socialContextTextColumn,n.socialContextRefreshEnabled()&&!v&&h.socialContextRefreshTextColumn]},L?this._renderLink(L,B):B),d\|\|null)),t\|\|null)))):null}_renderLink(e,t){const{contextType
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 61 63 6b 65 64 3a 7b 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 72 6f 77 22 2c 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 7d 2c 6e 61 6d 65 3a 7b 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 7d 2c 73 75 73 70 65 6e 64 65 64 4f 72 44 6f 65 73 4e 6f 74 45 78 69 73 74 3a 7b 66 6f 6e 74 46 65 61 74 75 72 65 53 65 74 74 69 6e 67 73 3a 22 27 73 73 30 31 27 20 6f 6e 22 2c 66 6f 6e 74 57 65 69 67 68 74 3a 22 38 30 30 22 7d 2c 6e 61 6d 65 4e 6f 77 72 61 70 3a 7b 77 68 69 74 65 53 70 61 63 65 3a 22 6e 6f 77 72 61 70 22 7d 2c 73 68 72 69 6e 6b 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 7b 6d 61 78 57 69 64 74 68 3a 22 31 30 30 25 22 2c 66 6c Data Ascii: acked:{flexDirection:"row",alignItems:"center"},name:{overflow:"hidden",alignItems:"center",display:"flex"},suspendedOrDoesNotExist:{fontFeatureSettings:"'ss01' on",fontWeight:"800"},nameNowrap:{whiteSpace:"nowrap"},shrinkableContainer:{maxWidth:"100%",fl
2024-04-24 05:32:24 UTC	1989	IN	Data Raw: 2e 30 33 33 20 32 2e 38 39 35 2e 34 31 2e 35 30 35 2d 32 2e 38 38 20 32 2e 35 38 33 2d 31 2e 33 37 4c 31 37 2e 38 20 31 31 6c 31 2e 32 38 34 2d 32 2e 36 32 37 2d 32 2e 35 38 33 2d 31 2e 33 37 2d 2e 35 30 35 2d 32 2e 38 38 7a 6d 2d 36 2e 38 36 38 20 36 2e 38 39 6c 33 2e 34 32 39 20 33 2e 34 32 38 20 35 2e 36 38 33 2d 36 2e 32 30 36 2d 31 2e 33 34 37 2d 31 2e 32 34 37 2d 34 2e 34 20 34 2e 37 39 35 2d 32 2e 30 37 32 2d 32 2e 30 37 32 7a 22 2c 66 69 6c 6c 3a 60 75 72 6c 28 23 24 7b 69 7d 2d 62 29 60 7d 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 36 2e 32 33 33 20 31 31 2e 34 32 33 6c 33 2e 34 32 39 20 33 2e 34 32 38 20 35 2e 36 35 2d 36 2e 31 37 2e 30 33 38 2d 2e 30 33 33 2d 2e 30 30 35 20 31 2e 33 39 38 2d 35 2e Data Ascii: .033 2.895.41.505-2.88 2.583-1.37L17.8 11l1.284-2.627-2.583-1.37-.505-2.88zm-6.868 6.89l3.429 3.428 5.683-6.206-1.347-1.247-4.4 4.795-2.072-2.072z",fill:`url(#${i}-b)`}),r.createElement("path",{d:"M6.233 11.423l3.429 3.428 5.65-6.17.038-.033-.005 1.398-5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49853	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc.c4de844a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 369176 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:24 GMT Etag: "iX38Yc1Xh+w6L8zDAeTvLw==+ident" expires: Thu, 24 Apr 2025 05:32:24 GMT Last-Modified: Fri, 19 Apr 2024 22:53:13 GMT perf: 7402827104 Server: ECAcc (lac/5599) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: d2843dc53dbdcf3ddf99ed35446eddcedd85ca2a4a92f999adfcd7a1e09554f2 x-content-type-options: nosniff x-response-time: 12 x-ton-expected-size: 52090 x-transaction-id: 0a977213c0abc1e5 Content-Length: 52090 Connection: close
2024-04-24 05:32:24 UTC	15649	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 6f 6e 64 65 6d 61 6e 64 2e 4e 6f 74 46 6f 75 6e 64 7e 62 75 6e 64 6c 65 2e 41 62 6f 75 74 54 68 69 73 41 64 7e 62 75 6e 64 6c 65 2e 4e 6f 74 4d 79 41 63 22 5d 2c 7b 38 38 33 33 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 24 54 3a 28 29 3d 3e 42 2c 24 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc"],{88335:(e,t,r)=>{"use strict";r.d(t,{$T:()=>B,$
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 2c 7b 24 31 3a 28 29 3d 3e 75 2c 44 69 3a 28 29 3d 3e 6d 2c 44 73 3a 28 29 3d 3e 73 2c 4a 4a 3a 28 29 3d 3e 62 2c 4f 41 3a 28 29 3d 3e 5f 2c 4f 47 3a 28 29 3d 3e 61 2c 52 73 3a 28 29 3d 3e 6c 2c 59 72 3a 28 29 3d 3e 66 2c 5f 77 3a 28 29 3d 3e 77 2c 63 52 3a 28 29 3d 3e 79 2c 65 55 3a 28 29 3d 3e 68 2c 6a 62 3a 28 29 3d 3e 63 2c 73 49 3a 28 29 3d 3e 64 2c 75 4c 3a 28 29 3d 3e 45 7d 29 3b 72 28 36 38 38 36 29 2c 72 28 32 37 38 34 29 3b 76 61 72 20 6e 3d 72 28 35 38 39 35 35 29 2c 69 3d 72 28 37 32 35 39 39 29 2c 6f 3d 72 28 38 38 33 33 35 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 72 29 7b 63 6f 6e 73 74 7b 6b 65 79 3a 6e 2c 73 75 62 74 61 73 6b 5f 69 64 3a 69 7d 3d 74 2c 6f 3d 65 5b 69 5d 26 26 65 5b 69 5d 5b 6e 5d 3b 72 65 74 75 72 6e 20 76 6f 69 Data Ascii: ,{$1:()=>u,Di:()=>m,Ds:()=>s,JJ:()=>b,OA:()=>_,OG:()=>a,Rs:()=>l,Yr:()=>f,_w:()=>w,cR:()=>y,eU:()=>h,jb:()=>c,sI:()=>d,uL:()=>E});r(6886),r(2784);var n=r(58955),i=r(72599),o=r(88335);function a(e,t,r){const{key:n,subtask_id:i}=t,o=e[i]&&e[i][n];return voi
2024-04-24 05:32:24 UTC	16383	IN	Data Raw: 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 65 29 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 65 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 22 22 2b 65 29 3b 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a 72 65 74 75 72 6e 20 72 3b 63 61 73 65 22 75 74 66 38 22 3a 63 61 73 65 22 75 74 66 2d 38 22 3a Data Ascii: =typeof ArrayBuffer.isView&&(ArrayBuffer.isView(e)\|\|e instanceof ArrayBuffer))return e.byteLength;"string"!=typeof e&&(e=""+e);var r=e.length;if(0===r)return 0;for(var n=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":
2024-04-24 05:32:24 UTC	3675	IN	Data Raw: 3d 74 7c 7c 31 2f 30 3b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 6e 75 6c 6c 2c 6f 3d 5b 5d 2c 61 3d 30 3b 61 3c 6e 3b 2b 2b 61 29 7b 69 66 28 28 72 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 69 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 74 2d 3d 33 29 3e 2d 31 26 26 6f 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 61 2b 31 3d 3d 3d 6e 29 7b 28 74 2d 3d 33 29 3e 2d 31 26 26 6f 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 3d 72 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 72 3c 35 36 33 32 30 29 7b 28 74 2d 3d 33 29 3e 2d 31 26 26 6f 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 Data Ascii: =t\|\|1/0;for(var n=e.length,i=null,o=[],a=0;a<n;++a){if((r=e.charCodeAt(a))>55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&o.push(239,191,189);continue}if(a+1===n){(t-=3)>-1&&o.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&o.push(239,191,18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49857	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	603	OUT	OPTIONS /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: fb9604961da3074341587fda29133642f8eed88fddd8217c9e70673f9b0c3dcb date: Wed, 24 Apr 2024 05:32:24 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49856	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	595	OUT	OPTIONS /1.1/hashflags.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: 8ee14b8af0656cf9f078d7a03fb58c9a0f8a79d4bc9edd83cb8a3c9684efd5a9 date: Wed, 24 Apr 2024 05:32:24 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49858	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	603	OUT	OPTIONS /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: a65091f4508bb0469247903f03e62e3a9a4d05337987434aa9b8b3476030a267 date: Wed, 24 Apr 2024 05:32:24 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49855	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun.b2aa875a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:24 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984555 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:24 GMT Etag: "eyIjGZMcFFLwU/EzR76d5w==+ident" expires: Thu, 24 Apr 2025 05:32:24 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55CE) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 98aa14774a22374527705b7fbc576f78341b720b143bc1e9538bd548ed44dcd9 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 11060 x-transaction-id: 53605c7badfb28b8 Content-Length: 11060 Connection: close
2024-04-24 05:32:24 UTC	11060	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 22 5d 2c 7b 33 36 31 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b 69 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun"],{3613:(e,t,i)=>{i.d(t,{Z:()=>a});i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49841	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:24 UTC	1172	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 152 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: vr3Fsvq83ryYbnR0Kla1dmlpdGKmZCC63TrcXPkJ8qt0GgSmFAaXYkIVTcmOPjrb0EmLZ7+fXs2ORraDlMAnjI2dfDM8vQ x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:24 UTC	152	OUT	Data Raw: 63 61 74 65 67 6f 72 79 3d 70 65 72 66 74 6f 77 6e 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 63 6f 6f 6b 69 65 73 4d 65 74 61 64 61 74 61 25 33 41 6c 6f 61 64 25 32 32 25 32 43 25 32 32 70 72 6f 64 75 63 74 25 32 32 25 33 41 25 32 32 72 77 65 62 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 5f 76 61 6c 75 65 25 32 32 25 33 41 35 31 39 36 35 36 30 33 30 34 31 25 37 44 25 35 44 Data Ascii: category=perftown&log=%5B%7B%22description%22%3A%22rweb%3AcookiesMetadata%3Aload%22%2C%22product%22%3A%22rweb%22%2C%22event_value%22%3A51965603041%7D%5D
2024-04-24 05:32:25 UTC	1071	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:24 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:25 GMT x-transaction: d6c9539b548256eb content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: d6c9539b548256eb x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 9 x-connection-hash: de6a719ab15b3c4ee97050a7632bd5df14568c18d1fdca5af3de0acbf47f3773 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49859	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:25 UTC	1094	OUT	GET /1.1/hashflags.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-client-transaction-id: RkU9SgJEJkRgloyM0q5NjpGRjJpenNhCJcIkpAHxClOM4vxe7P5vmrrttTF2xsIjKLFzn0ewpXvZ5yzH+cLUgeX/duqvRQ x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:25 UTC	859	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:24 GMT etag: c3e48e354c3878113722e6aed56e04f3 perf: 7402827104 server: tsa_p content-type: application/json; charset=utf-8 cache-control: public, max-age=1800 content-length: 162907 x-transaction-id: bd58282d876e0b90 strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 10 x-connection-hash: 5e0361cdac7f5af783b7609d5eee95e3ab7b5cc56cefca6743815ebbaa56002a connection: close
2024-04-24 05:32:25 UTC	15525	IN	Data Raw: 5b 7b 22 68 61 73 68 74 61 67 22 3a 22 31 30 30 54 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 30 35 37 33 37 36 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 33 35 37 31 38 34 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 31 30 30 54 68 69 65 76 65 73 45 6d 6f 6a 69 32 30 32 34 2f 31 30 30 54 68 69 65 76 65 73 45 6d 6f 6a 69 32 30 32 34 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 31 30 30 57 49 4e 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 Data Ascii: [{"hashtag":"100T","starting_timestamp_ms":1705737600000,"ending_timestamp_ms":1735718400000,"asset_url":"https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png","is_hashfetti_enabled":false},{"hashtag":"100WIN","starting_timestamp_ms
2024-04-24 05:32:25 UTC	16384	IN	Data Raw: 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 32 30 37 36 37 35 34 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 4e 65 74 66 6c 69 78 5f 42 72 69 64 67 65 72 74 6f 6e 5f 51 32 5f 32 30 32 34 2f 4e 65 74 66 6c 69 78 5f 42 72 69 64 67 65 72 74 6f 6e 5f 51 32 5f 32 30 32 34 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 42 72 69 64 67 65 72 74 6f 6e 53 65 61 73 6f 6e 33 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 32 38 31 38 38 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 Data Ascii: ,"ending_timestamp_ms":1720767540000,"asset_url":"https://abs.twimg.com/hashflags/Netflix_Bridgerton_Q2_2024/Netflix_Bridgerton_Q2_2024.png","is_hashfetti_enabled":false},{"hashtag":"BridgertonSeason3","starting_timestamp_ms":1712818800000,"ending_timesta
2024-04-24 05:32:25 UTC	16384	IN	Data Raw: 31 36 38 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 36 34 37 36 33 34 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 42 46 2d 31 30 34 33 30 2d 46 46 37 52 5f 46 65 62 5f 65 6d 6f 6a 69 5f 32 30 32 34 2f 42 46 2d 31 30 34 33 30 2d 46 46 37 52 5f 46 65 62 5f 65 6d 6f 6a 69 5f 32 30 32 34 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 46 46 54 42 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 33 39 31 33 32 36 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d Data Ascii: 16800000,"ending_timestamp_ms":1716476340000,"asset_url":"https://abs.twimg.com/hashflags/BF-10430-FF7R_Feb_emoji_2024/BF-10430-FF7R_Feb_emoji_2024.png","is_hashfetti_enabled":false},{"hashtag":"FFTB","starting_timestamp_ms":1713913260000,"ending_timestam
2024-04-24 05:32:25 UTC	16384	IN	Data Raw: 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 32 30 38 38 32 37 34 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 4b 61 69 6a 75 4e 6f 38 2f 4b 61 69 6a 75 4e 6f 38 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 4b 61 6c 65 69 64 6f 73 63 6f 70 65 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 31 30 36 35 36 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 32 32 35 35 36 38 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 Data Ascii: nding_timestamp_ms":1720882740000,"asset_url":"https://abs.twimg.com/hashflags/KaijuNo8/KaijuNo8.png","is_hashfetti_enabled":false},{"hashtag":"Kaleidoscope","starting_timestamp_ms":1711065600000,"ending_timestamp_ms":1722556800000,"asset_url":"https://ab
2024-04-24 05:32:25 UTC	16384	IN	Data Raw: 6e 63 65 41 67 61 69 6e 73 74 57 6f 6d 65 6e 5f 32 30 32 30 2e 70 6e 67 22 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 4e 61 69 73 74 65 6e 4f 69 6b 65 75 64 65 74 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 35 38 33 33 38 38 33 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 32 30 35 36 36 36 35 36 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 53 74 6f 70 56 69 6f 6c 65 6e 63 65 41 67 61 69 6e 73 74 57 6f 6d 65 6e 5f 32 30 32 30 2f 53 74 6f 70 56 69 6f 6c 65 6e 63 65 41 67 61 69 6e 73 74 57 6f 6d 65 6e 5f 32 30 32 30 2e 70 6e 67 22 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 4e 41 Data Ascii: nceAgainstWomen_2020.png"},{"hashtag":"NaistenOikeudet","starting_timestamp_ms":1583388300000,"ending_timestamp_ms":2056665600000,"asset_url":"https://abs.twimg.com/hashflags/StopViolenceAgainstWomen_2020/StopViolenceAgainstWomen_2020.png"},{"hashtag":"NA
2024-04-24 05:32:26 UTC	16384	IN	Data Raw: 4e 42 41 5f 53 70 75 72 73 48 61 73 68 6d 6f 6a 69 2f 4e 42 41 5f 53 70 75 72 73 48 61 73 68 6d 6f 6a 69 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 50 52 41 43 49 4d 41 4c 42 52 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 30 36 30 38 33 32 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 33 35 37 31 38 34 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 4c 69 62 65 72 74 79 43 42 4c 6f 4c 45 6d 6f 6a 69 32 30 32 34 2f 4c 69 62 65 72 74 79 43 42 4c 6f 4c 45 6d 6f 6a 69 32 30 Data Ascii: NBA_SpursHashmoji/NBA_SpursHashmoji.png","is_hashfetti_enabled":false},{"hashtag":"PRACIMALBR","starting_timestamp_ms":1706083200000,"ending_timestamp_ms":1735718400000,"asset_url":"https://abs.twimg.com/hashflags/LibertyCBLoLEmoji2024/LibertyCBLoLEmoji20
2024-04-24 05:32:26 UTC	16384	IN	Data Raw: 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 54 65 78 61 73 48 6f 63 6b 65 79 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 36 39 36 39 32 31 32 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 39 37 30 35 36 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 4e 48 4c 5f 44 61 6c 6c 61 73 5f 32 30 32 33 2f 4e 48 4c 5f 44 61 6c 6c 61 73 5f 32 30 32 33 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 54 46 54 52 69 73 69 6e Data Ascii: shfetti_enabled":false},{"hashtag":"TexasHockey","starting_timestamp_ms":1696921200000,"ending_timestamp_ms":1719705600000,"asset_url":"https://abs.twimg.com/hashflags/NHL_Dallas_2023/NHL_Dallas_2023.png","is_hashfetti_enabled":false},{"hashtag":"TFTRisin
2024-04-24 05:32:26 UTC	16384	IN	Data Raw: 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 31 35 38 34 30 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 33 32 39 32 34 38 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 43 68 69 63 61 67 6f 5f 57 68 69 74 65 53 6f 78 5f 4d 4c 42 5f 32 30 32 34 2f 43 68 69 63 61 67 6f 5f 57 68 69 74 65 53 6f 78 5f 4d 4c 42 5f 32 30 32 34 2e 70 6e 67 22 2c 22 69 73 5f 68 61 73 68 66 65 74 74 69 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 57 69 74 68 54 68 65 53 74 61 72 73 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 30 34 36 30 38 30 30 30 30 30 Data Ascii: stamp_ms":1711584000000,"ending_timestamp_ms":1732924800000,"asset_url":"https://abs.twimg.com/hashflags/Chicago_WhiteSox_MLB_2024/Chicago_WhiteSox_MLB_2024.png","is_hashfetti_enabled":false},{"hashtag":"WithTheStars","starting_timestamp_ms":1710460800000
2024-04-24 05:32:26 UTC	16384	IN	Data Raw: b0 95 e0 b1 8d e0 b0 b0 e0 b0 bf e0 b0 95 e0 b1 86 e0 b0 9f e0 b1 8d e0 b0 9f e0 b1 8d e0 b0 b5 e0 b0 bf e0 b0 9f e0 b1 8d e0 b0 9f e0 b0 b0 e0 b1 8d 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 36 33 31 37 36 33 30 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 34 31 30 32 34 34 34 38 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 43 72 69 63 6b 65 74 54 77 69 74 74 65 72 5f 32 30 32 31 2f 43 72 69 63 6b 65 74 54 77 69 74 74 65 72 5f 32 30 32 31 2e 70 6e 67 22 7d 2c 7b 22 68 61 73 68 74 61 67 22 3a 22 e0 b2 95 e0 b3 8d e0 b2 b0 e0 b2 bf e0 b2 95 e0 b3 86 e0 b2 9f e0 b3 8d e0 b2 Data Ascii: ","starting_timestamp_ms":1631763000000,"ending_timestamp_ms":4102444800000,"asset_url":"https://abs.twimg.com/hashflags/CricketTwitter_2021/CricketTwitter_2021.png"},{"hashtag":"
2024-04-24 05:32:26 UTC	16310	IN	Data Raw: 3a 22 e3 83 8f e3 82 a4 e3 83 95 e3 83 a9 e5 b7 a8 e5 a4 a7 e3 83 92 e3 83 8a e3 82 ac e3 83 a9 e3 82 b9 e5 87 ba e6 b2 a1 e2 80 8d 22 2c 22 73 74 61 72 74 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 31 35 31 32 30 30 30 30 30 30 2c 22 65 6e 64 69 6e 67 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 38 37 32 36 34 30 30 30 30 30 2c 22 61 73 73 65 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 2f 68 61 73 68 66 6c 61 67 73 2f 42 46 2d 31 30 37 34 38 5f 43 68 61 6e 67 79 6f 75 5f 68 61 69 6b 79 75 5f 68 61 69 66 75 72 61 5f 4d 61 72 32 30 32 34 2f 42 46 2d 31 30 37 34 38 5f 43 68 61 6e 67 79 6f 75 5f 68 61 69 6b 79 75 5f 68 61 69 66 75 72 61 5f 4d 61 72 32 30 32 34 2e 70 6e 67 22 2c 22 69 73 Data Ascii: :"","starting_timestamp_ms":1711512000000,"ending_timestamp_ms":1718726400000,"asset_url":"https://abs.twimg.com/hashflags/BF-10748_Changyou_haikyu_haifura_Mar2024/BF-10748_Changyou_haikyu_haifura_Mar2024.png","is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49860	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:25 UTC	1173	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 1300 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: MjFJPnYwUjAU4vj4pto5+uXl+O4q6Kw2UbZQ0HWFfif4logqmIob7s6ZwUUCsrZXXMUH6zMT0kECyjoPGEyrAAER8L+wMQ x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:25 UTC	1300	OUT	Data Raw: 63 61 74 65 67 6f 72 79 3d 70 65 72 66 74 6f 77 6e 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 69 6e 69 74 25 33 41 73 74 6f 72 65 50 72 65 70 61 72 65 25 32 32 25 32 43 25 32 32 70 72 6f 64 75 63 74 25 32 32 25 33 41 25 32 32 72 77 65 62 25 32 32 25 32 43 25 32 32 64 75 72 61 74 69 6f 6e 5f 6d 73 25 32 32 25 33 41 33 35 37 25 37 44 25 32 43 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 74 74 66 74 25 33 41 70 65 72 66 53 75 70 70 6f 72 74 65 64 25 32 32 25 32 43 25 32 32 70 72 6f 64 75 63 74 25 32 32 25 33 41 25 32 32 72 77 65 62 25 32 32 25 32 43 25 32 32 64 75 72 61 74 69 6f 6e 5f 6d 73 25 32 32 25 33 41 31 25 37 44 25 32 Data Ascii: category=perftown&log=%5B%7B%22description%22%3A%22rweb%3Ainit%3AstorePrepare%22%2C%22product%22%3A%22rweb%22%2C%22duration_ms%22%3A357%7D%2C%7B%22description%22%3A%22rweb%3Attft%3AperfSupported%22%2C%22product%22%3A%22rweb%22%2C%22duration_ms%22%3A1%7D%2
2024-04-24 05:32:25 UTC	1072	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:24 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:25 GMT x-transaction: d44f65865f6095e8 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: d44f65865f6095e8 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 18 x-connection-hash: 6c5d362593582675bd254cfc123f7090e998e720b00a40d610c2a329866a14d2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49861	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:25 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP.5a28b8fa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:26 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 344429 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:25 GMT Etag: "u6y0JpwroNcNFZrTBZcyzA==+ident" expires: Thu, 24 Apr 2025 05:32:25 GMT Last-Modified: Sat, 20 Apr 2024 05:44:45 GMT perf: 7402827104 Server: ECAcc (lac/55CD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: bf1083708c489be7055210a38779a2b733164c455ec0f8abd3441895d2bd5ff6 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 17 x-ton-expected-size: 185639 x-transaction-id: 8fa16f4afdde87ac Content-Length: 185639 Connection: close
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 50 6c 75 73 2d 6a 73 22 5d 2c 7b 39 36 31 33 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP","icons/IconPlus-js"],{96138:e=>{e.exports={query
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 6e 75 6c 6c 21 3d 73 3f 73 3a 30 29 2b 28 6e 75 6c 6c 21 3d 69 3f 69 3a 30 29 7d 29 29 2c 73 70 61 63 65 53 74 61 74 65 41 74 6f 6d 3a 28 30 2c 6e 2e 63 6e 29 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 28 79 29 2c 73 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 74 61 74 65 3b 72 65 74 75 72 6e 7b 4e 6f 74 53 74 61 72 74 65 64 3a 73 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 2e 53 70 61 63 65 53 74 61 74 65 2e 4e 6f 74 53 74 61 72 74 65 64 2c 50 72 65 50 75 62 6c 69 73 68 65 64 3a 73 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 2e 53 70 61 63 65 53 74 61 74 65 2e 50 72 65 50 75 62 6c 69 73 68 65 64 2c 52 75 6e 6e 69 6e 67 3a 73 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 2e 53 70 61 63 65 53 74 61 74 65 2e 52 75 6e 6e 69 6e 67 2c 54 69 6d 65 64 4f 75 74 3a 73 3d 3d Data Ascii: null!=s?s:0)+(null!=i?i:0)})),spaceStateAtom:(0,n.cn)((e=>{const t=e(y),s=null==t?void 0:t.state;return{NotStarted:s===o.default.SpaceState.NotStarted,PrePublished:s===o.default.SpaceState.PrePublished,Running:s===o.default.SpaceState.Running,TimedOut:s==
2024-04-24 05:32:26 UTC	2	IN	Data Raw: 6d 69 Data Ascii: mi
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 73 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 77 61 69 74 69 6e 67 4d 65 73 73 61 67 65 73 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 3a 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 74 3d 3e 7b 74 68 69 73 2e 77 61 69 74 69 6e 67 48 61 6e 64 6c 65 72 73 2e 73 65 74 28 65 2c 74 29 7d 29 29 7d 7d 63 6c 61 73 73 20 6b 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 73 74 72 65 61 6d 73 4d 61 6e 61 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 4d 61 70 2c 74 3d 6e 65 77 20 4d 61 70 2c 73 3d 6e 65 77 20 4d 61 70 3b 72 65 74 75 72 6e 7b 73 65 74 50 75 62 6c 69 73 68 65 72 73 56 69 64 65 6f 53 74 72 65 61 6d 73 3a 28 74 2c 73 29 3d 3e 7b 65 2e 73 Data Ascii: se(e){const t=this.waitingMessages.get(e);return t?Promise.resolve(t):new Promise((t=>{this.waitingHandlers.set(e,t)}))}}class k{constructor(e){this.streamsManager=function(){const e=new Map,t=new Map,s=new Map;return{setPublishersVideoStreams:(t,s)=>{e.s
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 20 72 65 74 75 72 6e 20 61 20 62 72 6f 61 64 63 61 73 74 21 22 29 29 3b 63 6f 6e 73 74 20 73 3d 74 2e 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 75 65 73 74 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 55 75 69 64 3d 22 22 2c 70 2e 56 49 2e 69 6e 69 74 69 61 6c 69 7a 65 28 73 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 73 65 74 28 67 2e 44 79 2c 7b 6d 75 74 65 64 3a 21 30 7d 29 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 4a 61 6e 75 73 43 6c 69 65 6e 74 28 7b 72 6f 6f 6d 49 64 3a 74 2e 72 6f 6f 6d 5f 69 64 2c 73 74 72 65 61 6d 4e 61 6d 65 3a 74 2e 73 74 72 65 61 6d 5f 6e 61 6d 65 2c 76 69 64 4d 61 6e 54 6f 6b 65 6e 3a 74 2e 63 72 65 64 65 6e 74 69 61 6c 2c 6a 61 6e 75 73 55 72 6c 3a 74 2e 77 65 62 72 74 63 5f 67 77 5f 75 Data Ascii: return a broadcast!"));const s=t.access_token;return this.guestServicesSessionUuid="",p.VI.initialize(s),this.store.set(g.Dy,{muted:!0}),this.initializeJanusClient({roomId:t.room_id,streamName:t.stream_name,vidManToken:t.credential,janusUrl:t.webrtc_gw_u
2024-04-24 05:32:26 UTC	2	IN	Data Raw: 75 70 Data Ascii: up
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 64 61 74 65 41 75 64 69 6f 54 72 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 6c 29 7b 63 6f 6e 73 74 20 64 3d 73 2e 67 65 74 28 61 29 3b 6e 75 6c 6c 3d 3d 64 7c 7c 64 28 29 3b 63 6f 6e 73 74 20 75 3d 28 29 3d 3e 7b 69 66 28 61 3d 3d 3d 6e 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 73 3d 6e 3f 74 2e 67 65 74 28 6e 29 3a 76 6f 69 64 20 30 2c 69 3d 74 2e 67 65 74 28 61 29 3b 6c 28 7b 64 69 73 61 62 6c 65 53 74 72 65 61 6d 3a 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 5b 30 5d 2c 65 6e 61 62 6c 65 53 74 72 65 61 6d 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 5b 30 5d 7d 2c 28 28 29 3d 3e 7b 6e 3d 61 2c 65 2e 73 65 74 28 4e 2c 7b 70 65 72 69 73 63 6f 70 65 55 73 65 72 49 64 3a 61 2c 76 69 64 65 6f 54 72 61 63 6b 3a 72 2e 67 65 74 28 61 29 7d Data Ascii: dateAudioTrack:function(a,c,l){const d=s.get(a);null==d\|\|d();const u=()=>{if(a===n)return;const s=n?t.get(n):void 0,i=t.get(a);l({disableStream:null==s?void 0:s[0],enableStream:null==i?void 0:i[0]},(()=>{n=a,e.set(N,{periscopeUserId:a,videoTrack:r.get(a)}
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 62 6c 65 46 72 61 63 74 69 6f 6e 28 29 26 26 74 68 69 73 2e 5f 72 65 6d 6f 76 65 53 63 72 6f 6c 6c 4c 69 73 74 65 6e 65 72 28 29 2c 65 28 74 29 7d 7d 29 29 7d 72 65 6e 64 65 72 28 29 7b 63 6f 6e 73 74 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 6f 6e 4c 61 79 6f 75 74 3a 74 2c 73 74 79 6c 65 3a 73 7d 3d 74 68 69 73 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 2e 5a 2c 7b 6f 6e 4c 61 79 6f 75 74 3a 74 2c 72 65 66 3a 74 68 69 73 2e 5f 73 65 74 45 6c 65 6d 65 6e 74 52 65 66 2c 73 74 79 6c 65 3a 73 2c 74 65 73 74 49 44 3a 6d 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 7b 67 65 74 53 63 72 6f 6c 6c 50 6c 61 63 65 6d 65 6e 74 3a 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 50 6c 61 63 65 6d Data Ascii: bleFraction()&&this._removeScrollListener(),e(t)}}))}render(){const{children:e,onLayout:t,style:s}=this.props;return i.createElement(n.Z,{onLayout:t,ref:this._setElementRef,style:s,testID:m},"function"==typeof e?e({getScrollPlacement:this._getScrollPlacem
2024-04-24 05:32:26 UTC	2	IN	Data Raw: 3d 3e Data Ascii: =>
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 6d 2c 50 4c 3a 28 29 3d 3e 67 2c 5f 4d 3a 28 29 3d 3e 75 2c 62 49 3a 28 29 3d 3e 63 2c 67 4b 3a 28 29 3d 3e 64 2c 74 4a 3a 28 29 3d 3e 6f 2c 76 77 3a 28 29 3d 3e 68 2c 78 72 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 69 3d 73 28 36 38 38 31 31 29 2c 6e 3d 73 2e 6e 28 69 29 2c 72 3d 73 28 34 36 33 33 31 29 3b 63 6f 6e 73 74 20 6f 3d 7b 43 48 41 54 4d 41 4e 5f 57 45 42 5f 53 4f 43 4b 45 54 3a 22 2f 63 68 61 74 61 70 69 2f 76 31 2f 63 68 61 74 6e 6f 77 22 2c 43 48 41 54 4d 41 4e 5f 52 45 50 4c 41 59 3a 22 2f 63 68 61 74 61 70 69 2f 76 31 2f 68 69 73 74 6f 72 79 22 7d 2c 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 55 6e 69 6e 69 74 69 61 6c 69 7a 65 64 3a 22 55 4e 49 4e 49 54 49 41 4c 49 5a 45 44 22 2c 4f 70 65 6e 69 6e 67 3a 22 4f 50 45 4e 49 4e 47 22 2c Data Ascii: m,PL:()=>g,_M:()=>u,bI:()=>c,gK:()=>d,tJ:()=>o,vw:()=>h,xr:()=>a});var i=s(68811),n=s.n(i),r=s(46331);const o={CHATMAN_WEB_SOCKET:"/chatapi/v1/chatnow",CHATMAN_REPLAY:"/chatapi/v1/history"},a=Object.freeze({Uninitialized:"UNINITIALIZED",Opening:"OPENING",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49863	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:26 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA.979f34da.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:26 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009468 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:26 GMT Etag: "sjf1V/MegZjUfefxRGswCw==+ident" expires: Thu, 24 Apr 2025 05:32:26 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55DD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 5c596c06655f297ddac320186c921a2c57bc6df4f263828de62c67f2655cb56e x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1940 x-transaction-id: 9fb690ba9f54303b Content-Length: 1940 Connection: close
2024-04-24 05:32:26 UTC	1940	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 6f 6e 64 65 6d 61 6e 64 2e 4e 6f 74 46 6f 75 6e 64 7e 62 75 6e 64 6c 65 2e 41 62 6f 75 74 54 68 69 73 41 22 5d 2c 7b 37 33 36 32 34 3a 28 65 2c 69 2c 74 29 3d 3e 7b 74 2e 72 28 69 29 2c 74 2e 64 28 69 2c 7b 64 65 66 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA"],{73624:(e,i,t)=>{t.r(i),t.d(i,{def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49862	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:26 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD.30d39e3a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:26 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009468 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:26 GMT Etag: "Fo6vJOSFpZeZ5/fDRWKXww==+ident" expires: Thu, 24 Apr 2025 05:32:26 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: cca717e548f75bd30c142e100ede354b863160cec94e1cf56cf052d7b9af6200 x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 55353 x-transaction-id: 482097b516e1bbbc Content-Length: 55353 Connection: close
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 64 69 72 65 63 74 4d 65 73 73 61 67 65 73 44 61 74 61 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 22 5d 2c 7b 38 38 39 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 73 3a 28 29 3d 3e 6e 7d 29 3b 76 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD"],{8893:(e,t,i)=>{"use strict";i.d(t,{s:()=>n});v
2024-04-24 05:32:26 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 65 63 6f 72 64 28 61 2c 69 2c 65 3d 3d 3d 43 2e 46 75 6c 6c 3f 74 68 69 73 2e 5f 6d 65 74 61 64 61 74 61 3a 65 3d 3d 3d 43 2e 4d 65 74 61 64 61 74 61 3f 74 68 69 73 2e 5f 66 69 6c 65 4d 65 74 61 64 61 74 61 3a 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 73 5b 65 5d 3d 76 6f 69 64 20 30 7d 7d 29 29 7d 72 65 70 6f 72 74 4f 70 65 72 61 74 69 6f 6e 53 74 61 72 74 28 65 2c 74 3d 21 31 29 7b 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 5b 65 5d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 73 5b 65 5d 26 26 28 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 73 5b 65 5d 3d 4b 28 29 2c 74 68 69 73 2e 5f 6b 65 79 50 72 65 66 69 78 26 26 74 29 29 7b Data Ascii: ecord(a,i,e===C.Full?this._metadata:e===C.Metadata?this._fileMetadata:void 0),this._startTimes[e]=void 0}}))}reportOperationStart(e,t=!1){(Array.isArray(e)?e:[e]).forEach((e=>{if(void 0===this._startTimes[e]&&(this._startTimes[e]=K(),this._keyPrefix&&t)){
2024-04-24 05:32:26 UTC	16383	IN	Data Raw: 3d 3e 7b 6d 2e 72 65 73 65 74 46 6f 72 63 65 64 4e 65 74 77 6f 72 6b 4f 6e 6c 79 28 64 29 7d 29 2c 5b 6d 2c 64 5d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 29 28 65 2c 74 2c 5f 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 2e 5a 26 26 6d 2e 69 6e 63 72 65 6d 65 6e 74 46 65 74 63 68 4b 65 79 28 64 29 2c 65 7d 7d 7d 2c 32 38 39 36 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 53 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 61 2c 73 2c 6e 2c 72 2c 6f 2c 6c 3d 7b 66 72 61 67 6d 65 6e 74 3a 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 Data Ascii: =>{m.resetForcedNetworkOnly(d)}),[m,d]);try{return n()(e,t,_)}catch(e){throw e instanceof c.Z&&m.incrementFetchKey(d),e}}},28961:(e,t,i)=>{"use strict";i.d(t,{S:()=>u});var a,s,n,r,o,l={fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"
2024-04-24 05:32:26 UTC	2	IN	Data Raw: 5f 73 Data Ascii: _s
2024-04-24 05:32:26 UTC	6201	IN	Data Raw: 65 63 73 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 70 72 6f 63 65 73 73 69 6e 67 5f 69 6e 66 6f 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 5f 66 69 6e 61 6c 69 7a 65 53 75 63 63 65 73 73 28 65 29 3b 6c 65 74 20 69 3d 30 3b 73 77 69 74 63 68 28 74 2e 73 74 61 74 65 29 7b 63 61 73 65 22 70 65 6e 64 69 6e 67 22 3a 74 68 69 73 2e 70 72 6f 67 72 65 73 73 4d 6f 64 65 3d 22 77 61 69 74 69 6e 67 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6e 5f 70 72 6f 67 72 65 73 73 22 3a 74 68 69 73 2e 70 72 6f 67 72 65 73 73 4d 6f 64 65 3d 22 70 72 6f 63 65 73 73 69 6e 67 22 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 72 6f 67 72 65 73 73 5f 70 65 72 63 65 6e 74 26 26 28 69 3d 74 2e 70 72 6f 67 72 65 73 73 5f 70 65 72 63 65 6e 74 29 2c Data Ascii: ecs);const t=e.processing_info;if(!t)return void this._finalizeSuccess(e);let i=0;switch(t.state){case"pending":this.progressMode="waiting";break;case"in_progress":this.progressMode="processing","number"==typeof t.progress_percent&&(i=t.progress_percent),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49864	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:26 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt.21c3416a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:26 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984557 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:26 GMT Etag: "KaZgdLPEEMwcvHdj589Xzw==+ident" expires: Thu, 24 Apr 2025 05:32:26 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55B3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 1269f721a2e020c0eb7f15a7628c8c7e1548e9fbe4eb8e07f5e7a311a8181cba x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 13044 x-transaction-id: f0dc28cdd600748d Content-Length: 13044 Connection: close
2024-04-24 05:32:26 UTC	13044	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 41 6e 61 6c 79 74 22 5d 2c 7b 36 38 31 33 39 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 53 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt"],{68139:(t,e,i)=>{i.d(e,{Z:()=>S});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49866	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:26 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.Account~bundl.49f07aba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1604464 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "WyP/7MMa+QaTWa0coyHrkw==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Fri, 05 Apr 2024 15:44:06 GMT perf: 7469935968 Server: ECAcc (lac/55D1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: ff744c701ebb4b31febd494011032d7e37c524080a5172c56f00e43fc5f0f54c x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 1418 x-transaction-id: af5881fe1f72bc90 Content-Length: 1418 Connection: close
2024-04-24 05:32:27 UTC	1418	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 22 5d 2c 7b 33 37 33 32 30 3a 65 3d 3e 7b 0a 2f 2a 0a 6f 62 6a 65 63 74 2d 61 73 73 69 67 6e 0a 28 63 29 20 53 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.Account~bundl"],{37320:e=>{/*object-assign(c) S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49869	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	562	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:27 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:27 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 96a68ddbc49d0eea timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: 3673af9c0cf94ecb10e91b0e0e841b86eada0ae3abcaa4bca125149a9df8d1af connection: close
2024-04-24 05:32:27 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49870	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	555	OUT	GET /1.1/hashflags.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:27 UTC	370	IN	HTTP/1.1 400 Bad Request perf: 7402827104 content-type: application/json;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 62 x-transaction-id: f050cb88a299c8fb x-response-time: 1 x-connection-hash: 0b00fb0fb535db6aadb5d30de49fcb79e13c16f008e1e383e232365ae9cffcea date: Wed, 24 Apr 2024 05:32:27 GMT server: tsa_p connection: close
2024-04-24 05:32:27 UTC	62	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 61 74 61 22 2c 22 63 6f 64 65 22 3a 32 31 35 7d 5d 7d 0a Data Ascii: {"errors":[{"message":"Bad Authentication data","code":215}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49871	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode.72637d2a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143674 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "6rNMy3766zmxaKMOiNtfsQ==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55A5) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 33d5fe49e9a296994b313b4bf94abfec71f773f464cac0d6269b1b403011d6be x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 24 x-ton-expected-size: 405317 x-transaction-id: daa1bc1c18d3ca31 Content-Length: 405317 Connection: close
2024-04-24 05:32:27 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 22 5d 2c 7b 39 33 31 32 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 51 6a 4e 38 5a 64 61 76 46 44 71 78 55 6a 4e 6e Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode"],{93128:e=>{e.exports={queryId:"QjN8ZdavFDqxUjNn
2024-04-24 05:32:27 UTC	16383	IN	Data Raw: 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 5b 22 72 77 65 62 5f 74 69 70 6a 61 72 5f 63 6f 6e 73 75 6d 70 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 67 72 61 70 68 71 6c 5f 65 78 63 6c 75 64 65 5f 64 69 72 65 63 74 69 76 65 5f 65 6e 61 62 6c 65 64 22 2c 22 76 65 72 69 66 69 65 64 5f 70 68 6f 6e 65 5f 6c 61 62 65 6c 5f 65 6e 61 62 6c 65 64 22 2c 22 63 72 65 61 74 6f 72 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5f 74 77 65 65 74 5f 70 72 65 76 69 65 77 5f 61 70 69 5f 65 6e 61 62 6c 65 64 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 67 72 61 70 68 71 6c 5f 74 69 6d 65 6c 69 6e 65 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 65 6e 61 62 6c 65 64 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 5f 67 72 61 70 Data Ascii: eatureSwitches:["rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","creator_subscriptions_tweet_preview_api_enabled","responsive_web_graphql_timeline_navigation_enabled","responsive_web_grap
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 72 65 73 74 5f 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 56 3d 7b 61 6c 69 61 73 3a 22 61 66 66 69 6c 69 61 74 65 73 5f 68 69 67 68 6c 69 67 68 74 65 64 5f 6c 61 62 65 6c 22 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 48 69 67 68 6c 69 67 68 74 65 64 55 73 65 72 4c 61 62 65 6c 52 65 73 70 6f 6e 73 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 65 6e 74 69 74 79 5f 70 72 6f 66 69 6c 65 5f 6c 61 62 65 6c 73 5f 68 69 67 68 6c 69 67 68 74 65 64 5f 6c 61 62 65 6c 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 51 3d 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 Data Ascii: ull,kind:"ScalarField",name:"rest_id",storageKey:null},V={alias:"affiliates_highlighted_label",args:null,concreteType:"HighlightedUserLabelResponse",kind:"LinkedField",name:"identity_profile_labels_highlighted_label",plural:!1,selections:Q=[{alias:null,ar
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 54 65 2c 61 63 74 69 6f 6e 3a 22 54 48 52 4f 57 22 2c 70 61 74 68 3a 22 76 69 65 77 65 72 2e 75 73 65 72 5f 72 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6d 65 6d 62 65 72 73 68 69 70 73 5f 73 6c 69 63 65 2e 69 74 65 6d 73 5f 72 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 63 72 65 61 74 6f 72 5f 72 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 6c 65 67 61 63 79 2e 66 72 69 65 6e 64 73 5f 63 6f 75 6e 74 22 7d 2c 43 65 2c 45 65 2c 78 65 2c 4b 65 2c 7b 6b 69 6e 64 3a 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 46 65 2c 61 63 74 69 6f 6e 3a 22 54 48 52 4f 57 22 2c 70 61 74 68 3a 22 76 69 65 77 65 72 2e 75 73 65 72 5f 72 65 73 75 6c 74 73 2e 72 65 73 Data Ascii: "RequiredField",field:Te,action:"THROW",path:"viewer.user_results.result.community_memberships_slice.items_results.result.creator_results.result.legacy.friends_count"},Ce,Ee,xe,Ke,{kind:"RequiredField",field:Fe,action:"THROW",path:"viewer.user_results.res
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 48 74 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 55 73 65 72 43 6f 6d 6d 75 6e 69 74 79 52 65 6c 61 74 69 6f 6e 73 68 69 70 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 69 65 77 65 72 5f 72 65 6c 61 74 69 6f 6e 73 68 69 70 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6d 6f 64 65 72 61 74 69 6f 6e 5f 73 74 61 74 65 22 2c 70 6c 75 72 61 Data Ascii: l:!1,selections:Ht,storageKey:null},{alias:null,args:null,concreteType:"UserCommunityRelationship",kind:"LinkedField",name:"viewer_relationship",plural:!1,selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"moderation_state",plura
2024-04-24 05:32:28 UTC	5	IN	Data Raw: 65 64 5f 62 79 Data Ascii: ed_by
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 22 7d 2c 73 74 3d 7b 6b 69 6e 64 3a 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 59 2c 61 63 74 69 6f 6e 3a 22 54 48 52 4f 57 22 2c 70 61 74 68 3a 22 63 6f 6d 6d 75 6e 69 74 79 52 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 63 72 65 61 74 6f 72 5f 72 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 6c 65 67 61 63 79 2e 62 6c 6f 63 6b 69 6e 67 22 7d 2c 75 74 3d 7b 6b 69 6e 64 3a 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 24 2c 61 63 74 69 6f 6e 3a 22 54 48 52 4f 57 22 2c 70 61 74 68 3a 22 63 6f 6d 6d 75 6e 69 74 79 52 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 63 72 65 61 74 6f 72 5f 72 65 73 75 6c 74 73 2e 72 65 73 75 6c 74 2e 6c 65 67 61 63 79 2e 66 6f 6c 6c 6f 77 5f 72 65 71 75 65 73 74 5f 73 65 6e 74 22 7d 2c 63 74 3d Data Ascii: "},st={kind:"RequiredField",field:Y,action:"THROW",path:"communityResults.result.creator_results.result.legacy.blocking"},ut={kind:"RequiredField",field:$,action:"THROW",path:"communityResults.result.creator_results.result.legacy.follow_request_sent"},ct=
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6e 76 69 74 65 73 5f 72 65 73 75 6c 74 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6e 2c 7b 6b 69 6e 64 3a 22 54 79 70 65 44 69 73 63 72 69 6d 69 6e 61 74 6f 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 43 6f 6d 6d 75 6e 69 74 79 49 6e 76 69 74 65 73 52 65 73 75 6c 74 22 7d 2c 5f 74 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 66 74 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 55 Data Ascii: ll},{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"invites_result",plural:!1,selections:[n,{kind:"TypeDiscriminator",abstractKey:"__isCommunityInvitesResult"},_t,{kind:"InlineFragment",selections:[ft,{alias:null,args:null,concreteType:"U
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 69 74 79 5f 6a 6f 69 6e 29 29 2c 22 47 51 4c 20 43 6f 6d 6d 75 6e 69 74 69 65 73 3a 20 46 61 69 6c 65 64 20 74 6f 20 4a 6f 69 6e 20 43 6f 6d 6d 75 6e 69 74 79 22 29 29 2e 74 68 65 6e 28 28 65 3d 3e 28 30 2c 47 74 2e 46 76 29 28 65 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6a 6f 69 6e 2c 24 74 2e 5a 50 29 29 29 2c 72 65 71 75 65 73 74 54 6f 4a 6f 69 6e 43 6f 6d 6d 75 6e 69 74 79 3a 6e 3d 3e 65 2e 67 72 61 70 68 51 4c 28 42 6e 28 29 2c 7b 63 6f 6d 6d 75 6e 69 74 79 49 64 3a 6e 2e 63 6f 6d 6d 75 6e 69 74 79 49 64 2c 61 6e 73 77 65 72 3a 6e 2e 61 6e 73 77 65 72 2c 2e 2e 2e 28 30 2c 59 74 2e 53 29 28 74 29 7d 2c 28 30 2c 4a 74 2e 6b 6a 29 28 28 65 3d 3e 21 28 6e 75 6c 6c 21 3d 65 26 26 65 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6a 6f 69 6e 5f 72 65 71 75 65 73 74 5f 63 72 65 Data Ascii: ity_join)),"GQL Communities: Failed to Join Community")).then((e=>(0,Gt.Fv)(e.community_join,$t.ZP))),requestToJoinCommunity:n=>e.graphQL(Bn(),{communityId:n.communityId,answer:n.answer,...(0,Yt.S)(t)},(0,Jt.kj)((e=>!(null!=e&&e.community_join_request_cre
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 6e 20 61 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 75 70 6c 6f 61 64 49 64 29 29 3b 72 65 74 75 72 6e 21 28 30 2c 69 2e 5a 29 28 6e 2c 74 7c 7c 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 6d 65 64 69 61 49 64 73 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 70 28 65 2e 74 65 78 74 2c 65 2e 70 6f 6c 6c 41 63 74 69 76 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 2e 74 65 78 74 2c 65 2e 70 6f 6c 6c 41 63 74 69 76 65 2c 65 2e 6d 65 64 69 61 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 2c 72 29 7b 63 6f 6e 73 74 7b 6d 65 64 69 61 3a 6c 2c 6d 65 64 69 61 54 61 67 73 3a 61 2c 74 65 78 74 3a 6f 7d 3d 65 2c 73 3d 6f 3d 3d 3d 74 2c 75 3d 66 75 6e 63 Data Ascii: n a(e,t){const n=e.map((e=>e.uploadId));return!(0,i.Z)(n,t\|\|[])}function o(e){const t=e.mediaIds\|\|[];return p(e.text,e.pollActive,t)}function s(e){return p(e.text,e.pollActive,e.media)}function u(e,t,n,r){const{media:l,mediaTags:a,text:o}=e,s=o===t,u=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49873	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.2e9524aa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 438521 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "mMbOGazK0h0B3s39qqsT3Q==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Fri, 19 Apr 2024 03:37:54 GMT perf: 7402827104 Server: ECAcc (lac/55A4) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 14e1fc034c7647be6004899e5818ad0fac2c6d1b62a890cd975fc81ba01beb23 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 12753 x-transaction-id: b1b031468709c3b7 Content-Length: 12753 Connection: close
2024-04-24 05:32:27 UTC	12753	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 65 2e 42 69 72 64 22 5d 2c 7b 36 33 31 34 33 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 42 48 3a 28 29 3d 3e 49 2c 51 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird"],{63143:(e,t,o)=>{o.d(t,{BH:()=>I,Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49872	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	640	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery.f358f33a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984558 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "uSfV7NUFrw210FmF5zGC2Q==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55A4) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c3420d273b268763bc693842dce8a4e6fd318765f878f2c9f07cd53ac12e1518 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 3812 x-transaction-id: a15c74c942a615fa Content-Length: 3812 Connection: close
2024-04-24 05:32:27 UTC	3812	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 69 73 63 6f 76 65 72 79 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 5d 2c 7b 32 30 36 30 34 3a 28 65 2c 73 2c 74 29 3d 3e 7b 74 2e 64 28 73 2c 7b 5a 50 3a 28 29 3d 3e 6b 2c 55 4a 3a 28 29 3d 3e 53 7d 29 3b 74 28 36 38 38 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery","bundle.AudioSpaceDetail"],{20604:(e,s,t)=>{t.d(s,{ZP:()=>k,UJ:()=>S});t(688

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49875	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	627	OUT	GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.20677bea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009469 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "bLX4FPeWxg17t/UOVEJ3Qg==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/558C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 6211afc527a3c82f5918cdfa2342d21ea2108aaaad5c4c0b8294051645c12dad x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 1774 x-transaction-id: 916721537698a9f1 Content-Length: 1774 Connection: close
2024-04-24 05:32:27 UTC	1774	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 62 75 6e 64 6c 65 2e 4c 6f 67 67 65 64 4f 75 74 48 6f 6d 65 7e 62 75 6e 64 6c 65 2e 54 56 22 5d 2c 7b 34 34 33 33 37 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 74 2e 64 28 6e 2c 7b 44 30 3a 28 29 3d 3e 6c 2c 63 24 3a 28 29 3d 3e 61 2c 66 44 3a 28 29 3d 3e 72 2c 69 42 3a 28 29 3d 3e 6b 2c 6a 6b 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6f 3d 74 28 36 30 33 32 38 29 2c 69 3d Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV"],{44337:(e,n,t)=>{t.d(n,{D0:()=>l,c$:()=>a,fD:()=>r,iB:()=>k,jk:()=>u});var o=t(60328),i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49874	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	607	OUT	GET /responsive-web/client-web/shared~loader.AppModules~bundle.Ocf.34c152ea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 364502 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "FmbvQWc+gfuZsodO4tMRTA==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Sat, 20 Apr 2024 00:11:29 GMT perf: 7402827104 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 6379d15a8e3a8dbdad5b1d678010ef7921a8af27fdf244267dbe032a3146e78d x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 5753 x-transaction-id: bc8b2d14461d09a5 Content-Length: 5753 Connection: close
2024-04-24 05:32:27 UTC	5753	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 62 75 6e 64 6c 65 2e 4f 63 66 22 5d 2c 7b 35 30 35 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 51 46 3a 28 29 3d 3e 69 2c 51 6f 3a 28 29 3d 3e 6c 2c 68 5a 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 6e 28 32 34 30 35 38 29 3b 63 6f 6e 73 74 20 61 3d 22 65 78 74 65 72 6e 61 6c 5f 72 65 66 65 72 65 72 22 2c 6f 3d 36 30 34 38 30 30 3b 66 75 6e 63 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.Ocf"],{50519:(e,t,n)=>{n.d(t,{QF:()=>i,Qo:()=>l,hZ:()=>s});var r=n(24058);const a="external_referer",o=604800;func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49876	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	626	OUT	GET /responsive-web/client-web/shared~loader.AppModules~loader.LoggedOutNotifications.da86593a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:27 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009469 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:27 GMT Etag: "XUYFk/5+E3WxppZ+QtYzpA==+ident" expires: Thu, 24 Apr 2025 05:32:27 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55C1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a4ee49d73b5d1356f56e0079bbe76c80cc09957f45ec40a1a04945c09eeef830 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 5284 x-transaction-id: f001b05013192bf1 Content-Length: 5284 Connection: close
2024-04-24 05:32:27 UTC	5284	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 6c 6f 61 64 65 72 2e 4c 6f 67 67 65 64 4f 75 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 5d 2c 7b 34 35 39 38 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 42 71 49 48 4b 6d 77 5a 4b 74 69 55 42 50 69 30 37 6a 4b 63 74 67 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 45 6e 61 62 6c 65 4c 6f 67 67 65 64 4f 75 74 57 65 62 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~loader.LoggedOutNotifications"],{45988:e=>{e.exports={queryId:"BqIHKmwZKtiUBPi07jKctg",operationName:"EnableLoggedOutWebNotifications"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49879	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:27 UTC	562	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:28 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:28 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: aaf4727305089547 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: 15147fea369fa2e631d200801e213198b31cfe3c4ff2696b8b1c4fa7c7c9a835 connection: close
2024-04-24 05:32:28 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49880	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:28 UTC	617	OUT	GET /responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.e4ff644a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:28 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009470 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:28 GMT Etag: "ojwEZ6jLwu4+37+xRM7qHA==+ident" expires: Thu, 24 Apr 2025 05:32:28 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55CC) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 0c897b17583c41c3dd589b93d7a81c033ad064f19e4e6d292f311d165bdba051 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 4502 x-transaction-id: 00699b718ca8d353 Content-Length: 4502 Connection: close
2024-04-24 05:32:28 UTC	4502	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 62 75 6e 64 6c 65 2e 4c 6f 67 67 65 64 4f 75 74 48 6f 6d 65 22 5d 2c 7b 37 36 30 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 6e 28 36 38 38 36 29 3b 76 61 72 20 6f 3d 6e 28 32 37 38 34 29 2c 72 3d 6e 28 37 32 36 37 29 2c 69 3d 6e 28 35 34 39 38 37 29 2c 61 3d 6e 28 35 34 38 38 32 29 2c 63 3d 6e 28 36 37 33 30 34 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.LoggedOutHome"],{7604:(e,t,n)=>{n.d(t,{Z:()=>s});n(6886);var o=n(2784),r=n(7267),i=n(54987),a=n(54882),c=n(67304);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49881	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:28 UTC	616	OUT	GET /responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:28 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009470 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:28 GMT Etag: "QhldSek988LI5GEmQ4CjDg==+ident" expires: Thu, 24 Apr 2025 05:32:28 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 4d4899427b32627b4643788380f446636de057e6264000dd155f5041d20c7613 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1975 x-transaction-id: 69b79ed9462483b7 Content-Length: 1975 Connection: close
2024-04-24 05:32:28 UTC	1975	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6e 76 65 72 73 61 74 69 6f 6e 22 5d 2c 7b 34 35 39 32 35 3a 28 65 2c 72 2c 74 29 3d 3e 7b 74 2e 64 28 72 2c 7b 7a 49 3a 28 29 3d 3e 73 2c 74 69 3a 28 29 3d 3e 66 2c 62 69 3a 28 29 3d 3e 63 7d 29 3b 74 28 35 30 35 31 39 29 2c 74 28 36 38 38 36 29 2c 74 28 37 35 36 34 30 29 3b 76 61 72 20 6e 3d 74 28 32 34 37 39 37 29 2c 6c 3d 74 28 39 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.Conversation"],{45925:(e,r,t)=>{t.d(r,{zI:()=>s,ti:()=>f,bi:()=>c});t(50519),t(6886),t(75640);var n=t(24797),l=t(9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49882	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:28 UTC	589	OUT	GET /responsive-web/client-web/loader.AppModules.f040d17a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:28 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 359904 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:28 GMT Etag: "PSt5k0QOPXy67SKSw4o/hA==+ident" expires: Thu, 24 Apr 2025 05:32:28 GMT Last-Modified: Sat, 20 Apr 2024 01:26:47 GMT perf: 7402827104 Server: ECAcc (lac/5590) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: aef14c790388e08228019d754bd67d6f2fc0d90b74078ed1be7dbdce04bb9313 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 38565 x-transaction-id: a4bb13c8fad1fe16 Content-Length: 38565 Connection: close
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 41 70 70 4d 6f 64 75 6c 65 73 22 2c 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 4f 6e 6c 79 56 69 64 65 6f 50 6c 61 79 65 72 22 5d 2c 7b 35 32 35 33 38 3a 28 65 2c 74 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 74 29 2c 73 2e 64 28 74 2c 7b 41 70 70 49 6e 73 74 61 6c 6c 4f 6e 4c 61 6e 64 69 6e 67 50 72 6f 6d 70 74 3a 28 29 3d 3e 70 73 2c 41 75 64 69 6f 4d 6f 64 75 6c 65 3a 28 29 3d 3e 75 73 2c 42 6f 74 74 6f 6d 43 6f 6f 6b 69 65 42 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.AppModules","loader.AudioOnlyVideoPlayer"],{52538:(e,t,s)=>{"use strict";s.r(t),s.d(t,{AppInstallOnLandingPrompt:()=>ps,AudioModule:()=>us,BottomCookieB
2024-04-24 05:32:28 UTC	16383	IN	Data Raw: 28 65 2e 67 65 74 53 74 61 74 65 28 29 29 3f 67 74 28 65 29 2e 74 68 65 6e 28 28 74 3d 3e 7b 74 3d 3d 3d 79 74 2e 53 2e 67 72 61 6e 74 65 64 26 26 65 2e 64 69 73 70 61 74 63 68 28 28 30 2c 62 74 2e 69 47 29 28 29 29 7d 29 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 53 74 3d 7b 69 6e 69 74 3a 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 7b 69 66 28 22 61 63 74 69 76 65 22 3d 3d 3d 74 26 26 65 26 26 65 2e 62 6f 64 79 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3b 65 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 65 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 65 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 74 7d 7d 3b 72 2e 5a 50 2e 69 Data Ascii: (e.getState())?gt(e).then((t=>{t===yt.S.granted&&e.dispatch((0,bt.iG)())})):Promise.resolve(),St={init:e=>{const t=t=>{if("active"===t&&e&&e.body){const t=e.body.style.display;e.body.style.display="none",e.body.clientHeight,e.body.style.display=t}};r.ZP.i
2024-04-24 05:32:28 UTC	5799	IN	Data Raw: 2e 65 2c 61 63 63 65 73 73 69 62 69 6c 69 74 79 52 6f 6c 65 3a 65 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 4c 61 62 65 6c 3f 65 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 52 6f 6c 65 7c 7c 22 69 6d 67 22 3a 76 6f 69 64 20 30 2c 61 63 63 65 73 73 69 62 69 6c 69 74 79 48 69 64 64 65 6e 3a 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 4c 61 62 65 6c 2c 73 74 79 6c 65 3a 5b 72 2e 5a 2e 72 6f 6f 74 2c 65 2e 73 74 79 6c 65 5d 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 34 20 32 34 22 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 6e 75 6c 6c 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 33 20 33 63 2d 36 2e 36 32 2d 2e 31 2d 31 30 2e 33 38 20 32 2e Data Ascii: .e,accessibilityRole:e.accessibilityLabel?e.accessibilityRole\|\|"img":void 0,accessibilityHidden:void 0===e.accessibilityLabel,style:[r.Z.root,e.style],viewBox:"0 0 24 24",children:i.createElement("g",null,i.createElement("path",{d:"M23 3c-6.62-.1-10.38 2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49883	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:28 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings.bf60957a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:28 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009470 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:28 GMT Etag: "Sk3NCbew0/hLlO1FlmltCA==+ident" expires: Thu, 24 Apr 2025 05:32:28 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/558F) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: f924d3757579eb202b31f0302b5fe4558935279807baa009dd77e5a951488810 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 4306 x-transaction-id: 71a9b6a0c52a423f Content-Length: 4306 Connection: close
2024-04-24 05:32:28 UTC	4306	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 41 6e 61 6c 79 74 69 63 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 49 6e 74 65 72 6e 61 6c 73 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 22 5d 2c 7b 39 32 30 35 31 3a 28 65 2c 72 2c 6e 29 3d 3e 7b 6e 2e 64 28 72 2c 7b 69 3a 28 29 3d 3e 79 2e 5a 50 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings"],{92051:(e,r,n)=>{n.d(r,{i:()=>y.ZP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49884	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:28 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.2b78896a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:28 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009470 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:28 GMT Etag: "oM7soSyq2pRBSF64b/5FrA==+ident" expires: Thu, 24 Apr 2025 05:32:28 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 286526c91b29444d8f5a3eb5250fa7642f823b210bf67fac977e7dc39f298e93 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 2829 x-transaction-id: 1392edd751f636ae Content-Length: 2829 Connection: close
2024-04-24 05:32:28 UTC	2829	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 4d 6f 6e 65 74 69 7a 61 74 69 6f 6e 7e 62 75 22 5d 2c 7b 32 30 38 37 31 3a 28 6c 2c 65 2c 61 29 3d 3e 7b 61 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 69 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu"],{20871:(l,e,a)=>{a.d(e,{Z:()=>i});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49885	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	646	OUT	GET /responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.44818d8a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 364504 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:29 GMT Etag: "4NKEIkCT+VmjVT1gTrV8wQ==+ident" expires: Thu, 24 Apr 2025 05:32:29 GMT Last-Modified: Sat, 20 Apr 2024 00:11:29 GMT perf: 7402827104 Server: ECAcc (lac/5593) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 225d424d5ea2e78e0e0a2d63bfa4da51d11c72de64c791a9002cb3befc9cc4d9 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 10979 x-transaction-id: 10c84ad914ab4329 Content-Length: 10979 Connection: close
2024-04-24 05:32:29 UTC	10979	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 4a 6f 62 53 65 61 72 63 68 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 43 68 65 76 72 6f 6e 44 6f 77 6e 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 43 68 65 76 72 6f 6e 55 70 2d 6a 73 22 5d 2c 7b 34 34 39 31 30 3a 28 65 2c 6c 2c 61 29 3d 3e 7b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch","icons/IconChevronDown-js","icons/IconChevronUp-js"],{44910:(e,l,a)=>{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49887	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	630	OUT	GET /responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.f2e86d8a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 364504 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:29 GMT Etag: "amSMnmnM481WfBvngrYD9Q==+ident" expires: Thu, 24 Apr 2025 05:32:29 GMT Last-Modified: Sat, 20 Apr 2024 00:11:29 GMT perf: 7402827104 Server: ECAcc (lac/55D8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 56bcba92cdb0e9f30cf25114982dea3a0a82a0788708ceef48c5c34f53e6da02 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 4535 x-transaction-id: b4e5a70ee65b0436 Content-Length: 4535 Connection: close
2024-04-24 05:32:29 UTC	4535	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 4a 6f 62 53 65 61 72 63 68 22 5d 2c 7b 39 33 31 31 31 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 61 3a 28 29 3d 3e 50 7d 29 3b 76 61 72 20 72 3d 61 28 32 37 38 34 29 2c 6e 3d 61 28 31 39 31 35 33 29 2c 73 3d 61 28 38 35 36 38 32 29 2c 69 3d 61 28 33 31 38 38 29 2c 63 3d 61 28 37 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch"],{93111:(e,t,a)=>{a.d(t,{a:()=>P});var r=a(2784),n=a(19153),s=a(85682),i=a(3188),c=a(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49886	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	610	OUT	GET /responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.0203c12a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143676 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:29 GMT Etag: "O97+skllLHnpnL3QkVuyPg==+ident" expires: Thu, 24 Apr 2025 05:32:29 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55AA) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: de50933121f3e828ff2e8c6a838048c2a2884e8529ea081da5b49f86b2acbae6 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 10398 x-transaction-id: e426747fb298416d Content-Length: 10398 Connection: close
2024-04-24 05:32:29 UTC	10398	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 7e 62 75 6e 64 6c 65 2e 4a 6f 62 53 65 61 72 63 68 22 5d 2c 7b 34 30 33 31 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 50 3a 28 29 3d 3e 67 65 7d 29 3b 6e 28 33 36 37 32 38 29 3b 76 61 72 20 61 2c 63 3d 7b 66 72 61 67 6d 65 6e 74 3a 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.JobSearch"],{40312:(e,t,n)=>{n.d(t,{ZP:()=>ge});n(36728);var a,c={fragment:{argumentDefinitions:[],kind:"Fragment",me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49888	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	586	OUT	GET /responsive-web/client-web/loader.SideNav.031f858a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984560 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:29 GMT Etag: "Fb2MPyEbGH/Dwk5ECGISBQ==+ident" expires: Thu, 24 Apr 2025 05:32:29 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55D1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 38e26ad3affb3e6ec8ddbc2c25388d5b41ab380b426ea7ea10406f62c0df76f0 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 6043 x-transaction-id: dac62076befb9956 Content-Length: 6043 Connection: close
2024-04-24 05:32:29 UTC	6043	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 53 69 64 65 4e 61 76 22 2c 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 4f 6e 6c 79 56 69 64 65 6f 50 6c 61 79 65 72 22 5d 2c 7b 34 33 36 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 4c 7d 29 3b 76 61 72 20 61 3d 69 28 32 37 38 34 29 2c 6e 3d 69 28 32 35 36 38 36 29 2c 73 3d 69 28 35 34 30 34 34 29 2c 6c 3d 69 28 37 33 31 38 36 29 2c 6f 3d 69 28 34 30 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.SideNav","loader.AudioOnlyVideoPlayer"],{4361:(e,t,i)=>{i.r(t),i.d(t,{default:()=>L});var a=i(2784),n=i(25686),s=i(54044),l=i(73186),o=i(40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49889	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.342e570a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009471 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:29 GMT Etag: "L0mQNuTrP6hcINjo08H1Yw==+ident" expires: Thu, 24 Apr 2025 05:32:29 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 7b474c664ef924e4faa0ab79e39a13aac845716daa685f74e2f34db345976932 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 4478 x-transaction-id: 03b189e860adf66c Content-Length: 4478 Connection: close
2024-04-24 05:32:29 UTC	4478	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 62 6f 75 74 54 68 69 73 41 64 7e 62 75 6e 64 6c 65 2e 4e 6f 74 4d 79 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 22 5d 2c 7b 37 36 33 37 32 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi"],{76372:(e,t,s)=>{s.d(t,{Z:()=>a});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49890	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAccount~bundle.Account~bundle.MultiAc.d1ae850a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 438523 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:29 GMT Etag: "s4Y7RQTftefGLgAGtdQpPQ==+ident" expires: Thu, 24 Apr 2025 05:32:29 GMT Last-Modified: Fri, 19 Apr 2024 03:37:54 GMT perf: 7402827104 Server: ECAcc (lac/5598) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: fbaf76dba9d07e89571b0c32b41aff8de310131e3dc7d9b28bb39e314fc2ce5f x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1470 x-transaction-id: b05c40214499422c Content-Length: 1470 Connection: close
2024-04-24 05:32:29 UTC	1470	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 6f 6e 64 65 6d 61 6e 64 2e 4e 6f 74 46 6f 75 6e 64 7e 62 75 6e 64 6c 65 2e 41 62 6f 75 74 54 68 69 73 41 64 7e 62 75 6e 64 6c 65 2e 4e 6f 74 4d 79 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 22 5d 2c 7b 36 33 37 30 35 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAccount~bundle.Account~bundle.MultiAc"],{63705:(e,t,a)=>{a.d(t,{Z:()=>d});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49891	146.75.92.157	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	523	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:29 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:29 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-bur-kbur8200055-BUR X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-24 05:32:29 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49892	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:29 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa.ca47dc2a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009472 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "g+7WJzCaPCDxQeZP1XVuGQ==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55E5) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 92d6fd0f192a3fe14849830519362e13934c5289403fd8311f94f4880b218cdd x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 4968 x-transaction-id: c00fc0f6af84cfd7 Content-Length: 4968 Connection: close
2024-04-24 05:32:30 UTC	4968	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 22 5d 2c 7b 37 32 39 38 33 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 68 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa"],{72983:(e,t,s)=>{s.d(t,{Z:()=>h});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49893	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio.92f8cdba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009472 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "Zvy7E1dcFYhdMRF8hw1Wjg==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5595) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 51e6e321a3d919e8c7890e8159e45e103bb804f22a5c9c354a86ef9657b561a4 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2569 x-transaction-id: fe4657e8950ccae5 Content-Length: 2569 Connection: close
2024-04-24 05:32:30 UTC	2569	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 61 73 68 4d 65 6e 75 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 41 6e 61 6c 79 74 69 63 73 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 22 5d 2c 7b 37 34 36 37 33 3a 28 6e 2c 74 2c 65 29 3d 3e 7b 65 2e 64 28 74 2c 7b 5a 50 3a 28 29 3d 3e 67 7d 29 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio"],{74673:(n,t,e)=>{e.d(t,{ZP:()=>g})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49843	104.244.42.197	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	850	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	551	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:29 GMT perf: 7402827104 server: tsa_p set-cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2; Max-Age=63072000; Expires=Fri, 24 Apr 2026 05:32:30 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9588be7475e591b1 strict-transport-security: max-age=0 x-response-time: 4 x-connection-hash: 4d70e65020341c4d340709187ea988ca0e593a7154adf95c642748dd3516e8cf connection: close
2024-04-24 05:32:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49894	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba.474860ba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984561 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "5gH3XmLYVDI3lcSWZXeURQ==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55DD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e24bd13f4e0e3cf4cd3fe2dc64607a6b9607e75f082f3698a9ac421a3497cf28 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 19271 x-transaction-id: a87792b9b4fdbc33 Content-Length: 19271 Connection: close
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 69 73 63 6f 76 65 72 79 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 62 61 22 5d 2c 7b 32 30 35 34 35 3a 28 65 2c 69 2c 74 29 3d 3e 7b 74 2e 64 28 69 2c 7b 5a 3a 28 29 3d 3e 75 2c 43 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba"],{20545:(e,i,t)=>{t.d(i,{Z:()=>u,C:
2024-04-24 05:32:30 UTC	2888	IN	Data Raw: 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 35 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 76 35 2e 37 34 4c 31 36 2e 38 38 20 31 34 48 37 2e 31 32 7a 22 7d 29 29 7d 2c 7b 77 72 69 74 69 6e 67 44 69 72 65 63 74 69 6f 6e 3a 69 7d 29 7d 3b 72 2e 6d 65 74 61 64 61 74 61 3d 7b 77 69 64 74 68 3a 32 34 2c 68 65 69 67 68 74 3a 32 34 7d 3b 63 6f 6e 73 74 20 6f 3d 72 7d 2c 39 31 37 33 37 3a 28 65 2c 69 2c 74 29 3d 3e 7b 74 2e 72 28 69 29 2c 74 2e 64 28 69 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 73 3d 74 28 32 37 38 34 29 2c 63 3d 74 28 39 30 36 30 31 29 2c 61 3d 74 28 38 33 34 32 37 29 2c 6c 3d 74 28 37 33 35 36 39 29 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 7b 64 69 72 65 63 74 69 6f 6e 3a 69 7d 3d 28 Data Ascii: -.28.22-.5.5-.5h5c.28 0 .5.22.5.5v5.74L16.88 14H7.12z"}))},{writingDirection:i})};r.metadata={width:24,height:24};const o=r},91737:(e,i,t)=>{t.r(i),t.d(i,{default:()=>o});var s=t(2784),c=t(90601),a=t(83427),l=t(73569);const r=(e={})=>{const{direction:i}=(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49895	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.e0286a6a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009472 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "HZ2awWvESDu659VJ0zZ77w==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 0c897b17583c41c3dd589b93d7a81c033ad064f19e4e6d292f311d165bdba051 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 8538 x-transaction-id: 4f1cb6d5738b1cd8 Content-Length: 8538 Connection: close
2024-04-24 05:32:30 UTC	8538	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 42 72 61 6e 64 65 22 5d 2c 7b 33 31 30 39 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 50 3a 28 29 3d 3e 62 7d 29 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande"],{31099:(e,t,n)=>{n.d(t,{ZP:()=>b})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49896	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.a210668a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009472 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "JmziiXlrUo6kykNIspFPdA==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5586) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: af5dc4a26ed1e7c2691ae9f39f6a6a711d4e32aab0d1908dba32d6e016cb5a1a x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 23704 x-transaction-id: 0aed1bce293ae929 Content-Length: 23704 Connection: close
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 22 5d 2c 7b 32 38 34 37 3a 28 65 2c 6f 2c 74 29 3d 3e 7b 74 2e 64 28 6f 2c 7b 43 3a 28 29 3d 3e 4f 7d 29 3b 74 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE"],{2847:(e,o,t)=>{t.d(o,{C:()=>O});t
2024-04-24 05:32:30 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-04-24 05:32:30 UTC	7320	IN	Data Raw: 3a 69 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 53 68 65 65 74 54 65 78 74 3a 76 6f 69 64 20 30 7d 2c 5b 71 2e 63 6f 6d 6d 75 6e 69 74 79 5d 3a 7b 61 72 69 61 46 6f 6c 6c 6f 77 4e 61 6d 65 3a 6e 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 48 65 61 64 6c 69 6e 65 3a 69 65 28 7b 63 6f 6d 6d 75 6e 69 74 79 4e 61 6d 65 3a 6f 7d 29 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 53 68 65 65 74 54 65 78 74 3a 6c 65 7d 2c 5b 71 2e 73 70 61 63 65 73 5d 3a 7b 61 72 69 61 46 6f 6c 6c 6f 77 4e 61 6d 65 3a 76 6f 69 64 20 30 21 3d 3d 6f 3f 60 40 24 7b 53 74 72 69 6e 67 28 6f 29 7d 60 3a 22 22 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 48 65 61 64 6c 69 6e 65 3a 4b 28 7b 73 63 72 65 65 6e 4e 61 6d 65 3a 6f 7d 29 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 53 68 65 65 74 54 65 78 74 3a 65 65 7d Data Ascii: :i,confirmationSheetText:void 0},[q.community]:{ariaFollowName:n,confirmationHeadline:ie({communityName:o}),confirmationSheetText:le},[q.spaces]:{ariaFollowName:void 0!==o?`@${String(o)}`:"",confirmationHeadline:K({screenName:o}),confirmationSheetText:ee}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49897	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B.902d872a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143677 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "FUA51PIjlMuD1Oyomn2+Iw==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55B9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: ef08d47634d8befe0dc3a94374447a56d620adfa21b36ac0e68a3cf2d50e9e21 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 26 x-ton-expected-size: 180797 x-transaction-id: fcca486105e404d5 Content-Length: 180797 Connection: close
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 69 73 63 6f 76 65 72 79 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 62 61 72 53 63 72 65 65 6e 7e 62 75 6e 64 6c 65 2e 42 22 2c 22 6c 6f 61 64 65 72 2e 72 69 63 68 53 63 72 69 62 65 41 63 74 69 6f 6e 22 5d 2c 7b 32 31 32 30 36 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.B","loader.richScribeAction"],{21206:e=>{e.exports=
2024-04-24 05:32:30 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 74 68 41 72 74 69 63 6c 65 52 69 63 68 43 6f 6e 74 65 6e 74 53 74 61 74 65 22 2c 22 77 69 74 68 41 72 74 69 63 6c 65 50 6c 61 69 6e 54 65 78 74 22 5d 7d 7d 7d 2c 35 34 34 39 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 70 4d 5a 72 48 52 4e 73 6d 45 6b 58 67 62 6e 33 74 4f 79 72 37 51 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 55 6e 6d 75 74 65 4c 69 73 74 22 2c 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 3a 22 6d 75 74 61 74 69 6f 6e 22 2c 6d 65 74 61 64 61 74 61 3a 7b 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 5b 5d 2c 66 69 65 6c 64 54 6f 67 67 6c 65 73 3a 5b 5d 7d 7d 7d 2c 32 34 37 33 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 79 59 59 68 46 6e 62 74 79 64 76 51 47 66 31 37 71 4b Data Ascii: thArticleRichContentState","withArticlePlainText"]}}},5449:e=>{e.exports={queryId:"pMZrHRNsmEkXgbn3tOyr7Q",operationName:"UnmuteList",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},24735:e=>{e.exports={queryId:"yYYhFnbtydvQGf17qK
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 7d 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 75 2e 6e 6f 29 2c 77 3d 28 7b 64 69 73 6d 69 73 73 65 64 45 6e 74 72 69 65 73 3a 65 2c 65 6e 74 72 69 65 73 3a 72 2c 68 61 6e 64 6c 65 72 52 65 67 69 73 74 72 79 3a 61 2c 70 69 6e 6e 65 64 45 6e 74 72 79 3a 64 7d 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 2c 6e 3d 72 3d 3e 7b 63 6f 6e 73 74 20 64 3d 61 2e 67 65 74 48 61 6e 64 6c 65 72 28 72 29 2c 6f 3d 64 26 26 28 64 2e 73 70 6c 69 63 65 7c 7c 64 2e 72 65 6e 64 65 72 29 3b 69 66 28 64 26 26 6f 29 7b 6c 65 74 20 61 3d 64 2e 64 69 76 69 64 65 72 7c 7c 79 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 61 28 72 29 29 2c 61 2e 74 6f 70 26 26 74 2e 61 64 64 44 69 76 69 64 65 72 46 6f 72 28 72 2c 4d 2e 54 4f 50 29 Data Ascii: }}),m=Object.values(u.no),w=({dismissedEntries:e,entries:r,handlerRegistry:a,pinnedEntry:d})=>{const t=new D,n=r=>{const d=a.getHandler(r),o=d&&(d.splice\|\|d.render);if(d&&o){let a=d.divider\|\|y;"function"==typeof a&&(a=a(r)),a.top&&t.addDividerFor(r,M.TOP)
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 6e 73 74 7b 69 64 5f 73 74 72 3a 65 7d 3d 75 3b 72 65 74 75 72 6e 7b 2e 2e 2e 28 30 2c 74 65 2e 5a 29 28 7b 68 69 64 65 53 75 62 74 65 78 74 3a 21 30 2c 6c 69 73 74 3a 75 2c 74 6f 67 67 6c 65 4d 75 74 65 3a 77 2c 73 63 72 69 62 65 3a 65 3d 3e 68 28 7b 2e 2e 2e 5f 2c 2e 2e 2e 65 7d 2c 62 29 7d 29 2c 66 65 65 64 62 61 63 6b 4b 65 79 3a 69 2c 6f 6e 55 6e 64 6f 3a 28 29 3d 3e 7b 77 28 65 2c 7b 6d 75 74 65 3a 21 31 7d 29 7d 2c 73 6b 69 70 44 65 66 61 75 6c 74 41 63 74 69 6f 6e 3a 21 31 2c 77 69 6c 6c 53 63 72 69 62 65 3a 21 30 7d 7d 69 66 28 6f 2e 72 69 63 68 42 65 68 61 76 69 6f 72 2e 74 6f 67 67 6c 65 46 6f 6c 6c 6f 77 54 6f 70 69 63 56 32 26 26 63 29 7b 63 6f 6e 73 74 7b 66 6f 6c 6c 6f 77 69 6e 67 3a 65 2c 69 64 3a 72 2c 6e 61 6d 65 3a 61 7d 3d 63 3b 72 65 Data Ascii: nst{id_str:e}=u;return{...(0,te.Z)({hideSubtext:!0,list:u,toggleMute:w,scribe:e=>h({..._,...e},b)}),feedbackKey:i,onUndo:()=>{w(e,{mute:!1})},skipDefaultAction:!1,willScribe:!0}}if(o.richBehavior.toggleFollowTopicV2&&c){const{following:e,id:r,name:a}=c;re
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 65 2e 53 65 74 74 69 6e 67 73 7e 62 75 6e 64 6c 65 2e 44 69 73 70 6c 61 22 29 2c 61 2e 65 28 22 6c 6f 61 64 65 72 2e 73 65 6c 66 54 68 72 65 61 64 54 77 65 65 74 43 6f 6d 70 6f 73 65 72 48 61 6e 64 6c 65 72 22 29 5d 29 2e 74 68 65 6e 28 61 2e 62 69 6e 64 28 61 2c 39 37 32 38 33 29 29 2c 6c 6f 61 64 65 72 4b 65 79 3a 22 64 65 66 61 75 6c 74 53 65 6c 66 54 68 72 65 61 64 54 77 65 65 74 43 6f 6d 70 6f 73 65 72 4c 6f 61 64 65 72 22 2c 73 74 72 61 74 65 67 79 3a 61 28 39 35 30 33 34 29 2e 5a 2e 4f 6e 44 65 6d 61 6e 64 7d 2c 6e 3d 64 2e 4f 5a 28 74 29 7d 2c 38 30 30 31 37 3a 28 65 2c 72 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 72 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 64 3d 61 28 33 39 39 32 38 29 3b 61 28 36 38 38 36 29 3b Data Ascii: e.Settings~bundle.Displa"),a.e("loader.selfThreadTweetComposerHandler")]).then(a.bind(a,97283)),loaderKey:"defaultSelfThreadTweetComposerLoader",strategy:a(95034).Z.OnDemand},n=d.OZ(t)},80017:(e,r,a)=>{"use strict";a.d(r,{Z:()=>n});var d=a(39928);a(6886);
2024-04-24 05:32:30 UTC	4	IN	Data Raw: 72 73 61 74 Data Ascii: rsat
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 69 6f 6e 43 6f 6e 74 72 6f 6c 73 45 64 75 63 61 74 69 6f 6e 54 65 78 74 3a 6f 3d 21 31 2c 68 69 64 65 45 78 63 6c 75 73 69 76 69 74 79 49 6e 66 6f 45 64 75 63 61 74 69 6f 6e 54 65 78 74 49 6e 52 65 70 6c 69 65 73 3a 6c 3d 21 31 2c 68 69 64 65 48 69 67 68 6c 69 67 68 74 65 64 55 73 65 72 4c 61 62 65 6c 3a 69 3d 21 31 2c 68 69 64 65 52 65 70 6c 79 43 6f 6e 74 65 78 74 4d 6f 64 65 3a 73 2c 68 69 64 65 54 72 75 73 74 65 64 46 72 69 65 6e 64 73 45 64 75 63 61 74 69 6f 6e 54 65 78 74 49 6e 52 65 70 6c 69 65 73 3a 75 3d 21 31 2c 69 73 43 6f 6d 70 61 63 74 3a 63 3d 21 31 2c 73 68 6f 75 6c 64 53 65 6c 66 54 68 72 65 61 64 49 6e 63 6c 75 64 65 41 76 61 74 61 72 3a 70 3d 21 31 2c 73 68 6f 75 6c 64 53 74 6f 72 65 54 79 70 65 61 68 65 61 64 49 74 65 6d 3a 68 2c 73 68 Data Ascii: ionControlsEducationText:o=!1,hideExclusivityInfoEducationTextInReplies:l=!1,hideHighlightedUserLabel:i=!1,hideReplyContextMode:s,hideTrustedFriendsEducationTextInReplies:u=!1,isCompact:c=!1,shouldSelfThreadIncludeAvatar:p=!1,shouldStoreTypeaheadItem:h,sh
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 22 29 2c 61 2e 65 28 22 6c 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 22 29 5d 29 2e 74 68 65 6e 28 61 2e 62 69 6e 64 28 61 2c 34 39 34 38 32 29 29 2c 6c 6f 61 64 65 72 4f 70 74 69 6f 6e 73 3a 65 2c 6c 6f 61 64 65 72 4b 65 79 3a 22 63 61 72 6f 75 73 65 6c 4d 65 64 69 61 54 77 65 65 74 4c 6f 61 64 65 72 22 2c 73 74 72 61 74 65 67 79 3a 64 2e 5a 2e 43 72 69 74 69 63 61 6c 7d 29 2c 73 3d 65 3d 3e 28 7b 6c 6f 61 64 65 72 3a 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 61 2e 65 28 22 6d 6f 64 75 6c 65 73 2e 63 6f 6d 6d 6f 6e 22 29 2c 61 2e 65 28 22 6d 6f 64 75 6c 65 73 2e 61 75 64 69 6f 22 29 2c 61 2e 65 28 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 7e 6c 6f 61 Data Ascii: oader.tweetHandler"),a.e("loader.tweetHandler")]).then(a.bind(a,49482)),loaderOptions:e,loaderKey:"carouselMediaTweetLoader",strategy:d.Z.Critical}),s=e=>({loader:()=>Promise.all([a.e("modules.common"),a.e("modules.audio"),a.e("shared~loader.AudioDock~loa
2024-04-24 05:32:30 UTC	16383	IN	Data Raw: 79 4c 6f 63 61 74 69 6f 6e 3a 74 7d 2c 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 5a 2c 7b 61 63 63 65 73 73 69 62 69 6c 69 74 79 4c 61 62 65 6c 3a 61 2c 66 65 74 63 68 53 74 61 74 75 73 3a 65 2c 6f 6e 52 65 71 75 65 73 74 52 65 74 72 79 3a 74 68 69 73 2e 5f 68 61 6e 64 6c 65 49 6e 69 74 69 61 6c 52 65 74 72 79 2c 72 65 6e 64 65 72 3a 74 68 69 73 2e 5f 72 65 6e 64 65 72 2c 72 65 6e 64 65 72 46 61 69 6c 75 72 65 3a 6f 26 26 6e 3f 74 68 69 73 2e 5f 72 65 6e 64 65 72 55 6e 61 76 61 69 6c 61 62 6c 65 3a 76 6f 69 64 20 30 2c 72 65 74 72 79 61 62 6c 65 3a 21 6f 7d 29 29 29 7d 5f 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 63 6f 6e 73 74 7b 68 69 73 74 6f 72 79 3a 65 2c 69 6e 69 74 69 61 6c 46 65 74 63 68 53 74 61 74 75 73 3a 72 2c 69 73 53 69 6e 67 6c 65 Data Ascii: yLocation:t},d.createElement(b.Z,{accessibilityLabel:a,fetchStatus:e,onRequestRetry:this._handleInitialRetry,render:this._render,renderFailure:o&&n?this._renderUnavailable:void 0,retryable:!o})))}_initialize(){const{history:e,initialFetchStatus:r,isSingle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49899	104.244.42.195	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	1064	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:31 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:30 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 59cf26c9f601f6e8 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 5e84234da1c9def8c18d4e52e3d14ef06b2d0c6ef5f60d82596a0f124261fd01 connection: close
2024-04-24 05:32:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49898	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa.2264e83a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:30 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143677 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:30 GMT Etag: "Ie6LpU7yyq9xCphQIFprNQ==+ident" expires: Thu, 24 Apr 2025 05:32:30 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55DF) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 3b892cd8ec864aa4d838699997b991ab396beee449fc8be00e755b7d80e10c15 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 24 x-ton-expected-size: 373967 x-transaction-id: 1e0e9008dd793263 Content-Length: 373967 Connection: close
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 7e 62 75 6e 64 6c 65 2e 44 69 73 70 6c 61 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 41 74 42 6f 6c 64 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 42 6f 6c 64 43 6f 6d 70 61 63 74 2d 6a 73 22 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa","icons/IconAtBold-js","icons/IconBoldCompact-js"
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 62 7d 29 3b 6e 28 32 31 35 31 35 29 2c 6e 28 33 36 37 32 38 29 3b 76 61 72 20 69 3d 6e 28 32 37 38 34 29 2c 6f 3d 6e 28 31 39 31 37 39 29 2c 72 3d 6e 28 34 34 34 38 37 29 2c 61 3d 6e 28 34 35 31 38 34 29 2c 73 3d 6e 2e 6e 28 61 29 2c 6c 3d 6e 28 38 33 38 38 32 29 2c 63 3d 6e 28 31 32 30 36 29 2c 64 3d 6e 28 32 33 30 32 31 29 2c 75 3d 6e 28 35 30 38 31 33 29 2c 6d 3d 6e 28 39 37 37 37 30 29 2c 70 3d 6e 28 33 34 37 37 30 29 2c 68 3d 6e 28 39 37 39 35 31 29 3b 63 6f 6e 73 74 20 67 3d 73 28 29 2e 6a 37 62 62 31 61 34 33 2c 5f 3d 73 28 29 2e 68 65 66 35 39 36 30 63 2c 62 3d 28 30 2c 70 2e 4d 29 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 6f 6e 42 6c 6f 63 6b 3a 74 2c 6f 6e 43 6c 6f 73 65 3a 6e 2c 6f 6e Data Ascii: strict";n.d(t,{Z:()=>b});n(21515),n(36728);var i=n(2784),o=n(19179),r=n(44487),a=n(45184),s=n.n(a),l=n(83882),c=n(1206),d=n(23021),u=n(50813),m=n(97770),p=n(34770),h=n(97951);const g=s().j7bb1a43,_=s().hef5960c,b=(0,p.M)((e=>{const{onBlock:t,onClose:n,on
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 77 68 69 74 65 4f 6e 43 6f 6c 6f 72 2c 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 66 6f 72 6d 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 22 7d 2c 69 63 6f 6e 3a 7b 68 65 69 67 68 74 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 34 2c 77 69 64 74 68 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 34 7d 2c 73 77 69 70 65 61 62 6c 65 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 63 65 6c 6c 42 61 63 6b 67 72 6f 75 6e 64 7d 7d 29 29 29 3b 76 61 72 20 6f 65 3d 6e 28 35 32 38 32 30 29 2c 72 65 3d 6e 28 35 36 31 38 29 2c 61 65 3d 6e 28 39 30 36 34 39 29 2c 73 65 3d 6e 28 37 33 33 33 29 2c 6c 65 3d 6e 28 31 Data Ascii: whiteOnColor,paddingHorizontal:e.spaces.space16,transition:"transform 0.2s ease-in-out"},icon:{height:e.spaces.space24,width:e.spaces.space24},swipeable:{backgroundColor:e.colors.cellBackground}})));var oe=n(52820),re=n(5618),ae=n(90649),se=n(7333),le=n(1
2024-04-24 05:32:31 UTC	3	IN	Data Raw: 65 2e 74 Data Ascii: e.t
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 77 65 65 74 54 65 78 74 7d 29 29 3a 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 6e 2e 5a 50 2c 7b 6c 69 6e 6b 3a 60 24 7b 65 2e 70 65 72 6d 61 6c 69 6e 6b 7d 2f 71 75 69 63 6b 5f 70 72 6f 6d 6f 74 65 5f 77 65 62 2f 69 6e 74 72 6f 60 2c 73 69 7a 65 3a 61 2c 74 79 70 65 3a 73 7d 2c 61 6e 29 7d 76 61 72 20 6c 6e 3d 6e 28 38 35 30 34 32 29 3b 63 6f 6e 73 74 20 63 6e 3d 62 28 29 2e 63 63 31 39 39 64 63 30 2c 64 6e 3d 62 28 29 2e 67 36 32 33 37 61 31 65 2c 75 6e 3d 62 28 29 2e 64 36 62 35 39 34 39 65 2c 6d 6e 3d 65 3d 3e 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 70 61 75 73 65 64 22 3a 72 65 74 75 72 6e 20 75 6e 3b 63 61 73 65 22 62 6f 6f 73 74 2d 69 6e 2d 70 72 6f 67 72 65 73 73 22 3a 72 65 74 75 72 6e 20 63 6e 3b 64 65 66 61 75 6c 74 3a 72 65 74 Data Ascii: weetText})):o.createElement(on.ZP,{link:`${e.permalink}/quick_promote_web/intro`,size:a,type:s},an)}var ln=n(85042);const cn=b().cc199dc0,dn=b().g6237a1e,un=b().d6b5949e,mn=e=>{switch(e){case"paused":return un;case"boost-in-progress":return cn;default:ret
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 6e 74 65 78 74 29 3b 6c 65 74 20 41 3d 6e 75 6c 6c 3b 5f 2e 6e 6f 74 65 5f 74 77 65 65 74 26 26 28 41 3d 7b 2e 2e 2e 5f 2e 6e 6f 74 65 5f 74 77 65 65 74 7d 29 3b 63 6f 6e 73 74 20 49 3d 74 68 69 73 2e 5f 67 65 74 49 6e 6c 69 6e 65 4d 65 64 69 61 53 70 65 63 28 41 2c 5f 29 3b 72 65 74 75 72 6e 20 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 52 2e 7a 2c 7b 63 6f 6e 74 65 78 74 3a 41 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 74 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 42 65 2c 7b 61 72 74 69 63 6c 65 3a 77 3f 5f 2e 61 72 74 69 63 6c 65 3a 76 6f 69 64 20 30 2c 64 69 73 61 62 6c 65 54 72 61 6e 73 6c 61 74 69 6f 6e 3a 5f 2e 75 73 65 72 2e 70 72 6f 74 65 63 74 65 64 2c 64 69 73 70 6c 61 79 54 65 78 74 52 61 6e 67 65 3a Data Ascii: ntext);let A=null;_.note_tweet&&(A={..._.note_tweet});const I=this._getInlineMediaSpec(A,_);return o.createElement(R.z,{context:A},o.createElement(It,null,o.createElement(Be,{article:w?_.article:void 0,disableTranslation:_.user.protected,displayTextRange:
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 41 75 74 68 6f 72 4c 61 62 65 6c 55 73 65 72 4e 61 6d 65 43 6f 6c 6f 72 28 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 24 2e 5a 2c 28 30 2c 69 2e 5a 29 28 7b 7d 2c 65 2c 7b 6f 6e 4c 69 6e 6b 43 6c 69 63 6b 3a 6e 2c 6f 6e 53 63 72 65 65 6e 4e 61 6d 65 43 6c 69 63 6b 3a 6e 2c 70 72 6f 6d 6f 74 65 64 43 6f 6e 74 65 6e 74 3a 72 2c 72 65 6e 64 65 72 55 73 65 72 48 6f 76 65 72 43 61 72 64 3a 74 68 69 73 2e 5f 72 65 6e 64 65 72 55 73 65 72 48 6f 76 65 72 43 61 72 64 2c 72 65 6e 64 65 72 55 73 65 72 4e 61 6d 65 48 69 67 68 6c 69 67 68 74 73 3a 68 3f 65 3d 3e 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 46 6e 2c 7b 63 6f 6c 6f 72 3a 67 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 7d 29 3a 76 6f 69 64 20 30 2c 73 63 72 Data Ascii: AuthorLabelUserNameColor():void 0;return o.createElement($.Z,(0,i.Z)({},e,{onLinkClick:n,onScreenNameClick:n,promotedContent:r,renderUserHoverCard:this._renderUserHoverCard,renderUserNameHighlights:h?e=>o.createElement(Fn,{color:g,name:e.name}):void 0,scr
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 54 6f 70 43 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 2c 62 6f 72 64 65 72 54 6f 70 53 74 79 6c 65 3a 22 73 6f 6c 69 64 22 2c 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 3a 65 2e 62 6f 72 64 65 72 57 69 64 74 68 73 2e 73 6d 61 6c 6c 2c 68 65 69 67 68 74 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 34 38 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 73 70 61 63 65 2d 62 65 74 77 65 65 6e 22 7d 2c 61 63 74 69 6f 6e 42 61 72 57 69 74 68 49 6e 6c 69 6e 65 52 65 70 6c 79 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 43 6f 6c 6f 72 3a 65 2e 63 6f 6c 6f 72 73 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 79 6c 65 3a 22 73 6f 6c 69 64 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 3a 65 Data Ascii: TopColor:e.colors.borderColor,borderTopStyle:"solid",borderTopWidth:e.borderWidths.small,height:e.spaces.space48,justifyContent:"space-between"},actionBarWithInlineReply:{borderBottomColor:e.colors.borderColor,borderBottomStyle:"solid",borderBottomWidth:e
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 74 68 3a 22 31 30 30 25 22 7d 7d 29 29 29 2c 64 3d 28 7b 6e 75 6d 62 65 72 4f 66 4c 69 6e 65 73 3a 65 2c 73 69 7a 65 3a 74 3d 22 62 6f 64 79 22 2c 73 74 79 6c 65 3a 6e 2c 74 69 74 6c 65 3a 61 2c 77 65 69 67 68 74 3a 73 3d 22 62 6f 6c 64 22 7d 29 3d 3e 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 5a 2c 7b 73 74 79 6c 65 3a 5b 63 2e 74 69 74 6c 65 57 72 61 70 70 65 72 2c 21 61 26 26 63 2e 74 69 74 6c 65 50 6c 61 63 65 68 6f 6c 64 65 72 5d 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 5a 50 2c 7b 6e 75 6d 62 65 72 4f 66 4c 69 6e 65 73 3a 65 2c 73 69 7a 65 3a 74 2c 73 74 79 6c 65 3a 6e 2c 74 65 73 74 49 44 3a 22 74 77 69 74 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 69 74 6c 65 22 2c 77 65 69 67 68 74 3a 73 7d 2c 61 7c 7c 6c 29 29 7d 2c 32 Data Ascii: th:"100%"}}))),d=({numberOfLines:e,size:t="body",style:n,title:a,weight:s="bold"})=>i.createElement(o.Z,{style:[c.titleWrapper,!a&&c.titlePlaceholder]},i.createElement(r.ZP,{numberOfLines:e,size:t,style:n,testID:"twitter-article-title",weight:s},a\|\|l))},2
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 26 66 28 29 7d 29 2c 5b 66 2c 6d 5d 29 3b 63 6f 6e 73 74 20 79 3d 28 29 3d 3e 7b 6e 26 26 6e 28 29 7d 2c 76 3d 63 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 5a 50 2c 7b 69 63 6f 6e 3a 54 2c 6f 6e 50 72 65 73 73 3a 63 2c 70 72 65 76 65 6e 74 46 6f 63 75 73 53 68 69 66 74 3a 21 30 2c 73 69 7a 65 3a 22 73 6d 61 6c 6c 22 2c 73 74 79 6c 65 3a 6b 2e 72 65 6d 6f 76 65 54 77 65 65 74 42 75 74 74 6f 6e 2c 74 65 73 74 49 44 3a 22 72 65 6d 6f 76 65 2d 62 75 74 74 6f 6e 22 2c 74 79 70 65 3a 22 70 72 69 6d 61 72 79 54 65 78 74 22 7d 29 3a 6e 75 6c 6c 2c 43 3d 65 3d 3e 7b 63 6f 6e 73 74 7b 6c 69 6e 6b 3a 74 7d 3d 65 2c 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 70 61 74 68 6e 61 6d 65 3a 74 2c 73 74 61 74 65 3a 7b 7d 7d 3a 74 2c 72 Data Ascii: &f()}),[f,m]);const y=()=>{n&&n()},v=c?o.createElement(a.ZP,{icon:T,onPress:c,preventFocusShift:!0,size:"small",style:k.removeTweetButton,testID:"remove-button",type:"primaryText"}):null,C=e=>{const{link:t}=e,n="string"==typeof t?{pathname:t,state:{}}:t,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49900	104.244.42.197	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	904	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2
2024-04-24 05:32:31 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:30 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4f35eb3c328c60c6 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 016b5d17d57fd3f8584743e8db93f289978b3c73bdcfa1d958cc9527ad22008f connection: close
2024-04-24 05:32:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49902	104.244.42.197	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	673	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2
2024-04-24 05:32:31 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:30 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: bf4a54400b0cdaaf strict-transport-security: max-age=0 x-response-time: 4 x-connection-hash: 3a7b618692171a16685b8f78f0f32192d82c86e11951f90da6ac6e99c58e1587 connection: close
2024-04-24 05:32:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49901	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:30 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~.ccd6e47a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:31 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 364490 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:31 GMT Etag: "3cL9w+rIIjPFClWv6a3nPQ==+ident" expires: Thu, 24 Apr 2025 05:32:31 GMT Last-Modified: Sat, 20 Apr 2024 00:11:29 GMT perf: 7402827104 Server: ECAcc (lac/55AB) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 772e8e8c285bdffdd3d2e8061a2f2ce3353dee3ccc61dfe472ebb11e0b8675a9 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 14871 x-transaction-id: 34e4c5d40ebc985b Content-Length: 14871 Connection: close
2024-04-24 05:32:31 UTC	14871	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 41 6e 61 6c 79 74 69 63 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 69 73 63 6f 76 65 72 79 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 62 61 72 53 63 72 65 65 6e 7e 22 5d 2c 7b 37 35 33 35 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 43 74 3a 28 29 3d 3e 5a 2c 4a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AccountAnalytics~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~"],{75352:(e,t,r)=>{r.d(t,{Ct:()=>Z,J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49903	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle..60c1138a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:31 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 360028 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:31 GMT Etag: "EHk75vOiLjxPDSKbPklGhg==+ident" expires: Thu, 24 Apr 2025 05:32:31 GMT Last-Modified: Sat, 20 Apr 2024 01:19:53 GMT perf: 7402827104 Server: ECAcc (lac/5587) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 7e6d3d188f8af46616b522386934427e0208007b024eaa3a804f89403f05066c x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 22388 x-transaction-id: e7e9184c54b500c5 Content-Length: 22388 Connection: close
2024-04-24 05:32:31 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 69 73 63 6f 76 65 72 79 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 62 61 72 53 63 72 65 65 6e 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 22 5d 2c 7b 33 39 39 36 38 3a 28 65 2c 64 2c 72 29 3d 3e 7b 72 2e 64 28 64 2c 7b 42 3a 28 29 3d 3e 7a 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpacebarScreen~bundle.Birdwatch~bundle."],{39968:(e,d,r)=>{r.d(d,{B:()=>z});
2024-04-24 05:32:31 UTC	1	IN	Data Raw: 54 Data Ascii: T
2024-04-24 05:32:31 UTC	6004	IN	Data Raw: 72 75 65 28 65 29 2c 74 68 69 73 2e 5f 72 65 6e 64 65 72 4f 76 65 72 66 6c 6f 77 49 74 65 6d 73 3d 65 3d 3e 65 2e 6d 61 70 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 74 65 72 6e 61 6c 3a 64 2c 6c 69 6e 6b 3a 72 2c 74 65 78 74 3a 61 7d 3d 65 3b 72 65 74 75 72 6e 7b 74 65 78 74 3a 61 2c 6c 69 6e 6b 3a 7b 70 61 74 68 6e 61 6d 65 3a 72 2c 65 78 74 65 72 6e 61 6c 3a 21 64 7d 7d 7d 29 29 2c 74 68 69 73 2e 5f 72 65 6e 64 65 72 49 74 65 6d 3d 28 7b 69 6e 74 65 72 6e 61 6c 3a 65 2c 6c 69 6e 6b 3a 64 2c 74 65 78 74 3a 72 7d 29 3d 3e 7b 63 6f 6e 73 74 7b 61 6c 69 67 6e 3a 6f 2c 74 65 78 74 43 6f 6c 6f 72 3a 6c 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2c 74 3d 64 3f 7b 70 61 74 68 6e 61 6d 65 3a 64 2c 65 78 74 65 72 6e 61 6c 3a 21 65 7d 3a 76 6f 69 64 20 30 3b 72 65 74 75 Data Ascii: rue(e),this._renderOverflowItems=e=>e.map((e=>{const{internal:d,link:r,text:a}=e;return{text:a,link:{pathname:r,external:!d}}})),this._renderItem=({internal:e,link:d,text:r})=>{const{align:o,textColor:l}=this.props,t=d?{pathname:d,external:!e}:void 0;retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49905	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Compos.540d8c0a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:31 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009473 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:31 GMT Etag: "t0O5M4DHj7MBRcOwXHT9pA==+ident" expires: Thu, 24 Apr 2025 05:32:31 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5597) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 85825735ebd465c3380170ecc83c7675c91a13a2dcdcccd3fb1c78c5633fbc11 x-content-type-options: nosniff x-response-time: 12 x-ton-expected-size: 1819 x-transaction-id: 10cf707968e4a860 Content-Length: 1819 Connection: close
2024-04-24 05:32:31 UTC	1819	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 22 5d 2c 7b 32 33 31 36 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Compos"],{23162:(e,t,r)=>{r.d(t,{Z:()=>s});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49904	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu.029e300a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:31 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009458 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:31 GMT Etag: "+pF/zJiMfGo2arxXAhVxKQ==+ident" expires: Thu, 24 Apr 2025 05:32:31 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D6) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a3f557b1978816497578b183a98a6b9b548c058b25b155c8e7bd9453919f7e71 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 4371 x-transaction-id: e67adbb5acffcde7 Content-Length: 4371 Connection: close
2024-04-24 05:32:31 UTC	4371	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 41 6e 61 6c 79 74 69 63 73 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 69 73 63 6f 76 65 72 79 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 22 5d 2c 7b 34 39 33 37 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 4c 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.Articles~bundle.AudioSpaceDiscovery~bundle.Birdwatch~bu"],{49379:(e,t,s)=>{s.d(t,{Z:()=>L});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49906	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	1172	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 477 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: GBtjFFwaeBo+yNLSjPAT0M/P0sQAwoYce5x6+l+vVA3SvKIAsqAxxOSz628omJx9duYtwRkjqHhlSTXUWlRlNrbuIMAEGw x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:31 UTC	477	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 35 30 30 35 36 25 32 43 25 32 32 69 74 65 6d 73 25 32 32 25 33 41 25 35 42 25 35 44 25 32 43 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 73 70 61 63 65 25 32 32 25 33 41 25 37 42 25 32 32 70 61 67 65 25 32 32 25 33 41 25 32 32 61 70 70 25 32 32 25 32 43 25 32 32 63 6f 6d 70 6f 6e 65 6e 74 25 32 32 25 33 41 25 32 32 67 6f 6f 67 6c 65 5f 73 69 67 6e 5f 69 6e 25 32 32 25 32 43 25 32 32 65 6c 65 6d 65 6e 74 25 32 32 25 Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936750056%2C%22items%22%3A%5B%5D%2C%22event_namespace%22%3A%7B%22page%22%3A%22app%22%2C%22component%22%3A%22google_sign_in%22%2C%22element%22%
2024-04-24 05:32:31 UTC	1071	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:31 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:31 GMT x-transaction: f2328bdaf1c51176 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: f2328bdaf1c51176 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 9 x-connection-hash: c674c568fd9dbd6da696641f9916347132fe5bb1ac273a8bb88e6a39f509314c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49908	104.244.42.197	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	673	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a37ab64d-a27d-427a-ae18-1b40b6c802a2
2024-04-24 05:32:31 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:31 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 60f7597a271f23be strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: ac12b59b2a4ef180592c73aa6e9481103b7809d0e26936427aa21ad58d3dc43b connection: close
2024-04-24 05:32:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49907	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.db6cd65a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:31 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009473 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:31 GMT Etag: "G4e6gh6R9DtoM41nHSi3ng==+ident" expires: Thu, 24 Apr 2025 05:32:31 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c1e39ebd49eba6db464ce7200d639b50ff0267296060c0736367b6f69c9d3ce3 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 8113 x-transaction-id: d2143bdfd75ebce6 Content-Length: 8113 Connection: close
2024-04-24 05:32:31 UTC	8113	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 64 69 72 65 63 74 4d 65 73 73 61 67 65 73 44 61 74 61 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 6f 6e 64 65 6d 61 6e 64 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 43 72 79 70 74 6f 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 22 5d 2c 7b 32 32 31 36 37 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 55 3a 28 29 3d 3e 5f 2c 43 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun"],{22167:(e,t,s)=>{s.d(t,{BU:()=>_,C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49909	104.244.42.195	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	834	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=2bcaee04-c4e1-4001-89c0-8b39639d6b9e&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=ogf5s&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:32 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:31 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cf8ca8cdac0430b3 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 78f63fafa023af95e4c488c3df84d01e9f9b9d1e6c4404905705caf852b76e4b connection: close
2024-04-24 05:32:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49910	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl.5044215a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009459 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "HEN89tZlEhIWvMrxckwnyg==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559D) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: bd529afe11846916b8760585e574fab39ae34f1b4172ddf7ce40d1eda5866c30 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 3419 x-transaction-id: fd83b1a078446ba7 Content-Length: 3419 Connection: close
2024-04-24 05:32:32 UTC	3419	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 42 6f 6f 6b 6d 61 72 6b 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 22 5d 2c 7b 39 30 38 32 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 76 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.DirectMessages~bundl"],{9082:(e,t,o)=>{o.d(t,{Z:()=>d});v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49911	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.743e980a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009459 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "JAtdsTgEsBPzQL7prcbsbQ==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559B) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: eaf8b38eb0cd4727af6e85b0378e85513b480aa583a49263076b1a9c364b032b x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 32571 x-transaction-id: 8459e5625e91bca9 Content-Length: 32571 Connection: close
2024-04-24 05:32:32 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 44 4d 52 69 63 68 54 65 78 74 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 22 5d 2c 7b 36 39 38 34 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 4e 72 3a 28 29 3d 3e 6b 2c 5a Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle"],{69843:(t,e,n)=>{"use strict";n.d(e,{Nr:()=>k,Z
2024-04-24 05:32:32 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:32 UTC	16187	IN	Data Raw: 61 3d 28 72 2e 61 63 63 75 6d 75 6c 61 74 65 64 54 69 6d 65 2d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2e 61 63 63 75 6d 75 6c 61 74 65 64 54 69 6d 65 2f 70 29 2a 70 29 2f 70 2c 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2e 61 63 63 75 6d 75 6c 61 74 65 64 54 69 6d 65 2f 70 29 2c 6f 3d 7b 7d 2c 63 3d 7b 7d 2c 66 3d 7b 7d 2c 68 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6d 20 69 6e 20 65 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6d 29 29 7b 76 61 72 20 79 3d 65 5b 6d 5d 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 79 29 66 5b 6d 5d 3d 79 2c 68 5b 6d 5d 3d 30 2c 6f 5b 6d 5d 3d 79 2c 63 5b 6d 5d 3d 30 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 76 3d 72 2e 73 74 61 74 Data Ascii: a=(r.accumulatedTime-Math.floor(r.accumulatedTime/p)*p)/p,s=Math.floor(r.accumulatedTime/p),o={},c={},f={},h={};for(var m in e)if(Object.prototype.hasOwnProperty.call(e,m)){var y=e[m];if("number"==typeof y)f[m]=y,h[m]=0,o[m]=y,c[m]=0;else{for(var v=r.stat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49912	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:31 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.DirectMe.c4756eaa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 326551 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "UesQ56XGNH58ipAehdZ3+w==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/559C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a7a33d1579d5e922a70fbfc51efc64fa4ebaeaedb618714e9c35da2cc8c57696 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 16161 x-transaction-id: b569860adcadae2e Content-Length: 16161 Connection: close
2024-04-24 05:32:32 UTC	15649	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 57 6f 72 6b 48 69 73 74 6f 72 79 7e 62 75 6e 64 6c 65 2e 44 65 6c 65 67 61 74 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 22 5d 2c 7b 38 34 35 31 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 45 35 3a 28 29 3d 3e 63 2c 6c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.DirectMe"],{84515:(e,t,r)=>{r.d(t,{E5:()=>c,l
2024-04-24 05:32:32 UTC	512	IN	Data Raw: 75 72 6e 20 74 2e 65 6e 74 72 79 5f 69 64 26 26 72 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 64 6d 5f 69 64 22 2c 74 2e 65 6e 74 72 79 5f 69 64 29 2c 72 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 2c 22 64 6d 22 3d 3d 3d 74 2e 74 79 70 65 3f 22 64 6d 5f 6d 65 73 73 61 67 65 22 3a 22 64 6d 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 22 29 2c 72 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 69 73 5f 65 6e 63 72 79 70 74 65 64 22 2c 74 2e 69 73 5f 65 6e 63 72 79 70 74 65 64 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 29 2c 74 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 69 64 26 26 72 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 64 6d 5f 63 6f 6e 76 6f 5f 69 64 22 2c 74 2e 63 Data Ascii: urn t.entry_id&&r.searchParams.set("dm_id",t.entry_id),r.searchParams.set("content_type","dm"===t.type?"dm_message":"dm_conversation"),r.searchParams.set("is_encrypted",t.is_encrypted?"true":"false"),t.conversation_id&&r.searchParams.set("dm_convo_id",t.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49913	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home.2e978c3a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984547 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "+yQyG6I6QktNNeNOTaykCw==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55D1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c389b31ec32bfe8054770288a4e1be2f589eaa4ecc3b7ca48e04a837bf12f359 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 2149 x-transaction-id: 4cd6b96361690bd2 Content-Length: 2149 Connection: close
2024-04-24 05:32:32 UTC	2149	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 6f 6f 6b 6d 61 72 6b 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 45 78 70 6c 6f 72 65 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 75 6e 64 6c 65 2e 48 6f 6d 65 22 2c 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 4f 6e 6c 79 56 69 64 65 6f 50 6c 61 79 65 72 22 5d 2c 7b 38 30 30 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Bookmarks~bundle.Communities~bundle.TwitterArticles~bundle.Explore~bundle.LiveEvent~bundle.Home","loader.AudioOnlyVideoPlayer"],{800

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49915	104.244.42.195	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	1064	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:32 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:32 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 7fb88a1715015a1a strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: bf86a68187204b30b8d3b5d9e951f56c374a39332aff812b49d60bf4dcb4d608 connection: close
2024-04-24 05:32:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49916	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	562	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:32 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:32 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 26978d5b3a670277 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: 1f67219fa5381c298ab5455a93b6ee9726654a1b11abd7f5cd56ac5b92e1bc0a connection: close
2024-04-24 05:32:32 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49914	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b.870fa24a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009434 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "B1ABuSNylTNNlE1Dd3GIGQ==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559D) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 654fc49a63434403d6e95197509f2398e2c07f83f75d4218d04700e3d1cf3df4 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 1884 x-transaction-id: d478768e8309b7ef Content-Length: 1884 Connection: close
2024-04-24 05:32:32 UTC	1884	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 52 65 76 61 6d 70 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 4d 6f 6e 65 74 69 7a 61 74 69 6f 6e 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 53 75 70 65 72 46 6f 6c 6c 6f 77 73 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 22 5d 2c 7b 31 35 36 31 30 3a 28 65 2c 64 2c 61 29 3d 3e 7b 61 2e 64 28 64 2c 7b 54 3a 28 29 3d 3e 66 2c 78 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsRevamp~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.LiveEvent~b"],{15610:(e,d,a)=>{a.d(d,{T:()=>f,x:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49917	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.SettingsProfessionalProfileProfileSpotlight.5beb173a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009454 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "XoqMiEvDQ0YJGgRkjjqeJw==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55DF) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 37d2f43018b82ab49624e9bbb82a99b0ef8f3852ba454a4adc3f3f032728b6e7 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 2475 x-transaction-id: bbb3013140d6fa5b Content-Length: 2475 Connection: close
2024-04-24 05:32:32 UTC	2475	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 47 72 6f 6b 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 22 5d 2c 7b 36 38 37 36 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~bundle.TwitterArticles~bundle.Grok~bundle.SettingsProfessionalProfileProfileSpotlight"],{68767:(e,t,n)=>{n.r(t),n.d(t,{def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49918	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.TweetCoinDetails~b.c58a905a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:32 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009455 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "Mf5No1Z6Fr+oocD6gqpIIg==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 0b95bf0e8b3739ee199ac41d43117bb7cf9d77bb69d3890ceb89a3244179f7ec x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1678 x-transaction-id: 4669ef5fb8b415c1 Content-Length: 1678 Connection: close
2024-04-24 05:32:32 UTC	1678	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 4d 6f 6e 65 74 69 7a 61 74 69 6f 6e 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 53 75 70 65 72 46 6f 6c 6c 6f 77 73 7e 62 75 6e 64 6c 65 2e 4a 6f 62 53 65 61 72 63 68 7e 62 75 6e 64 6c 65 2e 54 77 65 65 74 43 6f 69 6e 44 65 74 61 69 6c 73 7e 62 22 5d 2c 7b 31 36 34 31 31 3a 28 65 2c 61 2c 6c 29 3d 3e 7b 6c 2e 64 28 61 2c 7b 59 3a 28 29 3d 3e 6f 2c 5a 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.JobSearch~bundle.TweetCoinDetails~b"],{16411:(e,a,l)=>{l.d(a,{Y:()=>o,Z:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49919	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.TweetMediaDeta.80329baa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009459 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "x4/5xZutefbYEQAojqdntw==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: d82eaac1ffa18c08ec8cb53e296feaef23fce3222ea902419cafaf6093a7e91d x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 1971 x-transaction-id: b2e485626dd1f72a Content-Length: 1971 Connection: close
2024-04-24 05:32:33 UTC	1971	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 44 4d 52 69 63 68 54 65 78 74 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 54 77 65 65 74 4d 65 64 69 61 44 65 74 61 22 5d 2c 7b 38 34 32 34 36 3a 28 65 2c 6f 2c 72 29 3d 3e 7b 72 2e 64 28 6f 2c 7b 43 5f 3a 28 29 3d 3e 68 2c 49 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.TweetMediaDeta"],{84246:(e,o,r)=>{r.d(o,{C_:()=>h,I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49920	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex.6ae55eea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009459 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:32 GMT Etag: "nMpB2tBsyLM28NRzK0BoCg==+ident" expires: Thu, 24 Apr 2025 05:32:32 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55B7) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c5a059fc5db810ff02e6283e67242ce31bde2e599c9ceb2b76af01e9d699b67a x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 2204 x-transaction-id: ea4ba5ab85ce7877 Content-Length: 2204 Connection: close
2024-04-24 05:32:33 UTC	2204	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 52 69 63 68 54 65 78 22 5d 2c 7b 38 30 37 31 37 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 79 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex"],{80717:(e,t,i)=>{i.d(t,{Z:()=>y});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49921	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi.0ae4c37a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009460 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "PwwYzEPBBQ9v2sOA5y5rYQ==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5594) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c33460f7a9bb096a06d496135afe3b610b1b2b8cdbd7eaa4628ccd45ce832f13 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1601 x-transaction-id: e860224c1b32ff27 Content-Length: 1601 Connection: close
2024-04-24 05:32:33 UTC	1601	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 44 4d 52 69 63 68 54 65 78 74 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 46 6f 6c 6c 6f 77 4c 69 73 74 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 22 5d 2c 7b 36 32 32 36 31 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 48 71 3a 28 29 3d 3e 76 2c 63 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserFollowLists~bundle.UserProfi"],{62261:(e,t,o)=>{o.d(t,{Hq:()=>v,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49922	104.244.42.195	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:32 UTC	834	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=d85d8449-9961-4e25-ba36-0b0b474a7d15&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f55bd27a-a294-4764-8ccf-f2afdbe87dd1&tw_document_href=https%3A%2F%2Ftwitter.com%2FOverlakeHMC&tw_iframe_status=0&txn_id=o8zly&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:33 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:33 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cbc9fa2adbf0ccfb strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: af419d7c7cac4b2cbbaf130db6790d75a5825b61845f663bec22f2f9f3aa1d6d connection: close
2024-04-24 05:32:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49923	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove.1507b3ca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009444 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "938KIO2GTZzR9siqMYaObQ==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: f8035e85cb532eef781ad83e71151a8e657632a5cf3f46c55d092e0b588f0b08 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 1546 x-transaction-id: 447b9b10fe873ab4 Content-Length: 1546 Connection: close
2024-04-24 05:32:33 UTC	1546	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 54 6f 70 69 63 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 4a 6f 62 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 4c 69 73 74 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 46 6f 6c 6c 6f 77 4c 69 73 74 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 7e 6f 6e 64 65 6d 61 6e 64 2e 48 6f 76 65 22 5d 2c 7b 37 35 33 30 35 3a 28 65 2c 69 2c 73 29 3d 3e 7b 73 2e 64 28 69 2c 7b 5a 3a 28 29 3d 3e 74 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Topics~bundle.UserJobs~bundle.UserLists~bundle.UserFollowLists~bundle.UserProfile~ondemand.Hove"],{75305:(e,i,s)=>{s.d(i,{Z:()=>t});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49924	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight.694e894a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009400 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "d8J2oe+I/bdZWXKKPDuA3w==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55E0) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c1272961d7d54d76cc02043c1ee699e0663784bbd53a4edf186464bc9c36fe6c x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 11562 x-transaction-id: a626cc3cd60113e8 Content-Length: 11562 Connection: close
2024-04-24 05:32:33 UTC	11562	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 4c 6f 63 61 74 69 6f 6e 53 70 6f 74 6c 69 67 68 74 22 5d 2c 7b 36 30 31 30 30 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 72 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileLocationSpotlight"],{60100:(e,t,o)=>{o.d(t,{Z:()=>r});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49925	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	676	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer.a2076fca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009460 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "MOQXdtkwsyHsgJ3XBe1qdQ==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5598) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 65b11dd4f75827ab75d819030a46ccd2fc39fe51ce82abc7154903b440e061ce x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 6029 x-transaction-id: b5bad447d428ad7f Content-Length: 6029 Connection: close
2024-04-24 05:32:33 UTC	6029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 7e 6c 6f 61 64 65 72 2e 54 69 6d 65 6c 69 6e 65 52 65 6e 64 65 72 65 72 22 5d 2c 7b 34 36 33 30 33 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 54 7d 29 3b 76 61 72 20 6c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer"],{46303:(e,t,s)=>{s.d(t,{Z:()=>T});var l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49926	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi.0767fe7a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009400 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "7jyI9aEiS2g8+XZrlOVxdg==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e47693f4232fe1640a4671b8fa169aa546c64564ac6c1116fc8e75fdb21a8501 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 8800 x-transaction-id: f7a55876f415edbe Content-Length: 8800 Connection: close
2024-04-24 05:32:33 UTC	8800	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 22 5d 2c 7b 36 32 36 39 34 3a 28 65 2c 6c 2c 6e 29 3d 3e 7b 6e 2e 64 28 6c 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi"],{62694:(e,l,n)=>{n.d(l,{Z:()=>d});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49927	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	678	OUT	GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile.8eab8f9a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:33 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009437 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "2k5L+6Q4HeTJfl1T5sKpag==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A7) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 44a7fe390ca45aa7673bdefcd0b9b091628bbb622271140079f1fbeaeff04a58 x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 8148 x-transaction-id: 98366f5215726fda Content-Length: 8148 Connection: close
2024-04-24 05:32:33 UTC	8148	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 45 78 74 65 6e 64 65 64 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 45 78 74 65 6e 64 65 64 55 73 65 72 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 32 34 33 31 36 3a 28 65 2c 6c 2c 6e 29 3d 3e 7b 6e 2e 64 28 6c 2c 7b 61 63 3a 28 29 3d 3e 46 2c 6b 49 3a 28 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile"],{24316:(e,l,n)=>{n.d(l,{ac:()=>F,kI:(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49928	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	656	OUT	GET /responsive-web/client-web/shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile.6f6b76aa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009400 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:33 GMT Etag: "d1FpRf+JuonXOCa8AKiGvw==+ident" expires: Thu, 24 Apr 2025 05:32:33 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55DA) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c2e778f438aee8dc185c03ed00005bb41548d78adb5784605a34ec6e7595c9f1 x-content-type-options: nosniff x-response-time: 13 x-ton-expected-size: 3995 x-transaction-id: bbec2da16df233fa Content-Length: 3995 Connection: close
2024-04-24 05:32:34 UTC	3995	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 52 65 70 6f 72 74 43 65 6e 74 65 72 7e 62 75 6e 64 6c 65 2e 53 61 66 65 74 79 43 65 6e 74 65 72 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 39 30 30 30 32 3a 28 65 2c 6c 2c 6e 29 3d 3e 7b 6e 2e 64 28 6c 2c 7b 5a 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 61 2c 69 2c 74 2c 73 2c 72 2c 75 2c 64 3d 7b 61 72 67 75 6d 65 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.ReportCenter~bundle.SafetyCenter~bundle.UserProfile"],{90002:(e,l,n)=>{n.d(l,{Z:()=>c});var a,i,t,s,r,u,d={argume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49929	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	664	OUT	GET /responsive-web/client-web/shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.dede70da.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 635478 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "tyoqdPWkrTKSvWO1OSju0w==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Tue, 16 Apr 2024 20:52:34 GMT perf: 7469935968 Server: ECAcc (lac/55A0) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: d94825ba10419b0cd7d8959acf4793608d3ad28ab24370670593233e8e95c6d8 x-content-type-options: nosniff x-response-time: 88 x-ton-expected-size: 3264 x-transaction-id: d44386853a0fd499 Content-Length: 3264 Connection: close
2024-04-24 05:32:34 UTC	3264	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 68 61 72 65 4a 6f 62 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 33 34 37 35 36 3a 28 65 2c 74 2c 6c 29 3d 3e 7b 6c 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 61 3d 6c 28 32 37 38 34 29 2c 69 3d 6c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ShareJob~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile"],{34756:(e,t,l)=>{l.d(t,{Z:()=>g});var a=l(2784),i=l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49930	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:33 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli.f0e0e88a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009401 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "p52osRfjwpJymCNLfQcUBQ==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a595f135e683fb89217a1a96b89ca27abce565cdb7ed472c53faa2b0ce14574e x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2720 x-transaction-id: 95e5be0a44fd928d Content-Length: 2720 Connection: close
2024-04-24 05:32:34 UTC	2720	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 43 6f 6d 6d 75 6e 69 74 69 65 73 53 70 6f 74 6c 69 22 5d 2c 7b 32 38 30 39 32 3a 28 65 2c 6e 2c 61 29 3d 3e 7b 61 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 43 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfileCommunitiesSpotli"],{28092:(e,n,a)=>{a.d(n,{Z:()=>C});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49931	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:34 UTC	648	OUT	GET /responsive-web/client-web/shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile.61deee6a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 635478 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "4d8dsx6du9t8d8E5h3HxDQ==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Tue, 16 Apr 2024 20:52:34 GMT perf: 7469935968 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: f54a12f7e94482b6b205d9c12829f7bec5fd7d39ae2c16fa8af6bc89da4ccf13 x-content-type-options: nosniff x-response-time: 89 x-ton-expected-size: 27324 x-transaction-id: 1c4f7bca2741f2a4 Content-Length: 27324 Connection: close
2024-04-24 05:32:34 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 39 30 32 36 39 3a 28 65 2c 6c 2c 61 29 3d 3e 7b 61 2e 64 28 6c 2c 7b 5a 3a 28 29 3d 3e 49 65 7d 29 3b 76 61 72 20 6e 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfessionalProfileProfileSpotlight~bundle.UserProfile"],{90269:(e,l,a)=>{a.d(l,{Z:()=>Ie});var n={argumentDefinitions:[],ki
2024-04-24 05:32:34 UTC	10941	IN	Data Raw: 65 63 74 69 6f 6e 73 3a 65 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6c 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 72 6f 64 75 63 74 53 61 6c 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 72 6f 64 75 63 74 5f 73 61 6c 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6c 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a Data Ascii: ections:e,storageKey:null},l,{alias:null,args:null,concreteType:"ProductSale",kind:"LinkedField",name:"product_sale",plural:!1,selections:[l],storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"title",storageKey:null}],storageKey:null},{alias:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49932	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:34 UTC	614	OUT	GET /responsive-web/client-web/shared~bundle.LiveEvent~bundle.UserProfile.f7878e5a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 364424 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "UcFR09eg3QTTCdzM2xPUnA==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Sat, 20 Apr 2024 00:11:29 GMT perf: 7402827104 Server: ECAcc (lac/55D2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: cecb2240d08e00eee3391f78e475fd563155fd4f79cf630a560890782c13dd1c x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 15461 x-transaction-id: 5fe588eadfe0bf6a Content-Length: 15461 Connection: close
2024-04-24 05:32:34 UTC	15461	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 5d 2c 7b 31 33 33 32 35 3a 28 65 2c 74 2c 6c 29 3d 3e 7b 6c 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 63 3d 6c 28 32 37 38 34 29 2c 69 3d 6c 28 34 38 35 30 31 29 2c 61 3d 6c 28 37 39 31 33 35 29 3b 63 6f 6e 73 74 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.LiveEvent~bundle.UserProfile","bundle.AudioSpaceDetail"],{13325:(e,t,l)=>{l.d(t,{Z:()=>n});var c=l(2784),i=l(48501),a=l(79135);const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49933	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:34 UTC	624	OUT	GET /responsive-web/client-web/shared~bundle.ExtendedUserProfile~bundle.UserProfile.35b05caa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1330465 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "q4+X5O5HlcsvDWAEAOcL8g==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Mon, 08 Apr 2024 19:27:04 GMT perf: 7469935968 Server: ECAcc (lac/5599) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 500ad3277342b88f25d4136052ddfebb5e830435c01f84ac7afe5d40b64c97be x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2640 x-transaction-id: d92938066d59d1b7 Content-Length: 2640 Connection: close
2024-04-24 05:32:34 UTC	2640	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 45 78 74 65 6e 64 65 64 55 73 65 72 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 36 35 30 37 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 72 3d 73 28 37 38 39 36 29 2c 6e 3d 73 28 32 37 38 34 29 2c 61 3d 73 28 38 33 35 32 29 2c 63 3d 73 28 37 33 31 38 36 29 2c 6d 3d 73 28 39 32 31 36 30 29 2c 6c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ExtendedUserProfile~bundle.UserProfile"],{65075:(e,t,s)=>{s.d(t,{Z:()=>g});var r=s(7896),n=s(2784),a=s(8352),c=s(73186),m=s(92160),l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49934	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:34 UTC	621	OUT	GET /responsive-web/client-web/shared~bundle.UserProfile~loader.IconLabelHandler.0ec2aa3a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:34 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009401 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "U2Oswe0pJR8RC1CDi+tJeg==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/558C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 9088f76548e679c4422d05f872be096e93894f1c1d8f1b5bc75ceb0d441461b4 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2684 x-transaction-id: aa1d8d0751d44960 Content-Length: 2684 Connection: close
2024-04-24 05:32:34 UTC	2684	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 7e 6c 6f 61 64 65 72 2e 49 63 6f 6e 4c 61 62 65 6c 48 61 6e 64 6c 65 72 22 5d 2c 7b 35 35 30 33 36 3a 28 65 2c 69 2c 74 29 3d 3e 7b 74 2e 72 28 69 29 2c 74 2e 64 28 69 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 63 3d 74 28 32 37 38 34 29 2c 73 3d 74 28 39 30 36 30 31 29 2c 6c 3d 74 28 38 33 34 32 37 29 2c 61 3d 74 28 37 33 35 36 39 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.UserProfile~loader.IconLabelHandler"],{55036:(e,i,t)=>{t.r(i),t.d(i,{default:()=>o});var c=t(2784),s=t(90601),l=t(83427),a=t(73569);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49935	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:34 UTC	620	OUT	GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.UserProfile.805d830a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009438 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "ZzgBvu2ElkaZ0VfHASYH+Q==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55AB) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 1aab3818539eb756d168133db8a58634c9433f3fedae234242431e28136c2652 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 1271 x-transaction-id: cc5c4882db2805a7 Content-Length: 1271 Connection: close
2024-04-24 05:32:35 UTC	1271	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 36 37 33 32 30 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 74 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 72 3d 74 28 32 37 38 34 29 2c 6f 3d 74 28 34 35 31 38 34 29 2c 69 3d 74 2e 6e 28 6f 29 3b 63 6f 6e 73 74 20 63 3d 28 65 2c 6e 2c 74 29 3d 3e 6e 65 77 20 44 61 74 65 28 65 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfile~bundle.UserProfile"],{67320:(e,n,t)=>{t.d(n,{Z:()=>d});var r=t(2784),o=t(45184),i=t.n(o);const c=(e,n,t)=>new Date(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49936	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:34 UTC	590	OUT	GET /responsive-web/client-web/bundle.UserProfile.10f22bba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143597 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:34 GMT Etag: "UmqY69/XKhd9PV9mXTh7tA==+ident" expires: Thu, 24 Apr 2025 05:32:34 GMT Last-Modified: Mon, 22 Apr 2024 13:31:43 GMT perf: 7402827104 Server: ECAcc (lac/55C1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 30f4e87811b5c7f4ed2402ffd0617b2dfed16f166cb813dbfd87ec16c2c266d1 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 17 x-ton-expected-size: 202907 x-transaction-id: 0a39cce4bf935870 Content-Length: 202907 Connection: close
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 5d 2c 7b 32 39 35 32 31 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 45 76 62 54 6b 50 44 54 2d 78 51 43 66 75 70 50 75 30 72 57 4d 41 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 54 77 65 65 74 53 74 61 74 73 22 2c 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 3a 22 71 75 65 72 79 22 2c 6d 65 74 61 64 61 74 61 3a 7b 66 65 61 74 75 72 65 53 77 69 74 63 68 65 73 3a 5b 22 70 72 6f 66 69 6c Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.UserProfile"],{29521:e=>{e.exports={queryId:"EvbTkPDT-xQCfupPu0rWMA",operationName:"TweetStats",operationType:"query",metadata:{featureSwitches:["profil
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 49 6c 6c 75 73 74 72 61 74 69 6f 6e 50 61 73 73 69 76 65 49 6e 63 6f 6d 65 2e 6a 73 22 3a 5b 34 39 30 37 32 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 49 6c 6c 75 73 74 72 61 74 69 6f 6e 50 61 73 73 69 76 65 49 6e 63 6f 6d 65 2d 6a 73 22 5d 2c 22 2e 2f 49 63 6f 6e 49 6c 6c 75 73 74 72 61 74 69 6f 6e 52 65 63 65 69 76 65 43 6f 69 6e 73 2e 6a 73 22 3a 5b 38 36 35 31 36 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 49 6c 6c 75 73 74 72 61 74 69 6f 6e 52 65 63 65 69 76 65 43 6f 69 6e 73 2d 6a 73 22 5d 2c 22 2e 2f 49 63 6f 6e 49 6c 6c 75 73 74 72 61 74 69 6f 6e 53 61 66 65 74 79 41 74 74 65 6e 74 69 6f 6e 44 65 63 72 65 61 73 65 2e 6a 73 22 3a 5b 34 33 34 34 36 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 49 6c 6c 75 73 74 72 61 74 69 6f 6e 53 61 66 65 74 79 41 74 74 65 6e 74 69 6f 6e Data Ascii: IllustrationPassiveIncome.js":[49072,"icons/IconIllustrationPassiveIncome-js"],"./IconIllustrationReceiveCoins.js":[86516,"icons/IconIllustrationReceiveCoins-js"],"./IconIllustrationSafetyAttentionDecrease.js":[43446,"icons/IconIllustrationSafetyAttention
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 63 6f 6e 55 6e 64 6f 2d 6a 73 22 5d 2c 22 2e 2f 49 63 6f 6e 55 6e 6c 6f 63 6b 2e 6a 73 22 3a 5b 38 38 31 37 31 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 55 6e 6c 6f 63 6b 2d 6a 73 22 5d 2c 22 2e 2f 49 63 6f 6e 56 65 6e 6d 6f 2e 6a 73 22 3a 5b 38 33 36 37 5d 2c 22 2e 2f 49 63 6f 6e 56 65 72 69 66 69 65 64 2e 6a 73 22 3a 5b 38 37 33 33 38 5d 2c 22 2e 2f 49 63 6f 6e 56 65 72 69 66 69 65 64 47 6f 6c 64 2e 6a 73 22 3a 5b 31 38 34 30 36 5d 2c 22 2e 2f 49 63 6f 6e 56 65 72 69 66 69 65 64 47 72 61 79 2e 6a 73 22 3a 5b 33 36 32 35 38 5d 2c 22 2e 2f 49 63 6f 6e 56 65 72 69 66 69 65 64 53 74 72 6f 6b 65 2e 6a 73 22 3a 5b 38 35 30 31 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 56 65 72 69 66 69 65 64 53 74 72 6f 6b 65 2d 6a 73 22 5d 2c 22 2e 2f 49 63 6f 6e 56 69 64 65 6f 43 6f 6c Data Ascii: conUndo-js"],"./IconUnlock.js":[88171,"icons/IconUnlock-js"],"./IconVenmo.js":[8367],"./IconVerified.js":[87338],"./IconVerifiedGold.js":[18406],"./IconVerifiedGray.js":[36258],"./IconVerifiedStroke.js":[8501,"icons/IconVerifiedStroke-js"],"./IconVideoCol
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 22 2e 2f 49 63 6f 6e 54 68 72 65 61 64 45 6e 64 2e 6a 73 22 3a 32 39 32 39 33 2c 22 2e 2f 49 63 6f 6e 54 68 75 6d 62 73 44 6f 77 6e 2e 6a 73 22 3a 36 35 37 34 38 2c 22 2e 2f 49 63 6f 6e 54 68 75 6d 62 73 44 6f 77 6e 46 69 6c 6c 2e 6a 73 22 3a 34 39 36 34 38 2c 22 2e 2f 49 63 6f 6e 54 68 75 6d 62 73 55 70 2e 6a 73 22 3a 33 39 30 39 30 2c 22 2e 2f 49 63 6f 6e 54 68 75 6d 62 73 55 70 46 69 6c 6c 2e 6a 73 22 3a 37 34 34 32 34 2c 22 2e 2f 49 63 6f 6e 54 69 63 6b 65 74 2e 6a 73 22 3a 31 30 32 34 38 2c 22 2e 2f 49 63 6f 6e 54 69 63 6b 65 74 53 74 72 6f 6b 65 2e 6a 73 22 3a 34 35 37 37 38 2c 22 2e 2f 49 63 6f 6e 54 69 6d 65 6c 69 6e 65 53 74 72 6f 6b 65 2e 6a 73 22 3a 32 35 34 36 31 2c 22 2e 2f 49 63 6f 6e 54 6f 6f 6c 62 6f 78 2e 6a 73 22 3a 36 31 34 33 36 2c 22 Data Ascii: "./IconThreadEnd.js":29293,"./IconThumbsDown.js":65748,"./IconThumbsDownFill.js":49648,"./IconThumbsUp.js":39090,"./IconThumbsUpFill.js":74424,"./IconTicket.js":10248,"./IconTicketStroke.js":45778,"./IconTimelineStroke.js":25461,"./IconToolbox.js":61436,"
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 29 2c 6d 6f 64 75 6c 65 3a 52 2c 6f 6e 45 6e 74 72 69 65 73 52 65 6e 64 65 72 65 64 3a 77 2c 73 63 72 69 62 65 4e 61 6d 65 73 70 61 63 65 3a 65 2c 74 69 6d 65 6c 69 6e 65 45 6d 70 74 79 48 65 61 64 65 72 46 6f 72 6d 61 74 74 65 72 3a 55 2c 74 69 6d 65 6c 69 6e 65 45 6d 70 74 79 4d 65 73 73 61 67 65 46 6f 72 6d 61 74 74 65 72 3a 5a 2c 74 69 6d 65 6c 69 6e 65 45 6d 70 74 79 53 74 61 74 65 42 75 74 74 6f 6e 4c 61 62 65 6c 3a 78 2c 74 69 6d 65 6c 69 6e 65 45 6d 70 74 79 53 74 61 74 65 42 75 74 74 6f 6e 4c 69 6e 6b 3a 4f 2c 74 69 6d 65 6c 69 6e 65 54 69 74 6c 65 46 6f 72 6d 61 74 74 65 72 3a 4b 28 7b 66 75 6c 6c 4e 61 6d 65 3a 73 7d 29 2c 74 69 74 6c 65 46 6f 72 6d 61 74 74 65 72 3a 48 28 7b 66 75 6c 6c 4e 61 6d 65 3a 73 2c 73 63 72 65 65 6e 4e 61 6d 65 3a 5f Data Ascii: ),module:R,onEntriesRendered:w,scribeNamespace:e,timelineEmptyHeaderFormatter:U,timelineEmptyMessageFormatter:Z,timelineEmptyStateButtonLabel:x,timelineEmptyStateButtonLink:O,timelineTitleFormatter:K({fullName:s}),titleFormatter:H({fullName:s,screenName:_
2024-04-24 05:32:35 UTC	5	IN	Data Raw: 73 7e 62 75 6e Data Ascii: s~bun
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 22 29 2c 6f 2e 65 28 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 45 78 74 65 6e 64 65 64 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 45 78 74 65 6e 64 65 64 55 73 65 72 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 22 29 2c 6f 2e 65 28 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 52 65 70 6f 72 74 43 65 6e 74 65 72 7e 62 75 6e 64 6c 65 2e Data Ascii: dle.SettingsProfessionalProfileProfileSpotlight~bundle.SettingsProfessionalProfi"),o.e("shared~bundle.SettingsProfile~bundle.SettingsExtendedProfile~bundle.ExtendedUserProfile~bundle.UserProfile"),o.e("shared~bundle.Communities~bundle.ReportCenter~bundle.
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 74 6c 69 67 68 74 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 4c 6f 63 61 74 69 6f 6e 53 70 6f 74 6c 69 67 68 74 22 29 2c 6f 2e 65 28 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 75 6e 64 6c 65 2e 55 73 65 72 50 72 6f 66 69 6c 65 7e 6c 6f 61 64 65 72 2e 54 69 6d 65 6c 69 6e 65 52 65 6e 64 65 72 65 72 22 29 2c 6f 2e 65 28 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 65 73 73 69 6f 6e 61 6c 50 72 6f 66 69 6c 65 50 72 6f 66 69 6c 65 53 70 6f 74 6c 69 67 68 74 7e Data Ascii: tlight~bundle.SettingsProfessionalProfileLocationSpotlight"),o.e("shared~loader.DMDrawer~bundle.DirectMessages~bundle.LiveEvent~bundle.UserProfile~loader.TimelineRenderer"),o.e("shared~bundle.Communities~bundle.SettingsProfessionalProfileProfileSpotlight~
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 48 6f 75 72 4d 69 6e 75 74 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 6d 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 6f 75 72 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6d 69 6e 75 74 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 Data Ascii: rgs:null,concreteType:"HourMinute",kind:"LinkedField",name:"time",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"hour",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"minute",storageKey:null}],storageKey:null}],storag
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 2c 61 3d 72 2e 75 73 65 4d 65 6d 6f 28 28 28 29 3d 3e 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 6e 3d 6e 75 6c 6c 3d 3d 28 65 3d 74 2e 6c 65 67 61 63 79 29 7c 7c 6e 75 6c 6c 3d 3d 28 65 3d 65 2e 70 72 6f 66 69 6c 65 5f 62 61 6e 6e 65 72 5f 65 78 74 65 6e 73 69 6f 6e 73 29 7c 7c 6e 75 6c 6c 3d 3d 28 65 3d 65 2e 6d 65 64 69 61 43 6f 6c 6f 72 29 7c 7c 6e 75 6c 6c 3d 3d 28 65 3d 65 2e 72 29 7c 7c 6e 75 6c 6c 3d 3d 28 65 3d 65 2e 6f 6b 29 3f 76 6f 69 64 20 30 3a 65 2e 70 61 6c 65 74 74 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6f 3d 6e 2e 6d 61 70 28 28 28 7b 70 65 72 63 65 6e 74 61 67 65 3a 65 2c 72 67 62 3a 7b 62 6c 75 65 3a 6e 2c 67 72 65 65 6e 3a 6f 2c 72 65 64 3a 6c 7d 7d 29 3d 3e 28 7b 72 67 62 3a 7b 72 65 64 3a 6c 2c 67 Data Ascii: ,a=r.useMemo((()=>{var e;const n=null==(e=t.legacy)\|\|null==(e=e.profile_banner_extensions)\|\|null==(e=e.mediaColor)\|\|null==(e=e.r)\|\|null==(e=e.ok)?void 0:e.palette;if(!n)return null;const o=n.map((({percentage:e,rgb:{blue:n,green:o,red:l}})=>({rgb:{red:l,g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49937	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	588	OUT	GET /responsive-web/client-web/loader.AudioDock.81854dfa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984566 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:35 GMT Etag: "mFpc1IuK/mjHT2iLaoQcQg==+ident" expires: Thu, 24 Apr 2025 05:32:35 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/5584) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 71dc5afa1c899a3586621f43f022d6fc9cc81c68195065cf38d98feff631476a x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2418 x-transaction-id: 7c9696c39490ed36 Content-Length: 2418 Connection: close
2024-04-24 05:32:35 UTC	2418	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 44 6f 63 6b 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 41 6e 61 6c 79 74 69 63 73 22 2c 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 43 6f 6e 74 65 78 74 56 6f 69 63 65 4d 65 64 69 61 22 2c 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 43 6f 6e 74 65 78 74 53 70 61 63 65 43 6c 69 70 22 2c 22 6c 6f 61 64 65 72 2e 41 75 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.AudioDock","bundle.AudioSpaceDetail","bundle.AudioSpaceAnalytics","loader.AudioContextVoiceMedia","loader.AudioContextSpaceClip","loader.Au

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49938	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	596	OUT	GET /responsive-web/client-web/bundle.NetworkInstrument.4a624f8a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009477 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:35 GMT Etag: "qbLbJ0QD+cErNs6oOHudhA==+ident" expires: Thu, 24 Apr 2025 05:32:35 GMT Last-Modified: Fri, 12 Apr 2024 12:58:29 GMT perf: 7402827104 Server: ECAcc (lac/55A7) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 185735ee443e3402c1aa4bdfb28f86f986587cfcf4d54b5245b22b97af805b5e x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 7865 x-transaction-id: 8493b213e183f3b7 Content-Length: 7865 Connection: close
2024-04-24 05:32:35 UTC	7865	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 75 6e 64 6c 65 2e 4e 65 74 77 6f 72 6b 49 6e 73 74 72 75 6d 65 6e 74 22 5d 2c 7b 38 38 31 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 6e 28 36 38 38 36 29 2c 6e 28 31 34 31 32 31 29 2c 6e 28 36 30 35 32 33 29 2c 6e 28 34 33 36 37 33 29 2c 6e 28 34 30 37 35 33 29 2c 6e 28 32 38 33 39 39 29 2c 6e 28 33 36 37 32 38 29 3b 76 61 72 20 72 3d 6e 28 37 37 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.NetworkInstrument"],{88170:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});n(6886),n(14121),n(60523),n(43673),n(40753),n(28399),n(36728);var r=n(77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49939	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	595	OUT	GET /responsive-web/client-web/loader.richScribeAction.a8dd068a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009459 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:35 GMT Etag: "XrlDcZm6J8VCHeI/00qwOw==+ident" expires: Thu, 24 Apr 2025 05:32:35 GMT Last-Modified: Fri, 12 Apr 2024 12:58:29 GMT perf: 7402827104 Server: ECAcc (lac/5584) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 596a93089994b0b7bf4e197493d567e331dfc1c50aebd03ed9c6f573471a9670 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1044 x-transaction-id: ee9030ec554a038b Content-Length: 1044 Connection: close
2024-04-24 05:32:35 UTC	1044	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 72 69 63 68 53 63 72 69 62 65 41 63 74 69 6f 6e 22 5d 2c 7b 32 31 39 30 36 3a 28 65 2c 69 2c 74 29 3d 3e 7b 74 2e 72 28 69 29 2c 74 2e 64 28 69 2c 7b 72 69 63 68 53 63 72 69 62 65 41 63 74 69 6f 6e 3a 28 29 3d 3e 75 2c 72 69 63 68 53 63 72 69 62 65 46 6c 75 73 68 49 6d 6d 65 64 69 61 74 65 3a 28 29 3d 3e 70 7d 29 3b 76 61 72 20 72 3d 74 28 35 33 32 32 33 29 2c 73 3d 74 28 31 35 35 37 39 29 2c 63 3d 74 28 37 36 32 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.richScribeAction"],{21906:(e,i,t)=>{t.r(i),t.d(i,{richScribeAction:()=>u,richScribeFlushImmediate:()=>p});var r=t(53223),s=t(15579),c=t(762

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49940	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	585	OUT	GET /responsive-web/client-web/i18n/emoji-en.9bb55bba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 326555 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:35 GMT Etag: "h3NVl3IA5yVskfjCNFNMpw==+ident" expires: Thu, 24 Apr 2025 05:32:35 GMT Last-Modified: Sat, 23 Mar 2024 10:25:09 GMT perf: 7469935968 Server: ECAcc (lac/55A8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 5486abb2d609fc2d73bdc4010f47fbfe8b1d1a7dfabb908740e1a2451f7d36e4 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 16 x-ton-expected-size: 136410 x-transaction-id: 65a0a8d0707d8e57 Content-Length: 136410 Connection: close
2024-04-24 05:32:35 UTC	15627	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 31 38 6e 2f 65 6d 6f 6a 69 2d 65 6e 22 5d 2c 7b 32 30 37 34 37 3a 28 65 2c 61 2c 63 29 3d 3e 7b 76 61 72 20 69 3d 63 28 37 39 34 30 34 29 2e 5f 72 65 67 69 73 74 65 72 28 22 65 6e 22 29 3b 69 28 22 69 35 30 36 62 37 31 30 22 2c 22 53 6d 69 6c 65 79 73 20 26 20 70 65 6f 70 6c 65 22 29 2c 69 28 22 66 34 35 37 66 37 33 32 22 2c 22 41 6e 69 6d 61 6c 73 20 26 20 6e 61 74 75 72 65 22 29 2c 69 28 22 63 65 39 62 66 39 61 34 22 2c 22 46 6f Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/emoji-en"],{20747:(e,a,c)=>{var i=c(79404)._register("en");i("i506b710","Smileys & people"),i("f457f732","Animals & nature"),i("ce9bf9a4","Fo
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 68 38 65 30 62 31 30 34 22 2c 22 4d 61 6e 2c 20 63 75 72 6c 79 20 68 61 69 72 65 64 22 29 2c 69 28 22 66 62 34 34 61 64 33 65 22 2c 22 63 75 72 6c 79 2c 68 61 69 72 2c 6d 61 6e 2c 6d 61 6c 65 2c 6d 65 6e 22 29 2c 69 28 22 61 39 65 37 36 31 66 34 22 2c 22 57 6f 6d 61 6e 2c 20 72 65 64 20 68 61 69 72 65 64 22 29 2c 69 28 22 6a 30 65 61 66 37 38 34 22 2c 22 72 65 64 2c 68 61 69 72 2c 77 6f 6d 61 6e 2c 66 65 6d 61 6c 65 2c 77 6f 6d 65 6e 22 29 2c 69 28 22 63 31 38 64 32 36 61 36 22 2c 22 50 65 72 73 6f 6e 2c 20 72 65 64 20 68 61 69 72 65 64 22 29 2c 69 28 22 6a 63 63 34 35 61 37 32 22 2c 22 72 65 64 2c 68 61 69 72 22 29 2c 69 28 22 67 35 65 61 61 37 38 38 22 2c 22 4d 61 6e 2c 20 72 65 64 20 68 61 69 72 65 64 22 29 2c 69 28 22 67 62 62 62 31 30 64 32 22 2c 22 Data Ascii: h8e0b104","Man, curly haired"),i("fb44ad3e","curly,hair,man,male,men"),i("a9e761f4","Woman, red haired"),i("j0eaf784","red,hair,woman,female,women"),i("c18d26a6","Person, red haired"),i("jcc45a72","red,hair"),i("g5eaa788","Man, red haired"),i("gbbb10d2","
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 6d 61 6e 75 61 6c 20 77 68 65 65 6c 63 68 61 69 72 22 29 2c 69 28 22 68 65 61 64 64 64 66 61 22 2c 22 57 6f 6d 61 6e 20 64 61 6e 63 69 6e 67 22 29 2c 69 28 22 65 36 35 62 61 64 32 32 22 2c 22 64 61 6e 63 65 2c 64 61 6e 63 69 6e 67 2c 64 61 6e 63 65 72 2c 77 6f 6d 61 6e 2c 66 65 6d 61 6c 65 2c 77 6f 6d 65 6e 22 29 2c 69 28 22 66 65 37 32 66 65 33 34 22 2c 22 4d 61 6e 20 64 61 6e 63 69 6e 67 22 29 2c 69 28 22 68 34 31 38 62 36 39 38 22 2c 22 64 61 6e 63 65 2c 64 61 6e 63 69 6e 67 2c 64 61 6e 63 65 72 2c 6d 61 6e 2c 6d 61 6c 65 2c 6d 65 6e 22 29 2c 69 28 22 63 31 38 32 63 36 38 36 22 2c 22 57 6f 6d 65 6e 20 77 69 74 68 20 62 75 6e 6e 79 20 65 61 72 73 22 29 2c 69 28 22 61 34 36 62 39 38 34 61 22 2c 22 62 75 6e 6e 79 2c 64 61 6e 63 65 72 2c 77 6f 6d 61 6e 2c Data Ascii: manual wheelchair"),i("headddfa","Woman dancing"),i("e65bad22","dance,dancing,dancer,woman,female,women"),i("fe72fe34","Man dancing"),i("h418b698","dance,dancing,dancer,man,male,men"),i("c182c686","Women with bunny ears"),i("a46b984a","bunny,dancer,woman,
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 6c 6f 77 65 72 2c 70 6c 61 6e 74 22 29 2c 69 28 22 63 31 37 36 66 31 66 61 22 2c 22 43 68 65 72 72 79 20 62 6c 6f 73 73 6f 6d 22 29 2c 69 28 22 63 35 35 63 61 62 35 30 22 2c 22 62 6c 6f 73 73 6f 6d 2c 63 68 65 72 72 79 2c 66 6c 6f 77 65 72 2c 70 6c 61 6e 74 22 29 2c 69 28 22 63 38 65 66 33 63 38 34 22 2c 22 4c 6f 74 75 73 22 29 2c 69 28 22 66 31 66 32 34 66 66 30 22 2c 22 42 75 64 64 68 69 73 6d 2c 66 6c 6f 77 65 72 2c 48 69 6e 64 75 69 73 6d 2c 49 6e 64 69 61 2c 70 75 72 69 74 79 2c 56 69 65 74 6e 61 6d 22 29 2c 69 28 22 64 30 63 66 32 38 35 34 22 2c 22 48 79 61 63 69 6e 74 68 22 29 2c 69 28 22 62 66 35 35 64 35 66 61 22 2c 22 62 6c 75 65 62 6f 6e 6e 65 74 2c 66 6c 6f 77 65 72 2c 6c 61 76 65 6e 64 65 72 2c 6c 75 70 69 6e 65 2c 4e 6f 77 72 75 7a 2c 70 75 Data Ascii: lower,plant"),i("c176f1fa","Cherry blossom"),i("c55cab50","blossom,cherry,flower,plant"),i("c8ef3c84","Lotus"),i("f1f24ff0","Buddhism,flower,Hinduism,India,purity,Vietnam"),i("d0cf2854","Hyacinth"),i("bf55d5fa","bluebonnet,flower,lavender,lupine,Nowruz,pu
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 22 4d 61 6e 20 69 6e 20 6c 6f 74 75 73 20 70 6f 73 69 74 69 6f 6e 22 29 2c 69 28 22 65 62 65 63 32 32 31 61 22 2c 22 6d 65 64 69 74 61 74 69 6f 6e 2c 79 6f 67 61 2c 73 65 72 65 6e 69 74 79 2c 6d 61 6e 2c 6d 61 6c 65 2c 6d 65 6e 22 29 2c 69 28 22 62 32 35 31 63 35 37 30 22 2c 22 57 6f 6d 61 6e 20 69 6e 20 73 74 65 61 6d 79 20 72 6f 6f 6d 22 29 2c 69 28 22 63 66 65 65 66 61 32 30 22 2c 22 73 61 75 6e 61 2c 73 74 65 61 6d 20 72 6f 6f 6d 2c 68 61 6d 61 6d 2c 73 74 65 61 6d 62 61 74 68 2c 77 6f 6d 61 6e 2c 66 65 6d 61 6c 65 2c 77 6f 6d 65 6e 22 29 2c 69 28 22 6a 38 36 39 34 64 38 63 22 2c 22 50 65 72 73 6f 6e 20 69 6e 20 73 74 65 61 6d 79 20 72 6f 6f 6d 22 29 2c 69 28 22 69 61 62 31 66 32 33 34 22 2c 22 73 61 75 6e 61 2c 73 74 65 61 6d 20 72 6f 6f 6d 2c 68 61 Data Ascii: "Man in lotus position"),i("ebec221a","meditation,yoga,serenity,man,male,men"),i("b251c570","Woman in steamy room"),i("cfeefa20","sauna,steam room,hamam,steambath,woman,female,women"),i("j8694d8c","Person in steamy room"),i("iab1f234","sauna,steam room,ha
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 6f 6c 2c 6b 6e 6f 62 73 2c 6d 75 73 69 63 22 29 2c 69 28 22 67 33 37 32 38 61 66 36 22 2c 22 53 74 6f 70 77 61 74 63 68 22 29 2c 69 28 22 6a 63 32 64 31 66 31 32 22 2c 22 63 6c 6f 63 6b 2c 73 74 6f 70 77 61 74 63 68 22 29 2c 69 28 22 62 63 62 39 31 32 37 34 22 2c 22 54 69 6d 65 72 20 63 6c 6f 63 6b 22 29 2c 69 28 22 68 39 66 30 64 61 63 32 22 2c 22 63 6c 6f 63 6b 2c 74 69 6d 65 72 22 29 2c 69 28 22 68 30 38 34 62 66 64 30 22 2c 22 41 6c 61 72 6d 20 63 6c 6f 63 6b 22 29 2c 69 28 22 66 62 34 66 65 38 33 63 22 2c 22 61 6c 61 72 6d 2c 63 6c 6f 63 6b 22 29 2c 69 28 22 65 61 61 61 37 65 37 30 22 2c 22 4d 61 6e 74 65 6c 70 69 65 63 65 20 63 6c 6f 63 6b 22 29 2c 69 28 22 65 64 38 61 37 31 30 36 22 2c 22 63 6c 6f 63 6b 22 29 2c 69 28 22 62 64 38 37 38 31 37 30 22 Data Ascii: ol,knobs,music"),i("g3728af6","Stopwatch"),i("jc2d1f12","clock,stopwatch"),i("bcb91274","Timer clock"),i("h9f0dac2","clock,timer"),i("h084bfd0","Alarm clock"),i("fb4fe83c","alarm,clock"),i("eaaa7e70","Mantelpiece clock"),i("ed8a7106","clock"),i("bd878170"
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 75 6d 2c 63 61 6e 64 6c 65 73 74 69 63 6b 2c 6d 65 6e 6f 72 61 68 2c 72 65 6c 69 67 69 6f 6e 22 29 2c 69 28 22 64 64 39 61 32 33 61 61 22 2c 22 59 69 6e 20 79 61 6e 67 22 29 2c 69 28 22 6a 62 36 61 32 38 65 61 22 2c 22 72 65 6c 69 67 69 6f 6e 2c 74 61 6f 2c 74 61 6f 69 73 74 2c 79 61 6e 67 2c 79 69 6e 22 29 2c 69 28 22 65 31 33 64 30 34 65 32 22 2c 22 4f 72 74 68 6f 64 6f 78 20 63 72 6f 73 73 22 29 2c 69 28 22 65 62 32 36 35 35 37 32 22 2c 22 4b 68 61 6e 64 61 22 29 2c 69 28 22 63 38 35 38 63 39 34 34 22 2c 22 72 65 6c 69 67 69 6f 6e 2c 53 69 6b 68 22 29 2c 69 28 22 65 31 32 31 37 66 34 36 22 2c 22 50 6c 61 63 65 20 6f 66 20 77 6f 72 73 68 69 70 22 29 2c 69 28 22 64 39 33 34 30 62 30 30 22 2c 22 72 65 6c 69 67 69 6f 6e 2c 77 6f 72 73 68 69 70 22 29 2c 69 Data Ascii: um,candlestick,menorah,religion"),i("dd9a23aa","Yin yang"),i("jb6a28ea","religion,tao,taoist,yang,yin"),i("e13d04e2","Orthodox cross"),i("eb265572","Khanda"),i("c858c944","religion,Sikh"),i("e1217f46","Place of worship"),i("d9340b00","religion,worship"),i
2024-04-24 05:32:35 UTC	16383	IN	Data Raw: 69 74 65 20 6d 65 64 69 75 6d 20 73 71 75 61 72 65 22 29 2c 69 28 22 69 63 63 33 30 35 66 63 22 2c 22 42 6c 61 63 6b 20 6d 65 64 69 75 6d 20 73 6d 61 6c 6c 20 73 71 75 61 72 65 22 29 2c 69 28 22 67 31 63 33 37 34 38 61 22 2c 22 57 68 69 74 65 20 6d 65 64 69 75 6d 20 73 6d 61 6c 6c 20 73 71 75 61 72 65 22 29 2c 69 28 22 66 61 37 62 33 32 62 61 22 2c 22 42 6c 61 63 6b 20 73 6d 61 6c 6c 20 73 71 75 61 72 65 22 29 2c 69 28 22 65 64 65 37 39 31 61 36 22 2c 22 57 68 69 74 65 20 73 6d 61 6c 6c 20 73 71 75 61 72 65 22 29 2c 69 28 22 61 34 62 66 30 31 61 61 22 2c 22 53 6d 61 6c 6c 20 6f 72 61 6e 67 65 20 64 69 61 6d 6f 6e 64 22 29 2c 69 28 22 64 38 38 63 64 34 62 34 22 2c 22 64 69 61 6d 6f 6e 64 2c 67 65 6f 6d 65 74 72 69 63 2c 6f 72 61 6e 67 65 22 29 2c 69 28 22 Data Ascii: ite medium square"),i("icc305fc","Black medium small square"),i("g1c3748a","White medium small square"),i("fa7b32ba","Black small square"),i("ede791a6","White small square"),i("a4bf01aa","Small orange diamond"),i("d88cd4b4","diamond,geometric,orange"),i("
2024-04-24 05:32:35 UTC	6102	IN	Data Raw: 67 20 6f 66 20 4e 69 63 61 72 61 67 75 61 22 29 2c 69 28 22 64 64 33 65 33 62 63 32 22 2c 22 66 6c 61 67 2c 6e 69 63 61 72 61 67 75 61 22 29 2c 69 28 22 67 63 37 34 63 35 62 38 22 2c 22 46 6c 61 67 20 6f 66 20 4e 65 74 68 65 72 6c 61 6e 64 73 22 29 2c 69 28 22 61 36 34 66 38 64 30 38 22 2c 22 66 6c 61 67 2c 6e 65 74 68 65 72 6c 61 6e 64 73 22 29 2c 69 28 22 66 64 65 34 63 63 65 34 22 2c 22 46 6c 61 67 20 6f 66 20 4e 6f 72 77 61 79 22 29 2c 69 28 22 68 63 63 32 63 38 35 30 22 2c 22 66 6c 61 67 2c 6e 6f 72 77 61 79 2c 62 6f 75 76 65 74 2c 73 76 61 6c 62 61 72 64 2c 6a 61 6e 20 6d 61 79 65 6e 22 29 2c 69 28 22 65 38 35 35 36 63 65 65 22 2c 22 46 6c 61 67 20 6f 66 20 4e 65 70 61 6c 22 29 2c 69 28 22 61 62 63 63 33 35 65 36 22 2c 22 66 6c 61 67 2c 6e 65 70 61 Data Ascii: g of Nicaragua"),i("dd3e3bc2","flag,nicaragua"),i("gc74c5b8","Flag of Netherlands"),i("a64f8d08","flag,netherlands"),i("fde4cce4","Flag of Norway"),i("hcc2c850","flag,norway,bouvet,svalbard,jan mayen"),i("e8556cee","Flag of Nepal"),i("abcc35e6","flag,nepa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49941	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.b382915a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:35 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009477 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:35 GMT Etag: "zjWNrI1Tr9jT6mDUKuB6sA==+ident" expires: Thu, 24 Apr 2025 05:32:35 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/558B) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: afcce0b33b9f5971d65dfa5a01fcdb8df8c927fdcd877e1c65bee7f533a4105f x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 8009 x-transaction-id: 65cec0d9fba5093b Content-Length: 8009 Connection: close
2024-04-24 05:32:35 UTC	8009	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 6c 6f 61 64 65 72 73 2e 76 69 64 65 6f 2e 56 69 64 65 6f 50 6c 61 79 65 72 44 65 66 61 75 6c 74 55 49 7e 6c 6f 61 64 65 72 73 2e 76 69 64 65 6f 2e 56 69 64 65 6f 50 6c 61 79 65 22 5d 2c 7b 33 38 32 35 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 6f 3a 28 29 3d 3e 68 2c 5a 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye"],{38250:(e,t,r)=>{r.d(t,{o:()=>h,Z:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49942	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio.d10932da.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:36 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1664024 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:36 GMT Etag: "08o0SYfadmQVbzYtrWR21g==+ident" expires: Thu, 24 Apr 2025 05:32:36 GMT Last-Modified: Thu, 04 Apr 2024 23:12:07 GMT perf: 7469935968 Server: ECAcc (lac/5595) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 01d5a4fc00e1fa35b3551c16ffb534f3c318824376b0e41ad7124a78484dfd01 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 4358 x-transaction-id: ca4833046b689497 Content-Length: 4358 Connection: close
2024-04-24 05:32:36 UTC	4358	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 6f 6e 64 65 6d 61 6e 64 2e 49 6e 6c 69 6e 65 50 6c 61 79 65 72 7e 6c 6f 61 64 65 72 73 2e 76 69 64 65 6f 2e 50 6c 61 79 65 72 42 61 73 65 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 22 5d 2c 7b 33 31 34 36 30 3a 28 72 2c 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 3d 74 28 32 34 32 32 39 29 2c 6f 3d Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio"],{31460:(r,e,t)=>{var n=t(24229),o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49943	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	667	OUT	GET /responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV.8774e17a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:36 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 2656405 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:36 GMT Etag: "GIKorywfT0LvyNUl3edk+Q==+ident" expires: Thu, 24 Apr 2025 05:32:36 GMT Last-Modified: Sun, 24 Mar 2024 01:13:24 GMT perf: 7469935968 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 387e8665bfd707b69e3a547db664eb1e36ff9a6d4fe39692cd2c2b50ee3f3a20 x-content-type-options: nosniff x-response-time: 12 x-ton-expected-size: 61959 x-transaction-id: 3348eed28a2060bb Content-Length: 61959 Connection: close
2024-04-24 05:32:36 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 49 6e 6c 69 6e 65 50 6c 61 79 65 72 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 4f 6e 6c 79 56 69 64 65 6f 50 6c 61 79 65 72 7e 6c 6f 61 64 65 72 2e 69 6d 6d 65 72 73 69 76 65 54 77 65 65 74 48 61 6e 64 6c 65 72 7e 62 75 6e 64 6c 65 2e 54 56 22 5d 2c 7b 37 31 38 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 78 65 7d 29 3b 69 28 33 34 31 31 35 29 2c 69 28 36 33 34 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV"],{7187:(t,e,i)=>{i.d(e,{Z:()=>xe});i(34115),i(634
2024-04-24 05:32:36 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-04-24 05:32:36 UTC	16383	IN	Data Raw: 3d 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 68 61 6e 64 6c 65 53 74 61 72 74 57 61 74 63 68 69 6e 67 2c 71 74 29 7d 2c 65 2e 63 6c 65 61 72 53 74 61 72 74 57 61 74 63 68 69 6e 67 54 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 72 74 57 61 74 63 68 69 6e 67 54 69 6d 65 72 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 73 74 61 72 74 57 61 74 63 68 69 6e 67 54 69 6d 65 72 29 7d 2c 65 2e 68 61 6e 64 6c 65 53 74 61 72 74 57 61 74 63 68 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 69 73 57 61 74 63 68 69 6e 67 29 7b 74 68 69 73 2e 73 74 6f 70 50 69 6e 67 57 61 74 63 68 69 6e 67 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 61 70 69 2e 76 69 64 65 6f 53 74 61 72 74 57 61 74 63 68 69 6e 67 28 Data Ascii: =setTimeout(this.handleStartWatching,qt)},e.clearStartWatchingTimer=function(){this.startWatchingTimer&&clearTimeout(this.startWatchingTimer)},e.handleStartWatching=function(){if(!this.isWatching){this.stopPingWatching();var t=this.api.videoStartWatching(
2024-04-24 05:32:36 UTC	1	IN	Data Raw: 32 Data Ascii: 2
2024-04-24 05:32:36 UTC	16383	IN	Data Raw: 30 2c 32 35 2c 33 30 2c 33 35 2c 34 30 2c 34 35 2c 35 30 2c 35 35 2c 36 30 2c 36 35 2c 37 30 2c 37 35 2c 38 30 2c 38 35 2c 39 30 2c 39 35 2c 31 30 30 5d 2c 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 3d 74 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 44 61 74 61 53 74 6f 72 65 3d 7b 7d 2c 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 2e 6f 6e 28 58 2c 74 68 69 73 2e 6f 6e 54 69 63 6b 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 2e 6f 6e 28 62 2c 74 68 69 73 2e 6f 6e 46 75 6c 6c 73 63 72 65 65 6e 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 2e 6f 6e 28 4a 2c 74 68 69 73 2e 6f 6e 53 68 Data Ascii: 0,25,30,35,40,45,50,55,60,65,70,75,80,85,90,95,100],Oe=function(){function t(t){this.analytics=t,this.sessionDataStore={},this.analytics.on(X,this.onTickEvent.bind(this)),this.analytics.on(b,this.onFullscreenEvent.bind(this)),this.analytics.on(J,this.onSh
2024-04-24 05:32:36 UTC	12808	IN	Data Raw: 65 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 34 39 32 37 36 29 2c 72 3d 69 28 39 38 32 37 30 29 2c 61 3d 69 28 35 35 33 39 31 29 2c 6f 3d 69 28 33 31 37 38 37 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 2e 53 79 6d 62 6f 6c 7c 7c 28 6e 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 72 28 65 2c 74 29 7c 7c 6f 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 61 2e 66 28 74 29 7d 29 7d 7d 2c 35 35 33 39 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 37 30 30 39 35 29 3b 65 2e 66 3d 6e 7d 2c 34 39 32 32 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 32 33 31 30 33 29 2c 72 3d 69 28 38 39 39 39 36 29 2e 66 69 6e 64 2c 61 3d 69 28 39 37 33 36 29 2c 6f 3d 22 66 69 6e 64 22 2c 73 3d 21 30 3b 6f 20 69 6e 5b Data Ascii: e,i)=>{var n=i(49276),r=i(98270),a=i(55391),o=i(31787).f;t.exports=function(t){var e=n.Symbol\|\|(n.Symbol={});r(e,t)\|\|o(e,t,{value:a.f(t)})}},55391:(t,e,i)=>{var n=i(70095);e.f=n},49228:(t,e,i)=>{var n=i(23103),r=i(89996).find,a=i(9736),o="find",s=!0;o in[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49947	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	1522	OUT	OPTIONS /graphql/qW5u-DAuXpMEG0zA1F7UGQ/UserByScreenName?variables=%7B%22screen_name%22%3A%22overlakehmc%22%2C%22withSafetyModeUserFields%22%3Atrue%7D&features=%7B%22hidden_profile_likes_enabled%22%3Atrue%2C%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:36 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: 0260d70953524a28fe63ac9adc1cb48cdd5d45bab22933638c344286aa7b957c date: Wed, 24 Apr 2024 05:32:35 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49946	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	1172	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 405 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: ODtDNHw6WDoe6PLyrNAz8O/v8uQg4qY8W7xa2n+PdC3ynIIgkoAR5MSTy08IuLxdVjoO4TmuvNtViHr4e8GmVowrdAGkOw x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:35 UTC	405	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 35 34 36 32 35 25 32 43 25 32 32 69 74 65 6d 73 25 32 32 25 33 41 25 35 42 25 35 44 25 32 43 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 73 70 61 63 65 25 32 32 25 33 41 25 37 42 25 32 32 70 61 67 65 25 32 32 25 33 41 25 32 32 70 72 6f 66 69 6c 65 25 32 32 25 32 43 25 32 32 61 63 74 69 6f 6e 25 32 32 25 33 41 25 32 32 73 68 6f 77 25 32 32 25 32 43 25 32 32 63 6c 69 65 6e 74 25 32 32 25 33 41 25 32 32 6d 35 25 32 32 Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936754625%2C%22items%22%3A%5B%5D%2C%22event_namespace%22%3A%7B%22page%22%3A%22profile%22%2C%22action%22%3A%22show%22%2C%22client%22%3A%22m5%22
2024-04-24 05:32:36 UTC	1071	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:35 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:36 GMT x-transaction: 1e388099c277c264 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: 1e388099c277c264 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 9 x-connection-hash: 08c02aabbf65fac74b517974e3fefe46d3a995f9f9a7b7793187dac2ff9bfcf5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49944	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	583	OUT	GET /responsive-web/client-web/Chirp-Bold.ebb56aba.woff2 HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:36 UTC	731	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * Age: 2957814 Content-Type: application/font-woff Date: Wed, 24 Apr 2024 05:32:36 GMT Etag: "BfuPiZHyx5chxxKFu2hjzQ==" expires: Thu, 24 Apr 2025 05:32:36 GMT last-modified: Wed, 25 Jan 2023 22:03:26 GMT perf: 7626143928 Server: ECAcc (lac/55CD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: 7e3eea62c8ee01a678a3cf6931a515cc79813785bf04fca028d431271311aa32 x-content-type-options: nosniff x-response-time: 13 x-ton-expected-size: 45016 x-transaction-id: 3016729d4292bd15 Content-Length: 45016 Connection: close
2024-04-24 05:32:36 UTC	15671	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 af d8 00 13 00 00 00 01 a1 24 00 00 af 6f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 04 1b 81 dc 76 1c a7 78 06 60 00 bf 76 08 44 09 85 2a 11 14 0a 83 aa 54 82 ee 79 01 36 02 24 03 98 74 0b 8c 3c 00 04 20 05 87 72 07 20 0c 83 09 17 24 18 96 54 5b c3 7b 71 86 3a 86 87 57 62 6d d3 6d 08 a4 7f f3 9a b5 32 1e f4 08 3a c6 36 48 79 95 e9 3a 3a b5 08 13 f2 6f af 60 db b4 a7 40 77 50 3c bd a1 da 67 f6 ff ff ff 6f 49 16 32 b6 fb 9f de 6f fb 8d 81 00 a0 a0 a5 55 55 3a 09 8b 4c 8c c8 6e a5 26 19 3b 8b a0 6c b0 1e 11 d5 89 6e 48 bc 60 6c 48 d3 5c 16 64 d4 b5 4c 92 20 e6 c5 d0 83 8a 89 0d ae 65 50 73 52 b7 d0 eb a4 4d 66 28 94 d6 6e 71 9c e6 e6 f0 a5 64 77 87 e7 34 a3 e4 ce f6 74 f4 b9 79 be 77 b8 7b 8f Data Ascii: wOF2$ovx`vD*Ty6$t< r $T[{q:Wbmm2:6Hy::o`@wP<goI2oUU:Ln&;lnH`lH\dL ePsRMf(nqdw4tyw{
2024-04-24 05:32:36 UTC	16383	IN	Data Raw: 24 3e 5e 46 16 00 d4 47 8f 01 9b 7c aa 47 63 04 e9 93 a6 1b b7 13 d2 b3 16 9e bd 1d ae f7 c0 1e 03 b9 52 bc 6d cf c8 45 11 fa 97 ff 57 ae 6b 47 3f 75 b8 b3 bd ab 99 f2 8e 60 45 5e f9 35 a9 b6 e6 6b f4 65 91 04 87 10 9e e2 ec ce f1 4a bf 12 f6 bd 4f 39 5c ca 24 51 7f a1 fe 16 29 25 46 8b 09 73 96 6c d8 52 44 31 2b f9 8e 0e c6 98 64 9a 39 56 58 63 5d af b3 1d b2 fd a6 22 99 5a 1a e9 ac a9 da af 71 cd 69 55 8e b4 86 e6 63 cd 57 35 df b0 d4 4a eb db d1 a6 5b 76 23 b7 d1 91 9e 45 df 66 28 64 b2 8e a4 3f 3a fc 3f b2 a1 1b bf 8b b4 f9 b7 57 a3 27 90 43 77 7c 68 67 d6 96 8e 7c 53 69 06 7c ff d3 dd f4 69 01 31 2c a3 bb f5 f8 de 7b 94 37 a8 3f 51 7f 93 98 1c b0 7f c6 e2 9b 2f a4 84 d5 dc 22 13 03 97 fa c2 ef 7e 52 ba b6 69 4c 33 d8 8e 3f 1a f8 f5 6c 56 63 3a fe 66 Data Ascii: $>^FG\|GcRmEWkG?u`E^5keJO9\$Q)%FslRD1+d9VXc]"ZqiUcW5J[v#Ef(d?:?W'Cw\|hg\|Si\|i1,{7?Q/"~RiL3?lVc:f
2024-04-24 05:32:36 UTC	12962	IN	Data Raw: 61 68 10 9c a2 0f 7b f4 56 88 5f 16 bb f6 fb a6 df af 7f 2b 13 ca 70 90 85 fa a7 a5 ce ed 45 8b 22 50 1f 2e 89 f9 69 d3 07 fb 30 62 10 3d 22 12 f2 de 75 fd b0 38 b3 42 cf 11 71 9e 8f b8 3c 9f f1 79 3e 2a 72 e6 86 8f 04 3c 17 72 74 99 15 7e 4e 03 3f 69 96 99 34 0d 39 cb ee dd c8 b9 e2 ca a8 e8 c5 5e 1a 4c 90 01 ac a7 41 72 59 41 59 7a 85 2d ad c2 35 3e b1 23 49 03 4c 90 ce 4d be 31 ee 02 55 f4 52 ae 9c b6 02 12 64 83 c9 52 d9 c0 fd 8f 42 8f 4b 0e 7d db b7 33 f4 f6 eb 3f 02 9e ed 9a 79 7a e7 8d be 17 25 27 84 27 a4 27 c6 26 c7 8e 4b e5 69 fb 72 cd d2 a9 02 f7 55 aa ad 54 d6 06 ab 1a 54 aa b8 75 71 ab 39 7a 42 d8 e1 43 c1 e0 d5 16 34 e6 20 6c 65 d0 69 ce b8 a1 51 b6 89 83 9a 90 41 c0 fa ea d4 71 fc 01 57 ac a9 3a 41 c3 d1 e8 e3 a3 e2 df 03 ea 44 49 c9 c1 f3 Data Ascii: ah{V_+pE"P.i0b="u8Bq<y>*r<rt~N?i49^LArYAYz-5>#ILM1URdRBK}3?yz%'''&KirUTTuq9zBC4 leiQAqW:ADI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49945	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:35 UTC	586	OUT	GET /responsive-web/client-web/Chirp-Regular.80fda27a.woff2 HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:36 UTC	730	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * Age: 2743178 Content-Type: application/font-woff Date: Wed, 24 Apr 2024 05:32:36 GMT Etag: "rw/QkqlQzYWKFgSQriLRbA==" expires: Thu, 24 Apr 2025 05:32:36 GMT last-modified: Sat, 23 Mar 2024 10:25:09 GMT perf: 7469935968 Server: ECAcc (lac/55DF) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: 1a4c2f1d02176b47b8a10b0679c69f5d2de26ee5c21d09ac10b4da73f30ec986 x-content-type-options: nosniff x-response-time: 7 x-ton-expected-size: 44660 x-transaction-id: a795175dac590052 Content-Length: 44660 Connection: close
2024-04-24 05:32:36 UTC	16383	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ae 74 00 13 00 00 00 01 a2 10 00 00 ae 0c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 04 1b 81 dc 64 1c a7 78 06 60 00 bf 76 08 44 09 85 2a 11 14 0a 83 ac 38 82 f0 57 01 36 02 24 03 98 74 0b 8c 3c 00 04 20 05 87 72 07 20 0c 83 26 17 24 18 96 54 5b ac 7c 91 01 a9 71 d7 6e 5f e6 91 04 bb 49 55 ed 8d c3 0c f3 86 6f 04 d7 f0 39 a5 b4 41 cd b1 11 c7 cf 54 35 a2 fc 92 71 cc 4a 40 77 0e 1c 4a ed 85 2b fb ff ff ff ff 45 c9 e2 19 f7 cd 6e cc ee be aa ea 55 12 a4 0f 1f 77 77 a0 20 05 09 a3 83 01 73 b7 c4 40 59 79 dd b4 25 ba 1e ec e1 8c 2c 86 40 64 8c 81 70 74 4e 31 1d 2c e4 0c c2 66 2b 1d 56 5a 20 8e a8 53 ad 4c ee ae 65 33 cd 3d 0a 2c 4a ee c4 d2 db c9 22 1b 83 68 8a 0f d4 db 56 73 b3 a2 b5 9d 53 95 Data Ascii: wOF2tdx`vD*8W6$t< r &$T[\|qn_IUo9AT5qJ@wJ+EnUww s@Yy%,@dptN1,f+VZ SLe3=,J"hVsS
2024-04-24 05:32:36 UTC	16383	IN	Data Raw: 23 5b fc b5 4b ad e9 21 7f 1f 71 f6 b0 05 2d b4 63 80 8f 61 f9 a5 31 d3 e4 64 0f 52 36 2a 6b 77 6a 3f a4 27 7f 6b c1 c4 7b 54 2a 7a d2 b7 9d d9 f8 e8 e6 6e ed ce 86 37 b2 c1 dd a8 1d ff 57 b3 a1 dd de dd 5d db 40 35 b7 a7 ea 2b cd 73 65 f8 a0 ef 29 b1 e7 b8 70 1f 1f 1e 12 78 44 e8 31 1e 3c 40 87 5b 98 70 1b 0b ee 60 c3 5d 0c f8 d7 3c dd 5c f5 72 37 c0 d1 57 89 be 49 d2 c9 d9 77 a3 75 58 19 8f a8 38 64 35 4f 76 0b cc ca 60 4e 49 e6 36 57 66 c9 66 97 28 a7 45 72 33 59 94 d9 e2 52 2c 6c b1 6d bd 2a fa ed 1c b4 7b 8d 3d 43 f6 0e db b5 da 89 bd 8e ef 71 72 9f d3 07 60 1b 05 e1 88 8d 68 88 8a 18 88 85 e8 88 63 ee 24 2b 6c 9e 83 33 77 60 87 a6 68 e0 f2 ad 5c be 8d ca 37 54 5f 4f cf ef d9 3d bd 23 db bd b6 b5 cc b7 c0 42 0b af 7d ad f3 2f b8 2f f6 cd be db a9 d5 Data Ascii: #[K!q-ca1dR6kwj?'k{Tzn7W]@5+se)pxD1<@[p`]<\r7WIwuX8d5Ov`NI6Wff(Er3YR,lm*{=Cqr`hc$+l3w`h\7T_O=#B}//
2024-04-24 05:32:36 UTC	11894	IN	Data Raw: 1f 67 a2 df 16 9b ac f7 0f 51 bc aa aa fa 88 50 65 5d 68 64 ac 8b ab 17 02 96 dd 43 95 e7 2f 7f 74 b5 94 0f d8 5d 48 ed 3c 17 fa 85 94 5f 78 ee a3 3b 51 c3 17 60 54 2a 51 9b 04 46 b6 65 f6 30 55 08 a1 32 09 62 14 98 99 96 23 e7 29 92 46 a4 a8 c0 54 0f ae 25 10 90 92 07 a5 97 1f f0 70 49 09 52 48 90 0f 50 d6 76 7f 09 75 62 00 ad ee 79 9f a3 3e 98 b5 1f fa 35 df 44 57 c2 cf 57 fb 6b 1a 33 12 16 43 8f 16 ed ff 47 76 bc 74 f2 9d 4a 6c 97 7b f7 4b 99 1f 0e 48 de b7 11 ee 10 6c 69 5b 0a 03 69 22 f9 67 9a 62 ca 01 cc 99 98 eb 3f df 49 fd ed 16 a6 9b 2d d2 3c 22 1c fd c9 04 4c a8 ef 6d 86 b1 ea e7 df 1b 32 a6 7c 48 34 a6 bf 93 b8 e1 5d f4 7d bb 4a 2d 56 73 55 e8 94 83 b7 dc 70 cb 7f a6 f7 98 d8 df 5d 16 71 de 97 29 ad 62 71 8b 1a aa 6a 88 88 20 59 35 7b 13 76 49 Data Ascii: gQPe]hdC/t]H<_x;Q`T*QFe0U2b#)FT%pIRHPvuby>5DWWk3CGvtJl{KHli[i"gb?I-<"Lm2\|H4]}J-VsUp]q)bqj Y5{vI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49948	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	2040	OUT	GET /graphql/qW5u-DAuXpMEG0zA1F7UGQ/UserByScreenName?variables=%7B%22screen_name%22%3A%22overlakehmc%22%2C%22withSafetyModeUserFields%22%3Atrue%7D&features=%7B%22hidden_profile_likes_enabled%22%3Atrue%2C%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-client-transaction-id: z8y0w4vNr83pHwUFWyfEBxgYBRPXFVHLrEutLYh4g9oFa3XXZXfmEzNkPLj/T0uqoc35Fs6WzFKjIg6eztSpYNkopAQEzA x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:37 UTC	1267	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:36 GMT perf: 7402827104 vary: Origin pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:37 GMT content-length: 1905 x-frame-options: SAMEORIGIN x-transaction-id: 0b1bd979d3e683e8 x-xss-protection: 0 x-rate-limit-limit: 95 x-rate-limit-reset: 1713937657 content-disposition: attachment; filename=json.json x-tfe-preserve-body: true x-content-type-options: nosniff x-rate-limit-remaining: 94 x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 52 x-connection-hash: 499bfdcb2eb672e0cdd25aa1c80de4bab3b34e376d1b44f8c73891827e3fc34f connection: close
2024-04-24 05:32:37 UTC	1905	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 72 65 73 75 6c 74 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 69 64 22 3a 22 56 58 4e 6c 63 6a 6f 7a 4e 44 63 7a 4d 7a 63 77 4d 51 3d 3d 22 2c 22 72 65 73 74 5f 69 64 22 3a 22 33 34 37 33 33 37 30 31 22 2c 22 61 66 66 69 6c 69 61 74 65 73 5f 68 69 67 68 6c 69 67 68 74 65 64 5f 6c 61 62 65 6c 22 3a 7b 7d 2c 22 69 73 5f 62 6c 75 65 5f 76 65 72 69 66 69 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 66 69 6c 65 5f 69 6d 61 67 65 5f 73 68 61 70 65 22 3a 22 43 69 72 63 6c 65 22 2c 22 6c 65 67 61 63 79 22 3a 7b 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 54 68 75 20 41 70 72 20 32 33 20 32 31 3a 32 33 3a 31 32 20 2b 30 30 30 30 20 32 30 30 39 22 2c 22 64 65 66 61 75 6c 74 5f 70 72 6f 66 Data Ascii: {"data":{"user":{"result":{"__typename":"User","id":"VXNlcjozNDczMzcwMQ==","rest_id":"34733701","affiliates_highlighted_label":{},"is_blue_verified":false,"profile_image_shape":"Circle","legacy":{"created_at":"Thu Apr 23 21:23:12 +0000 2009","default_prof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49951	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	562	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:37 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:37 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: fe65c6e6920dfd54 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 310b8bcc16fe3c6be74827c77516c526ff29e3478a40ff23d0be9ec3812cd1b6 connection: close
2024-04-24 05:32:37 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49949	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	645	OUT	GET /responsive-web/client-web/shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer.a2e6b3aa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009479 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "yDmO6IHO2auQVGmbhRKWKw==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55BC) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: b353b330e92269083edd24e55056ff78e228f3742438164fa9c85b1cd72c90aa x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 6277 x-transaction-id: ad15a259e1c1e3f8 Content-Length: 6277 Connection: close
2024-04-24 05:32:37 UTC	6277	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 6f 6e 64 65 6d 61 6e 64 2e 49 6e 6c 69 6e 65 50 6c 61 79 65 72 7e 6c 6f 61 64 65 72 2e 41 75 64 69 6f 4f 6e 6c 79 56 69 64 65 6f 50 6c 61 79 65 72 22 5d 2c 7b 39 32 34 36 32 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 54 63 3a 28 29 3d 3e 6f 2c 79 74 3a 28 29 3d 3e 72 7d 29 3b 61 28 33 36 37 32 38 29 2c 61 28 36 38 38 36 29 2c 61 28 32 37 38 34 29 3b 76 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer"],{92462:(e,t,a)=>{a.d(t,{Tc:()=>o,yt:()=>r});a(36728),a(6886),a(2784);v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49950	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	592	OUT	GET /responsive-web/client-web/loader.NewTweetsPill.c18477ba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009460 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "9aAUP0qgebDPZauymp7KCw==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:29 GMT perf: 7402827104 Server: ECAcc (lac/559D) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 23c5341521b86279e3593ba6d59edb6cc875d78bde7f6e0d9e1dc951298484cc x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 4823 x-transaction-id: 8827be1f744a48dd Content-Length: 4823 Connection: close
2024-04-24 05:32:37 UTC	4823	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 4e 65 77 54 77 65 65 74 73 50 69 6c 6c 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 41 72 72 6f 77 55 70 2d 6a 73 22 5d 2c 7b 32 33 35 30 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 6b 7d 29 3b 76 61 72 20 61 3d 72 28 32 37 38 34 29 2c 6e 3d 72 28 32 35 36 38 36 29 2c 6c 3d 72 28 36 35 35 35 29 2c 69 3d 72 28 34 39 36 35 30 29 2c 73 3d 72 28 38 32 33 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.NewTweetsPill","icons/IconArrowUp-js"],{23508:(e,t,r)=>{r.r(t),r.d(t,{default:()=>k});var a=r(2784),n=r(25686),l=r(6555),i=r(49650),s=r(823

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49952	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.5f7fa13a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009464 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "jwcz3szCNGNIP2LucSASPg==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559F) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c7305fdb35790951a9e4174c220350e820eddf6ae49b5554499ae46e8835a86c x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2768 x-transaction-id: 7a9b0416cdd43dba Content-Length: 2768 Connection: close
2024-04-24 05:32:37 UTC	2768	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 43 6f 6e 76 65 72 73 61 74 69 6f 6e 7e 62 75 6e 64 6c 65 2e 44 4d 52 69 63 68 54 65 78 74 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 22 5d 2c 7b 39 36 36 38 38 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 4c 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund"],{96688:(e,t,s)=>{s.d(t,{Z:()=>L});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49953	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	629	OUT	GET /responsive-web/client-web/shared~bundle.JobSearch~bundle.UserJobs~loader.WideLayout.21f9b23a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984553 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "iyXTrjAQQLcryCIevtc5MQ==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/5586) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 6e006196772324594e65273849b9d65bd040f81999d117496959d0bd24227722 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 14092 x-transaction-id: 4510f57f71b0181c Content-Length: 14092 Connection: close
2024-04-24 05:32:37 UTC	14092	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 4a 6f 62 53 65 61 72 63 68 7e 62 75 6e 64 6c 65 2e 55 73 65 72 4a 6f 62 73 7e 6c 6f 61 64 65 72 2e 57 69 64 65 4c 61 79 6f 75 74 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 5d 2c 7b 33 36 33 31 3a 28 65 2c 6c 2c 61 29 3d 3e 7b 61 2e 64 28 6c 2c 7b 5a 3a 28 29 3d 3e 46 7d 29 3b 76 61 72 20 6e 3d 61 28 32 37 38 34 29 2c 74 3d 61 28 32 35 36 38 36 29 2c 69 3d Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.JobSearch~bundle.UserJobs~loader.WideLayout","bundle.AudioSpaceDetail"],{3631:(e,l,a)=>{a.d(l,{Z:()=>F});var n=a(2784),t=a(25686),i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49954	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:36 UTC	624	OUT	GET /responsive-web/client-web/shared~loader.WideLayout~loader.ProfileClusterFollow.0a0a422a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143664 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "XeL8mvJGhQfNy2CLg5x+fQ==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Mon, 22 Apr 2024 13:31:45 GMT perf: 7402827104 Server: ECAcc (lac/55A2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c042cb42db454561249b9ed643360d41ef57cf8d8a51bb860b906f39b0657f5a x-content-type-options: nosniff x-response-time: 7 x-ton-expected-size: 3734 x-transaction-id: 3eb55067f372a1dd Content-Length: 3734 Connection: close
2024-04-24 05:32:37 UTC	3734	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 57 69 64 65 4c 61 79 6f 75 74 7e 6c 6f 61 64 65 72 2e 50 72 6f 66 69 6c 65 43 6c 75 73 74 65 72 46 6f 6c 6c 6f 77 22 5d 2c 7b 36 38 37 35 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 71 75 65 72 79 49 64 3a 22 6a 54 76 69 69 51 4d 4b 65 54 6c 66 48 69 59 46 5a 66 4e 4f 56 67 22 2c 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 3a 22 53 69 64 65 62 61 72 55 73 65 72 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 22 2c 6f 70 65 72 61 74 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.WideLayout~loader.ProfileClusterFollow"],{68755:e=>{e.exports={queryId:"jTviiQMKeTlfHiYFZfNOVg",operationName:"SidebarUserRecommendations",operat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49844	72.21.91.70	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	611	OUT	GET /profile_banners/34733701/1688412966/600x200 HTTP/1.1 Host: pbs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	851	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * access-control-expose-headers: Content-Length Age: 0 cache-control: max-age=604800, must-revalidate Content-Type: image/jpeg Date: Wed, 24 Apr 2024 05:32:37 GMT Last-Modified: Mon, 03 Jul 2023 19:34:06 GMT perf: 7402827104 Server: ECS (laa/7B8F) Server-Timing: x-cache;desc= MISS,x-tw-cdn;desc=VZ strict-transport-security: max-age=631138519 surrogate-key: profile_banners profile_banners/bucket/6 profile_banners/34733701 timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: MISS x-connection-hash: d3fa00f4e8bafcfacd06d2e027ad2d1eb20bcf97fff0c1183fa5cc4ced125a4d x-content-type-options: nosniff x-response-time: 14 x-transaction-id: f4845e4e40867474 x-tw-cdn: VZ x-tw-cdn: VZ x-tw-cdn: VZ Content-Length: 38823 Connection: close
2024-04-24 05:32:37 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f4 a7 75 db cc 9d 21 Data Ascii: JFIFC!"$"$CX"u!
2024-04-24 05:32:37 UTC	16383	IN	Data Raw: 58 7a 46 40 34 7c e3 a1 93 26 b6 91 52 43 ef 49 85 a7 48 15 ea cb af ea 10 e6 1f c6 a0 c8 7b 3b bd 3c 43 45 2d 71 7c cd 58 78 75 9d 58 58 4c b5 fe a7 9c 3c 46 0d 51 75 51 8f c7 cc a4 15 01 57 fe e6 2b 9c f8 3f ec 16 ac b8 96 87 03 f2 96 ea f0 1d 63 c9 b9 a3 ac 6c 2b 51 e7 c2 2c 52 81 d0 d4 c6 3c 2a 33 32 80 20 ec 60 87 12 ff 00 16 59 a3 77 bb 52 2b c8 5b 15 db fd c3 42 3b 3e 10 c8 e4 20 f8 a8 1a 8c bf 4e df 89 52 d7 a0 5b 0b 10 cf a4 43 5b 89 29 7d e6 ef eb 3f 41 a6 39 73 f2 83 da 86 73 05 88 5d 93 e5 9d 12 fa c7 2d 07 b3 0d bf 6f da 54 48 92 a5 4a 95 12 18 81 6a 1c 91 ff 00 c5 b6 27 75 bb 1e d0 da 2c ec 86 a7 82 fd 99 9d eb 10 04 21 e1 bc 42 d1 ec 20 2c d0 af c4 1d 4c 83 da 51 cb 6b ac b1 6c 88 e6 67 50 c3 08 9b ea bf 44 49 51 69 8c f6 83 3c dd 1e d1 83 Data Ascii: XzF@4\|&RCIH{;<CE-q\|XxuXXL<FQuQW+?cl+Q,R<*32 `YwR+[B;> NR[C[)}?A9ss]-oTHJj'u,!B ,LQklgPDIQi<
2024-04-24 05:32:37 UTC	6057	IN	Data Raw: 09 29 c1 a4 e5 3a 86 b5 51 52 fe 3e b1 cc 89 d7 1d 71 fb c4 20 ff 00 af 08 94 26 4a 3d bc 60 29 88 b0 41 12 d6 93 be 94 98 a3 f6 82 03 82 3f f1 31 83 81 27 21 93 db e1 c3 70 ad 2e c1 5e 4e e1 2d 9a b0 cd bc 22 8c 30 20 1d c9 bf 8c 29 35 0c 0a 70 79 24 c6 d8 98 08 59 0a db cd c8 28 94 c0 19 c8 de ba d6 6f 48 75 03 93 99 ac 80 3d 9f e7 13 ea e3 6e 88 33 66 9d e3 73 eb 8b 91 a1 4c 51 ae 9c e1 88 00 2f 5a 5e 43 f2 eb 0a 0b 35 dd 53 68 56 bf 2e 8c 31 20 a8 a2 da ed 8f b7 ac ae b8 74 1a f4 1c 9e 6b b5 c7 ee eb a0 cf f0 64 6b 40 6e 70 20 26 8a 0f 1a 3e 70 72 c1 a5 64 3b ef 2f d0 6b b8 4b eb 9d ff 00 bc b8 39 da 15 87 9c 3f 02 b6 cb be b6 cd 5c b1 70 d1 6a 9b 09 04 8e 9d e3 41 d0 05 9b db ac 84 88 82 14 2e ea ec bb 77 86 a0 2b 0c 2b c1 53 a3 4f 26 24 ad 2c 08 45 Data Ascii: ):QR>q &J=`)A?1'!p.^N-"0 )5py$Y(oHu=n3fsLQ/Z^C5ShV.1 tkdk@np &>prd;/kK9?\pjA.w++SO&$,E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49958	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	1469	OUT	GET /graphql/qW5u-DAuXpMEG0zA1F7UGQ/UserByScreenName?variables=%7B%22screen_name%22%3A%22overlakehmc%22%2C%22withSafetyModeUserFields%22%3Atrue%7D&features=%7B%22hidden_profile_likes_enabled%22%3Atrue%2C%22hidden_profile_subscriptions_enabled%22%3Atrue%2C%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22subscriptions_verification_info_is_identity_verified_enabled%22%3Atrue%2C%22subscriptions_verification_info_verified_since_enabled%22%3Atrue%2C%22highlights_tweets_tab_ui_enabled%22%3Atrue%2C%22responsive_web_twitter_article_notes_tab_enabled%22%3Atrue%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%7D&fieldToggles=%7B%22withAuxiliaryUserLabels%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:37 UTC	370	IN	HTTP/1.1 400 Bad Request perf: 7402827104 content-type: application/json;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 62 x-transaction-id: 2129e9c80f48d8c9 x-response-time: 1 x-connection-hash: fbe2aef81dfebbd6993ca0e511379fc78f9863e7b200316c3a7431a28381c348 date: Wed, 24 Apr 2024 05:32:37 GMT server: tsa_p connection: close
2024-04-24 05:32:37 UTC	62	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 61 74 61 22 2c 22 63 6f 64 65 22 3a 32 31 35 7d 5d 7d 0a Data Ascii: {"errors":[{"message":"Bad Authentication data","code":215}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49955	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	616	OUT	GET /responsive-web/client-web/shared~loader.WideLayout~bundle.Conversation.8c6c71fa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009460 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "Sy1sOqK/b8vJY8JtYOsFkw==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 9ce4f7e5b2fa8cd494b1c2be2302a167391deb8feb8e4cd86d6b7b903369bd18 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 4267 x-transaction-id: d6926a281b847917 Content-Length: 4267 Connection: close
2024-04-24 05:32:37 UTC	4267	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 57 69 64 65 4c 61 79 6f 75 74 7e 62 75 6e 64 6c 65 2e 43 6f 6e 76 65 72 73 61 74 69 6f 6e 22 5d 2c 7b 39 33 30 37 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 53 74 69 63 6b 79 56 69 65 77 3a 28 29 3d 3e 64 2c 64 65 66 61 75 6c 74 3a 28 29 3d 3e 67 2c 72 6f 75 6e 64 54 6f 4e 65 61 72 65 73 74 44 65 76 69 63 65 50 69 78 65 6c 3a 28 29 3d 3e 70 2c 75 73 65 53 74 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.WideLayout~bundle.Conversation"],{93077:(t,e,i)=>{i.r(e),i.d(e,{StickyView:()=>d,default:()=>g,roundToNearestDevicePixel:()=>p,useSt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49956	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	589	OUT	GET /responsive-web/client-web/loader.WideLayout.1706937a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 445517 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "eiMU2ZLdsomUNOmIRBfE2A==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 19 Apr 2024 01:31:33 GMT perf: 7402827104 Server: ECAcc (lac/558E) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 6439b0dfbcca758c190a5e8570928ae742a202dce3efe1499868d448edef5d0e x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 23183 x-transaction-id: 60def52b0d45ebdf Content-Length: 23183 Connection: close
2024-04-24 05:32:37 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 57 69 64 65 4c 61 79 6f 75 74 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 53 74 61 72 53 74 72 6f 6b 65 2d 6a 73 22 5d 2c 7b 31 38 38 39 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 67 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6c 3d 6e 28 37 38 39 36 29 2c 61 3d 28 6e 28 33 36 37 32 38 29 2c 6e 28 32 37 38 34 29 29 2c 73 3d 6e 28 32 35 36 38 36 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 63 6f 6e 73 74 7b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.WideLayout","icons/IconStarStroke-js"],{18892:(e,t,n)=>{n.d(t,{g:()=>r});var l=n(7896),a=(n(36728),n(2784)),s=n(25686);function r(e){const{
2024-04-24 05:32:37 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-04-24 05:32:37 UTC	6799	IN	Data Raw: 4f 6e 52 65 6f 72 64 65 72 42 75 74 74 6f 6e 3a 22 63 20 72 22 2c 6c 61 73 74 43 6f 6c 75 6d 6e 3a 22 63 20 30 22 2c 6e 65 78 74 43 6f 6c 75 6d 6e 3a 22 5d 22 2c 6e 74 68 43 6f 6c 75 6d 6e 3a 22 63 20 31 2e 2e 39 22 2c 70 72 65 76 43 6f 6c 75 6d 6e 3a 22 5b 22 2c 72 65 6d 6f 76 65 43 6f 6c 75 6d 6e 3a 22 63 20 62 61 63 6b 73 70 61 63 65 22 2c 74 6f 67 67 6c 65 43 6f 6c 75 6d 6e 4f 70 74 69 6f 6e 73 3a 22 63 20 6f 22 2c 75 6e 64 6f 52 65 6d 6f 76 65 43 6f 6c 75 6d 6e 3a 22 63 20 75 22 7d 2c 64 65 63 6b 73 3a 7b 63 72 65 61 74 65 4e 65 77 44 65 63 6b 3a 22 64 20 6e 22 2c 65 64 69 74 41 63 74 69 76 65 44 65 63 6b 3a 22 64 20 65 22 2c 6c 61 73 74 50 69 6e 6e 65 64 44 65 63 6b 3a 22 64 20 30 22 2c 6d 61 6e 61 67 65 41 6c 6c 44 65 63 6b 73 3a 22 64 20 6d 22 2c Data Ascii: OnReorderButton:"c r",lastColumn:"c 0",nextColumn:"]",nthColumn:"c 1..9",prevColumn:"[",removeColumn:"c backspace",toggleColumnOptions:"c o",undoRemoveColumn:"c u"},decks:{createNewDeck:"d n",editActiveDeck:"d e",lastPinnedDeck:"d 0",manageAllDecks:"d m",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49957	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	653	OUT	GET /responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker.96394e7a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:37 UTC	776	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009474 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "BiN2e5Jauyjf6HqgLXpGzA==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55CF) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 52cb2e3737bf29b54ce4289ac3d452618f017db609734b02f6df6ab1521bcabc x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 19 x-ton-expected-size: 209232 x-transaction-id: 7186f5eb52273682 Content-Length: 209232 Connection: close
2024-04-24 05:32:37 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 45 6d 6f 6a 69 50 69 63 6b 65 72 44 61 74 61 7e 6f 6e 64 65 6d 61 6e 64 2e 50 61 72 74 69 63 69 70 61 6e 74 52 65 61 63 74 69 6f 6e 7e 6f 6e 64 65 6d 61 6e 64 2e 45 6d 6f 6a 69 50 69 63 6b 65 72 22 5d 2c 7b 37 31 39 36 39 3a 28 66 2c 6b 2c 65 29 3d 3e 7b 65 2e 72 28 6b 29 2c 65 2e 64 28 6b 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 61 3d 65 28 34 35 31 38 34 29 2c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker"],{71969:(f,k,e)=>{e.r(k),e.d(k,{default:()=>c});var a=e(45184),
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 33 38 2c 33 38 5d 7d 2c 22 f0 9f a4 a8 22 3a 7b 61 3a 64 28 29 2e 6a 65 62 64 64 63 38 36 2c 6a 3a 64 28 29 2e 63 33 39 63 39 35 36 63 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 33 2c 34 37 5d 7d 2c 22 f0 9f a4 94 22 3a 7b 61 3a 64 28 29 2e 64 30 65 31 63 34 39 30 2c 6a 3a 64 28 29 2e 63 61 33 37 32 30 34 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 32 36 2c 34 35 5d 7d 2c 22 f0 9f a4 ab 22 3a 7b 61 3a 64 28 29 2e 68 39 34 30 66 61 32 61 2c 6a 3a 64 28 29 2e 63 64 63 33 32 34 65 38 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 36 2c 34 37 5d 7d 2c 22 f0 9f a4 ad 22 3a 7b 61 3a 64 28 29 2e 68 34 61 39 63 38 38 38 2c 6a 3a 64 28 29 2e 62 39 61 33 31 34 30 32 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 38 2c Data Ascii: .split(","),k:[38,38]},"":{a:d().jebddc86,j:d().c39c956c.split(","),k:[3,47]},"":{a:d().d0e1c490,j:d().ca37204e.split(","),k:[26,45]},"":{a:d().h940fa2a,j:d().cdc324e8.split(","),k:[6,47]},"":{a:d().h4a9c888,j:d().b9a31402.split(","),k:[8,
2024-04-24 05:32:38 UTC	2	IN	Data Raw: 33 30 Data Ascii: 30
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 2c 33 36 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 96 95 f0 9f 8f bd 22 2c 64 3a 5b 22 31 66 33 66 64 22 5d 2c 6b 3a 5b 33 31 2c 33 36 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 96 95 f0 9f 8f be 22 2c 64 3a 5b 22 31 66 33 66 65 22 5d 2c 6b 3a 5b 33 32 2c 33 36 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 96 95 f0 9f 8f bf 22 2c 64 3a 5b 22 31 66 33 66 66 22 5d 2c 6b 3a 5b 33 33 2c 33 36 5d 7d 5d 7d 2c 22 f0 9f ab b5 22 3a 7b 61 3a 64 28 29 2e 66 61 33 36 31 37 32 61 2c 6a 3a 64 28 29 2e 64 62 36 35 66 33 38 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 33 33 2c 36 36 5d 2c 6c 3a 5b 7b 6b 65 79 3a 22 f0 9f ab b5 f0 9f 8f bb 22 2c 64 3a 5b 22 31 66 33 66 62 22 5d 2c 6b 3a 5b 32 38 2c 36 36 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f ab b5 f0 9f 8f bc 22 2c 64 3a 5b 22 31 66 33 66 63 22 5d 2c 6b Data Ascii: ,36]},{key:"",d:["1f3fd"],k:[31,36]},{key:"",d:["1f3fe"],k:[32,36]},{key:"",d:["1f3ff"],k:[33,36]}]},"":{a:d().fa36172a,j:d().db65f38e.split(","),k:[33,66],l:[{key:"",d:["1f3fb"],k:[28,66]},{key:"",d:["1f3fc"],k
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: a9 f0 9f 8f bc e2 80 8d f0 9f 94 a7 22 2c 64 3a 5b 22 31 66 33 66 63 22 5d 2c 6b 3a 5b 32 37 2c 32 31 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 91 a9 f0 9f 8f bd e2 80 8d f0 9f 94 a7 22 2c 64 3a 5b 22 31 66 33 66 64 22 5d 2c 6b 3a 5b 32 32 2c 32 32 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 91 a9 f0 9f 8f be e2 80 8d f0 9f 94 a7 22 2c 64 3a 5b 22 31 66 33 66 65 22 5d 2c 6b 3a 5b 32 30 2c 32 33 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d f0 9f 94 a7 22 2c 64 3a 5b 22 31 66 33 66 66 22 5d 2c 6b 3a 5b 32 31 2c 32 34 5d 7d 5d 7d 2c 22 f0 9f a7 91 e2 80 8d f0 9f 94 a7 22 3a 7b 61 3a 64 28 29 2e 62 64 37 31 34 39 34 36 2c 6a 3a 64 28 29 2e 65 63 33 31 65 30 31 30 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 33 31 2c 35 38 5d 2c 6c 3a 5b 7b 6b 65 79 3a 22 f0 9f a7 Data Ascii: ",d:["1f3fc"],k:[27,21]},{key:"",d:["1f3fd"],k:[22,22]},{key:"",d:["1f3fe"],k:[20,23]},{key:"",d:["1f3ff"],k:[21,24]}]},"":{a:d().bd714946,j:d().ec31e010.split(","),k:[31,58],l:[{key:"
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 33 37 2c 34 37 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a4 b4 f0 9f 8f be 22 2c 64 3a 5b 22 31 66 33 66 65 22 5d 2c 6b 3a 5b 33 38 2c 34 37 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a4 b4 f0 9f 8f bf 22 2c 64 3a 5b 22 31 66 33 66 66 22 5d 2c 6b 3a 5b 33 39 2c 34 37 5d 7d 5d 7d 2c 22 f0 9f 91 b0 22 3a 7b 61 3a 64 28 29 2e 69 66 64 32 32 32 66 61 2c 6a 3a 64 28 29 2e 67 61 34 32 38 61 39 30 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 31 30 2c 32 37 5d 2c 6c 3a 5b 7b 6b 65 79 3a 22 f0 9f 91 b0 f0 9f 8f bb 22 2c 64 3a 5b 22 31 66 33 66 62 22 5d 2c 6b 3a 5b 34 35 2c 32 36 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 91 b0 f0 9f 8f bc 22 2c 64 3a 5b 22 31 66 33 66 63 22 5d 2c 6b 3a 5b 34 38 2c 32 36 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f 91 b0 f0 9f 8f bd 22 2c 64 3a 5b 22 31 66 33 66 64 22 5d Data Ascii: 37,47]},{key:"",d:["1f3fe"],k:[38,47]},{key:"",d:["1f3ff"],k:[39,47]}]},"":{a:d().ifd222fa,j:d().ga428a90.split(","),k:[10,27],l:[{key:"",d:["1f3fb"],k:[45,26]},{key:"",d:["1f3fc"],k:[48,26]},{key:"",d:["1f3fd"]
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 2c 64 3a 5b 22 31 66 33 66 62 22 5d 2c 6b 3a 5b 33 37 2c 35 34 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 8f f0 9f 8f bc e2 80 8d e2 99 82 ef b8 8f 22 2c 64 3a 5b 22 31 66 33 66 63 22 5d 2c 6b 3a 5b 34 30 2c 35 34 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 8f f0 9f 8f bd e2 80 8d e2 99 82 ef b8 8f 22 2c 64 3a 5b 22 31 66 33 66 64 22 5d 2c 6b 3a 5b 34 33 2c 35 34 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 8f f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 64 3a 5b 22 31 66 33 66 65 22 5d 2c 6b 3a 5b 34 36 2c 35 34 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 8f f0 9f 8f bf e2 80 8d e2 99 82 ef b8 8f 22 2c 64 3a 5b 22 31 66 33 66 66 22 5d 2c 6b 3a 5b 34 39 2c 35 34 5d 7d 5d 7d 2c 22 f0 9f 99 8e e2 80 8d e2 99 80 ef b8 8f 22 3a 7b 61 3a 64 28 29 2e 62 61 33 66 63 35 66 38 2c 6a 3a 64 28 29 Data Ascii: ,d:["1f3fb"],k:[37,54]},{key:"",d:["1f3fc"],k:[40,54]},{key:"",d:["1f3fd"],k:[43,54]},{key:"",d:["1f3fe"],k:[46,54]},{key:"",d:["1f3ff"],k:[49,54]}]},"":{a:d().ba3fc5f8,j:d()
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f be 22 2c 64 3a 5b 22 31 66 33 66 65 22 2c 22 31 66 33 66 65 22 5d 2c 6b 3a 5b 31 33 2c 35 37 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f bd 22 2c 64 3a 5b 22 31 66 33 66 65 22 2c 22 31 66 33 66 64 22 5d 2c 6b 3a 5b 31 32 2c 35 37 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f bc 22 2c 64 3a 5b 22 31 66 33 66 65 22 2c 22 31 66 33 66 63 22 5d 2c 6b 3a 5b 31 31 2c 35 37 5d 7d 2c 7b 6b 65 79 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f bb 22 2c 64 3a 5b 22 31 66 33 66 65 22 2c 22 31 66 33 66 62 22 5d 2c 6b 3a 5b 31 Data Ascii: },{key:"",d:["1f3fe","1f3fe"],k:[13,57]},{key:"",d:["1f3fe","1f3fd"],k:[12,57]},{key:"",d:["1f3fe","1f3fc"],k:[11,57]},{key:"",d:["1f3fe","1f3fb"],k:[1
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 29 2e 65 32 62 35 62 64 66 32 2c 6a 3a 64 28 29 2e 61 33 66 35 66 37 63 63 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 33 38 2c 31 33 5d 7d 2c 22 f0 9f 90 b5 22 3a 7b 61 3a 64 28 29 2e 66 66 62 33 39 34 37 38 2c 6a 3a 64 28 29 2e 6a 39 39 62 37 66 35 34 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 33 35 2c 31 33 5d 7d 2c 22 f0 9f 99 88 22 3a 7b 61 3a 64 28 29 2e 61 34 35 66 34 33 35 36 2c 6a 3a 64 28 29 2e 64 38 36 63 62 66 35 38 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 34 33 2c 33 39 5d 7d 2c 22 f0 9f 99 89 22 3a 7b 61 3a 64 28 29 2e 64 61 38 32 35 63 61 34 2c 6a 3a 64 28 29 2e 61 39 61 32 35 30 36 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 34 34 2c 33 39 5d 7d 2c 22 f0 9f 99 8a 22 3a 7b 61 3a 64 28 29 2e 66 33 38 62 65 37 61 32 2c 6a 3a 64 28 Data Ascii: ).e2b5bdf2,j:d().a3f5f7cc.split(","),k:[38,13]},"":{a:d().ffb39478,j:d().j99b7f54.split(","),k:[35,13]},"":{a:d().a45f4356,j:d().d86cbf58.split(","),k:[43,39]},"":{a:d().da825ca4,j:d().a9a2506e.split(","),k:[44,39]},"":{a:d().f38be7a2,j:d(
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 38 39 38 31 66 36 2c 6a 3a 64 28 29 2e 69 61 62 32 34 38 34 34 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 32 30 2c 37 5d 7d 2c 22 f0 9f 8d 98 22 3a 7b 61 3a 64 28 29 2e 64 39 35 66 32 63 61 61 2c 6a 3a 64 28 29 2e 66 65 39 34 37 61 33 36 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 31 38 2c 37 5d 7d 2c 22 f0 9f a5 9f 22 3a 7b 61 3a 64 28 29 2e 67 66 33 38 31 34 39 38 2c 6a 3a 64 28 29 2e 6a 30 31 39 37 65 34 61 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 34 30 2c 35 30 5d 7d 2c 22 f0 9f 8d a2 22 3a 7b 61 3a 64 28 29 2e 61 65 33 33 32 36 34 30 2c 6a 3a 64 28 29 2e 62 64 65 61 36 37 61 36 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6b 3a 5b 32 38 2c 37 5d 7d 2c 22 f0 9f 8d a1 22 3a 7b 61 3a 64 28 29 2e 62 31 35 34 39 63 33 65 2c 6a 3a 64 28 29 2e 66 61 65 39 32 Data Ascii: 8981f6,j:d().iab24844.split(","),k:[20,7]},"":{a:d().d95f2caa,j:d().fe947a36.split(","),k:[18,7]},"":{a:d().gf381498,j:d().j0197e4a.split(","),k:[40,50]},"":{a:d().ae332640,j:d().bdea67a6.split(","),k:[28,7]},"":{a:d().b1549c3e,j:d().fae92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49962	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	1172	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 741 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: fn0Fcjp8HnxYrrS06pZ1tqmptKJmpOB6HfocnDnJMmu02sRm1MZXooLVjQlO/vobEHpIp38/8kJ8DXnfJxx4f5z2ZlmmfQ x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:37 UTC	741	OUT	Data Raw: 63 61 74 65 67 6f 72 79 3d 70 65 72 66 74 6f 77 6e 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 74 74 66 6d 63 25 33 41 70 72 6f 66 69 6c 65 25 33 41 72 65 6e 64 65 72 25 32 32 25 32 43 25 32 32 70 72 6f 64 75 63 74 25 32 32 25 33 41 25 32 32 72 77 65 62 25 32 32 25 32 43 25 32 32 64 75 72 61 74 69 6f 6e 5f 6d 73 25 32 32 25 33 41 31 36 32 39 38 25 32 43 25 32 32 6d 65 74 61 64 61 74 61 25 32 32 25 33 41 25 37 42 25 32 32 73 6f 75 72 63 65 25 32 32 25 33 41 25 32 32 67 72 61 70 68 71 6c 25 32 32 25 37 44 25 37 44 25 32 43 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 74 74 66 6d 63 25 33 41 70 72 6f 66 69 6c 65 25 33 41 72 65 Data Ascii: category=perftown&log=%5B%7B%22description%22%3A%22rweb%3Attfmc%3Aprofile%3Arender%22%2C%22product%22%3A%22rweb%22%2C%22duration_ms%22%3A16298%2C%22metadata%22%3A%7B%22source%22%3A%22graphql%22%7D%7D%2C%7B%22description%22%3A%22rweb%3Attfmc%3Aprofile%3Are
2024-04-24 05:32:38 UTC	1072	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:37 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:37 GMT x-transaction: 0a1743475e8a85e0 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: 0a1743475e8a85e0 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 12 x-connection-hash: 529e86a343a725aeb30201eba4f10e4ed76868c47141039f4fd57e2e3519f479 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49963	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	2400	OUT	OPTIONS /graphql/9zyyd1hebl7oNWIPdA8HRw/UserTweets?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: ce7bde97ab3ae4f6b404f1343bd283e3536c265dc456c465d093ea63075e5e06 date: Wed, 24 Apr 2024 05:32:37 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49959	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.9b2e53aa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009479 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "CWqK9L/jk8FNDbjfMPum4A==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55B5) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 2b8120cc395d03d502d145e6450ac3a3170ded3333ddac1f4232af4f06f44afb x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1535 x-transaction-id: ed503770086d3d88 Content-Length: 1535 Connection: close
2024-04-24 05:32:38 UTC	1535	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 42 6f 6f 6b 6d 61 72 6b 46 6f 6c 64 65 72 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 22 5d 2c 7b 38 37 33 39 38 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 75 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund"],{87398:(e,t,s)=>{s.d(t,{Z:()=>u});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49960	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	654	OUT	GET /responsive-web/client-web/shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule.c86f284a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1330555 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "TrNjuoR4d2uCy+2e5d1EtQ==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Mon, 08 Apr 2024 19:27:04 GMT perf: 7469935968 Server: ECAcc (lac/55CA) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 62e093c290d9739d0716fdae3e11a9641e23df3e92d75036923ec4fa4eb4a2bd x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 3514 x-transaction-id: 97fda67c8cf715b1 Content-Length: 3514 Connection: close
2024-04-24 05:32:38 UTC	3514	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 4c 6f 67 67 65 64 4f 75 74 48 6f 6d 65 7e 6c 6f 61 64 65 72 2e 54 69 6d 65 6c 69 6e 65 52 65 6e 64 65 72 65 72 7e 6c 6f 61 64 65 72 2e 53 69 67 6e 75 70 4d 6f 64 75 6c 65 22 5d 2c 7b 38 34 33 36 31 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 50 7d 29 3b 73 28 36 38 38 36 29 2c 73 28 33 36 37 32 38 29 3b 76 61 72 20 69 3d 73 28 32 37 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.LoggedOutHome~loader.TimelineRenderer~loader.SignupModule"],{84361:(e,t,s)=>{s.d(t,{Z:()=>P});s(6886),s(36728);var i=s(27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49961	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	595	OUT	GET /responsive-web/client-web/loader.TimelineRenderer.71fd2d4a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009460 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:37 GMT Etag: "ZzyO59EnmUlaf+XCwbDCmg==+ident" expires: Thu, 24 Apr 2025 05:32:37 GMT Last-Modified: Fri, 12 Apr 2024 12:58:29 GMT perf: 7402827104 Server: ECAcc (lac/5588) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 78009e946ac2da9ec7869faa6b325b9b46c3fc5aa62d8edd1b763ba36fecd06a x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 30492 x-transaction-id: e0e9b0b49461d227 Content-Length: 30492 Connection: close
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 54 69 6d 65 6c 69 6e 65 52 65 6e 64 65 72 65 72 22 5d 2c 7b 32 34 31 34 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 58 3a 28 29 3d 3e 72 2c 67 3a 28 29 3d 3e 69 7d 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 28 7b 69 64 3a 65 2c 64 69 73 74 61 6e 63 65 54 6f 56 69 65 77 70 6f 72 74 54 6f 70 3a 30 7d 29 2c 69 3d 65 3d 3e 28 7b 69 64 3a 65 2c 64 69 73 74 61 6e 63 65 54 6f 56 69 65 77 70 6f 72 74 42 6f 74 74 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.TimelineRenderer"],{24147:(e,t,n)=>{n.d(t,{X:()=>r,g:()=>i});const r=e=>({id:e,distanceToViewportTop:0}),i=e=>({id:e,distanceToViewportBott
2024-04-24 05:32:38 UTC	14109	IN	Data Raw: 2e 63 6f 76 65 72 49 6d 61 67 65 2e 69 6d 61 67 65 44 69 73 70 6c 61 79 54 79 70 65 3a 76 6f 69 64 20 30 2c 6f 6e 43 6c 6f 73 65 3a 74 2c 6f 6e 49 6d 70 72 65 73 73 69 6f 6e 3a 6f 2c 70 72 69 6d 61 72 79 43 74 61 3a 65 2e 70 72 69 6d 61 72 79 43 6f 76 65 72 43 74 61 2c 70 72 69 6d 61 72 79 54 65 78 74 3a 65 2e 70 72 69 6d 61 72 79 54 65 78 74 2c 70 72 6f 63 65 73 73 43 61 6c 6c 62 61 63 6b 3a 6e 2c 73 65 63 6f 6e 64 61 72 79 43 74 61 3a 65 2e 73 65 63 6f 6e 64 61 72 79 43 6f 76 65 72 43 74 61 2c 73 65 63 6f 6e 64 61 72 79 54 65 78 74 3a 65 2e 73 65 63 6f 6e 64 61 72 79 54 65 78 74 2c 74 79 70 65 3a 72 7d 29 7d 28 65 2e 63 6f 76 65 72 29 3b 63 61 73 65 22 73 65 74 74 69 6e 67 73 5f 6c 69 73 74 22 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: .coverImage.imageDisplayType:void 0,onClose:t,onImpression:o,primaryCta:e.primaryCoverCta,primaryText:e.primaryText,processCallback:n,secondaryCta:e.secondaryCoverCta,secondaryText:e.secondaryText,type:r})}(e.cover);case"settings_list":return function(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49964	72.21.91.70	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:37 UTC	623	OUT	GET /profile_images/1675951565944033280/E9478ktH_200x200.jpg HTTP/1.1 Host: pbs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	858	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * access-control-expose-headers: Content-Length Age: 0 cache-control: max-age=604800, must-revalidate Content-Type: image/jpeg Date: Wed, 24 Apr 2024 05:32:38 GMT Last-Modified: Mon, 03 Jul 2023 19:34:05 GMT perf: 7402827104 Server: ECS (laa/7B8D) Server-Timing: x-cache;desc= MISS,x-tw-cdn;desc=VZ strict-transport-security: max-age=631138519 surrogate-key: profile_images profile_images/bucket/5 profile_images/1675951565944033280 timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: MISS x-connection-hash: 361d12022c9ebbd815152a65b53e2f1d9cad85e29a480da41f8baf262a7fd85f x-content-type-options: nosniff x-response-time: 18 x-transaction-id: e621b7cd1d308f56 x-tw-cdn: VZ x-tw-cdn: VZ x-tw-cdn: VZ Content-Length: 8473 Connection: close
2024-04-24 05:32:38 UTC	8473	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 a0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 90 6c 63 6d 73 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 64 65 73 63 00 00 01 08 00 00 00 38 63 70 72 74 00 00 01 40 00 00 00 4e 77 74 70 74 00 00 01 90 00 00 00 14 63 68 61 64 00 00 01 a4 00 00 00 2c 72 58 59 5a 00 00 01 d0 00 00 00 14 62 58 59 5a 00 00 01 e4 00 00 00 14 67 58 59 5a 00 00 01 f8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcms0mntrRGB XYZ acspAPPL-lcmsdesc8cprt@Nwtptchad,rXYZbXYZgXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49966	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	605	OUT	OPTIONS /1.1/jot/ces/p2 HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: e3ebd8ba6fc7c1aea3585edf673f5485edb0d52590ee0e1b25e2648a2f20615d date: Wed, 24 Apr 2024 05:32:38 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49967	72.21.91.70	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	380	OUT	GET /profile_banners/34733701/1688412966/600x200 HTTP/1.1 Host: pbs.twimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	851	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * access-control-expose-headers: Content-Length Age: 1 cache-control: max-age=604800, must-revalidate Content-Type: image/jpeg Date: Wed, 24 Apr 2024 05:32:38 GMT Last-Modified: Mon, 03 Jul 2023 19:34:06 GMT perf: 7402827104 Server: ECS (laa/7B8F) Server-Timing: x-cache;desc= MISS,x-tw-cdn;desc=VZ strict-transport-security: max-age=631138519 surrogate-key: profile_banners profile_banners/bucket/6 profile_banners/34733701 timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: MISS x-connection-hash: d3fa00f4e8bafcfacd06d2e027ad2d1eb20bcf97fff0c1183fa5cc4ced125a4d x-content-type-options: nosniff x-response-time: 14 x-transaction-id: f4845e4e40867474 x-tw-cdn: VZ x-tw-cdn: VZ x-tw-cdn: VZ Content-Length: 38823 Connection: close
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f4 a7 75 db cc 9d 21 Data Ascii: JFIFC!"$"$CX"u!
2024-04-24 05:32:38 UTC	16383	IN	Data Raw: 58 7a 46 40 34 7c e3 a1 93 26 b6 91 52 43 ef 49 85 a7 48 15 ea cb af ea 10 e6 1f c6 a0 c8 7b 3b bd 3c 43 45 2d 71 7c cd 58 78 75 9d 58 58 4c b5 fe a7 9c 3c 46 0d 51 75 51 8f c7 cc a4 15 01 57 fe e6 2b 9c f8 3f ec 16 ac b8 96 87 03 f2 96 ea f0 1d 63 c9 b9 a3 ac 6c 2b 51 e7 c2 2c 52 81 d0 d4 c6 3c 2a 33 32 80 20 ec 60 87 12 ff 00 16 59 a3 77 bb 52 2b c8 5b 15 db fd c3 42 3b 3e 10 c8 e4 20 f8 a8 1a 8c bf 4e df 89 52 d7 a0 5b 0b 10 cf a4 43 5b 89 29 7d e6 ef eb 3f 41 a6 39 73 f2 83 da 86 73 05 88 5d 93 e5 9d 12 fa c7 2d 07 b3 0d bf 6f da 54 48 92 a5 4a 95 12 18 81 6a 1c 91 ff 00 c5 b6 27 75 bb 1e d0 da 2c ec 86 a7 82 fd 99 9d eb 10 04 21 e1 bc 42 d1 ec 20 2c d0 af c4 1d 4c 83 da 51 cb 6b ac b1 6c 88 e6 67 50 c3 08 9b ea bf 44 49 51 69 8c f6 83 3c dd 1e d1 83 Data Ascii: XzF@4\|&RCIH{;<CE-q\|XxuXXL<FQuQW+?cl+Q,R<*32 `YwR+[B;> NR[C[)}?A9ss]-oTHJj'u,!B ,LQklgPDIQi<
2024-04-24 05:32:38 UTC	6057	IN	Data Raw: 09 29 c1 a4 e5 3a 86 b5 51 52 fe 3e b1 cc 89 d7 1d 71 fb c4 20 ff 00 af 08 94 26 4a 3d bc 60 29 88 b0 41 12 d6 93 be 94 98 a3 f6 82 03 82 3f f1 31 83 81 27 21 93 db e1 c3 70 ad 2e c1 5e 4e e1 2d 9a b0 cd bc 22 8c 30 20 1d c9 bf 8c 29 35 0c 0a 70 79 24 c6 d8 98 08 59 0a db cd c8 28 94 c0 19 c8 de ba d6 6f 48 75 03 93 99 ac 80 3d 9f e7 13 ea e3 6e 88 33 66 9d e3 73 eb 8b 91 a1 4c 51 ae 9c e1 88 00 2f 5a 5e 43 f2 eb 0a 0b 35 dd 53 68 56 bf 2e 8c 31 20 a8 a2 da ed 8f b7 ac ae b8 74 1a f4 1c 9e 6b b5 c7 ee eb a0 cf f0 64 6b 40 6e 70 20 26 8a 0f 1a 3e 70 72 c1 a5 64 3b ef 2f d0 6b b8 4b eb 9d ff 00 bc b8 39 da 15 87 9c 3f 02 b6 cb be b6 cd 5c b1 70 d1 6a 9b 09 04 8e 9d e3 41 d0 05 9b db ac 84 88 82 14 2e ea ec bb 77 86 a0 2b 0c 2b c1 53 a3 4f 26 24 ad 2c 08 45 Data Ascii: ):QR>q &J=`)A?1'!p.^N-"0 )5py$Y(oHu=n3fsLQ/Z^C5ShV.1 tkdk@np &>prd;/kK9?\pjA.w++SO&$,E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49968	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	2918	OUT	GET /graphql/9zyyd1hebl7oNWIPdA8HRw/UserTweets?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-client-transaction-id: bW4WYSlvDW9Lvaen+YVmpbq6p7F1t/NpDukPjyraIXinydd1x9VEsZHGnhpd7ekIA2lbtGx3jluKSBwrjnBLdUBNY/gPbg x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:38 UTC	1266	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:38 GMT perf: 7402827104 vary: Origin pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:38 GMT content-length: 251 x-frame-options: SAMEORIGIN x-transaction-id: e0f4c964ffec2885 x-xss-protection: 0 x-rate-limit-limit: 50 x-rate-limit-reset: 1713937658 content-disposition: attachment; filename=json.json x-tfe-preserve-body: true x-content-type-options: nosniff x-rate-limit-remaining: 49 x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 33 x-connection-hash: 09f0476730df65ff4b13c3675b188bdba2011c34d9c606dfcdaa2a248ae8d7c5 connection: close
2024-04-24 05:32:38 UTC	251	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 72 65 73 75 6c 74 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 74 69 6d 65 6c 69 6e 65 5f 76 32 22 3a 7b 22 74 69 6d 65 6c 69 6e 65 22 3a 7b 22 69 6e 73 74 72 75 63 74 69 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 54 69 6d 65 6c 69 6e 65 43 6c 65 61 72 43 61 63 68 65 22 7d 2c 7b 22 74 79 70 65 22 3a 22 54 69 6d 65 6c 69 6e 65 54 65 72 6d 69 6e 61 74 65 54 69 6d 65 6c 69 6e 65 22 2c 22 64 69 72 65 63 74 69 6f 6e 22 3a 22 54 6f 70 41 6e 64 42 6f 74 74 6f 6d 22 7d 5d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 63 72 69 62 65 43 6f 6e 66 69 67 22 3a 7b 22 70 61 67 65 22 3a 22 70 72 6f 66 69 6c 65 42 65 73 74 48 69 67 68 6c 69 67 68 74 73 22 7d 7d 7d 7d 7d 7d 7d 7d Data Ascii: {"data":{"user":{"result":{"__typename":"User","timeline_v2":{"timeline":{"instructions":[{"type":"TimelineClearCache"},{"type":"TimelineTerminateTimeline","direction":"TopAndBottom"}],"metadata":{"scribeConfig":{"page":"profileBestHighlights"}}}}}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49969	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	562	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702
2024-04-24 05:32:38 UTC	517	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:38 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 0b23e3bb67082769 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 10 x-connection-hash: d0781137f73ad8c0552b0f3d443602cd44738ac62037647fe7bd67e01d86de8a connection: close
2024-04-24 05:32:38 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49970	72.21.91.70	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	392	OUT	GET /profile_images/1675951565944033280/E9478ktH_200x200.jpg HTTP/1.1 Host: pbs.twimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:38 UTC	858	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * access-control-expose-headers: Content-Length Age: 0 cache-control: max-age=604800, must-revalidate Content-Type: image/jpeg Date: Wed, 24 Apr 2024 05:32:38 GMT Last-Modified: Mon, 03 Jul 2023 19:34:05 GMT perf: 7402827104 Server: ECS (laa/7B8D) Server-Timing: x-cache;desc= MISS,x-tw-cdn;desc=VZ strict-transport-security: max-age=631138519 surrogate-key: profile_images profile_images/bucket/5 profile_images/1675951565944033280 timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: MISS x-connection-hash: 361d12022c9ebbd815152a65b53e2f1d9cad85e29a480da41f8baf262a7fd85f x-content-type-options: nosniff x-response-time: 18 x-transaction-id: e621b7cd1d308f56 x-tw-cdn: VZ x-tw-cdn: VZ x-tw-cdn: VZ Content-Length: 8473 Connection: close
2024-04-24 05:32:38 UTC	8473	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 a0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 90 6c 63 6d 73 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 64 65 73 63 00 00 01 08 00 00 00 38 63 70 72 74 00 00 01 40 00 00 00 4e 77 74 70 74 00 00 01 90 00 00 00 14 63 68 61 64 00 00 01 a4 00 00 00 2c 72 58 59 5a 00 00 01 d0 00 00 00 14 62 58 59 5a 00 00 01 e4 00 00 00 14 67 58 59 5a 00 00 01 f8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcms0mntrRGB XYZ acspAPPL-lcmsdesc8cprt@Nwtptchad,rXYZbXYZgXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49973	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	1228	OUT	POST /1.1/jot/ces/p2 HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 503 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/twitter.web.thrift.json x-client-transaction-id: AQJ6DUUDYQMn0cvLlekKydbWy90Z258FYoVj40a2TRTLpbsZq7ko3f2q8nYxgYVkbwU32AC2ulv75joy2kaZ5MGGbsT9Ag x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:38 UTC	503	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 73 65 71 75 65 6e 63 65 53 74 61 72 74 54 69 6d 65 73 74 61 6d 70 4d 73 22 3a 31 37 31 33 39 33 36 37 34 31 37 34 35 2e 35 2c 22 73 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 30 2c 22 63 72 65 61 74 65 64 41 74 4d 73 22 3a 31 37 31 33 39 33 36 37 35 36 37 35 34 2e 38 2c 22 65 76 65 6e 74 22 3a 7b 22 63 6c 69 65 6e 74 53 70 61 6e 4d 65 73 73 61 67 65 22 3a 7b 22 76 31 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 63 72 69 70 74 73 2d 62 6c 6f 63 6b 69 6e 67 22 2c 22 63 65 73 4d 65 74 61 64 61 74 61 22 3a 7b 7d 2c 22 74 72 61 63 65 49 64 22 3a 7b 22 6d 6f 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 73 22 3a 22 32 36 32 34 37 32 37 31 31 35 36 38 38 39 39 39 22 2c 22 6c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 Data Ascii: {"events":[{"sequenceStartTimestampMs":1713936741745.5,"sequenceNumber":0,"createdAtMs":1713936756754.8,"event":{"clientSpanMessage":{"v1":{"name":"scripts-blocking","cesMetadata":{},"traceId":{"mostSignificantBits":"2624727115688999","leastSignificantBit
2024-04-24 05:32:39 UTC	1080	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:38 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/octet-stream cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:39 GMT content-length: 124 x-frame-options: SAMEORIGIN x-transaction-id: c25685a39ca35d38 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 9 x-connection-hash: 2018f6b76ac78de03bee2aef32d5d47a86af2cc73f26e7392107c4030865cccb connection: close
2024-04-24 05:32:39 UTC	124	IN	Data Raw: 7b 22 74 6f 74 61 6c 45 76 65 6e 74 73 22 3a 31 2c 22 65 76 65 6e 74 73 46 61 69 6c 65 64 22 3a 30 2c 22 73 68 6f 75 6c 64 52 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 72 65 74 72 79 41 66 74 65 72 4d 73 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 73 46 61 69 6c 65 64 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 73 22 3a 6e 75 6c 6c 2c 22 6d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"totalEvents":1,"eventsFailed":0,"shouldRetry":false,"retryAfterMs":null,"eventsFailedSequenceNumbers":null,"message":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49971	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	629	OUT	GET /responsive-web/client-web/shared~ondemand.ComposeScheduling~ondemand.ProfileSidebar.aba1409a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1330494 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "WZwGGikZ/P370Wg7L5GNxw==+ident" expires: Thu, 24 Apr 2025 05:32:39 GMT Last-Modified: Mon, 08 Apr 2024 19:27:05 GMT perf: 7469935968 Server: ECAcc (lac/558B) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: eacb3937a5ab0bc75ca89a0c83f13dfd4f46b1fa3006a14125bfc01e5aec2979 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1949 x-transaction-id: 373a8827763b07fb Content-Length: 1949 Connection: close
2024-04-24 05:32:39 UTC	1949	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 43 6f 6d 70 6f 73 65 53 63 68 65 64 75 6c 69 6e 67 7e 6f 6e 64 65 6d 61 6e 64 2e 50 72 6f 66 69 6c 65 53 69 64 65 62 61 72 22 5d 2c 7b 31 37 36 35 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 76 7d 29 3b 76 61 72 20 69 3d 6e 28 37 38 39 36 29 2c 6f 3d 28 6e 28 36 38 38 36 29 2c 6e 28 32 37 38 34 29 29 2c 72 3d 6e 28 34 34 33 32 39 29 2c 61 3d 6e 28 32 31 34 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.ComposeScheduling~ondemand.ProfileSidebar"],{17651:(e,t,n)=>{n.d(t,{Z:()=>v});var i=n(7896),o=(n(6886),n(2784)),r=n(44329),a=n(214

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49972	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	595	OUT	GET /responsive-web/client-web/ondemand.ProfileSidebar.359a202a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009406 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "xUgVpupkS464TDv0zZ80eg==+ident" expires: Thu, 24 Apr 2025 05:32:39 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: b4e450c8a54ecabd7344c3db49549a33d0e5ede2ce46e06b6125dee509c8b1e7 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 3830 x-transaction-id: 359cf706ce31935b Content-Length: 3830 Connection: close
2024-04-24 05:32:39 UTC	3830	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6f 6e 64 65 6d 61 6e 64 2e 50 72 6f 66 69 6c 65 53 69 64 65 62 61 72 22 5d 2c 7b 31 34 37 37 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 61 3d 69 28 31 35 38 33 30 29 2c 72 3d 69 28 37 38 37 37 32 29 2c 73 3d 69 28 36 32 31 30 34 29 3b 63 6f 6e 73 74 20 6e 3d 65 3d 3e 28 30 2c 73 2e 5a 29 28 7b 74 69 6d 65 6c 69 6e 65 49 64 3a 60 75 73 65 72 4d 65 64 69 61 2d 24 7b 65 7d 60 2c 6e Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.ProfileSidebar"],{14770:(e,t,i)=>{i.d(t,{Z:()=>n});var a=i(15830),r=i(78772),s=i(62104);const n=e=>(0,s.Z)({timelineId:`userMedia-${e}`,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49974	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	584	OUT	GET /responsive-web/client-web/Chirp-Heavy.f44ae4ea.woff2 HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	730	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * Age: 2742668 Content-Type: application/font-woff Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "QJ/uVNoB7bZZf1XfhTsoIA==" expires: Thu, 24 Apr 2025 05:32:39 GMT last-modified: Sat, 23 Mar 2024 10:25:09 GMT perf: 7469935968 Server: ECAcc (lac/55E5) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: 098084215248626afb3080c19faaa6f02b0aaa756ac4662158e6821576bca9e6 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 43604 x-transaction-id: e8f1bbf46055e4cf Content-Length: 43604 Connection: close
2024-04-24 05:32:39 UTC	15672	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 54 00 11 00 00 00 01 94 6c 00 00 a9 ef 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 04 1b 81 db 76 1c a7 78 06 60 00 bf 76 08 44 09 85 2a 11 14 0a 83 a9 2c 82 ed 2e 01 36 02 24 03 98 74 0b 8c 3c 00 04 20 05 87 72 07 20 0c 83 12 5b 09 6f 71 84 bc f6 db 41 52 7a b3 ea af 63 b9 33 fa 1b ae 6e 83 a9 85 fa 43 db 25 bb 32 fe b1 32 ba 94 25 6c 5b 4a b7 db d9 30 ea bb b7 37 fb ff ff 7f 4f b2 88 b1 35 3b d8 ec de 1e 20 a8 08 20 a5 55 f5 f6 ff 10 13 04 47 78 a0 64 2d 6d 22 d1 45 11 c2 44 45 f4 a8 a8 26 bc 0a 15 3a 22 32 44 7c 10 c6 93 3b 06 36 42 4c c8 73 a5 72 2a 3f d4 a5 9f ae f3 92 dd 29 07 56 7c 3c 11 ef 63 c1 d5 14 04 2b 3a c0 b4 92 65 a2 1b 4d 35 17 55 83 85 09 a2 db 72 a3 72 26 b4 7b 5b 2a 5e Data Ascii: wOF2Tlvx`vD,.6$t< r [oqARzc3nC%22%l[J07O5; UGxd-m"EDE&:"2D\|;6BLsr?)V\|<c+:eM5Urr&{[*^
2024-04-24 05:32:39 UTC	16383	IN	Data Raw: 61 e0 dc 8d c0 51 a7 45 9e a3 37 a3 72 d4 19 df e7 df fa 6f a1 df f9 c2 db bd 0c 38 ea 49 bd 05 7d b4 9f fc ee 6b e0 a8 5f f8 e8 d9 9e eb 99 c0 51 b7 f5 6e c7 84 43 61 1f 70 d4 55 ac b1 b3 e5 e1 0a f0 ff 4f 8a f6 07 c2 c1 b0 35 cc 09 51 c0 7f ee f7 7e f7 fd 72 34 99 03 5e 83 ef 69 9f fe 45 44 14 9d f5 e9 e0 7d fa 3c e4 3b 80 3f fb 84 36 55 a8 63 b2 3e e1 89 4f 7a 8a 53 ad 3a d7 7a 07 3b f7 f3 05 f5 9c eb f0 a8 df e4 9e 8f 7e 60 ac 2f 30 f9 d7 b7 1a 8c 8b 7f 4c 78 68 8b 8d 8e d9 50 ce ae f7 73 f3 f1 8c d3 69 4f 68 24 5c da 90 db b0 73 73 cf 7c 13 08 65 4f 75 e3 e7 31 ab 29 6e 1a e2 ee c4 f6 ef c0 92 97 85 0c c0 50 e4 88 4b e8 85 83 9b a4 19 6f 62 98 85 9c a2 f0 0a 25 bb 1d 08 a7 f0 bd e5 6f bf 3c c1 1c 66 58 ed 18 c7 f6 44 dd 6c bc e5 8d bf b3 03 62 d1 d6 Data Ascii: aQE7ro8I}k_QnCapUO5Q~r4^iED}<;?6Uc>OzS:z;~`/0LxhPsiOh$\ss\|eOu1)nPKob%o<fXDlb
2024-04-24 05:32:39 UTC	11549	IN	Data Raw: e1 b0 d4 89 9f 8c a3 71 a2 00 c1 06 7c 5c db 24 3a b4 9c 16 7d 2f b4 09 00 73 44 58 d7 e3 ab c1 53 ea b1 5b 83 17 64 f3 de 6b e1 d7 6d b2 85 f3 b7 07 c7 d5 5b b9 5b 63 06 3a 0e 75 4c a9 e5 e2 0f 3d c5 1e a6 a7 c8 03 11 ef c8 82 29 e2 8d d5 45 d5 51 62 73 b4 b9 3f 33 ce 9c 0a 9c 3a d3 86 4f 90 f7 3e 0e 3c 8e 78 ac 3c 7e cc 6c 36 92 36 8b f9 b5 4e 47 cd 96 d7 8e 37 50 82 bc 1b a7 72 b8 a0 15 89 6c 45 21 87 11 c8 36 e4 a0 c8 26 a0 10 45 60 2b 12 a1 f8 fc 8b c5 5f 98 03 f3 e9 77 0c e4 c0 48 60 09 95 f7 5e e0 7f 6a a3 8d d2 b8 36 70 1a 99 f7 41 20 88 1c c8 50 2d 1b fa bd b4 e7 d1 72 81 90 8b 2a 2a 72 16 d6 d4 fb 88 98 a4 47 81 47 1f 1f 91 3a a4 f6 fa 47 e3 4d e6 43 60 57 d1 17 58 41 3e 52 bd d4 2e 75 b4 60 33 ff ca 3e 13 38 33 d9 36 79 3a 70 3a 13 39 8d f8 3a Data Ascii: q\|\$:}/sDXS[dkm[[c:uL=)EQbs?3:O><x<~l66NG7PrlE!6&E`+_wH`^j6pA P-r**rGG:GMC`WXA>R.u`3>836y:p:9:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49975	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	585	OUT	GET /responsive-web/client-web/Chirp-Medium.f8e2739a.woff2 HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	731	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * Age: 2742892 Content-Type: application/font-woff Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "IomMO4jvKdpqQcMCUQ8otA==" expires: Thu, 24 Apr 2025 05:32:39 GMT last-modified: Sat, 23 Mar 2024 10:25:09 GMT perf: 7469935968 Server: ECAcc (lac/558C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: 05b930bcef960537ae7b769fa5dbb4425b55a41c30ae625f62dc21cd45a0db87 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 44744 x-transaction-id: 3b97ca2d40ce46af Content-Length: 44744 Connection: close
2024-04-24 05:32:39 UTC	16383	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ae c8 00 13 00 00 00 01 a1 6c 00 00 ae 60 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 04 1b 81 dc 70 1c a7 78 06 60 00 bf 76 08 44 09 85 2a 11 14 0a 83 ab 10 82 ef 62 01 36 02 24 03 98 74 0b 8c 3c 00 04 20 05 87 72 07 20 0c 83 20 17 24 18 96 54 5b 3d 7c 71 86 66 63 0f 3a 87 a7 55 ba 0d 01 22 4c d7 e8 53 e5 e2 5f c1 b9 39 df 23 0b 9e 9e 5b f2 af a0 25 cb fa 00 73 53 d7 88 7e d0 6d 08 18 69 4d de cb 67 ff ff ff ff 9a 64 12 43 77 09 eb 5d 3e ff 0f 14 da b5 a5 88 d3 ce a9 0a ba a4 9c 88 92 05 b5 65 22 13 ad 66 22 d1 13 1a a1 86 a6 da 7b 24 73 ca 2c 33 d2 e8 dc 1b b1 98 31 b1 5e ba 29 26 a8 62 da d5 25 5d 8e 2e 87 67 25 ae c2 85 26 cc 3b e5 49 f2 6e 92 43 84 dc 16 02 41 93 34 f3 1d 8f 33 36 10 4f Data Ascii: wOF2l`px`vD*b6$t< r $T[=\|qfc:U"LS_9#[%sS~miMgdCw]>e"f"{$s,31^)&b%].g%&;InCA436O
2024-04-24 05:32:39 UTC	16383	IN	Data Raw: 84 61 a3 c6 ec 6a c8 e2 9f 5d 0e 3a a3 de 69 67 35 b8 aa 59 9b 68 13 f6 a1 ff ed fe 6b 70 ec 50 0f 95 91 c7 dc 33 49 f3 57 97 27 6f 9d 41 75 8b 71 92 18 bb 99 9d e2 72 d1 8c cf cb 7c fe e5 76 49 ac 26 41 ff 1b e0 ba 78 2d 32 f4 18 e8 86 04 ad f2 f5 79 70 57 41 73 0d 6e 0e ea b7 c0 90 e6 1b 53 ae d2 b2 8d 0c 50 56 8e d1 c1 0c 2f 0b 6f ed f2 8d af b0 22 13 43 9b 1c c6 a4 4a 4c a9 d4 d4 b0 a6 85 77 7f e5 ee 8b 18 c1 43 55 59 99 d8 8c 48 56 24 b2 36 50 12 80 1f aa ad 69 b5 a4 d1 9e 5e 57 26 9d 19 75 64 30 90 43 7f 76 7d d9 ac d4 68 b1 84 91 dc 96 6b b0 50 dc 52 f5 36 6a b5 57 97 7d 67 2d 74 d1 b0 f3 86 3c 8c eb 8d 82 e2 f5 5a 95 84 dd 39 0f 27 d3 9d d9 60 4e c7 f5 b3 b1 7a 47 0b c1 9e 51 99 7e 75 8f 9d b1 34 59 eb 7e ee f7 26 32 99 bf f9 6e 3b fe 43 93 7f f9 Data Ascii: aj]:ig5YhkpP3IW'oAuqr\|vI&Ax-2ypWAsnSPV/o"CJLwCUYHV$6Pi^W&ud0Cv}hkPR6jW}g-t<Z9'`NzGQ~u4Y~&2n;C
2024-04-24 05:32:39 UTC	11978	IN	Data Raw: 9e f3 9d ef 3d 65 8d f4 52 ec 80 fd 3d 7b f9 0e 3b ef 05 17 e3 c0 95 c5 7b 27 3c e5 7d ea b4 e3 f4 4e ef 59 fa 5d fb dd aa b5 09 e3 d3 64 4c 3e 01 2a b0 b9 18 aa 02 42 d9 ee f6 8c 37 f2 88 60 be cd 89 87 f2 89 11 0f 53 95 bf 1c ae 28 00 5d 38 a8 80 58 4c ee 3a df 06 f5 3f ae cc 7f 25 4b 4b 94 ad 51 23 6e 18 55 7c bc 1a f6 ca ff 97 3e b5 03 25 bf 02 db f5 97 ef c0 a0 23 23 7c 7e 2b 2c 2a 76 22 57 24 b4 05 a6 a9 f5 2d 94 78 21 41 63 23 1f 72 ec 18 b2 47 4e 6c 47 16 f2 66 7b 66 6e e5 d3 24 26 0b 18 9c a2 4a 8d b3 5a 58 d1 99 5b a5 bd af e9 cd a0 cc e0 10 5a 59 d6 ad 27 28 22 9d 05 94 eb 6d 42 3b dd ba ed 22 a5 b6 83 53 5a 6c 71 12 7a 30 98 72 fc 23 7c bc 04 93 87 c7 97 63 d0 66 27 69 a2 7b 9f e3 16 40 7b 0c 1d f8 bd 67 15 45 4b 5f 75 b2 8a 39 6f ca 0e cd 5c Data Ascii: =eR={;{'<}NY]dL>B7`S(]8XL:?%KKQ#nU\|>%##\|~+,v"W$-x!Ac#rGNlGf{fn$&JZX[ZY'("mB;"SZlqz0r#\|cf'i{@{gEK_u9o\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49976	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:38 UTC	1238	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 2929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: SEszRAxKKEpumIKC3KBDgJ+fgpRQktZMK8wqqg//BF2C7PJQ4vBhlLTjuz94yMwtJk1+kUmz2MpPDAo2KsAsDYbvNXj0Sw x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:38 UTC	2929	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 6e 65 74 77 6f 72 6b 5f 72 65 71 75 65 73 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 35 36 32 33 37 25 32 43 25 32 32 72 65 71 75 65 73 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 69 5f 73 63 68 65 6d 65 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 32 25 32 43 25 32 32 75 72 69 5f 68 6f 73 74 5f 6e 61 6d 65 25 32 32 25 33 41 25 32 32 61 62 73 2e 74 77 69 6d 67 2e 63 6f 6d 25 32 32 25 32 43 25 32 32 75 72 69 5f 70 61 74 68 25 32 32 25 Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_network_request_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936756237%2C%22request%22%3A%7B%22uri_scheme%22%3A%22https%3A%22%2C%22uri_host_name%22%3A%22abs.twimg.com%22%2C%22uri_path%22%
2024-04-24 05:32:39 UTC	1072	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:38 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:39 GMT x-transaction: 4a6350de6ed8d2b2 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: 4a6350de6ed8d2b2 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 11 x-connection-hash: 8dfa37e60fb49fa1bdca1c5e33415db3997de60dcfad903bf4a5c98c203ff9d9 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49977	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	2412	OUT	GET /graphql/9zyyd1hebl7oNWIPdA8HRw/UserTweets?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Atrue%2C%22withQuickPromoteEligibilityTweetFields%22%3Atrue%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:39 UTC	370	IN	HTTP/1.1 400 Bad Request perf: 7402827104 content-type: application/json;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 62 x-transaction-id: 229d02133a57fa2f x-response-time: 1 x-connection-hash: 8dfdbe4e370baff0bd6eac0f5da38685497bd0b02e387f289d4884eb17046581 date: Wed, 24 Apr 2024 05:32:39 GMT server: tsa_p connection: close
2024-04-24 05:32:39 UTC	62	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 61 74 61 22 2c 22 63 6f 64 65 22 3a 32 31 35 7d 5d 7d 0a Data Ascii: {"errors":[{"message":"Bad Authentication data","code":215}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49980	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	616	OUT	GET /1.1/jot/ces/p2 HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:39 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:39 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 42 x-transaction-id: 24dde48cb00d9847 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: f687dcc227561df2b84b308f2199d839f2095ecd70783337cda5cf005262722b connection: close
2024-04-24 05:32:39 UTC	42	IN	GET is not allowed on path /1.1/jot/ces/p2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49982	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	2418	OUT	OPTIONS /graphql/aQQLnkexAl5z9ec_UgbEIA/UserMedia?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withClientEventToken%22%3Afalse%2C%22withBirdwatchNotes%22%3Afalse%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: 3ec9f31d3b6eb5ccd630da9124f40dacebb537dc7a1622caa77d6a92b27a51b8 date: Wed, 24 Apr 2024 05:32:39 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49978	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	593	OUT	GET /responsive-web/client-web/loader.DividerHandler.05e0144a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009461 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "93gWBR2F67jJS7fGyAPtlg==+ident" expires: Thu, 24 Apr 2025 05:32:39 GMT Last-Modified: Fri, 12 Apr 2024 12:58:29 GMT perf: 7402827104 Server: ECAcc (lac/55A6) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 0e7d941a19275ad7dc36b0f3a5a07987b0e2379a268bc709bc526f42a636b350 x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 466 x-transaction-id: 527a81a8369370f4 Content-Length: 466 Connection: close
2024-04-24 05:32:39 UTC	466	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 44 69 76 69 64 65 72 48 61 6e 64 6c 65 72 22 5d 2c 7b 33 36 30 39 37 3a 28 65 2c 72 2c 74 29 3d 3e 7b 74 2e 72 28 72 29 2c 74 2e 64 28 72 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 73 3d 74 28 32 37 38 34 29 2c 64 3d 74 28 32 33 31 36 32 29 2c 69 3d 74 28 31 36 37 34 32 29 3b 63 6f 6e 73 74 20 6c 3d 74 28 33 39 39 32 38 29 2e 6c 43 28 7b 73 68 6f 75 6c 64 44 69 73 70 6c 61 79 42 6f 72 64 65 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.DividerHandler"],{36097:(e,r,t)=>{t.r(r),t.d(r,{default:()=>l});var s=t(2784),d=t(23162),i=t(16742);const l=t(39928).lC({shouldDisplayBorde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49979	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim.e1b24fda.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:39 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 666380 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "LKqMxNpuWhIvsSlRye2CZw==+ident" expires: Thu, 24 Apr 2025 05:32:39 GMT Last-Modified: Tue, 16 Apr 2024 12:16:17 GMT perf: 7469935968 Server: ECAcc (lac/55C4) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: d7eab7184518fdee6277c92ce8f0be34f7f7561317be852835e292d8bf7b2125 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 17 x-ton-expected-size: 190402 x-transaction-id: dcc01b00d557c1d2 Content-Length: 190402 Connection: close
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 44 4d 52 69 63 68 54 65 78 74 43 6f 6d 70 6f 73 65 7e 6c 6f 61 64 65 72 2e 48 57 43 61 72 64 7e 6c 6f 61 64 65 72 2e 54 69 6d 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 41 77 61 72 64 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 42 61 64 67 65 53 74 72 6f 6b 65 2d 6a 73 22 2c Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim","icons/IconAward-js","icons/IconBadgeStroke-js",
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 2e 62 6f 72 64 65 72 57 69 64 74 68 73 2e 73 6d 61 6c 6c 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 65 2e 62 6f 72 64 65 72 52 61 64 69 69 2e 78 4c 61 72 67 65 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 2c 62 6f 74 68 53 71 75 61 72 65 42 6f 74 74 6f 6d 42 6f 72 64 65 72 52 61 64 69 75 73 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 45 6e 64 52 61 64 69 75 73 3a 65 2e 62 6f 72 64 65 72 52 61 64 69 69 2e 6e 6f 6e 65 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 61 72 74 52 61 64 69 75 73 3a 65 2e 62 6f 72 64 65 72 52 61 64 69 69 2e 6e 6f 6e 65 7d 2c 6c 65 66 74 53 71 75 61 72 65 42 6f 74 74 6f 6d 42 6f 72 64 65 72 52 61 64 69 75 73 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 61 72 74 52 61 64 69 75 73 3a 65 2e 62 6f 72 64 65 72 52 61 64 69 69 Data Ascii: .borderWidths.small,borderRadius:e.borderRadii.xLarge,overflow:"hidden"},bothSquareBottomBorderRadius:{borderBottomEndRadius:e.borderRadii.none,borderBottomStartRadius:e.borderRadii.none},leftSquareBottomBorderRadius:{borderBottomStartRadius:e.borderRadii
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 67 65 44 61 74 61 53 61 76 65 72 4f 76 65 72 6c 61 79 3a 69 2c 6c 6f 63 61 74 69 6f 6e 4b 65 79 3a 72 2c 6d 65 64 69 61 3a 6f 2c 70 6c 61 79 4f 76 65 72 6c 61 79 53 69 7a 65 3a 73 2c 72 65 6e 64 65 72 56 69 64 65 6f 50 6c 61 79 65 72 3a 6c 2c 74 69 74 6c 65 3a 64 2c 75 73 65 44 65 73 74 69 6e 61 74 69 6f 6e 3a 63 3d 21 30 2c 76 61 6e 69 74 79 3a 75 7d 29 7b 69 66 28 21 6f 7c 7c 21 6f 2e 6d 65 64 69 61 45 6e 74 69 74 79 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 7b 61 73 70 65 63 74 5f 72 61 74 69 6f 3a 5f 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 70 2c 6d 65 64 69 61 45 6e 74 69 74 79 3a 6d 2c 6f 76 65 72 6c 61 79 3a 79 7d 3d 6f 2c 45 3d 5b 75 2c 6e 75 6c 6c 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 63 6f 6e 74 65 6e 74 5d 2e 6a 6f 69 6e 28 22 20 22 Data Ascii: geDataSaverOverlay:i,locationKey:r,media:o,playOverlaySize:s,renderVideoPlayer:l,title:d,useDestination:c=!0,vanity:u}){if(!o\|\|!o.mediaEntity)return null;const{aspect_ratio:_,destination:p,mediaEntity:m,overlay:y}=o,E=[u,null==d?void 0:d.content].join(" "
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 26 72 61 2e 72 6f 75 6e 64 42 6f 72 64 65 72 2c 49 26 26 21 52 26 26 6e 61 5b 49 5d 2c 5f 26 26 72 61 2e 72 6f 6f 74 57 69 74 68 43 61 72 6f 75 73 65 6c 2c 4f 26 26 72 61 2e 67 72 61 79 44 65 74 61 69 6c 73 2c 52 26 26 72 61 2e 6e 65 67 61 74 69 76 65 4d 61 72 67 69 6e 73 2c 54 5d 2c 74 65 73 74 49 44 3a 6e 75 6c 6c 3d 3d 70 3f 76 6f 69 64 20 30 3a 70 2e 77 72 61 70 70 65 72 2c 76 69 65 77 52 65 66 3a 74 68 69 73 2e 5f 73 65 74 52 6f 6f 74 4e 6f 64 65 2c 77 69 74 68 46 6f 63 75 73 57 69 74 68 69 6e 46 6f 63 75 73 52 69 6e 67 3a 21 30 2c 77 69 74 68 49 6e 74 65 72 61 63 74 69 76 65 53 74 79 6c 69 6e 67 3a 45 2c 77 69 74 68 4f 75 74 73 65 74 46 6f 63 75 73 52 69 6e 67 3a 21 30 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 2e 46 72 61 67 6d 65 6e Data Ascii: &ra.roundBorder,I&&!R&&na[I],_&&ra.rootWithCarousel,O&&ra.grayDetails,R&&ra.negativeMargins,T],testID:null==p?void 0:p.wrapper,viewRef:this._setRootNode,withFocusWithinFocusRing:!0,withInteractiveStyling:E,withOutsetFocusRing:!0},n.createElement(n.Fragmen
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 70 65 29 7b 63 6f 6e 73 74 20 65 3d 53 2e 64 61 74 61 2e 62 75 74 74 6f 6e 73 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 74 3d 50 65 28 61 29 3b 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 24 65 2c 7b 62 75 74 74 6f 6e 53 69 7a 65 3a 74 2c 62 75 74 74 6f 6e 73 3a 65 2c 63 68 72 6f 6d 65 6c 65 73 73 3a 72 2c 73 74 79 6c 65 3a 77 7d 29 7d 69 66 28 22 70 6f 6c 6c 22 3d 3d 3d 53 2e 74 79 70 65 29 7b 63 6f 6e 73 74 20 65 3d 53 2e 64 61 74 61 3b 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5a 74 2c 28 30 2c 69 2e 5a 29 28 7b 7d 2c 65 2c 7b 69 73 41 75 74 68 6f 72 3a 21 21 6c 2c 73 74 79 6c 65 3a 77 2c 76 6f 74 69 6e 67 44 69 73 61 62 6c 65 64 3a 54 7d 29 29 7d 72 65 74 75 72 6e 20 Data Ascii: pe){const e=S.data.buttons;if(!e)return null;const t=Pe(a);return n.createElement($e,{buttonSize:t,buttons:e,chromeless:r,style:w})}if("poll"===S.type){const e=S.data;return n.createElement(Zt,(0,i.Z)({},e,{isAuthor:!!l,style:w,votingDisabled:T}))}return
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 2c 2e 2e 2e 65 7d 29 7d 2c 74 68 69 73 2e 5f 72 65 71 75 65 73 74 43 61 72 64 55 70 64 61 74 65 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 72 65 71 75 65 73 74 43 61 72 64 55 70 64 61 74 65 3a 65 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2c 7b 63 61 72 64 3a 74 7d 3d 74 68 69 73 2e 73 74 61 74 65 3b 65 26 26 74 26 26 65 28 5b 74 2e 69 64 5d 2c 7b 6e 61 6d 65 3a 74 2e 63 61 72 64 5f 6e 61 6d 65 7d 29 7d 3b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 63 6f 6e 76 65 72 74 43 61 72 64 41 6e 64 4d 65 74 61 64 61 74 61 28 65 2c 74 2e 69 73 44 65 76 65 6c 6f 70 65 72 42 75 69 6c 74 43 61 72 64 45 6e 61 62 6c 65 64 2c 74 2e 73 68 6f 75 6c 64 43 6f 6e 76 65 72 74 43 6f 6c 6c 65 63 74 69 6f 6e 54 6f 49 6d 61 67 65 57 65 62 73 69 74 65 43 61 72 64 2c 74 2e 64 70 61 4d 65 74 61 64 61 Data Ascii: ,...e})},this._requestCardUpdate=()=>{const{requestCardUpdate:e}=this.props,{card:t}=this.state;e&&t&&e([t.id],{name:t.card_name})};const a=this.convertCardAndMetadata(e,t.isDeveloperBuiltCardEnabled,t.shouldConvertCollectionToImageWebsiteCard,t.dpaMetada
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 34 62 63 61 30 2c 77 6e 3d 77 65 28 29 2e 66 35 65 61 30 37 65 63 2c 66 6e 3d 77 65 28 29 2e 62 36 32 39 35 36 61 61 2c 41 6e 3d 77 65 28 29 2e 62 35 32 39 38 64 39 32 2c 4c 6e 3d 77 65 28 29 2e 69 33 65 61 38 30 36 61 2c 52 6e 3d 77 65 28 29 2e 66 64 30 30 61 37 36 61 2c 4f 6e 3d 77 65 28 29 2e 65 30 61 61 35 38 34 38 2c 78 6e 3d 77 65 28 29 2e 67 33 33 66 33 30 35 30 2c 4e 6e 3d 77 65 28 29 2e 64 33 66 36 62 31 61 36 2c 4d 6e 3d 77 65 28 29 2e 62 30 65 33 32 32 63 63 2c 46 6e 3d 77 65 28 29 2e 63 62 38 62 64 64 63 38 2c 50 6e 3d 77 65 28 29 2e 63 62 38 63 35 34 37 65 2c 6b 6e 3d 77 65 28 29 2e 64 39 38 30 65 32 39 66 2c 42 6e 3d 77 65 28 29 2e 66 39 33 62 62 33 65 65 2c 57 6e 3d 77 65 28 29 2e 66 63 32 30 39 62 62 37 2c 55 6e 3d 70 69 2e 5a 50 2e 69 73 Data Ascii: 4bca0,wn=we().f5ea07ec,fn=we().b62956aa,An=we().b5298d92,Ln=we().i3ea806a,Rn=we().fd00a76a,On=we().e0aa5848,xn=we().g33f3050,Nn=we().d3f6b1a6,Mn=we().b0e322cc,Fn=we().cb8bddc8,Pn=we().cb8c547e,kn=we().d980e29f,Bn=we().f93bb3ee,Wn=we().fc209bb7,Un=pi.ZP.is
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 6e 61 74 69 6f 6e 3a 76 6f 69 64 20 30 3b 6c 65 74 20 61 3b 72 65 74 75 72 6e 20 65 26 26 28 61 3d 7b 2e 2e 2e 65 2e 64 61 74 61 2e 74 69 74 6c 65 7d 29 2c 7b 74 79 70 65 3a 22 64 65 74 61 69 6c 73 22 2c 64 61 74 61 3a 7b 74 69 74 6c 65 3a 61 2c 66 6f 6f 74 65 72 3a 75 6e 64 65 66 69 6e 65 64 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 74 7d 7d 7d 2c 6d 3d 65 3d 3e 7b 6c 65 74 20 74 2c 61 2c 69 2c 6e 3b 72 65 74 75 72 6e 20 65 26 26 28 74 3d 65 2e 64 61 74 61 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2c 61 3d 65 2e 64 61 74 61 2e 70 72 69 63 65 2c 69 3d 65 2e 64 61 74 61 2e 74 69 74 6c 65 2c 6e 3d 65 2e 64 61 74 61 2e 73 61 6c 65 5f 70 72 69 63 65 29 2c 7b 74 79 70 65 3a 22 64 70 61 5f 64 65 74 61 69 6c 73 22 2c 64 61 74 61 3a 7b 74 69 74 6c 65 3a 69 2c 64 65 73 74 Data Ascii: nation:void 0;let a;return e&&(a={...e.data.title}),{type:"details",data:{title:a,footer:undefined,destination:t}}},m=e=>{let t,a,i,n;return e&&(t=e.data.destination,a=e.data.price,i=e.data.title,n=e.data.sale_price),{type:"dpa_details",data:{title:i,dest
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 6f 69 64 20 30 3a 72 2e 5f 5f 74 79 70 65 6e 61 6d 65 29 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 70 72 65 76 69 65 77 5f 69 6d 61 67 65 2c 61 3d 70 61 72 73 65 49 6e 74 28 65 2e 6d 65 64 69 61 2e 6d 65 64 69 61 5f 69 64 2c 31 30 29 3b 6c 65 74 20 6f 3b 6f 3d 22 41 70 69 56 69 64 65 6f 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 5f 5f 74 79 70 65 6e 61 6d 65 29 3f 7b 74 79 70 65 3a 22 75 63 5f 76 69 64 65 6f 22 2c 69 64 3a 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 28 61 29 3f 30 3a 61 2c 69 64 5f 73 74 72 3a 65 2e 6d 65 64 69 61 2e 6d 65 64 69 61 5f 69 64 7c 7c 22 22 2c 65 78 74 5f 6d 65 64 69 61 5f 63 6f 6c 6f 72 3a 7b 70 61 6c 65 74 74 65 3a 6e 75 6c 6c 21 3d 74 26 26 74 2e 63 6f 6c 6f 72 5f 69 6e 66 6f 3f 74 2e 63 6f 6c 6f 72 5f 69 6e 66 6f Data Ascii: oid 0:r.__typename)){const t=r.preview_image,a=parseInt(e.media.media_id,10);let o;o="ApiVideo"===(null==r?void 0:r.__typename)?{type:"uc_video",id:Number.isNaN(a)?0:a,id_str:e.media.media_id\|\|"",ext_media_color:{palette:null!=t&&t.color_info?t.color_info
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 22 2c 22 62 72 6f 61 64 63 61 73 74 5f 69 64 22 29 2c 63 6f 6e 74 65 6e 74 5f 69 64 3a 28 30 2c 6f 2e 53 49 29 28 61 2c 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 2c 22 62 72 6f 61 64 63 61 73 74 5f 6d 65 64 69 61 5f 6b 65 79 22 29 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 72 2e 46 77 2e 44 45 53 54 49 4e 41 54 49 4f 4e 2c 2e 2e 2e 76 3f 7b 70 6f 73 74 65 72 5f 69 6d 61 67 65 3a 76 7d 3a 6e 75 6c 6c 2c 74 69 6d 65 63 6f 64 65 3a 28 30 2c 6f 2e 53 49 29 28 61 2c 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 2c 22 62 72 6f 61 64 63 61 73 74 5f 74 69 6d 65 63 6f 64 65 22 29 7c 7c 28 30 2c 6f 2e 53 49 29 28 61 2c 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 2c 22 62 72 6f 61 64 63 61 73 74 5f 72 65 70 6c 61 79 5f 65 64 69 74 65 64 5f 73 74 61 72 74 5f 74 69 6d 65 22 29 Data Ascii: ","broadcast_id"),content_id:(0,o.SI)(a,"string_value","broadcast_media_key"),destination:r.Fw.DESTINATION,...v?{poster_image:v}:null,timecode:(0,o.SI)(a,"string_value","broadcast_timecode")\|\|(0,o.SI)(a,"string_value","broadcast_replay_edited_start_time")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49983	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	627	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:40 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:39 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 546a492a0b331787 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: e71404e102215c0e884b6f7d23194ba9682218590843e2becb75a8aa4a08531b connection: close
2024-04-24 05:32:40 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49981	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	598	OUT	GET /responsive-web/client-web/loader.TimelineCardHandler.ae43cd2a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:40 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143665 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:39 GMT Etag: "AfdhQ/QPThSuy7Z3kdGkbg==+ident" expires: Thu, 24 Apr 2025 05:32:39 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55A5) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 7b401a9cec5c6edd192d6c30ea91d3d52b2b5e4159cca277df452f99579c0982 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 34611 x-transaction-id: 9c847dbfe02e8af2 Content-Length: 34611 Connection: close
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 54 69 6d 65 6c 69 6e 65 43 61 72 64 48 61 6e 64 6c 65 72 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 2c 22 6c 6f 61 64 65 72 2e 48 57 43 61 72 64 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 42 6f 6c 64 43 6f 6d 70 61 63 74 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 42 6f 6f 6b 6d 61 72 6b 50 6c 75 73 53 74 72 6f 6b 65 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 42 75 6c 6c 65 74 65 64 4c 69 73 74 2d 6a 73 22 2c Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.TimelineCardHandler","bundle.AudioSpaceDetail","loader.HWCard","icons/IconBoldCompact-js","icons/IconBookmarkPlusStroke-js","icons/IconBulletedList-js",
2024-04-24 05:32:40 UTC	16383	IN	Data Raw: 20 24 7b 6f 2e 64 65 66 61 75 6c 74 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 73 2e 62 6f 64 79 7d 3b 5c 6e 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 24 7b 6f 2e 64 65 66 61 75 6c 74 2e 74 68 65 6d 65 2e 6c 69 6e 65 48 65 69 67 68 74 73 2e 74 69 74 6c 65 34 7d 3b 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 24 7b 6f 2e 64 65 66 61 75 6c 74 2e 74 68 65 6d 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 38 7d 3b 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 6c 6f 6e 67 66 6f 72 6d 2d 75 6e 6f 72 64 65 72 65 64 2d 6c 69 73 74 2d 69 74 65 6d 2c 20 2e 6c 6f 6e 67 66 6f 72 6d 2d 6f 72 64 65 72 65 64 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 5c Data Ascii: ${o.default.theme.fontSizes.body};\n line-height: ${o.default.theme.lineHeights.title4};\n margin-bottom: ${o.default.theme.spaces.space28};\n margin-top: 0;\n }\n\n .longform-unordered-list-item, .longform-ordered-list-item {\
2024-04-24 05:32:40 UTC	2	IN	Data Raw: 28 74 Data Ascii: (t
2024-04-24 05:32:40 UTC	1843	IN	Data Raw: 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6f 3d 6e 28 32 37 38 34 29 2c 72 3d 6e 28 39 30 36 30 31 29 2c 69 3d 6e 28 38 33 34 32 37 29 2c 6c 3d 6e 28 37 33 35 36 39 29 3b 63 6f 6e 73 74 20 61 3d 28 65 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 7b 64 69 72 65 63 74 69 6f 6e 3a 74 7d 3d 28 30 2c 69 2e 5a 29 28 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 5a 29 28 22 73 76 67 22 2c 7b 2e 2e 2e 65 2c 61 63 63 65 73 73 69 62 69 6c 69 74 79 52 6f 6c 65 3a 65 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 4c 61 62 65 6c 3f 65 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 52 6f 6c 65 7c 7c 22 69 6d 67 22 3a 76 6f 69 64 20 30 2c 61 63 63 65 73 73 69 62 69 6c 69 74 79 48 69 64 64 65 6e 3a 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 63 63 65 73 73 69 Data Ascii: ),n.d(t,{default:()=>s});var o=n(2784),r=n(90601),i=n(83427),l=n(73569);const a=(e={})=>{const{direction:t}=(0,i.Z)();return(0,r.Z)("svg",{...e,accessibilityRole:e.accessibilityLabel?e.accessibilityRole\|\|"img":void 0,accessibilityHidden:void 0===e.accessi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49984	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich.5ffff2aa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:40 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009467 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:40 GMT Etag: "WU4Nn/5zAqn9OM7xSSPwSg==+ident" expires: Thu, 24 Apr 2025 05:32:40 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 4fa224fbf124de193a5fd593c86cb2b67d54eeab50fab14bd1bce8697e19dc2e x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1691 x-transaction-id: 23593c8c21ef0142 Content-Length: 1691 Connection: close
2024-04-24 05:32:40 UTC	1691	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 44 4d 52 69 63 68 22 5d 2c 7b 35 38 38 30 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 70 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich"],{58804:(e,t,r)=>{r.d(t,{Z:()=>p});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49985	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:39 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa.5d31ec7a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:40 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009463 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:40 GMT Etag: "bUGR8JmX+3UdFIKPGcUBsA==+ident" expires: Thu, 24 Apr 2025 05:32:40 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e3bda6247036cf56ee7235e68db6ec7f256bf62c63507a67abdc27b1c043bb76 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 2539 x-transaction-id: 3526b84a25fd341e Content-Length: 2539 Connection: close
2024-04-24 05:32:40 UTC	2539	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 49 6e 74 65 72 6e 61 6c 73 7e 62 75 6e 64 6c 65 2e 55 73 65 72 4c 69 73 74 73 7e 6c 6f 61 64 65 72 2e 45 76 65 6e 74 53 75 6d 6d 61 72 79 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 74 6f 70 69 63 48 61 22 5d 2c 7b 37 31 38 39 36 3a 28 65 2c 72 2c 74 29 3d 3e 7b 74 2e 64 28 72 2c 7b 44 49 3a 28 29 3d 3e 6b 2c 48 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~ondemand.SettingsInternals~bundle.UserLists~loader.EventSummaryHandler~loader.topicHa"],{71896:(e,r,t)=>{t.d(r,{DI:()=>k,H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49986	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:40 UTC	3001	OUT	GET /graphql/aQQLnkexAl5z9ec_UgbEIA/UserMedia?variables=%7B%22userId%22%3A%2234733701%22%2C%22count%22%3A20%2C%22includePromotedContent%22%3Afalse%2C%22withClientEventToken%22%3Afalse%2C%22withBirdwatchNotes%22%3Afalse%2C%22withVoice%22%3Atrue%2C%22withV2Timeline%22%3Atrue%7D&features=%7B%22rweb_tipjar_consumption_enabled%22%3Atrue%2C%22responsive_web_graphql_exclude_directive_enabled%22%3Atrue%2C%22verified_phone_label_enabled%22%3Afalse%2C%22creator_subscriptions_tweet_preview_api_enabled%22%3Atrue%2C%22responsive_web_graphql_timeline_navigation_enabled%22%3Atrue%2C%22responsive_web_graphql_skip_user_profile_image_extensions_enabled%22%3Afalse%2C%22communities_web_enable_tweet_community_results_fetch%22%3Atrue%2C%22c9s_tweet_anatomy_moderator_badge_enabled%22%3Atrue%2C%22articles_preview_enabled%22%3Afalse%2C%22tweetypie_unmention_optimization_enabled%22%3Atrue%2C%22responsive_web_edit_tweet_api_enabled%22%3Atrue%2C%22graphql_is_translatable_rweb_tweet_is_translatable_enabled%22%3Atrue%2C%22view_counts_everywhere_api_enabled%22%3Atrue%2C%22longform_notetweets_consumption_enabled%22%3Atrue%2C%22responsive_web_twitter_article_tweet_consumption_enabled%22%3Atrue%2C%22tweet_awards_web_tipping_enabled%22%3Afalse%2C%22creator_subscriptions_quote_tweet_preview_enabled%22%3Afalse%2C%22freedom_of_speech_not_reach_fetch_enabled%22%3Atrue%2C%22standardized_nudges_misinfo%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_limited_actions_policy_enabled%22%3Atrue%2C%22tweet_with_visibility_results_prefer_gql_media_interstitial_enabled%22%3Atrue%2C%22rweb_video_timestamps_enabled%22%3Atrue%2C%22longform_notetweets_rich_text_read_enabled%22%3Atrue%2C%22longform_notetweets_inline_media_enabled%22%3Atrue%2C%22responsive_web_enhance_cards_enabled%22%3Afalse%7D&fieldToggles=%7B%22withArticlePlainText%22%3Afalse%7D HTTP/1.1 Host: api.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-client-transaction-id: sbLKvfWz0bOXYXt7JVm6eWZme22pay+10jXTU/YG/aR7FQupGwmYbU0aQsaBMTXU37eHaLDDKLILN46f0ra+aQa6jYJysg x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:40 UTC	868	IN	HTTP/1.1 404 Not Found date: Wed, 24 Apr 2024 05:32:40 UTC perf: 7402827104 server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 0 x-transaction-id: c3dbf5b78706d5cc x-rate-limit-limit: 500 x-rate-limit-reset: 1713937660 x-rate-limit-remaining: 499 strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 7 x-connection-hash: 20779578c2b41487800f3678d47aa6c21de045e0927bbee46ef4d564ac138ab1 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49987	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:40 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer~loader.inlineTombstoneHandler~.517738fa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:40 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009463 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:40 GMT Etag: "NCFIQheErchkE/0TEYQoog==+ident" expires: Thu, 24 Apr 2025 05:32:40 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55E2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e5ae22d2d0824993951616f7513883fa16276e2fb2f689e75ce742108406ec4f x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 6009 x-transaction-id: 3e2e6e515f66d48c Content-Length: 6009 Connection: close
2024-04-24 05:32:40 UTC	6009	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6e 76 65 72 73 61 74 69 6f 6e 7e 62 75 6e 64 6c 65 2e 54 77 65 65 74 4d 65 64 69 61 44 65 74 61 69 6c 7e 62 75 6e 64 6c 65 2e 49 6d 6d 65 72 73 69 76 65 4d 65 64 69 61 56 69 65 77 65 72 7e 6c 6f 61 64 65 72 2e 69 6e 6c 69 6e 65 54 6f 6d 62 73 74 6f 6e 65 48 61 6e 64 6c 65 72 7e 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 43 68 65 76 72 6f 6e 44 6f 77 6e 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer~loader.inlineTombstoneHandler~","icons/IconChevronDown-js","icons/I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49988	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:40 UTC	674	OUT	GET /responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.immersiveTweetHandler.0f0c2fca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:40 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984554 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:40 GMT Etag: "lClGuNqpMQ9zcx2u6CiVyQ==+ident" expires: Thu, 24 Apr 2025 05:32:40 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55C8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e956240794611ac47d8b336fbefb930dc80281570c3963e08ef179bf262b86fc x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2798 x-transaction-id: 13aa4d49ccc66b79 Content-Length: 2798 Connection: close
2024-04-24 05:32:40 UTC	2798	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 6c 6f 61 64 65 72 2e 69 6e 6c 69 6e 65 54 6f 6d 62 73 74 6f 6e 65 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 69 6d 6d 65 72 73 69 76 65 54 77 65 65 74 48 61 6e 64 6c 65 72 22 5d 2c 7b 39 32 31 38 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 6e 28 36 38 38 36 29 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.immersiveTweetHandler"],{92187:(e,t,n)=>{n.d(t,{Z:()=>d});n(6886)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49989	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:40 UTC	676	OUT	GET /responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu.1c9b673a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 326560 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:40 GMT Etag: "D2yAdw6NOq+Yx0qK4kObzQ==+ident" expires: Thu, 24 Apr 2025 05:32:40 GMT Last-Modified: Sun, 24 Mar 2024 01:13:24 GMT perf: 7469935968 Server: ECAcc (lac/55BC) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 8acdf000ffa0f93c7e0eeb41796e0fc301744205d9123906f9cdc6df04ae6114 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1558 x-transaction-id: f9560c46d3eb2708 Content-Length: 1558 Connection: close
2024-04-24 05:32:41 UTC	1558	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 6c 6f 61 64 65 72 2e 69 6e 6c 69 6e 65 54 6f 6d 62 73 74 6f 6e 65 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 54 77 65 65 74 43 75 72 61 74 69 6f 6e 41 63 74 69 6f 6e 4d 65 6e 75 22 5d 2c 7b 35 37 37 35 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 6e 28 33 36 37 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler~loader.TweetCurationActionMenu"],{57751:(e,t,n)=>{n.d(t,{Z:()=>d});n(367

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49990	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:40 UTC	645	OUT	GET /responsive-web/client-web/shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler.b835363a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 364497 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:40 GMT Etag: "363rHWXTtj85+/XntBj4qg==+ident" expires: Thu, 24 Apr 2025 05:32:40 GMT Last-Modified: Sat, 20 Apr 2024 00:11:29 GMT perf: 7402827104 Server: ECAcc (lac/55A2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a38f093b19e16d56df9c77d712fa95e41bbb5dbafa2104d3ec0482d44ffce080 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 12 x-ton-expected-size: 105092 x-transaction-id: ac7281c112c23749 Content-Length: 105092 Connection: close
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 6c 6f 61 64 65 72 2e 69 6e 6c 69 6e 65 54 6f 6d 62 73 74 6f 6e 65 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 22 5d 2c 7b 32 35 35 37 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 69 28 32 37 38 34 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 68 65 69 67 68 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~loader.inlineTombstoneHandler~loader.tweetHandler"],{25572:(e,t,i)=>{i.d(t,{Z:()=>n});const n=i(2784).createContext({heigh
2024-04-24 05:32:41 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 6f 6d 70 74 3a 72 7d 2c 70 61 74 68 6e 61 6d 65 3a 63 2e 70 65 72 6d 61 6c 69 6e 6b 2c 71 75 65 72 79 3a 61 3f 7b 63 78 74 3a 61 7d 3a 76 6f 69 64 20 30 7d 2c 74 77 65 65 74 3a 6c 2c 74 77 65 65 74 54 65 78 74 53 69 7a 65 3a 64 7c 7c 22 68 65 61 64 6c 69 6e 65 31 22 2c 77 69 74 68 41 63 74 69 6f 6e 73 3a 21 31 2c 77 69 74 68 41 76 61 74 61 72 4c 69 6e 6b 3a 21 31 2c 77 69 74 68 52 65 61 64 65 72 4d 6f 64 65 41 63 74 69 76 65 3a 21 30 2c 77 69 74 68 55 73 65 72 41 76 61 74 61 72 3a 21 31 2c 77 69 74 68 55 73 65 72 48 6f 76 65 72 43 61 72 64 3a 21 31 2c 77 69 74 68 55 73 65 72 4e 61 6d 65 3a 21 31 2c 77 69 74 68 54 69 6d 65 73 74 61 6d 70 3a 21 31 7d 7d 2c 74 68 69 73 2e 5f 67 65 74 49 6e 6c 69 6e 65 43 61 6c 6c 6f 75 74 49 6e 66 6f 3d 28 29 3d 3e 7b 63 6f Data Ascii: ompt:r},pathname:c.permalink,query:a?{cxt:a}:void 0},tweet:l,tweetTextSize:d\|\|"headline1",withActions:!1,withAvatarLink:!1,withReaderModeActive:!0,withUserAvatar:!1,withUserHoverCard:!1,withUserName:!1,withTimestamp:!1}},this._getInlineCalloutInfo=()=>{co
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 74 41 64 76 65 72 74 69 73 65 72 3a 46 2c 71 75 6f 74 65 54 77 65 65 74 53 6f 63 69 61 6c 43 6f 6e 74 65 78 74 50 72 6f 70 73 3a 4e 2c 71 75 6f 74 65 64 54 77 65 65 74 54 6f 6d 62 73 74 6f 6e 65 49 6e 66 6f 3a 4f 2c 72 65 70 6c 79 42 61 64 67 65 3a 4c 2c 72 65 70 6c 79 43 6f 6e 74 65 78 74 3a 66 2c 72 6f 6f 74 54 77 65 65 74 41 75 74 68 6f 72 49 64 3a 6b 2c 73 68 6f 75 6c 64 53 65 6c 66 54 68 72 65 61 64 49 6e 63 6c 75 64 65 41 76 61 74 61 72 3a 4d 2c 73 68 6f 77 52 65 70 6c 79 46 69 6c 74 65 72 49 6e 6c 69 6e 65 43 61 6c 6c 6f 75 74 3a 52 2c 73 6f 63 69 61 6c 43 6f 6e 74 65 78 74 3a 50 2c 73 6f 63 69 61 6c 43 6f 6e 74 65 78 74 43 6f 6c 6f 72 3a 55 2c 74 6f 70 69 63 3a 78 2c 74 6f 70 69 63 46 6f 6c 6c 6f 77 50 72 6f 6d 70 74 3a 57 2c 74 77 65 65 74 3a 42 Data Ascii: tAdvertiser:F,quoteTweetSocialContextProps:N,quotedTweetTombstoneInfo:O,replyBadge:L,replyContext:f,rootTweetAuthorId:k,shouldSelfThreadIncludeAvatar:M,showReplyFilterInlineCallout:R,socialContext:P,socialContextColor:U,topic:x,topicFollowPrompt:W,tweet:B
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 3f 76 6f 69 64 20 30 3a 63 2e 64 61 74 61 2e 6d 65 64 69 61 5f 6c 69 73 74 2e 73 6f 6d 65 28 28 65 3d 3e 65 2e 69 64 26 26 42 5b 65 2e 69 64 5d 26 26 28 22 75 63 5f 76 69 64 65 6f 22 3d 3d 3d 42 5b 65 2e 69 64 5d 2e 74 79 70 65 7c 7c 22 61 6e 69 6d 61 74 65 64 5f 67 69 66 22 3d 3d 3d 42 5b 65 2e 69 64 5d 2e 74 79 70 65 29 29 29 3b 6a 26 26 7a 26 26 28 47 5b 64 2e 46 77 2e 53 57 49 50 45 41 42 4c 45 5f 4d 45 44 49 41 5f 53 54 41 54 49 43 5d 3d 7b 74 79 70 65 3a 64 2e 51 65 2e 53 57 49 50 45 41 42 4c 45 5f 4d 45 44 49 41 2c 64 61 74 61 3a 7b 6d 65 64 69 61 5f 6c 69 73 74 3a 7a 2e 64 61 74 61 2e 6d 65 64 69 61 5f 6c 69 73 74 2e 6d 61 70 28 28 65 3d 3e 28 7b 64 65 73 74 69 6e 61 74 69 6f 6e 3a 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2c 69 64 3a 53 28 65 2e 69 Data Ascii: ?void 0:c.data.media_list.some((e=>e.id&&B[e.id]&&("uc_video"===B[e.id].type\|\|"animated_gif"===B[e.id].type)));j&&z&&(G[d.Fw.SWIPEABLE_MEDIA_STATIC]={type:d.Qe.SWIPEABLE_MEDIA,data:{media_list:z.data.media_list.map((e=>({destination:e.destination,id:S(e.i
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 6a 3f 5a 28 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 5f 6f 62 6a 29 3a 7b 7d 7d 3b 6c 65 74 20 6c 3d 7b 7d 3b 63 6f 6e 73 74 20 64 3d 6e 75 6c 6c 3d 3d 28 6e 3d 65 2e 75 73 65 72 5f 72 65 73 75 6c 74 73 29 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 73 75 6c 74 3b 72 65 74 75 72 6e 20 64 26 26 64 2e 6c 65 67 61 63 79 26 26 28 6c 3d 7b 69 64 5f 73 74 72 3a 64 2e 69 64 2c 70 72 6f 66 69 6c 65 5f 69 6d 61 67 65 5f 75 72 6c 5f 68 74 74 70 73 3a 64 2e 6c 65 67 61 63 79 2e 70 72 6f 66 69 6c 65 5f 69 6d 61 67 65 5f 75 72 6c 5f 68 74 74 70 73 7c 7c 22 22 2c 70 72 6f 74 65 63 74 65 64 3a 21 21 64 2e 6c 65 67 61 63 79 2e 70 72 6f 74 65 63 74 65 64 2c 76 65 72 69 66 69 65 64 3a 21 21 64 2e 6c 65 67 61 63 79 2e 76 65 72 69 66 69 65 64 2c 69 73 5f 62 6c 75 65 5f 76 65 72 69 66 Data Ascii: j?Z(e.destination_obj):{}};let l={};const d=null==(n=e.user_results)?void 0:n.result;return d&&d.legacy&&(l={id_str:d.id,profile_image_url_https:d.legacy.profile_image_url_https\|\|"",protected:!!d.legacy.protected,verified:!!d.legacy.verified,is_blue_verif
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 67 65 5f 6d 65 5f 73 68 6f 77 22 7d 2c 69 64 3a 65 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 5b 6f 2e 75 57 2e 44 45 46 41 55 4c 54 5d 3a 5b 6f 2e 46 77 2e 42 55 54 54 4f 4e 5f 47 52 4f 55 50 5d 2c 5b 6f 2e 75 57 2e 53 54 41 54 49 43 5d 3a 5b 6f 2e 46 77 2e 42 55 54 54 4f 4e 5f 47 52 4f 55 50 5f 53 54 41 54 49 43 5d 7d 2c 64 65 73 74 69 6e 61 74 69 6f 6e 73 3a 7b 5b 6f 2e 46 77 2e 44 45 53 54 49 4e 41 54 49 4f 4e 5d 3a 7b 74 79 70 65 3a 6f 2e 5f 67 2e 41 43 54 49 4f 4e 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 5f 64 61 74 61 3a 7b 70 65 72 73 69 73 74 3a 21 31 2c 74 79 70 65 3a 22 64 6d 22 2c 72 65 63 69 70 69 65 6e 74 3a 63 2e 69 64 5f 73 74 72 7d 2c 61 75 74 68 5f 72 65 71 75 69 72 65 64 3a 21 30 2c 73 63 72 69 62 65 3a 22 6d 65 73 73 61 67 65 5f 6d 65 5f 63 Data Ascii: ge_me_show"},id:e,components:{[o.uW.DEFAULT]:[o.Fw.BUTTON_GROUP],[o.uW.STATIC]:[o.Fw.BUTTON_GROUP_STATIC]},destinations:{[o.Fw.DESTINATION]:{type:o._g.ACTION,data:{action_data:{persist:!1,type:"dm",recipient:c.id_str},auth_required:!0,scribe:"message_me_c
2024-04-24 05:32:41 UTC	5	IN	Data Raw: 67 55 52 4c 22 Data Ascii: gURL"
2024-04-24 05:32:41 UTC	6788	IN	Data Raw: 7d 5d 7d 3a 6e 75 6c 6c 7d 2c 5b 6f 2e 46 77 2e 49 4d 41 47 45 5f 45 4e 54 49 54 59 5d 3a 28 30 2c 73 2e 57 57 29 28 75 7c 7c 7b 7d 29 2c 5b 6f 2e 46 77 2e 49 4d 41 47 45 5f 45 4e 54 49 54 59 5f 53 54 41 54 49 43 5d 3a 28 30 2c 73 2e 57 57 29 28 5f 7c 7c 7b 7d 29 7d 2c 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 61 74 61 3a 7b 5b 6f 2e 46 77 2e 4d 45 44 49 41 5d 3a 7b 74 79 70 65 3a 6f 2e 51 65 2e 4d 45 44 49 41 2c 64 61 74 61 3a 7b 69 64 3a 41 3f 6f 2e 46 77 2e 56 49 44 45 4f 5f 45 4e 54 49 54 59 3a 75 3f 6f 2e 46 77 2e 49 4d 41 47 45 5f 45 4e 54 49 54 59 3a 6f 2e 46 77 2e 56 49 44 45 4f 5f 45 4e 54 49 54 59 5f 53 45 43 4f 4e 44 41 52 59 2c 2e 2e 2e 21 41 26 26 75 26 26 64 3f 7b 64 65 73 74 69 6e 61 74 69 6f 6e 3a 6f 2e 46 77 2e 44 45 53 54 49 4e 41 54 49 4f 4e Data Ascii: }]}:null},[o.Fw.IMAGE_ENTITY]:(0,s.WW)(u\|\|{}),[o.Fw.IMAGE_ENTITY_STATIC]:(0,s.WW)(_\|\|{})},components_data:{[o.Fw.MEDIA]:{type:o.Qe.MEDIA,data:{id:A?o.Fw.VIDEO_ENTITY:u?o.Fw.IMAGE_ENTITY:o.Fw.VIDEO_ENTITY_SECONDARY,...!A&&u&&d?{destination:o.Fw.DESTINATION

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49991	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:40 UTC	628	OUT	GET /responsive-web/client-web/shared~loader.inlineTombstoneHandler~loader.tweetHandler.1451db7a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 445520 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:41 GMT Etag: "K2f7tL0G9tVNQEHdutoSOQ==+ident" expires: Thu, 24 Apr 2025 05:32:41 GMT Last-Modified: Fri, 19 Apr 2024 01:31:34 GMT perf: 7402827104 Server: ECAcc (lac/559C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: dc291629cdc12749026f57f319b464fba60504cf426e4e9495b50a88038feea8 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 28572 x-transaction-id: 5f6347d13b5a77ad Content-Length: 28572 Connection: close
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 69 6e 6c 69 6e 65 54 6f 6d 62 73 74 6f 6e 65 48 61 6e 64 6c 65 72 7e 6c 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 5d 2c 7b 31 38 38 39 32 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 67 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 69 3d 6f 28 37 38 39 36 29 2c 6e 3d 28 6f 28 33 36 37 32 38 29 2c 6f Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.inlineTombstoneHandler~loader.tweetHandler","bundle.AudioSpaceDetail"],{18892:(e,t,o)=>{o.d(t,{g:()=>s});var i=o(7896),n=(o(36728),o
2024-04-24 05:32:41 UTC	12189	IN	Data Raw: 6b 22 7d 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 41 73 79 6e 63 50 72 6f 6d 6f 74 65 64 45 76 65 6e 74 28 76 2e 64 78 2e 45 4d 42 45 44 44 45 44 5f 4d 45 44 49 41 29 7d 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 45 6e 74 69 74 79 43 6c 69 63 6b 3d 28 65 2c 74 2c 6f 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 76 2e 5f 34 5b 74 5d 2c 6e 3d 4d 2e 5a 5b 74 5d 2c 72 3d 44 2e 5a 2e 67 65 74 43 6c 69 63 6b 54 72 61 63 6b 69 6e 67 45 6d 62 65 64 44 65 74 61 69 6c 73 28 74 68 69 73 2e 70 72 6f 70 73 2e 70 72 6f 6d 6f 74 65 64 43 6f 6e 74 65 6e 74 2c 6f 29 3b 69 66 28 69 29 7b 63 6f 6e 73 74 20 74 3d 69 3d 3d 3d 76 2e 64 78 2e 55 52 4c 5f 43 4c 49 43 4b 26 26 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 Data Ascii: k"}),this._handleAsyncPromotedEvent(v.dx.EMBEDDED_MEDIA)},this._handleEntityClick=(e,t,o)=>{const i=v._4[t],n=M.Z[t],r=D.Z.getClickTrackingEmbedDetails(this.props.promotedContent,o);if(i){const t=i===v.dx.URL_CLICK&&e.currentTarget instanceof window.HTMLE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49993	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	1098	OUT	OPTIONS /1.1/users/recommendations.json?include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&include_mute_edge=1&include_can_dm=1&include_can_media_tag=1&include_ext_is_blue_verified=1&include_ext_verified_type=1&include_ext_profile_image_shape=1&skip_status=1&&pc=true&display_location=profile_accounts_sidebar&limit=3&user_id=34733701&ext=mediaStats%2ChighlightedLabel%2CvoiceInfo%2CbirdwatchPivot%2CsuperFollowMetadata%2CunmentionInfo%2CeditControl%2Carticle HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: 12d9b19cc3de56ab46a22d0d7ddad4b8876bf0ac3308c49ac48a61e1c15b7e3e date: Wed, 24 Apr 2024 05:32:41 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49992	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	591	OUT	GET /responsive-web/client-web/loader.tweetHandler.f138785a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009464 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:41 GMT Etag: "5RmldfLUZ/v9QA4PyR2GLg==+ident" expires: Thu, 24 Apr 2025 05:32:41 GMT Last-Modified: Fri, 12 Apr 2024 12:58:29 GMT perf: 7402827104 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: ab7c1c5f90d2e38360fc81f02e8a92eee3e71236bfbd9e1fd8eba601e1accb06 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 20800 x-transaction-id: 055e202bdb2f337d Content-Length: 20800 Connection: close
2024-04-24 05:32:41 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 74 77 65 65 74 48 61 6e 64 6c 65 72 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 4c 61 79 65 72 73 2d 6a 73 22 5d 2c 7b 31 32 33 38 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 46 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 65 3d 3e 69 28 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 31 65 33 29 29 2c 69 3d 65 3d 3e 7b 63 6f 6e 73 74 7b 68 6f 75 72 73 3a 74 2c 6d 69 6e 75 74 65 73 3a 6e 2c 73 65 63 6f 6e 64 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.tweetHandler","icons/IconLayers-js"],{12387:(e,t,n)=>{n.d(t,{F:()=>o});const o=e=>i(Math.round(e/1e3)),i=e=>{const{hours:t,minutes:n,second
2024-04-24 05:32:41 UTC	4417	IN	Data Raw: 72 75 63 74 69 6f 6e 73 3a 65 2e 61 70 70 6c 79 52 65 61 63 74 69 6f 6e 49 6e 73 74 72 75 63 74 69 6f 6e 73 7d 29 29 29 2c 6b 3d 64 28 29 2e 69 32 65 30 64 35 38 34 2c 50 3d 28 7b 61 70 70 6c 79 46 65 65 64 62 61 63 6b 41 63 74 69 6f 6e 3a 65 2c 61 70 70 6c 79 52 65 61 63 74 69 6f 6e 49 6e 73 74 72 75 63 74 69 6f 6e 73 3a 74 2c 62 6f 6f 6b 6d 61 72 6b 46 6f 6c 64 65 72 49 64 3a 6e 2c 63 72 65 61 74 65 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 70 73 3a 69 3d 28 30 2c 6f 2e 5a 29 28 7b 7d 29 2c 64 69 73 6d 69 73 73 61 62 6c 65 3a 63 3d 21 31 2c 64 69 73 70 6c 61 79 42 6c 6f 63 6b 65 64 3a 64 2c 65 6e 74 72 79 3a 66 2c 66 65 65 64 62 61 63 6b 49 74 65 6d 73 3a 43 2c 68 69 64 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 73 45 64 75 63 61 74 69 6f Data Ascii: ructions:e.applyReactionInstructions}))),k=d().i2e0d584,P=({applyFeedbackAction:e,applyReactionInstructions:t,bookmarkFolderId:n,createAdditionalProps:i=(0,o.Z)({}),dismissable:c=!1,displayBlocked:d,entry:f,feedbackItems:C,hideConversationControlsEducatio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49994	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	591	OUT	GET /responsive-web/client-web/loader.SignupModule.19fb08ea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1325818 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:41 GMT Etag: "2lakkQQh4r2hxtiW2ddLzQ==+ident" expires: Thu, 24 Apr 2025 05:32:41 GMT Last-Modified: Mon, 08 Apr 2024 21:02:55 GMT perf: 7469935968 Server: ECAcc (lac/55D8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: e1f2ef63d53fdd842af75fbae01178112a7f18d8011b42e79bd7503c4b712aa1 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2393 x-transaction-id: 19dbb955d8ab70c3 Content-Length: 2393 Connection: close
2024-04-24 05:32:41 UTC	2393	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 53 69 67 6e 75 70 4d 6f 64 75 6c 65 22 5d 2c 7b 38 34 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 53 69 67 6e 75 70 4d 6f 64 75 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 28 29 3d 3e 45 2c 64 65 66 61 75 6c 74 3a 28 29 3d 3e 5a 7d 29 3b 6e 28 36 38 38 36 29 3b 76 61 72 20 73 3d 6e 28 32 37 38 34 29 2c 61 3d 6e 28 32 35 36 38 36 29 2c 6f 3d 6e 28 37 33 31 38 36 29 2c 69 3d 6e 28 35 34 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.SignupModule"],{8419:(e,t,n)=>{n.r(t),n.d(t,{SignupModuleContainer:()=>E,default:()=>Z});n(6886);var s=n(2784),a=n(25686),o=n(73186),i=n(54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49995	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Birdwatch~ondemand.SettingsInternals~bundle.Explore~bundle.Topics~bundle.LiveEvent~bundle.Trend.c76bd12a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:41 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143667 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:41 GMT Etag: "pZVi7d+XjSG9e9+iTlKbFg==+ident" expires: Thu, 24 Apr 2025 05:32:41 GMT Last-Modified: Mon, 22 Apr 2024 13:31:44 GMT perf: 7402827104 Server: ECAcc (lac/55C1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: efa0bb99ad47cdb4db7cf52309adf028a3548f5ade454e641319306243af35e6 x-content-type-options: nosniff x-response-time: 7 x-ton-expected-size: 1927 x-transaction-id: 12445b68e320c5b9 Content-Length: 1927 Connection: close
2024-04-24 05:32:41 UTC	1927	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 49 6e 74 65 72 6e 61 6c 73 7e 62 75 6e 64 6c 65 2e 45 78 70 6c 6f 72 65 7e 62 75 6e 64 6c 65 2e 54 6f 70 69 63 73 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 75 6e 64 6c 65 2e 54 72 65 6e 64 22 5d 2c 7b 31 36 37 33 39 3a 28 65 2c 69 2c 74 29 3d 3e 7b 74 2e 64 28 69 2c 7b 5a 3a 28 29 3d 3e 62 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~ondemand.SettingsInternals~bundle.Explore~bundle.Topics~bundle.LiveEvent~bundle.Trend"],{16739:(e,i,t)=>{t.d(i,{Z:()=>b});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49996	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	681	OUT	GET /responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Explore~bundle.LiveEvent~bundle.Topics~bundle.Trends~loader.ExploreS.d028fc9a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:42 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 360037 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:41 GMT Etag: "sk+8bZMSkGOd0Ww8bkq1Nw==+ident" expires: Thu, 24 Apr 2025 05:32:41 GMT Last-Modified: Sat, 20 Apr 2024 01:19:53 GMT perf: 7402827104 Server: ECAcc (lac/5590) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: aa2349eaa4c7648a454c2aaec54d25bd417412dff659e28e9fcb9787a8b2877a x-content-type-options: nosniff x-response-time: 11 x-ton-expected-size: 2587 x-transaction-id: f98baa81f134ebb2 Content-Length: 2587 Connection: close
2024-04-24 05:32:42 UTC	2587	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 49 6e 74 65 72 6e 61 6c 73 7e 62 75 6e 64 6c 65 2e 45 78 70 6c 6f 72 65 7e 62 75 6e 64 6c 65 2e 4c 69 76 65 45 76 65 6e 74 7e 62 75 6e 64 6c 65 2e 54 6f 70 69 63 73 7e 62 75 6e 64 6c 65 2e 54 72 65 6e 64 73 7e 6c 6f 61 64 65 72 2e 45 78 70 6c 6f 72 65 53 22 5d 2c 7b 32 30 35 37 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 24 4e 3a 28 29 3d 3e 77 2c 47 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsInternals~bundle.Explore~bundle.LiveEvent~bundle.Topics~bundle.Trends~loader.ExploreS"],{20579:(e,t,n)=>{n.d(t,{$N:()=>w,G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49997	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	593	OUT	GET /responsive-web/client-web/loader.ExploreSidebar.fff7273a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:42 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 360038 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:42 GMT Etag: "wJ12X/+aRfH1dpQZVxkIHg==+ident" expires: Thu, 24 Apr 2025 05:32:42 GMT Last-Modified: Sat, 20 Apr 2024 01:19:52 GMT perf: 7402827104 Server: ECAcc (lac/559C) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: b7c9d0b915e03067327af0d5606484ce87ac76d51a2bfa982b73eb22de07d92a x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2487 x-transaction-id: 39b8ca45862ff35b Content-Length: 2487 Connection: close
2024-04-24 05:32:42 UTC	2487	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 6f 61 64 65 72 2e 45 78 70 6c 6f 72 65 53 69 64 65 62 61 72 22 5d 2c 7b 38 36 34 32 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 45 78 70 6c 6f 72 65 53 69 64 65 62 61 72 3a 28 29 3d 3e 76 2c 55 50 44 41 54 45 5f 49 4e 54 45 52 56 41 4c 3a 28 29 3d 3e 77 2c 64 65 66 61 75 6c 74 3a 28 29 3d 3e 53 7d 29 3b 72 28 36 38 38 36 29 3b 76 61 72 20 6e 3d 72 28 32 37 38 34 29 2c 69 3d 72 28 32 36 34 39 39 29 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.ExploreSidebar"],{86421:(e,t,r)=>{r.r(t),r.d(t,{ExploreSidebar:()=>v,UPDATE_INTERVAL:()=>w,default:()=>S});r(6886);var n=r(2784),i=r(26499)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49998	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:41 UTC	1662	OUT	GET /1.1/users/recommendations.json?include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&include_mute_edge=1&include_can_dm=1&include_can_media_tag=1&include_ext_is_blue_verified=1&include_ext_verified_type=1&include_ext_profile_image_shape=1&skip_status=1&&pc=true&display_location=profile_accounts_sidebar&limit=3&user_id=34733701&ext=mediaStats%2ChighlightedLabel%2CvoiceInfo%2CbirdwatchPivot%2CsuperFollowMetadata%2CunmentionInfo%2CeditControl%2Carticle HTTP/1.1 Host: api.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-client-transaction-id: pqXdquKkxqSAdmxsMk6tbnFxbHq+fDiixSLEROER6rNsAhy+DB6PeloNVdGWJiLDyKGQf6e0yLQ7iu2kXZzR0HQoa6NjpQ x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:42 UTC	1227	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:41 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:42 GMT content-length: 7124 x-frame-options: SAMEORIGIN x-transaction-id: b8546bed48fe8eac x-xss-protection: 0 x-rate-limit-limit: 60 x-rate-limit-reset: 1713937662 content-disposition: attachment; filename=json.json x-content-type-options: nosniff x-rate-limit-remaining: 59 x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 102 x-connection-hash: 5735a2bd82e4014465f630d70bb8b20e79e0b7e7fd042016bcc8195137ef1beb connection: close
2024-04-24 05:32:42 UTC	7124	IN	Data Raw: 5b 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 32 30 36 30 37 33 37 36 2c 22 69 64 5f 73 74 72 22 3a 22 32 30 36 30 37 33 37 36 22 2c 22 6e 61 6d 65 22 3a 22 45 76 65 72 67 72 65 65 6e 48 65 61 6c 74 68 22 2c 22 73 63 72 65 65 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 72 67 72 65 65 6e 48 6f 73 70 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 4b 69 72 6b 6c 61 6e 64 2c 20 57 41 22 2c 22 70 72 6f 66 69 6c 65 5f 6c 6f 63 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 76 65 72 67 72 65 65 6e 48 65 61 6c 74 68 20 69 73 20 79 6f 75 72 20 63 6f 6d 6d 75 6e 69 74 79 2d 6f 77 6e 65 64 20 68 6f 73 70 69 74 61 6c 2c 20 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 6d 6f 73 74 20 61 64 76 61 6e 63 65 64 2c 20 63 6f 6d 70 61 73 73 69 6f 6e 61 74 Data Ascii: [{"user":{"id":20607376,"id_str":"20607376","name":"EvergreenHealth","screen_name":"EvergreenHosp","location":"Kirkland, WA","profile_location":null,"description":"EvergreenHealth is your community-owned hospital, providing the most advanced, compassionat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50000	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	1238	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 1545 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: X1wkUxtdP115j5WVy7dUl4iIlYNHhcFbPNs9vRjoE0qV++VH9ed2g6P0rChv39s6MVdphl5hw+mYfqVqI804yETdX7QrXA x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:42 UTC	1545	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 35 37 39 30 37 25 32 43 25 32 32 70 72 6f 66 69 6c 65 5f 69 64 25 32 32 25 33 41 25 32 32 33 34 37 33 33 37 30 31 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 5f 69 6e 69 74 69 61 74 6f 72 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 65 77 5f 65 6e 74 72 69 65 73 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 65 77 5f 74 77 65 65 74 73 25 32 32 25 33 41 30 25 32 43 25 32 32 69 74 65 6d 73 25 32 32 25 33 41 25 35 42 25 37 Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936757907%2C%22profile_id%22%3A%2234733701%22%2C%22event_initiator%22%3A0%2C%22new_entries%22%3A0%2C%22new_tweets%22%3A0%2C%22items%22%3A%5B%7
2024-04-24 05:32:42 UTC	1071	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:42 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:42 GMT x-transaction: 89868515834c9744 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: 89868515834c9744 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 8 x-connection-hash: 16536db3ffcdfb786a288015d37c0bf8829e2f00b4fd9d9704af44e1620f976a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49999	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl.d52c10ea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:42 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009484 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:42 GMT Etag: "nEJCp+wnOsLjuhdk3R2NyQ==+ident" expires: Thu, 24 Apr 2025 05:32:42 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5584) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c1e181b1b2a04ff080d3f130f6047c1478d4c794238911ac90ee8d158b3f0fab x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2014 x-transaction-id: df523f230ad40119 Content-Length: 2014 Connection: close
2024-04-24 05:32:42 UTC	2014	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 62 6f 75 74 54 68 69 73 41 64 7e 62 75 6e 64 6c 65 2e 4e 6f 74 4d 79 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 22 5d 2c 7b 32 36 31 37 36 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 50 3a 28 29 3d 3e 68 7d 29 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl"],{26176:(t,e,i)=>{i.d(e,{ZP:()=>h})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50007	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	1123	OUT	GET /1.1/users/recommendations.json?include_profile_interstitial_type=1&include_blocking=1&include_blocked_by=1&include_followed_by=1&include_want_retweets=1&include_mute_edge=1&include_can_dm=1&include_can_media_tag=1&include_ext_is_blue_verified=1&include_ext_verified_type=1&include_ext_profile_image_shape=1&skip_status=1&&pc=true&display_location=profile_accounts_sidebar&limit=3&user_id=34733701&ext=mediaStats%2ChighlightedLabel%2CvoiceInfo%2CbirdwatchPivot%2CsuperFollowMetadata%2CunmentionInfo%2CeditControl%2Carticle HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:43 UTC	690	IN	HTTP/1.1 400 Bad Request date: Wed, 24 Apr 2024 05:32:42 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:43 GMT content-length: 62 x-frame-options: SAMEORIGIN x-transaction-id: fce35abcdfe70daf x-xss-protection: 0 content-disposition: attachment; filename=json.json x-content-type-options: nosniff strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 1c6b3436da2708f289bc5355baa59b196c96e80f58627e75c7e7c57d065d0fc7 connection: close
2024-04-24 05:32:43 UTC	62	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 31 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 61 74 61 2e 22 7d 5d 7d Data Ascii: {"errors":[{"code":215,"message":"Bad Authentication data."}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50005	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund.6da8048a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984574 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "RgZXxTxWPY+dlq7pj1rC7A==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/5588) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: ee5ea859344df61c869d10bb8c50f571ac22facad45dc7cbf7362fcd6d2e7144 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 4342 x-transaction-id: 74fce7967aeddc74 Content-Length: 4342 Connection: close
2024-04-24 05:32:43 UTC	4342	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 62 6f 75 74 54 68 69 73 41 64 7e 62 75 6e 64 6c 65 2e 4e 6f 74 4d 79 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 4d 75 6c 74 69 41 63 63 6f 75 6e 74 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 22 2c 22 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 44 65 74 61 69 6c 22 5d 2c 7b 32 39 32 3a 28 65 2c Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund","bundle.AudioSpaceDetail"],{292:(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50010	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	627	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:43 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:43 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: fe28ec88a2d766b8 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: bb6dee22becd9c2d1fef5add2682390b273fd183d62dbbfd724a0b92eba84d42 connection: close
2024-04-24 05:32:43 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50004	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~.f9a8ca6a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009485 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "adMrnNUE1F0W0AkNCMSHfg==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5584) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: b7328b414900e004f8c6628a98eaf4630d532577e11ba8ec0ce4e301e22257a7 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 2884 x-transaction-id: 41a934b42e12f9f0 Content-Length: 2884 Connection: close
2024-04-24 05:32:43 UTC	2884	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 41 6e 61 6c 79 74 69 63 73 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 50 65 65 6b 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 42 6f 6f 6b 6d 61 72 6b 46 6f 6c 64 65 72 73 7e 22 5d 2c 7b 31 30 33 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~"],{10364:(e,t,i)=>{i.d(t,{Z:()=>d});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50006	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:42 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com.c92212ea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1330561 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "sQnMsFoLQgUZAF8t6KCVJg==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Mon, 08 Apr 2024 19:27:04 GMT perf: 7469935968 Server: ECAcc (lac/55AB) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c44ef3f7a5852afb40b87f6bf04457b932c6c24a696e51e600fbec6d9799b033 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 3384 x-transaction-id: 7f01160d5f3ed05d Content-Length: 3384 Connection: close
2024-04-24 05:32:43 UTC	3384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 6f 6e 64 65 6d 61 6e 64 2e 43 6f 6d 22 5d 2c 7b 39 36 38 31 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6d 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com"],{96818:(e,t,r)=>{r.d(t,{Z:()=>m});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50008	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b.fb6ff94a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009485 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "VQHQvxrXUrTvOeqAcnc4+g==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/558B) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 73485add4c6842fa7a97e1104d216bd5793346816c3657ceb7be11a274b2600d x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 25606 x-transaction-id: 1b4d45db811395a7 Content-Length: 25606 Connection: close
2024-04-24 05:32:43 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 64 69 72 65 63 74 4d 65 73 73 61 67 65 73 44 61 74 61 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 22 5d 2c 7b 34 33 33 34 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 69 2c 6c 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b"],{43346:(e,t,n)=>{n.d(t,{Z:()=>i,l:
2024-04-24 05:32:43 UTC	9223	IN	Data Raw: 63 75 72 73 6f 72 73 5b 6e 5d 2c 66 65 74 63 68 53 74 61 74 75 73 3a 63 2e 5a 50 2e 4c 4f 41 44 49 4e 47 7d 7d 7d 7d 63 61 73 65 20 54 2e 46 41 49 4c 55 52 45 3a 7b 63 6f 6e 73 74 7b 74 69 6d 65 6c 69 6e 65 54 79 70 65 3a 6e 7d 3d 74 2e 6d 65 74 61 3b 72 65 74 75 72 6e 7b 2e 2e 2e 65 2c 63 75 72 73 6f 72 73 3a 7b 2e 2e 2e 65 2e 63 75 72 73 6f 72 73 2c 5b 6e 5d 3a 7b 2e 2e 2e 65 2e 63 75 72 73 6f 72 73 5b 6e 5d 2c 65 72 72 6f 72 3a 74 2e 70 61 79 6c 6f 61 64 2c 66 65 74 63 68 53 74 61 74 75 73 3a 63 2e 5a 50 2e 46 41 49 4c 45 44 7d 7d 7d 7d 63 61 73 65 20 54 2e 53 55 43 43 45 53 53 3a 7b 63 6f 6e 73 74 7b 74 69 6d 65 6c 69 6e 65 54 79 70 65 3a 6e 7d 3d 74 2e 6d 65 74 61 3b 72 65 74 75 72 6e 7b 2e 2e 2e 65 2c 63 75 72 73 6f 72 73 3a 7b 2e 2e 2e 65 2e 63 75 Data Ascii: cursors[n],fetchStatus:c.ZP.LOADING}}}}case T.FAILURE:{const{timelineType:n}=t.meta;return{...e,cursors:{...e.cursors,[n]:{...e.cursors[n],error:t.payload,fetchStatus:c.ZP.FAILED}}}}case T.SUCCESS:{const{timelineType:n}=t.meta;return{...e,cursors:{...e.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50009	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH.734be68a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009485 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "PGkiPzFvj7pH1hJO9PiyOA==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55B8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 0a50de748055f021541a6c72a41c019a4ca50e20058be248b8225dff8e5db9f3 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 5889 x-transaction-id: 80d51f724fae99cb Content-Length: 5889 Connection: close
2024-04-24 05:32:43 UTC	5889	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 57 6f 72 6b 48 22 5d 2c 7b 37 38 37 38 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 73 3a 28 29 3d 3e 6e 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH"],{78780:(e,t,i)=>{i.d(t,{s:()=>n});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50011	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti.853472ca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009485 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "BUEPlI8Guv6OEl2wdnpUxw==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/5596) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 101c6b06f87bb618c1ed3b5e49c47636767d7cbde10857d08e624a0f60faec33 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 2252 x-transaction-id: fb4942a5ab5d8b57 Content-Length: 2252 Connection: close
2024-04-24 05:32:43 UTC	2252	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 22 5d 2c 7b 33 37 33 37 38 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a 28 29 3d 3e 6e 2c 6e 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti"],{37378:(e,t,s)=>{s.d(t,{V:()=>n,n:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50012	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	619	OUT	OPTIONS /1.1/onboarding/sso_init.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:43 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: 2e34c596cc9e2f8265d79b058414e8d4ed1f970d5e4adf96af0d3ba5851904d0 date: Wed, 24 Apr 2024 05:32:43 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50013	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting.5e7f40fa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009485 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "zO9h02aX2QqjefAoLpxKIA==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55E0) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: c049957e784c75686b8b3718af34b95d677be7246176df310811435478fde813 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 4382 x-transaction-id: ff6956b86d0e6f3c Content-Length: 4382 Connection: close
2024-04-24 05:32:44 UTC	4382	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 53 74 61 72 74 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 6f 6e 64 65 6d 61 6e 64 2e 43 6f 6d 70 6f 73 65 53 63 68 65 64 75 6c 69 6e 67 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 22 5d 2c 7b 38 35 32 30 34 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 50 3a 28 29 3d 3e 6d 7d 29 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting"],{85204:(e,t,s)=>{s.d(t,{ZP:()=>m})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50014	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b.cbab74ca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009485 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:43 GMT Etag: "b6YQ3Wnm5nlhfrbGbMFhGQ==+ident" expires: Thu, 24 Apr 2025 05:32:43 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55E5) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 95e6e766234008122aac5f5424078bfd7845eef4a034b0510b89b5b10004bdb1 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1549 x-transaction-id: 4271c58ea0a4ee2c Content-Length: 1549 Connection: close
2024-04-24 05:32:44 UTC	1549	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 42 72 61 6e 64 65 64 4c 69 6b 65 73 50 72 65 76 69 65 77 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 62 22 5d 2c 7b 33 34 37 38 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 62 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b"],{34788:(e,t,n)=>{n.d(t,{Z:()=>b});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50015	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b.cd125e8a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984575 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "d5iVVKLYPf45stpFxPU/WA==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55DE) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 56b9d984cecbc9f0ade2a6397bf8d2a2c29ee3c9fa55b0f23387b0cba78cdce1 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 10968 x-transaction-id: 1205ead3bd27c52f Content-Length: 10968 Connection: close
2024-04-24 05:32:44 UTC	10968	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 56 65 72 69 66 69 63 61 74 69 6f 6e 7e 62 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 50 61 69 6e 74 62 72 75 73 68 53 74 72 6f 6b 65 2d 6a 73 22 5d 2c 7b 38 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b","icons/IconPaintbrushStroke-js"],{8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50016	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.Typeahead~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.JobSearch~bundle.Ocf~bun.a3a90dba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "+phminX68h6z9LdpynIlbA==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55D8) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 33aa4940632471e58f8f82191ca04e191221494bfe88f9a3aab01e6686c94c0a x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 34875 x-transaction-id: 6b18779cb509e69d Content-Length: 34875 Connection: close
2024-04-24 05:32:44 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 54 79 70 65 61 68 65 61 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 57 6f 72 6b 48 69 73 74 6f 72 79 7e 62 75 6e 64 6c 65 2e 44 65 6c 65 67 61 74 65 7e 62 75 6e 64 6c 65 2e 4a 6f 62 53 65 61 72 63 68 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 22 5d 2c 7b 33 31 30 31 30 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~bundle.Communities~bundle.WorkHistory~bundle.Delegate~bundle.JobSearch~bundle.Ocf~bun"],{31010:(e,t,s)=>{s.d(t,{Z:()=>n});
2024-04-24 05:32:44 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-04-24 05:32:44 UTC	16383	IN	Data Raw: 76 65 43 68 69 6c 64 52 65 66 3d 74 68 69 73 2e 5f 69 6e 70 75 74 52 65 66 2c 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 69 6e 70 75 74 48 61 73 46 6f 63 75 73 3a 21 30 2c 73 68 6f 77 54 79 70 65 61 68 65 61 64 44 72 6f 70 64 6f 77 6e 3a 21 30 7d 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 50 6f 73 69 74 69 6f 6e 28 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 46 6f 63 75 73 26 26 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 46 6f 63 75 73 28 29 7d 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 52 69 63 68 54 65 78 74 49 6e 70 75 74 52 65 74 75 72 6e 3d 65 3d 3e 65 2e 73 68 69 66 74 4b 65 79 3f 22 6e 6f 74 2d 68 61 6e 64 6c 65 64 22 3a 28 74 68 69 73 2e 5f 68 61 73 46 6f 63 75 73 65 64 49 74 65 6d 28 29 7c 7c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 46 6f 72 6d 53 75 62 6d Data Ascii: veChildRef=this._inputRef,this.setState({inputHasFocus:!0,showTypeaheadDropdown:!0}),this._updatePosition(),this.props.onFocus&&this.props.onFocus()},this._handleRichTextInputReturn=e=>e.shiftKey?"not-handled":(this._hasFocusedItem()\|\|this._handleFormSubm
2024-04-24 05:32:44 UTC	2108	IN	Data Raw: 72 3a 65 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 37 30 30 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 32 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 30 7d 2c 6e 6f 52 65 73 75 6c 74 3a 7b 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 3a 65 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 6d 65 6e 73 69 6f 6e 73 2e 67 75 74 74 65 72 48 6f 72 69 7a 6f 6e 74 61 6c 2c 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 7d 2c 69 74 65 6d 50 61 64 64 69 6e 67 3a 7b 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 3a 65 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 6d 65 6e 73 69 6f 6e 73 2e 67 75 74 74 65 72 48 6f 72 69 7a 6f 6e 74 61 6c 2c 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 65 2e 63 6f 6d Data Ascii: r:e.colors.gray700,paddingStart:e.spaces.space12,flexShrink:0},noResult:{paddingHorizontal:e.componentDimensions.gutterHorizontal,paddingVertical:e.spaces.space16},itemPadding:{paddingHorizontal:e.componentDimensions.gutterHorizontal,paddingVertical:e.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50017	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle.1582bdea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	754	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "EarHzaPcccpNG34jfQHI8Q==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55DD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 048fcd39b21a62ae7324a0a60f5f2e32cb024ca601fbdec762d242bdb6471496 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 15783 x-transaction-id: a883a614e8dfeda6 Content-Length: 15783 Connection: close
2024-04-24 05:32:44 UTC	15648	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 44 72 61 67 67 61 62 6c 65 2d 6a 73 22 5d 2c 7b 32 33 35 36 34 3a 28 65 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle","icons/IconDraggable-js"],{23564:(e
2024-04-24 05:32:44 UTC	135	IN	Data Raw: 6c 69 65 6e 74 2d 77 65 62 2f 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 4d 65 64 69 61 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 31 35 38 32 62 64 65 61 2e 6a 73 2e 6d 61 70 Data Ascii: lient-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.ComposeMedia~bundle.SettingsProfile~bundle.Ocf~bundle.1582bdea.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50018	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:43 UTC	1222	OUT	POST /1.1/onboarding/sso_init.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-client-transaction-id: EBNrHFQScBI2wNrahPgb2MfH2swIyo4Uc5Ry8lenXAXatKoIuqg5zOy742cgkJR1fhkmyREf+7axwDaBzr48kSDGgNJ3Ew x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:43 UTC	20	OUT	Data Raw: 7b 22 70 72 6f 76 69 64 65 72 22 3a 22 61 70 70 6c 65 22 7d Data Ascii: {"provider":"apple"}
2024-04-24 05:32:44 UTC	1140	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:43 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:44 GMT content-length: 55 x-frame-options: SAMEORIGIN x-transaction-id: 163b4b500e0a4ce8 x-xss-protection: 0 content-disposition: attachment; filename=json.json x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 13 x-connection-hash: ad4a93b1d3dc691b8eacb5b3f21ff49aa1662c8a05984eea25d0f5b77c80e2d7 connection: close
2024-04-24 05:32:44 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 65 22 3a 22 7a 57 62 66 62 4e 76 62 77 73 75 32 72 38 70 62 66 42 7a 67 49 6f 68 44 58 65 62 43 4b 4b 31 4f 5f 75 78 33 46 73 74 56 47 4f 6d 22 7d Data Ascii: {"state":"zWbfbNvbwsu2r8pbfBzgIohDXebCKK1O_ux3FstVGOm"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50019	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	681	OUT	GET /responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil.14898fca.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "dqjwyuIfni4XBDihYtg4ow==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A7) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: ff1374cf581fb4fd1293f9206647c5ce55a8a49d406cc63f8fc6545c6a3843f8 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 3623 x-transaction-id: d63c4d1a151a81ad Content-Length: 3623 Connection: close
2024-04-24 05:32:44 UTC	3623	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6c 6f 61 64 65 72 2e 44 4d 44 72 61 77 65 72 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 41 63 63 6f 75 6e 74 56 65 72 69 66 69 63 61 74 69 6f 6e 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 50 68 6f 74 6f 53 74 72 6f 6b 65 2d 6a 73 22 5d 2c 7b 32 35 34 34 30 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil","icons/IconPhotoStroke-js"],{25440:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50020	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.AudioSpaceStart~ondemand.ComposeScheduling~bundle.WorkHistory~bundle.Ocf~bundle.AdvancedSearch~.ab591fda.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "Ci8fXfmA8or4/MbO+YOv2Q==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55E2) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 1401827a727efdf95131c734ad6349d92ff6e867567d9129d8a2b600c0e79482 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 6906 x-transaction-id: 14b7c9098f6e38ec Content-Length: 6906 Connection: close
2024-04-24 05:32:44 UTC	6906	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 41 75 64 69 6f 53 70 61 63 65 53 74 61 72 74 7e 6f 6e 64 65 6d 61 6e 64 2e 43 6f 6d 70 6f 73 65 53 63 68 65 64 75 6c 69 6e 67 7e 62 75 6e 64 6c 65 2e 57 6f 72 6b 48 69 73 74 6f 72 79 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 41 64 76 61 6e 63 65 64 53 65 61 72 63 68 7e 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 43 68 65 76 72 6f 6e 44 6f 77 6e 2d 6a 73 22 5d 2c 7b 33 34 35 30 39 3a Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceStart~ondemand.ComposeScheduling~bundle.WorkHistory~bundle.Ocf~bundle.AdvancedSearch~","icons/IconChevronDown-js"],{34509:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50021	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	681	OUT	GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.SettingsProfile~bundle.DirectMessages~bundle.Ocf~bundle.UserLists~loader.8115426a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:44 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "+jKcxqNaCDY42HxqqmXpAw==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559F) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a0721146057a3595481b09ee80d3f93032c5dfac718be31f212e7ff2bf3c21e5 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 6267 x-transaction-id: c6d15c3dce7c05e9 Content-Length: 6267 Connection: close
2024-04-24 05:32:44 UTC	6267	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 44 69 72 65 63 74 4d 65 73 73 61 67 65 73 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 55 73 65 72 4c 69 73 74 73 7e 6c 6f 61 64 65 72 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 43 61 6d 65 72 61 50 6c 75 73 53 74 72 6f 6b 65 2d 6a 73 22 2c 22 69 63 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.SettingsProfile~bundle.DirectMessages~bundle.Ocf~bundle.UserLists~loader","icons/IconCameraPlusStroke-js","ic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50025	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	630	OUT	GET /1.1/onboarding/sso_init.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:45 UTC	446	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:44 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 56 x-transaction-id: fce8f8d5a0924618 strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: ebae02f70d472dcb2c73f079b313c5ea974efd963699a10cf9305f6f71b1f659 connection: close
2024-04-24 05:32:45 UTC	56	IN	GET is not allowed on path /1.1/onboarding/sso_init.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50022	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	671	OUT	GET /responsive-web/client-web/shared~bundle.Communities~bundle.TwitterArticles~bundle.SettingsProfile~bundle.Ocf~bundle.UserLists.93afaf8a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "eectn65bSGugryalIXCuUg==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55AE) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: b234737c92d1f215843b01f8439898f09a03d78010f60f8d44966cc0c0dd3a51 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 2641 x-transaction-id: 3eac272b3629dc93 Content-Length: 2641 Connection: close
2024-04-24 05:32:45 UTC	2641	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 6d 75 6e 69 74 69 65 73 7e 62 75 6e 64 6c 65 2e 54 77 69 74 74 65 72 41 72 74 69 63 6c 65 73 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 55 73 65 72 4c 69 73 74 73 22 5d 2c 7b 34 38 39 37 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 5a 7d 29 3b 76 61 72 20 73 3d 69 28 32 37 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.TwitterArticles~bundle.SettingsProfile~bundle.Ocf~bundle.UserLists"],{48974:(e,t,i)=>{i.d(t,{Z:()=>Z});var s=i(27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50023	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	658	OUT	GET /responsive-web/client-web/shared~bundle.Birdwatch~bundle.Explore~bundle.GenericTimeline~bundle.Ocf~bundle.Topics.26e5bdba.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009486 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:44 GMT Etag: "7o6G/W9QbROQP9S+ekAxDg==+ident" expires: Thu, 24 Apr 2025 05:32:44 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A0) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: a5ddd055f1ac795b7f415aed20af3da9089d556b069fa29dac65ff9c7d691557 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 1736 x-transaction-id: 77b02935bf227c64 Content-Length: 1736 Connection: close
2024-04-24 05:32:45 UTC	1736	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 42 69 72 64 77 61 74 63 68 7e 62 75 6e 64 6c 65 2e 45 78 70 6c 6f 72 65 7e 62 75 6e 64 6c 65 2e 47 65 6e 65 72 69 63 54 69 6d 65 6c 69 6e 65 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 54 6f 70 69 63 73 22 5d 2c 7b 36 33 31 39 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 74 2e 64 28 6e 2c 7b 53 7a 3a 28 29 3d 3e 69 7d 29 3b 63 6f 6e 73 74 20 69 3d 65 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 28 4a 53 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~bundle.Explore~bundle.GenericTimeline~bundle.Ocf~bundle.Topics"],{6319:(e,n,t)=>{t.d(n,{Sz:()=>i});const i=e=>{const n=(JS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50024	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	679	OUT	GET /responsive-web/client-web/shared~bundle.Ocf~bundle.ReaderMode~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer.5947c02a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009487 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "eZJVgZYGp44uEgYbxOnQ7g==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55B1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 9df31324666c84e79a67c0d1c0bef0d9793b88ad6f1c4cbe3fe79c1da73df86e x-content-type-options: nosniff x-response-time: 12 x-ton-expected-size: 1518 x-transaction-id: 38fef9f64ec8e242 Content-Length: 1518 Connection: close
2024-04-24 05:32:45 UTC	1518	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 52 65 61 64 65 72 4d 6f 64 65 7e 62 75 6e 64 6c 65 2e 43 6f 6e 76 65 72 73 61 74 69 6f 6e 7e 62 75 6e 64 6c 65 2e 54 77 65 65 74 4d 65 64 69 61 44 65 74 61 69 6c 7e 62 75 6e 64 6c 65 2e 49 6d 6d 65 72 73 69 76 65 4d 65 64 69 61 56 69 65 77 65 72 22 5d 2c 7b 36 37 30 32 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 63 7d 29 3b 76 61 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.ReaderMode~bundle.Conversation~bundle.TweetMediaDetail~bundle.ImmersiveMediaViewer"],{67026:(e,t,n)=>{n.d(t,{Z:()=>c});va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50026	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:44 UTC	627	OUT	GET /responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.b2a7cfea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009487 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "8/RERIz5KgEdTRpFP6Qk2w==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/559F) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: db53c8708af86967236989f78b653c38f9504504e236760a82173ab61de08074 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 3358 x-transaction-id: 7e6604c66b7498bb Content-Length: 3358 Connection: close
2024-04-24 05:32:45 UTC	3358	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 43 6f 6d 70 6f 73 65 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 52 69 63 68 54 65 78 74 43 6f 6d 70 6f 73 65 22 5d 2c 7b 34 38 37 33 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 78 7d 29 3b 72 28 36 38 38 36 29 3b 76 61 72 20 6f 3d 72 28 32 37 38 34 29 2c 6e 3d 72 28 32 35 36 38 36 29 2c 61 3d 72 28 34 35 31 38 34 29 2c 6c 3d 72 2e 6e 28 61 29 2c 63 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose"],{48734:(e,t,r)=>{r.d(t,{Z:()=>x});r(6886);var o=r(2784),n=r(25686),a=r(45184),l=r.n(a),c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50027	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:45 UTC	620	OUT	GET /responsive-web/client-web/shared~bundle.Settings~bundle.Display~bundle.Ocf.ea5bad3a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 984576 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "aIOQKHwe0sB/nYDCmRhdYw==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Fri, 12 Apr 2024 19:46:51 GMT perf: 7469935968 Server: ECAcc (lac/55C0) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 4fe75bcc38ff6e6f16d5f93414deb7630308d46c007862ee344eaf6cc04d9d47 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 2975 x-transaction-id: 77e9cbbf0e45301d Content-Length: 2975 Connection: close
2024-04-24 05:32:45 UTC	2975	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 7e 62 75 6e 64 6c 65 2e 44 69 73 70 6c 61 79 7e 62 75 6e 64 6c 65 2e 4f 63 66 22 2c 22 6c 6f 61 64 65 72 2e 41 75 64 69 6f 4f 6e 6c 79 56 69 64 65 6f 50 6c 61 79 65 72 22 5d 2c 7b 35 31 35 30 37 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 24 36 3a 28 29 3d 3e 6f 2c 65 59 3a 28 29 3d 3e 61 2c 7a 74 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6e 3d 69 28 32 37 38 34 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Settings~bundle.Display~bundle.Ocf","loader.AudioOnlyVideoPlayer"],{51507:(e,t,i)=>{i.d(t,{$6:()=>o,eY:()=>a,zt:()=>s});var n=i(2784

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50028	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:45 UTC	599	OUT	GET /responsive-web/client-web/shared~bundle.Ocf~bundle.TV.3370ea7a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	753	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 2457454 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "5MfgZ4X6aNpfVYzJIpde8g==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Tue, 26 Mar 2024 18:31:23 GMT perf: 7469935968 Server: ECAcc (lac/55B9) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 37e05b54a0b29d1e5be7b12e4044c7d12ed66d2c66f8c398daf3aa27f5d60c94 x-content-type-options: nosniff x-response-time: 8 x-ton-expected-size: 19401 x-transaction-id: e33bb68aa2f316c5 Content-Length: 19401 Connection: close
2024-04-24 05:32:45 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 4f 63 66 7e 62 75 6e 64 6c 65 2e 54 56 22 5d 2c 7b 33 39 35 31 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 38 37 36 31 29 28 65 28 33 37 37 37 32 29 2c 22 44 61 74 61 56 69 65 77 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 38 39 36 31 32 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 35 32 31 31 38 29 2c 6f 3d 65 28 39 36 39 30 39 29 2c 61 3d 65 28 39 38 31 33 38 29 2c 75 3d 65 28 34 31 37 34 29 2c Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Ocf~bundle.TV"],{39515:(t,r,e)=>{var n=e(38761)(e(37772),"DataView");t.exports=n},89612:(t,r,e)=>{var n=e(52118),o=e(96909),a=e(98138),u=e(4174),
2024-04-24 05:32:45 UTC	3018	IN	Data Raw: 6e 3b 72 65 74 75 72 6e 2d 31 7d 7d 2c 35 34 34 35 32 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 37 37 37 37 37 29 2c 6f 3d 2f 5b 5e 2e 5b 5c 5d 5d 2b 7c 5c 5b 28 3f 3a 28 2d 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 7c 28 5b 22 27 5d 29 28 28 3f 3a 28 3f 21 5c 32 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 29 5c 32 29 5c 5d 7c 28 3f 3d 28 3f 3a 5c 2e 7c 5c 5b 5c 5d 29 28 3f 3a 5c 2e 7c 5c 5b 5c 5d 7c 24 29 29 2f 67 2c 61 3d 2f 5c 5c 28 5c 5c 29 3f 2f 67 2c 75 3d 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 34 36 3d 3d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 26 26 72 2e 70 75 73 68 28 22 22 29 2c 74 2e 72 65 70 6c 61 63 65 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 6f 29 7b Data Ascii: n;return-1}},54452:(t,r,e)=>{var n=e(77777),o=/[^.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)*?)\2)\]\|(?=(?:\.\|\[\])(?:\.\|\[\]\|$))/g,a=/\$\$?/g,u=n((function(t){var r=[];return 46===t.charCodeAt(0)&&r.push(""),t.replace(o,(function(t,e,n,o){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50030	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:45 UTC	616	OUT	GET /responsive-web/client-web/shared~ondemand.SettingsInternals~bundle.Ocf.7fde78fa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	750	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 445541 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "ID+DGBwp6+A4U4IdiZJ8KA==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Fri, 19 Apr 2024 01:31:34 GMT perf: 7402827104 Server: ECAcc (lac/55CC) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 3e7531f4b11155253e13709f5eb260cb6a9861a4bae6c811cab7989924783e85 x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 8658 x-transaction-id: 5c83ebfa24648dc8 Content-Length: 8658 Connection: close
2024-04-24 05:32:45 UTC	8658	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 49 6e 74 65 72 6e 61 6c 73 7e 62 75 6e 64 6c 65 2e 4f 63 66 22 5d 2c 7b 37 38 35 32 37 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 72 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 65 28 33 36 37 32 38 29 2c 65 28 36 38 38 36 29 3b 76 61 72 20 6e 3d 65 28 36 38 39 39 29 2c 73 3d 65 28 36 35 31 38 38 29 2c 69 3d 65 28 34 34 31 37 31 29 2c 61 3d 65 2e 6e 28 69 29 2c 6f 3d 65 Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsInternals~bundle.Ocf"],{78527:(t,r,e)=>{"use strict";e.d(r,{Z:()=>l});e(36728),e(6886);var n=e(6899),s=e(65188),i=e(44171),a=e.n(i),o=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50029	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:45 UTC	612	OUT	GET /responsive-web/client-web/shared~bundle.SettingsProfile~bundle.Ocf.148df1fa.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	752	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009487 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "j4uTBtTPjyDqnFJE7iEkJg==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55DF) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 4a1edc7fc79df0bf648ab5397761a415e1a5898d4ddce39b29208237dcc9a83d x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 4158 x-transaction-id: 0333b44eeba5ca9e Content-Length: 4158 Connection: close
2024-04-24 05:32:45 UTC	4158	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 62 75 6e 64 6c 65 2e 53 65 74 74 69 6e 67 73 50 72 6f 66 69 6c 65 7e 62 75 6e 64 6c 65 2e 4f 63 66 22 5d 2c 7b 33 33 36 32 36 3a 28 65 2c 74 2c 45 29 3d 3e 7b 45 2e 64 28 74 2c 7b 43 36 3a 28 29 3d 3e 66 2c 47 4a 3a 28 29 3d 3e 5a 2c 48 52 3a 28 29 3d 3e 43 2c 49 6c 3a 28 29 3d 3e 77 2c 4e 4a 3a 28 29 3d 3e 44 2c 4f 47 3a 28 29 3d 3e 51 2c 54 5f 3a 28 29 3d 3e 76 2c 58 77 3a 28 29 3d 3e 62 2c 59 73 3a 28 29 3d 3e Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.SettingsProfile~bundle.Ocf"],{33626:(e,t,E)=>{E.d(t,{C6:()=>f,GJ:()=>Z,HR:()=>C,Il:()=>w,NJ:()=>D,OG:()=>Q,T_:()=>v,Xw:()=>b,Ys:()=>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50031	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:45 UTC	619	OUT	GET /responsive-web/client-web/shared~ondemand.SettingsSuperFollows~bundle.Ocf.85a878ea.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	751	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 1009487 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "3di/kciAAbMX8ZSjpRdvwA==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Fri, 12 Apr 2024 12:58:30 GMT perf: 7402827104 Server: ECAcc (lac/55A3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 00d9ff36e8ac2655f6b38376453faba6c6143b2b09e9dc5e07d3086d2aca597e x-content-type-options: nosniff x-response-time: 9 x-ton-expected-size: 3458 x-transaction-id: 45035bf5c0d96f22 Content-Length: 3458 Connection: close
2024-04-24 05:32:45 UTC	3458	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 61 72 65 64 7e 6f 6e 64 65 6d 61 6e 64 2e 53 65 74 74 69 6e 67 73 53 75 70 65 72 46 6f 6c 6c 6f 77 73 7e 62 75 6e 64 6c 65 2e 4f 63 66 22 5d 2c 7b 37 32 39 34 38 3a 28 65 2c 72 2c 6f 29 3d 3e 7b 6f 2e 64 28 72 2c 7b 5a 3a 28 29 3d 3e 43 7d 29 3b 76 61 72 20 61 3d 6f 28 37 38 39 36 29 2c 74 3d 6f 28 32 37 38 34 29 2c 6c 3d 6f 28 32 34 39 32 31 29 2c 69 3d 6f 28 32 35 36 38 36 29 2c 63 3d 6f 28 37 30 36 36 29 2c 73 3d 6f 28 31 32 Data Ascii: "use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.SettingsSuperFollows~bundle.Ocf"],{72948:(e,r,o)=>{o.d(r,{Z:()=>C});var a=o(7896),t=o(2784),l=o(24921),i=o(25686),c=o(7066),s=o(12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50032	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:45 UTC	582	OUT	GET /responsive-web/client-web/bundle.Ocf.955a2e7a.js HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://twitter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:45 UTC	775	IN	HTTP/1.1 200 OK access-control-allow-origin: * Age: 143692 Content-Type: application/javascript; charset=utf-8 Date: Wed, 24 Apr 2024 05:32:45 GMT Etag: "QAbwuYmooTs7AeNEPKSBcw==+ident" expires: Thu, 24 Apr 2025 05:32:45 GMT Last-Modified: Mon, 22 Apr 2024 13:31:43 GMT perf: 7402827104 Server: ECAcc (lac/55D6) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com Vary: Accept-Encoding X-Cache: HIT x-connection-hash: 52645360a01353db65d5970ded8fd00109a46182fbdaf8f5e1151e16726602e7 x-content-type-options: nosniff X-EC-BBR-Enable: 1 x-response-time: 17 x-ton-expected-size: 231849 x-transaction-id: d3c6254dd8ff2721 Content-Length: 231849 Connection: close
2024-04-24 05:32:45 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 74 77 69 74 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 75 6e 64 6c 65 2e 4f 63 66 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 41 72 72 6f 77 44 6f 77 6e 2d 6a 73 22 2c 22 69 63 6f 6e 73 2f 49 63 6f 6e 4d 69 6e 75 73 2d 6a 73 22 5d 2c 7b 34 39 33 36 34 3a 28 65 2c 74 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6e 3d 73 28 32 37 38 34 29 2c 61 3d 73 28 32 35 36 38 36 29 2c 69 3d 73 28 36 35 35 32 36 29 3b 63 6f 6e 73 74 20 6f 3d 7b 74 68 72 65 73 68 6f 6c Data Ascii: (self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.Ocf","icons/IconArrowDown-js","icons/IconMinus-js"],{49364:(e,t,s)=>{"use strict";s.d(t,{Z:()=>r});var n=s(2784),a=s(25686),i=s(65526);const o={threshol
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 61 63 65 32 30 7d 2c 73 65 63 6f 6e 64 61 72 79 54 65 78 74 52 69 67 68 74 41 6c 69 67 6e 65 64 42 75 74 74 6f 6e 3a 7b 66 6c 65 78 42 61 73 69 73 3a 30 2c 66 6c 65 78 47 72 6f 77 3a 31 7d 2c 73 75 62 48 65 61 64 65 72 52 69 67 68 74 41 6c 69 67 6e 65 64 42 75 74 74 6f 6e 3a 7b 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 72 6f 77 22 2c 66 6c 65 78 57 72 61 70 3a 22 77 72 61 70 22 7d 2c 68 65 61 64 69 6e 67 43 6f 6e 74 61 69 6e 65 72 3a 7b 6d 61 72 67 69 6e 56 65 72 74 69 63 61 6c 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 30 7d 2c 73 75 62 48 65 61 64 65 72 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 38 7d 7d 29 29 29 2c 6f 65 3d 65 3d 3e 7b 76 61 72 20 74 2c 73 3b 63 6f 6e 73 74 7b 68 65 61 64 65 72 3a 6f 2c 6f 6e Data Ascii: ace20},secondaryTextRightAlignedButton:{flexBasis:0,flexGrow:1},subHeaderRightAlignedButton:{flexDirection:"row",flexWrap:"wrap"},headingContainer:{marginVertical:e.spaces.space20},subHeader:{marginTop:e.spaces.space8}}))),oe=e=>{var t,s;const{header:o,on
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 68 3a 22 69 6e 69 74 69 61 6c 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 30 7d 2c 66 75 6c 6c 57 69 64 74 68 3a 7b 6d 61 72 67 69 6e 48 6f 72 69 7a 6f 6e 74 61 6c 3a 30 2c 68 65 69 67 68 74 3a 22 69 6e 69 74 69 61 6c 22 2c 77 69 64 74 68 3a 22 69 6e 69 74 69 61 6c 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 30 7d 2c 6d 6f 64 61 6c 46 75 6c 6c 42 6c 65 65 64 54 6f 70 3a 7b 6d 61 72 67 69 6e 48 6f 72 69 7a 6f 6e 74 61 6c 3a 60 2d 24 7b 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 38 30 7d 60 2c 68 65 69 67 68 74 3a 22 69 6e 69 74 69 61 6c 22 2c 77 69 64 74 68 3a 22 69 6e 69 74 69 61 6c 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 Data Ascii: h:"initial",marginBottom:e.spaces.space20},fullWidth:{marginHorizontal:0,height:"initial",width:"initial",marginBottom:e.spaces.space20},modalFullBleedTop:{marginHorizontal:`-${e.spaces.space80}`,height:"initial",width:"initial",marginBottom:e.spaces.spac
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 7d 2c 63 75 72 73 6f 72 3a 7b 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 7d 2c 74 69 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 32 7d 2c 72 61 64 69 6f 52 6f 77 3a 7b 70 61 64 64 69 6e 67 53 74 61 72 74 3a 30 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 2c 70 61 64 64 69 6e 67 45 6e 64 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 7d 7d 29 29 29 3b 76 61 72 20 4f 74 3d 73 28 32 34 39 34 39 29 2c 56 74 3d 73 28 33 39 35 38 31 29 2c 52 74 3d 73 28 36 37 39 33 35 29 2c 4d 74 3d 73 28 39 39 36 32 39 29 2c 55 74 3d 73 28 31 36 36 35 37 29 3b 63 6f 6e 73 74 20 7a 74 3d 65 3d 3e 28 74 2c Data Ascii: e.spaces.space16},cursor:{cursor:"pointer"},tileContainer:{marginTop:e.spaces.space12},radioRow:{paddingStart:0,paddingBottom:e.spaces.space16,paddingEnd:e.spaces.space16}})));var Ot=s(24949),Vt=s(39581),Rt=s(67935),Mt=s(99629),Ut=s(16657);const zt=e=>(t,
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 3e 28 30 2c 48 73 2e 5a 29 28 74 2c 28 28 74 2c 73 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 5b 73 5d 7c 7c 7b 7d 3b 72 65 74 75 72 6e 7b 2e 2e 2e 6e 2c 76 61 6c 69 64 3a 21 21 6e 2e 76 61 6c 69 64 7c 7c 74 3d 3d 3d 46 2e 5a 50 2e 46 41 49 4c 45 44 2c 69 73 4c 6f 61 64 69 6e 67 3a 74 3d 3d 3d 46 2e 5a 50 2e 4c 4f 41 44 49 4e 47 7d 7d 29 29 29 29 2c 57 73 2e 5a 2e 72 65 67 69 73 74 65 72 28 6e 29 7d 63 6f 6e 73 74 20 24 73 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 5c 5c 2d 2b 5c 5c 2e 21 5c 5c 26 5d 2b 40 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 5c 2d 5f 5d 2b 5c 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 36 33 7d 24 22 29 2c 4b 73 3d 70 28 29 2e 68 63 37 32 65 31 66 63 2c 59 73 3d 70 28 29 2e 62 63 30 61 64 38 38 61 2c 51 Data Ascii: >(0,Hs.Z)(t,((t,s)=>{const n=e[s]\|\|{};return{...n,valid:!!n.valid\|\|t===F.ZP.FAILED,isLoading:t===F.ZP.LOADING}})))),Ws.Z.register(n)}const $s=new RegExp("^[a-zA-Z0-9_\\-+\\.!\\&]+@(?:[a-zA-Z0-9\\-_]+\\.)+[a-zA-Z]{2,63}$"),Ks=p().hc72e1fc,Ys=p().bc0ad88a,Q
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 65 6e 64 65 72 53 65 74 74 69 6e 67 73 28 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 65 72 72 6f 72 44 69 61 6c 6f 67 29 7d 7d 63 6f 6e 73 74 20 53 6e 3d 64 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 28 28 65 3d 3e 28 7b 74 65 78 74 46 69 65 6c 64 41 72 65 61 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 32 30 7d 2c 65 6d 61 69 6c 54 65 78 74 46 69 65 6c 64 3a 7b 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 3a 30 2c 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 65 2e 73 70 61 63 65 73 2e 73 70 61 63 65 31 36 7d 7d 29 29 29 3b 73 28 32 31 35 31 35 29 3b 76 61 72 20 5a 6e 3d 73 28 32 33 31 36 32 29 2c 54 6e 3d 73 28 31 32 31 37 31 29 3b 63 6f 6e 73 74 20 4e 6e 3d 28 30 2c 41 65 2e 5a 29 28 29 2e 70 72 6f 70 73 46 72 6f Data Ascii: enderSettings(),this.props.errorDialog)}}const Sn=d.default.create((e=>({textFieldArea:{marginTop:e.spaces.space20},emailTextField:{paddingHorizontal:0,paddingVertical:e.spaces.space16}})));s(21515);var Zn=s(23162),Tn=s(12171);const Nn=(0,Ae.Z)().propsFro
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 6e 2e 63 61 6c 6c 62 61 63 6b 4e 61 6d 65 2c 6f 3d 6e 2e 73 63 72 69 70 74 49 64 3b 69 66 28 61 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 5b 61 5d 26 26 28 69 61 5b 74 5d 3d 7b 6c 6f 61 64 65 64 3a 21 30 2c 6f 62 73 65 72 76 65 72 73 3a 7b 7d 7d 29 2c 69 61 5b 74 5d 29 7b 76 61 72 20 72 3d 69 61 5b 74 5d 3b 72 65 74 75 72 6e 20 72 26 26 28 72 2e 6c 6f 61 64 65 64 7c 7c 72 2e 65 72 72 6f 72 65 64 29 3f 76 6f 69 64 20 74 68 69 73 2e 61 73 79 6e 63 53 63 72 69 70 74 4c 6f 61 64 65 72 48 61 6e 64 6c 65 4c 6f 61 64 28 72 29 3a 76 6f 69 64 28 72 2e 6f 62 73 65 72 76 65 72 73 5b 73 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 73 79 6e 63 53 63 72 69 70 74 4c 6f 61 64 65 72 48 61 6e 64 6c 65 4c 6f 61 64 28 74 29 7d 29 7d 76 61 Data Ascii: n.callbackName,o=n.scriptId;if(a&&void 0!==window[a]&&(ia[t]={loaded:!0,observers:{}}),ia[t]){var r=ia[t];return r&&(r.loaded\|\|r.errored)?void this.asyncScriptLoaderHandleLoad(r):void(r.observers[s]=function(t){return e.asyncScriptLoaderHandleLoad(t)})}va
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 28 30 2c 4f 74 2e 50 31 29 28 75 69 28 29 2c 28 65 3d 3e 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 6f 70 69 63 29 29 29 29 2c 69 6e 69 74 69 61 6c 53 65 6c 65 63 74 65 64 49 6e 74 65 72 65 73 74 49 64 73 3a 70 69 7d 29 29 29 2c 6d 69 3d 22 6f 63 66 49 6e 74 65 72 65 73 74 50 69 63 6b 65 72 4e 65 78 74 4c 69 6e 6b 22 2c 5f 69 3d 22 6f 63 66 49 6e 74 65 72 65 73 74 50 69 63 6b 65 72 53 6b 69 70 4c 69 6e 6b 22 2c 67 69 3d 5b 50 2e 6d 79 2e 54 6f 70 69 63 73 5d 3b 63 6c 61 73 73 20 62 69 20 65 78 74 65 6e 64 73 20 61 2e 43 6f 6d 70 6f 6e 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 5f 6d 61 79 62 65 52 65 6e 64 65 72 43 75 73 74 6f 6d 49 6e 74 65 72 65 73 74 73 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 73 75 62 74 Data Ascii: (0,Ot.P1)(ui(),(e=>e.map((e=>e.topic)))),initialSelectedInterestIds:pi}))),mi="ocfInterestPickerNextLink",_i="ocfInterestPickerSkipLink",gi=[P.my.Topics];class bi extends a.Component{constructor(e){super(e),this._maybeRenderCustomInterests=()=>{const{subt
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 45 6c 65 6d 65 6e 74 28 69 2e 5a 2c 7b 61 63 63 65 73 73 69 62 69 6c 69 74 79 52 6f 6c 65 3a 22 6c 61 62 65 6c 22 2c 73 74 79 6c 65 3a 59 2e 6f 70 74 69 6f 6e 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 5a 2c 7b 73 74 79 6c 65 3a 59 2e 63 68 65 63 6b 62 6f 78 54 65 78 74 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 5a 50 2c 6e 75 6c 6c 2c 6c 2e 64 69 73 63 6f 76 65 72 61 62 6c 65 5f 62 79 5f 70 68 6f 6e 65 5f 6c 61 62 65 6c 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 4f 2e 5a 2c 28 30 2c 6e 2e 5a 29 28 7b 7d 2c 6c 2e 64 69 73 63 6f 76 65 72 61 62 6c 65 5f 62 79 5f 70 68 6f 6e 65 5f 64 65 74 61 69 6c 5f 74 65 78 74 2c 7b 63 6f 6c 6f 72 3a 22 67 72 61 79 37 30 30 22 2c 6f 6e 4e 61 76 69 67 61 74 65 3a 73 2c 73 69 7a Data Ascii: Element(i.Z,{accessibilityRole:"label",style:Y.option},a.createElement(i.Z,{style:Y.checkboxText},a.createElement(r.ZP,null,l.discoverable_by_phone_label),a.createElement(O.Z,(0,n.Z)({},l.discoverable_by_phone_detail_text,{color:"gray700",onNavigate:s,siz
2024-04-24 05:32:46 UTC	16383	IN	Data Raw: 63 2e 73 65 74 74 69 6e 67 73 29 2c 77 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 5a 50 2c 7b 63 6f 6c 6f 72 3a 22 67 72 61 79 37 30 30 22 2c 73 69 7a 65 3a 22 73 75 62 74 65 78 74 32 22 7d 2c 4b 2e 4b 32 29 3a 6e 75 6c 6c 2c 63 2e 64 65 74 61 69 6c 5f 74 65 78 74 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 4f 2e 5a 2c 28 30 2c 6e 2e 5a 29 28 7b 7d 2c 63 2e 64 65 74 61 69 6c 5f 74 65 78 74 2c 7b 63 6f 6c 6f 72 3a 22 67 72 61 79 37 30 30 22 2c 6f 6e 4e 61 76 69 67 61 74 65 3a 6f 2c 73 74 79 6c 65 3a 52 6f 2e 64 65 74 61 69 6c 54 65 78 74 2c 73 75 62 74 61 73 6b 49 6e 70 75 74 73 3a 75 7d 29 29 3a 6e 75 6c 6c 2c 62 26 26 6b 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 5a 2c 7b 73 74 79 6c 65 3a 52 6f 2e 64 6f 6e 65 42 75 74 Data Ascii: c.settings),w?a.createElement(r.ZP,{color:"gray700",size:"subtext2"},K.K2):null,c.detail_text?a.createElement(O.Z,(0,n.Z)({},c.detail_text,{color:"gray700",onNavigate:o,style:Ro.detailText,subtaskInputs:u})):null,b&&k?a.createElement(i.Z,{style:Ro.doneBut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	49835	104.244.42.65	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:46 UTC	830	OUT	GET /manifest.json HTTP/1.1 Host: twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://twitter.com/i/flow/login?redirect_after_login=%2FOverlakeHMC Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:46 UTC	5011	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:46 GMT etag: W/"b76-lp/+da4UDkZ3C57Kghtg3jTlzx4" perf: 7402827104 expiry: Tue, 31 Mar 1981 05:00:00 GMT pragma: no-cache server: tsa_p set-cookie: ct0=; Max-Age=-1713936765; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax content-type: application/manifest+json; charset=utf-8 x-powered-by: Express cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:46 GMT content-length: 2934 x-frame-options: DENY x-transaction-id: 52043d5e1aba1a60 x-xss-protection: 0 x-content-type-options: nosniff content-security-policy: connect-src 'self' blob: https://api.x.ai https://api.x.com https://.pscp.tv https://.video.pscp.tv https://.twimg.com https://api.twitter.com https://api.x.com https://api-stream.twitter.com https://api-stream.x.com https://ads-api.twitter.com https://ads-api.x.com https://aa.twitter.com https://aa.x.com https://caps.twitter.com https://caps.x.com https://pay.twitter.com https://pay.x.com https://sentry.io https://ton.twitter.com https://ton.x.com https://ton-staging.atla.twitter.com https://ton-staging.atla.x.com https://ton-staging.pdxa.twitter.com https://ton-staging.pdxa.x.com https://twitter.com https://x.com https://upload.twitter.com https://upload.x.com https://www.google-analytics.com https://accounts.google.com/gsi/status https://accounts.google.com/gsi/log https://checkoutshopper-live.adyen.com wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net https://media.riffsy.com https://.giphy.com https://media.tenor.com https://c.tenor.com https://ads-twitter.com https://analytics.twitter.com https://analytics.x.com ; default-src 'self'; form-action 'self' https://twitter.com https://.twitter.com https://x.com https://.x.com https://localhost.twitter.com:3443 https://localhost.x.com:3443; font-src 'self' https://.twimg.com; frame-src 'self' https://twitter.com https://x.com https://mobile.twitter.com https://mobile.x.com https://pay.twitter.com https://pay.x.com https://cards-frame.twitter.com https://accounts.google.com/ https://client-api.arkoselabs.com/ https://iframe.arkoselabs.com/ https://vaultjs.apideck.com/ https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; img-src 'self' blob: data: https://.cdn.twitter.com https://.cdn.x.com https://ton.twitter.com https://ton.x.com https://.twimg.com https://analytics.twitter.com https://analytics.x.com https://cm.g.doubleclick.net https://www.google-analytics.com https://maps.googleapis.com https://www.periscope.tv https://www.pscp.tv https://ads-twitter.com https://ads-api.twitter.com https://ads-api.x.com https://media.riffsy.com https://.giphy.com https://media.tenor.com https://c.tenor.com https://.pscp.tv https://.periscope.tv https://prod-periscope-profile.s3-us-west-2.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://scontent-sea1-1.xx.fbcdn.net https://.googleusercontent.com https://t.co/1/i/adsct; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://x.com https://.twimg.com https://.vine.co https://.pscp.tv https://.video.pscp.tv https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://.twimg.com https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://client-api.arkoselabs.com/ https://www.google-analytics.com https://twitter.com https://x.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://static.ads-twitter.com 'nonce-ZGRlYWM2YWEtMzEwMy00MGQwLThkM2UtOWVmYjQ3MGQ5MTUz'; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false strict-transport-security: max-age=631138519 cross-origin-opener-policy: same-origin-allow-popups cross-origin-embedder-policy: unsafe-none x-response-time: 10 x-connection-hash: f1fd35547050638f960626c46cff3e7f3de10dba79172ede42c4dc620e17bfa9 connection: close
2024-04-24 05:32:46 UTC	2934	IN	Data Raw: 7b 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 73 6f 63 69 61 6c 22 2c 22 6e 65 77 73 22 2c 22 6d 61 67 61 7a 69 6e 65 73 22 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 74 20 62 72 65 61 6b 69 6e 67 20 6e 65 77 73 2c 20 70 6f 6c 69 74 69 63 73 2c 20 74 72 65 6e 64 69 6e 67 20 6d 75 73 69 63 2c 20 77 6f 72 6c 64 20 65 76 65 6e 74 73 2c 20 73 70 6f 72 74 73 20 73 63 6f 72 65 73 2c 20 61 6e 64 20 74 68 65 20 6c 61 74 65 73 74 20 67 6c 6f 62 61 6c 20 6e 65 77 73 20 73 74 6f 72 69 65 73 20 61 73 20 74 68 65 79 20 75 6e 66 6f 6c 64 20 2d 20 61 6c 6c 20 77 69 74 68 20 6c 65 73 73 20 64 61 74 61 2e 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e Data Ascii: {"background_color":"#ffffff","categories":["social","news","magazines"],"description":"Get breaking news, politics, trending music, world events, sports scores, and the latest global news stories as they unfold - all with less data.","display":"standalon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	49840	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:46 UTC	590	OUT	GET /favicons/twitter.3.ico HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:46 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2954750 Content-Type: image/vnd.microsoft.icon Date: Wed, 24 Apr 2024 05:32:46 GMT Etag: "nZmiNyu9WyjvSy6uysjIBQ==" expires: Thu, 24 Apr 2025 05:32:46 GMT last-modified: Mon, 24 Jul 2023 17:39:19 GMT perf: 7626143928 Server: ECAcc (lac/55B3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: d26cb78b7d0ff0a97c6ad9d80688173458cd276f0fde71463780f84fca3bd20f x-content-type-options: nosniff x-response-time: 12 x-ton-expected-size: 549 x-transaction-id: a579a57018bda9c9 Content-Length: 549 Connection: close
2024-04-24 05:32:46 UTC	549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 ec 49 44 41 54 78 01 ed 57 31 92 c2 30 0c 14 77 0d 25 74 94 3c 01 3a 4a 9e 40 49 07 25 1d f0 02 f2 03 f8 01 74 94 d0 52 d1 d2 f1 04 f8 01 a4 4c e5 cb 66 4e 19 9f a2 04 3b e4 26 0d 9a 11 93 6c 62 6b e3 95 64 d3 20 22 43 35 da 17 d5 6c 1f 02 19 02 87 c3 81 8c 31 aa 8f 46 23 f2 b5 eb f5 fa 72 ac b1 bd d5 6a 99 db ed 66 1e 8f 87 09 82 20 75 dc c3 bb dd ae 91 63 f2 7c bd 5e 1b 18 c6 17 bc 97 05 87 c3 61 32 70 b1 58 a4 d8 74 3a 4d b0 f3 f9 ec 14 7c b5 5a b9 04 d7 09 c0 37 9b 4d 32 41 af d7 4b b1 dd 6e 97 21 a6 f9 7c 3e 4f de 8b e5 74 21 ab 3f 60 29 e0 b8 96 f2 e4 49 01 c2 30 7b 5c 29 02 b6 14 d0 52 62 9a 14 20 c5 a4 3d 72 a5 f8 05 96 02 81 25 66 4b c1 c1 Data Ascii: PNGIHDR szzIDATxW10w%t<:J@I%tRLfN;&lbkd "C5l1F#rjf uc\|^a2pXt:M\|Z7M2AKn!\|>Ot!?`)I0{\)Rb =r%fK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50034	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:47 UTC	1237	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 408 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: 8vGJ/rbwkvDUIjg4Zhr5OiUlOC7qKGz2kXaQELVFvuc4VkjqWErbLg5ZAYXCcnaXnP/EK/PSWPsHSQdu5BuBw3NYOcIZ8Q x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:47 UTC	408	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 36 35 37 31 33 25 32 43 25 32 32 69 74 65 6d 73 25 32 32 25 33 41 25 35 42 25 35 44 25 32 43 25 32 32 65 76 65 6e 74 5f 6e 61 6d 65 73 70 61 63 65 25 32 32 25 33 41 25 37 42 25 32 32 70 61 67 65 25 32 32 25 33 41 25 32 32 6f 6e 62 6f 61 72 64 69 6e 67 25 32 32 25 32 43 25 32 32 61 63 74 69 6f 6e 25 32 32 25 33 41 25 32 32 73 68 6f 77 25 32 32 25 32 43 25 32 32 63 6c 69 65 6e 74 25 32 32 25 33 41 25 32 32 6d 35 Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936765713%2C%22items%22%3A%5B%5D%2C%22event_namespace%22%3A%7B%22page%22%3A%22onboarding%22%2C%22action%22%3A%22show%22%2C%22client%22%3A%22m5
2024-04-24 05:32:47 UTC	1071	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:47 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:47 GMT x-transaction: eeae3f8af94605da content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: eeae3f8af94605da x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 8 x-connection-hash: 2d0ea95de23cff8957d0388954ebdc4e7262e4ac2518c82d6acd776f4cd21852 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50035	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:47 UTC	631	OUT	OPTIONS /1.1/onboarding/task.json?flow_name=login HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:47 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: fb0a8dd832d88ee9f1c5c69c3872c8c32afa7ff4573f508c27208532d6d7543e date: Wed, 24 Apr 2024 05:32:47 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50036	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:47 UTC	619	OUT	GET /responsive-web/client-web/icon-default.522d363a.png HTTP/1.1 Host: abs.twimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:47 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * Age: 2656865 Content-Type: image/png Date: Wed, 24 Apr 2024 05:32:47 GMT Etag: "M72HwrTvKtBRDks6N9F4FA==" expires: Thu, 24 Apr 2025 05:32:47 GMT last-modified: Sun, 24 Mar 2024 01:13:23 GMT perf: 7469935968 Server: ECAcc (lac/55CD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: 2f46cdbd06d5df1de34307e140d64804da19078565675f05a36678ad3c5aca18 x-content-type-options: nosniff x-response-time: 6 x-ton-expected-size: 3654 x-transaction-id: fdeb2c58ffc4bc6b Content-Length: 3654 Connection: close
2024-04-24 05:32:47 UTC	3654	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 04 00 00 00 f8 d5 a4 8c 00 00 0e 0d 49 44 41 54 78 01 ec d1 03 8c df 77 00 c6 e1 e7 af d9 8b 66 46 77 d1 6c db f6 82 79 31 e6 2d ba 58 ab c2 9a d1 05 35 c2 da 51 15 d4 3a db be 6f a3 da fe e9 f9 c4 ce fb 3a 5e 26 93 c9 64 32 99 4c 26 93 c9 b9 de 7d 9e f6 b9 df 8d 56 69 89 8d 76 6b d0 a1 cf 90 20 18 d2 a7 43 83 dd 36 5a a2 d2 28 bf fb c2 d3 ee 73 83 9c cc 39 ba 51 99 0f fc 6d 8a 65 b6 6b d2 6b 58 38 c3 86 f5 6a b2 dd 32 53 fc ed 03 65 6e 74 86 32 37 79 d4 cf c6 5b ab 4e bf 70 01 ea 57 67 ad f1 7e f6 a8 9b 9c 44 a6 e0 1e 9f 18 63 9d 66 e1 22 d5 6c 9d 31 3e 71 8f 82 43 32 79 f7 fa d6 0c 3b 0c 08 97 a0 7e 3b cc f0 ad 7b e5 a5 de ad de 37 d1 0e 83 c2 25 6e d0 0e 13 bd ef 56 29 95 57 ee Data Ascii: PNGIHDRIDATxwfFwly1-X5Q:o:^&d2L&}Vivk C6Z(s9QmekkX8j2Sent27y[NpWg~Dcf"l1>qC2y;~;{7%nV)W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50038	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:47 UTC	1235	OUT	POST /1.1/onboarding/task.json?flow_name=login HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 960 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-client-transaction-id: 39yk05vdv935DxUVSzfUFwgIFQPHBUHbvFu9PZhok8oVe2XHdWf2AyN0LKjvX1u6sdLpBt7raub7Xp9Snp1URkePKVEr3A x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:47 UTC	960	OUT	Data Raw: 7b 22 69 6e 70 75 74 5f 66 6c 6f 77 5f 64 61 74 61 22 3a 7b 22 66 6c 6f 77 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 64 65 62 75 67 5f 6f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 73 74 61 72 74 5f 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 70 72 6f 66 69 6c 65 22 2c 22 70 72 6f 66 69 6c 65 22 3a 7b 22 70 72 6f 66 69 6c 65 5f 69 64 22 3a 22 33 34 37 33 33 37 30 31 22 7d 7d 7d 7d 2c 22 73 75 62 74 61 73 6b 5f 76 65 72 73 69 6f 6e 73 22 3a 7b 22 61 63 74 69 6f 6e 5f 6c 69 73 74 22 3a 32 2c 22 61 6c 65 72 74 5f 64 69 61 6c 6f 67 22 3a 31 2c 22 61 70 70 5f 64 6f 77 6e 6c 6f 61 64 5f 63 74 61 22 3a 31 2c 22 63 68 65 63 6b 5f 6c 6f 67 67 65 64 5f 69 6e 5f 61 63 63 6f 75 6e 74 22 3a 31 2c 22 63 68 6f 69 63 65 5f 73 65 6c 65 63 74 69 6f 6e 22 Data Ascii: {"input_flow_data":{"flow_context":{"debug_overrides":{},"start_location":{"location":"profile","profile":{"profile_id":"34733701"}}}},"subtask_versions":{"action_list":2,"alert_dialog":1,"app_download_cta":1,"check_logged_in_account":1,"choice_selection"
2024-04-24 05:32:48 UTC	1403	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:47 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT set-cookie: att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; Max-Age=86400; Expires=Thu, 25 Apr 2024 05:32:48 GMT; Path=/; Domain=.twitter.com; Secure; HTTPOnly; SameSite=None content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:48 GMT content-length: 310 x-frame-options: SAMEORIGIN x-transaction-id: 7d35147ec3ce6d41 x-xss-protection: 0 x-rate-limit-limit: 187 x-rate-limit-reset: 1713937668 content-disposition: attachment; filename=json.json x-content-type-options: nosniff x-rate-limit-remaining: 186 x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 28 x-connection-hash: b41c7b76035b041fce295480c5b0925bc3f99eefdb609864abcf4d9a41f22374 connection: close
2024-04-24 05:32:48 UTC	310	IN	Data Raw: 7b 22 66 6c 6f 77 5f 74 6f 6b 65 6e 22 3a 22 67 3b 31 37 31 33 39 33 36 37 34 30 30 34 32 38 32 34 31 33 3a 2d 31 37 31 33 39 33 36 37 36 38 32 32 38 3a 50 67 4d 47 42 62 77 66 31 53 71 4b 33 55 76 75 35 32 62 43 5a 68 42 79 3a 30 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 73 75 62 74 61 73 6b 73 22 3a 5b 7b 22 73 75 62 74 61 73 6b 5f 69 64 22 3a 22 4c 6f 67 69 6e 4a 73 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 53 75 62 74 61 73 6b 22 2c 22 6a 73 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 69 2f 6a 73 5f 69 6e 73 74 3f 63 5f 6e 61 6d 65 3d 75 69 5f 6d 65 74 72 69 63 73 22 2c 22 74 69 6d 65 6f 75 74 5f 6d 73 22 3a 32 30 30 30 2c 22 6e 65 Data Ascii: {"flow_token":"g;171393674004282413:-1713936768228:PgMGBbwf1SqK3Uvu52bCZhBy:0","status":"success","subtasks":[{"subtask_id":"LoginJsInstrumentationSubtask","js_instrumentation":{"url":"https://twitter.com/i/js_inst?c_name=ui_metrics","timeout_ms":2000,"ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50037	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:47 UTC	359	OUT	GET /favicons/twitter.3.ico HTTP/1.1 Host: abs.twimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:48 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2954752 Content-Type: image/vnd.microsoft.icon Date: Wed, 24 Apr 2024 05:32:48 GMT Etag: "nZmiNyu9WyjvSy6uysjIBQ==" expires: Thu, 24 Apr 2025 05:32:48 GMT last-modified: Mon, 24 Jul 2023 17:39:19 GMT perf: 7626143928 Server: ECAcc (lac/55B3) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: d26cb78b7d0ff0a97c6ad9d80688173458cd276f0fde71463780f84fca3bd20f x-content-type-options: nosniff x-response-time: 12 x-ton-expected-size: 549 x-transaction-id: a579a57018bda9c9 Content-Length: 549 Connection: close
2024-04-24 05:32:48 UTC	549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 ec 49 44 41 54 78 01 ed 57 31 92 c2 30 0c 14 77 0d 25 74 94 3c 01 3a 4a 9e 40 49 07 25 1d f0 02 f2 03 f8 01 74 94 d0 52 d1 d2 f1 04 f8 01 a4 4c e5 cb 66 4e 19 9f a2 04 3b e4 26 0d 9a 11 93 6c 62 6b e3 95 64 d3 20 22 43 35 da 17 d5 6c 1f 02 19 02 87 c3 81 8c 31 aa 8f 46 23 f2 b5 eb f5 fa 72 ac b1 bd d5 6a 99 db ed 66 1e 8f 87 09 82 20 75 dc c3 bb dd ae 91 63 f2 7c bd 5e 1b 18 c6 17 bc 97 05 87 c3 61 32 70 b1 58 a4 d8 74 3a 4d b0 f3 f9 ec 14 7c b5 5a b9 04 d7 09 c0 37 9b 4d 32 41 af d7 4b b1 dd 6e 97 21 a6 f9 7c 3e 4f de 8b e5 74 21 ab 3f 60 29 e0 b8 96 f2 e4 49 01 c2 30 7b 5c 29 02 b6 14 d0 52 62 9a 14 20 c5 a4 3d 72 a5 f8 05 96 02 81 25 66 4b c1 c1 Data Ascii: PNGIHDR szzIDATxW10w%t<:J@I%tRLfN;&lbkd "C5l1F#rjf uc\|^a2pXt:M\|Z7M2AKn!\|>Ot!?`)I0{\)Rb =r%fK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50039	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:48 UTC	627	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757
2024-04-24 05:32:48 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:48 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: a14b81e60ecc1edc timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: e1a471ea8781f6bde9e0cc59bcfc322a62bc6251a5dd9d0b85cf7e3f52d5e2c6 connection: close
2024-04-24 05:32:48 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50040	152.199.24.185	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:48 UTC	388	OUT	GET /responsive-web/client-web/icon-default.522d363a.png HTTP/1.1 Host: abs.twimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:48 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-origin: * Age: 2656866 Content-Type: image/png Date: Wed, 24 Apr 2024 05:32:48 GMT Etag: "M72HwrTvKtBRDks6N9F4FA==" expires: Thu, 24 Apr 2025 05:32:48 GMT last-modified: Sun, 24 Mar 2024 01:13:23 GMT perf: 7469935968 Server: ECAcc (lac/55CD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com X-Cache: HIT x-connection-hash: 2f46cdbd06d5df1de34307e140d64804da19078565675f05a36678ad3c5aca18 x-content-type-options: nosniff x-response-time: 6 x-ton-expected-size: 3654 x-transaction-id: fdeb2c58ffc4bc6b Content-Length: 3654 Connection: close
2024-04-24 05:32:48 UTC	3654	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 04 00 00 00 f8 d5 a4 8c 00 00 0e 0d 49 44 41 54 78 01 ec d1 03 8c df 77 00 c6 e1 e7 af d9 8b 66 46 77 d1 6c db f6 82 79 31 e6 2d ba 58 ab c2 9a d1 05 35 c2 da 51 15 d4 3a db be 6f a3 da fe e9 f9 c4 ce fb 3a 5e 26 93 c9 64 32 99 4c 26 93 c9 b9 de 7d 9e f6 b9 df 8d 56 69 89 8d 76 6b d0 a1 cf 90 20 18 d2 a7 43 83 dd 36 5a a2 d2 28 bf fb c2 d3 ee 73 83 9c cc 39 ba 51 99 0f fc 6d 8a 65 b6 6b d2 6b 58 38 c3 86 f5 6a b2 dd 32 53 fc ed 03 65 6e 74 86 32 37 79 d4 cf c6 5b ab 4e bf 70 01 ea 57 67 ad f1 7e f6 a8 9b 9c 44 a6 e0 1e 9f 18 63 9d 66 e1 22 d5 6c 9d 31 3e 71 8f 82 43 32 79 f7 fa d6 0c 3b 0c 08 97 a0 7e 3b cc f0 ad 7b e5 a5 de ad de 37 d1 0e 83 c2 25 6e d0 0e 13 bd ef 56 29 95 57 ee Data Ascii: PNGIHDRIDATxwfFwly1-X5Q:o:^&d2L&}Vivk C6Z(s9QmekkX8j2Sent27y[NpWg~Dcf"l1>qC2y;~;{7%nV)W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50041	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:48 UTC	690	OUT	GET /1.1/onboarding/task.json?flow_name=login HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt
2024-04-24 05:32:49 UTC	446	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:48 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 52 x-transaction-id: c049f9f015890604 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 4e7552da0f6393ebbebe5c8015e9ed977f842845ca4001416d68194299f5c491 connection: close
2024-04-24 05:32:49 UTC	52	IN	GET is not allowed on path /1.1/onboarding/task.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50042	104.244.42.65	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:48 UTC	893	OUT	GET /i/js_inst?c_name=ui_metrics HTTP/1.1 Host: twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://twitter.com/i/flow/login?redirect_after_login=%2FOverlakeHMC Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt
2024-04-24 05:32:49 UTC	1227	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:49 GMT perf: 7402827104 pragma: no-cache server: tsa_p status: 200 OK expires: Tue, 31 Mar 1981 05:00:00 GMT set-cookie: fm=0; Max-Age=0; Expires=Wed, 24 Apr 2024 05:32:49 GMT; Path=/; Domain=.twitter.com; Secure; HTTPOnly set-cookie: _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658; Path=/; Domain=.twitter.com; Secure; HTTPOnly content-type: text/javascript; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:49 GMT x-transaction: a9369ff2d842a8fe content-length: 11808 x-frame-options: x-transaction-id: a9369ff2d842a8fe x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerExempt x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 x-response-time: 8 x-connection-hash: 600758b5597e648bc0bd35256a82b2b0baa8fc852aaf5b223489793cb5e89985 connection: close
2024-04-24 05:32:49 UTC	11808	IN	Data Raw: 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 6a 67 4e 67 4b 47 42 75 4f 46 64 72 48 54 6a 53 6b 64 72 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 4f 4e 43 62 75 48 67 65 52 79 4f 62 58 41 45 4c 4a 58 43 55 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 52 46 5a 41 52 4f 41 65 4b 79 78 70 4b 50 48 52 42 54 61 76 28 29 20 7b 76 61 72 20 61 34 61 66 35 62 31 39 34 31 33 36 36 62 32 35 34 63 31 32 62 30 39 36 35 31 62 62 34 38 33 38 35 65 33 32 66 33 61 38 30 34 32 61 35 31 63 61 65 61 31 33 36 31 31 66 37 30 63 62 66 66 32 63 3d 32 35 35 3b 76 61 72 20 61 32 39 33 31 37 36 32 33 30 31 31 34 34 66 32 36 65 35 39 64 38 39 33 34 32 32 64 32 33 38 37 32 34 39 38 65 36 63 61 66 32 34 34 36 66 62 63 66 37 37 39 36 Data Ascii: function sjgNgKGBuOFdrHTjSkdr() { var ONCbuHgeRyObXAELJXCU = function() { function RFZAROAeKyxpKPHRBTav() {var a4af5b1941366b254c12b09651bb48385e32f3a8042a51caea13611f70cbff2c=255;var a2931762301144f26e59d893422d23872498e6caf2446fbcf7796

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50043	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:49 UTC	615	OUT	OPTIONS /1.1/onboarding/task.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-client-transaction-id,x-guest-token,x-twitter-active-user,x-twitter-client-language Origin: https://twitter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:50 UTC	1338	IN	HTTP/1.1 200 OK access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-allow-methods: HEAD,PUT,GET,POST,DELETE access-control-allow-headers: X-Attest-Token,X-Web-Auth-Multi-User-Id,X-Contributor-Version,X-Twitter-CESModel-Version,Server,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,Dtab-Local,X-Twitter-Client-Language,X-Client-Transaction-Id,If-Modified-Since,X-Twitter-Client,SecurelyOktaToken,X-TD-Iff-Mtime,X-Client-UUID,X-Twitter-Auth-Type,Content-Length,Alt-Used,X-B3-Flags,Cache-Control,X-Transaction-Id,X-TFE-Bot-Test,Content-Type,X-TD-Mtime-Check,Pragma,X-CSRF-Token,X-Twitter-Polling,X-Twitter-Active-User,X-Guest-Token,LivePipeline-Session,X-Twitter-UTCOffset,X-Response-Time,X-Act-As-User-Id,Authorization,X-Contribute-To-User-Id access-control-max-age: 1728000 access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-connection-hash: cc368b7d88b11e05a7a33fb2255f9ed3489463bb4d265d6c3c0c6468a3b76a00 date: Wed, 24 Apr 2024 05:32:49 GMT server: tsa_p connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50044	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:49 UTC	1586	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 1195 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: 6eqS5a3rievPOSMjfQHiIT4+IzXxM3ftim2LC65epfwjTVPxQ1HANRVCGp7ZaW2Mh/nfMOiw+hvQ7lAs20AbzL9OBoHs6g x-guest-token: 1783006035076403702 x-twitter-active-user: no sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:49 UTC	1195	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 36 37 34 31 37 25 32 43 25 32 32 69 74 65 6d 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 6f 6b 65 6e 25 32 32 25 33 41 25 32 32 67 25 33 42 31 37 31 33 39 33 36 37 34 30 30 34 32 38 32 34 31 33 25 33 41 2d 31 37 31 33 39 33 36 37 36 38 32 32 38 25 33 41 50 67 4d 47 42 62 77 66 31 53 71 4b 33 55 76 75 35 32 62 43 5a 68 42 79 25 33 41 30 25 32 32 25 32 43 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 4c Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936767417%2C%22items%22%3A%5B%7B%22token%22%3A%22g%3B171393674004282413%3A-1713936768228%3APgMGBbwf1SqK3Uvu52bCZhBy%3A0%22%2C%22name%22%3A%22L
2024-04-24 05:32:50 UTC	1072	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:49 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:49 GMT x-transaction: 0d58233f320cb60e content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: 0d58233f320cb60e x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 14 x-connection-hash: f5a8994c067e23807c41b5eefc59b5e55bc6d2f1af5bee7ed63a38aa21f41174 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50045	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:49 UTC	660	OUT	GET /overlakemedicalcenter HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:50 UTC	1151	IN	HTTP/1.1 200 OK Vary: Accept-Encoding accept-ch-lifetime: 4838400 accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Link: <https://www.facebook.com/overlakemedicalcenter>; rel="canonical" reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:50 UTC	2238	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 Data Ascii: content-security-policy-report-only: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.fa
2024-04-24 05:32:50 UTC	1979	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:50 UTC	1622	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:50 UTC	6	IN	Data Raw: 32 64 36 30 0d 0a Data Ascii: 2d60
2024-04-24 05:32:50 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 5f 39 64 6c 73 20 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 64 65 66 61 75 6c 74 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 54 2f 72 2f 61 47 54 33 67 73 6b 7a 57 42 66 2e 69 63 6f 22 20 64 61 74 61 2d 62 61 64 67 65 64 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 44 2f 72 2f 55 4a 6a 30 74 67 6b 2d 52 72 54 2e 69 63 6f 22 20 72 65 6c Data Ascii: <!DOCTYPE html><html id="facebook" class="_9dls __fb-light-mode" lang="en" dir="ltr"><head><link data-default-icon="https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico" data-badged-icon="https://static.xx.fbcdn.net/rsrc.php/yD/r/UJj0tgk-RrT.ico" rel
2024-04-24 05:32:50 UTC	1500	IN	Data Raw: 22 4f 76 65 72 6c 61 6b 65 20 4d 65 64 69 63 61 6c 20 43 65 6e 74 65 72 20 26 61 6d 70 3b 20 43 6c 69 6e 69 63 73 20 7c 20 42 65 6c 6c 65 76 75 65 20 57 41 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 76 65 72 6c 61 6b 65 20 4d 65 64 69 63 61 6c 20 43 65 6e 74 65 72 20 26 61 6d 70 3b 20 43 6c 69 6e 69 63 73 2c 20 42 65 6c 6c 65 76 75 65 2c 20 57 61 73 68 69 6e 67 74 6f 6e 2e 20 32 33 2c 30 32 38 20 6c 69 6b 65 73 20 26 23 78 62 37 3b 20 33 33 20 74 61 6c 6b 69 6e 67 20 61 62 6f 75 74 20 74 68 69 73 2e 20 43 6f 6d 70 61 73 73 69 6f 6e 61 74 65 20 63 61 72 65 20 66 6f 72 20 65 76 65 72 79 20 6c 69 66 65 20 77 65 20 74 6f 75 63 68 2e 20 4f 76 65 72 6c 61 6b 65 20 69 Data Ascii: "Overlake Medical Center & Clinics \| Bellevue WA" /><meta property="og:description" content="Overlake Medical Center & Clinics, Bellevue, Washington. 23,028 likes · 33 talking about this. Compassionate care for every life we touch. Overlake i
2024-04-24 05:32:50 UTC	1500	IN	Data Raw: 30 37 36 33 32 33 36 36 30 33 5f 6e 2e 70 6e 67 3f 73 74 70 3d 64 73 74 2d 70 6e 67 5f 70 37 32 30 78 37 32 30 26 61 6d 70 3b 5f 6e 63 5f 63 61 74 3d 31 30 35 26 61 6d 70 3b 63 63 62 3d 31 2d 37 26 61 6d 70 3b 5f 6e 63 5f 73 69 64 3d 35 66 32 30 34 38 26 61 6d 70 3b 5f 6e 63 5f 6f 68 63 3d 58 50 6d 66 6d 61 65 70 63 61 30 41 62 37 66 31 43 55 71 26 61 6d 70 3b 5f 6e 63 5f 68 74 3d 73 63 6f 6e 74 65 6e 74 2d 73 6a 63 33 2d 31 2e 78 78 26 61 6d 70 3b 6f 68 3d 30 30 5f 41 66 41 2d 73 78 31 5a 4d 6b 58 34 48 52 64 43 52 64 74 53 47 48 31 5a 2d 37 34 4d 67 53 35 49 6d 33 37 45 62 55 77 6d 4f 43 54 65 7a 41 26 61 6d 70 3b 6f 65 3d 36 36 32 45 38 35 36 32 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 3a 61 6c 74 22 20 63 Data Ascii: 0763236603_n.png?stp=dst-png_p720x720&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA-sx1ZMkX4HRdCRdtSGH1Z-74MgS5Im37EbUwmOCTezA&oe=662E8562" /><meta name="twitter:image:alt" c
2024-04-24 05:32:50 UTC	1500	IN	Data Raw: 23 38 44 39 34 39 45 3b 2d 2d 66 64 73 2d 67 72 61 79 2d 37 30 3a 23 36 30 36 37 37 30 3b 2d 2d 66 64 73 2d 67 72 61 79 2d 38 30 3a 23 34 34 34 39 35 30 3b 2d 2d 66 64 73 2d 67 72 61 79 2d 39 30 3a 23 33 30 33 33 33 38 3b 2d 2d 66 64 73 2d 67 72 61 79 2d 31 30 30 3a 23 31 43 31 45 32 31 3b 2d 2d 66 64 73 2d 67 72 65 65 6e 2d 35 35 3a 23 30 30 41 34 30 30 3b 2d 2d 66 64 73 2d 67 72 65 65 6e 2d 36 35 3a 23 35 31 43 45 37 30 3b 2d 2d 66 64 73 2d 68 69 67 68 6c 69 67 68 74 3a 23 33 35 37 38 45 35 3b 2d 2d 66 64 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 65 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 43 46 33 46 46 3b 2d 2d 66 64 73 2d 70 72 69 6d 61 72 79 2d 69 63 6f 6e 3a 23 31 43 31 45 32 31 3b 2d 2d 66 64 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 23 31 Data Ascii: #8D949E;--fds-gray-70:#606770;--fds-gray-80:#444950;--fds-gray-90:#303338;--fds-gray-100:#1C1E21;--fds-green-55:#00A400;--fds-green-65:#51CE70;--fds-highlight:#3578E5;--fds-highlight-cell-background:#ECF3FF;--fds-primary-icon:#1C1E21;--fds-primary-text:#1
2024-04-24 05:32:50 UTC	1500	IN	Data Raw: 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 35 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 35 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 36 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 36 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 38 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 29 3b 2d 2d 66 64 73 2d 79 65 6c 6c 6f 77 2d 32 30 3a 23 46 46 42 41 30 30 3b 2d 2d 61 63 63 65 6e 74 3a 23 30 38 36 36 46 46 3b 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 3a 23 46 46 46 46 46 46 3b 2d 2d 61 6c 77 61 79 73 2d 62 6c 61 63 6b 3a 62 6c 61 63 6b 3b 2d 2d 61 6c 77 61 79 73 2d 64 61 72 6b 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 Data Ascii: s-white-alpha-50:rgba(255, 255, 255, 0.5);--fds-white-alpha-60:rgba(255, 255, 255, 0.6);--fds-white-alpha-80:rgba(255, 255, 255, 0.8);--fds-yellow-20:#FFBA00;--accent:#0866FF;--always-white:#FFFFFF;--always-black:black;--always-dark-gradient:linear-gradie
2024-04-24 05:32:50 UTC	1500	IN	Data Raw: 69 73 61 62 6c 65 64 2d 62 75 74 74 6f 6e 2d 74 65 78 74 3a 23 42 43 43 30 43 34 3b 2d 2d 64 69 73 61 62 6c 65 64 2d 69 63 6f 6e 3a 23 42 43 43 30 43 34 3b 2d 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 3a 23 42 43 43 30 43 34 3b 2d 2d 64 69 76 69 64 65 72 3a 23 43 45 44 30 44 34 3b 2d 2d 65 76 65 6e 74 2d 64 61 74 65 3a 23 46 33 34 32 35 46 3b 2d 2d 66 62 2d 77 6f 72 64 6d 61 72 6b 3a 23 30 38 36 36 46 46 3b 2d 2d 66 62 2d 6c 6f 67 6f 3a 23 30 38 36 36 46 46 3b 2d 2d 66 69 6c 74 65 72 2d 61 63 63 65 6e 74 3a 69 6e 76 65 72 74 28 31 39 25 29 20 73 65 70 69 61 28 37 30 25 29 20 73 61 74 75 72 61 74 65 28 35 36 37 31 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 32 30 33 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 31 Data Ascii: isabled-button-text:#BCC0C4;--disabled-icon:#BCC0C4;--disabled-text:#BCC0C4;--divider:#CED0D4;--event-date:#F3425F;--fb-wordmark:#0866FF;--fb-logo:#0866FF;--filter-accent:invert(19%) sepia(70%) saturate(5671%) hue-rotate(203deg) brightness(96%) contrast(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50047	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:50 UTC	1568	OUT	POST /1.1/onboarding/task.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 864 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-client-transaction-id: 19Ss25PVt9XxBx0dQz/cHwAAHQvPDUnTtFO1NZBgm8Idc23PfW/+Cyt8JKDnV1OyucfhDtZuNI3iFbySxQlZiqo/SKU+1A x-guest-token: 1783006035076403702 x-twitter-active-user: yes sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:50 UTC	864	OUT	Data Raw: 7b 22 66 6c 6f 77 5f 74 6f 6b 65 6e 22 3a 22 67 3b 31 37 31 33 39 33 36 37 34 30 30 34 32 38 32 34 31 33 3a 2d 31 37 31 33 39 33 36 37 36 38 32 32 38 3a 50 67 4d 47 42 62 77 66 31 53 71 4b 33 55 76 75 35 32 62 43 5a 68 42 79 3a 30 22 2c 22 73 75 62 74 61 73 6b 5f 69 6e 70 75 74 73 22 3a 5b 7b 22 73 75 62 74 61 73 6b 5f 69 64 22 3a 22 4c 6f 67 69 6e 4a 73 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 53 75 62 74 61 73 6b 22 2c 22 6a 73 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 22 7b 5c 22 72 66 5c 22 3a 7b 5c 22 61 34 61 66 35 62 31 39 34 31 33 36 36 62 32 35 34 63 31 32 62 30 39 36 35 31 62 62 34 38 33 38 35 65 33 32 66 33 61 38 30 34 32 61 35 31 63 61 65 61 31 33 36 31 31 66 37 30 63 62 66 66 32 63 5c 22 3a Data Ascii: {"flow_token":"g;171393674004282413:-1713936768228:PgMGBbwf1SqK3Uvu52bCZhBy:0","subtask_inputs":[{"subtask_id":"LoginJsInstrumentationSubtask","js_instrumentation":{"response":"{\"rf\":{\"a4af5b1941366b254c12b09651bb48385e32f3a8042a51caea13611f70cbff2c\":
2024-04-24 05:32:50 UTC	1228	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:50 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:50 GMT content-length: 3137 x-frame-options: SAMEORIGIN x-transaction-id: d2d7a3f3f4b7818a x-xss-protection: 0 x-rate-limit-limit: 187 x-rate-limit-reset: 1713937668 content-disposition: attachment; filename=json.json x-content-type-options: nosniff x-rate-limit-remaining: 185 x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 40 x-connection-hash: 0d06ec93bf1172c66d9ac0fccbffd2bb03a67814deaf19d1e98a0c5b49fd6449 connection: close
2024-04-24 05:32:50 UTC	3137	IN	Data Raw: 7b 22 66 6c 6f 77 5f 74 6f 6b 65 6e 22 3a 22 67 3b 31 37 31 33 39 33 36 37 34 30 30 34 32 38 32 34 31 33 3a 2d 31 37 31 33 39 33 36 37 36 38 32 32 38 3a 50 67 4d 47 42 62 77 66 31 53 71 4b 33 55 76 75 35 32 62 43 5a 68 42 79 3a 31 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 73 75 62 74 61 73 6b 73 22 3a 5b 7b 22 73 75 62 74 61 73 6b 5f 69 64 22 3a 22 4c 6f 67 69 6e 45 6e 74 65 72 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 53 53 4f 22 2c 22 73 65 74 74 69 6e 67 73 5f 6c 69 73 74 22 3a 7b 22 73 65 74 74 69 6e 67 73 22 3a 5b 7b 22 76 61 6c 75 65 5f 74 79 70 65 22 3a 22 62 75 74 74 6f 6e 22 2c 22 76 61 6c 75 65 5f 69 64 65 6e 74 69 66 69 65 72 22 3a 22 67 6f 6f 67 6c 65 5f 73 73 6f 5f 62 75 74 74 6f 6e 22 2c 22 76 61 6c 75 65 5f 64 61 74 Data Ascii: {"flow_token":"g;171393674004282413:-1713936768228:PgMGBbwf1SqK3Uvu52bCZhBy:1","status":"success","subtasks":[{"subtask_id":"LoginEnterUserIdentifierSSO","settings_list":{"settings":[{"value_type":"button","value_identifier":"google_sso_button","value_dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50048	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:50 UTC	976	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:50 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:50 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 79b0081a5f231058 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: 54794d321216cc89717ad9186f7b2bbda58f8ccc85ad61e354c33da9c828d539 connection: close
2024-04-24 05:32:50 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50046	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:50 UTC	912	OUT	POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=21035 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:50 UTC	132	OUT	Data Raw: 65 76 65 6e 74 5f 69 64 3d 37 33 36 31 33 30 32 33 37 34 39 30 35 34 30 30 30 35 31 26 6d 61 72 6b 65 72 5f 70 61 67 65 5f 74 69 6d 65 3d 31 35 36 32 26 73 63 72 69 70 74 5f 70 61 74 68 3d 58 43 6f 6d 65 74 50 72 6f 66 69 6c 65 56 61 6e 69 74 79 43 6f 6e 74 72 6f 6c 6c 65 72 26 77 65 69 67 68 74 3d 30 26 63 6c 69 65 6e 74 5f 73 74 61 72 74 3d 31 26 6c 73 64 3d 41 56 6f 79 6d 6f 65 36 34 6a 77 Data Ascii: event_id=7361302374905400051&marker_page_time=1562&script_path=XCometProfileVanityController&weight=0&client_start=1&lsd=AVoymoe64jw
2024-04-24 05:32:51 UTC	1782	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 cross-origin-resource-policy: cross-origin Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, must-revalidate reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" origin-agent-cluster: ?0 Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length, X-Stack Access-Control-Allow-Methods: OPTIONS Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; preload X-FB-Debug: fMftCrtZpXKH4oliFrvmWmVYbwAY53NgQGLUPQEnGV7wRCyT+CdZYxE6phXDvSj60DDh62cgJcYs37xXLVPZXw== Date: Wed, 24 Apr 2024 05:32:51 GMT Transfer-Encoding: chunked X-FB-Connection-Quality: MODERATE; q=0.3, rtt=164, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=316, ullat=199 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-04-24 05:32:51 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-04-24 05:32:51 UTC	250	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 65 72 72 6f 72 22 3a 31 33 35 37 30 30 35 2c 22 65 72 72 6f 72 53 75 6d 6d 61 72 79 22 3a 22 59 6f 75 72 20 52 65 71 75 65 73 74 20 43 6f 75 6c 64 6e 27 74 20 62 65 20 50 72 6f 63 65 73 73 65 64 22 2c 22 65 72 72 6f 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 72 65 20 77 61 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 20 57 65 27 72 65 20 77 6f 72 6b 69 6e 67 20 6f 6e 20 67 65 74 74 69 6e 67 20 69 74 20 66 69 78 65 64 20 61 73 20 73 6f 6f 6e 20 61 73 20 77 65 20 63 61 6e 2e 22 2c 22 70 61 79 6c 6f 61 64 22 3a 6e 75 6c 6c 2c 22 6c 69 64 22 3a 22 37 33 36 31 33 30 32 33 38 30 36 37 34 39 33 36 30 34 34 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: for (;;);{"__ar":1,"error":1357005,"errorSummary":"Your Request Couldn't be Processed","errorDescription":"There was a problem with this request. We're working on getting it fixed as soon as we can.","payload":null,"lid":"7361302380674936044"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50050	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	975	OUT	GET /1.1/onboarding/task.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:51 UTC	446	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:51 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 52 x-transaction-id: 6dc864e872003b73 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 43d2e174a6d2751c9eb7b843c746712ab9742fcb5c9e43d7d034dab45a2f1703 connection: close
2024-04-24 05:32:51 UTC	52	IN	GET is not allowed on path /1.1/onboarding/task.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50055	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	622	OUT	GET /rsrc.php/v3/yp/l/0,cross/Zl4RYlGvLRL.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:51 UTC	1761	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: US4jruJzjarqtDIzoZVuyw== Expires: Thu, 24 Apr 2025 05:32:51 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: WGZ3Bxs+wEHE3SUzP6fq9NdX4tGnh3QrroxhqDAam8QXchubaTFY0sxM5dzVPbQ3pyzq7k9tahovXEWfPDMJ0Q== Date: Wed, 24 Apr 2024 05:32:51 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=85, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 608418
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 6c 61 62 65 6c 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 74 65 78 74 61 72 65 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 Data Ascii: form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textar
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 7d 64 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 64 74 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 61 62 62 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 61 64 64 65 31 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 63 6f 6c 6f 72 3a 23 64 61 64 64 65 31 3b 68 65 69 67 68 74 3a 31 70 78 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 27 2e 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a Data Ascii: }dd{color:#000}dt{color:#606770}ul{list-style-type:none;margin:0;padding:0}abbr{border-bottom:none;text-decoration:none}hr{background:#dadde1;border-width:0;color:#dadde1;height:1px}.clearfix:after{clear:both;content:'.';display:block;font-size:0;height:
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 74 68 3a 32 30 30 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 55 49 46 75 6c 6c 50 61 67 65 5f 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 30 3b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 65 6d 70 74 79 5f 6d 65 73 73 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 36 66 37 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 32 30 70 78 20 35 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 65 65 5f 61 6c 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 73 74 61 6e 64 61 72 64 5f 73 74 61 74 75 73 5f 65 6c 65 6d 65 6e 74 Data Ascii: th:200px;word-wrap:break-word}.UIFullPage_Container{margin:0 auto;padding:20px 12px 0;width:940px}.empty_message{background:#f5f6f7;font-size:13px;line-height:17px;padding:20px 20px 50px;text-align:center}.see_all{text-align:right}.standard_status_element
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 36 70 78 3b 77 69 64 74 68 3a 32 38 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 31 6f 62 62 7b 68 65 69 67 68 74 3a 33 34 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 32 35 63 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 32 35 63 6d 20 61 5b 72 6f 6c 65 3d 27 62 75 74 74 6f 6e 27 5d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 29 7d 2e 5f 37 31 70 6e 20 61 5b 64 61 74 61 2d 68 6f 76 65 72 63 61 72 64 5d 3a 6e 6f 74 28 2e 5f 35 70 63 71 29 2c 2e 5f 37 31 70 6e 20 2e 5f 33 6c 33 76 2c 2e 5f 37 31 70 6e 20 2e 5f 33 6c 33 77 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d Data Ascii: x;padding:8px 6px;width:28px}._71pn ._1obb{height:34px}._71pn ._25cm{color:var(--secondary-text)}._71pn ._25cm a[role='button']{color:var(--accent)}._71pn a[data-hovercard]:not(._5pcq),._71pn ._3l3v,._71pn ._3l3w{color:var(--primary-text);font-weight:600}
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 31 70 6e 20 2e 5f 36 71 76 74 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6e 65 67 61 74 69 76 65 29 7d 2e 5f 37 31 70 6e 20 2e 5f 33 69 71 65 7b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 35 6a 65 69 7b 70 61 64 64 69 6e 67 3a 30 20 32 70 78 20 30 20 36 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 31 38 76 6a 2e 5f 31 38 76 6a 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 5f 37 31 70 6e 20 2e 5f 36 64 63 31 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 36 63 6f 69 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 Data Ascii: 1pn ._6qvt::after{border:1px solid var(--negative)}._71pn ._3iqe{padding:4px}._71pn ._5jei{padding:0 2px 0 6px}._71pn ._18vj._18vj{color:var(--secondary-text);height:32px;line-height:1}._71pn ._6dc1{color:var(--disabled-text)}._71pn ._6coi{color:var(--sec
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 36 73 72 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 64 69 76 69 64 65 72 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 64 69 76 69 64 65 72 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6d 61 72 67 69 6e 3a 38 70 78 20 31 36 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 5f 37 31 70 6e 20 2e 5f 37 63 5f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: y-text)}._71pn ._6srr{border-bottom:1px solid var(--divider);border-top:1px solid var(--divider);color:var(--secondary-text);font-size:15px;font-weight:600;margin:8px 16px;padding:8px 0}._71pn ._7c_r{color:var(--secondary-text);font-size:15px;font-weight:
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 2d 62 75 74 74 6f 6e 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 69 20 2e 5f 35 72 35 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 65 62 2d 77 61 73 68 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 69 20 2e 5f 35 72 35 67 20 2e 5f 35 32 63 39 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 63 20 2e 5f 35 72 71 5f 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 61 61 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 61 63 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 Data Ascii: -button-text)}._71pn ._5r5i ._5r5g{background:var(--web-wash)}._71pn ._5r5i ._5r5g ._52c9{color:var(--primary-text)}._71pn ._5r5c ._5rq_{color:var(--primary-text)}._71pn ._5raa{color:var(--primary-text)}._71pn ._5rac{color:var(--secondary-text)}._71pn ._5
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 48 69 73 74 6f 72 69 63 27 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 41 72 69 61 6c 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 35 33 30 2d 35 66 34 2c 20 55 2b 31 30 61 30 2d 31 30 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 48 69 73 74 6f 72 69 63 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 41 72 69 61 6c 20 42 6f 6c 64 27 29 2c 20 6c 6f 63 61 6c 28 27 41 72 69 61 6c 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 35 33 30 2d 35 66 34 2c 20 55 2b 31 30 61 30 2d 31 30 66 66 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 2e Data Ascii: {font-family:'Segoe UI Historic';src:local('Arial');unicode-range:U+530-5f4, U+10a0-10ff}@font-face{font-family:'Segoe UI Historic';font-weight:700;src:local('Arial Bold'), local('Arial');unicode-range:U+530-5f4, U+10a0-10ff}#facebook .system-fonts--body.
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 65 67 75 6c 61 72 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 78 31 37 71 63 65 61 74 2d 42 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 31 6b 6e 32 32 72 66 2d 42 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 31 72 75 74 76 37 72 2d 42 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 36 30 70 78 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 30 70 78 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 36 Data Ascii: egular', sans-serif}@keyframes x17qceat-B{0%{opacity:1}100%{opacity:0}}@keyframes x1kn22rf-B{0%{transform:translateY(-100%)}100%{transform:translateY(0%)}}@keyframes x1rutv7r-B{0%{transform:translateY(60px)}100%{transform:translateY(-20px)}}@keyframes x6
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 20 32 70 78 20 34 70 78 20 76 61 72 28 2d 2d 6d 65 64 69 61 2d 69 6e 6e 65 72 2d 62 6f 72 64 65 72 29 7d 2e 78 31 30 78 6a 6b 79 6d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 36 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 78 31 30 79 33 69 35 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 78 31 31 37 6e 71 76 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 78 31 31 69 35 72 6e 6d 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 78 31 31 6a 6c 76 75 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 68 61 74 2d 6f 75 74 67 6f 69 6e 67 2d 6d 65 73 73 61 67 65 2d 62 75 62 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 7d 2e Data Ascii: 2px 4px var(--media-inner-border)}.x10xjkym{box-shadow:0 2px 6px var(--shadow-1)}.x10y3i5r{border-bottom-left-radius:4px}.x117nqv4{font-weight:bold}.x11i5rnm{margin-right:0}.x11jlvup{background-color:var(--chat-outgoing-message-bubble-background-color)}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50053	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	599	OUT	GET /rsrc.php/v3/yb/r/G3Nm7rYDpD0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:51 UTC	1840	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: OISQwDx3eeB9yyWA7r/uwg== Expires: Fri, 18 Apr 2025 20:06:55 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: P3hdGVbCJSyfuA4z4CeqvH3Vamg9O4mqhyTW7U2X/o8/kmaCo6gpsvwrmOMQ3w34YqZIyxztt3ZOPAS/dKNWAQ== Date: Wed, 24 Apr 2024 05:32:51 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 278291
2024-04-24 05:32:51 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:51 UTC	15980	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-04-24 05:32:51 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 26 26 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 64 26 26 61 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 7d 28 29 3b 62 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: ction a(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1;d.configurable=!0;"value"in d&&(d.writable=!0);Object.defineProperty(a,d.key,d)}}return function(b,c,d){c&&a(b.prototype,c);d&&a(b,d);return b}}();b.inheritsLoose=function(a
2024-04-24 05:32:51 UTC	16384	IN	Data Raw: 3d 6e 65 77 20 45 72 72 6f 72 28 6d 29 3b 6e 2e 6e 61 6d 65 3d 22 49 6e 76 61 72 69 61 6e 74 20 56 69 6f 6c 61 74 69 6f 6e 22 3b 6e 2e 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 3d 64 3b 6e 2e 6d 65 73 73 61 67 65 50 61 72 61 6d 73 3d 66 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 29 7d 29 3b 6e 2e 74 61 61 6c 4f 70 63 6f 64 65 73 3d 5b 63 28 22 66 62 2d 65 72 72 6f 72 2d 6c 69 74 65 22 29 2e 54 41 41 4c 4f 70 63 6f 64 65 2e 50 52 45 56 49 4f 55 53 5f 46 52 41 4d 45 5d 3b 6e 2e 73 74 61 63 6b 3b 74 68 72 6f 77 20 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 76 61 72 20 64 3d 22 4d 69 6e 69 66 69 65 64 20 69 6e 76 61 72 69 61 6e 74 20 23 22 2b 61 2b 22 3b 20 25 73 22 3b 62 2e 6c 65 6e 67 74 68 3e Data Ascii: =new Error(m);n.name="Invariant Violation";n.messageFormat=d;n.messageParams=f.map(function(a){return String(a)});n.taalOpcodes=[c("fb-error-lite").TAALOpcode.PREVIOUS_FRAME];n.stack;throw n}}function i(a,b){var d="Minified invariant #"+a+"; %s";b.length>
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 69 6f 6e 57 69 74 68 5f 65 72 72 6f 72 5f 22 2b 53 74 72 69 6e 67 28 63 2e 65 72 72 6f 72 29 29 7d 65 2e 6c 6f 67 67 69 6e 67 53 6f 75 72 63 65 3d 22 4f 4e 55 4e 48 41 4e 44 4c 45 44 52 45 4a 45 43 54 49 4f 4e 22 3b 65 2e 6e 61 6d 65 3d 65 3d 3d 3d 63 26 26 65 2e 6e 61 6d 65 21 3d 6e 75 6c 6c 26 26 65 2e 6e 61 6d 65 21 3d 3d 22 22 3f 65 2e 6e 61 6d 65 3a 74 79 70 65 6f 66 20 28 63 3d 3d 3d 6e 75 6c 6c 7c 7c 63 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 63 2e 6e 61 6d 65 29 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 2e 6e 61 6d 65 21 3d 3d 22 22 3f 63 2e 6e 61 6d 65 3a 64 21 3d 6e 75 6c 6c 26 26 64 2e 6c 65 6e 67 74 68 3e 30 3f 22 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 57 69 74 68 5f 22 2b 64 2e 6a 6f 69 6e 28 22 5f 22 29 3a 22 55 6e Data Ascii: ionWith_error_"+String(c.error))}e.loggingSource="ONUNHANDLEDREJECTION";e.name=e===c&&e.name!=null&&e.name!==""?e.name:typeof (c===null\|\|c===void 0?void 0:c.name)==="string"&&c.name!==""?c.name:d!=null&&d.length>0?"UnhandledRejectionWith_"+d.join("_"):"Un
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 29 7b 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 3d 62 7d 3b 63 2e 67 65 74 48 6f 6c 64 69 6e 67 42 65 68 61 76 69 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 7d 3b 63 2e 68 6f 6c 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 3b 63 21 3d 3d 22 70 65 72 73 69 73 74 65 6e 74 22 26 26 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 32 28 61 29 3b 69 66 28 63 21 3d 3d 22 65 76 65 6e 74 22 29 7b 76 61 72 20 64 3b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: ){this.$ArbiterEventHolder1[a]=b};c.getHoldingBehavior=function(a){return this.$ArbiterEventHolder1[a]};c.holdEvent=function(a){var c=this.$ArbiterEventHolder1[a];c!=="persistent"&&this.$ArbiterEventHolder2(a);if(c!=="event"){var d;for(var e=arguments.len
2024-04-24 05:32:52 UTC	14884	IN	Data Raw: 66 28 68 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 69 3d 68 2e 76 61 6c 75 65 7d 69 3d 69 3b 76 61 72 20 6a 3d 69 5b 30 5d 3b 69 3d 69 5b 31 5d 3b 62 2e 73 65 74 28 6a 2c 69 29 7d 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 7b 62 6c 6f 63 6b 69 6e 67 3a 6e 65 77 20 4d 61 70 28 29 2c 6e 6f 6e 62 6c 6f 63 6b 69 6e 67 3a 6e 65 77 20 4d 61 70 28 29 2c 22 64 65 66 61 75 6c 74 22 3a 6e 65 77 20 4d 61 70 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 6e 2e 61 64 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 6e 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 2c 6d 2e 69 6e 66 6f 72 6d 28 68 2c 61 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 6f 2e 61 64 64 28 70 28 61 2c Data Ascii: f(h.done)break;i=h.value}i=i;var j=i[0];i=i[1];b.set(j,i)}}return b}function b(){return{blocking:new Map(),nonblocking:new Map(),"default":new Map()}}function d(a){n.add(a)}function e(a){n["delete"](a),m.inform(h,a,"persistent")}function f(a,b){o.add(p(a,
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 3d 63 2e 6e 65 78 74 28 29 3b 69 66 28 65 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 66 3d 65 2e 76 61 6c 75 65 7d 66 3d 66 3b 76 61 72 20 69 3d 66 5b 30 5d 3b 66 3d 66 5b 31 5d 3b 68 5b 69 5d 3d 66 7d 72 65 74 75 72 6e 7b 73 65 74 50 72 6f 70 73 3a 62 2c 73 74 72 69 6e 67 50 72 6f 70 73 3a 67 2c 76 65 63 74 6f 72 50 72 6f 70 73 3a 68 7d 7d 3b 61 2e 63 6f 6d 62 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3b 61 21 3d 6e 75 6c 6c 26 26 62 21 3d 6e 75 6c 6c 3f 28 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2e 73 74 72 69 6e 67 50 72 6f 70 73 2c 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 29 2c 61 2e 73 65 74 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b Data Ascii: =c.next();if(e.done)break;f=e.value}f=f;var i=f[0];f=f[1];h[i]=f}return{setProps:b,stringProps:g,vectorProps:h}};a.combine=function(a,b){var c;a!=null&&b!=null?(a.stringProps=babelHelpers["extends"]({},b.stringProps,a.stringProps),a.setProps=babelHelpers[
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 74 72 69 6e 67 52 61 77 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 52 61 77 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 53 56 43 68 65 63 6b 65 72 22 29 2e 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 72 79 2c 63 28 22 50 48 50 51 75 65 72 79 53 65 72 69 61 6c 69 7a 65 72 4e 6f 45 6e 63 6f 64 69 6e 67 22 29 29 7d 3b 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 Data Ascii: tringRawQuery=function(){return a.prototype.toStringRawQuery.call(this,c("UriNeedRawQuerySVChecker").isDomainNeedRawQuery,c("PHPQuerySerializerNoEncoding"))};e.toStringPreserveQuery=function(){return a.prototype.toStringPreserveQuery.call(this,c("UriNeedR
2024-04-24 05:32:52 UTC	14884	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 65 74 42 6f 6f 74 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 3d 61 3b 66 6f 72 28 61 3d 30 3b 61 3c 6b 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 6b 5b 61 5d 3b 62 28 6c 29 7d 6b 3d 5b 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 24 31 3d 61 7d 76 61 72 20 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 31 3b 72 65 74 75 72 6e 20 61 7d 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 41 73 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 31 7d 3b 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 63 Data Ascii: unction(){a.setBootloader=function(a){l=a;for(a=0;a<k.length;a++){var b=k[a];b(l)}k=[]};function a(a){this.$1=a}var e=a.prototype;e.getModuleId=function(){var a=this.$1;return a};e.getModuleIdAsRef=function(){return this.$1};e.load=function(){var a=this,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50051	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	808	OUT	GET /rsrc.php/v3imEC4/yk/l/en_US/xJzhrSBy9e0sDrjlMfQMscqSWxwfxs4Y2DYvatkvPhoOrXpYBH72fzljBzpJFpC9mNK-Y4V06Ed5K1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:51 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: KLx/lknNST+Y+GXb2mQ6/w== Expires: Thu, 24 Apr 2025 05:32:51 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: cP4FeQKvDMoOB7OjjHahqDF3pSmwZk8q1Z7/B63i9H0kKMCylj/s82v3q01cFGM9eJw4Hgp7Em3BuVTAwJa/7w== Date: Wed, 24 Apr 2024 05:32:51 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=81, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 390189
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 47 65 6e 64 65 72 43 6f 6e 73 74 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 4e 4f 54 5f 41 5f 50 45 52 53 4f 4e 3a 30 2c 46 45 4d 41 4c 45 5f 53 49 4e 47 55 4c 41 52 3a 31 2c 4d 41 4c 45 5f 53 49 4e 47 55 4c 41 52 3a 32 2c 46 45 4d 41 4c 45 5f 53 49 4e 47 55 4c 41 52 5f 47 55 45 53 53 3a 33 2c 4d 41 4c 45 5f 53 49 4e 47 55 4c 41 52 5f 47 55 45 53 53 3a 34 2c 4d 49 58 45 44 5f 55 4e 4b 4e 4f 57 4e 3a 35 2c 4e 45 55 54 45 52 5f 53 49 4e 47 55 4c 41 52 3a 36 2c 55 4e 4b 4e 4f 57 4e 5f 53 49 4e 47 55 4c 41 52 3a 37 2c 46 45 4d 41 4c 45 5f 50 4c 55 52 41 4c 3a 38 2c 4d 41 4c 45 5f 50 4c 55 52 41 4c 3a 39 2c 4e 45 55 Data Ascii: ;/FB_PKG_DELIM/__d("GenderConst",[],(function(a,b,c,d,e,f){e.exports={NOT_A_PERSON:0,FEMALE_SINGULAR:1,MALE_SINGULAR:2,FEMALE_SINGULAR_GUESS:3,MALE_SINGULAR_GUESS:4,MIXED_UNKNOWN:5,NEUTER_SINGULAR:6,UNKNOWN_SINGULAR:7,FEMALE_PLURAL:8,MALE_PLURAL:9,NEU
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 2c 22 67 65 74 43 61 63 68 65 46 6f 72 54 79 70 65 22 2c 22 75 73 65 22 5d 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6f 5b 70 5d 3b 6d 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 64 28 22 66 62 2d 65 72 72 6f 72 22 29 2e 46 42 4c 6f 67 67 65 72 28 22 52 65 61 63 74 22 29 2e 6d 75 73 74 66 69 78 54 68 72 6f 77 28 22 52 65 61 63 74 20 46 6f 72 67 65 74 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 3a 20 75 6e 65 78 70 65 63 74 65 64 20 6e 75 6c 6c 20 64 69 73 70 61 74 63 68 65 72 22 29 3b 65 6c 73 65 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 28 62 3d 69 29 5b 61 5d 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 6f 2e 6c 65 6e 67 Data Ascii: ,"getCacheForType","use"];a=function(){var a=o[p];m[a]=function(){if(i==null)throw d("fb-error").FBLogger("React").mustfixThrow("React Forget internal error: unexpected null dispatcher");else{var b;return(b=i)[a].apply(b,arguments)}}};for(var p=0;p<o.leng
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 57 41 52 4e 5f 55 53 45 52 53 5f 54 48 45 59 5f 43 41 4e 4e 4f 54 5f 55 50 47 52 41 44 45 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2c 7b 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 3a 7b 67 65 74 20 63 75 72 72 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 62 2e 48 7d 2c 73 65 74 20 63 75 72 72 65 6e 74 28 61 29 7b 62 2e 48 3d 61 7d 7d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 43 61 63 68 65 3a 7b 67 65 74 20 63 75 72 72 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 62 2e 43 7d 2c 73 65 74 20 63 75 72 72 65 6e 74 28 61 29 7b 62 2e 43 3d 61 7d 7d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 7b 67 65 74 20 74 72 61 6e 73 69 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: RNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE;Object.assign(b,{ReactCurrentDispatcher:{get current(){return b.H},set current(a){b.H=a}},ReactCurrentCache:{get current(){return b.C},set current(a){b.C=a}},ReactCurrentBatchConfig:{get transition(){retu
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 66 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 28 68 7c 7c 64 28 22 72 65 61 63 74 22 29 29 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 69 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 21 3d 6e 75 6c 6c 26 26 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 62 29 7d 2c 5b 61 2c 62 5d 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 56 65 72 73 69 6f 6e 52 61 6e 67 65 22 2c 5b 22 69 6e 76 61 72 69 61 6e 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: f",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=(h\|\|d("react")).useCallback;function a(a,b){return i(function(c){c!=null&&c.setAttribute(a,b)},[a,b])}g["default"]=a}),98);__d("VersionRange",["invariant"],(function(a,b,c,d,e,f,g,h){"use strict"
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 7b 61 3d 61 2e 73 6c 69 63 65 28 29 3b 62 3d 62 2e 73 6c 69 63 65 28 29 3b 7a 28 61 2c 62 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 2e 6d 61 74 63 68 28 2f 5e 5b 78 2a 5d 24 2f 69 29 3b 69 66 28 64 29 7b 62 5b 63 5d 3d 61 5b 63 5d 3d 22 30 22 3b 69 66 28 64 5b 30 5d 3d 3d 3d 22 2a 22 26 26 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 64 3d 63 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 5b 64 5d 3d 22 30 22 7d 7d 7a 28 62 2c 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 5b 61 2c 62 5d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6d 61 74 63 68 28 6d 29 2c 64 3d 62 2e 6d 61 74 63 68 28 6d 29 3b 63 3d 63 26 26 Data Ascii: {a=a.slice();b=b.slice();z(a,b.length);for(var c=0;c<b.length;c++){var d=b[c].match(/^[x]$/i);if(d){b[c]=a[c]="0";if(d[0]===""&&c===b.length-1)for(d=c;d<a.length;d++)a[d]="0"}}z(b,a.length);return[a,b]}function B(a,b){var c=a.match(m),d=b.match(m);c=c&&
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 65 6e 67 69 6e 65 4e 61 6d 65 2c 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 65 6e 67 69 6e 65 56 65 72 73 69 6f 6e 2c 61 29 7d 29 2c 69 73 50 6c 61 74 66 6f 72 6d 3a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 70 6c 61 74 66 6f 72 6d 4e 61 6d 65 2c 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 70 6c 61 74 66 6f 72 6d 46 75 6c 6c 56 65 72 73 69 6f 6e 2c 61 2c 69 29 7d 29 2c 69 73 50 6c 61 74 66 6f 72 6d 41 72 63 68 69 74 65 63 74 75 72 65 3a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 Data Ascii: unction(a){return h(c("UserAgentData").engineName,c("UserAgentData").engineVersion,a)}),isPlatform:a(function(a){return h(c("UserAgentData").platformName,c("UserAgentData").platformFullVersion,a,i)}),isPlatformArchitecture:a(function(a){return h(c("UserAg
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 61 72 20 67 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 62 75 6c 6c 65 74 69 6e 5c 5c 2e 63 6f 6d 24 22 2c 22 69 22 29 2c 68 3d 5b 22 68 74 74 70 73 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 61 2e 69 73 45 6d 70 74 79 28 29 26 26 61 2e 74 6f 53 74 72 69 6e 67 28 29 21 3d 3d 22 23 22 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 61 2e 67 65 74 44 6f 6d 61 69 6e 28 29 26 26 21 61 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3f 21 31 3a 68 2e 69 6e 64 65 78 4f 66 28 61 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 29 21 3d 3d 2d 31 26 26 67 2e 74 65 73 74 28 61 2e 67 65 74 44 6f 6d 61 69 6e 28 29 29 7d 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 75 72 69 49 73 52 65 6c 61 74 69 76 65 50 61 Data Ascii: ar g=new RegExp("(^\|\\.)bulletin\\.com$","i"),h=["https"];function a(a){if(a.isEmpty()&&a.toString()!=="#")return!1;return!a.getDomain()&&!a.getProtocol()?!1:h.indexOf(a.getProtocol())!==-1&&g.test(a.getDomain())}f["default"]=a}),66);__d("uriIsRelativePa
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 74 75 72 6e 20 6b 3b 62 3d 62 2e 67 65 74 49 74 65 6d 28 22 6d 75 74 65 78 5f 22 2b 74 68 69 73 2e 6e 61 6d 65 29 3b 62 3d 28 28 61 3d 62 29 21 3d 6e 75 6c 6c 3f 61 3a 22 22 29 2e 73 70 6c 69 74 28 22 3a 22 29 3b 72 65 74 75 72 6e 20 62 26 26 70 61 72 73 65 49 6e 74 28 62 5b 31 5d 2c 31 30 29 3e 3d 44 61 74 65 2e 6e 6f 77 28 29 3f 62 5b 30 5d 3a 6e 75 6c 6c 7d 3b 62 2e 24 33 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6c 28 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 3b 61 3d 61 3d 3d 6e 75 6c 6c 3f 31 65 33 3a 61 3b 61 3d 44 61 74 65 2e 6e 6f 77 28 29 2b 61 3b 28 68 7c 7c 28 68 3d 63 28 22 57 65 62 53 74 6f 72 61 67 65 22 29 29 29 2e 73 65 74 49 74 65 6d 47 75 61 72 64 65 64 28 62 2c 22 6d 75 74 65 78 5f 22 2b 74 68 69 73 2e 6e 61 6d 65 2c 6b Data Ascii: turn k;b=b.getItem("mutex_"+this.name);b=((a=b)!=null?a:"").split(":");return b&&parseInt(b[1],10)>=Date.now()?b[0]:null};b.$3=function(a){var b=l();if(!b)return;a=a==null?1e3:a;a=Date.now()+a;(h\|\|(h=c("WebStorage"))).setItemGuarded(b,"mutex_"+this.name,k
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 72 61 67 65 22 29 29 29 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 46 6f 72 52 65 61 64 28 29 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 62 3d 22 63 68 65 63 6b 5f 71 75 6f 74 61 22 3b 74 72 79 7b 61 3d 28 69 7c 7c 28 69 3d 63 28 22 57 65 62 53 74 6f 72 61 67 65 22 29 29 29 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 3b 61 3f 28 61 2e 73 65 74 49 74 65 6d 28 62 2c 62 29 2c 61 2e 72 65 6d 6f 76 65 49 74 65 6d 28 62 29 2c 6f 3d 61 29 3a 6f 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 61 29 7b 6f 3d 6e 75 6c 6c 7d 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 72 65 76 2c 63 3d 61 2e 6e 65 78 74 3b 63 26 26 28 63 2e 70 72 65 76 3d 62 29 3b 62 26 26 28 62 2e 6e 65 78 74 3d 63 29 Data Ascii: rage"))).getLocalStorageForRead()}catch(a){return null}b="check_quota";try{a=(i\|\|(i=c("WebStorage"))).getLocalStorage();a?(a.setItem(b,b),a.removeItem(b),o=a):o=null}catch(a){o=null}}return o}function q(a){var b=a.prev,c=a.next;c&&(c.prev=b);b&&(b.next=c)
2024-04-24 05:32:51 UTC	1500	IN	Data Raw: 76 61 72 20 65 3d 73 28 62 2c 64 29 3b 69 66 28 65 20 69 6e 20 74 29 74 68 72 6f 77 20 63 28 22 65 72 72 22 29 28 22 44 75 70 6c 69 63 61 74 65 20 71 75 65 75 65 20 63 72 65 61 74 65 64 3a 20 22 2b 62 29 3b 64 3d 6e 65 77 20 61 28 62 2c 64 29 3b 74 5b 65 5d 3d 64 3b 76 5b 62 5d 3f 76 5b 62 5d 2e 70 75 73 68 28 64 29 3a 76 5b 62 5d 3d 5b 64 5d 3b 65 3d 75 5b 62 5d 3b 65 26 26 64 2e 73 65 74 48 61 6e 64 6c 65 72 28 65 29 3b 72 65 74 75 72 6e 20 64 7d 3b 61 2e 73 65 74 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 76 5b 61 5d 29 7b 76 61 72 20 63 3d 76 5b 61 5d 3b 66 6f 72 28 76 61 72 20 63 3d 63 2c 64 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 2c 65 3d 30 2c 63 3d 64 3f 63 3a 63 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c Data Ascii: var e=s(b,d);if(e in t)throw c("err")("Duplicate queue created: "+b);d=new a(b,d);t[e]=d;v[b]?v[b].push(d):v[b]=[d];e=u[b];e&&d.setHandler(e);return d};a.setHandler=function(a,b){if(v[a]){var c=v[a];for(var c=c,d=Array.isArray(c),e=0,c=d?c:c[typeof Symbol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50056	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	610	OUT	GET /rsrc.php/v3ijuz4/yz/l/en_US/6fCMsyVB7zA.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:51 UTC	1753	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: TlpMbafutkGhUpsAzLw/Dg== Expires: Wed, 23 Apr 2025 21:26:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: iY+FjwgIKsge1DQuKSd+o1FGXRsvYYk3UwhHJDXmSZkziqL0rJMJe7U1TwF76WnVV/jdBpzLHdpx1RybEqoYAg== Date: Wed, 24 Apr 2024 05:32:51 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=14, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1547694
2024-04-24 05:32:51 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:51 UTC	16058	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 74 79 6c 65 58 44 61 72 6b 54 68 65 6d 65 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 66 64 73 2d 62 6c 61 63 6b 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 30 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 30 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 32 30 22 3a 22 72 67 62 Data Ascii: /FB_PKG_DELIM/__d("CometStyleXDarkTheme",[],(function(a,b,c,d,e,f){e.exports={"fds-black":"black","fds-black-alpha-05":"rgba(0, 0, 0, 0.05)","fds-black-alpha-10":"rgba(0, 0, 0, 0.1)","fds-black-alpha-15":"rgba(0, 0, 0, 0.15)","fds-black-alpha-20":"rgb
2024-04-24 05:32:51 UTC	16384	IN	Data Raw: 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 68 65 61 64 6c 69 6e 65 33 2d 66 6f 6e 74 2d 73 69 7a 65 22 3a 22 31 2e 30 36 32 35 72 65 6d 22 2c 22 68 65 61 64 6c 69 6e 65 33 2d 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 22 37 30 30 22 2c 22 68 65 61 64 6c 69 6e 65 33 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 3a 22 31 2e 32 39 34 31 22 2c 22 6d 65 74 61 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 46 6f 6e 74 22 2c 22 6d 65 74 61 2d 66 6f 6e 74 2d 73 69 7a 65 22 3a 22 30 2e 38 31 32 35 72 65 6d 22 2c 22 6d 65 74 61 2d 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 22 34 30 30 22 2c 22 6d 65 74 61 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 3a 22 31 2e 33 38 34 36 22 2c 22 6d 65 74 61 2d 65 6d 70 68 61 73 69 Data Ascii: , system-ui, sans-serif","headline3-font-size":"1.0625rem","headline3-font-weight":"700","headline3-line-height":"1.2941","meta-font-family":"Placeholder Font","meta-font-size":"0.8125rem","meta-font-weight":"400","meta-line-height":"1.3846","meta-emphasi
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 6c 22 3a 22 31 36 70 78 22 2c 22 6e 61 76 2d 6c 69 73 74 2d 63 65 6c 6c 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 2d 77 69 74 68 2d 61 64 64 6f 6e 22 3a 22 31 36 70 78 22 2c 22 6e 75 78 2d 63 61 72 64 2d 62 6f 64 79 2d 70 61 64 64 69 6e 67 2d 65 6e 64 22 3a 22 32 34 70 78 22 2c 22 70 61 67 65 2d 66 6f 6f 74 65 72 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 22 3a 22 31 36 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 61 64 64 4f 6e 45 6e 64 2d 6d 61 72 67 69 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 38 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 61 64 64 4f 6e 53 74 61 72 74 2d 6d 61 72 67 69 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 31 32 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 61 64 Data Ascii: l":"16px","nav-list-cell-padding-vertical-with-addon":"16px","nux-card-body-padding-end":"24px","page-footer-padding-vertical":"16px","section-header-addOnEnd-margin-horizontal":"8px","section-header-addOnStart-margin-horizontal":"12px","section-header-ad
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 6f 5f 61 76 61 69 6c 61 62 69 6c 69 74 79 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 56 69 64 65 6f 4d 75 74 65 64 53 65 67 6d 65 6e 74 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6d 75 74 65 64 5f 73 65 67 6d 65 6e 74 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6d 75 74 65 5f 73 74 61 72 74 5f 74 69 6d 65 5f 69 6e 5f 73 65 63 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 Data Ascii: o_availability",storageKey:null},{alias:null,args:null,concreteType:"VideoMutedSegment",kind:"LinkedField",name:"muted_segments",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"mute_start_time_in_sec",storageKey:null},{alias:null,args
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 61 72 20 64 3d 7b 7d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 66 6f 72 28 76 61 72 20 61 3d 61 2e 65 6e 74 72 69 65 73 28 29 2c 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 2c 66 3d 30 2c 61 3d 65 3f 61 3a 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 3b 29 7b 76 61 72 20 67 3b 69 66 28 65 29 7b 69 66 28 66 3e 3d 61 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 67 3d 61 5b 66 2b 2b 5d 7d 65 6c 73 65 7b 66 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 67 3d 66 2e 76 61 6c 75 65 7d 67 3d 67 3b 64 5b 67 5b 30 5d 5d 3d 67 5b 31 5d 7d 65 6c 73 65 20 63 28 22 46 42 4c 6f 67 67 65 72 22 29 28 22 Data Ascii: ar d={};if(a!=null)for(var a=a.entries(),e=Array.isArray(a),f=0,a=e?a:a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var g;if(e){if(f>=a.length)break;g=a[f++]}else{f=a.next();if(f.done)break;g=f.value}g=g;d[g[0]]=g[1]}else c("FBLogger")("
2024-04-24 05:32:52 UTC	14884	IN	Data Raw: 22 22 3f 61 2e 64 6f 6d 61 69 6e 3a 22 22 2c 67 3d 61 2e 70 6f 72 74 21 3d 3d 22 22 3f 22 3a 22 2b 61 2e 70 6f 72 74 3a 22 22 2c 68 3d 61 2e 70 61 74 68 21 3d 3d 22 22 3f 61 2e 70 61 74 68 3a 65 21 3d 3d 22 22 26 26 65 21 3d 3d 22 6d 61 69 6c 74 6f 3a 22 7c 7c 66 21 3d 3d 22 22 7c 7c 67 21 3d 3d 22 22 3f 22 2f 22 3a 22 22 3b 63 3d 7a 28 66 2c 61 2e 6f 72 69 67 69 6e 61 6c 52 61 77 51 75 65 72 79 2c 61 2e 71 75 65 72 79 50 61 72 61 6d 73 2c 62 2c 63 2c 28 62 3d 64 29 21 3d 6e 75 6c 6c 3f 62 3a 61 2e 73 65 72 69 61 6c 69 7a 65 72 29 3b 64 3d 63 2e 6c 65 6e 67 74 68 3e 30 3f 22 3f 22 3a 22 22 3b 62 3d 61 2e 66 72 61 67 6d 65 6e 74 21 3d 3d 22 22 3f 22 23 22 2b 61 2e 66 72 61 67 6d 65 6e 74 3a 22 22 3b 61 3d 61 2e 66 72 61 67 6d 65 6e 74 3d 3d 3d 22 22 26 26 Data Ascii: ""?a.domain:"",g=a.port!==""?":"+a.port:"",h=a.path!==""?a.path:e!==""&&e!=="mailto:"\|\|f!==""\|\|g!==""?"/":"";c=z(f,a.originalRawQuery,a.queryParams,b,c,(b=d)!=null?b:a.serializer);d=c.length>0?"?":"";b=a.fragment!==""?"#"+a.fragment:"";a=a.fragment===""&&
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 6f 6e 74 65 78 74 22 29 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 54 45 58 54 5f 56 41 4c 55 45 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 48 65 72 6f 43 75 72 72 65 6e 74 49 6e 74 65 72 61 63 74 69 6f 6e 46 6f 72 4c 6f 67 67 69 6e 67 43 6f 6e 74 65 78 74 22 29 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6a 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 49 44 43 6f 6e 74 65 78 74 22 29 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6e 75 6c 6c 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 52 65 6c 61 79 50 72 6f 66 69 6c 65 72 43 6f 6e 74 65 78 74 22 29 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6b 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 7d 29 7d 29 7d 29 7d 61 2e Data Ascii: ontext").DEFAULT_CONTEXT_VALUE,children:i.jsx(c("HeroCurrentInteractionForLoggingContext").Provider,{value:j,children:i.jsx(c("HeroInteractionIDContext").Provider,{value:null,children:i.jsx(c("RelayProfilerContext").Provider,{value:k,children:b})})})})}a.
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 22 29 2e 63 75 72 72 65 6e 74 5f 64 6f 6d 61 69 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 72 65 74 75 72 6e 20 63 28 22 69 73 46 61 63 65 62 6f 6f 6b 55 52 49 22 29 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 72 65 74 75 72 6e 20 63 28 22 69 73 57 6f 72 6b 70 6c 61 63 65 44 6f 74 43 6f 6d 55 52 49 22 29 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 63 28 22 69 73 52 6f 6f 6d 73 55 52 49 22 29 28 61 29 26 26 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 69 73 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 3d 3d 3d 21 30 29 72 65 74 75 72 6e 21 30 3b 69 66 28 69 28 29 29 72 65 74 75 72 6e 20 77 28 61 29 7c 7c 63 28 22 69 73 4d 65 74 61 44 6f 74 43 6f 6d 55 52 49 22 29 28 61 29 3b 69 66 28 6a Data Ascii: ").current_domain)}function v(a){return c("isFacebookURI")(a)}function w(a){return c("isWorkplaceDotComURI")(a)}function a(a){if(c("isRoomsURI")(a)&&c("LinkshimHandlerConfig").is_mobile_device===!0)return!0;if(i())return w(a)\|\|c("isMetaDotComURI")(a);if(j
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 7d 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 65 3d 62 2e 64 69 73 61 62 6c 65 64 2c 66 3d 62 2e 6f 6e 50 72 65 73 73 53 74 61 72 74 2c 67 3d 62 2e 6f 6e 50 72 65 73 73 4d 6f 76 65 2c 68 3d 62 2e 6f 6e 50 72 65 73 73 45 6e 64 2c 6d 3d 62 2e 6f 6e 50 72 65 73 73 43 68 61 6e 67 65 2c 6e 3d 6a 28 7b 69 73 50 72 65 73 73 65 64 3a 21 31 2c 69 73 50 72 65 73 73 41 63 74 69 76 65 3a 21 31 2c 70 6f 69 6e 74 65 72 49 64 3a 6e 75 6c 6c 2c 62 6f 75 6e 64 73 3a 6e 75 6c 6c 2c 70 6f 69 6e 74 65 72 54 79 70 65 3a 22 22 2c 62 75 74 74 6f 6e 73 3a 30 2c 61 63 74 69 76 61 74 69 6f 6e 45 76 65 6e 74 3a 6e 75 6c 6c 7d 29 2c 6f Data Ascii: on:function(){d.stopPropagation()}};return f}function a(a,b){var e=b.disabled,f=b.onPressStart,g=b.onPressMove,h=b.onPressEnd,m=b.onPressChange,n=j({isPressed:!1,isPressActive:!1,pointerId:null,bounds:null,pointerType:"",buttons:0,activationEvent:null}),o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50054	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	610	OUT	GET /rsrc.php/v3imzX4/yX/l/en_US/UjFiliATh-l.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:51 UTC	1751	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: JS9EtiCC9lUIW2ViIJKiqg== Expires: Wed, 23 Apr 2025 21:26:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: vcd50YEBVx6ON72h52lrtIryyb5f6vwhwCBYXgYDoDrYydfAdIkpMAk1NLn78byVn/Mkl3iO4Qk1LtdO1YuxaA== Date: Wed, 24 Apr 2024 05:32:51 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=4, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 533162
2024-04-24 05:32:51 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:51 UTC	16058	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4c 6f 67 49 6e 48 69 64 64 65 6e 49 6e 70 75 74 73 5f 64 61 74 61 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 61 6c 75 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e Data Ascii: /FB_PKG_DELIM/__d("CometLogInHiddenInputs_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"value",storageKey:n
2024-04-24 05:32:51 UTC	16384	IN	Data Raw: 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 62 5f 74 65 73 74 69 6e 67 5f 65 6e 61 62 6c 65 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 72 65 73 65 74 5f 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 6b 65 74 63 68 5f 73 65 65 64 31 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 Data Ascii: rgs:null,kind:"ScalarField",name:"ab_testing_enabled",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"reset_uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sketch_seed1",storageKey:null},{alias:null,args:null,kind:"Sca
2024-04-24 05:32:51 UTC	16384	IN	Data Raw: 73 65 41 63 74 6f 72 28 29 3b 66 3d 66 5b 30 5d 3b 76 61 72 20 67 3d 63 28 22 75 73 65 52 6f 75 74 65 52 65 66 65 72 72 65 72 22 29 28 29 2c 68 3d 63 28 22 67 65 74 43 6f 6d 65 74 45 6e 74 69 74 79 4b 65 79 22 29 28 61 29 3b 68 3d 6b 28 68 29 3b 68 3d 28 68 3d 68 29 21 3d 6e 75 6c 6c 3f 68 3a 63 28 22 67 65 74 43 6f 6d 65 74 52 6f 75 74 65 4b 65 79 22 29 28 61 29 3b 67 3d 63 28 22 67 65 74 43 6f 6d 65 74 52 6f 75 74 65 41 63 74 6f 72 22 29 28 61 2c 67 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 67 2e 61 63 74 6f 72 49 44 29 3b 67 3d 28 67 3d 67 29 21 3d 6e 75 6c 6c 3f 67 3a 66 3b 66 3d 61 2e 61 63 74 6f 72 45 6e 76 69 72 6f 6e 6d 65 6e 74 4b 65 79 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 64 28 22 42 61 73 65 41 63 74 6f 72 50 72 6f 76 69 64 65 72 22 29 Data Ascii: seActor();f=f[0];var g=c("useRouteReferrer")(),h=c("getCometEntityKey")(a);h=k(h);h=(h=h)!=null?h:c("getCometRouteKey")(a);g=c("getCometRouteActor")(a,g==null?void 0:g.actorID);g=(g=g)!=null?g:f;f=a.actorEnvironmentKey;return i.jsxs(d("BaseActorProvider")
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 69 74 79 5f 74 79 70 65 21 3d 6e 75 6c 6c 3f 61 2e 65 6e 74 69 74 79 5f 69 64 21 3d 6e 75 6c 6c 3f 61 2e 65 6e 74 69 74 79 5f 74 79 70 65 2b 22 7c 7c 22 2b 61 2e 65 6e 74 69 74 79 5f 69 64 3a 61 2e 65 6e 74 69 74 79 5f 74 79 70 65 3a 22 5f 5f 6d 61 69 6e 5f 74 61 62 22 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 2c 65 3d 61 2e 63 6f 6e 74 65 6e 74 52 65 66 50 72 6f 76 69 64 65 72 2c 66 3d 61 2e 63 6f 6e 74 65 6e 74 53 74 79 6c 65 50 72 6f 76 69 64 65 72 2c 67 3d 61 2e 63 6f 6e 74 65 6e 74 58 53 74 79 6c 65 50 72 6f 76 69 64 65 72 2c 68 3d 63 28 22 75 73 65 43 6f 6d 65 74 52 6f 75 74 65 72 53 74 61 74 65 22 29 28 29 3b 61 3d 6a 28 63 28 22 43 6f 6d 65 74 43 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 43 6f 6e 74 65 78 74 22 29 29 3b 61 3d 61 2e Data Ascii: ity_type!=null?a.entity_id!=null?a.entity_type+"\|\|"+a.entity_id:a.entity_type:"__main_tab"}function a(a){var b,e=a.contentRefProvider,f=a.contentStyleProvider,g=a.contentXStyleProvider,h=c("useCometRouterState")();a=j(c("CometContentWrapperContext"));a=a.
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 22 29 28 29 3b 72 65 74 75 72 6e 20 62 3f 30 3a 28 62 3d 61 29 21 3d 6e 75 6c 6c 3f 62 3a 30 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 43 6f 6d 65 74 4d 65 74 61 4d 61 6e 61 67 65 72 42 61 64 67 65 43 6f 75 6e 74 22 2c 5b 22 52 65 6c 61 79 48 6f 6f 6b 73 22 2c 22 72 65 6c 61 79 2d 72 75 6e 74 69 6d 65 22 2c 22 75 73 65 43 6f 6d 65 74 4d 65 74 61 4d 61 6e 61 67 65 72 42 61 64 67 65 43 6f 75 6e 74 51 75 65 72 79 2e 67 72 61 70 68 71 6c 22 2c 22 75 73 65 4d 61 79 62 65 5a 65 72 6f 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 42 61 64 67 65 43 6f 75 6e 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 21 3d 3d 76 Data Ascii: ")();return b?0:(b=a)!=null?b:0}g["default"]=a}),98);__d("useCometMetaManagerBadgeCount",["RelayHooks","relay-runtime","useCometMetaManagerBadgeCountQuery.graphql","useMaybeZeroNotificationsBadgeCount"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h!==v
2024-04-24 05:32:52 UTC	14884	IN	Data Raw: 28 29 3b 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 2c 66 2c 67 3b 28 69 7c 7c 28 69 3d 64 28 22 4a 53 53 63 68 65 64 75 6c 65 72 22 29 29 29 2e 73 63 68 65 64 75 6c 65 53 70 65 63 75 6c 61 74 69 76 65 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 6f 6e 52 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 62 2e 62 61 74 63 68 53 75 62 73 63 72 69 62 65 3b 66 3d 62 28 61 29 7d 29 2c 6c 2e 6f 6e 52 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 62 2e 73 75 62 73 63 72 69 62 65 3b 63 3d 62 28 61 29 7d 29 2c 62 28 22 63 72 3a 31 37 33 38 39 30 34 22 29 21 3d 6e 75 6c 6c 26 26 62 28 22 63 72 3a 31 37 33 38 39 30 34 22 29 2e 6f 6e 52 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 62 2e 73 75 62 73 63 72 Data Ascii: ();j(function(){var c,f,g;(i\|\|(i=d("JSScheduler"))).scheduleSpeculativeCallback(function(){k.onReady(function(b){b=b.batchSubscribe;f=b(a)}),l.onReady(function(b){b=b.subscribe;c=b(a)}),b("cr:1738904")!=null&&b("cr:1738904").onReady(function(b){b=b.subscr
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 48 65 6c 70 66 75 6c 29 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 31 3b 69 66 28 67 3d 3d 6e 75 6c 6c 7c 7c 67 2e 73 74 6f 72 61 67 65 52 65 66 2e 63 75 72 72 65 6e 74 2e 68 61 73 41 6e 73 77 65 72 65 64 53 75 72 76 65 79 3d 3d 3d 21 30 29 72 65 74 75 72 6e 21 31 3b 69 66 28 67 2e 73 74 6f 72 61 67 65 52 65 66 2e 63 75 72 72 65 6e 74 2e 69 6e 6c 69 6e 65 53 75 72 76 65 79 43 6f 69 6e 66 6c 69 70 52 65 73 75 6c 74 3d 3d 6e 75 6c 6c 29 7b 61 3d 64 28 22 52 61 6e 64 6f 6d 22 29 2e 63 6f 69 6e 66 6c 69 70 28 62 29 3b 67 2e 73 74 6f 72 61 67 65 52 65 66 2e 63 75 72 72 65 6e 74 2e 69 6e 6c 69 6e 65 53 75 72 76 65 79 43 6f 69 6e 66 6c 69 70 52 65 73 75 6c 74 3d 61 7d 72 65 74 75 72 6e 20 67 2e 73 74 6f 72 61 67 65 52 65 66 2e 63 75 72 72 65 6e 74 2e 69 6e 6c 69 Data Ascii: Helpful)==null)return!1;if(g==null\|\|g.storageRef.current.hasAnsweredSurvey===!0)return!1;if(g.storageRef.current.inlineSurveyCoinflipResult==null){a=d("Random").coinflip(b);g.storageRef.current.inlineSurveyCoinflipResult=a}return g.storageRef.current.inli
2024-04-24 05:32:52 UTC	16384	IN	Data Raw: 7b 68 28 7b 70 61 79 6c 6f 61 64 3a 61 2c 74 79 70 65 3a 22 72 65 6d 6f 76 65 43 61 6c 6c 6f 75 74 22 7d 29 7d 2c 5b 5d 29 2c 71 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 28 61 3d 6e 2e 63 75 72 72 65 6e 74 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 72 65 70 6f 73 69 74 69 6f 6e 28 29 7d 2c 5b 5d 29 3b 61 3d 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 61 64 64 43 61 6c 6c 6f 75 74 3a 6f 2c 72 65 6d 6f 76 65 43 61 6c 6c 6f 75 74 3a 70 2c 72 65 70 6f 73 69 74 69 6f 6e 43 61 6c 6c 6f 75 74 3a 71 7d 7d 2c 5b 6f 2c 70 2c 71 5d 29 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 65 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 61 2c 63 68 69 6c 64 72 65 6e 3a 5b 69 2e 6a 73 78 28 63 28 22 42 61 73 65 56 69 65 77 2e 72 Data Ascii: {h({payload:a,type:"removeCallout"})},[]),q=j(function(){var a;(a=n.current)==null?void 0:a.reposition()},[]);a=k(function(){return{addCallout:o,removeCallout:p,repositionCallout:q}},[o,p,q]);return i.jsxs(e.Provider,{value:a,children:[i.jsx(c("BaseView.r
2024-04-24 05:32:52 UTC	14884	IN	Data Raw: 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 56 69 64 65 6f 50 6c 61 79 65 72 41 75 74 6f 70 6c 61 79 52 75 6c 65 73 50 72 6f 76 69 64 65 72 22 2c 5b 22 56 69 64 65 6f 50 6c 61 79 65 72 56 69 65 77 61 62 69 6c 69 74 79 43 6f 6e 73 74 61 6e 74 73 22 2c 22 63 72 65 61 74 65 45 76 61 6c 75 61 74 65 56 69 64 65 6f 41 75 74 6f 70 6c 61 79 49 67 6e 6f 72 65 4f 6e 4c 6f 77 42 61 6e 64 77 69 64 74 68 52 75 6c 65 22 2c 22 63 72 65 61 74 65 45 76 61 6c 75 61 74 65 56 69 64 65 6f 41 75 74 6f 70 6c 61 79 50 61 75 73 65 4f 6e 49 6e 76 69 73 69 62 6c 65 52 75 6c 65 22 2c 22 63 72 65 61 74 65 45 76 61 6c 75 61 74 65 56 69 64 65 6f 41 75 74 6f 70 6c 61 79 50 61 75 73 65 4f 6e 4d 75 74 65 64 49 6e 76 69 73 69 62 6c 65 52 75 6c 65 22 2c 22 65 Data Ascii: "default"]=a}),66);__d("VideoPlayerAutoplayRulesProvider",["VideoPlayerViewabilityConstants","createEvaluateVideoAutoplayIgnoreOnLowBandwidthRule","createEvaluateVideoAutoplayPauseOnInvisibleRule","createEvaluateVideoAutoplayPauseOnMutedInvisibleRule","e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50052	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:51 UTC	610	OUT	GET /rsrc.php/v3idBq4/yT/l/en_US/RS5ioqIRilP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:51 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: hRBULWh6TXpzzKPKGK7x2g== Expires: Tue, 22 Apr 2025 21:53:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: mUtIbt4rw2up75IY1gtHRCMhZbdUMrlqqYUgVCApJbB0eONtRak+ssOY7etxADAgnz5A9i2vRF21KdLeAl4KIg== Date: Wed, 24 Apr 2024 05:32:51 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 46607
2024-04-24 05:32:51 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:51 UTC	16060	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 73 65 43 61 6c 6c 6f 75 74 49 6d 70 6c 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 2e 72 65 61 63 74 22 2c 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 41 6e 63 68 6f 72 52 6f 6f 74 43 6f 6e 74 65 78 74 22 2c 22 4c 61 79 6f 75 74 41 6e 69 6d 61 74 69 6f 6e 42 6f 75 6e 64 61 72 79 43 6f 6e 74 65 78 74 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 6f 6d 65 74 44 69 73 70 6c 61 79 54 69 6d 69 6e 67 54 72 61 63 6b 65 72 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 28 68 3d 64 28 Data Ascii: /FB_PKG_DELIM/__d("BaseCalloutImpl.react",["BaseContextualLayer.react","BaseContextualLayerAnchorRootContext","LayoutAnimationBoundaryContext","react","useCometDisplayTimingTrackerForInteraction"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d(
2024-04-24 05:32:51 UTC	16384	IN	Data Raw: 68 29 3d 3d 3d 61 2e 77 69 64 74 68 29 72 65 74 75 72 6e 3b 64 3d 61 3b 62 28 61 29 7d 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 62 3d 61 2e 68 65 69 67 68 74 3b 61 3d 61 2e 77 69 64 74 68 3b 65 28 7b 68 65 69 67 68 74 3a 62 2c 77 69 64 74 68 3a 61 7d 29 7d 3b 76 61 72 20 66 3d 63 28 22 43 6f 6d 65 74 54 68 72 6f 74 74 6c 65 22 29 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 68 65 69 67 68 74 3b 61 3d 61 2e 77 69 64 74 68 3b 69 66 28 62 3d 3d 3d 30 26 26 61 3d 3d 3d 30 29 72 65 74 75 72 6e 3b 65 28 7b 68 65 69 67 68 74 3a 62 2c 77 69 64 74 68 3a 61 7d 29 7d 2c 32 30 30 2c 7b 6c 65 61 64 69 6e 67 3a 21 30 2c 74 72 61 69 6c 69 6e 67 3a 21 30 Data Ascii: h)===a.width)return;d=a;b(a)};a=function(a){a=a.getBoundingClientRect();var b=a.height;a=a.width;e({height:b,width:a})};var f=c("CometThrottle")(function(a){var b=a.height;a=a.width;if(b===0&&a===0)return;e({height:b,width:a})},200,{leading:!0,trailing:!0
2024-04-24 05:32:51 UTC	14162	IN	Data Raw: 74 43 6f 6e 74 61 69 6e 65 72 44 69 76 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 72 65 6d 6f 76 65 46 72 6f 6d 4d 61 70 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 69 66 28 61 2e 68 61 73 28 62 29 29 7b 76 61 72 20 63 3d 6e 65 77 20 4d 61 70 28 61 29 3b 63 5b 22 64 65 6c 65 74 65 22 5d 28 62 29 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 61 7d 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 47 6c 6f 62 61 6c 56 69 64 65 6f 50 6f 72 74 73 4d 61 6e 61 67 65 72 22 2c 5b 22 61 64 64 54 6f 4d 61 70 22 2c 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 2c 22 67 6b 78 22 2c 22 72 65 6d 6f 76 65 46 Data Ascii: tContainerDiv=a}),98);__d("removeFromMap",[],(function(a,b,c,d,e,f){"use strict";function a(a,b){if(a.has(b)){var c=new Map(a);c["delete"](b);return c}return a}f["default"]=a}),66);__d("GlobalVideoPortsManager",["addToMap","emptyFunction","gkx","removeF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50057	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:52 UTC	720	OUT	GET /rsrc.php/v3i4eM4/yo/l/en_US/dHfUl44LAS2qwhyhejQkZD0RJQViAVi4_f7uDpbF6yGDONAvDdczOBaB3rHKz4xnM0PMnKn0vHvpru5esQygl-k68yUUHAuQc6MqHVuuLBbAiCfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:52 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: +hBySntwIGTjqsmAe16pjQ== Expires: Thu, 24 Apr 2025 05:32:52 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: UCi8uaNDZl9iHGA8miDvX1+8Y9U7zRYyaDa/ONVhQ0XJwSWV02mkmqQQR2OSl9v5AD5NRwADGyaqfqYRgKKsJQ== Date: Wed, 24 Apr 2024 05:32:52 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=78, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 250160
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 65 6e 74 69 74 79 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 62 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 57 6f 72 6b 46 6f 72 65 69 67 6e 45 6e 74 69 74 79 49 6e 66 6f 22 2c 6b Data Ascii: ;/FB_PKG_DELIM/__d("CometTextWithEntitiesRelay_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},b={alias:null,args:null,concreteType:"WorkForeignEntityInfo",k
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 61 73 68 74 61 67 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 72 6f 75 70 48 61 73 68 74 61 67 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 65 6e 74 69 74 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 61 67 65 73 43 6f 6d 65 74 50 61 67 65 4c 69 6e 6b 5f 70 61 67 65 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 70 61 67 65 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 2c 7b 61 6c 69 61 73 3a 6e Data Ascii: ashtag",kind:"ModuleImport"}],type:"GroupHashtag",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometTextWithEntitiesRelay_entity",fragmentName:"PagesCometPageLink_page",fragmentPropName:"page",kind:"ModuleImport"},{alias:n
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 22 77 65 62 5f 6c 69 6e 6b 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 66 62 63 6c 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a Data Ascii: "web_link",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"url",storageKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"fbclid",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 54 69 74 6c 65 53 65 6e 74 65 6e 63 65 47 72 6f 75 70 4a 6f 69 6e 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 65 70 5f 6c 69 6e 6b 5f 6e 75 6d 62 65 72 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 50 61 67 65 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 Data Ascii: Key:null},{args:null,kind:"FragmentSpread",name:"CometTitleSentenceGroupJoinButtonRenderer_entity"},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"deep_link_number",storageKey:null}],type:"PageWhatsAppNumber",abstractKey
2024-04-24 05:32:52 UTC	447	IN	Data Raw: 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6c 3d 5b 63 2c 6b 5d 2c 6d 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 57 6f 72 6b 46 6f 72 65 69 67 6e 45 6e 74 69 74 79 49 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 6f 72 6b 5f 66 6f 72 65 69 67 6e 5f 65 6e 74 69 74 79 5f 69 6e 66 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e Data Ascii: kind:"ScalarField",name:"name",storageKey:null},l=[c,k],m={alias:null,args:null,concreteType:"WorkForeignEntityInfo",kind:"LinkedField",name:"work_foreign_entity_info",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"type",storageKey:n
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 44 65 6c 69 67 68 74 41 74 52 61 6e 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 6c 69 67 68 74 5f 72 61 6e 67 65 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 61 2c 62 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 44 65 6c 69 67 68 74 43 61 6d 70 61 69 67 6e 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 61 6d 70 61 69 67 6e 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 63 2c 64 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 65 2c 63 6f 6e 63 72 65 74 65 54 79 70 Data Ascii: args:null,concreteType:"DelightAtRange",kind:"LinkedField",name:"delight_ranges",plural:!0,selections:[a,b,{alias:null,args:null,concreteType:"TextDelightCampaign",kind:"LinkedField",name:"campaign",plural:!1,selections:[c,d,{alias:null,args:e,concreteTyp
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 41 74 52 61 6e 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 67 67 72 65 67 61 74 65 64 5f 72 61 6e 67 65 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 61 2c 62 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 75 6e 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 Data Ascii: ull},{alias:null,args:null,concreteType:"AggregatedEntitiesAtRange",kind:"LinkedField",name:"aggregated_ranges",plural:!0,selections:[a,b,{alias:null,args:null,kind:"ScalarField",name:"count",storageKey:null},{alias:null,args:null,concreteType:null,kind:"
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 61 67 65 73 43 6f 6d 65 74 50 61 67 65 4c 69 6e 6b 5f 70 61 67 65 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 70 61 67 65 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 61 74 65 67 6f 72 79 5f 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 65 72 69 66 69 63 61 74 69 Data Ascii: ithEntitiesRelay_textWithEntities",fragmentName:"PagesCometPageLink_page",fragmentPropName:"page",kind:"ModuleImport"},{alias:null,args:null,kind:"ScalarField",name:"category_type",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"verificati
2024-04-24 05:32:52 UTC	1500	IN	Data Raw: 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 66 62 63 6c 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6c 79 6e 78 5f 6d 6f 64 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 45 78 74 65 72 6e 61 6c 57 65 62 4c 69 6e 6b 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 57 65 62 4c 69 6e 6b 61 62 6c 65 22 2c 61 62 73 74 72 61 63 74 4b Data Ascii: gment",selections:[{alias:null,args:null,kind:"ScalarField",name:"fbclid",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"lynx_mode",storageKey:null}],type:"ExternalWebLink",abstractKey:null}],storageKey:null}],type:"WebLinkable",abstractK
2024-04-24 05:32:52 UTC	910	IN	Data Raw: 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 65 70 5f 6c 69 6e 6b 5f 6e 75 6d 62 65 72 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 50 61 67 65 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6b 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 63 6b 65 72 5f 73 79 6d 62 6f 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e Data Ascii: ent",selections:[{alias:null,args:null,kind:"ScalarField",name:"deep_link_number",storageKey:null}],type:"PageWhatsAppNumber",abstractKey:null},{kind:"InlineFragment",selections:[k,{alias:null,args:null,kind:"ScalarField",name:"ticker_symbol",storageKey:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50058	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:52 UTC	610	OUT	GET /rsrc.php/v3iQbs4/ya/l/en_US/AgKumEiNrse.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:53 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 9Ia9V0P/Esr2m7n9W34cvg== Expires: Tue, 22 Apr 2025 21:53:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: iIBIeVVjW8JAT8X0xRsXacDVsooD1crRaqR1HGZjp+b75D0novsURFAA3QMmVlR6nsCQLSK744M7eK+g7dcwCQ== Date: Wed, 24 Apr 2024 05:32:52 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=10, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 130991
2024-04-24 05:32:53 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:53 UTC	16058	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 49 6d 61 67 65 46 72 6f 6d 49 58 56 61 6c 75 65 52 65 6c 61 79 57 72 61 70 70 65 72 5f 73 70 72 69 74 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 49 6d 61 67 65 46 72 6f 6d 49 58 56 61 6c 75 65 52 65 6c 61 79 57 72 61 70 70 65 72 5f 73 70 72 69 74 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a Data Ascii: /FB_PKG_DELIM/__d("CometImageFromIXValueRelayWrapper_sprite.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometImageFromIXValueRelayWrapper_sprite",selections:[{alias:null,args:null,kind:
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 2c 22 31 66 31 39 36 22 3a 31 2c 22 31 66 31 39 37 22 3a 31 2c 22 31 66 31 39 38 22 3a 31 2c 22 31 66 31 39 39 22 3a 31 2c 22 31 66 31 39 61 22 3a 31 2c 22 31 66 31 65 36 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 65 38 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 65 39 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 65 61 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 65 62 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 65 63 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 65 65 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 66 31 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 66 32 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 66 34 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 66 36 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 66 37 22 3a 31 2c 22 31 66 31 65 36 5f 31 66 31 66 38 22 3a 31 2c 22 31 Data Ascii: ,"1f196":1,"1f197":1,"1f198":1,"1f199":1,"1f19a":1,"1f1e6":1,"1f1e6_1f1e8":1,"1f1e6_1f1e9":1,"1f1e6_1f1ea":1,"1f1e6_1f1eb":1,"1f1e6_1f1ec":1,"1f1e6_1f1ee":1,"1f1e6_1f1f1":1,"1f1e6_1f1f2":1,"1f1e6_1f1f4":1,"1f1e6_1f1f6":1,"1f1e6_1f1f7":1,"1f1e6_1f1f8":1,"1
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 5f 32 30 30 64 5f 31 66 33 65 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 33 65 64 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 66 22 Data Ascii: _200d_1f3eb":1,"1f468_1f3ff_200d_1f3ed":1,"1f468_1f3ff_200d_1f466_1f3ff":1,"1f468_1f3ff_200d_1f466_1f3ff_200d_1f466_1f3ff":1,"1f468_1f3ff_200d_1f467_1f3ff":1,"1f468_1f3ff_200d_1f467_1f3ff_200d_1f466_1f3ff":1,"1f468_1f3ff_200d_1f467_1f3ff_200d_1f467_1f3ff"
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 32 36 34 32 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 36 34 37 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 36 34 37 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 Data Ascii: 2642":1,"1f647_1f3fc_200d_2640":1,"1f647_1f3fc_200d_2642":1,"1f647_1f3fd_200d_2640":1,"1f647_1f3fd_200d_2642":1,"1f647_1f3fe_200d_2640":1,"1f647_1f3fe_200d_2642":1,"1f647_1f3ff_200d_2640":1,"1f647_1f3ff_200d_2642":1,"1f647_200d_2640":1,"1f647_200d_2642":1
2024-04-24 05:32:53 UTC	1500	IN	Data Raw: 5f 31 66 34 36 38 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 34 38 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 34 38 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 34 38 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 34 38 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 65 5f 32 30 30 64 5f 31 66 33 37 63 Data Ascii: _1f468_1f3fb":1,"1f468_1f3fd_200d_2764_200d_1f48b_200d_1f468_1f3fc":1,"1f468_1f3fd_200d_2764_200d_1f48b_200d_1f468_1f3fd":1,"1f468_1f3fd_200d_2764_200d_1f48b_200d_1f468_1f3fe":1,"1f468_1f3fd_200d_2764_200d_1f48b_200d_1f468_1f3ff":1,"1f468_1f3fe_200d_1f37c
2024-04-24 05:32:53 UTC	14884	IN	Data Raw: 66 66 5f 32 30 30 64 5f 31 66 39 62 32 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 33 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 63 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 64 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 33 66 66 5f 31 66 34 36 38 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f Data Ascii: ff_200d_1f9b2":1,"1f468_1f3ff_200d_1f9b3":1,"1f468_1f3ff_200d_1f9bc":1,"1f468_1f3ff_200d_1f9bd":1,"1f468_1f3ff_200d_2764_200d_1f3ff_1f468":1,"1f468_1f3ff_200d_2764_200d_1f468_1f3fb":1,"1f468_1f3ff_200d_2764_200d_1f468_1f3fc":1,"1f468_1f3ff_200d_2764_200d_
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 31 66 39 62 38 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 62 38 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 62 38 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 62 39 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 39 62 39 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 Data Ascii: 1f9b8_1f3ff_200d_2642":1,"1f9b8_200d_2640":1,"1f9b8_200d_2642":1,"1f9b9":1,"1f9b9_1f3fb":1,"1f9b9_1f3fb_200d_2640":1,"1f9b9_1f3fb_200d_2642":1,"1f9b9_1f3fc":1,"1f9b9_1f3fc_200d_2640":1,"1f9b9_1f3fc_200d_2642":1,"1f9b9_1f3fd":1,"1f9b9_1f3fd_200d_2640":1,"1
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 65 38 3a 7b 68 65 69 67 68 74 3a 22 78 64 6b 37 70 74 22 2c 77 69 64 74 68 3a 22 78 31 78 63 35 35 76 7a 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 65 6d 6f 6a 69 2c 64 3d 61 2e 72 65 73 6f 75 72 63 65 2c 65 3d 61 2e 73 69 7a 65 3b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 31 36 3a 65 3b 61 3d 61 2e 74 65 73 74 69 64 3b 61 3d 64 7c 7c 63 28 22 46 42 45 6d 6f 6a 69 52 65 73 6f 75 72 63 65 22 29 2e 66 72 6f 6d 43 6f 64 65 70 6f 69 6e 74 73 28 62 29 3b 64 3d 61 21 3d 6e 75 6c 6c 3f 61 2e 67 65 74 49 6d 61 67 65 55 52 4c 28 65 29 3a 6e 75 6c 6c 3b 61 3d 62 2e 6a 6f 69 6e 28 22 22 29 3b 72 65 74 75 72 6e 20 64 3d 3d 6e 75 6c 6c 3f 6a 2e 6a 73 78 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a Data Ascii: e8:{height:"xdk7pt",width:"x1xc55vz",$$css:!0}};function a(a){var b=a.emoji,d=a.resource,e=a.size;e=e===void 0?16:e;a=a.testid;a=d\|\|c("FBEmojiResource").fromCodepoints(b);d=a!=null?a.getImageURL(e):null;a=b.join("");return d==null?j.jsx("span",{className:
2024-04-24 05:32:53 UTC	14884	IN	Data Raw: 75 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 6e 32 6f 6e 72 36 22 2c 7a 49 6e 64 65 78 3a 22 78 31 6a 61 32 75 32 7a 22 2c 24 24 63 73 73 3a 21 30 7d 2c 72 6f 6f 74 57 69 74 68 49 6e 63 72 65 61 73 65 64 48 65 69 67 68 74 3a 7b 6d 69 6e 48 65 69 67 68 74 3a 22 78 31 77 69 77 79 72 6d 22 2c 24 24 63 73 73 3a 21 30 7d 2c 73 65 6c 65 63 74 65 64 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 31 61 76 31 62 6f 61 22 2c 24 24 63 73 73 3a 21 30 7d 2c 73 65 6c 65 63 74 65 64 57 61 73 68 42 61 63 6b 67 72 6f 75 6e 64 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 6c 6a 75 6c 6d 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 73 74 61 72 74 41 64 64 4f 6e 3a 7b 61 6c 69 67 6e 53 65 6c 66 3a 22 78 71 63 72 7a 37 79 22 2c 64 69 73 70 6c 61 79 3a 22 Data Ascii: u",position:"x1n2onr6",zIndex:"x1ja2u2z",$$css:!0},rootWithIncreasedHeight:{minHeight:"x1wiwyrm",$$css:!0},selected:{backgroundColor:"x1av1boa",$$css:!0},selectedWashBackground:{backgroundColor:"xljulmy",$$css:!0},startAddOn:{alignSelf:"xqcrz7y",display:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50060	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:53 UTC	610	OUT	GET /rsrc.php/v3ikCN4/yU/l/en_US/dnVV_isSAif.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:53 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 5B1COYGM4VL2h7c3hGYH6A== Expires: Tue, 22 Apr 2025 21:53:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: KYDBYP/ll2hj1f/S2ldcklz6fAeURxRA0W7JHLRa8cKyljaKBhEqvQtgoYHFO02UoGCVJVPbYihwgr7n6LGu1w== Date: Wed, 24 Apr 2024 05:32:53 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 86407
2024-04-24 05:32:53 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:53 UTC	16060	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 75 73 65 42 61 73 65 45 6e 74 69 74 79 48 65 61 64 65 72 50 72 6f 66 69 6c 65 5f 70 72 6f 66 69 6c 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 52 6f 6f 74 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 75 73 65 42 61 73 65 45 6e 74 69 74 79 48 65 61 64 65 72 50 72 6f 66 69 6c 65 5f 70 72 6f 66 69 6c 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 Data Ascii: /FB_PKG_DELIM/__d("useBaseEntityHeaderProfile_profile.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"useBaseEntityHeaderProfile_profile",selections:[{alia
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 6c 65 52 65 70 6f 72 74 45 78 70 65 72 74 69 73 65 45 78 70 65 72 69 65 6e 63 65 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 43 6f 6e 74 65 78 74 75 61 6c 50 72 6f 66 69 6c 65 52 65 70 6f 72 74 45 78 70 65 72 74 69 73 65 45 78 70 65 72 69 65 6e 63 65 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 Data Ascii: leReportExpertiseExperienceHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileActionContextualProfileReportExpertiseExperienceHandler",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometAc
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 65 74 54 69 6c 65 5f 61 63 74 69 6f 6e 4d 65 6e 75 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6c 65 5f 61 63 74 69 6f 6e 4d 65 6e 75 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6c 65 5f 61 63 74 69 6f 6e 4d 65 6e Data Ascii: etTile_actionMenu.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometTile_actionMenu",selections:[{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometTile_actionMen
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 61 63 74 69 6f 6e 3a 22 54 48 52 4f 57 22 2c 70 61 74 68 3a 22 69 64 22 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 6d 69 78 65 64 5f 70 65 72 6d 73 5f 76 32 5f 61 66 74 65 72 5f 6d 69 67 72 61 74 69 6f 6e 5f 77 61 72 6e 69 6e 67 5f 64 69 61 6c 6f 67 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 55 73 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 Data Ascii: ll,kind:"ScalarField",name:"id",storageKey:null},action:"THROW",path:"id"},{alias:null,args:null,kind:"ScalarField",name:"should_show_mixed_perms_v2_after_migration_warning_dialog",storageKey:null}],type:"User",abstractKey:null};e.exports=a}),null);__d("
2024-04-24 05:32:53 UTC	1500	IN	Data Raw: 29 7b 63 28 22 50 72 6f 66 69 6c 65 45 6e 67 61 67 65 6d 65 6e 74 45 76 65 6e 74 73 46 61 6c 63 6f 45 76 65 6e 74 22 29 2e 6c 6f 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 61 2c 7b 65 76 65 6e 74 5f 74 79 70 65 3a 67 2c 70 72 6f 66 69 6c 65 5f 73 65 73 73 69 6f 6e 5f 69 64 3a 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 53 65 73 73 69 6f 6e 22 29 2e 67 65 74 28 65 2c 66 29 2c 76 69 65 77 65 65 5f 75 73 65 72 69 64 3a 65 7d 29 7d 29 7d 2c 5b 61 2c 65 2c 67 2c 66 5d 29 3b 72 65 74 75 72 6e 20 63 28 22 75 73 65 53 69 6e 67 6c 65 50 61 72 74 69 61 6c 56 69 65 77 49 6d 70 72 65 73 73 69 6f 6e 22 29 28 7b 6f 6e 49 6d 70 72 65 73 73 69 6f 6e 53 74 61 72 74 3a 62 7d Data Ascii: ){c("ProfileEngagementEventsFalcoEvent").log(function(){return babelHelpers["extends"]({},a,{event_type:g,profile_session_id:d("ProfileCometSession").get(e,f),viewee_userid:e})})},[a,e,g,f]);return c("useSinglePartialViewImpression")({onImpressionStart:b}
2024-04-24 05:32:53 UTC	14884	IN	Data Raw: 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 64 2c 7b 70 72 6f 66 69 6c 65 5f 70 72 6f 64 75 63 74 5f 62 75 63 6b 65 74 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 29 29 3b 72 65 74 75 72 6e 20 69 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 64 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 63 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 70 72 6f 66 69 6c 65 5f 65 76 65 6e 74 5f 74 79 70 65 3a 22 63 6c 69 63 6b 22 7d 2c 64 29 3b 6a 2e 6f 6e 52 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 6c 6f 67 3b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 29 7d 62 26 26 62 28 61 29 7d 2c 5b 62 2c 64 5d 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 50 72 6f 66 Data Ascii: ["extends"]({},d,{profile_product_bucket:"unknown"}));return i(function(a){if(d!=null){var c=babelHelpers["extends"]({profile_event_type:"click"},d);j.onReady(function(a){a=a.log;a(function(){return c})})}b&&b(a)},[b,d])}g["default"]=a}),98);__d("useProf
2024-04-24 05:32:53 UTC	4810	IN	Data Raw: 69 6e 69 74 69 61 6c 22 7d 5d 7d 2c 6d 65 64 69 61 4f 76 65 72 6c 61 79 43 6f 6e 74 61 69 6e 65 72 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 31 38 6c 34 30 61 65 22 2c 62 6f 74 74 6f 6d 3a 22 78 31 65 79 32 6d 31 63 22 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 78 39 66 36 31 39 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 6d 65 64 69 61 4f 76 65 72 6c 61 79 43 6f 6e 74 61 69 6e 65 72 4e 6f 53 68 61 64 65 3a 7b 62 6f 74 74 6f 6d 3a 22 78 31 65 79 32 6d 31 63 22 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 78 39 66 36 31 39 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 Data Ascii: initial"}]},mediaOverlayContainer:{backgroundColor:"x18l40ae",bottom:"x1ey2m1c",boxSizing:"x9f619",end:"xds687c",position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",$$css:!0},mediaOverlayContainerNoShade:{bottom:"x1ey2m1c",boxSizing:"x9f619",end:"xds687c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50059	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:53 UTC	599	OUT	GET /rsrc.php/v3/y5/r/JssATjfhfdZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:53 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: qfPJDGTBkC1W636Y+XzRiw== Expires: Tue, 22 Apr 2025 21:53:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 0DDbWQrgL4bGPtaaaUjlaCldv+XMmske+HL9g3Qt+8VpugdI2fjjJFn+mxl8Ms/5Sb1xUPSHo7Lx2l+x/h816g== Date: Wed, 24 Apr 2024 05:32:53 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 44552
2024-04-24 05:32:53 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:53 UTC	16071	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4e 65 77 73 46 65 65 64 56 50 56 44 53 74 6f 72 65 5f 6e 65 77 73 46 65 65 64 45 64 67 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 44 61 74 61 46 72 61 67 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 4e 65 77 73 46 65 65 64 56 50 56 44 53 74 6f 72 65 5f 6e 65 77 73 46 65 65 64 45 64 67 65 22 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 72 65 67 69 73 74 65 72 53 6f 75 72 63 65 46 6f 72 56 69 65 77 22 2c 5b 22 44 54 53 47 22 2c 22 44 54 53 47 55 74 69 6c 73 22 2c 22 53 70 72 69 6e Data Ascii: /FB_PKG_DELIM/__d("CometNewsFeedVPVDStore_newsFeedEdge.graphql",[],(function(a,b,c,d,e,f){"use strict";a={kind:"InlineDataFragment",name:"CometNewsFeedVPVDStore_newsFeedEdge"};e.exports=a}),null);__d("registerSourceForView",["DTSG","DTSGUtils","Sprin
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 50 6f 73 69 74 69 6f 6e 41 64 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 42 72 61 6e 64 53 61 66 65 74 79 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 42 72 61 6e 64 53 61 66 65 74 79 4c 6f 67 67 69 6e 67 55 74 69 6c 22 2c 5b 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 53 74 61 74 75 73 54 72 61 63 6b 69 6e 67 55 74 69 6c 73 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c Data Ascii: PositionAd=e}),98);__d("CometFeedBrandSafetyContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);g["default"]=b}),98);__d("CometFeedBrandSafetyLoggingUtil",["CometFeedUnitStatusTrackingUtils","FBLogger",
2024-04-24 05:32:53 UTC	12096	IN	Data Raw: 65 62 6f 6f 6b 5f 62 72 61 6e 64 5f 73 61 66 65 74 79 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 4d 65 74 72 69 63 73 43 68 61 6e 6e 65 6c 32 56 69 65 77 61 62 69 6c 69 74 79 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 39 36 30 38 36 38 22 29 3b 62 3d 64 28 22 46 61 Data Ascii: ebook_brand_safety_impression",a);e=b;g["default"]=e}),98);__d("CometMetricsChannel2ViewabilityFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1960868");b=d("Fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50061	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:53 UTC	621	OUT	GET /rsrc.php/v3i7rS4/y4/l/en_US/k4jQ2q4LsnA44fB8fr7zjE.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:53 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: xoi2Zw5UT4o8yaLX2TgUsA== Expires: Wed, 23 Apr 2025 02:34:52 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: +fP+NEmYWXwMyQosXyOxAfABMkeawzK+pqWXnzO0cJ1EjD5fmfFB0xOF51k5G5ZtJg/IN4lmfBAmQOT70oQzqQ== Date: Wed, 24 Apr 2024 05:32:53 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 84197
2024-04-24 05:32:53 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:53 UTC	16049	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 68 6f 72 74 65 6e 65 64 45 78 74 65 72 6e 61 6c 55 72 6c 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 7b 6d 61 73 6b 3a 21 31 7d 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 53 68 6f 72 74 65 6e 65 64 45 78 74 65 72 6e 61 6c 55 72 6c 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c Data Ascii: /FB_PKG_DELIM/__d("CometShortenedExternalUrlEntityRenderer_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"CometShortenedExternalUrlEntityRenderer_entity",selections:[{kind:"Inl
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 64 69 65 6e 63 65 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4b 65 79 55 70 64 61 74 65 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 74 61 64 61 74 61 53 65 63 74 69 6f 6e 4d 61 74 63 68 52 65 6e 64 65 72 65 72 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 56 69 65 77 65 64 43 6f 75 6e 74 53 74 72 61 74 65 67 79 5f 76 69 65 77 65 64 43 6f 75 6e Data Ascii: dience",kind:"ModuleImport"}],type:"CometFeedStoryKeyUpdateStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryMetadataSectionMatchRenderer_story",fragmentName:"CometFeedStoryViewedCountStrategy_viewedCoun
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 22 43 6f 6d 65 74 46 65 65 64 4d 61 74 63 68 52 65 6e 64 65 72 65 72 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 63 74 6f 72 50 68 6f 74 6f 53 65 63 74 69 6f 6e 4d 61 74 63 68 52 65 6e 64 65 72 65 72 5f 73 74 6f 72 79 2e 67 72 61 70 68 71 6c 22 2c 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 65 2c 66 3d 61 2e 73 68 6f 75 6c 64 55 73 65 53 6d 61 6c 6c 65 72 50 68 6f 74 6f 3b 61 3d 61 2e 73 74 6f 72 79 3b 61 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 46 72 Data Ascii: "CometFeedMatchRenderer.react","CometFeedStoryActorPhotoSectionMatchRenderer_story.graphql","CometRelay","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react");function a(a){var e,f=a.shouldUseSmallerPhoto;a=a.story;a=d("CometRelay").useFr
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 5f 69 6d 61 67 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 Data Ascii: _image",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,a
2024-04-24 05:32:53 UTC	1500	IN	Data Raw: 6f 6e 74 65 78 74 49 74 65 6d 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 66 5f 76 69 65 77 65 72 5f 63 61 6e 5f 70 72 6f 6d 6f 74 65 5f 77 65 62 73 69 74 65 5f 62 75 74 74 6f 6e 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 57 65 62 73 69 74 65 43 6f 6e 74 65 78 74 49 74 65 6d 5f 72 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 42 6f 6f 73 74 57 65 62 73 69 74 65 42 75 74 74 6f 6e 5f 72 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 72 65 6e 64 65 72 65 72 22 2c 6b Data Ascii: ontextItemRenderer",kind:"LinkedField",name:"if_viewer_can_promote_website_button",plural:!1,selections:[{args:null,documentName:"ProfileCometWebsiteContextItem_renderer",fragmentName:"ProfileCometBoostWebsiteButton_renderer",fragmentPropName:"renderer",k
2024-04-24 05:32:53 UTC	14884	IN	Data Raw: 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 72 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 69 6d 65 6c 69 6e 65 43 6f 6e 74 65 78 74 4c 69 73 74 49 74 65 6d 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 6e 74 65 78 74 5f 69 74 65 6d 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 Data Ascii: agmentPropName:"renderer",kind:"ModuleImport"}],storageKey:null},{kind:"RequiredField",field:{alias:null,args:null,concreteType:"TimelineContextListItem",kind:"LinkedField",name:"context_item",plural:!1,selections:[{alias:null,args:null,concreteType:"Text
2024-04-24 05:32:53 UTC	2611	IN	Data Raw: 61 72 20 6a 3d 6d 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6e 74 65 78 74 22 29 29 2c 6f 3d 6a 2e 70 72 6f 66 69 6c 65 49 44 3b 6a 3d 63 28 22 75 73 65 43 6f 6d 65 74 52 65 6c 61 79 45 6e 74 72 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 75 61 6c 45 6e 76 69 72 6f 6e 6d 65 6e 74 50 72 6f 76 69 64 65 72 22 29 28 29 3b 6a 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 45 6e 74 72 79 50 6f 69 6e 74 4c 6f 61 64 65 72 28 6a 2c 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 42 69 6f 54 65 78 74 45 64 69 74 6f 72 2e 65 6e 74 72 79 70 6f 69 6e 74 22 29 29 3b 76 61 72 20 70 3d 6a 5b 30 5d 2c 71 3d 6a 5b 31 5d 2c 72 3d 6a 5b 32 5d 3b 6a 3d 6c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 71 28 7b 70 72 6f 66 69 6c 65 49 44 3a Data Ascii: ar j=m(c("ProfileCometContext")),o=j.profileID;j=c("useCometRelayEntrypointContextualEnvironmentProvider")();j=d("CometRelay").useEntryPointLoader(j,c("ProfileCometBioTextEditor.entrypoint"));var p=j[0],q=j[1],r=j[2];j=l(function(a){return a?q({profileID:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50062	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:53 UTC	610	OUT	GET /rsrc.php/v3iuJ54/ye/l/en_US/m140NWqU1Tl.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:53 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: H9v3NZuaACI3qs0yG+SdCw== Expires: Wed, 23 Apr 2025 02:34:52 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: WgqBzYGyWaHa4QvGYG9IKoO7dUB8J9//cLwuGBNUCCv2piWaEZRvIz43rHUTg1YFtKJUUH+BkkSer63k8Fgwow== Date: Wed, 24 Apr 2024 05:32:53 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43815
2024-04-24 05:32:53 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:53 UTC	16059	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 45 6e 74 69 74 79 48 65 61 64 65 72 53 74 69 63 6b 79 42 6f 74 74 6f 6d 52 6f 77 5f 65 6e 74 69 74 79 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 45 6e 74 69 74 79 48 65 61 64 65 72 53 74 69 63 6b 79 42 6f 74 74 6f 6d 52 6f 77 5f 65 6e 74 69 74 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 Data Ascii: /FB_PKG_DELIM/__d("CometEntityHeaderStickyBottomRow_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometEntityHeaderStickyBottomRow_entity",selections:[{alias:null,args:null,kind:"S
2024-04-24 05:32:53 UTC	16384	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 6a 2c 6b 3d 6a 7c 7c 28 6a 3d 64 28 22 72 65 61 63 74 22 29 29 3b 62 3d 6a 3b 76 61 72 20 6c 3d 62 2e 75 73 65 43 61 6c 6c 62 61 63 6b 2c 6d 3d 62 2e 75 73 65 45 66 66 65 63 74 2c 6e 3d 62 2e 75 73 65 49 64 2c 6f 3d 62 2e 75 73 65 4d 65 6d 6f 2c 70 3d 62 2e 75 73 65 52 65 66 2c 71 3d 62 2e 75 73 65 53 74 61 74 65 2c 72 3d 63 28 22 72 65 71 75 69 72 65 44 65 66 65 72 72 65 64 22 29 28 22 43 6f 6d 65 74 54 61 62 4d 65 6e 75 2e 72 65 61 63 74 22 29 2e 5f 5f 73 65 74 52 65 66 28 22 43 6f 6d 65 74 54 61 62 73 2e 72 65 61 63 74 22 29 2c 73 3d 7b 6d 6f 72 65 54 61 62 3a 7b 68 65 69 67 68 74 3a 22 78 6e 67 38 72 61 22 2c 70 Data Ascii: ,(function(a,b,c,d,e,f,g,h){"use strict";var i,j,k=j\|\|(j=d("react"));b=j;var l=b.useCallback,m=b.useEffect,n=b.useId,o=b.useMemo,p=b.useRef,q=b.useState,r=c("requireDeferred")("CometTabMenu.react").__setRef("CometTabs.react"),s={moreTab:{height:"xng8ra",p
2024-04-24 05:32:53 UTC	11371	IN	Data Raw: 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 2c 22 54 65 74 72 61 54 65 78 74 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 62 2e 69 6e 6c 69 6e 65 5f 73 74 79 6c 65 29 7b 63 61 73 65 22 42 4f 4c 44 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 29 2e 42 4f 4c 44 3a 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 22 62 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 7d 29 3b 63 61 73 65 22 49 54 41 4c 49 43 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 Data Ascii: sedInlineStyle","TetraText.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");a=function(a,b){switch(b.inline_style){case"BOLD":case c("ComposedInlineStyle").BOLD:return i.jsx("b",{children:a});case"ITALIC":case c("ComposedInlineS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50064	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	687	OUT	GET /rsrc.php/v3iDa14/yF/l/en_US/6ootXSk4mYOkyxVXaofhwGPt5DLGRZ_LCrGX22_iLwD5QIHyTQ6Z_KZxsw_y3zVOBSnf2ML2XDKJo5r1v89-9txa.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 87lMiDwkj7TeDCbbQvnQDQ== Expires: Thu, 24 Apr 2025 05:32:54 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: mdXrgisBCbdvbh1SYz+0GXZLEEWy9SqVBT2gxxUR9YDJ22UPwD5mPoZaPl25fzBIwYjDdXtDgcMl3hn81xui2w== Date: Wed, 24 Apr 2024 05:32:54 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=78, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 129663
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 57 65 6c 63 6f 6d 65 4d 65 73 73 61 67 65 53 65 6e 64 51 50 4c 43 6f 6e 73 74 61 6e 74 73 22 2c 5b 22 71 70 6c 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 22 77 65 6c 63 6f 6d 65 5f 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 66 61 69 6c 65 64 22 3b 62 3d 22 77 65 6c 63 6f 6d 65 5f 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 73 75 63 63 65 73 73 22 3b 64 3d 22 77 65 6c 63 6f 6d 65 5f 6d 65 73 73 61 67 65 5f 73 65 6e 64 22 3b 65 3d 63 28 22 71 70 6c 22 29 2e 5f 28 36 31 39 30 35 37 34 31 32 2c 22 36 30 38 22 29 3b 67 2e 57 45 4c 43 4f 4d 45 5f 4d 45 53 53 41 47 45 5f 53 45 4e 44 5f 46 41 49 4c 45 44 3d 61 3b 67 Data Ascii: ;/FB_PKG_DELIM/__d("WelcomeMessageSendQPLConstants",["qpl"],(function(a,b,c,d,e,f,g){"use strict";a="welcome_message_send_failed";b="welcome_message_send_success";d="welcome_message_send";e=c("qpl")._(619057412,"608");g.WELCOME_MESSAGE_SEND_FAILED=a;g
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 5f 77 65 62 22 29 2e 77 61 72 6e 28 22 46 42 49 44 20 69 73 20 6e 75 6c 6c 20 77 69 74 68 20 61 70 70 49 64 20 25 73 22 2c 61 29 7d 72 65 74 75 72 6e 28 68 7c 7c 28 68 3d 64 28 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 29 29 29 2e 55 53 45 52 5f 49 44 7d 67 2e 67 65 74 49 44 3d 61 3b 67 2e 67 65 74 41 70 70 49 44 3d 69 3b 67 2e 69 73 54 6c 63 50 75 62 6c 69 63 55 73 65 72 3d 62 3b 67 2e 69 73 45 6d 70 6c 6f 79 65 65 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 4d 41 57 45 42 53 77 69 74 63 68 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 24 31 3d 21 30 7d 76 Data Ascii: _web").warn("FBID is null with appId %s",a)}return(h\|\|(h=d("CurrentUserInitialData"))).USER_ID}g.getID=a;g.getAppID=i;g.isTlcPublicUser=b;g.isEmployee=e}),98);__d("MAWEBSwitch",[],(function(a,b,c,d,e,f){"use strict";a=function(){function a(){this.$1=!0}v
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 41 44 3a 31 34 2c 50 41 52 45 4e 54 5f 41 50 50 52 4f 56 45 44 5f 53 48 45 50 48 45 52 44 5f 4d 41 4e 41 47 45 44 5f 54 48 52 45 41 44 3a 31 35 2c 43 41 4d 50 55 53 5f 47 52 4f 55 50 5f 54 48 52 45 41 44 3a 31 36 2c 4c 4f 43 41 4c 5f 43 4f 4d 4d 55 4e 49 54 49 45 53 5f 54 48 52 45 41 44 3a 31 37 2c 43 48 41 54 5f 46 4f 52 5f 52 4f 4f 4d 5f 54 48 52 45 41 44 3a 31 38 2c 47 41 4d 49 4e 47 5f 50 4c 41 59 5f 53 51 55 41 44 3a 31 39 2c 43 48 41 54 5f 46 4f 52 5f 47 52 4f 55 50 5f 41 44 4d 49 4e 5f 54 4f 5f 4d 45 4d 42 45 52 5f 54 48 52 45 41 44 3a 32 30 2c 45 49 54 4d 5f 42 41 43 4b 45 44 5f 49 47 5f 31 54 4f 31 5f 54 48 52 45 41 44 3a 32 31 2c 4c 45 41 52 4e 49 4e 47 5f 53 50 41 43 45 3a 32 33 2c 45 32 45 45 5f 47 52 4f 55 50 5f 54 48 52 45 41 44 5f 4d 45 54 Data Ascii: AD:14,PARENT_APPROVED_SHEPHERD_MANAGED_THREAD:15,CAMPUS_GROUP_THREAD:16,LOCAL_COMMUNITIES_THREAD:17,CHAT_FOR_ROOM_THREAD:18,GAMING_PLAY_SQUAD:19,CHAT_FOR_GROUP_ADMIN_TO_MEMBER_THREAD:20,EITM_BACKED_IG_1TO1_THREAD:21,LEARNING_SPACE:23,E2EE_GROUP_THREAD_MET
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 41 49 4c 42 4f 58 5f 54 48 52 45 41 44 3a 36 36 2c 47 45 4e 41 49 5f 53 54 55 44 49 4f 5f 42 4f 54 5f 4d 41 49 4c 42 4f 58 5f 54 48 52 45 41 44 3a 36 37 2c 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 31 2c 50 41 52 45 4e 54 5f 41 50 50 52 4f 56 45 44 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 32 2c 49 47 5f 4f 4e 4c 59 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 33 2c 49 4e 54 45 52 4f 50 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 34 2c 57 48 41 54 53 41 50 50 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 35 2c 57 4f 52 4b 43 48 41 54 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 36 2c 4f 43 5f 50 52 4f 58 59 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 3a 31 30 30 37 2c 4d 41 52 4b 45 54 50 4c 41 43 45 5f 41 53 53 49 53 54 41 4e 54 5f 4f 4e 45 5f 54 4f 5f 4f 4e 45 Data Ascii: AILBOX_THREAD:66,GENAI_STUDIO_BOT_MAILBOX_THREAD:67,ONE_TO_ONE:1001,PARENT_APPROVED_ONE_TO_ONE:1002,IG_ONLY_ONE_TO_ONE:1003,INTEROP_ONE_TO_ONE:1004,WHATSAPP_ONE_TO_ONE:1005,WORKCHAT_ONE_TO_ONE:1006,OC_PROXY_ONE_TO_ONE:1007,MARKETPLACE_ASSISTANT_ONE_TO_ONE
2024-04-24 05:32:54 UTC	687	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 71 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 62 29 7b 69 66 28 61 5b 30 5d 3e 62 5b 30 5d 29 72 65 74 75 72 6e 21 30 3b 65 6c 73 65 20 69 66 28 61 5b 30 5d 3c 62 5b 30 5d 29 72 65 74 75 72 6e 21 31 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 5b 31 5d 3e 62 5b 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 74 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 71 28 61 2c 62 29 29 72 65 74 75 72 6e 20 62 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 69 66 28 74 28 61 2c 62 29 29 72 65 74 75 72 6e 20 61 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 62 7d 66 2e 63 61 6d 6c 5f 69 6e 74 Data Ascii: function s(a,b){return!q(a,b)}function t(a,b){if(a[0]>b[0])return!0;else if(a[0]<b[0])return!1;else return a[1]>b[1]}function u(a,b){return!t(a,b)}function v(a,b){if(q(a,b))return b;else return a}function w(a,b){if(t(a,b))return a;else return b}f.caml_int
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 22 3b 76 61 72 20 67 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 5b 62 2c 61 3e 3e 3e 30 5d 7d 76 61 72 20 68 3d 5b 2d 32 31 34 37 34 38 33 36 34 38 2c 30 5d 2c 69 3d 5b 32 31 34 37 34 38 33 36 34 37 2c 34 32 39 34 39 36 37 32 39 35 5d 2c 6a 3d 5b 30 2c 31 5d 2c 6b 3d 5b 30 2c 30 5d 2c 6c 3d 5b 2d 31 2c 34 32 39 34 39 36 37 32 39 35 5d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 28 61 26 2d 32 31 34 37 34 38 33 36 34 38 29 21 3d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 26 2d 32 31 34 37 34 38 33 36 34 38 29 3d 3d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 76 61 72 20 62 3d 61 5b 31 5d 3b 61 3d 61 5b 30 5d 3b 62 3d 62 2b 31 7c 30 3b 72 65 74 75 72 6e 5b 61 2b 28 62 3d 3d Data Ascii: ";var g;function a(a,b){return[b,a>>>0]}var h=[-2147483648,0],i=[2147483647,4294967295],j=[0,1],k=[0,0],l=[-1,4294967295];function m(a){return(a&-2147483648)!==0}function n(a){return(a&-2147483648)===0}function c(a){var b=a[1];a=a[0];b=b+1\|0;return[a+(b==
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 67 3d 3d 3d 32 29 7b 6a 3d 63 5b 30 5d 3b 69 3d 64 5b 31 5d 3b 67 3d 30 3b 6a 21 3d 3d 2d 32 31 34 37 34 38 33 36 34 38 7c 7c 63 5b 31 5d 21 3d 3d 30 3f 67 3d 33 3a 65 3d 69 3b 69 66 28 67 3d 3d 3d 33 29 7b 67 3d 63 5b 31 5d 3b 69 66 28 66 3c 30 29 7b 69 66 28 6a 3e 3d 30 29 72 65 74 75 72 6e 20 6f 28 79 28 6f 28 64 29 2c 63 29 29 3b 62 3d 6f 28 63 29 3b 61 3d 6f 28 64 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 6a 3c 30 29 72 65 74 75 72 6e 20 6f 28 79 28 64 2c 6f 28 63 29 29 29 3b 64 3d 66 3e 3e 3e 31 36 3b 63 3d 66 26 36 35 35 33 35 3b 66 3d 69 3e 3e 3e 31 36 3b 69 3d 69 26 36 35 35 33 35 3b 76 61 72 20 6c 3d 6a 3e 3e 3e 31 36 3b 6a 3d 6a 26 36 35 35 33 35 3b 76 61 72 20 6d 3d 67 3e 3e 3e 31 36 3b 67 3d 67 26 36 35 35 33 35 3b 76 61 72 20 6e 2c 70 2c 71 Data Ascii: g===2){j=c[0];i=d[1];g=0;j!==-2147483648\|\|c[1]!==0?g=3:e=i;if(g===3){g=c[1];if(f<0){if(j>=0)return o(y(o(d),c));b=o(c);a=o(d);continue}if(j<0)return o(y(d,o(c)));d=f>>>16;c=f&65535;f=i>>>16;i=i&65535;var l=j>>>16;j=j&65535;var m=g>>>16;g=g&65535;var n,p,q
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 32 3b 65 6c 73 65 20 74 68 72 6f 77 7b 52 45 5f 45 58 4e 5f 49 44 3a 22 44 69 76 69 73 69 6f 6e 5f 62 79 5f 7a 65 72 6f 22 2c 45 72 72 6f 72 3a 6e 65 77 20 45 72 72 6f 72 28 29 7d 3b 69 66 28 6d 3d 3d 3d 32 29 69 66 28 66 21 3d 3d 2d 32 31 34 37 34 38 33 36 34 38 29 69 66 28 66 21 3d 3d 30 29 69 3d 31 3b 65 6c 73 65 7b 69 66 28 65 5b 31 5d 3d 3d 3d 30 29 72 65 74 75 72 6e 20 6b 3b 69 3d 31 7d 65 6c 73 65 20 69 66 28 65 5b 31 5d 21 3d 3d 30 29 69 3d 31 3b 65 6c 73 65 7b 69 66 28 28 67 7c 7c 28 67 3d 62 28 22 62 73 5f 63 61 6d 6c 22 29 29 29 2e 69 36 34 5f 65 71 28 64 2c 6a 29 7c 7c 28 67 7c 7c 28 67 3d 62 28 22 62 73 5f 63 61 6d 6c 22 29 29 29 2e 69 36 34 5f 65 71 28 64 2c 6c 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 28 67 7c 7c 28 67 3d 62 28 22 62 73 5f Data Ascii: 2;else throw{RE_EXN_ID:"Division_by_zero",Error:new Error()};if(m===2)if(f!==-2147483648)if(f!==0)i=1;else{if(e[1]===0)return k;i=1}else if(e[1]!==0)i=1;else{if((g\|\|(g=b("bs_caml"))).i64_eq(d,j)\|\|(g\|\|(g=b("bs_caml"))).i64_eq(d,l))return e;if((g\|\|(g=b("bs_
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 74 36 34 41 72 72 61 79 28 6e 65 77 20 49 6e 74 33 32 41 72 72 61 79 28 5b 61 2c 62 5d 29 2e 62 75 66 66 65 72 29 5b 30 5d 7d 28 61 5b 31 5d 2c 61 5b 30 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 49 6e 74 33 32 41 72 72 61 79 28 6e 65 77 20 46 6c 6f 61 74 36 34 41 72 72 61 79 28 5b 61 5d 29 2e 62 75 66 66 65 72 29 7d 28 61 29 3b 72 65 74 75 72 6e 5b 61 5b 31 5d 2c 61 5b 30 5d 3e 3e 3e 30 5d 7d 66 2e 6d 6b 3d 61 3b 66 2e 73 75 63 63 3d 63 3b 66 2e 6d 69 6e 5f 69 6e 74 3d 68 3b 66 2e 6d 61 78 5f 69 6e 74 3d 69 3b 66 2e 6f 6e 65 3d 6a 3b 66 2e 7a 65 72 6f 3d 6b 3b 66 2e 6e 65 67 5f 6f 6e 65 3d 6c 3b 66 2e 6f 66 5f 69 6e 74 33 32 3d 4b 3b 66 2e 74 6f 5f 69 6e 74 33 32 3d 4c 3b Data Ascii: t64Array(new Int32Array([a,b]).buffer)[0]}(a[1],a[0])}function P(a){a=function(a){return new Int32Array(new Float64Array([a]).buffer)}(a);return[a[1],a[0]>>>0]}f.mk=a;f.succ=c;f.min_int=h;f.max_int=i;f.one=j;f.zero=k;f.neg_one=l;f.of_int32=K;f.to_int32=L;
2024-04-24 05:32:54 UTC	905	IN	Data Raw: 61 72 20 62 3d 6b 28 61 29 2c 63 3d 62 5b 30 5d 2c 64 3d 6a 28 62 5b 32 5d 29 2c 65 3d 34 32 39 34 39 36 37 32 39 35 2c 66 3d 61 2e 6c 65 6e 67 74 68 2c 67 3d 63 3c 66 3f 61 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 3a 30 3b 67 3d 69 28 67 29 3b 69 66 28 67 3c 30 7c 7c 67 3e 3d 64 29 74 68 72 6f 77 7b 52 45 5f 45 58 4e 5f 49 44 3a 22 46 61 69 6c 75 72 65 22 2c 5f 31 3a 22 69 6e 74 5f 6f 66 5f 73 74 72 69 6e 67 22 2c 45 72 72 6f 72 3a 6e 65 77 20 45 72 72 6f 72 28 29 7d 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 77 68 69 6c 65 28 21 30 29 7b 76 61 72 20 67 3d 63 2c 68 3d 62 3b 69 66 28 67 3d 3d 3d 66 29 72 65 74 75 72 6e 20 68 3b 76 61 72 20 6a 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 29 3b 69 66 28 6a 3d 3d 3d 39 35 29 7b 63 3d 67 Data Ascii: ar b=k(a),c=b[0],d=j(b[2]),e=4294967295,f=a.length,g=c<f?a.charCodeAt(c):0;g=i(g);if(g<0\|\|g>=d)throw{RE_EXN_ID:"Failure",_1:"int_of_string",Error:new Error()};var h=function(b,c){while(!0){var g=c,h=b;if(g===f)return h;var j=a.charCodeAt(g);if(j===95){c=g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50063	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	599	OUT	GET /rsrc.php/v3/y3/r/IuxUKXNocsT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: sO/2RXM4x6ON3F2gg1Yhbg== Expires: Thu, 24 Apr 2025 05:32:54 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: dQwWaP3ppoqfp4KO2pK++020TUbAgHlvo7ENsNfKooEqvjHa5/NfetIZWK8l9WrXWavOsqfkc0Qsvg+ul9jO5w== Date: Wed, 24 Apr 2024 05:32:54 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=84, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 47013
2024-04-24 05:32:54 UTC	356	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 4d 65 6d 62 65 72 50 72 6f 66 69 6c 65 4c 69 6e 6b 5f 67 72 6f 75 70 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 47 72 6f 75 70 73 43 6f 6d 65 74 4d 65 6d 62 65 72 50 72 6f 66 69 6c 65 4c 69 6e 6b 5f 67 72 6f 75 70 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c Data Ascii: ;/FB_PKG_DELIM/__d("GroupsCometMemberProfileLink_group.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"GroupsCometMemberProfileLink_group",selections:[{alias:null,args:null,kind:"ScalarFiel
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 43 6f 6d 65 74 44 69 73 61 62 6c 65 64 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 21 31 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 42 61 64 67 65 41 6c 69 67 6e 65 72 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 56 69 65 77 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 7b Data Ascii: CometDisabledContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(!1);g["default"]=b}),98);__d("BaseBadgeAligner.react",["BaseView.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 63 28 22 43 6f 6d 65 74 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 41 74 74 72 69 62 75 74 65 73 22 29 2e 49 47 4e 4f 52 45 5f 44 59 4e 41 4d 49 43 2c 7b 78 73 74 79 6c 65 3a 5b 6a 2e 72 6f 6f 74 2c 66 26 26 6a 2e 65 78 70 61 6e 64 69 6e 67 2c 61 5d 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 2c 69 2e 6a 73 78 28 63 28 22 42 61 73 65 42 61 64 67 65 41 6c 69 67 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 62 61 64 67 65 41 6c 69 67 6e 3a 64 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 5d 7d 29 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 46 Data Ascii: elHelpers["extends"]({},c("CometVisualCompletionAttributes").IGNORE_DYNAMIC,{xstyle:[j.root,f&&j.expanding,a],children:[e,i.jsx(c("BaseBadgeAligner.react"),{badgeAlign:d,children:b})]}))}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("F
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 74 68 3a 22 78 31 6b 6b 79 32 6f 64 22 2c 24 24 63 73 73 3a 21 30 7d 2c 32 30 3a 7b 68 65 69 67 68 74 3a 22 78 31 71 78 35 63 74 32 22 2c 77 69 64 74 68 3a 22 78 77 34 6a 6e 76 6f 22 2c 24 24 63 73 73 3a 21 30 7d 2c 32 34 3a 7b 68 65 69 67 68 74 3a 22 78 78 6b 30 7a 31 31 22 2c 77 69 64 74 68 3a 22 78 76 79 34 64 31 70 22 2c 24 24 63 73 73 3a 21 30 7d 2c 32 38 3a 7b 68 65 69 67 68 74 3a 22 78 31 66 67 74 72 61 77 22 2c 77 69 64 74 68 3a 22 78 67 64 38 62 76 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 33 32 3a 7b 68 65 69 67 68 74 3a 22 78 31 30 77 36 74 39 37 22 2c 77 69 64 74 68 3a 22 78 31 74 64 33 71 61 73 22 2c 24 24 63 73 73 3a 21 30 7d 2c 33 36 3a 7b 68 65 69 67 68 74 3a 22 78 63 39 71 62 78 71 22 2c 77 69 64 74 68 3a 22 78 31 34 71 66 78 62 65 22 2c 24 Data Ascii: th:"x1kky2od",$$css:!0},20:{height:"x1qx5ct2",width:"xw4jnvo",$$css:!0},24:{height:"xxk0z11",width:"xvy4d1p",$$css:!0},28:{height:"x1fgtraw",width:"xgd8bvy",$$css:!0},32:{height:"x10w6t97",width:"x1td3qas",$$css:!0},36:{height:"xc9qbxq",width:"x14qfxbe",$
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 3a 64 26 26 6b 2e 64 69 73 61 62 6c 65 64 2c 63 68 69 6c 64 72 65 6e 3a 68 21 3d 6e 75 6c 6c 3f 69 2e 6a 73 78 73 28 63 28 22 46 44 53 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 61 73 70 65 63 74 52 61 74 69 6f 3a 68 2c 63 68 69 6c 64 72 65 6e 3a 5b 62 2c 6e 5d 7d 29 3a 69 2e 6a 73 78 73 28 69 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 62 2c 6e 5d 7d 29 7d 29 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 68 6f 74 6f 5f 45 58 50 45 52 49 4d 45 4e 54 41 4c 2e 72 65 61 63 74 22 2c 5b 22 43 6f Data Ascii: :d&&k.disabled,children:h!=null?i.jsxs(c("FDSAspectRatioContainer.react"),{aspectRatio:h,children:[b,n]}):i.jsxs(i.Fragment,{children:[b,n]})})})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("CometProfilePhoto_EXPERIMENTAL.react",["Co
2024-04-24 05:32:54 UTC	900	IN	Data Raw: 3a 21 30 7d 2c 6d 6f 72 65 49 74 65 6d 46 6f 6e 74 57 65 69 67 68 74 3a 7b 66 6f 6e 74 57 65 69 67 68 74 3a 22 78 31 73 36 38 38 66 22 2c 24 24 63 73 73 3a 21 30 7d 2c 6d 6f 72 65 49 74 65 6d 49 6e 73 65 74 42 6f 72 64 65 72 3a 7b 62 6f 72 64 65 72 54 6f 70 53 74 61 72 74 52 61 64 69 75 73 3a 22 78 31 6f 31 65 77 78 6a 22 2c 62 6f 72 64 65 72 54 6f 70 45 6e 64 52 61 64 69 75 73 3a 22 78 33 78 39 63 77 64 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 45 6e 64 52 61 64 69 75 73 3a 22 78 31 65 35 71 30 6a 67 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 61 72 74 52 61 64 69 75 73 3a 22 78 31 33 72 74 6d 30 6d 22 2c 62 6f 74 74 6f 6d 3a 22 78 31 65 79 32 6d 31 63 22 2c 62 6f 78 53 68 61 64 6f 77 3a 22 78 6c 67 39 61 39 79 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 Data Ascii: :!0},moreItemFontWeight:{fontWeight:"x1s688f",$$css:!0},moreItemInsetBorder:{borderTopStartRadius:"x1o1ewxj",borderTopEndRadius:"x3x9cwd",borderBottomEndRadius:"x1e5q0jg",borderBottomStartRadius:"x13rtm0m",bottom:"x1ey2m1c",boxShadow:"xlg9a9y",end:"xds687
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 32 31 64 22 2c 77 69 64 74 68 3a 22 78 68 38 79 65 6a 33 22 2c 24 24 63 73 73 3a 21 30 7d 2c 32 3a 7b 68 65 69 67 68 74 3a 22 78 31 61 75 7a 77 30 78 22 2c 77 69 64 74 68 3a 22 78 71 75 36 30 36 74 22 2c 24 24 63 73 73 3a 21 30 7d 2c 33 3a 7b 68 65 69 67 68 74 3a 22 78 73 31 67 65 77 6f 22 2c 77 69 64 74 68 3a 22 78 38 37 6c 76 30 32 22 2c 24 24 63 73 73 3a 21 30 7d 2c 34 3a 7b 68 65 69 67 68 74 3a 22 78 73 31 67 65 77 6f 22 2c 77 69 64 74 68 3a 22 78 38 37 6c 76 30 32 22 2c 24 24 63 73 73 3a 21 30 7d 7d 2c 6f 3d 7b 30 3a 7b 62 6f 72 64 65 72 54 6f 70 43 6f 6c 6f 72 3a 22 78 36 7a 79 67 34 37 22 2c 62 6f 72 64 65 72 45 6e 64 43 6f 6c 6f 72 3a 22 78 31 78 6d 31 6d 71 77 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 43 6f 6c 6f 72 3a 22 78 70 6e 38 66 6e 33 22 Data Ascii: 21d",width:"xh8yej3",$$css:!0},2:{height:"x1auzw0x",width:"xqu606t",$$css:!0},3:{height:"xs1gewo",width:"x87lv02",$$css:!0},4:{height:"xs1gewo",width:"x87lv02",$$css:!0}},o={0:{borderTopColor:"x6zyg47",borderEndColor:"x1xm1mqw",borderBottomColor:"xpn8fn3"
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 66 65 67 6d 22 2c 24 24 63 73 73 3a 21 30 7d 2c 31 3a 7b 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 24 24 63 73 73 3a 21 30 7d 7d 2c 71 3d 7b 30 3a 7b 6c 65 66 74 3a 22 78 31 6e 72 6c 6c 38 69 22 2c 73 74 61 72 74 3a 6e 75 6c 6c 2c 65 6e 64 3a 6e 75 6c 6c 2c 74 6f 70 3a 22 78 6e 66 72 31 6a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 78 75 75 68 33 30 22 2c 24 24 63 73 73 3a 21 30 7d 2c 31 3a 7b 62 6f 74 74 6f 6d 3a 22 78 31 39 69 70 37 37 35 22 2c 73 74 61 72 74 3a 22 78 31 6f 67 72 35 75 38 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 24 24 63 73 73 3a 21 30 7d 2c 32 3a 7b 62 6f 74 74 6f 6d 3a 22 78 31 39 69 70 37 37 35 Data Ascii: fegm",$$css:!0},1:{start:"x17qophe",left:null,right:null,top:"x13vifvy",$$css:!0}},q={0:{left:"x1nrll8i",start:null,end:null,top:"xnfr1j",transform:"xuuh30",$$css:!0},1:{bottom:"x19ip775",start:"x1ogr5u8",left:null,right:null,$$css:!0},2:{bottom:"x19ip775
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 63 6f 6e 64 61 72 79 22 2c 74 79 70 65 3a 22 6d 65 74 61 34 22 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 73 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6b 2e 6d 6f 72 65 49 74 65 6d 46 6f 6e 74 57 65 69 67 68 74 2c 69 3c 3d 6c 26 26 6b 2e 73 6d 61 6c 6c 42 61 64 67 65 46 6f 6e 74 53 69 7a 65 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 22 2b 22 2c 61 2d 78 2b 31 5d 7d 29 7d 29 2c 6a 2e 6a 73 78 28 63 28 22 42 61 73 65 56 69 65 77 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 6b 2e 6d 6f 72 65 49 74 65 6d 49 6e 73 65 74 42 6f 72 64 65 72 7d 29 5d 7d 2c 22 6d 6f 72 65 22 29 3b 78 3d 3d 3d 34 3f 76 2e 73 70 6c 69 63 65 28 2d 31 2c 30 2c 77 29 3a 76 2e 70 75 73 68 28 77 29 7d 61 3d 6a Data Ascii: condary",type:"meta4",children:j.jsxs("span",{className:(h\|\|(h=c("stylex")))(k.moreItemFontWeight,i<=l&&k.smallBadgeFontSize),children:["+",a-x+1]})}),j.jsx(c("BaseView.react"),{xstyle:k.moreItemInsetBorder})]},"more");x===4?v.splice(-1,0,w):v.push(w)}a=j
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 64 3d 27 6c 27 20 78 31 3d 27 38 32 2e 38 37 31 25 32 35 27 20 78 32 3d 27 38 32 2e 38 37 31 25 32 35 27 20 79 31 3d 27 31 30 39 2e 33 33 37 25 32 35 27 20 79 32 3d 27 30 25 32 35 27 25 33 65 25 33 63 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 30 25 32 35 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 39 41 32 46 30 30 27 2f 25 33 65 25 33 63 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 31 30 30 25 32 35 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 44 34 34 38 30 30 27 2f 25 33 65 25 33 63 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 25 33 65 25 33 63 66 69 6c 74 65 72 20 69 64 3d 27 63 27 20 77 69 64 74 68 3d 27 31 31 38 2e 38 25 32 35 27 20 68 65 69 67 68 74 3d 27 31 31 38 2e 38 25 32 35 27 20 78 3d 27 2d 39 2e 34 25 32 35 27 20 79 3d 27 2d 39 2e 34 25 Data Ascii: d='l' x1='82.871%25' x2='82.871%25' y1='109.337%25' y2='0%25'%3e%3cstop offset='0%25' stop-color='%239A2F00'/%3e%3cstop offset='100%25' stop-color='%23D44800'/%3e%3c/linearGradient%3e%3cfilter id='c' width='118.8%25' height='118.8%25' x='-9.4%25' y='-9.4%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50065	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	610	OUT	GET /rsrc.php/v3iDeG4/yA/l/en_US/CQDgozv7lkz.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: xrAYfAePn5kt1Je9dYXIGQ== Expires: Thu, 24 Apr 2025 05:32:54 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: emmln5GwzLbRSVz5tjRyM36W8WzI5nwLUohFpll8mI+5LoGk7QeSX7NVFavAYE+bGl6Bg2nozrWkvCH3lzU/aA== Date: Wed, 24 Apr 2024 05:32:54 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=79, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 220206
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 75 73 65 43 6f 65 72 63 65 52 65 6c 61 79 49 6d 61 67 65 5f 69 6d 61 67 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 75 73 65 43 6f 65 72 63 65 52 65 6c 61 79 49 6d 61 67 65 5f 69 6d 61 67 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 Data Ascii: ;/FB_PKG_DELIM/__d("useCoerceRelayImage_image.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCoerceRelayImage_image",selections:[{alias:null,args:null,kind:"ScalarField",name:"height",s
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d Data Ascii: "ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null}
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 69 64 Data Ascii: null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"wid
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 6e 61 6d 65 3a 22 70 72 6f 66 69 6c 65 5f 61 63 74 69 6f 6e 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 48 65 61 64 65 72 41 63 74 69 6f 6e 42 61 72 42 75 74 74 6f 6e 5f 61 63 74 69 6f 6e 22 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 22 73 65 63 6f 6e 64 61 72 79 41 63 74 69 6f 6e 73 22 2c 61 72 67 73 3a 5b 61 2c 62 2c Data Ascii: name:"profile_actions",plural:!0,selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometHeaderActionBarButton_action"},{args:null,kind:"FragmentSpread",name:"ProfileCometActionTrigger_action"}],storageKey:null},{alias:"secondaryActions",args:[a,b,
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 5f 5f 74 79 70 65 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 65 6e 74 69 74 79 49 44 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 65 6e 74 69 74 79 49 44 22 7d 2c 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 75 73 65 72 41 63 74 69 6f 6e 42 61 72 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 75 73 65 72 41 63 74 69 6f 6e 42 61 72 52 65 6e 64 65 72 4c 6f 63 Data Ascii: ctions:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null}],storageKey:null},{args:[{kind:"Variable",name:"entityID",variableName:"entityID"},{kind:"Variable",name:"userActionBarRenderLocation",variableName:"userActionBarRenderLoc
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 73 55 6e 69 74 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 22 57 57 57 5f 50 52 4f 46 49 4c 45 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 75 73 65 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 55 6e 69 74 54 72 69 67 67 65 72 42 75 74 74 6f 6e 5f 6e 6f 64 65 22 7d 5d 2c 74 79 70 65 3a 22 41 63 74 6f 72 57 69 74 68 41 63 74 69 6f 6e 42 61 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 41 63 74 6f 72 57 69 74 68 41 63 74 69 6f 6e 42 61 72 22 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 50 72 6f 66 69 6c 65 48 65 61 64 65 72 42 61 6e 6e 65 72 5f 75 73 65 72 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 Data Ascii: sUnitRenderLocation",value:"WWW_PROFILE"}],kind:"FragmentSpread",name:"useRecommendationsUnitTriggerButton_node"}],type:"ActorWithActionBar",abstractKey:"__isActorWithActionBar"};e.exports=a}),null);__d("ProfileCometProfileHeaderBanner_user.graphql",[],(
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 54 69 6d 65 6c 69 6e 65 54 61 62 46 65 65 64 42 61 6e 6e 65 72 5f 75 73 65 72 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 22 66 65 65 64 5f 62 61 6e 6e 65 72 22 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 72 65 6e 64 65 72 5f 6c 6f 63 61 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 22 54 49 4d 45 4c 49 4e 45 5f 54 41 42 5f 46 45 45 44 5f 43 4f 4c 55 4d 4e 22 7d 2c 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 75 70 70 6f 72 74 65 64 22 2c 76 61 6c 75 65 3a 22 33 42 6f 31 6e 38 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 6d 65 74 5f 70 72 6f 66 69 6c 65 5f 62 61 6e 6e 65 72 22 2c Data Ascii: TimelineTabFeedBanner_user",selections:[{alias:"feed_banner",args:[{kind:"Literal",name:"render_location",value:"TIMELINE_TAB_FEED_COLUMN"},{kind:"Literal",name:"supported",value:"3Bo1n8"}],concreteType:null,kind:"LinkedField",name:"comet_profile_banner",
2024-04-24 05:32:54 UTC	1498	IN	Data Raw: 65 3a 22 73 63 61 6c 65 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 53 65 63 74 69 6f 6e 5f 73 65 63 74 69 6f 6e 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 61 2c 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 69 7a 65 22 2c 76 61 6c 75 65 3a 32 34 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 5f 69 63 6f 6e 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c Data Ascii: e:"scale"}],kind:"Fragment",metadata:null,name:"ProfileCometAboutProfileFieldSection_section",selections:[{alias:null,args:[a,{kind:"Literal",name:"size",value:24}],concreteType:"Image",kind:"LinkedField",name:"title_icon",plural:!1,selections:[{args:null
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 4c 49 4e 45 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 72 69 76 61 63 79 53 63 6f 70 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 72 69 76 61 63 79 5f 73 63 6f 70 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 72 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 22 43 4f 4d 45 54 5f 50 52 4f 46 49 4c 45 5f 41 42 4f 55 54 5f 50 41 47 45 5f 49 4e 4c 49 4e 45 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 50 72 69 76 61 63 79 53 65 6c 65 63 74 6f 72 5f 73 63 Data Ascii: LINE"}],concreteType:"PrivacyScope",kind:"LinkedField",name:"privacy_scope",plural:!1,selections:[{args:[{kind:"Literal",name:"renderLocation",value:"COMET_PROFILE_ABOUT_PAGE_INLINE"}],kind:"FragmentSpread",name:"ProfileCometProfileFieldPrivacySelector_sc
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 72 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 4e 61 6d 65 50 72 6f 6e 75 6e 63 69 61 74 69 6f 6e 50 72 6f 66 69 6c 65 46 69 65 6c 64 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 53 65 63 74 69 6f 6e 5f 73 65 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 4e 75 Data Ascii: nderer",fragmentPropName:"renderer",kind:"ModuleImport"}],type:"NamePronunciationProfileFieldRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometAboutProfileFieldSection_section",fragmentName:"ProfileCometNu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50066	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	797	OUT	GET /rsrc.php/v3iHWi4/yT/l/en_US/yJzYEEZ1qKpT1bGOl72c-Si9BtyEKKY6vsXBKGulEZ7YjmJAioUiau3UnRR4kL2c3MzDouReqt7vgMVvbs5Bxz9AfzkWVwFU290p3lHmP5bRnoAvNAI-O1M-NRawrDsZxthjVtwoC8TAEQ4oi_YwQ1LIeeq4U1PQSjcmVTZ2S6HgZeQb9Gsu-9YhaugQ0ERYmIF4EZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1778	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: tWxG4eWQx34pOLuekIyKwQ== Expires: Thu, 24 Apr 2025 05:32:54 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 9sLPEzwChLySptPPq90KxlQ8G/uaSByZBFF/Yuq+fh1vN2Oxj4q1eP/M9+mEVE82yeRiWAOsGx6D7Tn973Hr4g== Date: Wed, 24 Apr 2024 05:32:54 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=78, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1071114
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 54 68 72 6f 77 62 61 63 6b 5f 61 74 74 61 63 68 6d 65 6e 74 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 52 6f 6f 74 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 72 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 Data Ascii: ;/FB_PKG_DELIM/__d("CometFeedStoryAttachmentRendererInnerThrowback_attachment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"renderLocation"}],kind:"Fragment",metadata:null,name:"CometFeedStoryAttach
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4e 75 6c 6c 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 4e 75 6c 6c 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 Data Ascii: Name:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryNullAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentNullStyleRenderer",abstractKey:null},{kind:"InlineFr
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 50 61 67 65 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 50 61 67 65 52 65 63 6f 6d 6d Data Ascii: ections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryPageRecommendationAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentPageRecomm
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 46 75 6e 46 61 63 74 73 53 74 61 63 6b 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 50 61 67 65 53 68 61 72 65 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 Data Ascii: eImport"}],type:"StoryAttachmentFunFactsStackStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryPageShareAttachmentStyle_styleTypeRende
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 41 6c 62 75 6d 42 61 6e 6e 65 72 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e Data Ascii: TypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentAlbumBannerStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmen
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 43 72 69 73 69 73 4c 69 73 74 69 6e 67 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 43 72 69 73 69 73 4c 69 73 74 69 6e 67 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 Data Ascii: chmentRendererInner_attachment",fragmentName:"CometFeedStoryCrisisListingAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentCrisisListingStyleRenderer",abstractKey:null},{kind:"InlineFragment
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 75 6e 64 72 61 69 73 65 72 44 6f 6e 61 74 65 42 75 74 74 6f 6e 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 Data Ascii: gment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryFundraiserDonateButtonAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttach
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 4d 61 70 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 73 73 65 74 33 44 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e Data Ascii: t"}],type:"StoryAttachmentMapStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryAsset3DAttachmentStyle_styleTypeRenderer",fragmentPropN
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 47 72 6f 75 70 53 65 6c 6c 50 72 6f 64 75 63 74 49 74 65 6d 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4e 6f 74 65 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 Data Ascii: type:"StoryAttachmentGroupSellProductItemStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryNoteAttachmentStyle_styleTypeRenderer",frag
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 50 68 6f 74 6f 53 61 6c 65 49 74 65 6d 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 50 68 6f Data Ascii: Name:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentPhotoSaleItemStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryPho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50067	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	610	OUT	GET /rsrc.php/v3i47E4/y5/l/en_US/o4-4gtuumUh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: DtXqlZrwOL20jN3Dt75erg== Expires: Wed, 23 Apr 2025 18:35:26 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: ZGz7Tpc+9eoKEXh6g7XzLUl+yWuz0FdtY/MNXMr1FCuUieNmVconk0FHysObBoq6vXCzUqvADglocVJLzYBzPA== Date: Wed, 24 Apr 2024 05:32:54 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 423091
2024-04-24 05:32:54 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:54 UTC	16033	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 65 78 74 44 65 6c 69 67 68 74 41 6e 69 6d 61 74 69 6f 6e 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 31 39 38 35 34 35 33 34 30 31 35 39 37 35 38 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 65 78 74 44 65 6c 69 67 68 74 41 6e 69 6d 61 74 69 6f 6e 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 54 65 78 74 44 65 6c 69 67 68 74 41 6e 69 6d 61 74 69 6f 6e 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 Data Ascii: /FB_PKG_DELIM/__d("CometTextDelightAnimationQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7198545340159758"}),null);__d("CometTextDelightAnimationQuery$Parameters",["CometTextDelightAnimationQuery_facebookRelayOperation"],(functi
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 6c 2c 61 72 67 73 3a 65 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 66 72 61 67 6d 65 6e 74 3a 62 28 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 24 6e 6f 72 6d 61 6c 69 7a 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 29 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 65 2c 63 6f 6e 63 72 65 74 65 54 Data Ascii: l,args:e,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:[{args:null,fragment:b("CometTextWithEntitiesRelay_textWithEntities$normalization.graphql"),kind:"FragmentSpread"}],storageKey:null},{alias:null,args:e,concreteT
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 65 74 55 46 49 43 6f 6d 6d 65 6e 74 41 63 74 6f 72 4c 69 6e 6b 42 61 64 67 65 73 5f 63 6f 6d 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 75 74 68 6f 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 61 2c 74 79 70 65 3a 22 55 Data Ascii: etUFICommentActorLinkBadges_comment",selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"author",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{kind:"InlineFragment",selections:a,type:"U
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 6e 75 6c 6c 7d 2c 79 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 65 61 72 6e 65 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7a 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 74 69 74 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 41 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 Data Ascii: null},y={alias:null,args:null,kind:"ScalarField",name:"is_earned",storageKey:null},z={alias:null,args:null,kind:"ScalarField",name:"information_title",storageKey:null},A={alias:null,args:null,kind:"ScalarField",name:"information_description",storageKey:nu
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 6f 6e 6e 65 63 74 69 6f 6e 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 6f 70 5f 72 65 61 63 74 69 6f 6e 73 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 6f 70 52 65 61 63 74 69 6f 6e 73 45 64 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 65 64 67 65 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 69 73 69 62 6c 65 5f 69 6e 5f 62 6c 69 6e 67 5f 62 61 72 22 2c 73 74 6f 72 61 Data Ascii: onnection",kind:"LinkedField",name:"top_reactions",plural:!1,selections:[{alias:null,args:null,concreteType:"TopReactionsEdge",kind:"LinkedField",name:"edges",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"visible_in_bling_bar",stora
2024-04-24 05:32:54 UTC	14884	IN	Data Raw: 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 74 2c 75 5d 2c 74 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 74 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 22 62 6f 64 79 5f 72 65 6e 64 65 72 65 72 22 2c 61 72 67 73 3a 73 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 Data Ascii: ind:"InlineFragment",selections:[t,u],type:"TextWithEntities",abstractKey:null},t,{alias:null,args:null,kind:"ScalarField",name:"translation_type",storageKey:null}],storageKey:null},{alias:"body_renderer",args:s,concreteType:null,kind:"LinkedField",name:"
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 5f 63 6f 6d 6d 65 6e 74 5f 65 6c 65 76 61 74 65 64 5f 63 6f 6d 6d 65 6e 74 5f 64 61 74 61 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 53 69 6d 70 6c 65 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 43 6f 6e 74 65 6e 74 5f 73 69 6d 70 6c 65 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 44 61 74 61 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 69 6d 70 6c 65 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 44 61 74 61 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 69 6d 70 6c 65 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 44 61 74 61 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 Data Ascii: ,documentName:"CometUFIComment_comment_elevated_comment_data",fragmentName:"SimpleElevatedCommentContent_simpleElevatedCommentData",fragmentPropName:"simpleElevatedCommentData",kind:"ModuleImport"}],type:"SimpleElevatedCommentData",abstractKey:null},{kind
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 45 72 72 6f 72 46 6f 6f 74 65 72 5f 63 6f 6d 6d 65 6e 74 22 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 66 65 65 64 5f 6c 6f 63 61 74 69 6f 6e 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 66 65 65 64 4c 6f 63 61 74 69 6f 6e 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 Data Ascii: :null,kind:"ScalarField",name:"id",storageKey:null},{args:null,kind:"FragmentSpread",name:"CometUFICommentErrorFooter_comment"},{alias:null,args:[{kind:"Variable",name:"feed_location",variableName:"feedLocation"}],concreteType:null,kind:"LinkedField",name
2024-04-24 05:32:55 UTC	14884	IN	Data Raw: 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 5f 5f 74 79 70 65 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 6d 65 6e 74 43 6f 6d 70 6f 73 65 72 45 6d 6f 6a 69 50 6c 75 67 69 6e 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 63 6f 6d 65 74 55 46 49 43 6f 6d 70 6f 73 65 72 45 6d 6f 6a 69 50 6c 75 67 69 6e 5f 70 6c 75 67 69 6e 44 61 74 61 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 44 61 74 61 46 72 Data Ascii: ull,args:null,kind:"ScalarField",name:"__typename",storageKey:null}],type:"CommentComposerEmojiPlugin",abstractKey:null};e.exports=a}),null);__d("cometUFIComposerEmojiPlugin_pluginData.graphql",[],(function(a,b,c,d,e,f){"use strict";a={kind:"InlineDataFr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50068	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	610	OUT	GET /rsrc.php/v3iPFs4/yb/l/en_US/fyk_ahmEKSN.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1751	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: zgYy8h15CzXJhsdqZBp4Vw== Expires: Wed, 23 Apr 2025 02:34:52 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: CXHsuGQ5s5jFCtdsLCnhFJ/F1AKJIoozJgAuhuFqgmBxuioLye959WuG+1+U/ZrXV6X0jLw7aUxk95K4y48Ufw== Date: Wed, 24 Apr 2024 05:32:54 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 151546
2024-04-24 05:32:54 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:54 UTC	16058	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 57 72 61 70 70 65 72 5f 63 6f 6d 6d 65 6e 74 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 57 72 61 70 70 65 72 5f 63 6f 6d 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 Data Ascii: /FB_PKG_DELIM/__d("CometUFICommentWrapper_comment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometUFICommentWrapper_comment",selections:[{alias:null,args:null,kind:"ScalarField",name:"
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 5f 72 65 71 75 69 72 65 5f 63 6c 6f 73 75 72 65 5f 50 72 6f 6d 69 73 65 7c 7c 28 5f 72 65 71 75 69 72 65 5f 63 6c 6f 73 75 72 65 5f 50 72 6f 6d 69 73 65 3d 72 65 71 75 69 72 65 28 22 50 72 6f 6d 69 73 65 22 29 29 29 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 61 29 3b 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 4e 62 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 62 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3b 72 65 74 75 72 6e 20 79 28 78 62 28 61 29 29 26 26 28 22 49 4e 50 55 54 22 3d 3d 3d 63 7c 7c 22 54 45 58 54 41 52 45 41 22 3d 3d 3d 63 7c 7c 22 74 72 75 65 22 3d 3d 3d 62 2e 63 6f 6e 74 Data Ascii: ask:function(a){(_require_closure_Promise\|\|(_require_closure_Promise=require("Promise"))).resolve().then(a);};function Nb(a){var b=document.activeElement;if(null===b)return!1;var c=b.nodeName;return y(xb(a))&&("INPUT"===c\|\|"TEXTAREA"===c\|\|"true"===b.cont
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 56 64 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 21 3d 3d 62 7c 7c 45 28 61 29 7c 7c 45 28 62 29 7c 7c 21 61 2e 69 73 54 6f 6b 65 6e 28 29 7c 7c 21 62 2e 69 73 54 6f 6b 65 6e 28 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 64 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 69 6e 70 75 74 54 79 70 65 2c 64 3d 55 64 28 61 29 3b 22 64 65 6c 65 74 65 43 6f 6d 70 6f 73 69 74 69 6f 6e 54 65 78 74 22 3d 3d 3d 63 7c 7c 56 61 26 26 43 62 28 62 29 7c 7c 22 69 6e 73 65 72 74 43 6f 6d 70 6f 73 69 74 69 6f 6e 54 65 78 74 22 21 3d 3d 63 26 26 76 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 28 29 3b 69 66 28 22 64 65 6c 65 74 65 43 6f 6e 74 65 6e 74 42 61 63 6b 77 61 72 64 22 3d 3d 3d 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 7b 76 61 Data Ascii: unction Vd(a,b){return a!==b\|\|E(a)\|\|E(b)\|\|!a.isToken()\|\|!b.isToken();}function Ed(a,b){var c=a.inputType,d=Ud(a);"deleteCompositionText"===c\|\|Va&&Cb(b)\|\|"insertCompositionText"!==c&&v(b,function(){var e=u();if("deleteContentBackward"===c){if(null===e){va
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 5f 61 2c 5f 61 32 2c 5f 61 33 3b 61 3d 64 2e 63 6c 61 73 73 4c 69 73 74 3b 64 3d 71 63 28 65 2c 22 62 61 73 65 22 29 3b 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 5f 61 3d 61 29 2e 61 64 64 2e 61 70 70 6c 79 28 5f 61 2c 64 29 3b 64 3d 71 63 28 65 2c 22 75 6e 64 65 72 6c 69 6e 65 53 74 72 69 6b 65 74 68 72 6f 75 67 68 22 29 3b 76 61 72 20 66 3d 21 31 2c 67 3d 62 26 38 26 26 62 26 34 3b 76 61 72 20 68 3d 63 26 38 26 26 63 26 34 3b 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 68 3f 28 66 3d 21 30 2c 67 7c 7c 28 5f 61 32 3d 61 29 2e 61 64 64 2e 61 70 70 6c 79 28 5f 61 32 2c 64 29 29 3a 67 26 26 28 5f 61 33 3d 61 29 2e 72 65 6d 6f 76 65 2e 61 70 70 6c 79 28 5f 61 33 2c 64 29 29 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 68 62 29 7b 76 61 72 20 5f 61 34 2c 5f 61 35 2c 5f Data Ascii: _a,_a2,_a3;a=d.classList;d=qc(e,"base");void 0!==d&&(_a=a).add.apply(_a,d);d=qc(e,"underlineStrikethrough");var f=!1,g=b&8&&b&4;var h=c&8&&c&4;void 0!==d&&(h?(f=!0,g\|\|(_a2=a).add.apply(_a2,d)):g&&(_a3=a).remove.apply(_a3,d));for(var k in hb){var _a4,_a5,_
2024-04-24 05:32:54 UTC	1500	IN	Data Raw: 68 6f 72 2c 65 3d 74 68 69 73 2e 66 6f 63 75 73 2c 66 3d 64 2e 69 73 42 65 66 6f 72 65 28 65 29 2c 5f 56 65 3d 56 65 28 74 68 69 73 29 2c 67 3d 5f 56 65 5b 30 5d 2c 68 3d 5f 56 65 5b 31 5d 2c 6b 3d 22 22 2c 6d 3d 21 30 3b 66 6f 72 28 76 61 72 20 71 3d 30 3b 71 3c 61 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 7b 76 61 72 20 6e 3d 61 5b 71 5d 3b 69 66 28 45 28 6e 29 26 26 21 6e 2e 69 73 49 6e 6c 69 6e 65 28 29 29 6d 7c 7c 28 6b 2b 3d 22 5c 6e 22 29 2c 6d 3d 6e 2e 69 73 45 6d 70 74 79 28 29 3f 21 31 3a 21 30 3b 65 6c 73 65 20 69 66 28 6d 3d 21 31 2c 42 28 6e 29 29 7b 76 61 72 20 6c 3d 6e 2e 67 65 74 54 65 78 74 43 6f 6e 74 65 6e 74 28 29 3b 69 66 28 6e 3d 3d 3d 62 29 7b 69 66 28 6e 3d 3d 3d 63 29 7b 69 66 28 22 65 6c 65 6d 65 6e 74 22 21 3d 3d 64 2e 74 79 70 65 7c Data Ascii: hor,e=this.focus,f=d.isBefore(e),_Ve=Ve(this),g=_Ve[0],h=_Ve[1],k="",m=!0;for(var q=0;q<a.length;q++){var n=a[q];if(E(n)&&!n.isInline())m\|\|(k+="\n"),m=n.isEmpty()?!1:!0;else if(m=!1,B(n)){var l=n.getTextContent();if(n===b){if(n===c){if("element"!==d.type\|
2024-04-24 05:32:54 UTC	14884	IN	Data Raw: 73 42 65 66 6f 72 65 28 63 29 2c 65 3d 74 68 69 73 2e 66 6f 72 6d 61 74 2c 66 3d 74 68 69 73 2e 73 74 79 6c 65 3b 64 26 26 22 65 6c 65 6d 65 6e 74 22 3d 3d 3d 62 2e 74 79 70 65 3f 52 65 28 62 2c 63 2c 65 2c 66 29 3a 64 7c 7c 22 65 6c 65 6d 65 6e 74 22 21 3d 3d 63 2e 74 79 70 65 7c 7c 52 65 28 63 2c 62 2c 65 2c 66 29 3b 76 61 72 20 67 3d 74 68 69 73 2e 67 65 74 4e 6f 64 65 73 28 29 2c 68 3d 67 2e 6c 65 6e 67 74 68 2c 6b 3d 64 3f 63 3a 62 3b 63 3d 28 64 3f 62 3a 63 29 2e 6f 66 66 73 65 74 3b 76 61 72 20 6d 3d 6b 2e 6f 66 66 73 65 74 3b 62 3d 67 5b 30 5d 3b 42 28 62 29 7c 7c 70 28 32 36 29 3b 64 3d 62 2e 67 65 74 54 65 78 74 43 6f 6e 74 65 6e 74 28 29 2e 6c 65 6e 67 74 68 3b 0a 76 61 72 20 71 3d 62 2e 67 65 74 50 61 72 65 6e 74 4f 72 54 68 72 6f 77 28 29 2c Data Ascii: sBefore(c),e=this.format,f=this.style;d&&"element"===b.type?Re(b,c,e,f):d\|\|"element"!==c.type\|\|Re(c,b,e,f);var g=this.getNodes(),h=g.length,k=d?c:b;c=(d?b:c).offset;var m=k.offset;b=g[0];B(b)\|\|p(26);d=b.getTextContent().length;var q=b.getParentOrThrow(),
2024-04-24 05:32:54 UTC	16384	IN	Data Raw: 3a 67 2e 67 65 74 43 68 69 6c 64 41 74 49 6e 64 65 78 28 65 29 2c 42 28 65 29 26 26 28 67 3d 30 2c 62 26 26 28 67 3d 65 2e 67 65 74 54 65 78 74 43 6f 6e 74 65 6e 74 53 69 7a 65 28 29 29 2c 64 2e 73 65 74 28 65 2e 5f 5f 6b 65 79 2c 67 2c 22 74 65 78 74 22 29 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 66 28 61 2c 62 29 7b 62 3d 62 2e 67 65 74 45 64 69 74 6f 72 53 74 61 74 65 28 29 2e 5f 73 65 6c 65 63 74 69 6f 6e 3b 61 3d 61 2e 5f 73 65 6c 65 63 74 69 6f 6e 3b 69 66 28 43 28 61 29 29 7b 76 61 72 20 63 3d 61 2e 61 6e 63 68 6f 72 3b 76 61 72 20 64 3d 61 2e 66 6f 63 75 73 2c 65 3b 22 74 65 78 74 22 3d 3d 3d 63 2e 74 79 70 65 26 26 28 65 3d 63 2e 67 65 74 4e 6f 64 65 28 29 2c 65 2e 73 65 6c 65 63 74 69 6f 6e 54 72 61 6e 73 66 6f 72 6d 28 62 2c 61 29 29 3b 22 Data Ascii: :g.getChildAtIndex(e),B(e)&&(g=0,b&&(g=e.getTextContentSize()),d.set(e.__key,g,"text")));}}function gf(a,b){b=b.getEditorState()._selection;a=a._selection;if(C(a)){var c=a.anchor;var d=a.focus,e;"text"===c.type&&(e=c.getNode(),e.selectionTransform(b,a));"
2024-04-24 05:32:55 UTC	16384	IN	Data Raw: 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 68 69 73 2e 67 65 74 43 68 69 6c 64 41 74 49 6e 64 65 78 28 61 29 3b 6e 75 6c 6c 21 3d 3d 6c 26 26 28 71 3d 6c 2e 67 65 74 50 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 28 29 29 3b 7d 69 66 28 30 3c 62 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 3d 3d 3d 71 3f 74 68 69 73 2e 67 65 74 46 69 72 73 74 43 68 69 6c 64 28 29 3a 71 2e 67 65 74 4e 65 78 74 53 69 62 6c 69 6e 67 28 29 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 62 3b 6c 2b 2b 29 7b 6e 75 6c 6c 3d 3d 3d 0a 72 26 26 70 28 31 30 30 29 3b 76 61 72 20 77 3d 72 2e 67 65 74 4e 65 78 74 53 69 62 6c 69 6e 67 28 29 2c 41 3d 72 2e 5f 5f 6b 65 79 3b 72 3d 72 2e 67 65 74 57 72 69 74 61 62 6c 65 28 29 3b 63 63 28 72 29 3b 6b 2e 70 75 73 68 28 41 29 3b 72 3d 77 3b 7d 7d 6c 3d 71 3b 66 6f 72 28 Data Ascii: ;else{var l=this.getChildAtIndex(a);null!==l&&(q=l.getPreviousSibling());}if(0<b){var r=null===q?this.getFirstChild():q.getNextSibling();for(l=0;l<b;l++){null===r&&p(100);var w=r.getNextSibling(),A=r.__key;r=r.getWritable();cc(r);k.push(A);r=w;}}l=q;for(
2024-04-24 05:32:55 UTC	14884	IN	Data Raw: 41 66 74 65 72 28 6d 29 2c 5b 67 2c 6d 2c 6d 5d 3b 76 61 72 20 5f 64 33 3d 64 28 68 29 2c 71 3d 5f 64 33 5b 30 5d 2c 6e 3d 5f 64 33 5b 31 5d 2c 6c 3d 5f 64 33 5b 32 5d 3b 67 3d 67 2e 67 65 74 4e 65 78 74 53 69 62 6c 69 6e 67 73 28 29 3b 6c 2e 61 70 70 65 6e 64 2e 61 70 70 6c 79 28 6c 2c 5b 6d 5d 2e 63 6f 6e 63 61 74 28 67 29 29 3b 72 65 74 75 72 6e 5b 71 2c 6e 2c 6d 5d 3b 7d 2c 5f 64 32 3d 64 28 63 29 2c 65 3d 5f 64 32 5b 30 5d 2c 66 3d 5f 64 32 5b 31 5d 3b 72 65 74 75 72 6e 5b 65 2c 66 5d 3b 7d 3b 65 78 70 6f 72 74 73 2e 42 4c 55 52 5f 43 4f 4d 4d 41 4e 44 3d 52 61 3b 65 78 70 6f 72 74 73 2e 43 41 4e 5f 52 45 44 4f 5f 43 4f 4d 4d 41 4e 44 3d 7b 7d 3b 65 78 70 6f 72 74 73 2e 43 41 4e 5f 55 4e 44 4f 5f 43 4f 4d 4d 41 4e 44 3d 7b 7d 3b 65 78 70 6f 72 74 73 Data Ascii: After(m),[g,m,m];var _d3=d(h),q=_d3[0],n=_d3[1],l=_d3[2];g=g.getNextSiblings();l.append.apply(l,[m].concat(g));return[q,n,m];},_d2=d(c),e=_d2[0],f=_d2[1];return[e,f];};exports.BLUR_COMMAND=Ra;exports.CAN_REDO_COMMAND={};exports.CAN_UNDO_COMMAND={};exports

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50070	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	928	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1325 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1325	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 31 26 5f 5f 68 73 3d 31 39 38 33 37 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 4d 4f 44 45 52 41 54 45 26 5f 5f 72 65 76 3d 31 30 31 32 39 39 34 35 36 38 26 5f 5f 73 3d 7a 39 6c 6f 63 67 25 33 41 65 36 64 72 69 65 25 33 41 6c 6d 31 39 39 74 26 5f 5f 68 73 69 3d 37 33 36 31 33 30 32 33 37 34 39 30 35 34 30 30 30 35 31 26 5f 5f 64 79 6e 3d 37 78 65 55 6d 77 6c 45 6e 77 6e 38 Data Ascii: route_urls[0]=%2Foverlakemedicalcenter&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=1&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=MODERATE&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__hsi=7361302374905400051&__dyn=7xeUmwlEnwn8
2024-04-24 05:32:55 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:55 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:55 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:55 UTC	6	IN	Data Raw: 34 37 36 35 0d 0a Data Ascii: 4765
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 75 74 65 52 6f 6f 74 2e Data Ascii: for (;;);{"payload":{"payloads":{"/overlakemedicalcenter":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfilePlusCometLoggedOutRoot.react"},{"__jsr":"ProfilePlusCometLoggedOutRouteRoot.
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 22 3a 22 31 30 30 30 36 34 36 35 30 35 32 35 34 35 33 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 22 2c 22 76 69 65 77 65 72 49 44 22 3a 22 30 22 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 2c 22 6e 75 6d 49 6e 69 74 69 61 6c 46 65 65 64 55 6e 69 74 73 22 3a 31 2c 22 73 65 6f 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 3a 6e 75 6c 6c 2c 22 73 65 6f 47 72 6f 77 74 68 41 75 74 6f 6d 61 74 69 6f 6e 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 52 65 64 69 72 65 63 74 49 6e 73 74 65 61 64 4f 66 4c 6f 67 69 6e 50 6f 70 75 70 45 78 70 65 72 69 6d 65 6e 74 22 3a 66 61 6c 73 65 7d 2c 22 65 6e Data Ascii: ":"100064650525453","userVanity":"overlakemedicalcenter","viewerID":"0","eligibleForProfilePlusEntityMenu":false,"numInitialFeedUnits":1,"seoCrawlingPool":null,"seoGrowthAutomationCrawlingPool":null,"shouldRedirectInsteadOfLoginPopupExperiment":false},"en
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 76 69 65 77 61 73 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 6d 75 6c 74 69 5f 70 65 72 6d 61 6c 69 6e 6b 73 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 Data Ascii: ],"default":null,"path":false,"significant":true,"coercibleType":"ENUM"},"viewas":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"multi_permalinks":{"legacyNames":[],"default":null,"path":false,"significant":tru
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 73 68 6f 77 5f 73 77 69 74 63 68 65 64 5f 74 6f 61 73 74 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 58 49 53 54 53 22 7d 2c 22 73 68 6f 77 5f 69 6e 76 69 74 65 5f 74 6f 5f 66 6f 6c 6c 6f 77 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 Data Ascii: ificant":true,"coercibleType":"STRING"},"show_switched_toast":{"legacyNames":[],"default":false,"path":false,"significant":true,"coercibleType":"EXISTS"},"show_invite_to_follow":{"legacyNames":[],"default":false,"path":false,"significant":false,"coercible
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 22 3a 31 7d 2c 22 34 38 38 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c Data Ascii: ":1},"4883":{"r":1,"s":1}},"gkxData":{"20935":{"result":true,"hash":null},"20939":{"result":true,"hash":null},"21043":{"result":false,"hash":null},"21074":{"result":false,"hash":null},"21075":{"result":false,"hash":null},"21076":{"result":true,"hash":null
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 22 32 30 39 38 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 35 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 31 31 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 39 36 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c Data Ascii: "20985":{"result":false,"hash":null},"20986":{"result":false,"hash":null},"20987":{"result":false,"hash":null},"20988":{"result":true,"hash":null},"21059":{"result":false,"hash":null},"21117":{"result":false,"hash":null},"22968":{"result":false,"hash":nul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50071	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	928	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1455 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	1455	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 6c 6f 67 69 6e 25 32 46 64 65 76 69 63 65 2d 62 61 73 65 64 25 32 46 72 65 67 75 6c 61 72 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 25 33 44 31 25 32 36 6e 65 78 74 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 35 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 32 26 5f 5f 68 73 3d 31 39 38 33 37 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 Data Ascii: route_urls[0]=%2F&route_urls[1]=%2Flogin%2Fdevice-based%2Fregular%2Flogin%2F%3Flogin_attempt%3D1%26next%3Dhttps%253A%252F%252Fwww.facebook.com%252Foverlakemedicalcenter&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=2&__hs=19837.HYP%3Acomet_logg
2024-04-24 05:32:55 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:55 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:55 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:55 UTC	5	IN	Data Raw: 31 36 33 0d 0a Data Ascii: 163
2024-04-24 05:32:55 UTC	362	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 7d 2c 22 73 72 5f 70 61 79 6c 6f 61 64 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 Data Ascii: for (;;);{"payload":{"payloads":{"/":{"error":false,"result":null},"/login/device-based/regular/login/?login_attempt=1&next=https\u00253A\u00252F\u00252Fwww.facebook.com\u00252Foverlakemedicalcenter":{"error":false,"result":null}},"sr_payload":{"hsrp":{"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50069	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	1585	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 588 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: QkE5TgZAIkBkkoiI1qpJipWViJ5amNxGIcYgoAX1DleI5vha6Pprnr7psTVywsYnLFZ0m0OEvASVJ3yJ7hn9+0ApwhijQQ x-guest-token: 1783006035076403702 x-twitter-active-user: no sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:54 UTC	588	OUT	Data Raw: 64 65 62 75 67 3d 74 72 75 65 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 5f 63 61 74 65 67 6f 72 79 5f 25 32 32 25 33 41 25 32 32 63 6c 69 65 6e 74 5f 65 76 65 6e 74 25 32 32 25 32 43 25 32 32 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 25 32 32 25 33 41 32 25 32 43 25 32 32 74 72 69 67 67 65 72 65 64 5f 6f 6e 25 32 32 25 33 41 31 37 31 33 39 33 36 37 36 39 39 36 38 25 32 43 25 32 32 69 74 65 6d 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 74 6f 6b 65 6e 25 32 32 25 33 41 25 32 32 67 25 33 42 31 37 31 33 39 33 36 37 34 30 30 34 32 38 32 34 31 33 25 33 41 2d 31 37 31 33 39 33 36 37 36 38 32 32 38 25 33 41 50 67 4d 47 42 62 77 66 31 53 71 4b 33 55 76 75 35 32 62 43 5a 68 42 79 25 33 41 31 25 32 32 25 32 43 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 4c Data Ascii: debug=true&log=%5B%7B%22_category_%22%3A%22client_event%22%2C%22format_version%22%3A2%2C%22triggered_on%22%3A1713936769968%2C%22items%22%3A%5B%7B%22token%22%3A%22g%3B171393674004282413%3A-1713936768228%3APgMGBbwf1SqK3Uvu52bCZhBy%3A1%22%2C%22name%22%3A%22L
2024-04-24 05:32:55 UTC	1072	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:54 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:54 GMT x-transaction: f2b5d87fcaf1ecce content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: f2b5d87fcaf1ecce x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 10 x-connection-hash: bf3f3f954358d3cfe5eccf0017e421f37af0ab6759d1843b9ca38746090278c2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50072	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	1585	OUT	POST /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive Content-Length: 631 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-twitter-client-language: en sec-ch-ua-mobile: ?0 authorization: Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded x-client-transaction-id: 4+CY76fhg+HFMykpdwvoKzQ0KT/7OX3ngGeBAaRUr/YpR1n7SVvKPx9IEJTTY2eGjffVOuIlHaU0ht0oT7hcWuGIY7kC4A x-guest-token: 1783006035076403702 x-twitter-active-user: no sec-ch-ua-platform: "Windows" Accept: / Origin: https://twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:54 UTC	631	OUT	Data Raw: 63 61 74 65 67 6f 72 79 3d 70 65 72 66 74 6f 77 6e 26 6c 6f 67 3d 25 35 42 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 75 72 74 25 33 41 75 73 65 72 54 77 65 65 74 73 47 72 61 70 68 51 4c 25 33 41 66 65 74 63 68 5f 49 6e 69 74 69 61 6c 25 33 41 73 75 63 63 65 73 73 25 32 32 25 32 43 25 32 32 70 72 6f 64 75 63 74 25 32 32 25 33 41 25 32 32 72 77 65 62 25 32 32 25 32 43 25 32 32 64 75 72 61 74 69 6f 6e 5f 6d 73 25 32 32 25 33 41 31 35 35 30 25 37 44 25 32 43 25 37 42 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 33 41 25 32 32 72 77 65 62 25 33 41 75 72 74 25 33 41 75 73 65 72 54 77 65 65 74 73 47 72 61 70 68 51 4c 25 33 41 66 65 74 63 68 5f 49 6e 69 74 69 61 6c 25 33 41 66 6f 72 6d 61 74 25 33 Data Ascii: category=perftown&log=%5B%7B%22description%22%3A%22rweb%3Aurt%3AuserTweetsGraphQL%3Afetch_Initial%3Asuccess%22%2C%22product%22%3A%22rweb%22%2C%22duration_ms%22%3A1550%7D%2C%7B%22description%22%3A%22rweb%3Aurt%3AuserTweetsGraphQL%3Afetch_Initial%3Aformat%3
2024-04-24 05:32:55 UTC	1072	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 05:32:54 GMT perf: 7402827104 pragma: no-cache server: tsa_p expires: Tue, 31 Mar 1981 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 last-modified: Wed, 24 Apr 2024 05:32:55 GMT x-transaction: 2c687ceb082f4642 content-length: 0 x-frame-options: SAMEORIGIN x-transaction-id: 2c687ceb082f4642 x-xss-protection: 0 x-content-type-options: nosniff x-twitter-response-tags: BouncerCompliant strict-transport-security: max-age=631138519 access-control-allow-origin: https://twitter.com access-control-allow-credentials: true access-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Time x-response-time: 12 x-connection-hash: 3e706ce12887004e8f6e1867a88b4306d079b2df707303a450e14d9d401cacca connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50073	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	928	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 2054 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:54 UTC	2054	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 25 32 46 70 68 6f 74 6f 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 39 38 36 33 34 36 36 31 36 37 31 35 38 33 38 25 32 36 73 65 74 25 33 44 65 63 6e 66 2e 31 30 30 30 36 34 36 35 30 35 32 35 34 35 33 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 37 39 36 31 38 37 30 36 32 35 35 31 30 35 30 25 32 36 73 65 74 25 33 44 65 63 6e 66 2e 31 30 30 30 36 34 36 35 30 35 32 35 34 35 33 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 37 31 38 35 32 33 35 30 30 33 32 32 Data Ascii: route_urls[0]=%2Foverlakemedicalcenter%2Fphotos&route_urls[1]=%2Fphoto%2F%3Ffbid%3D986346616715838%26set%3Decnf.100064650525453&route_urls[2]=%2Fphoto%2F%3Ffbid%3D796187062551050%26set%3Decnf.100064650525453&route_urls[3]=%2Fphoto%2F%3Ffbid%3D718523500322
2024-04-24 05:32:55 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:55 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:55 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:55 UTC	7	IN	Data Raw: 31 39 66 66 33 0d 0a Data Ascii: 19ff3
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 2f 70 68 6f 74 6f 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 Data Ascii: for (;;);{"payload":{"payloads":{"/overlakemedicalcenter/photos":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfileCometCollectionRoot.react"},{"__jsr":"ProfileCometCollectionRouteRoot
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 61 6c 63 65 6e 74 65 72 22 2c 22 76 69 65 77 65 72 49 44 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 7b 22 5f 5f 64 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c 22 70 72 6f 64 75 63 74 41 74 74 72 69 62 75 74 69 6f 6e 49 64 22 3a 22 32 35 30 31 30 30 38 36 35 37 30 38 35 34 35 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 72 6f 66 69 6c 65 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 Data Ascii: alcenter","viewerID":null,"eligibleForProfilePlusEntityMenu":false},"entryPoint":{"__dr":"ProfileCometCollectionRouteRoot.entrypoint"}},"productAttributionId":"250100865708545","upsellConfig":{"surface":"profile","type":"login_upsell","isDismissible":true
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 7d 2c 22 72 6f 75 74 65 50 61 74 68 22 3a 22 2f 7b 76 61 6e 69 74 79 7d 2f 70 68 6f 74 6f 73 2f 22 7d 5d 7d 7d 2c 22 2f 70 68 6f 74 6f 2f 3f 66 62 69 64 3d 39 38 36 33 34 36 36 31 36 37 31 35 38 33 38 26 73 65 74 3d 65 63 6e 66 2e 31 30 30 30 36 34 36 35 30 35 32 35 34 35 33 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f Data Ascii: rcibleType":"STRING"}},"routePath":"/{vanity}/photos/"}]}},"/photo/?fbid=986346616715838&set=ecnf.100064650525453":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"CometPhotoRoot.react"},{"_
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 22 3a 22 46 42 49 44 22 7d 2c 22 73 65 74 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 69 64 6f 72 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 Data Ascii: ":"FBID"},"set":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"idorvanity":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"comment_id":{"legacyNames":[],"default":nu
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 73 22 3a 74 72 75 65 2c 22 72 6f 75 74 65 54 79 70 65 22 3a 22 6d 65 64 69 61 5f 76 69 65 77 65 72 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 68 6f 74 6f 73 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 Data Ascii: NotificationToasts":true,"routeType":"media_viewer","upsellConfig":{"surface":"photos","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanc
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 2c 22 65 6e 74 69 74 79 4b 65 79 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 70 68 6f 74 6f 73 22 7d 2c 22 65 6e 74 69 74 79 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 62 69 64 22 7d 2c 22 70 61 72 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 73 65 74 22 7d 7d 2c 22 68 6f 73 74 61 62 6c 65 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 Data Ascii: ,"entityKeyConfig":{"entity_type":{"source":"constant","value":"photos"},"entity_id":{"source":"param","value":"fbid"},"parent_container_id":{"source":"param","value":"set"}},"hostableView":{"allResources":[{"__jsr":"CometPhotoPermalinkRoot.react"},{"__js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50074	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:54 UTC	611	OUT	GET /rsrc.php/v3/yo/r/RBVykxDUbUn.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1671	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: X/gzo+ApbHvl4TBBPW8EMQ== Expires: Fri, 18 Apr 2025 16:30:38 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: sNH9MEIuy38CkNSJlX0hpF9zmbqkbxgmbEN4eCbr7Rs9Nk4c7s8n4OKawtAk9FVxnv7ZnJaSSBjzb1lFNaVaGg== Date: Wed, 24 Apr 2024 05:32:55 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7303
2024-04-24 05:32:55 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:55 UTC	7302	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 b1 08 03 00 00 00 a6 cb 4c 79 00 00 02 fa 50 4c 54 45 47 70 4c 03 03 03 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 06 06 06 00 00 00 00 00 00 00 00 00 02 02 02 ff ff ff 01 01 01 04 04 04 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 03 03 ff ff ff 01 01 01 00 00 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 04 04 00 00 00 00 00 00 02 02 02 08 08 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 05 05 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 01 01 01 02 02 02 01 01 01 00 00 00 00 00 00 01 01 01 01 01 01 04 04 04 04 04 04 00 00 Data Ascii: PNGIHDRLyPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50076	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:55 UTC	928	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1335	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 25 32 46 72 65 76 69 65 77 73 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 34 26 5f 5f 68 73 3d 31 39 38 33 37 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 4d 4f 44 45 52 41 54 45 26 5f 5f 72 65 76 3d 31 30 31 32 39 39 34 35 36 38 26 5f 5f 73 3d 7a 39 6c 6f 63 67 25 33 41 65 36 64 72 69 65 25 33 41 6c 6d 31 39 39 74 26 5f 5f 68 73 69 3d 37 33 36 31 33 30 32 33 37 34 39 30 35 34 30 30 30 35 31 26 5f 5f 64 79 6e 3d 37 78 Data Ascii: route_urls[0]=%2Foverlakemedicalcenter%2Freviews&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=4&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=MODERATE&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__hsi=7361302374905400051&__dyn=7x
2024-04-24 05:32:55 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:55 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:55 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:55 UTC	6	IN	Data Raw: 35 35 39 39 0d 0a Data Ascii: 5599
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 2f 72 65 76 69 65 77 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 52 6f 75 74 65 52 6f 6f Data Ascii: for (;;);{"payload":{"payloads":{"/overlakemedicalcenter/reviews":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfileCometReviewsTabRoot.react"},{"__jsr":"ProfileCometReviewsTabRouteRoo
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 22 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 22 2c 22 73 6b 22 3a 6e 75 6c 6c 2c 22 76 69 65 77 61 73 22 3a 6e 75 6c 6c 2c 22 6d 75 6c 74 69 5f 70 65 72 6d 61 6c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 5f 6f 70 65 6e 5f 63 6f 6d 70 6f 73 65 72 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 74 61 67 22 Data Ascii: book.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"vanity":"overlakemedicalcenter","sk":null,"viewas":null,"multi_permalinks":null,"should_open_composer":false,"event_id":null,"sorting_setting":null,"tag"
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 Data Ascii: :true,"hash":null},"20939":{"result":true,"hash":null},"21043":{"result":false,"hash":null},"21074":{"result":false,"hash":null},"21075":{"result":false,"hash":null},"21076":{"result":true,"hash":null},"7742":{"result":false,"hash":null},"20936":{"result"
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 35 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 31 31 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 39 36 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 33 34 33 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 33 32 39 22 3a 7b 22 72 65 73 75 6c 74 Data Ascii: false,"hash":null},"20987":{"result":false,"hash":null},"20988":{"result":true,"hash":null},"21059":{"result":false,"hash":null},"21117":{"result":false,"hash":null},"22968":{"result":false,"hash":null},"23433":{"result":false,"hash":null},"7329":{"result
2024-04-24 05:32:55 UTC	1500	IN	Data Raw: 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 36 33 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 7d 2c 22 69 78 44 61 74 61 22 3a 7b 22 31 38 37 36 34 31 31 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 64 2f 72 2f 33 6d 44 37 6b 4b 61 69 5f 37 57 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 31 32 2c 22 68 65 69 67 68 74 22 3a 31 32 7d 2c 22 31 38 37 36 34 31 32 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f Data Ascii: ult":false,"hash":null},"26342":{"result":false,"hash":null}},"ixData":{"1876411":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yd/r/3mD7kKai_7W.gif","width":12,"height":12},"1876412":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 47 2f 72 2f 52 63 49 69 56 57 57 75 6b 45 72 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 34 38 2c 22 68 65 69 67 68 74 22 3a 34 38 7d 2c 22 31 38 37 36 34 32 36 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 50 2f 72 2f 39 49 53 43 59 59 63 79 39 34 6d 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 37 32 2c 22 68 65 69 67 68 74 22 3a 37 32 7d 2c 22 31 38 37 36 34 32 37 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 Data Ascii: //static.xx.fbcdn.net/rsrc.php/v3/yG/r/RcIiVWWukEr.gif","width":48,"height":48},"1876426":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/9ISCYYcy94m.gif","width":72,"height":72},"1876427":{"sprited":0,"uri":"https://static.xx.fbcdn.net/r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50077	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:55 UTC	611	OUT	GET /rsrc.php/v3/yT/r/Dc7-7AgwkwS.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1612	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: DD3X2BHQO9MbapgKK06dIw== Expires: Sat, 12 Apr 2025 12:26:59 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: AlGP9ogIhSYXEqKrNb2/ieGff4+j9Wn4MEfecvsHRu0FTepg4CCnEoPEjZxlfSdf9lIAmrl2tGG8/VxuGlxkGQ== Date: Wed, 24 Apr 2024 05:32:55 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 449
2024-04-24 05:32:55 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:55 UTC	448	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 9c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8d 4c de 00 00 00 33 74 52 4e 53 00 fe 02 01 f5 f1 fc 05 f8 fd fb 2f b2 ec 4d f2 eb 42 61 d8 ad 19 f4 08 13 39 e7 df 1b d2 04 d3 18 9a 06 cd b1 6b bf 10 0f dd e6 6e 12 25 e2 Data Ascii: PNGIHDRW?PLTEL3tRNS/MBa9kn%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50080	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:55 UTC	611	OUT	GET /rsrc.php/v3/yW/r/8k_Y-oVxbuU.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: +prMhVp8L/FcfzQDax4DXw== Expires: Fri, 11 Apr 2025 02:32:09 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: Sr8EcXX/8+heBfAvnurj40pA+trM3NyDzZdcK5Xa4PmkyRFgFYQS5Q2+R3CikeWUVJ3+DHvzfrTo4BqsfXnuIA== Date: Wed, 24 Apr 2024 05:32:55 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 289
2024-04-24 05:32:55 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:55 UTC	288	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 45 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 fc 9c 6e 00 00 00 16 74 52 4e 53 e8 b8 4a f8 cb 37 07 29 00 ca 01 b7 ba 09 81 91 b6 be bd 9c c0 0b 29 ff c1 6a 00 00 00 75 49 44 41 54 78 5e 75 d1 c9 0e c3 20 0c 45 d1 d7 14 88 21 73 07 ff ff a7 36 14 5b 8f 0d ac e0 48 88 2b 03 b1 35 87 3c fb 1e 6e 50 85 2b 68 54 d0 a8 a0 51 41 a3 a2 b7 cf ab 29 3a d3 6f 79 ff 15 66 8f 98 6a 45 b9 aa 22 34 f3 ee 53 55 b3 61 94 fd a9 ba c9 a1 15 ed 7a 92 db 74 59 5b 80 3d 24 d2 45 79 d2 34 d1 86 f1 Data Ascii: PNGIHDRW?EPLTEGpLntRNSJ7))juIDATx^u E!s6[H+5<nP+hTQA):oyfjE"4SUaztY[=$Ey4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50079	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:55 UTC	611	OUT	GET /rsrc.php/v3/yM/r/qUPkXkiEwfh.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: jG09ZTlZAgg0ef0yf4ah1w== Expires: Fri, 11 Apr 2025 10:12:28 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: FMJww4NocsiSTWCRUB6VbUjoN2kIJ04zyxMgpKfO7hLNpa5SXy0wx5P8yKJ3lJO/+3PkPtxMGe8hL+nwbsPngg== Date: Wed, 24 Apr 2024 05:32:55 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 543
2024-04-24 05:32:55 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:55 UTC	542	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 b7 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5a e5 9f 43 00 00 00 3c 74 52 4e 53 00 15 d4 f3 d8 9a bf 43 ed 24 c4 7f 30 20 be 1b 22 f0 3c 16 Data Ascii: PNGIHDRW?PLTEZC<tRNSC$0 "<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50078	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:55 UTC	611	OUT	GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: oeXzM60JLxaQX8HmDUBHKQ== Expires: Sat, 12 Apr 2025 10:56:00 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: KJ8JXnH7Ao/aVAzLW8WB0Kx60xy3uMdfJ1qNDtblM3lLSZBdypp/GGrh+PhznPoOCWnjFbDJzxNmFwGK7Rw3tw== Date: Wed, 24 Apr 2024 05:32:55 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 265
2024-04-24 05:32:55 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:55 UTC	264	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 04 03 00 00 00 7f a7 00 3e 00 00 00 30 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 4c f4 39 00 00 00 0f 74 52 4e 53 00 05 dc 89 50 55 a5 d9 ec f3 02 4a 0b f2 4b ef 6c d1 a2 00 00 00 79 49 44 41 54 08 5b 63 60 60 60 0c ab 9c 9e 2a c0 00 02 4e ff 81 40 05 c4 5a fc 1f 0c ac 80 4c 7b 08 f3 33 03 03 0b 90 fa d1 0f 24 1c 18 84 80 64 cf 09 20 a1 c8 10 0f 63 7e 65 c8 87 29 f8 c6 50 0f 24 37 ec 07 12 df 19 e6 83 98 fc 40 e2 27 98 f9 01 c4 fc 0b 56 00 66 7e 07 6b 03 33 bf 81 0d 03 33 bf 82 ad f8 fd 1e 6c 05 cb 7f 28 70 40 76 0e b2 23 91 9c 0e f7 10 00 38 57 8c 83 67 ba 2d 29 00 00 00 Data Ascii: PNGIHDR>0PLTEGpL%L9tRNSPUJKlyIDAT[c```*N@ZL{3$d c~e)P$7@'Vf~k33l(p@v#8Wg-)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50081	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:55 UTC	928	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:55 UTC	1705	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 36 38 31 30 39 38 36 31 37 33 38 38 34 38 33 25 32 36 73 65 74 25 33 44 61 2e 33 35 39 33 39 35 39 38 39 35 35 38 37 34 39 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 33 35 39 33 39 36 30 31 39 35 35 38 37 34 36 25 32 36 73 65 74 25 33 44 61 2e 33 35 39 33 39 35 39 37 36 32 32 35 34 31 37 25 32 36 5f 5f 74 6e 5f 5f 25 33 44 25 32 35 33 43 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 25 32 46 66 6f 6c 6c 6f 77 65 72 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 Data Ascii: route_urls[0]=%2Fphoto%2F%3Ffbid%3D681098617388483%26set%3Da.359395989558749&route_urls[1]=%2Fphoto%2F%3Ffbid%3D359396019558746%26set%3Da.359395976225417%26__tn__%3D%253C&route_urls[2]=%2Foverlakemedicalcenter%2Ffollowers&route_urls[3]=%2Foverlakemedicalc
2024-04-24 05:32:56 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:56 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:56 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:56 UTC	7	IN	Data Raw: 31 31 61 39 36 0d 0a Data Ascii: 11a96
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 70 68 6f 74 6f 2f 3f 66 62 69 64 3d 36 38 31 30 39 38 36 31 37 33 38 38 34 38 33 26 73 65 74 3d 61 2e 33 35 39 33 39 35 39 38 39 35 35 38 37 34 39 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 65 6e 74 72 79 70 6f Data Ascii: for (;;);{"payload":{"payloads":{"/photo/?fbid=681098617388483&set=a.359395989558749":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"CometPhotoRoot.react"},{"__jsr":"CometPhotoRoot.entrypo
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 69 64 6f 72 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 Data Ascii: ],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"idorvanity":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"comment_id":{"legacyNames":[],"default":null,"path":false,"significant":fa
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 3a 74 72 75 65 2c 22 72 6f 75 74 65 54 79 70 65 22 3a 22 6d 65 64 69 61 5f 76 69 65 77 65 72 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 68 6f 74 6f 73 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 66 62 69 64 22 3a 22 33 Data Ascii: :true,"routeType":"media_viewer","upsellConfig":{"surface":"photos","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"fbid":"3
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 69 6f 6e 54 6f 6b 65 6e 22 3a 22 59 58 42 77 58 33 4e 6c 59 33 52 70 62 32 34 36 4d 54 41 77 4d 44 59 30 4e 6a 55 77 4e 54 49 31 4e 44 55 7a 4f 6a 49 7a 4e 54 59 7a 4d 54 67 7a 4e 44 6b 3d 22 2c 22 75 73 65 72 49 44 22 3a 22 31 30 30 30 36 34 36 35 30 35 32 35 34 35 33 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 22 2c 22 76 69 65 77 65 72 49 44 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 7b 22 5f 5f 64 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c Data Ascii: ionToken":"YXBwX3NlY3Rpb246MTAwMDY0NjUwNTI1NDUzOjIzNTYzMTgzNDk=","userID":"100064650525453","userVanity":"overlakemedicalcenter","viewerID":null,"eligibleForProfilePlusEntityMenu":false},"entryPoint":{"__dr":"ProfileCometCollectionRouteRoot.entrypoint"}},
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 22 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 22 2c 22 73 6b 22 3a 22 66 6f 6c 6c 6f 77 65 72 73 22 2c 22 76 69 65 77 61 73 22 3a 6e 75 6c 6c 2c 22 6d 75 6c 74 69 5f 70 65 72 6d 61 6c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 5f 6f 70 65 6e 5f 63 6f 6d 70 6f 73 65 72 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 74 61 67 22 3a 6e 75 6c 6c 2c 22 72 65 66 65 72 72 61 6c 5f 73 6f 75 72 63 65 22 3a 6e 75 6c 6c 2c 22 73 65 63 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 79 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 79 Data Ascii: eParams":{"vanity":"overlakemedicalcenter","sk":"followers","viewas":null,"multi_permalinks":null,"should_open_composer":false,"event_id":null,"sorting_setting":null,"tag":null,"referral_source":null,"section":null,"story_id":null,"comment_id":null,"reply
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 62 61 64 67 65 5f 74 79 70 65 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 22 4e 45 57 5f 4d 45 4d 42 45 52 22 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c Data Ascii: :false,"significant":false,"coercibleType":"FBID"},"reply_comment_id":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"FBID"},"badge_type":{"legacyNames":[],"default":"NEW_MEMBER","path":false,"significant":true,"coercibl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50082	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	828	OUT	GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_p640x640&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlZ7-Bh9qr8Xud13aPfiNhlXB5Tg7m-NkVHctccEHU7A&oe=662E8774 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	665	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 03 Jul 2023 19:37:15 GMT X-Needle-Checksum: 146177544 thrift_fmhk: GBDXpDiWVQih68sUcVOe/FN7FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1918026503 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:56 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 153045
2024-04-24 05:32:56 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 44 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 01 3b 00 02 00 00 00 0d 00 00 00 26 82 98 00 02 00 00 00 08 00 00 00 34 00 00 00 00 53 65 61 6e 20 41 69 72 68 61 72 74 00 00 c2 a9 20 4e 42 42 4a 00 ff e1 01 db 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 Data Ascii: JFIFDExifMM*;&4Sean Airhart NBBJhttp://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
2024-04-24 05:32:56 UTC	16332	IN	Data Raw: c3 13 59 da 95 53 ca 9e b5 06 51 89 b7 76 b1 97 6e ba 97 81 97 bf a5 a4 f2 d3 ea 23 26 40 5d 28 e9 f1 f6 e9 73 1d 78 74 56 62 ed e7 79 1a 3a c4 e7 78 39 7d 66 3d 2a ec bf 41 3e 5e ed be 57 48 0b 42 3b 37 26 16 d5 f2 6f 2c c1 79 fd b3 d9 ab 3e cd 60 a0 03 1b 48 24 66 6b cd a7 06 0b a4 3a 45 d3 a8 95 41 cf 40 31 fa 22 4b 97 67 76 74 24 90 32 76 07 49 c1 92 40 92 40 92 70 64 ec 09 9d 04 53 a6 45 a4 82 2d 26 69 a3 36 08 b3 a6 33 a6 09 4a 2e 89 3b 49 38 c6 c8 85 6d 26 a4 c9 d0 45 a4 cd 45 a4 c1 15 28 b1 ec ae d4 f4 08 c7 9e 37 b7 0c b7 8a d4 14 78 32 2e 24 76 cf 5a ec 43 f3 ad 2a 72 4a 9a 0e 3b 42 dc 92 60 e4 73 ea e9 94 ba c1 d0 c8 d6 0e a4 63 29 67 5f 6e 46 93 a2 b3 66 d6 e4 c4 3b 0d 6a ba 72 86 99 ea 44 a6 3d a1 26 64 12 8a ac 21 c4 74 b8 9d 78 07 d8 f2 bd Data Ascii: YSQvn#&@](sxtVby:x9}f=A>^WHB;7&o,y>`H$fk:EA@1"Kgvt$2vI@@pdSE-&i63J.;I8m&EE(7x2.$vZCrJ;B`sc)g_nFf;jrD=&d!tx
2024-04-24 05:32:56 UTC	16384	IN	Data Raw: e6 be 9c d5 1f 40 6c 4f 67 e1 3d 9d fe 17 b0 aa 7e 19 c3 37 c2 a8 4f a0 d9 c1 a7 65 d6 6d 5b 67 1f 43 59 82 e4 39 37 33 a3 a7 c2 24 e3 66 e6 84 fc 42 5e 46 49 76 c9 49 95 aa bc 30 fb 4b 67 85 37 e1 7b 1e d4 dc ec b3 de 33 54 d9 e8 12 fd f7 b6 d9 fa 5f 6f b4 a9 b4 8f ad ae c8 af bd 79 d5 62 01 d6 28 65 1d 89 d1 b0 ca bd 7c 4e 27 45 63 9f 65 23 89 9e 72 8b f5 64 3e 99 e8 1a 53 7a 09 b0 54 66 05 78 50 1d a4 70 04 76 52 84 af 1d b9 c1 db a9 34 c4 35 38 b4 74 68 55 9b 35 9c b4 f5 dc bd 83 72 68 48 6e 7a 6b 9a 9e fb 0e dd ed ef 19 6a 35 49 d5 20 f8 e7 80 2f a5 03 9c 53 95 fc bf be a7 ed 76 63 83 3f ba fe 74 fc b3 4f fa 72 d8 5b 9c 1f 76 53 9a bf ba c7 e9 fc 38 fd 3b 7e 28 0b 32 fe cf c3 75 d6 b7 f5 0e b6 9f 82 cb b1 a1 f2 74 75 8e bc d4 fc 1b af 3f 0f 3f 8a d1 Data Ascii: @lOg=~7Oem[gCY973$fB^FIvI0Kg7{3T_oyb(e\|N'Ece#rd>SzTfxPpvR458thU5rhHnzkj5I /Svc?tOr[vS8;~(2utu??
2024-04-24 05:32:56 UTC	16384	IN	Data Raw: 73 82 92 d1 43 60 f0 14 24 40 50 e1 f1 34 53 83 a2 b2 c2 05 63 93 44 ff da 00 08 01 01 00 06 3f 02 ff 00 94 65 63 f6 10 b0 a5 41 fa 93 db 9f a9 d5 61 05 9d 3b 32 8a b8 a9 52 ba 20 d6 6a 7b 34 59 50 88 ec 84 4c 76 65 70 ae 1d 11 b4 e5 67 b0 2d 51 8d 51 96 e5 34 9d 16 30 b0 01 f3 52 e7 0e c8 fa b9 53 1d 90 b8 8a 8d 97 08 32 b2 21 63 3f 53 2b 1f f3 4d 33 db 3b ae 4a d1 a2 f0 a8 18 ec 24 68 a5 4c ad 3e af 4e cc 76 c2 9b 90 bb 55 8f a8 54 ac a9 95 c2 e5 22 65 71 e0 21 c2 b8 04 7d 7c 0d 56 56 98 fd 86 3e a4 03 95 2e 0b 92 04 95 85 95 8c f6 e2 57 17 66 3f e4 30 7f e1 25 68 b3 a9 fa dd 17 10 fa 9a 2d 31 f5 30 84 7d 78 28 b4 6d fb 2c fd 5d 16 7b 30 b2 f5 03 6f a9 a7 66 ab 05 4a e1 d1 78 b2 b5 c2 c8 1f 52 56 35 ff 00 92 89 fd b6 9f 5b 65 d5 75 fa d8 59 6f 6e 1b 2a Data Ascii: sC`$@P4ScD?ecAa;2R j{4YPLvepg-QQ40RS2!c?S+M3;J$hL>NvUT"eq!}\|VV>.Wf?0%h-10}x(m,]{0ofJxRV5[euYon*
2024-04-24 05:32:56 UTC	14935	IN	Data Raw: 55 fe ef 87 08 f1 c8 72 7b a9 77 8e 22 30 36 40 58 e6 96 ef 28 f7 87 8d a2 08 41 a3 82 a0 1e 24 d3 0c 0e 3c 52 10 3f 48 0e 67 5f 11 f4 4f 35 5e 3b b7 68 1d 82 a4 bb cb 0a 21 b9 dd 17 5d 73 59 cb 40 bf 7a 65 4d 30 4e ca 2a 48 7e cd 84 35 77 5d 32 b8 64 1e 65 ca 5e e6 0e a0 ae 22 e2 7c f2 51 b7 40 33 9f 92 73 64 35 d1 e1 72 2e a4 19 20 7c 4f 45 c4 c8 71 19 76 9a 22 d9 76 05 d8 c8 44 e5 cd e5 72 2d 14 66 a6 e1 5b 51 81 ad 1e e7 25 6b 40 21 70 f0 d3 19 85 6b 49 6b 49 e7 a7 92 c3 a6 4c 6a b1 30 31 8c 21 49 95 ec 02 37 56 30 1a 93 ab 80 85 60 8c 8e 21 32 8b e9 11 78 d9 c9 82 ab db c3 cd 54 87 b8 3a 72 0f 35 63 1b 97 37 ce 13 7b de 33 b8 62 f6 4c e1 3e ec ab 5a ee 1d 87 34 c0 e3 07 4e 6a 5c 4b d9 ab 42 0f a6 1b b8 87 a7 5a e7 17 5b 9b 76 f5 4c a1 51 a7 b8 b7 3b Data Ascii: Ur{w"06@X(A$<R?Hg_O5^;h!]sY@zeM0N*H~5w]2de^"\|Q@3sd5r. \|OEqv"vDr-f[Q%k@!pkIkILj01!I7V0`!2xT:r5c7{3bL>Z4Nj\KBZ[vLQ;
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: da 68 91 01 57 64 b4 ae 0a b9 f8 80 fa 90 05 79 9d 8f ea 8d 5b e6 30 db 88 ff 00 b7 99 c7 db 2c 30 63 bf 49 9d a5 54 30 d3 78 96 03 32 e9 3f ec 97 79 c2 5b e8 96 5f 14 fc 45 cd 19 c9 a8 09 98 ef c7 b9 51 94 b4 4b 10 d0 1b 7d 25 80 00 77 28 51 4c 7f 31 d2 ae 52 e6 67 52 d5 f0 73 17 c1 5b 36 0b a4 ad 87 5b 7b 9b 56 c8 6b d4 0a cd b3 7e 52 a6 bd 8d f1 2c 43 e5 92 50 dc 27 d1 2f f2 47 71 a8 c5 e2 0b ae 96 98 0f 8b 81 60 ae 4f 18 97 8b 1b ed c5 aa 5d e4 4c e5 d4 6b 2e 5a 5c 75 3b a1 62 9e 50 e0 c5 e7 e6 f7 f5 84 9e 81 b5 c5 25 eb 7c ab 2a 8c 41 45 7f 29 60 42 aa 51 bb fd b2 b5 af c6 4c 0b 96 f1 57 19 07 9f bf e0 80 c2 ec eb bf 2c 41 86 6e 54 ee a7 d9 dc 14 ac 8b 8a d1 7c 4c 9a a7 93 2a 93 92 bf 98 95 83 66 a6 01 2a 93 30 f7 11 a1 87 b9 89 76 f4 41 a2 ad 8e 20 Data Ascii: hWdy[0,0cIT0x2?y[_EQK}%w(QL1RgRs[6[{Vk~R,CP'/Gq`O]Lk.Z\u;bP%\|AE)`BQLW,AnT\|Lf*0vA
2024-04-24 05:32:56 UTC	16333	IN	Data Raw: 9d 57 f1 42 d0 17 b4 22 8a 39 ed cd 71 31 49 95 b8 c8 fb fc 71 39 1c de d0 f9 0a c7 07 31 46 81 58 35 dc db 4e 6b 7e 61 d0 84 4d 61 ed db 29 ad 41 ee 09 a4 d9 b4 b8 43 57 cf 28 d0 b5 7d c4 bd 8f 1e 65 26 81 ce bd 3f a7 e6 cf bd 7e 96 95 c0 31 4e d4 fa 86 21 fa ef ca 7c 4d bd 1f 87 f4 fb cf eb da e3 f8 4d 90 f5 02 d7 13 92 a2 36 48 39 fe a3 f0 22 29 6f 7c ac 57 32 95 fd 77 e6 27 50 f1 9f 89 68 5b 8d 66 10 57 ef c7 f3 70 e9 06 d1 35 5c 51 17 ae da ef ec c5 0c a7 fb 17 0a c3 cc ad d7 50 cb 81 a6 a5 2a 42 9b 79 98 76 41 da fe 61 1d 5b 8b d7 d6 56 05 35 8b f7 9e 4b 00 35 f7 94 1b 2d b7 a4 c5 14 5a 7f 29 80 ef 23 07 e7 30 5c 63 c8 fa cc 11 b2 5f 28 81 54 ad 4a ab f2 8a ec 0b eb 38 5f 9b 0e a3 1c 30 18 4b b0 a8 3a ca 2b 1b eb 15 68 fa 65 3b a2 ad 1b 61 a5 e6 c2 Data Ascii: WB"9q1Iq91FX5Nk~aMa)ACW(}e&?~1N!\|MM6H9")o\|W2w'Ph[fWp5\QP*ByvAa[V5K5-Z)#0\c_(TJ8_0K:+he;a
2024-04-24 05:32:56 UTC	16384	IN	Data Raw: c6 af 81 29 79 d7 4e b5 16 d4 98 41 83 98 b8 7d da be 57 ee 17 53 ae 9a cf 20 c4 01 2d 55 5c 0e a1 29 9c 2d 03 86 a5 db be 53 43 6c 12 c8 1d a3 2d 2f f1 1c 0b 69 57 ea c4 a5 07 b7 c4 cb f4 14 be 95 ba f7 0d 95 bb 27 93 e2 09 83 46 46 4f f5 0b 2d 39 1b b1 c5 b5 05 73 3e 21 e7 5e 25 d5 89 38 15 c4 b5 a9 eb e2 4c 85 c4 29 c7 02 71 16 f7 6c 17 97 d6 65 aa a8 64 69 e6 c8 dd 41 6d 44 96 b4 5a ed 77 14 0d 87 e5 2d 94 ed 09 fa a3 af 14 c9 84 bf 95 2c f7 ee 3c dd c3 73 8f 72 f1 c8 6a aa ea 08 8a f6 97 72 ba 8b 00 73 9a ca 6f 14 73 57 bc 54 bb 21 e8 30 e9 30 95 2c b6 aa bd bc 42 a4 10 42 02 77 99 7a ea 10 f0 be e1 b4 9a d9 bc 55 ca b0 e1 99 92 7d 02 80 63 f6 21 61 c2 9b 7f 60 3f 11 e8 c5 a6 00 43 3b 8c 8e 8d ef cf dc ea 32 bb c2 a1 1e 38 f8 82 69 20 00 ab 7c 71 32 Data Ascii: )yNA}WS -U\)-SCl-/iW'FFO-9s>!^%8L)qlediAmDZw-,<srjrsosWT!00,BBwzU}c!a`?C;28i \|q2
2024-04-24 05:32:56 UTC	16384	IN	Data Raw: 26 af 8f ef ac d7 c3 01 81 71 7c b1 a8 10 01 eb 37 e3 c1 db 32 d8 30 64 fe 20 37 f6 c6 ce 04 23 b5 99 70 a5 92 9c 0a 4d f4 60 a7 12 eb 38 20 e5 5f 9e a6 57 de 3f 13 23 69 95 c8 cb 72 16 5d 39 61 16 98 61 43 7a 4a 85 94 c0 54 ab 7e 6a 35 9f b4 25 08 30 f4 22 eb c3 ad df 8f 8c 16 c5 cc b3 5c 39 3e cd f8 c4 8d 74 b3 df de 20 1b 9c df e2 66 36 b9 50 31 f3 30 04 bb a8 2b 14 1e 39 85 41 77 5e 30 54 20 cd 1f cc 38 93 f2 f1 a5 4d 46 81 72 cb 00 e2 68 38 33 5b 8a 86 07 68 88 17 ba b8 ed e3 33 ec af b7 84 50 89 fb 08 6f c3 01 41 a8 2c d7 2e 62 e2 5c e6 bc 3d ab 5e 13 28 4b 60 ac 3b e3 10 32 f7 ba e2 5f 08 98 c5 62 be ae b7 a2 55 5b 6f d2 5e c4 02 27 1b 83 d4 06 99 78 23 52 8d 2e fa 6a 65 34 f9 b9 5b da ff 00 10 c0 ae 70 4f cc a3 05 da 78 c1 11 5d c6 e5 b1 56 c1 44 Data Ascii: &q\|720d 7#pM`8 _W?#ir]9aaCzJT~j5%0"\9>t f6P10+9Aw^0T 8MFrh83[h3PoA,.b\=^(K`;2_bU[o^'x#R.je4[pOx]VD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50083	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	833	OUT	GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB1m8NAX-bhLwhcb_389jU9W4xFxGps9kAln7Z1Bm_83g&oe=662E8774 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	662	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 03 Jul 2023 19:37:15 GMT X-Needle-Checksum: 146177544 thrift_fmhk: GBDXpDiWVQih68sUcVOe/FN7FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=573854212 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:56 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 3518
2024-04-24 05:32:56 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:32:56 UTC	3517	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 44 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 01 3b 00 02 00 00 00 0d 00 00 00 26 82 98 00 02 00 00 00 08 00 00 00 34 00 00 00 00 53 65 61 6e 20 41 69 72 68 61 72 74 00 00 c2 a9 20 4e 42 42 4a 00 ff e1 01 db 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 Data Ascii: JFIFDExifMM*;&4Sean Airhart NBBJhttp://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50085	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	599	OUT	GET /rsrc.php/v3/yl/r/QB1B1DuEfJ4.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 5hB396FiJN63ltVlck6f/g== Expires: Thu, 24 Apr 2025 05:32:56 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: R2Bj6iEDzTr3TbIMrljUkUfpcocpiD2EuWA5u1vKRt37bkTjJKPfYaNWbfCxOLPM8GcCFEdxFwarTNJlKibznQ== Date: Wed, 24 Apr 2024 05:32:56 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=74, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 15815
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 49 6d 6d 65 72 73 69 76 65 50 68 6f 74 6f 49 63 6f 6e 5f 70 68 6f 74 6f 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 49 6d 6d 65 72 73 69 76 65 50 68 6f 74 6f 49 63 6f 6e 5f 70 68 6f 74 6f 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 Data Ascii: ;/FB_PKG_DELIM/__d("CometImmersivePhotoIcon_photo.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometImmersivePhotoIcon_photo",selections:[{alias:null,args:null,concreteType:null,kind:"Li
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 6f 70 41 70 70 53 65 63 74 69 6f 6e 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 29 2c 6d 65 74 61 64 61 74 61 3a 7b 7d 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 6f 70 41 70 70 53 65 63 74 69 6f 6e 51 75 65 72 79 22 2c 6f 70 65 72 61 74 69 6f 6e 4b 69 6e 64 3a 22 71 75 65 72 79 22 2c 74 65 78 74 3a 6e 75 6c 6c 2c 70 72 6f 76 69 64 65 64 56 61 72 69 61 62 6c 65 73 3a 7b 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 72 65 6c 61 79 70 72 6f 76 69 64 65 72 3a 62 28 22 43 6f 6d 65 74 55 46 49 52 65 61 Data Ascii: ",params:{id:b("ProfileCometTopAppSectionQuery_facebookRelayOperation"),metadata:{},name:"ProfileCometTopAppSectionQuery",operationKind:"query",text:null,providedVariables:{__relay_internal__pv__CometUFIReactionsEnableShortNamerelayprovider:b("CometUFIRea
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 73 69 7a 65 72 3a 7b 64 69 73 70 6c 61 79 3a 22 78 31 72 67 35 6f 68 75 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 61 2e 68 6f 72 69 7a 6f 6e 74 61 6c 47 61 70 2c 65 3d 61 2e 76 65 72 74 69 63 61 6c 47 61 70 2c 66 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 64 3a 65 2c 67 3d 61 2e 6c 61 73 74 52 6f 77 46 69 6c 6c 65 72 3b 65 3d 61 2e 72 65 76 65 61 6c 4f 72 64 65 72 3b 76 61 72 20 69 3d 61 2e 6d 69 6e 57 69 64 74 68 2c 6c 3d 6a 2e 43 68 69 6c 64 72 65 6e 2e 74 6f 41 72 72 61 79 28 62 29 2e 6d 61 70 28 Data Ascii: ion:"x10l6tqk",start:"x17qophe",top:"x13vifvy",$$css:!0},sizer:{display:"x1rg5ohu",$$css:!0}};function a(a){var b=a.children,d=a.horizontalGap,e=a.verticalGap,f=e===void 0?d:e,g=a.lastRowFiller;e=a.revealOrder;var i=a.minWidth,l=j.Children.toArray(b).map(
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 6f 6e 28 61 2c 66 29 7b 72 65 74 75 72 6e 20 62 2e 6c 65 6e 67 74 68 3e 65 2a 28 66 2b 31 29 26 26 6a 2e 6a 73 78 28 63 28 22 42 61 73 65 43 6f 6e 74 61 69 6e 65 72 51 75 65 72 79 45 6c 65 6d 65 6e 74 2e 72 65 61 63 74 22 29 2c 7b 62 72 65 61 6b 70 6f 69 6e 74 3a 28 66 2b 32 29 2a 70 2d 64 2c 69 6e 76 65 72 73 65 54 6f 43 6f 6e 74 61 69 6e 65 72 3a 21 30 2c 6d 61 78 57 69 64 74 68 3a 22 63 61 6c 63 28 28 31 30 30 25 20 2b 20 22 2b 64 2b 22 70 78 29 20 2f 20 22 2b 28 66 2b 31 29 2b 22 29 22 2c 6d 69 6e 57 69 64 74 68 3a 30 2c 78 73 74 79 6c 65 3a 6b 2e 73 69 7a 65 72 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 7b 70 61 64 64 69 6e 67 3a 22 30 20 22 2b 64 2f 32 2b 22 70 78 22 7d 2c 63 68 69 6c 64 72 65 6e 3a 5b Data Ascii: on(a,f){return b.length>e(f+1)&&j.jsx(c("BaseContainerQueryElement.react"),{breakpoint:(f+2)p-d,inverseToContainer:!0,maxWidth:"calc((100% + "+d+"px) / "+(f+1)+")",minWidth:0,xstyle:k.sizer,children:j.jsxs("div",{style:{padding:"0 "+d/2+"px"},children:[
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 20 6b 2e 6a 73 78 28 63 28 22 54 65 74 72 61 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 68 28 22 31 32 34 37 39 33 31 22 29 2c 32 34 29 7d 29 3b 65 6c 73 65 20 69 66 28 61 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 70 72 6f 6a 65 63 74 69 6f 6e 5f 74 79 70 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 22 74 68 72 65 65 5f 64 22 7d 29 29 72 65 74 75 72 6e 20 6b 2e 6a 73 78 28 63 28 22 54 65 74 72 61 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 68 28 22 31 32 34 33 39 38 32 22 29 2c 32 34 29 7d 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 61 2e 64 69 73 Data Ascii: k.jsx(c("TetraIcon.react"),{color:"white",icon:d("fbicon")._(h("1247931"),24)});else if(a.some(function(a){a=a.projection_type;return a==="three_d"}))return k.jsx(c("TetraIcon.react"),{color:"white",icon:d("fbicon")._(h("1243982"),24)});return null}a.dis
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 6f 74 2e 72 65 61 63 74 22 29 2e 5f 5f 73 65 74 52 65 66 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 72 6f 75 74 65 50 72 6f 70 73 3b 76 61 72 20 62 3d 61 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 6f 6b 65 6e 2c 65 3d 61 2e 73 65 63 74 69 6f 6e 54 6f 6b 65 6e 3b 61 3d 61 2e 75 73 65 72 49 44 3b 72 65 74 75 72 6e 7b 65 78 74 72 61 50 72 6f 70 73 3a 7b 63 6f 6c 6c 65 63 74 69 6f 6e 54 6f 6b 65 6e 3a 62 7d 2c 71 75 65 72 69 65 73 3a 7b 74 6f 70 41 70 70 53 65 63 74 69 6f 6e 51 75 65 72 79 52 65 66 65 72 65 6e 63 65 3a 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 50 72 6f 76 69 64 65 72 Data Ascii: metCollectionRoot.react").__setRef("ProfileCometCollectionRouteRoot.entrypoint"),function(a){a=a.routeProps;var b=a.collectionToken,e=a.sectionToken;a=a.userID;return{extraProps:{collectionToken:b},queries:{topAppSectionQueryReference:{environmentProvider
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 47 6c 69 6d 6d 65 72 47 72 69 64 49 74 65 6d 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 43 6f 6c 75 6d 6e 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 43 6f 6c 75 6d 6e 49 74 65 6d 2e 72 65 61 63 74 22 2c 22 46 44 53 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 22 46 44 53 47 6c 69 6d 6d 65 72 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 7b 62 6f 64 79 3a 7b 62 6f 72 64 65 72 54 6f 70 53 74 61 72 74 52 Data Ascii: ault"]=a}),98);__d("ProfileCometCollectionGlimmerGridItem.react",["CometColumn.react","CometColumnItem.react","FDSAspectRatioContainer.react","FDSGlimmer.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={body:{borderTopStartR
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 34 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 42 61 73 65 4c 6f 61 64 69 6e 67 53 74 61 74 65 45 6c 65 6d 65 6e 74 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 70 70 43 6f 6c 6c 65 63 74 69 6f 6e 47 72 69 64 2e 72 65 61 63 74 22 29 2c 7b 6c 61 73 74 52 6f 77 46 69 6c 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 47 6c 69 6d 6d Data Ascii: ],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j=4;function a(a){return i.jsx(c("BaseLoadingStateElement.react"),{children:i.jsx(c("ProfileCometAppCollectionGrid.react"),{lastRowFiller:function(a){return i.jsx(c("ProfileCometCollectionGlimm
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 2c 78 73 74 79 6c 65 3a 6a 2e 74 69 74 6c 65 7d 29 2c 69 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 37 38 7a 75 6d 35 20 78 31 68 71 35 67 6a 34 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 69 2e 6a 73 78 28 61 2c 7b 69 6e 64 65 78 3a 31 2c 78 73 74 79 6c 65 3a 6a 2e 74 61 62 7d 29 2c 69 2e 6a 73 78 28 61 2c 7b 69 6e 64 65 78 3a 32 2c 78 73 74 79 6c 65 3a 6a 2e 74 61 62 7d 29 2c 69 2e 6a 73 78 28 61 2c 7b 69 6e 64 65 78 3a 33 2c 78 73 74 79 6c 65 3a 6a 2e 74 61 62 7d 29 5d 7d 29 2c 69 2e 6a 73 78 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 70 70 43 6f 6c 6c 65 63 74 69 6f 6e 47 6c 69 6d 6d 65 72 2e 72 65 61 63 74 22 29 2c 7b 7d 29 5d 7d 29 7d 29 7d 29 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 Data Ascii: ,xstyle:j.title}),i.jsxs("div",{className:"x78zum5 x1hq5gj4",children:[i.jsx(a,{index:1,xstyle:j.tab}),i.jsx(a,{index:2,xstyle:j.tab}),i.jsx(a,{index:3,xstyle:j.tab})]}),i.jsx(c("ProfileCometAppCollectionGlimmer.react"),{})]})})})})}a.displayName=a.name+"
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 63 75 73 51 75 65 72 79 3a 64 28 22 66 6f 63 75 73 53 63 6f 70 65 51 75 65 72 69 65 73 22 29 2e 74 61 62 62 61 62 6c 65 53 63 6f 70 65 51 75 65 72 79 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 50 6c 61 63 65 68 6f 6c 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 66 61 6c 6c 62 61 63 6b 3a 69 2e 6a 73 78 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 70 70 53 65 63 74 69 6f 6e 47 6c 69 6d 6d 65 72 2e 72 65 61 63 74 22 29 2c 7b 7d 29 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6a 2c 62 61 62 65 6c 48 65 6c 70 65 Data Ascii: cusQuery:d("focusScopeQueries").tabbableScopeQuery,children:i.jsx(c("ProfileCometCollectionRootContainer.react"),{children:i.jsx(c("CometPlaceholder.react"),{fallback:i.jsx(c("ProfileCometAppSectionGlimmer.react"),{}),children:i.createElement(j,babelHelpe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50086	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	599	OUT	GET /rsrc.php/v3/y4/r/eav_geUKRkF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: QRYul2e7gzoZ8pkAygiF0g== Expires: Thu, 24 Apr 2025 05:32:56 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 2z5EsJM4Utq2ctwFZPRIGSiljX/BpcgsKTSBKlcImfBUiMJZccMBaQEUlvw4/tdW+Q4R41MRqBDJqmTxlnjMaQ== Date: Wed, 24 Apr 2024 05:32:56 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=73, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 12200
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 32 35 37 33 37 32 32 33 39 34 35 38 39 31 38 36 30 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 49 6d 6d 65 72 73 69 76 65 50 68 6f 74 6f 43 61 6e 55 73 65 72 44 69 73 61 62 6c 65 33 44 4d 6f 74 69 6f 6e 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 50 68 Data Ascii: ;/FB_PKG_DELIM/__d("CometPhotoPermalinkRootQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="25737223945891860"}),null);__d("CometPhotoPermalinkRootQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometPh
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 64 65 72 22 2c 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 43 6f 6e 74 65 6e 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 22 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 55 46 49 53 68 61 72 65 41 63 74 69 6f 6e 4d 69 67 72 61 74 69 6f 6e 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 50 72 65 6c 6f 61 64 61 62 6c 65 43 6f 6e 63 72 65 74 65 52 65 71 75 65 73 74 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 28 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 43 6f Data Ascii: der","CometPhotoRootContentQuery_facebookRelayOperation","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometPhotoRootCo
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 5f 70 72 65 66 65 74 63 68 45 76 65 6e 74 49 6d 61 67 65 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 49 73 4d 65 72 67 51 41 50 6f 6c 6c 73 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 49 73 57 6f 72 6b 55 73 65 72 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 53 74 6f 72 69 65 73 41 72 6d 61 64 69 6c 6c 6f 52 65 70 6c 79 45 6e 61 62 6c 65 64 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 53 74 6f 72 69 65 73 52 69 6e 67 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 53 74 6f 72 69 65 73 54 72 61 79 53 68 6f 75 6c 64 53 68 6f 77 4d 65 74 61 64 61 74 61 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 Data Ascii: _prefetchEventImage.relayprovider","IsMergQAPolls.relayprovider","IsWorkUser.relayprovider","StoriesArmadilloReplyEnabled.relayprovider","StoriesRing.relayprovider","StoriesTrayShouldShowMetadata.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 52 6f 6f 74 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 22 4a 53 52 65 73 6f 75 72 63 65 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 2c 22 57 65 62 50 69 78 65 6c 52 61 74 69 6f 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 67 65 74 50 72 65 6c 6f 61 64 50 72 6f 70 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 72 6f 75 74 65 50 61 72 61 6d 73 3b 76 61 72 20 63 3d 61 2e 63 6f 6d 6d 65 6e 74 5f 69 64 2c 65 3d 61 2e 66 62 69 64 2c 66 3d 61 2e 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 3b 61 3d 61 2e 73 65 74 3b 66 3d 28 66 3d 66 29 21 3d 6e 75 6c 6c 3f 66 3a 63 3b 63 3d 7b 66 65 65 64 62 61 63 6b 53 6f 75 72 63 65 3a 32 2c 66 65 65 64 4c 6f 63 61 74 Data Ascii: RootQuery$Parameters","JSResourceForInteraction","WebPixelRatio"],(function(a,b,c,d,e,f,g){"use strict";a={getPreloadProps:function(a){a=a.routeParams;var c=a.comment_id,e=a.fbid,f=a.reply_comment_id;a=a.set;f=(f=f)!=null?f:c;c={feedbackSource:2,feedLocat
2024-04-24 05:32:56 UTC	470	IN	Data Raw: 7b 71 75 65 72 69 65 73 3a 7b 70 68 6f 74 6f 52 6f 6f 74 51 75 65 72 79 52 65 66 65 72 65 6e 63 65 3a 7b 70 61 72 61 6d 65 74 65 72 73 3a 62 28 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 43 6f 6e 74 65 6e 74 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 29 2c 76 61 72 69 61 62 6c 65 73 3a 66 7d 2c 70 68 6f 74 6f 54 61 67 4c 61 79 65 72 51 75 65 72 79 52 65 66 65 72 65 6e 63 65 3a 7b 70 61 72 61 6d 65 74 65 72 73 3a 62 28 22 43 6f 6d 65 74 50 68 6f 74 6f 54 61 67 4c 61 79 65 72 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 29 2c 76 61 72 69 61 62 6c 65 73 3a 68 7d 7d 7d 7d 2c 72 6f 6f 74 3a 63 28 22 4a 53 52 65 73 6f 75 72 63 65 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 29 28 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 72 65 61 63 74 22 Data Ascii: {queries:{photoRootQueryReference:{parameters:b("CometPhotoRootContentQuery$Parameters"),variables:f},photoTagLayerQueryReference:{parameters:b("CometPhotoTagLayerQuery$Parameters"),variables:h}}}},root:c("JSResourceForInteraction")("CometPhotoRoot.react"
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 20 73 74 72 69 63 74 22 3b 61 3d 7b 67 65 74 50 72 65 6c 6f 61 64 50 72 6f 70 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 72 6f 75 74 65 50 61 72 61 6d 73 2c 65 3d 63 2e 63 6f 6d 6d 65 6e 74 5f 69 64 3b 63 3d 63 2e 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 3b 61 3d 61 2e 72 6f 75 74 65 50 72 6f 70 73 2e 73 74 6f 72 79 49 44 3b 63 3d 28 63 3d 63 29 21 3d 6e 75 6c 6c 3f 63 3a 65 3b 65 3d 7b 66 65 65 64 62 61 63 6b 53 6f 75 72 63 65 3a 32 2c 66 65 65 64 4c 6f 63 61 74 69 6f 6e 3a 22 50 45 52 4d 41 4c 49 4e 4b 22 2c 66 6f 63 75 73 43 6f 6d 6d 65 6e 74 49 44 3a 63 21 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 63 29 3a 6e 75 6c 6c 2c 70 72 69 76 61 63 79 53 65 6c 65 63 74 6f 72 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 3a 22 43 4f 4d 45 Data Ascii: strict";a={getPreloadProps:function(a){var c=a.routeParams,e=c.comment_id;c=c.reply_comment_id;a=a.routeProps.storyID;c=(c=c)!=null?c:e;e={feedbackSource:2,feedLocation:"PERMALINK",focusCommentID:c!=null?String(c):null,privacySelectorRenderLocation:"COME
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 7b 73 69 67 6e 61 6c 3a 21 30 7d 2c 61 29 7d 3b 63 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 31 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 67 65 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 74 68 69 73 2e 24 31 29 7d 3b 63 2e 75 70 64 61 74 65 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 74 68 69 73 2e 24 31 2c 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 73 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 2e 63 6f 6e 6e 65 63 Data Ascii: {signal:!0},a)};c.clear=function(){this.$1={};return this};c.getData=function(){return babelHelpers["extends"]({},this.$1)};c.updateData=function(a){this.$1=babelHelpers["extends"]({},this.$1,a);return this};c.setConnectionClass=function(a){this.$1.connec
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 2c 63 2c 64 2c 65 2c 66 2c 68 29 7b 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 6e 75 6c 6c 29 3b 66 3d 3d 3d 76 6f 69 64 20 30 26 26 28 66 3d 5b 5d 29 3b 76 61 72 20 69 3d 7b 7d 2c 6a 3d 68 7c 7c 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6a 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6a 5b 61 5d 3b 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7c 7c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 26 26 28 62 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 29 3b 69 5b 67 2b 61 5d 3d 62 7d 29 3b 6e 65 77 28 62 28 22 50 61 67 65 73 54 79 70 65 64 4c 6f 67 67 65 72 22 29 29 28 29 2e 73 65 74 50 61 67 65 49 44 28 61 29 2e 73 65 74 45 76 65 6e 74 28 63 29 2e 73 65 74 45 76 65 Data Ascii: ,c,d,e,f,h){e===void 0&&(e=null);f===void 0&&(f=[]);var i={},j=h\|\|{};Object.keys(j\|\|{}).forEach(function(a){var b=j[a];(b instanceof Array\|\|b instanceof Object)&&(b=JSON.stringify(b));i[g+a]=b});new(b("PagesTypedLogger"))().setPageID(a).setEvent(c).setEve
2024-04-24 05:32:56 UTC	1230	IN	Data Raw: 63 28 22 43 6f 6d 65 74 43 6f 6e 74 65 6e 74 41 72 65 61 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 63 79 38 7a 68 6c 20 78 37 38 7a 75 6d 35 20 78 6c 35 36 6a 37 6b 20 78 68 38 79 65 6a 33 22 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 69 79 6d 6d 32 61 20 78 31 67 6a 61 39 74 20 78 38 76 64 67 71 6a 20 78 77 37 79 6c 79 39 20 78 31 68 74 6b 38 73 6c 20 78 76 75 65 39 7a 22 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 47 6c 69 6d 6d 65 72 2e 72 65 61 63 74 22 29 2c 7b 7d 29 7d 29 7d 29 7d 29 7d 6c 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 6c 2e 6e 61 Data Ascii: c("CometContentArea.react"),{children:i.jsx("div",{className:"x1cy8zhl x78zum5 xl56j7k xh8yej3",children:i.jsx("div",{className:"x1iymm2a x1gja9t x8vdgqj xw7yly9 x1htk8sl xvue9z",children:i.jsx(c("CometFeedStoryGlimmer.react"),{})})})})}l.displayName=l.na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50084	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	599	OUT	GET /rsrc.php/v3/yE/r/bpfhWVdEqSZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: m/6rKds28MLOA6nWXftIeg== Expires: Thu, 24 Apr 2025 05:32:56 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: utGT9eEHV04AdJMxdn+lmpsZIlTaoNPDvj3IxfH7q9pL6JzFmANIR/fjTdeoRxo5/fLmban36NCzqySFv04Q5g== Date: Wed, 24 Apr 2024 05:32:56 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=71, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 12605
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 46 65 65 64 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 38 38 37 36 39 38 30 34 36 32 34 31 37 33 33 32 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 46 65 65 64 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 49 6d 6d 65 72 73 69 76 65 50 68 6f 74 6f 43 61 6e 55 73 65 72 44 69 73 61 62 6c 65 33 44 4d 6f 74 69 6f 6e 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 55 46 49 Data Ascii: ;/FB_PKG_DELIM/__d("ProfileCometReviewsFeedQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="8876980462417332"}),null);__d("ProfileCometReviewsFeedQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometUFI
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 64 65 72 22 29 2c 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 53 74 6f 72 69 65 73 54 72 61 79 53 68 6f 75 6c 64 53 68 6f 77 4d 65 74 61 64 61 74 61 72 65 6c 61 79 70 72 6f 76 69 64 65 72 3a 62 28 22 53 74 6f 72 69 65 73 54 72 61 79 53 68 6f 75 6c 64 53 68 6f 77 4d 65 74 61 64 61 74 61 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 29 2c 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 53 74 6f 72 69 65 73 52 69 6e 67 72 65 6c 61 79 70 72 6f 76 69 64 65 72 3a 62 28 22 53 74 6f 72 69 65 73 52 69 6e 67 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 29 2c 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 45 76 65 6e 74 43 6f 6d 65 74 43 61 72 64 49 6d 61 67 65 5f 70 72 65 66 65 74 63 68 45 76 65 6e 74 49 6d Data Ascii: der"),__relay_internal__pv__StoriesTrayShouldShowMetadatarelayprovider:b("StoriesTrayShouldShowMetadata.relayprovider"),__relay_internal__pv__StoriesRingrelayprovider:b("StoriesRing.relayprovider"),__relay_internal__pv__EventCometCardImage_prefetchEventIm
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 75 73 65 72 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 63 6f 6d 70 6f 73 65 72 5f 69 6e 66 6f 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 63 6f 6d 70 6f 73 65 72 5f 69 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 22 70 72 6f 66 69 6c 65 5f 70 6c 75 73 5f 72 65 76 69 65 77 73 5f 63 6f 6d 70 6f 73 65 72 5f 69 6e 66 6f 28 69 73 5f 63 6f 6d 65 74 3a 74 72 75 65 29 22 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 61 2c 63 6f 6e 63 Data Ascii: :null,documentName:"ProfileCometReviewsTabHeader_user",fragmentName:"ProfileCometReviewsTabHeader_composer_info",fragmentPropName:"composer_info",kind:"ModuleImport"}],storageKey:"profile_plus_reviews_composer_info(is_comet:true)"},{alias:null,args:a,conc
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 50 72 65 6c 6f 61 64 61 62 6c 65 43 6f 6e 63 72 65 74 65 52 65 71 75 65 73 74 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 52 6f 6f 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 29 2c 6d 65 74 61 64 61 74 61 3a 7b 7d 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 52 6f 6f 74 51 75 65 72 79 22 2c 6f 70 65 72 61 74 69 6f 6e 4b 69 6e 64 3a 22 71 75 65 72 79 22 2c 74 65 78 74 3a 6e 75 6c 6c 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 Data Ascii: {"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ProfileCometReviewsTabRootQuery_facebookRelayOperation"),metadata:{},name:"ProfileCometReviewsTabRootQuery",operationKind:"query",text:null}};e.exports=a}),null);__d("ProfileCometReviewsTab
2024-04-24 05:32:56 UTC	482	IN	Data Raw: 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 72 6f 66 69 6c 65 5f 70 6c 75 73 5f 72 65 76 69 65 77 73 5f 63 6f 6d 70 6f 73 65 72 5f 69 6e 66 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 75 73 65 72 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 63 6f 6d 70 6f 73 65 72 5f 69 6e 66 6f 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 63 6f 6d 70 6f 73 65 72 5f 69 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 Data Ascii: dField",name:"profile_plus_reviews_composer_info",plural:!1,selections:[{args:null,documentName:"ProfileCometReviewsTabHeader_user",fragmentName:"ProfileCometReviewsTabHeader_composer_info",fragmentPropName:"composer_info",kind:"ModuleImport"}],storageKey
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 75 73 65 72 5f 68 65 61 64 65 72 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 68 65 61 64 65 72 5f 69 6e 66 6f 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 65 61 64 65 72 5f 69 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 22 70 72 6f 66 69 6c 65 5f 70 6c 75 73 5f 72 65 76 69 65 77 73 5f 68 65 61 64 65 72 5f 69 6e 66 6f 28 69 73 5f 63 6f 6d 65 74 3a 74 72 75 65 29 22 7d 2c 7b 22 69 66 22 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 44 65 66 65 72 22 2c 6c 61 62 65 6c 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 Data Ascii: ileCometReviewsTabHeader_user_header",fragmentName:"ProfileCometReviewsTabHeader_header_info",fragmentPropName:"header_info",kind:"ModuleImport"}],storageKey:"profile_plus_reviews_header_info(is_comet:true)"},{"if":null,kind:"Defer",label:"ProfileCometRev
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 69 65 77 65 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 22 69 66 22 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 44 65 66 65 72 22 2c 6c 61 62 65 6c 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 76 69 65 77 65 72 24 64 65 66 65 72 24 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 43 6f 6d 70 6f 73 65 72 5f 76 69 65 77 65 72 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 63 74 6f 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c Data Ascii: kedField",name:"viewer",plural:!1,selections:[{"if":null,kind:"Defer",label:"ProfileCometReviewsTabHeader_viewer$defer$ProfileCometReviewsTabComposer_viewer",selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"actor",plural:!1,sel
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 22 29 2e 75 73 65 46 72 61 67 6d 65 6e 74 28 6a 21 3d 3d 76 6f 69 64 20 30 3f 6a 3a 6a 3d 62 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 75 73 65 72 2e 67 72 61 70 68 71 6c 22 29 2c 66 29 3b 61 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 46 72 61 67 6d 65 6e 74 28 6b 21 3d 3d 76 6f 69 64 20 30 3f 6b 3a 6b 3d 62 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 48 65 61 64 65 72 5f 76 69 65 77 65 72 2e 67 72 61 70 68 71 6c 22 29 2c 61 29 3b 76 61 72 20 67 3d 6e 28 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6e 74 65 78 74 22 29 29 3b 67 3d 67 2e 69 73 49 6e 56 69 65 77 41 73 3b 65 3d 28 65 3d 63 28 22 71 65 78 22 29 2e 5f 28 22 39 31 38 22 29 29 21 3d 6e 75 6c 6c Data Ascii: ").useFragment(j!==void 0?j:j=b("ProfileCometReviewsTabHeader_user.graphql"),f);a=d("CometRelay").useFragment(k!==void 0?k:k=b("ProfileCometReviewsTabHeader_viewer.graphql"),a);var g=n(c("ProfileCometContext"));g=g.isInViewAs;e=(e=c("qex")._("918"))!=null
2024-04-24 05:32:56 UTC	1500	IN	Data Raw: 75 73 65 72 3b 65 3d 65 2e 76 69 65 77 65 72 3b 72 65 74 75 72 6e 21 66 7c 7c 21 65 3f 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 45 72 72 6f 72 52 6f 6f 74 2e 72 65 61 63 74 22 29 2c 7b 7d 29 3a 6a 2e 6a 73 78 28 64 28 22 43 6f 6d 65 74 52 65 73 70 6f 6e 73 69 76 65 43 6f 6c 75 6d 6e 73 2e 72 65 61 63 74 22 29 2e 43 6f 6e 74 61 69 6e 65 72 2c 7b 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3a 22 44 45 46 41 55 4c 54 22 2c 78 73 74 79 6c 65 3a 6c 2e 72 65 76 69 65 77 73 46 65 65 64 43 6f 6e 74 61 69 6e 65 72 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 73 28 64 28 22 43 6f 6d 65 74 52 65 73 70 6f 6e 73 69 76 65 43 6f 6c 75 6d 6e 73 2e 72 65 61 63 74 22 29 2e 43 6f 6c 75 6d 6e 2c 7b 63 6f 6c 75 6d 6e 54 79 70 65 3a 63 28 22 67 6b 78 22 29 28 22 32 33 30 35 33 Data Ascii: user;e=e.viewer;return!f\|\|!e?j.jsx(c("CometErrorRoot.react"),{}):j.jsx(d("CometResponsiveColumns.react").Container,{containerWidth:"DEFAULT",xstyle:l.reviewsFeedContainer,children:j.jsxs(d("CometResponsiveColumns.react").Column,{columnType:c("gkx")("23053
2024-04-24 05:32:56 UTC	123	IN	Data Raw: 6f 74 22 7d 2c 70 61 72 61 6d 65 74 65 72 73 3a 63 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 54 61 62 52 6f 6f 74 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 29 2c 76 61 72 69 61 62 6c 65 73 3a 7b 75 73 65 72 49 44 3a 53 74 72 69 6e 67 28 61 29 7c 7c 22 22 7d 7d 7d 7d 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b Data Ascii: ot"},parameters:c("ProfileCometReviewsTabRootQuery$Parameters"),variables:{userID:String(a)\|\|""}}}}});g["default"]=a}),98);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50088	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	610	OUT	GET /rsrc.php/v3i_8K4/yV/l/en_US/806OU2p6Shf.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: G0tluWPWxUZJWvp7pKXNCA== Expires: Wed, 23 Apr 2025 02:34:57 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: wky5Bix1FoERIhRliFRKKP19A2CCUN1tkuiHJGdcH9iwxckXd5ldGL1SiN7oDoADYF2/O+4ZMYNnRaF3Jw3ttw== Date: Wed, 24 Apr 2024 05:32:56 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=10, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 471747
2024-04-24 05:32:56 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:57 UTC	16059	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 53 75 62 73 63 72 69 70 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 35 34 36 35 39 36 32 32 32 30 36 31 36 30 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 53 75 62 73 63 72 69 70 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 Data Ascii: /FB_PKG_DELIM/__d("CometBatchNotificationsStateChangeSubscription_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6546596222061607"}),null);__d("CometBatchNotificationsStateChangeSubscription.graphql",["CometBatchNotificationsStateChange
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 65 61 63 74 22 29 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 61 2c 66 6f 6f 74 65 72 3a 6a 2e 6a 73 78 28 63 28 22 46 44 53 44 69 61 6c 6f 67 46 6f 6f 74 65 72 2e 72 65 61 63 74 22 29 2c 7b 65 78 70 61 6e 64 69 6e 67 3a 21 31 2c 70 72 69 6d 61 72 79 3a 7b 6c 61 62 65 6c 3a 28 65 3d 65 29 21 3d 6e 75 6c 6c 3f 65 3a 68 2e 5f 28 22 43 6c 6f 73 65 22 29 2c 6f 6e 50 72 65 73 73 3a 62 2c 74 65 73 74 69 64 3a 22 43 6f 6d 65 74 41 6c 65 72 74 44 69 61 6c 6f 67 49 6d 70 6c 2d 63 6c 6f 73 65 42 75 74 74 6f 6e 22 7d 7d 29 2c 68 65 61 64 65 72 3a 6a 2e 6a 73 78 28 63 28 22 46 44 53 44 69 61 6c 6f 67 53 74 61 72 74 41 6c 69 67 6e 65 64 54 65 78 74 48 65 61 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 6f 6e 43 6c 6f 73 65 3a 62 2c 74 65 78 74 3a 61 7d 29 2c 6f 6e 43 6c 6f Data Ascii: eact"),{"aria-label":a,footer:j.jsx(c("FDSDialogFooter.react"),{expanding:!1,primary:{label:(e=e)!=null?e:h._("Close"),onPress:b,testid:"CometAlertDialogImpl-closeButton"}}),header:j.jsx(c("FDSDialogStartAlignedTextHeader.react"),{onClose:b,text:a}),onClo
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 64 2d 76 2e 6a 73 6d 6f 64 73 53 74 61 72 74 3b 6c 28 69 5b 6d 3f 22 62 6c 6f 63 6b 69 6e 67 22 3a 22 6e 6f 6e 62 6c 6f 63 6b 69 6e 67 22 5d 2c 76 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 76 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 5b 76 2e 75 72 69 2c 21 31 5d 29 3b 66 6f 72 28 77 3d 63 28 22 6f 62 6a 65 63 74 45 6e 74 72 69 65 73 22 29 28 76 2e 72 73 72 63 73 29 2c 78 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 77 29 2c 76 3d 30 2c 77 3d 78 3f 77 3a 77 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 3b 29 7b 76 61 72 20 45 3b 69 66 28 78 29 7b 69 66 28 76 3e 3d 77 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 45 3d 77 5b Data Ascii: d-v.jsmodsStart;l(i[m?"blocking":"nonblocking"],v.responseStart-v.requestStart,[v.uri,!1]);for(w=c("objectEntries")(v.rsrcs),x=Array.isArray(w),v=0,w=x?w:w[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var E;if(x){if(v>=w.length)break;E=w[
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 54 69 6d 65 7a 6f 6e 65 55 70 64 61 74 65 72 22 29 2e 75 70 64 61 74 65 54 69 6d 65 7a 6f 6e 65 49 66 4e 65 63 65 73 73 61 72 79 28 29 7d 67 2e 69 6e 69 74 44 65 66 65 72 72 65 64 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 57 65 62 42 72 6f 77 73 65 72 44 69 6d 65 6e 73 69 6f 6e 73 54 79 70 65 64 4c 6f 67 67 65 72 4c 69 74 65 22 2c 5b 22 67 65 6e 65 72 61 74 65 4c 69 74 65 54 79 70 65 64 4c 6f 67 67 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 62 28 22 67 65 6e 65 72 61 74 65 4c 69 74 65 54 79 70 65 64 4c 6f 67 67 65 72 22 29 28 22 6c 6f 67 67 65 72 3a 57 65 62 42 72 6f 77 73 65 72 44 69 6d 65 6e 73 69 6f 6e 73 4c 6f 67 67 65 72 43 6f 6e 66 69 67 Data Ascii: TimezoneUpdater").updateTimezoneIfNecessary()}g.initDeferred=a}),98);__d("WebBrowserDimensionsTypedLoggerLite",["generateLiteTypedLogger"],(function(a,b,c,d,e,f){"use strict";e.exports=b("generateLiteTypedLogger")("logger:WebBrowserDimensionsLoggerConfig
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 6c 75 65 4f 72 45 72 72 6f 72 3a 61 7d 7d 3b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 64 28 22 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 29 2e 42 49 4f 4d 45 54 52 49 43 5f 53 49 47 4e 41 4c 5f 43 4f 4c 4c 45 43 54 45 44 5f 45 56 45 4e 54 5f 4e 41 4d 45 2c 7b 64 65 74 61 69 6c 3a 61 7d 29 29 7d 3b 72 65 74 75 72 6e 20 61 7d 28 64 28 22 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 29 2e 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 29 2c 69 3d 6e 75 6c 6c 2c 6a 3d 7b 73 69 67 6e 61 6c 54 79 70 65 3a 33 30 31 30 30 2c 67 65 74 3a 66 75 6e 63 74 69 Data Ascii: lueOrError:a}};window.dispatchEvent(new CustomEvent(d("BDBiometricSignalCollectorBase").BIOMETRIC_SIGNAL_COLLECTED_EVENT_NAME,{detail:a}))};return a}(d("BDBiometricSignalCollectorBase").BDBiometricSignalCollectorBase),i=null,j={signalType:30100,get:functi
2024-04-24 05:32:57 UTC	14884	IN	Data Raw: 6e 63 74 69 6f 6e 28 62 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 61 2c 62 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2e 73 69 67 6e 61 6c 54 79 70 65 29 7c 7c 74 68 69 73 7d 76 61 72 20 64 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 64 2e 65 78 65 63 75 74 65 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 3f 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 2e 6c 65 6e 67 74 68 3a 2d 31 3b 61 3d 6e 65 77 28 63 28 22 4e 75 6d 62 65 72 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 22 29 29 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e Data Ascii: nction(b){babelHelpers.inheritsLoose(a,b);function a(){return b.call(this,j.signalType)\|\|this}var d=a.prototype;d.executeSignalCollection=function(){var a=navigator.mimeTypes?navigator.mimeTypes.length:-1;a=new(c("NumberSignalValueType"))(Date.now(),this.
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 6e 50 65 72 6d 69 73 73 69 6f 6e 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 32 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 61 74 6f 72 56 65 6e 64 6f 72 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 33 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 61 74 6f 72 41 70 70 56 65 72 73 69 6f 6e 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 35 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 61 74 6f 72 50 6c 61 74 66 6f 72 6d 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 38 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 Data Ascii: nPermissionSignalCollector").get();case 30012:return c("BDNavigatorVendorSignalCollector").get();case 30013:return c("BDNavigatorAppVersionSignalCollector").get();case 30015:return c("BDNavigatorPlatformSignalCollector").get();case 30018:return c("BDNavig
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 29 73 77 69 74 63 68 28 63 2e 70 72 65 76 3d 63 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 63 2e 6e 65 78 74 3d 32 3b 72 65 74 75 72 6e 20 62 28 22 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 22 29 2e 61 77 72 61 70 28 7a 2e 63 6f 6c 6c 65 63 74 53 74 61 74 69 63 53 69 67 6e 61 6c 73 28 29 29 3b 63 61 73 65 20 32 3a 7a 2e 5f 70 6f 73 74 53 69 67 6e 61 6c 73 48 65 6c 70 65 72 28 64 28 22 42 44 53 69 67 6e 61 6c 42 75 66 66 65 72 22 29 2e 67 65 74 53 69 67 6e 61 6c 73 41 73 4a 53 4f 4e 53 74 72 69 6e 67 28 61 29 2c 79 2e 4e 4f 4e 45 29 26 26 7a 2e 73 65 74 54 69 6d 65 73 74 61 6d 70 49 6e 53 74 6f 72 61 67 65 28 44 61 74 65 2e 6e 6f 77 28 29 2c 6b 29 3b 63 61 73 65 20 33 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 63 2e 73 74 6f 70 28 29 Data Ascii: )switch(c.prev=c.next){case 0:c.next=2;return b("regeneratorRuntime").awrap(z.collectStaticSignals());case 2:z._postSignalsHelper(d("BDSignalBuffer").getSignalsAsJSONString(a),y.NONE)&&z.setTimestampInStorage(Date.now(),k);case 3:case"end":return c.stop()
2024-04-24 05:32:57 UTC	14884	IN	Data Raw: 73 29 3b 63 2e 65 78 74 72 61 48 65 61 64 65 72 3d 72 28 62 2e 65 78 74 72 61 48 65 61 64 65 72 29 3b 63 2e 72 65 71 75 65 73 74 54 61 72 67 65 74 3d 72 28 62 2e 72 65 71 75 65 73 74 54 61 72 67 65 74 29 3b 63 2e 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 44 61 74 61 3d 72 28 62 2e 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 44 61 74 61 29 3b 72 65 74 75 72 6e 20 63 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 61 2e 72 65 61 64 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 61 28 29 3b 63 2e 73 74 72 65 61 6d 49 64 3d 6f 28 62 2e 73 74 72 65 61 6d 49 64 29 3b 63 2e 64 61 74 61 49 64 3d 70 28 62 2e 64 61 74 61 49 64 29 3b 63 2e 64 61 74 Data Ascii: s);c.extraHeader=r(b.extraHeader);c.requestTarget=r(b.requestTarget);c.instrumentationData=r(b.instrumentationData);return c};return a}(),i=function(){function a(){}a.readObject=function(b){var c=new a();c.streamId=o(b.streamId);c.dataId=p(b.dataId);c.dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50087	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:56 UTC	828	OUT	GET /v/t39.30808-6/434204982_732142639100127_4554239773083886536_n.jpg?stp=dst-jpg_s600x600&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kCAh3UDLwKEAb5RJjfL&_nc_ht=scontent-sjc3-1.xx&oh=00_AfAgqAcwDkNJxwB1YxewNbnMlGMa-eyceKGA_bOMDCHvBA&oe=662E5F3B HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:56 UTC	662	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 28 Mar 2024 22:06:36 GMT X-Needle-Checksum: 926203676 thrift_fmhk: GBCloSge1S+6N19sbqlOGhlgFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=24717699 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:56 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 42686
2024-04-24 05:32:56 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:32:56 UTC	15047	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 31 30 31 30 30 30 30 63 37 31 31 30 30 30 30 33 34 32 36 30 30 30 30 36 65 32 62 30 30 30 30 31 35 33 30 30 30 30 30 38 39 34 61 30 30 30 30 33 32 36 34 30 30 30 30 30 33 36 38 30 30 30 30 66 63 36 63 30 30 30 30 32 32 37 31 30 30 30 30 62 65 61 36 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a71010000c7110000342600006e2b000015300000894a00003264000003680000fc6c000022710000bea60000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 43 78 86 f9 f4 aa ac 41 da c1 ed 7d 45 3a e5 7e b1 7b 14 b1 3a cb d8 3b b2 e3 24 56 cc e4 85 ab 24 35 53 92 26 a9 49 15 56 46 bf 96 74 c8 45 f3 9a 24 89 57 f2 1f 47 8b e1 c7 23 15 c8 6f 10 df 3e 95 55 88 3b 58 3d af a8 96 b9 5f ac 5e c5 2c 4e b2 f6 0e ec f8 c9 15 b3 39 21 6a c9 0d 54 e4 89 aa 52 45 55 92 21 af 05 12 a4 fc 3f f9 a6 f2 39 0d 3f 3a 88 ba 93 35 c8 6f 10 df 3e 95 55 88 3b 58 3d af a8 a7 5c af d6 2f 62 96 27 59 7b 07 76 7c 64 8a d9 9c 90 d5 64 86 aa 72 44 d5 29 22 aa c8 b4 7c e8 93 f0 c5 d7 f6 92 19 bf 13 33 ea 4c d7 21 bc 43 7c fa 55 56 20 e5 60 f6 be 1d 45 3a e5 7e b1 70 96 28 ff 00 9e 60 ee cf 8c 91 3b 33 92 1a ac 90 d5 4e 48 9a a5 24 55 59 21 95 fc f3 5b 24 3b 9f 24 fe d2 36 8f 91 1d 49 9a e4 37 88 6f 9f 4a aa c4 1c ac 1e d7 d4 53 ae 5f cd Data Ascii: CxA}E:~{:;$V$5S&IVFtE$WG#o>U;X=_^,N9!jTREU!?9?:5o>U;X=\/b'Y{v\|ddrD)"\|3L!C\|UV `E:~p(`;3NH$UY![$;$6I7oJS_
2024-04-24 05:32:57 UTC	11254	IN	Data Raw: 52 ad 29 71 98 3d ee 17 ab c6 c7 16 2f a4 c0 b8 be 8a 22 9b 64 b5 a1 97 2c ab d0 1e 31 fe 0e 82 c4 8c 29 8c 4b 96 da 4d fa d7 5a 61 a7 ca c2 08 6d 71 7b 40 c1 03 ec ca 91 b7 3c 1c 47 05 41 92 c6 b4 37 7a e0 e2 61 ce 1b 18 02 97 81 8e 11 33 1b c2 61 70 aa b8 0b 3c 70 c2 84 dc 0d e0 cd 17 0a 66 5b da bb 59 54 5c aa 22 53 58 fd c3 1e 12 da 69 86 ce 8c 17 97 18 fb e1 fc 0b 10 0f d3 7d b3 0b b1 d5 81 ab 82 88 39 b3 19 20 ed 2c 7d b8 85 49 83 ef c4 58 ac 77 f7 c4 a2 f6 fd f8 97 8f 97 fe 73 a9 f7 fb 40 fc 2f 1f d2 78 0d fd f1 2a d5 af d7 53 40 76 78 7d 22 8d e5 dd ff 00 ce 2f 42 c1 d7 fa e5 65 55 5c 9f d3 30 d7 86 b8 fd 20 54 e6 df dc 96 ee ee af f5 c3 b2 f4 af e2 07 d8 6c ff 00 19 61 cd f5 e2 09 4a c7 c9 f4 9c f9 fe fc 41 5f ae f2 8d ea e5 74 7f 5c 5c 42 cb bd Data Ascii: R)q=/"d,1)KMZamq{@<GA7za3ap<pf[YT\"SXi}9 ,}IXws@/x*S@vx}"/BeU\0 TlaJA_t\\B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50089	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:57 UTC	665	OUT	GET /rsrc.php/v3iWHN4/yj/l/en_US/NBLh_jmhP9rbnDAR7QbqlLmewDUA58SCUmM84SfiWlvqERz6pNGhHp8C0c-C7FrAp6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:57 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ki0D+QjpfPZzLNyXFiPFhw== Expires: Thu, 24 Apr 2025 05:32:57 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: I9/fsRzMG5p658Tr9a730Tukqn2FBPM3pv07LwIk6XulQRpW4TvKLr7Im2niwSBYQ+OEYeMghc+TUTwI4+Zkxw== Date: Wed, 24 Apr 2024 05:32:57 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=82, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 95142
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 48 65 61 64 65 72 41 63 74 69 6f 6e 42 61 72 4d 65 6e 75 49 74 65 6d 57 69 74 68 6f 75 74 49 73 41 63 74 69 76 65 46 69 65 6c 64 5f 70 72 6f 66 69 6c 65 41 63 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 69 63 6f 6e 5f 63 6f 6c 6f 72 22 2c 76 61 6c 75 65 3a 22 66 64 73 2d 62 6c 61 63 6b 22 7d 2c 62 3d 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 69 63 6f 6e 5f 73 69 7a 65 22 2c 76 61 6c 75 65 3a Data Ascii: ;/FB_PKG_DELIM/__d("ProfileCometHeaderActionBarMenuItemWithoutIsActiveField_profileAction.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={kind:"Literal",name:"icon_color",value:"fds-black"},b={kind:"Literal",name:"icon_size",value:
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 4c 6f 67 67 65 72 5f 61 63 74 69 6f 6e 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 22 7d 7d 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 48 65 61 64 65 72 41 63 74 69 6f 6e 42 61 72 4d 65 6e 75 49 74 65 6d 5f 70 72 6f 66 69 6c 65 41 63 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: ctionTrigger_action"},{args:null,kind:"FragmentSpread",name:"ProfileCometActionLogger_action"}],type:"ProfileAction",abstractKey:"__isProfileAction"}}();e.exports=a}),null);__d("ProfileCometHeaderActionBarMenuItem_profileAction.graphql",[],(function(a,b,
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 65 78 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 64 69 73 61 62 6c 65 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 61 63 74 69 76 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 Data Ascii: d:"ScalarField",name:"text",storageKey:null}],storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"is_disabled",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"is_active",storageKey:null},{args:null,kind:"FragmentSpread",name:"P
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 72 4d 65 6e 75 49 74 65 6d 5f 70 72 6f 66 69 6c 65 41 63 74 69 6f 6e 22 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 41 63 74 6f 72 57 69 74 68 41 63 74 69 6f 6e 42 61 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 41 63 74 6f 72 57 69 74 68 41 63 74 69 6f 6e 42 61 72 22 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 76 65 72 50 68 6f 74 6f 55 70 64 61 74 65 4d 75 74 61 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 32 32 31 36 38 38 33 35 34 35 34 30 39 34 35 22 7d 29 2c 6e 75 Data Ascii: rMenuItem_profileAction"}],storageKey:null}],type:"ActorWithActionBar",abstractKey:"__isActorWithActionBar"};e.exports=a}),null);__d("ProfileCometCoverPhotoUpdateMutation_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7221688354540945"}),nu
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 78 74 75 61 6c 50 72 6f 66 69 6c 65 43 6f 6e 74 65 78 74 22 7d 5d 2c 70 3d 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 73 63 61 6c 65 22 7d 3b 72 65 74 75 72 6e 7b 66 72 61 67 6d 65 6e 74 3a 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 61 2c 63 2c 64 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 76 65 72 50 68 6f 74 6f 55 70 64 61 74 65 4d 75 74 61 74 69 6f 6e 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 65 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 55 73 65 72 55 70 64 61 74 65 43 6f 76 65 Data Ascii: xtualProfileContext"}],p={kind:"Variable",name:"scale",variableName:"scale"};return{fragment:{argumentDefinitions:[a,c,d],kind:"Fragment",metadata:null,name:"ProfileCometCoverPhotoUpdateMutation",selections:[{alias:null,args:e,concreteType:"UserUpdateCove
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 76 69 65 77 65 72 5f 66 72 69 65 6e 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 41 76 61 74 61 72 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 73 65 72 5f 61 76 61 74 61 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 61 73 5f 66 62 5f 61 70 70 5f 61 76 61 74 61 72 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 68 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a Data Ascii: ScalarField",name:"is_viewer_friend",storageKey:null},{alias:null,args:null,concreteType:"Avatar",kind:"LinkedField",name:"user_avatar",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"has_fb_app_avatar",storageKey:null},h],storageKey:
2024-04-24 05:32:57 UTC	241	IN	Data Raw: 65 6c 65 63 74 69 6f 6e 73 3a 6e 2c 73 74 6f 72 61 67 65 4b 65 79 3a 22 69 6d 61 67 65 28 62 6c 75 72 3a 35 30 2c 77 69 64 74 68 3a 33 32 30 29 22 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 76 61 Data Ascii: elections:n,storageKey:"image(blur:50,width:320)"},{alias:null,args:null,kind:"ScalarField",name:"url",storageKey:null}],storageKey:null}],storageKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"ava
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 74 61 72 5f 63 6f 76 65 72 5f 70 68 6f 74 6f 5f 74 61 6b 65 6f 76 65 72 5f 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 55 73 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 22 73 69 6e 67 6c 65 5f 65 64 69 74 5f 63 6f 76 65 72 5f 70 68 6f 74 6f 22 2c 61 72 67 73 3a 6f 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 46 6f 63 75 73 65 64 50 68 6f 74 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 76 65 72 5f 70 68 6f 74 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 69 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 68 6f 74 6f 22 2c 6b 69 6e Data Ascii: tar_cover_photo_takeover_type",storageKey:null}],type:"User",abstractKey:null},{alias:"single_edit_cover_photo",args:o,concreteType:"FocusedPhoto",kind:"LinkedField",name:"cover_photo",plural:!1,selections:[i,{alias:null,args:null,concreteType:"Photo",kin
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 6e 75 6c 6c 7d 2c 68 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 7d 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 76 65 72 50 68 6f 74 6f 55 70 64 61 74 65 4d 75 74 61 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 29 2c 6d 65 74 61 64 61 74 61 3a 7b 7d 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 76 65 72 50 68 6f 74 6f 55 70 64 61 74 65 4d 75 74 61 74 69 6f 6e 22 2c 6f 70 65 72 61 74 69 6f 6e 4b 69 6e 64 3a 22 6d 75 74 61 74 69 6f 6e 22 2c 74 65 78 74 3a 6e 75 6c 6c 7d 7d 7d 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 Data Ascii: null},h],storageKey:null}],storageKey:null}],storageKey:null}]},params:{id:b("ProfileCometCoverPhotoUpdateMutation_facebookRelayOperation"),metadata:{},name:"ProfileCometCoverPhotoUpdateMutation",operationKind:"mutation",text:null}}}();e.exports=a}),null)
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 4b 65 79 2c 68 3d 6b 28 6e 75 6c 6c 29 2c 6c 3d 6b 28 6e 75 6c 6c 29 3b 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6c 2e 63 75 72 72 65 6e 74 3b 6c 2e 63 75 72 72 65 6e 74 3d 67 3b 69 66 28 67 21 3d 6e 75 6c 6c 26 26 67 3d 3d 3d 62 29 72 65 74 75 72 6e 3b 69 66 28 64 26 26 68 2e 63 75 72 72 65 6e 74 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 63 3d 68 2e 63 75 72 72 65 6e 74 2e 6f 66 66 73 65 74 54 6f 70 2c 65 3d 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 63 72 6f 6c 6c 54 6f 28 61 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 63 2b 66 29 7d 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 Data Ascii: Key,h=k(null),l=k(null);j(function(){var b=l.current;l.current=g;if(g!=null&&g===b)return;if(d&&h.current!=null){var c=h.current.offsetTop,e=a.requestAnimationFrame(function(){return a.scrollTo(a.pageXOffset,c+f)});return function(){a.cancelAnimationFrame

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50090	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:57 UTC	599	OUT	GET /rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:57 UTC	1681	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ogpXKXKWIQrlXCYwZDb85Q== Expires: Fri, 11 Apr 2025 12:50:50 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: zTSoqBEbbo6g+Q9NrLOBZ73YdMOUinQrdZtXC4cohRsgz/oJNtH1CR++ii8Ts5l5LIZzJnFhvoQpTLgJ8tRgYg== Date: Wed, 24 Apr 2024 05:32:57 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43237
2024-04-24 05:32:57 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:57 UTC	16139	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 2f 74 33 68 4f 4c 73 38 77 6c 58 79 2f 0a 20 2a 2f 0a 5f 5f 64 28 22 62 69 67 6e 75 6d 62 65 72 2d 6a 73 2d 39 2e 30 2e 31 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 62 3d 7b 7d 3b 76 61 72 20 67 3d 7b 65 78 70 6f 72 74 73 3a 62 7d 2c 68 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 2f 5e 2d 3f 28 3f 3a 5c 64 2b 28 3f 3a 5c 2e 5c 64 2a 29 3f 7c 5c 2e 5c 64 2b 29 28 3f 3a 65 5b 2b 2d 5d 3f 5c 64 2b 29 3f 24 Data Ascii: /FB_PKG_DELIM//** * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ /__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$
2024-04-24 05:32:57 UTC	16384	IN	Data Raw: 3a 6a 2c 6c 3d 6b 2e 6c 65 6e 67 74 68 3b 68 26 26 28 65 3d 67 2c 67 3d 68 2c 68 3d 65 2c 6c 2d 3d 65 29 3b 69 66 28 67 3e 30 26 26 6c 3e 30 29 7b 65 3d 6c 25 67 7c 7c 67 3b 6a 3d 6b 2e 73 75 62 73 74 72 28 30 2c 65 29 3b 66 6f 72 28 3b 65 3c 6c 3b 65 2b 3d 67 29 6a 2b 3d 69 2b 6b 2e 73 75 62 73 74 72 28 65 2c 67 29 3b 68 3e 30 26 26 28 6a 2b 3d 69 2b 6b 2e 73 6c 69 63 65 28 65 29 29 3b 64 26 26 28 6a 3d 22 2d 22 2b 6a 29 7d 62 3d 63 3f 6a 2b 28 61 2e 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 7c 7c 22 22 29 2b 28 28 68 3d 2b 61 2e 66 72 61 63 74 69 6f 6e 47 72 6f 75 70 53 69 7a 65 29 3f 63 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 64 7b 22 2b 68 2b 22 7d 5c 5c 42 22 2c 22 67 22 29 2c 22 24 26 22 2b 28 61 2e 66 72 61 63 74 Data Ascii: :j,l=k.length;h&&(e=g,g=h,h=e,l-=e);if(g>0&&l>0){e=l%g\|\|g;j=k.substr(0,e);for(;e<l;e+=g)j+=i+k.substr(e,g);h>0&&(j+=i+k.slice(e));d&&(j="-"+j)}b=c?j+(a.decimalSeparator\|\|"")+((h=+a.fractionGroupSize)?c.replace(new RegExp("\\d{"+h+"}\\B","g"),"$&"+(a.fract
2024-04-24 05:32:57 UTC	10713	IN	Data Raw: 31 31 31 2c 32 32 37 33 31 33 34 38 34 32 2c 33 32 38 31 39 31 31 30 37 39 2c 34 30 38 30 39 36 32 38 34 36 2c 31 37 32 34 35 30 36 32 35 2c 32 35 36 39 39 39 34 31 30 30 2c 39 38 30 33 38 31 33 35 35 2c 34 31 30 39 39 35 38 34 35 35 2c 32 38 31 39 38 30 38 33 35 32 2c 32 37 31 36 35 38 39 35 36 30 2c 32 35 36 38 37 34 31 31 39 36 2c 33 36 38 31 34 34 36 36 36 39 2c 33 33 32 39 39 37 31 34 37 32 2c 31 38 33 35 34 37 38 30 37 31 2c 36 36 30 39 38 34 38 39 31 2c 33 37 30 34 36 37 38 34 30 34 2c 34 30 34 35 39 39 39 35 35 39 2c 33 34 32 32 36 31 37 35 30 37 2c 33 30 34 30 34 31 35 36 33 34 2c 31 37 36 32 36 35 31 34 30 33 2c 31 37 31 39 33 37 37 39 31 35 2c 33 34 37 30 34 39 31 30 33 36 2c 32 36 39 33 39 31 30 32 38 33 2c 33 36 34 32 30 35 36 33 35 35 2c 33 Data Ascii: 111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50091	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:57 UTC	928	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 3520 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:57 UTC	3520	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 25 32 46 70 6f 73 74 73 25 32 46 70 66 62 69 64 30 32 31 44 67 67 55 64 42 65 63 74 71 64 7a 43 4c 71 66 37 7a 6f 51 33 6a 76 34 31 73 68 52 48 33 58 73 4d 32 42 43 67 6e 38 48 62 33 6d 4e 33 72 41 36 68 69 46 47 32 69 4d 37 72 67 78 52 45 46 56 6c 25 33 46 5f 5f 63 66 74 5f 5f 5b 30 5d 25 33 44 41 5a 55 58 4e 34 41 38 67 57 51 59 48 55 48 37 79 51 51 47 54 59 7a 59 5a 74 65 35 70 49 6a 32 5a 4a 58 33 48 4e 79 53 6d 4a 4d 52 45 65 32 76 74 62 6c 56 43 56 48 74 54 44 73 7a 73 71 2d 52 58 30 66 48 69 30 74 7a 2d 39 55 42 58 37 71 79 38 4a 49 72 4c 4d 78 38 5a 67 49 5a 46 64 59 37 32 46 79 57 66 34 46 4d 61 6f 4f 61 4d 73 57 49 78 4b 74 5a 61 6e Data Ascii: route_urls[0]=%2Foverlakemedicalcenter%2Fposts%2Fpfbid021DggUdBectqdzCLqf7zoQ3jv41shRH3XsM2BCgn8Hb3mN3rA6hiFG2iM7rgxREFVl%3F__cft__[0]%3DAZUXN4A8gWQYHUH7yQQGTYzYZte5pIj2ZJX3HNySmJMREe2vtblVCVHtTDszsq-RX0fHi0tz-9UBX7qy8JIrLMx8ZgIZFdY72FyWf4FMaoOaMsWIxKtZan
2024-04-24 05:32:57 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:57 UTC	1821	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:57 UTC	7	IN	Data Raw: 31 33 64 62 34 0d 0a Data Ascii: 13db4
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 6f 76 65 72 6c 61 6b 65 6d 65 64 69 63 61 6c 63 65 6e 74 65 72 2f 70 6f 73 74 73 2f 70 66 62 69 64 30 32 31 44 67 67 55 64 42 65 63 74 71 64 7a 43 4c 71 66 37 7a 6f 51 33 6a 76 34 31 73 68 52 48 33 58 73 4d 32 42 43 67 6e 38 48 62 33 6d 4e 33 72 41 36 68 69 46 47 32 69 4d 37 72 67 78 52 45 46 56 6c 3f 5f 5f 63 66 74 5f 5f 5b 30 5d 3d 41 5a 55 58 4e 34 41 38 67 57 51 59 48 55 48 37 79 51 51 47 54 59 7a 59 5a 74 65 35 70 49 6a 32 5a 4a 58 33 48 4e 79 53 6d 4a 4d 52 45 65 32 76 74 62 6c 56 43 56 48 74 54 44 73 7a 73 71 2d 52 58 30 66 48 69 30 74 7a 2d 39 55 42 58 37 71 79 38 4a 49 72 4c 4d 78 38 5a 67 49 5a 46 64 59 37 32 46 79 57 66 34 46 4d 61 6f 4f 61 Data Ascii: for (;;);{"payload":{"payloads":{"/overlakemedicalcenter/posts/pfbid021DggUdBectqdzCLqf7zoQ3jv41shRH3XsM2BCgn8Hb3mN3rA6hiFG2iM7rgxREFVl?__cft__[0]=AZUXN4A8gWQYHUH7yQQGTYzYZte5pIj2ZJX3HNySmJMREe2vtblVCVHtTDszsq-RX0fHi0tz-9UBX7qy8JIrLMx8ZgIZFdY72FyWf4FMaoOa
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 6f 73 74 73 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 61 79 6d 74 5f 74 69 70 22 3a 6e 75 6c 6c 2c 22 62 6f 6f 73 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c Data Ascii: lConfig":{"surface":"posts","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"aymt_tip":null,"boost_id":null,"comment_id":null
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 49 4e 54 22 7d 2c 22 72 65 66 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 Data Ascii: fault":null,"path":false,"significant":true,"coercibleType":"INT"},"ref":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"reply_comment_id":{"legacyNames":[],"default":null,"path":false,"significant":true,"coerc
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 5f 64 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c 22 74 72 61 63 65 50 6f 6c 69 63 79 22 3a 22 63 6f 6d 65 74 2e 6d 65 64 69 61 76 69 65 77 65 72 2e 70 68 6f 74 6f 22 2c 22 6d 65 74 61 22 3a 7b 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 61 63 63 65 73 73 6f 72 79 22 3a 6e 75 6c 6c 2c 22 66 61 76 69 63 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 70 72 65 66 65 74 63 68 61 62 6c 65 22 3a 74 72 75 65 2c 22 65 6e 74 69 74 79 4b 65 79 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 70 68 6f 74 6f 73 22 7d 2c 22 65 6e 74 69 74 79 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c Data Ascii: _dr":"CometPhotoRoot.entrypoint"}},"tracePolicy":"comet.mediaviewer.photo","meta":{"title":null,"accessory":null,"favicon":null},"prefetchable":true,"entityKeyConfig":{"entity_type":{"source":"constant","value":"photos"},"entity_id":{"source":"param","val
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 76 72 6e 61 76 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 42 4f 4f 4c 22 7d 7d 2c 22 72 6f 75 74 65 50 61 74 68 22 3a 22 2f 70 68 6f 74 6f 2f 22 7d 5d 7d 7d 2c 22 2f 4f 76 65 72 6c 61 6b 65 46 6f 75 6e 64 61 74 69 6f 6e 3f 5f 5f 63 66 74 5f 5f 5b 30 5d 3d 41 5a 55 58 4e 34 41 38 67 57 51 59 48 55 48 37 79 51 51 47 54 59 7a 59 5a 74 65 35 70 49 6a 32 5a 4a Data Ascii: ull,"path":false,"significant":false,"coercibleType":"STRING"},"vrnav":{"legacyNames":[],"default":false,"path":false,"significant":false,"coercibleType":"BOOL"}},"routePath":"/photo/"}]}},"/OverlakeFoundation?__cft__[0]=AZUXN4A8gWQYHUH7yQQGTYzYZte5pIj2ZJ
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 75 65 22 3a 22 70 72 6f 66 69 6c 65 22 7d 2c 22 65 6e 74 69 74 79 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 75 73 65 72 49 44 22 7d 2c 22 73 65 63 74 69 6f 6e 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 74 69 6d 65 6c 69 6e 65 22 7d 7d 2c 22 68 6f 73 74 61 62 6c 65 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 2c 7b 22 5f Data Ascii: ue":"profile"},"entity_id":{"source":"prop","value":"userID"},"section":{"source":"constant","value":"timeline"}},"hostableView":{"allResources":[{"__jsr":"ProfilePlusCometLoggedOutRoot.react"},{"__jsr":"ProfilePlusCometLoggedOutRouteRoot.entrypoint"},{"_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50092	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:57 UTC	599	OUT	GET /rsrc.php/v3/yb/r/mN-eO9RcwWn.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:57 UTC	1681	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ltM3loYfy6JcRa/tWg3qLQ== Expires: Sun, 13 Apr 2025 01:13:40 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: RX4/8gXiduskOkO76gK9O4RKr8byVu1VSXFPnE5XoQCv9Hs5QOqfFx59BTU//yQ7jlx8Sa/s+o6qqa7+3WMbTA== Date: Wed, 24 Apr 2024 05:32:57 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=164, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 77114
2024-04-24 05:32:57 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:57 UTC	16139	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 6c 6f 62 46 61 63 74 6f 72 79 22 2c 5b 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 74 72 79 7b 6e 65 77 20 61 2e 42 6c 6f 62 28 29 2c 67 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 67 3d 21 31 7d 7d 76 61 72 20 69 3d 61 2e 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 57 65 62 4b 69 74 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 4d 6f 7a 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 4d 53 42 6c 6f 62 42 75 69 6c 64 65 72 3b 61 2e 42 6c 6f 62 3f 63 3d 7b 67 65 74 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 62 3d 62 7c 7c 5b 5d 3b 63 3d 63 7c 7c 7b Data Ascii: /FB_PKG_DELIM/__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 6e 20 74 68 69 73 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 72 72 61 79 2e 67 65 74 52 6f 6f 74 41 73 53 63 61 6c 61 72 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 62 7c 7c 6e 65 77 20 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 72 72 61 79 28 29 29 2e 5f 5f 69 6e 69 74 28 61 2e 72 65 61 64 49 6e 74 33 32 28 61 2e 70 6f 73 69 74 69 6f 6e 28 29 29 2b 61 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 61 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 34 29 3b 72 65 74 75 72 6e Data Ascii: n this};g.keyframes.ScalarArray.getRootAsScalarArray=function(a,b){return(b\|\|new g.keyframes.ScalarArray()).__init(a.readInt32(a.position())+a.position(),a)};g.keyframes.ScalarArray.prototype.values=function(a){var b=this.bb.__offset(this.bb_pos,4);return
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 74 33 32 41 72 72 61 79 28 74 68 69 73 2e 62 62 2e 62 79 74 65 73 28 29 2e 62 75 66 66 65 72 2c 74 68 69 73 2e 62 62 2e 62 79 74 65 73 28 29 2e 62 79 74 65 4f 66 66 73 65 74 2b 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 2c 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 5f 6c 65 6e 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 50 61 74 68 41 6e 69 6d 61 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 77 65 65 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 31 30 29 3b 72 65 74 75 72 6e 20 63 3f 28 62 7c 7c 6e 65 77 20 67 2e 6b 65 79 66 72 61 Data Ascii: t32Array(this.bb.bytes().buffer,this.bb.bytes().byteOffset+this.bb.__vector(this.bb_pos+a),this.bb.__vector_len(this.bb_pos+a)):null};g.keyframes.PathAnimation.prototype.tweens=function(a,b){var c=this.bb.__offset(this.bb_pos,10);return c?(b\|\|new g.keyfra
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 5f 5f 69 6e 69 74 28 74 68 69 73 2e 62 62 2e 5f 5f 69 6e 64 69 72 65 63 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 62 29 2c 74 68 69 73 2e 62 62 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 4c 61 79 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 43 6f 6c 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 32 36 29 3b 72 65 74 75 72 6e 20 62 3f 28 61 7c 7c 6e 65 77 20 67 2e 6b 65 79 66 72 61 6d 65 73 2e 43 6f 6c 6f 72 41 6e 69 6d 61 74 69 6f 6e 28 29 29 2e 5f 5f 69 6e 69 74 28 74 68 69 73 2e 62 62 2e 5f 5f 69 6e 64 69 72 65 63 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 62 29 2c 74 68 69 73 2e 62 62 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 Data Ascii: __init(this.bb.__indirect(this.bb_pos+b),this.bb):null};g.keyframes.Layer.prototype.fillColor=function(a){var b=this.bb.__offset(this.bb_pos,26);return b?(a\|\|new g.keyframes.ColorAnimation()).__init(this.bb.__indirect(this.bb_pos+b),this.bb):null};g.keyfr
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 62 5f 70 6f 73 2c 32 32 29 3b 72 65 74 75 72 6e 20 61 3f 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 5f 6c 65 6e 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6e 69 66 65 73 74 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 32 32 29 3b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 68 69 73 2e 62 62 2e 62 79 74 65 73 28 29 2e 62 75 66 66 65 72 2c 74 68 69 73 2e 62 62 2e 62 79 74 65 73 28 29 2e 62 79 74 65 4f 66 66 73 65 74 2b 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 28 74 68 69 73 2e 62 62 5f 70 6f 73 Data Ascii: b_pos,22);return a?this.bb.__vector_len(this.bb_pos+a):0};g.keyframes.Document.prototype.manifestArray=function(){var a=this.bb.__offset(this.bb_pos,22);return a?new Uint8Array(this.bb.bytes().buffer,this.bb.bytes().byteOffset+this.bb.__vector(this.bb_pos
2024-04-24 05:32:58 UTC	10322	IN	Data Raw: 64 64 46 69 65 6c 64 4f 66 66 73 65 74 28 35 2c 62 2c 30 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 42 69 74 6d 61 70 73 56 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 74 61 72 74 56 65 63 74 6f 72 28 34 2c 62 2e 6c 65 6e 67 74 68 2c 34 29 3b 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 2d 31 3b 63 3e 3d 30 3b 63 2d 2d 29 61 2e 61 64 64 4f 66 66 73 65 74 28 62 5b 63 5d 29 3b 72 65 74 75 72 6e 20 61 2e 65 6e 64 56 65 63 74 6f 72 28 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 73 74 61 72 74 42 69 74 6d 61 70 73 56 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 74 61 72 74 56 65 63 74 6f 72 28 34 2c 62 2c 34 29 7d 3b 67 2e 6b 65 Data Ascii: ddFieldOffset(5,b,0)};g.keyframes.Document.createBitmapsVector=function(a,b){a.startVector(4,b.length,4);for(var c=b.length-1;c>=0;c--)a.addOffset(b[c]);return a.endVector()};g.keyframes.Document.startBitmapsVector=function(a,b){a.startVector(4,b,4)};g.ke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50094	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:57 UTC	599	OUT	GET /rsrc.php/v3/yR/r/OiBJQTDC7YF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:57 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PchvMZJQj91JRoSXrvsPPw== Expires: Wed, 23 Apr 2025 02:34:57 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: ubeR8TmXNoMytyAcsKxdz3IOhTEfL4SmTKkjHGXUQ+RDfCIYuI9LFGh/Cfwo337/+CEY5eIAv6SwRcIOBEJkTA== Date: Wed, 24 Apr 2024 05:32:57 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=164, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 52066
2024-04-24 05:32:57 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:57 UTC	16070	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 69 6e 61 72 79 53 65 61 72 63 68 22 2c 5b 22 75 6e 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 3d 7b 47 52 45 41 54 45 53 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 3a 22 47 52 45 41 54 45 53 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 22 2c 47 52 45 41 54 45 53 54 5f 53 54 52 49 43 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 3a 22 47 52 45 41 54 45 53 54 5f 53 54 52 49 43 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 22 2c 4c 45 41 53 54 5f 53 54 52 49 43 54 5f 55 50 50 45 52 5f 42 4f 55 4e 44 3a 22 4c 45 41 53 54 5f 53 54 52 49 43 54 5f 55 50 50 45 52 5f 42 4f 55 Data Ascii: /FB_PKG_DELIM/__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOU
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 74 4c 69 62 4c 65 76 65 6c 53 74 61 74 73 46 6f 72 43 75 72 46 75 6e 6e 65 6c 3d 46 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 22 2c 5b 22 42 61 6e 7a 61 69 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c 22 46 75 6e 6e 65 6c 22 2c 22 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 53 61 6d 70 6c 65 72 22 2c 22 46 75 6e 6e 65 6c 52 65 67 69 73 74 72 79 22 2c 22 46 75 6e 6e 65 6c 52 65 6c 69 61 62 69 6c 69 74 79 53 74 61 74 73 43 6f 6c 6c 65 63 74 6f 72 22 2c 22 4d 61 72 61 75 64 65 72 4c 6f 67 67 65 72 22 2c 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 22 2c 22 67 6b 78 22 2c 22 73 65 74 54 69 6d 65 6f 75 74 22 2c 22 75 6e 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c Data Ascii: tLibLevelStatsForCurFunnel=F}),98);__d("FunnelLogger",["Banzai","FBLogger","Funnel","FunnelLoggerSampler","FunnelRegistry","FunnelReliabilityStatsCollector","MarauderLogger","clearTimeout","gkx","setTimeout","unrecoverableViolation"],(function(a,b,c,d,e,
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 67 3d 62 28 22 50 72 6f 6d 69 73 65 22 29 29 29 2e 72 65 6a 65 63 74 28 22 44 65 63 6f 64 65 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 63 72 65 61 74 65 20 66 6c 61 74 62 75 66 66 65 72 20 64 6f 63 22 29 3a 42 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 76 61 72 20 63 3d 76 28 61 29 2c 64 3d 79 28 63 29 2c 65 3d 77 28 61 29 2c 66 3d 78 28 65 29 2c 68 3d 63 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 28 29 7c 7c 21 61 2e 6e 61 6d 65 28 29 7d 29 2e 6d 61 70 28 73 29 3b 65 3d 65 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 28 29 7c 7c 21 61 2e 6e 61 6d 65 28 29 7d 29 2e 6d 61 70 28 74 29 3b 76 Data Ascii: g=b("Promise"))).reject("Decode: could not create flatbuffer doc"):B(a)}function B(a){var c=v(a),d=y(c),e=w(a),f=x(e),h=c.filter(function(a){return a.contentLength()\|\|!a.name()}).map(s);e=e.filter(function(a){return a.contentLength()\|\|!a.name()}).map(t);v
2024-04-24 05:32:58 UTC	3227	IN	Data Raw: 24 32 38 28 29 3a 28 74 68 69 73 2e 24 37 2e 63 61 6e 63 65 6c 28 29 2c 74 68 69 73 2e 24 31 34 26 26 74 68 69 73 2e 24 31 34 2e 63 61 6c 6c 49 66 49 67 6e 6f 72 65 64 28 74 68 69 73 2e 24 31 37 29 29 29 3b 74 68 69 73 2e 24 32 34 2e 70 61 75 73 65 28 29 3b 74 68 69 73 2e 24 32 39 28 74 68 69 73 2e 24 32 34 2e 73 65 65 6b 54 6f 50 72 6f 67 72 65 73 73 28 74 68 69 73 2e 24 31 37 29 29 3b 75 28 74 68 69 73 2e 24 31 2c 74 68 69 73 2e 24 31 37 2c 74 68 69 73 2e 24 31 36 2c 74 68 69 73 2e 24 38 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 65 2e 69 73 50 6c 61 79 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 31 36 7d 3b 65 2e 69 73 46 69 6e 69 73 68 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: $28():(this.$7.cancel(),this.$14&&this.$14.callIfIgnored(this.$17)));this.$24.pause();this.$29(this.$24.seekToProgress(this.$17));u(this.$1,this.$17,this.$16,this.$8);return this};e.isPlaying=function(){return this.$16};e.isFinished=function(){return this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50093	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:57 UTC	599	OUT	GET /rsrc.php/v3/yD/r/siu8qci3VGY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:57 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: c6lzr3MgjJkMvLPS16EtjA== Expires: Thu, 24 Apr 2025 05:32:57 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: G1JZoTysykiLWhBlqWYzitZb0D26dBeYFdUozxfkSnx4wiwg7en2sxqgSmz1xsnb8fHlv5Tbi1YXiKpcRCEz5g== Date: Wed, 24 Apr 2024 05:32:57 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=165, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=87, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 72312
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 67 72 6f 75 70 73 43 6f 6d 65 74 46 65 74 63 68 53 74 6f 72 79 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 36 34 39 31 30 33 38 34 38 35 31 35 37 37 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 67 72 6f 75 70 73 43 6f 6d 65 74 46 65 74 63 68 53 74 6f 72 79 51 75 65 72 79 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 24 6e 6f 72 6d 61 6c 69 7a 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 22 67 72 6f 75 70 Data Ascii: ;/FB_PKG_DELIM/__d("groupsCometFetchStoryQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7649103848515777"}),null);__d("groupsCometFetchStoryQuery.graphql",["CometTextWithEntitiesRelay_textWithEntities$normalization.graphql","group
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 61 62 6c 65 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 43 61 63 68 65 61 62 6c 65 22 7d 2c 6d 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 65 78 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6e 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6f 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 Data Ascii: able",abstractKey:"__isCacheable"},m={alias:null,args:null,kind:"ScalarField",name:"text",storageKey:null},n={alias:null,args:null,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:[m],storageKey:null},o={alias:null,args
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 3a 22 63 6f 6e 74 65 78 74 4c 61 79 6f 75 74 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 53 65 72 76 69 63 65 73 4c 6f 63 61 6c 42 75 73 69 6e 65 73 73 55 70 64 61 74 65 73 43 6f 6e 74 65 78 74 4c 61 79 6f 75 74 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 4d 61 74 63 68 52 65 6e 64 65 72 65 72 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 Data Ascii: :"contextLayout",kind:"ModuleImport"}],type:"CometFeedStoryServicesLocalBusinessUpdatesContextLayoutStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryContextSectionMatchRenderer_story",fragmentName:"Come
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 72 65 72 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 47 65 6d 69 6e 69 46 65 65 64 53 74 6f 72 79 44 65 66 61 75 6c 74 43 6f 6e 74 65 78 74 4c 61 79 6f 75 74 53 74 72 61 74 65 67 79 5f 63 6f 6e 74 65 78 74 4c 61 79 6f 75 74 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 63 6f 6e 74 65 78 74 4c 61 79 6f 75 74 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 65 6d 69 6e 69 46 65 65 64 53 74 6f 72 79 44 65 66 61 75 6c 74 43 6f 6e 74 65 78 74 4c 61 79 6f 75 74 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 Data Ascii: rer_story",fragmentName:"GeminiFeedStoryDefaultContextLayoutStrategy_contextLayout",fragmentPropName:"contextLayout",kind:"ModuleImport"}],type:"GeminiFeedStoryDefaultContextLayoutStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,d
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 73 75 70 70 6f 72 74 65 64 3a 22 31 46 79 39 70 38 22 29 27 7d 2c 74 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 75 70 70 6f 72 74 65 64 22 2c 76 61 6c 75 65 3a 22 34 74 30 43 31 6c 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 66 6f 6f 74 65 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6b 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 6f 6f 74 65 72 53 65 63 74 69 6f 6e 5f Data Ascii: supported:"1Fy9p8")'},t={alias:null,args:[{kind:"Literal",name:"supported",value:"4t0C1l"}],concreteType:null,kind:"LinkedField",name:"footer",plural:!1,selections:[k,{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryFooterSection_
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 65 6d 69 6e 69 46 65 65 64 53 74 6f 72 79 56 69 64 65 6f 43 68 61 70 74 65 72 73 56 32 46 6f 6f 74 65 72 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 6f 6f 74 65 72 53 65 63 74 69 6f 6e 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 47 65 6d 69 6e 69 46 65 65 64 53 74 6f 72 79 56 69 64 65 6f 43 68 61 70 74 65 72 73 46 6f 6f 74 65 72 55 70 73 65 6c 6c 53 74 72 61 74 65 67 79 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e Data Ascii: uleImport"}],type:"GeminiFeedStoryVideoChaptersV2FooterStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryFooterSection_story",fragmentName:"GeminiFeedStoryVideoChaptersFooterUpsellStrategy_story",fragmen
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 6f 6f 74 65 72 53 65 63 74 69 6f 6e 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 75 74 6f 41 74 74 61 63 68 65 64 55 73 65 72 46 75 6e 64 69 6e 67 43 54 41 46 6f 6f 74 65 72 53 74 72 61 74 65 67 79 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 6f 72 79 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 75 74 6f 41 74 74 61 63 68 65 64 55 73 65 72 46 75 6e 64 69 6e 67 43 54 41 46 6f 6f 74 65 72 53 74 Data Ascii: ment",selections:[{args:null,documentName:"CometFeedStoryFooterSection_story",fragmentName:"CometFeedStoryAutoAttachedUserFundingCTAFooterStrategy_story",fragmentPropName:"story",kind:"ModuleImport"}],type:"CometFeedStoryAutoAttachedUserFundingCTAFooterSt
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 74 6f 72 79 43 6f 72 6f 6e 61 76 69 72 75 73 43 72 69 73 69 73 4d 65 73 73 61 67 65 46 6f 6f 74 65 72 53 74 72 61 74 65 67 79 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 6f 72 79 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 43 6f 72 6f 6e 61 76 69 72 75 73 43 72 69 73 69 73 4d 65 73 73 61 67 65 46 6f 6f 74 65 72 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 6f 6f 74 65 72 Data Ascii: toryCoronavirusCrisisMessageFooterStrategy_story",fragmentPropName:"story",kind:"ModuleImport"}],type:"CometFeedStoryCoronavirusCrisisMessageFooterStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryFooter
2024-04-24 05:32:57 UTC	1500	IN	Data Raw: 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 65 6d 69 6e 69 53 74 6f 72 79 50 72 6f 6d 6f 74 65 64 50 6f 73 74 4d 61 72 6b 41 73 52 65 61 64 46 6f 6f 74 65 72 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 6f 6f 74 65 72 53 65 63 74 69 6f 6e 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 45 76 65 6e 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 46 6f 6f 74 65 72 53 74 72 61 74 65 67 79 5f 73 74 6f 72 79 22 2c 66 72 61 67 6d 65 Data Ascii: duleImport"}],type:"GeminiStoryPromotedPostMarkAsReadFooterStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryFooterSection_story",fragmentName:"CometFeedStoryEventConversationFooterStrategy_story",fragme
2024-04-24 05:32:57 UTC	908	IN	Data Raw: 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 6f 6d 62 73 74 6f 6e 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 6f 6d 62 73 74 6f 6e 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 63 74 69 6f 6e 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6f 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 67 72 6f 75 70 5f 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e Data Ascii: :null,concreteType:"Tombstone",kind:"LinkedField",name:"tombstone",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"action",storageKey:null},o,{alias:null,args:null,kind:"ScalarField",name:"group_id",storageKey:null},{alias:null,args:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50095	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	610	OUT	GET /rsrc.php/v3i3Ek4/yP/l/en_US/ZAPhqDpoVnl.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1751	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: T+bIdRkgDHYiBxA6sPdBbA== Expires: Wed, 23 Apr 2025 02:34:57 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 39gXZ94M9FCqgbyTP+2Sxon9OIwTw6e7ANdnqF6wioDFwGQWyZccUEOe1n7yyvtV5djUJPJm9eAbgJQQ1nXc6w== Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 172132
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:58 UTC	16058	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 4d 61 6e 61 67 65 43 6f 6e 73 74 69 74 75 65 6e 74 42 61 64 67 65 44 69 61 6c 6f 67 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 36 36 31 36 39 32 38 37 37 32 31 34 37 34 32 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 4d 61 6e 61 67 65 43 6f 6e 73 74 69 74 75 65 6e 74 42 61 64 67 65 44 69 61 6c 6f 67 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 4d 61 6e 61 67 65 43 6f 6e 73 74 69 74 75 65 6e 74 42 61 64 67 65 44 69 61 6c 6f 67 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 Data Ascii: /FB_PKG_DELIM/__d("ManageConstituentBadgeDialogQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6661692877214742"}),null);__d("ManageConstituentBadgeDialogQuery$Parameters",["ManageConstituentBadgeDialogQuery_facebookRelayOperation"
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 63 65 51 75 65 72 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 6d 65 74 5f 63 6f 6d 70 6f 73 65 72 5f 74 79 70 65 61 68 65 61 64 5f 73 65 61 72 63 68 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6d 2c 73 2c 70 2c 6e 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 71 2c 6f 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 65 6e 74 72 69 Data Ascii: ceQuery",selections:[{alias:null,args:l,concreteType:null,kind:"LinkedField",name:"comet_composer_typeahead_search",plural:!0,selections:[m,s,p,n,{kind:"InlineFragment",selections:[q,o,{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"entri
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 50 72 65 66 65 72 72 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 50 72 65 66 65 72 72 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c Data Ascii: documentName:"ProfileCometActionTrigger_action",fragmentName:"ProfileCometActionPreferredInteractionHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileActionPreferredInteractionHandler",abstractKey:null},{kind:"InlineFragment",
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 72 6f 66 69 6c 65 43 6f 6d 65 74 47 72 6f 75 70 41 63 74 69 6f 6e 42 6c 6f 63 6b 55 73 65 72 46 72 6f 6d 47 72 6f 75 70 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 47 72 6f 75 70 41 63 74 69 6f 6e 42 6c 6f 63 6b 55 73 65 72 46 72 6f 6d 47 72 6f 75 70 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 Data Ascii: rofileCometGroupActionBlockUserFromGroupHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileGroupActionBlockUserFromGroupHandler",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometActionTr
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 67 65 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 64 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 4c 6f 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 50 72 6f 66 65 73 73 69 6f 6e 61 6c 4d 6f 64 65 52 6f 6c 6c 62 61 63 6b 4c 6f 67 67 65 72 5f 6c 6f 67 67 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 6c 6f 67 67 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 Data Ascii: ger",plural:!1,selections:[d,{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometActionLogger_action",fragmentName:"ProfileCometActionProfessionalModeRollbackLogger_logger",fragmentPropName:"logger",kind:"ModuleImport"}],type:"ProfileA
2024-04-24 05:32:58 UTC	14884	IN	Data Raw: 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 73 74 6f 72 61 67 65 4b 65 Data Ascii: l,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKe
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 7b 72 65 67 65 78 3a 63 2c 72 65 67 65 78 41 6c 69 61 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 6d 69 6e 4d 61 74 63 68 4c 65 6e 67 74 68 2c 64 3d 61 2e 6e 61 6d 65 2c 65 3d 61 2e 74 72 69 67 67 65 72 73 2c 66 3d 61 2e 64 69 73 61 6c 6c 6f 77 65 64 43 68 61 72 73 3b 66 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 63 28 22 44 6f 63 75 6d 65 6e 74 4d 65 6e 74 69 6f 6e 73 52 65 67 65 78 22 29 2e 50 55 4e 43 54 55 41 54 49 4f 4e 3a 66 3b 76 61 72 20 67 3d 61 2e 64 69 73 61 6c 6c 6f 77 65 64 54 65 72 6d 73 3b 61 3d 6a 28 65 2c 66 29 3b 76 61 72 20 68 3d 61 2e 72 65 67 65 78 2c 69 3d 61 2e 72 65 67 65 78 41 6c 69 61 73 3b 72 65 74 75 72 6e 7b 66 69 6e 64 4d 65 6e 74 69 6f 6e 61 62 6c 65 53 74 72 69 6e 67 3a Data Ascii: );return{regex:c,regexAlias:a}}function a(a){var b=a.minMatchLength,d=a.name,e=a.triggers,f=a.disallowedChars;f=f===void 0?c("DocumentMentionsRegex").PUNCTUATION:f;var g=a.disallowedTerms;a=j(e,f);var h=a.regex,i=a.regexAlias;return{findMentionableString:
2024-04-24 05:32:58 UTC	16384	IN	Data Raw: 66 65 74 63 68 4e 65 74 77 6f 72 6b 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6a 28 61 29 7d 29 7d 7d 7d 2c 5b 6c 2c 6a 5d 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 46 65 65 64 43 6f 6d 70 6f 73 65 72 43 6f 6d 65 74 4d 65 6e 74 69 6f 6e 73 4e 65 74 77 6f 72 6b 44 61 74 61 53 6f 75 72 63 65 22 2c 5b 22 57 65 62 50 69 78 65 6c 52 61 74 69 6f 22 2c 22 63 72 65 61 74 65 46 65 65 64 43 6f 6d 65 74 4d 65 6e 74 69 6f 6e 73 44 61 74 61 45 6e 74 72 79 22 2c 22 66 69 6c 74 65 72 4e 75 6c 6c 73 22 2c 22 75 73 65 43 6f 6d 65 74 54 79 70 65 61 68 65 61 64 47 72 61 70 68 51 4c 44 61 74 61 53 6f 75 72 63 65 22 2c 22 75 73 65 46 65 65 64 43 6f 6d 70 6f 73 65 72 43 6f 6d 65 74 Data Ascii: fetchNetwork(a).then(function(a){return j(a)})}}},[l,j])}g["default"]=a}),98);__d("useFeedComposerCometMentionsNetworkDataSource",["WebPixelRatio","createFeedCometMentionsDataEntry","filterNulls","useCometTypeaheadGraphQLDataSource","useFeedComposerComet
2024-04-24 05:32:58 UTC	14884	IN	Data Raw: 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 74 32 61 36 30 61 22 2c 63 68 69 6c 64 72 65 6e 3a 6c 2e 6a 73 78 28 63 28 22 54 65 74 72 61 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 61 6c 74 3a 68 2e 5f 28 22 4e 6f 74 20 70 61 72 74 20 6f 66 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 29 2c 63 6f 6c 6f 72 3a 22 70 72 69 6d 61 72 79 22 2c 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 69 28 22 37 38 35 34 32 36 22 29 2c 31 32 29 7d 29 7d 29 3a 6e 75 6c 6c 5d 7d 29 2c 6b 21 3d 6e 75 6c 6c 26 26 6c 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 32 6e 61 67 63 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 6c 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 64 6b 37 70 74 22 7d 29 2c 6c 2e 6a 73 78 28 Data Ascii: className:"x1t2a60a",children:l.jsx(c("TetraIcon.react"),{alt:h._("Not part of your organization"),color:"primary",icon:d("fbicon")._(i("785426"),12)})}):null]}),k!=null&&l.jsxs("div",{className:"x12nagc",children:[l.jsx("div",{className:"xdk7pt"}),l.jsx(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50096	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	610	OUT	GET /rsrc.php/v3i0Wo4/yH/l/en_US/tAGk4PH_nhv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1750	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: m2ovTg21nMVm6oTpV+8b/A== Expires: Wed, 23 Apr 2025 19:55:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: OVKQxM14ocnqXzMcalnYgAkYK+jhWLdKjqPfOskOTAgGIY4CJtyTYnNl3zDPyexu9xOq9GofEesNEIPN+rKXJw== Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 30729
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-24 05:32:58 UTC	16059	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 6f 6d 65 74 56 69 73 75 61 6c 43 68 61 6e 67 65 54 72 61 63 6b 65 72 22 2c 22 75 73 65 4d 65 72 67 65 52 65 66 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 64 3d 63 28 22 75 73 65 43 6f 6d 65 74 56 69 73 75 61 6c 43 68 61 6e 67 65 54 72 61 63 6b 65 72 22 29 28 29 3b 62 3d 63 28 Data Ascii: /FB_PKG_DELIM/__d("CometContextualLayer.react",["BaseContextualLayer.react","react","useCometVisualChangeTracker","useMergeRefs"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a,b){var d=c("useCometVisualChangeTracker")();b=c(
2024-04-24 05:32:58 UTC	14669	IN	Data Raw: 2b 22 5d 22 29 2c 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 22 2b 65 2e 52 2b 65 2e 41 4c 2b 22 5d 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 61 3d 68 2e 65 78 65 63 28 61 29 3b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 6a 28 61 29 3b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 64 28 22 55 6e 69 63 6f 64 65 42 69 64 69 44 69 72 65 63 74 69 6f 6e 22 29 2e 4e 45 55 54 52 41 4c 3a 69 2e 65 78 65 63 28 61 29 3f 64 28 22 55 6e 69 63 6f 64 65 42 69 64 69 44 69 72 65 63 74 69 6f 6e 22 29 2e 52 54 4c 3a 64 28 22 55 6e 69 63 6f 64 65 42 69 64 69 44 69 72 65 63 74 69 6f 6e 22 29 2e 4c 54 52 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 62 3d 62 7c 7c 64 28 22 55 6e 69 Data Ascii: +"]"),i=new RegExp("["+e.R+e.AL+"]");function j(a){a=h.exec(a);return a==null?null:a[0]}function k(a){a=j(a);return a==null?d("UnicodeBidiDirection").NEUTRAL:i.exec(a)?d("UnicodeBidiDirection").RTL:d("UnicodeBidiDirection").LTR}function l(a,b){b=b\|\|d("Uni

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50097	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	1177	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=7&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary61lIYHHg3SNiEo0q sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1135	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 31 6c 49 59 48 48 67 33 53 4e 69 45 6f 30 71 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 33 39 33 36 37 37 36 38 31 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 31 6c 49 59 48 48 67 33 53 4e 69 45 6f 30 71 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 6c 6f 78 5f 75 70 73 65 6c 6c 5f 65 76 65 6e 74 22 2c 7b 22 Data Ascii: ------WebKitFormBoundary61lIYHHg3SNiEo0qContent-Disposition: form-data; name="ts"1713936776817------WebKitFormBoundary61lIYHHg3SNiEo0qContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:lox_upsell_event",{"
2024-04-24 05:32:58 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:58 UTC	1832	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50098	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	1232	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=8&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 948 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryS38TuNHmQboNr1F5 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:58 UTC	948	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 33 38 54 75 4e 48 6d 51 62 6f 4e 72 31 46 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 33 39 33 36 37 37 37 30 32 35 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 33 38 54 75 4e 48 6d 51 62 6f 4e 72 31 46 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundaryS38TuNHmQboNr1F5Content-Disposition: form-data; name="ts"1713936777025------WebKitFormBoundaryS38TuNHmQboNr1F5Content-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-04-24 05:32:58 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:58 UTC	1833	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50099	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	984	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1541 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:58 UTC	1541	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 70 72 69 76 61 63 79 25 32 46 70 6f 6c 69 63 79 25 32 46 25 33 46 65 6e 74 72 79 5f 70 6f 69 6e 74 25 33 44 63 6f 6d 65 74 5f 64 72 6f 70 64 6f 77 6e 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 72 69 76 61 63 79 25 32 46 70 6f 6c 69 63 69 65 73 25 32 46 68 65 61 6c 74 68 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 70 6f 6c 69 63 69 65 73 25 33 46 72 65 66 25 33 44 70 66 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 62 75 73 69 6e 65 73 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 34 5d 3d 25 32 46 68 65 6c 70 25 32 46 35 36 38 31 33 37 34 39 33 33 30 32 32 31 37 26 72 6f 75 74 65 5f 75 72 6c 73 5b 35 5d 3d 25 32 46 70 6f 6c 69 63 69 65 73 25 32 46 63 6f 6f 6b 69 65 73 26 72 6f 75 Data Ascii: route_urls[0]=%2Fprivacy%2Fpolicy%2F%3Fentry_point%3Dcomet_dropdown&route_urls[1]=%2Fprivacy%2Fpolicies%2Fhealth&route_urls[2]=%2Fpolicies%3Fref%3Dpf&route_urls[3]=%2Fbusiness&route_urls[4]=%2Fhelp%2F568137493302217&route_urls[5]=%2Fpolicies%2Fcookies&rou
2024-04-24 05:32:58 UTC	1235	IN	HTTP/1.1 200 OK Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:32:58 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936777; path=/; domain=.facebook.com; httponly Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:58 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:58 UTC	5	IN	Data Raw: 31 65 36 0d 0a Data Ascii: 1e6
2024-04-24 05:32:58 UTC	488	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 70 72 69 76 61 63 79 2f 70 6f 6c 69 63 79 2f 3f 65 6e 74 72 79 5f 70 6f 69 6e 74 3d 63 6f 6d 65 74 5f 64 72 6f 70 64 6f 77 6e 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 70 72 69 76 61 63 79 2f 70 6f 6c 69 63 69 65 73 2f 68 65 61 6c 74 68 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 70 6f 6c 69 63 69 65 73 3f 72 65 66 3d 70 66 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 62 75 73 69 6e 65 73 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c Data Ascii: for (;;);{"payload":{"payloads":{"/privacy/policy/?entry_point=comet_dropdown":{"error":false,"result":null},"/privacy/policies/health":{"error":false,"result":null},"/policies?ref=pf":{"error":false,"result":null},"/business":{"error":false,"result":null
2024-04-24 05:32:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50100	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	976	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:58 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:58 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 84c408065b49fd94 timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: 673005412b6cda133174b5fc8797101e1d7d9de3db7473b399156b86754c1e18 connection: close
2024-04-24 05:32:58 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50107	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	577	OUT	GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1662	IN	HTTP/1.1 200 OK Content-Type: image/x.fb.keyframes Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Z5o6ShcDfXOoxSieZi5xvg== Expires: Sat, 12 Apr 2025 14:49:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: NKKT6YkP7FoBumwDPnEhpwkqSQfy6A3d+F7NCyYDpoegG/lmcqYWGjqbva/nJEyxSkBxsYpB26Galmp+hBweTQ== Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 64756
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 1c Data Ascii:
2024-04-24 05:32:59 UTC	15515	IN	Data Raw: 00 00 00 4b 45 59 46 14 00 24 00 14 00 20 00 1c 00 04 00 10 00 00 00 0c 00 08 00 14 00 00 00 04 00 00 00 1c 00 00 00 38 00 00 00 c0 fb 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 01 00 00 00 04 00 00 00 11 00 00 00 52 61 6e 64 6f 6d 53 75 62 64 6f 63 75 6d 65 6e 74 00 00 00 03 00 00 00 d8 dc 00 00 98 a5 00 00 04 00 00 00 42 23 ff ff 05 00 00 00 14 00 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 d0 03 ff ff 04 00 00 00 08 00 00 00 1c 92 00 00 a4 7e 00 00 54 6b 00 00 04 58 00 00 b4 44 00 00 64 31 00 00 10 1e 00 00 04 00 00 00 4e 23 ff ff 8c 01 00 00 18 00 00 00 18 00 00 00 5c 01 00 00 60 01 00 00 64 01 00 00 01 00 00 00 7c 04 ff ff b4 1a ff ff 0c 00 00 00 20 00 00 00 38 00 00 00 05 00 00 00 cc 00 00 00 ac 00 00 00 88 00 00 00 60 00 00 00 Data Ascii: KEYF$ 8BB?pBRandomSubdocumentB#BB?pB~TkXDd1N#\`d\| 8`
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 0a 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ac 41 ff ff 08 00 00 00 00 00 00 01 1c 40 ff ff 28 01 c9 41 60 aa ea c1 0c 40 ff ff 04 00 00 00 30 40 ff ff d0 e2 c6 41 30 7c e9 c1 4a 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ec 41 ff ff 08 00 00 00 00 00 00 01 5c 40 ff ff 28 01 c9 41 60 aa ea c1 4c 40 ff ff 04 00 00 00 70 40 ff ff 28 48 c6 41 c8 24 e9 c1 8a 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 2c 42 ff ff 08 00 00 00 00 00 00 01 9c 40 ff ff 20 97 c7 41 60 e1 e9 c1 8c 40 ff ff 04 00 00 00 b0 40 ff ff a0 30 c4 41 10 f2 e7 c1 ca 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 6c 42 ff ff 08 00 00 00 00 00 00 01 dc 40 ff ff 38 2f c6 41 a8 16 e9 c1 cc 40 ff ff 04 00 00 00 f0 40 ff ff 00 04 c2 41 40 ac e6 Data Ascii: @ A@(A`@0@A0\|J@ A\@(A`L@p@(HA$@ ,B@ A`@@0A@ lB@8/A@@A@
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 00 00 00 01 00 80 ff ff f0 a2 4a 41 70 09 d4 41 f0 7f ff ff 04 00 00 00 14 80 ff ff 00 cc 2b 41 90 c2 ba 41 2e 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 d0 81 ff ff 08 00 00 00 00 00 00 01 40 80 ff ff c0 12 40 41 a8 ee cb 41 30 80 ff ff 04 00 00 00 54 80 ff ff 00 8f 21 41 80 20 b1 41 6e 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 10 82 ff ff 08 00 00 00 00 00 00 01 80 80 ff ff d0 95 34 41 d8 7c c2 41 70 80 ff ff 04 00 00 00 94 80 ff ff 60 aa 16 41 d8 02 a6 41 ae 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 50 82 ff ff 08 00 00 00 00 00 00 01 c0 80 ff ff 80 07 28 41 78 4c b7 41 b0 80 ff ff 04 00 00 00 d4 80 ff ff 80 0a 0b 41 60 f5 98 41 ee 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 90 82 ff ff 08 00 00 Data Ascii: JApA+AA. @@AA0T!A An 4A\|Ap`AA P(AxLAA`A
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 88 00 00 00 88 00 00 00 e8 00 00 00 58 01 00 00 68 01 00 00 09 00 00 00 22 c0 ff ff 00 00 80 40 94 d6 ff ff 0c 00 00 00 10 00 00 00 18 00 00 00 01 00 00 00 1c 00 00 00 02 00 00 00 c8 d6 39 3f 68 b8 63 3f 02 00 00 00 00 00 a0 40 00 00 00 00 2e d6 ff ff 08 00 00 00 10 00 00 00 58 c0 ff ff 55 55 55 3f 55 55 55 3f 72 c0 ff ff 00 00 80 3f 7a c0 ff ff 04 00 00 00 42 d7 ff ff 00 ff 84 37 8a c0 ff ff 00 00 80 3f c8 c0 ff ff 00 d7 ff ff 0c 00 00 00 10 00 00 00 18 00 00 00 01 00 00 00 1c 00 00 00 02 00 00 00 8f ad 08 3f 64 2b 22 3f 02 00 00 00 38 00 00 00 28 00 00 00 9a d6 ff ff 08 00 00 00 10 00 00 00 c4 c0 ff ff 00 00 80 3f a4 70 bd 3e d0 c0 ff ff ef 5b f1 3d ab aa 2a 3e dc c0 ff ff 00 00 80 3f 00 00 80 3f 2c c1 ff ff f4 d8 ff ff 0c 00 00 00 10 00 00 00 18 00 00 Data Ascii: Xh"@9?hc?@.XUUU?UUU?r?zB7??d+"?8(?p>[=*>??,
2024-04-24 05:32:59 UTC	88	IN	Data Raw: 0c 00 00 00 08 00 0c 00 08 00 04 00 08 00 00 00 00 00 1c 42 00 00 1c 42 01 00 00 00 0c 00 00 00 08 00 08 00 00 00 04 00 08 00 00 00 04 00 00 00 24 00 00 00 0c 00 00 00 00 00 06 00 08 00 04 00 06 00 00 00 04 00 00 00 03 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 Data Ascii: BB$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50101	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	758	OUT	GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AfABJ8SwyWeSMuXofMm_jfkH1HTgW2Sg7J402E--jmbvjg&oe=66501200&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	953	IN	HTTP/1.1 200 OK content-digest: adler32=1060390509 Content-Type: image/x.fb.keyframes ETag: -1103541200696250300 x-manifold-obj-blobsizebytes: 13996 x-manifold-obj-canonicalpath: flat/base:v7:like.kf x-manifold-obj-ctime: 1611967368 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1635855486666999","color":"2078f4","__ctime":"1611967368","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 13996
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 5c 13 00 00 00 00 34 43 00 00 34 43 00 00 00 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 1e 13 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ \4C4C@pB4C4CAdobe
2024-04-24 05:32:59 UTC	12495	IN	Data Raw: b8 ff 00 ae af 8d c5 13 3d b1 a9 ce a3 5b df 9a da 61 d5 76 ac 6f dd 67 31 2e 7b 74 75 8f b5 85 d5 3a 65 31 0b 84 9e 00 fd d5 7a 95 3a 5c 24 b7 8e a9 93 30 96 5d d3 27 50 ee 53 d5 3a 3a 87 72 6e a3 a4 74 32 75 2a 3a 94 74 32 ee 9d 49 d0 cb ba 9e 93 d4 39 94 a7 47 50 e6 5d d4 e5 3d 40 cb 7f 14 c9 98 54 e7 db c7 c9 32 66 15 3a 45 31 09 82 d2 3f 9e ea d1 12 d2 21 9d 33 ae 0e bf 75 a4 43 7a 74 46 1a c7 51 d4 32 56 1d 1b ef 37 5d 5b e2 15 a6 9d c7 4d 2f c7 16 ab da 32 a5 b2 31 b2 31 dc 4c 78 05 a7 62 b9 26 b3 0f cc 9a 74 9e 5d d4 74 8c c3 ff d5 f6 0f a9 6c 6c 7c 8f 36 6b 01 2e 3b 0d 57 d0 c4 71 f6 f0 42 29 32 f1 2f ab 7d 55 44 93 3f f5 9d 07 41 e0 17 64 f1 f5 1d 3f 4a 94 ea 3a 69 40 f3 a6 ff 00 b2 ca 68 ca f0 d3 8d f6 b2 a6 18 4d 4c 36 53 e8 ab 34 65 30 b8 4a Data Ascii: =[avog1.{tu:e1z:\$0]'PS::rnt2u*:t2I9GP]=@T2f:E1?!3uCztFQ2V7][M/211Lxb&t]tll\|6k.;WqB)2/}UD?Ad?J:i@hML6S4e0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50103	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	758	OUT	GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AfAc1tv-PAaYO--X3sZzlpw-dYVdCaNRKAvJDHaRMHBnvw&oe=66500E71&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	951	IN	HTTP/1.1 200 OK content-digest: adler32=1456939275 Content-Type: image/x.fb.keyframes ETag: -4149138764619414100 x-manifold-obj-blobsizebytes: 8724 x-manifold-obj-canonicalpath: flat/base:v7:love.kf x-manifold-obj-ctime: 1611967371 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1678524932434102","color":"f33e58","__ctime":"1611967371","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8724
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 ac 11 00 00 00 00 34 43 00 00 34 43 00 00 40 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 6d 11 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ 4C4C@@pB4C4CmAdobe
2024-04-24 05:32:58 UTC	7223	IN	Data Raw: 18 e9 66 0c 74 b3 06 3a 59 87 37 c6 ef f3 4b 30 e0 e8 a0 85 26 52 78 42 8b 10 1a a5 b1 3f 35 34 cb f4 34 3f 05 2d 99 e1 67 c0 f8 87 33 22 4a bc f8 a1 f8 a1 ff 00 a9 eb ea ac 74 df 1c af b1 d5 b6 f0 ff d6 f6 7c 6a 7b 0e 54 42 07 c5 1c d3 fe 46 a7 f6 5f c4 27 a7 d4 27 7c fe 94 72 b1 05 45 d4 b7 28 e1 7b 06 28 0d 14 f8 2b 12 e9 1f 38 4e 6c 60 07 54 b6 e3 87 66 46 1a d9 5b 30 e9 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c3 18 e1 2c c3 81 8f de bd 54 b3 0e 11 22 8f 9a 5b 33 f3 54 cc c4 ea 2b d9 4b 62 7e 6a d9 79 dc ac e4 28 b5 a3 41 a3 ff 00 d4 e8 52 25 39 e6 a5 ed f1 c6 eb 56 ed 87 ff d7 93 c5 e6 f1 27 04 3a e9 09 a0 52 e7 c4 57 f0 a9 eb f6 fa 8b fa 73 fb 25 e2 d2 94 3a Data Ascii: ft:Y7K0&RxB?544?-g3"Jt\|j{TBF_''\|rE({(+8Nl`TfF[0t=K0c,t=K0c,t=K0c,,T"[3T+Kb~jy(AR%9V':RWs%:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50102	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	762	OUT	GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AfDYWr_jHKdDH1-MmgHxR3uRWnZ9KnBaTGYBEecV00bNkw&oe=665011E6&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	953	IN	HTTP/1.1 200 OK content-digest: adler32=2160514895 Content-Type: image/x.fb.keyframes ETag: 7343664923330879133 x-manifold-obj-blobsizebytes: 6756 x-manifold-obj-canonicalpath: flat/base:v7:dorothy.kf x-manifold-obj-ctime: 1611967366 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1663186627268800","color":"7e64c4","__ctime":"1611967366","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6756
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 31 43 00 00 31 43 ab aa 22 40 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 01 00 00 00 30 00 00 00 00 00 2a 00 1c 00 18 00 04 00 00 00 00 00 14 00 10 00 0c 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 48 00 00 00 14 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 01 00 00 00 70 e7 ff ff 04 00 00 00 6c e6 ff ff 9a 99 b9 3f 9a 99 b9 3f 84 e7 ff ff 00 00 b1 42 8c e7 ff ff 00 00 b1 42 94 e7 ff ff 04 00 00 00 88 e7 ff ff 09 00 00 00 0c 16 00 00 f8 12 00 00 10 10 00 00 28 0d 00 00 40 0a 00 00 58 07 00 00 Data Ascii: KEYF@1C1C"@A0H$(,pl??BB(@X
2024-04-24 05:32:58 UTC	5255	IN	Data Raw: 00 00 00 10 00 00 00 94 eb ff ff aa 00 c0 3e ab aa 2a 3f 48 ee ff ff ab aa 2a 3e 72 ee ff ff 08 00 00 00 10 00 00 00 b4 eb ff ff 00 00 80 3f ab aa 2a 3f 68 ee ff ff ab aa aa 3e 92 ee ff ff 08 00 00 00 10 00 00 00 d4 eb ff ff 00 00 80 3f ab aa 2a 3f e0 eb ff ff 8e ff 7f 3e ab aa aa 3e f8 ec ff ff 04 00 00 00 f4 eb ff ff 48 e1 3a 3f 48 e1 3a 3f 0c ed ff ff d0 9d c5 40 14 ed ff ff c0 1a 5f c0 1c ed ff ff 04 00 00 00 18 ec ff ff 94 e3 8d 3e b7 f2 2e 41 02 00 00 00 d4 00 00 00 04 00 00 00 ae ed ff ff 18 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 34 00 00 00 0d 00 00 00 58 ed ff ff 04 00 00 00 84 ed ff ff 00 d2 87 9d 68 ed ff ff 02 ef ac 40 70 ed ff ff cf 75 be 3f 78 ed ff ff 04 00 00 00 6c ed ff ff 84 ed ff ff 04 00 00 00 56 ed ff ff 04 00 00 00 03 00 00 00 Data Ascii: >?H>r??h>??>>H:?H:?@_>.A$(,4Xh@pu?xlV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50104	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	760	OUT	GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AfB1V5zviFKmuGr4twHkPoHpTckmnxNUS318pRe6Kv1Vrw&oe=664FF470&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	955	IN	HTTP/1.1 200 OK Content-Type: image/x.fb.keyframes ETag: 1488915451716286797 x-manifold-obj-blobsizebytes: 151112 x-manifold-obj-canonicalpath: flat/base:v7:toto.kf x-manifold-obj-ctime: 1611967375 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"899779720071651","color":"ec7ebd","__ctime":"1611967375","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: x-upstream-checksum-algorithm: crc32 cross-origin-resource-policy: cross-origin timing-allow-origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT Cache-Control: max-age=1209600, no-transform Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 151112
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 d2 43 00 00 d2 43 55 55 a5 3f 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 06 00 00 00 94 ec 01 00 84 88 01 00 90 25 01 00 d4 c3 00 00 b0 63 00 00 04 00 00 00 ae 13 fe ff 24 00 00 00 30 00 00 00 34 00 00 00 34 00 00 00 44 00 00 00 48 00 00 00 4c 00 00 00 54 00 00 00 01 00 00 00 2c 13 fe ff 04 00 00 00 84 13 fe ff 00 c0 64 7b 3c 13 fe ff 00 00 80 3f 78 13 fe ff 48 13 fe ff 04 00 00 00 98 b2 fd ff 00 00 80 3f 00 00 80 3f 5c 13 fe ff 00 00 52 43 64 13 fe ff 00 00 52 43 6c 13 fe ff 04 00 00 00 60 13 fe ff 58 13 fe ff 0c 00 00 00 84 00 00 00 Data Ascii: KEYF@CCUU?A**%c$044DHLT,d{<?xH??\RCdRCl`X
2024-04-24 05:32:59 UTC	16332	IN	Data Raw: 00 33 43 04 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 b7 fd ff 38 6f de 42 7c 26 50 43 cc b7 fd ff 78 3a ff 42 86 99 4f 43 d8 b7 fd ff 00 00 da 42 00 00 4e 43 3c b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 b7 fd ff 1e c6 0e 43 fa b9 50 43 04 b8 fd ff cc 3b 17 43 38 56 50 43 10 b8 fd ff 00 00 05 43 00 00 50 43 30 b8 fd ff 04 00 00 00 24 b8 fd ff 00 00 1d 43 00 00 52 43 fa ba fd ff 04 00 00 00 0f 00 00 00 4c 03 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 d0 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 8c b8 fd ff aa aa 1d 43 00 00 52 43 98 b8 fd ff 56 55 1e 43 00 00 52 43 a4 b8 fd ff Data Ascii: 3C 8oB\|&PCx:BOCBNC< CPC;C8VPCCPC0$CRCL\ l0\|@ CRCVUCRC
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: f7 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 f7 fd ff 00 1d 39 43 22 d0 af c2 94 f7 fd ff b4 90 3e 43 ee 58 c9 c2 a0 f7 fd ff 00 00 34 43 02 00 9a c2 04 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 f7 fd ff 78 ee 43 43 a8 7c ff c2 cc f7 fd ff 6a a9 49 43 1d 88 24 c3 d8 f7 fd ff 00 00 42 43 00 00 ec c2 3c f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 f7 fd ff 6c b5 41 43 89 36 2c c3 04 f8 fd ff 78 ab 30 43 b0 85 2b c3 10 f8 fd ff 00 00 44 43 00 00 2a c3 74 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 30 f8 fd ff ee bc 21 43 82 97 2c c3 3c f8 fd ff c4 ef 10 43 0d 2a 2e c3 48 f8 fd ff 00 00 2a 43 00 00 2c c3 ac f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 68 f8 fd ff 82 26 0e 43 6a b3 2a c3 Data Ascii: 9C">CX4C xCC\|jIC$BC< lAC6,x0C+DCt 0!C,<C.HC, h&Cj
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 69 f2 41 14 a8 e0 42 7c 37 fe ff 58 21 8a 41 b4 52 0a 43 88 37 fe ff 00 00 40 42 00 00 b0 42 ec 37 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a8 37 fe ff 30 d9 59 41 7e 8d 35 43 b4 37 fe ff 50 ba 2e 41 d4 5f 45 43 c0 37 fe ff 00 00 60 41 00 00 31 43 24 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 37 fe ff 68 b6 87 41 fa 86 4a 43 ec 37 fe ff c0 c0 04 42 16 83 48 43 f8 37 fe ff 00 00 60 41 00 00 48 43 5c 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 38 fe ff e0 c0 3c 42 d2 83 49 43 24 38 fe ff 88 ca 7b 42 5e 0d 4d 43 30 38 fe ff 00 00 20 42 00 00 49 43 94 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 38 fe ff 58 a5 84 42 54 ad 49 43 5c 38 fe ff 98 54 81 42 44 fe 3b 43 68 38 fe ff 00 00 82 42 00 00 4b 43 Data Ascii: iAB\|7X!ARC7@BB7 70YA~5C7P.A_EC7`A1C$8 7hAJC7BHC7`AHC\8 8<BIC$8{B^MC08 BIC8 P8XBTIC\8TBD;Ch8BKC
2024-04-24 05:32:59 UTC	14935	IN	Data Raw: ef 3d 3f 8c 31 46 3f 9d 73 4e 3f ad b5 56 3f be f7 5e 3f ce 39 67 3f df 7b 6f 3f ef bd 77 3f 1f 00 00 00 48 5d 00 00 50 5a 00 00 58 57 00 00 24 54 00 00 f0 50 00 00 34 4e 00 00 00 4b 00 00 90 47 00 00 5c 44 00 00 64 41 00 00 30 3e 00 00 fc 3a 00 00 c8 37 00 00 94 34 00 00 24 31 00 00 2c 2e 00 00 f8 2a 00 00 c4 27 00 00 94 24 00 00 9c 21 00 00 e0 1e 00 00 70 1b 00 00 3c 18 00 00 44 15 00 00 d4 11 00 00 64 0e 00 00 a8 0b 00 00 ec 08 00 00 30 06 00 00 b0 03 00 00 f4 00 00 00 26 d6 fe ff 00 00 00 02 2e d6 fe ff 00 00 00 02 36 d6 fe ff 00 00 00 02 3e d6 fe ff 00 00 00 02 46 d6 fe ff 00 00 00 02 4e d6 fe ff 00 00 00 02 56 d6 fe ff 00 00 00 02 5e d6 fe ff 00 00 00 02 66 d6 fe ff 00 00 00 02 6e d6 fe ff 00 00 00 02 76 d6 fe ff 00 00 00 02 7e d6 fe ff 00 00 00 02 Data Ascii: =?1F?sN?V?^?9g?{o?w?H]PZXW$TP4NKG\DdA0>:74$1,.*'$!p<Dd0&.6>FNV^fnv~
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 24 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 b1 fe ff e8 7d b0 c1 cc bb 16 43 ec b1 fe ff 50 ef 88 c1 38 7e 27 43 f8 b1 fe ff 00 00 c8 c1 00 00 0a 43 5c b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 b2 fe ff a0 58 2b c1 10 2a 3c 43 24 b2 fe ff 20 d9 f4 c0 a2 89 45 43 30 b2 fe ff 00 00 40 c1 00 00 38 43 94 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 b2 fe ff 00 70 2e c0 9a 08 49 43 5c b2 fe ff 50 23 59 41 ea 71 47 43 68 b2 fe ff 00 00 e0 c0 00 00 46 43 cc b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 b2 fe ff 70 1c f8 41 88 bf 48 43 94 b2 fe ff 30 63 1f 42 fc 03 49 43 a0 b2 fe ff 00 00 a8 41 00 00 48 43 c0 b2 fe ff 04 00 00 00 b4 b2 fe ff 00 00 40 42 00 00 4a 43 8a b5 fe ff 04 00 00 00 0e 00 00 Data Ascii: $ }CP8~'CC\ X+*<C$ EC0@8C Pp.IC\P#YAqGChFC pAHC0cBICAHC@BJC
2024-04-24 05:32:59 UTC	16333	IN	Data Raw: 8c e8 30 42 76 21 17 c3 b0 b7 fe ff 00 00 20 42 00 00 35 c3 14 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d0 b7 fe ff 4c 48 21 42 8e 30 c1 c2 dc b7 fe ff 88 24 a6 41 2c 99 98 c2 e8 b7 fe ff 00 00 2c 42 00 00 06 c3 4c b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 08 b8 fe ff 50 d0 87 c1 e8 43 bb c1 14 b8 fe ff 90 63 de c1 e0 51 98 40 20 b8 fe ff 00 00 00 40 00 00 48 c2 84 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 40 b8 fe ff 1c 5c 0a c2 ac 7d b8 42 4c b8 fe ff 10 09 5a c1 d4 7f 0e 43 58 b8 fe ff 00 00 f8 c1 00 00 38 42 bc b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 78 b8 fe ff 00 04 32 be 00 0c 3b 43 84 b8 fe ff 00 c4 f4 3f 02 40 46 43 90 b8 fe ff 00 00 00 c0 00 00 35 43 f4 b8 fe ff 10 00 00 00 18 00 00 Data Ascii: 0Bv! B5 LH!B0$A,,BL PCcQ@ @H @\}BLZCX8B x2;C?@FC5C
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 5f ce c2 78 f7 fe ff 00 00 10 42 00 00 a0 41 dc f7 fe ff 10 00 00 00 18 00 00 00 28 00 00 00 00 00 00 03 98 f7 fe ff 80 56 d5 bf 92 85 25 c3 a4 f7 fe ff 00 44 93 c0 60 d7 36 c3 08 00 08 00 04 00 00 00 08 00 00 00 00 00 1f c3 18 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d4 f7 fe ff 60 98 14 c1 80 b9 3a c3 e0 f7 fe ff e0 17 d3 c1 ec 7c 39 c3 ec f7 fe ff 00 00 c0 c0 00 00 38 c3 50 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 0c f8 fe ff d0 80 2a c2 c8 be 3a c3 18 f8 fe ff 88 74 4e c2 de e5 3a c3 24 f8 fe ff 00 00 04 c2 00 00 3a c3 44 f8 fe ff 04 00 00 00 38 f8 fe ff 00 00 6c c2 00 00 3c c3 0e fb fe ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 Data Ascii: _xBA(V%D`6 `:\|98P *:tN:$:D8l<\ l0
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 00 0d 43 8c 37 ff ff 04 00 00 00 80 37 ff ff 00 00 2c c2 00 00 44 43 56 3a ff ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 28 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e4 37 ff ff 5c 1e 2b c2 45 6e 43 43 f0 37 ff ff 10 27 06 c2 51 23 44 43 fc 37 ff ff 00 00 4c c2 01 00 43 43 60 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 1c 38 ff ff 00 f2 6d c1 59 88 45 43 28 38 ff ff 00 02 d1 3f b9 41 49 43 34 38 ff ff f8 ff af c1 01 00 45 43 98 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 54 38 ff ff 80 e6 29 41 fd 9c 44 43 60 38 ff ff 80 d9 6a 41 d5 d1 2f 43 6c 38 ff ff 20 00 c0 40 Data Ascii: C77,DCV:\ l0\|@(8 7\+EnCC7'Q#DC7LCC`8 8mYEC(8?AIC48EC8 T8)ADC`8jA/Cl8 @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50106	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	757	OUT	GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AfCOHOiTQWr87AQIbi_TO8UIAXibgPGQj-vu1mHxXN9QEA&oe=6650164B&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	951	IN	HTTP/1.1 200 OK content-digest: adler32=3371172350 Content-Type: image/x.fb.keyframes ETag: 9016135132004091149 x-manifold-obj-blobsizebytes: 45660 x-manifold-obj-canonicalpath: flat/base:v7:haha.kf x-manifold-obj-ctime: 1611967367 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"115940658764963","color":"f7b125","__ctime":"1611967367","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 45660
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 ab aa 1a 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-04-24 05:32:59 UTC	15256	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 03 34 8f ff ff 44 cd 44 c2 04 15 55 c2 40 8f ff ff 94 ba 50 c2 30 d1 52 c2 4c 8f ff ff 54 06 3c c2 14 9d 40 c2 f4 8f ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 6c 8f ff ff d0 9c 65 c2 50 0b 4a c2 78 8f ff ff 64 28 60 c2 d0 f0 32 c2 84 8f ff ff 14 35 57 c2 74 18 50 c2 2c 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a4 8f ff ff b4 8b 48 c2 20 e9 fc c1 b0 8f ff ff 94 fa 3d c2 28 20 d9 c1 bc 8f ff ff 2c 0d 56 c2 b8 79 1c c2 2c 90 ff ff 04 00 00 00 d0 8f ff ff 5c 18 2c c2 f0 3f a4 c1 ea 8f ff ff 04 00 00 00 0c 00 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 b4 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 Data Ascii: 4DDU@P0RLT<@ lePJxd(`25WtP, H =( ,Vy,\,?\ l0\|@
2024-04-24 05:32:59 UTC	12519	IN	Data Raw: 9c d8 c1 cc cf ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 44 cf ff ff 94 ba 9a 42 c6 7f 8b c2 50 cf ff ff ae 0e a2 42 dc c5 97 c2 5c cf ff ff 94 ba 9a 42 3c c7 4d c2 04 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 7c cf ff ff d2 4e bd 42 dc c5 97 c2 88 cf ff ff 5e a2 d2 42 82 3a 89 c2 94 cf ff ff cc 0c a4 42 dc c5 97 c2 04 d0 ff ff 04 00 00 00 a8 cf ff ff 5e a2 d2 42 30 4b 4e c2 c2 cf ff ff 04 00 00 00 05 00 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 70 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e8 cf ff ff 5e 22 cd 42 d0 cf 12 c2 f4 cf ff ff 08 8e b7 42 60 56 f0 c1 00 d0 ff ff 5e 22 cd 42 84 0b 4e c2 a8 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 20 d0 ff ff c6 08 a5 42 60 56 f0 c1 Data Ascii: DBPB\B<M \|NB^B:B^B0KN\|@p ^"BB`V^"BN B`V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50105	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	758	OUT	GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AfD7Ym2hhKakU4zYqIkqPxEzmAAXm5W2WGsqzcqZEtJ-4g&oe=66502298&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	950	IN	HTTP/1.1 200 OK content-digest: adler32=1035192163 Content-Type: image/x.fb.keyframes ETag: 7938460552592410943 x-manifold-obj-blobsizebytes: 22168 x-manifold-obj-canonicalpath: flat/base:v7:wow.kf x-manifold-obj-ctime: 1611967376 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"478547315650144","color":"f7b125","__ctime":"1611967376","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 22168
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:58 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 89 88 a0 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-04-24 05:32:59 UTC	15255	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-04-24 05:32:59 UTC	5412	IN	Data Raw: 04 00 00 00 f4 ea ff ff 35 c0 d6 42 87 1b 22 42 01 00 00 00 3c 00 00 00 00 00 36 00 30 00 2c 00 04 00 00 00 00 00 24 00 20 00 1c 00 14 00 18 00 28 00 10 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 36 00 00 00 fc 12 00 00 00 00 00 00 30 00 00 00 08 05 00 00 0c 05 00 00 0c 05 00 00 1c 05 00 00 1c 05 00 00 1c 05 00 00 30 05 00 00 07 00 00 00 0c 00 14 00 10 00 0c 00 08 00 04 00 0c 00 00 00 10 00 00 00 58 02 00 00 a4 04 00 00 b0 04 00 00 04 fb ff ff 0c 00 00 00 34 00 00 00 60 00 00 00 0a 00 00 00 90 01 00 00 6c 01 00 00 4c 01 00 00 2c 01 00 00 0c 01 00 00 ec 00 00 00 c8 00 00 00 a4 00 00 00 84 00 00 00 64 00 00 00 0b 00 00 00 42 ba 59 3c 8b f1 f4 3c 84 19 aa 3d 14 88 60 3e 74 58 78 3e b7 6d db 3e ff a4 f6 3e af 3a 07 Data Ascii: 5B"B<60,$ (600X4`lL,dBY<<=`>tXx>m>>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50110	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	375	OUT	GET /rsrc.php/v3/yo/r/RBVykxDUbUn.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1671	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: X/gzo+ApbHvl4TBBPW8EMQ== Expires: Fri, 18 Apr 2025 16:30:38 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: sNH9MEIuy38CkNSJlX0hpF9zmbqkbxgmbEN4eCbr7Rs9Nk4c7s8n4OKawtAk9FVxnv7ZnJaSSBjzb1lFNaVaGg== Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=5, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7303
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:58 UTC	7302	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 b1 08 03 00 00 00 a6 cb 4c 79 00 00 02 fa 50 4c 54 45 47 70 4c 03 03 03 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 06 06 06 00 00 00 00 00 00 00 00 00 02 02 02 ff ff ff 01 01 01 04 04 04 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 03 03 ff ff ff 01 01 01 00 00 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 04 04 00 00 00 00 00 00 02 02 02 08 08 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 05 05 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 01 01 01 02 02 02 01 01 01 00 00 00 00 00 00 01 01 01 01 01 01 04 04 04 04 04 04 00 00 Data Ascii: PNGIHDRLyPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50111	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	375	OUT	GET /rsrc.php/v3/yM/r/qUPkXkiEwfh.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: jG09ZTlZAgg0ef0yf4ah1w== Expires: Fri, 11 Apr 2025 10:12:28 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: FMJww4NocsiSTWCRUB6VbUjoN2kIJ04zyxMgpKfO7hLNpa5SXy0wx5P8yKJ3lJO/+3PkPtxMGe8hL+nwbsPngg== Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 543
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:58 UTC	542	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 b7 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5a e5 9f 43 00 00 00 3c 74 52 4e 53 00 15 d4 f3 d8 9a bf 43 ed 24 c4 7f 30 20 be 1b 22 f0 3c 16 Data Ascii: PNGIHDRW?PLTEZC<tRNSC$0 "<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50108	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	424	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:59 UTC	1412	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:32:58 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936777; path=/; domain=.facebook.com; httponly Set-Cookie: fr=0ZrNyjt1uln5OxsOz..BmKJmK..AAA.0.0.BmKJmK.AWUlky46bPs; expires=Tue, 23-Jul-2024 05:32:58 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:59 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:59 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:59 UTC	2858	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 49 47 62 42 72 79 6e 6d 67 6d 76 52 79 4a 43 6c 77 6d 61 6e 6e 31 47 65 43 6e 75 77 4b 79 67 51 44 51 73 46 41 6d 56 70 47 32 6f 35 76 71 42 59 43 39 36 39 54 45 74 33 51 6b 76 4a 51 4f 55 44 70 2d 4f 4b 56 2d 71 67 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4c 6f 2d 72 67 55 49 4b 45 64 79 4b 44 38 72 47 48 43 59 55 5a 61 36 38 45 52 74 42 54 48 49 59 73 55 70 67 75 65 54 32 32 56 58 4a 6a 5a 62 74 74 43 41 54 77 4e 61 5a 56 52 61 43 69 6e 38 79 62 7a 37 67 6c 4f 63 37 7a 56 61 70 6d 5a 6b 35 61 74 22 3b 20 65 5f 66 62 5f 62 69 6e 61 72 79 76 65 72 73 69 6f 6e 3d 22 41 63 4c 41 54 72 47 5f 38 71 Data Ascii: Proxy-Status: http_request_error; e_fb_requesttime="AcIGbBrynmgmvRyJClwmann1GeCnuwKygQDQsFAmVpG2o5vqBYC969TEt3QkvJQOUDp-OKV-qg"; e_proxy="AcLo-rgUIKEdyKD8rGHCYUZa68ERtBTHIYsUpgueT22VXJjZbttCATwNaZVRaCin8ybz7glOc7zVapmZk5at"; e_fb_binaryversion="AcLATrG_8q
2024-04-24 05:32:59 UTC	6	IN	Data Raw: 63 34 66 34 0d 0a Data Ascii: c4f4
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 54 56 50 66 62 4e 4a 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="xTVPfbNJ">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 68 6f 74 6f 73 20 61 6e 64 20 6d 6f 72 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 Data Ascii: route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, photos and more on Facebook." /><link rel="mask-icon" sizes="any" href="
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 7d 2c 22 6a 75 73 74 6b 6e 6f 62 78 44 61 74 61 22 3a 7b 22 32 32 36 39 22 3a 7b 22 72 22 3a 66 61 6c 73 65 7d 7d 7d 29 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 54 69 6d 65 53 Data Ascii: sh":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"20948":{"result":true,"hash":null},"25572":{"result":false,"hash":null},"25571":{"result":false,"hash":null}},"justknobxData":{"2269":{"r":false}}})});requireLazy(["TimeS
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 44 57 63 5f 4e 51 2d 59 68 71 63 39 65 32 50 57 44 72 38 62 59 43 22 7d 2c 31 34 31 5d 2c 5b 22 4b 53 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 6b 69 6c 6c 65 64 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 43 52 45 41 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 44 45 4c 45 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 55 50 44 41 54 45 5f 4e 41 4d 45 22 2c 22 54 50 41 5f 53 52 54 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 22 2c 22 57 4f 52 4b 52 4f 4f 4d 53 5f 52 45 51 55 45 Data Ascii: ore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"DWc_NQ-Yhqc9e2PWDr8bYC"},141],["KSConfig",[],{"killed":{"__set":["POCKET_MONSTERS_CREATE","POCKET_MONSTERS_DELETE","POCKET_MONSTERS_UPDATE_NAME","TPA_SRT_TRANSLATION","WORKROOMS_REQUE
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a 33 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 54 69 6d 65 22 3a 35 30 7d 2c 33 32 39 5d 2c 5b 22 43 53 53 4c 6f 61 64 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 6d 6f 64 75 6c 65 50 72 65 66 69 78 22 3a 22 42 4c 43 53 53 3a 22 2c 22 66 6f 72 63 65 50 6f 6c 6c 46 6f 72 42 6f 6f 74 6c 6f 61 64 65 72 22 3a 74 72 75 65 2c 22 6c 6f 61 64 45 76 65 6e 74 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 7d Data Ascii: rLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRetryAbortNum":3,"translationRetryAbortTime":50},329],["CSSLoaderConfig",[],{"timeout":5000,"modulePrefix":"BLCSS:","forcePollForBootloader":true,"loadEventSupported":true}
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 37 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 67 69 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 72 74 6c 22 3a 66 61 6c 73 65 2c 22 69 73 5f 65 78 70 65 72 69 6d 65 6e 74 61 6c 5f 74 69 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 5f 6a 69 74 5f 77 61 72 6d 65 64 5f 75 70 22 3a 74 72 75 65 2c 22 68 73 Data Ascii: AULT","haste_session":"19837.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_origin":null,"manifest_version_prefix":null,"be_one_ahead":false,"is_rtl":false,"is_experimental_tier":false,"is_jit_warmed_up":true,"hs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50112	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	375	OUT	GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: oeXzM60JLxaQX8HmDUBHKQ== Expires: Sat, 12 Apr 2025 10:56:00 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: KJ8JXnH7Ao/aVAzLW8WB0Kx60xy3uMdfJ1qNDtblM3lLSZBdypp/GGrh+PhznPoOCWnjFbDJzxNmFwGK7Rw3tw== Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 265
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:58 UTC	264	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 04 03 00 00 00 7f a7 00 3e 00 00 00 30 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 4c f4 39 00 00 00 0f 74 52 4e 53 00 05 dc 89 50 55 a5 d9 ec f3 02 4a 0b f2 4b ef 6c d1 a2 00 00 00 79 49 44 41 54 08 5b 63 60 60 60 0c ab 9c 9e 2a c0 00 02 4e ff 81 40 05 c4 5a fc 1f 0c ac 80 4c 7b 08 f3 33 03 03 0b 90 fa d1 0f 24 1c 18 84 80 64 cf 09 20 a1 c8 10 0f 63 7e 65 c8 87 29 f8 c6 50 0f 24 37 ec 07 12 df 19 e6 83 98 fc 40 e2 27 98 f9 01 c4 fc 0b 56 00 66 7e 07 6b 03 33 bf 81 0d 03 33 bf 82 ad f8 fd 1e 6c 05 cb 7f 28 70 40 76 0e b2 23 91 9c 0e f7 10 00 38 57 8c 83 67 ba 2d 29 00 00 00 Data Ascii: PNGIHDR>0PLTEGpL%L9tRNSPUJKlyIDAT[c```*N@ZL{3$d c~e)P$7@'Vf~k33l(p@v#8Wg-)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50109	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	375	OUT	GET /rsrc.php/v3/yW/r/8k_Y-oVxbuU.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: +prMhVp8L/FcfzQDax4DXw== Expires: Fri, 11 Apr 2025 02:32:09 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: Sr8EcXX/8+heBfAvnurj40pA+trM3NyDzZdcK5Xa4PmkyRFgFYQS5Q2+R3CikeWUVJ3+DHvzfrTo4BqsfXnuIA== Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 289
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:58 UTC	288	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 45 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 fc 9c 6e 00 00 00 16 74 52 4e 53 e8 b8 4a f8 cb 37 07 29 00 ca 01 b7 ba 09 81 91 b6 be bd 9c c0 0b 29 ff c1 6a 00 00 00 75 49 44 41 54 78 5e 75 d1 c9 0e c3 20 0c 45 d1 d7 14 88 21 73 07 ff ff a7 36 14 5b 8f 0d ac e0 48 88 2b 03 b1 35 87 3c fb 1e 6e 50 85 2b 68 54 d0 a8 a0 51 41 a3 a2 b7 cf ab 29 3a d3 6f 79 ff 15 66 8f 98 6a 45 b9 aa 22 34 f3 ee 53 55 b3 61 94 fd a9 ba c9 a1 15 ed 7a 92 db 74 59 5b 80 3d 24 d2 45 79 d2 34 d1 86 f1 Data Ascii: PNGIHDRW?EPLTEGpLntRNSJ7))juIDATx^u E!s6[H+5<nP+hTQA):oyfjE"4SUaztY[=$Ey4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50113	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	375	OUT	GET /rsrc.php/v3/yT/r/Dc7-7AgwkwS.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:58 UTC	1612	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: DD3X2BHQO9MbapgKK06dIw== Expires: Sat, 12 Apr 2025 12:26:59 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: AlGP9ogIhSYXEqKrNb2/ieGff4+j9Wn4MEfecvsHRu0FTepg4CCnEoPEjZxlfSdf9lIAmrl2tGG8/VxuGlxkGQ== Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 449
2024-04-24 05:32:58 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:32:58 UTC	448	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 9c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8d 4c de 00 00 00 33 74 52 4e 53 00 fe 02 01 f5 f1 fc 05 f8 fd fb 2f b2 ec 4d f2 eb 42 61 d8 ad 19 f4 08 13 39 e7 df 1b d2 04 d3 18 9a 06 cd b1 6b bf 10 0f dd e6 6e 12 25 e2 Data Ascii: PNGIHDRW?PLTEL3tRNS/MBa9kn%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50114	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	597	OUT	GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB1m8NAX-bhLwhcb_389jU9W4xFxGps9kAln7Z1Bm_83g&oe=662E8774 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	662	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 03 Jul 2023 19:37:15 GMT X-Needle-Checksum: 146177544 thrift_fmhk: GBDXpDiWVQih68sUcVOe/FN7FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=573854212 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 3518
2024-04-24 05:32:59 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:32:59 UTC	3517	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 44 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 01 3b 00 02 00 00 00 0d 00 00 00 26 82 98 00 02 00 00 00 08 00 00 00 34 00 00 00 00 53 65 61 6e 20 41 69 72 68 61 72 74 00 00 c2 a9 20 4e 42 42 4a 00 ff e1 01 db 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 Data Ascii: JFIFDExifMM*;&4Sean Airhart NBBJhttp://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50115	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	592	OUT	GET /v/t39.30808-6/357443648_681098614055150_2307434350150824432_n.jpg?stp=dst-jpg_p640x640&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=236xtDOhTJ8Ab5AMtrf&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlZ7-Bh9qr8Xud13aPfiNhlXB5Tg7m-NkVHctccEHU7A&oe=662E8774 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	665	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 03 Jul 2023 19:37:15 GMT X-Needle-Checksum: 146177544 thrift_fmhk: GBDXpDiWVQih68sUcVOe/FN7FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1918026503 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=171, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 153045
2024-04-24 05:32:59 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 44 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 01 3b 00 02 00 00 00 0d 00 00 00 26 82 98 00 02 00 00 00 08 00 00 00 34 00 00 00 00 53 65 61 6e 20 41 69 72 68 61 72 74 00 00 c2 a9 20 4e 42 42 4a 00 ff e1 01 db 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 Data Ascii: JFIFDExifMM*;&4Sean Airhart NBBJhttp://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
2024-04-24 05:32:59 UTC	16332	IN	Data Raw: c3 13 59 da 95 53 ca 9e b5 06 51 89 b7 76 b1 97 6e ba 97 81 97 bf a5 a4 f2 d3 ea 23 26 40 5d 28 e9 f1 f6 e9 73 1d 78 74 56 62 ed e7 79 1a 3a c4 e7 78 39 7d 66 3d 2a ec bf 41 3e 5e ed be 57 48 0b 42 3b 37 26 16 d5 f2 6f 2c c1 79 fd b3 d9 ab 3e cd 60 a0 03 1b 48 24 66 6b cd a7 06 0b a4 3a 45 d3 a8 95 41 cf 40 31 fa 22 4b 97 67 76 74 24 90 32 76 07 49 c1 92 40 92 40 92 70 64 ec 09 9d 04 53 a6 45 a4 82 2d 26 69 a3 36 08 b3 a6 33 a6 09 4a 2e 89 3b 49 38 c6 c8 85 6d 26 a4 c9 d0 45 a4 cd 45 a4 c1 15 28 b1 ec ae d4 f4 08 c7 9e 37 b7 0c b7 8a d4 14 78 32 2e 24 76 cf 5a ec 43 f3 ad 2a 72 4a 9a 0e 3b 42 dc 92 60 e4 73 ea e9 94 ba c1 d0 c8 d6 0e a4 63 29 67 5f 6e 46 93 a2 b3 66 d6 e4 c4 3b 0d 6a ba 72 86 99 ea 44 a6 3d a1 26 64 12 8a ac 21 c4 74 b8 9d 78 07 d8 f2 bd Data Ascii: YSQvn#&@](sxtVby:x9}f=A>^WHB;7&o,y>`H$fk:EA@1"Kgvt$2vI@@pdSE-&i63J.;I8m&EE(7x2.$vZCrJ;B`sc)g_nFf;jrD=&d!tx
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: e6 be 9c d5 1f 40 6c 4f 67 e1 3d 9d fe 17 b0 aa 7e 19 c3 37 c2 a8 4f a0 d9 c1 a7 65 d6 6d 5b 67 1f 43 59 82 e4 39 37 33 a3 a7 c2 24 e3 66 e6 84 fc 42 5e 46 49 76 c9 49 95 aa bc 30 fb 4b 67 85 37 e1 7b 1e d4 dc ec b3 de 33 54 d9 e8 12 fd f7 b6 d9 fa 5f 6f b4 a9 b4 8f ad ae c8 af bd 79 d5 62 01 d6 28 65 1d 89 d1 b0 ca bd 7c 4e 27 45 63 9f 65 23 89 9e 72 8b f5 64 3e 99 e8 1a 53 7a 09 b0 54 66 05 78 50 1d a4 70 04 76 52 84 af 1d b9 c1 db a9 34 c4 35 38 b4 74 68 55 9b 35 9c b4 f5 dc bd 83 72 68 48 6e 7a 6b 9a 9e fb 0e dd ed ef 19 6a 35 49 d5 20 f8 e7 80 2f a5 03 9c 53 95 fc bf be a7 ed 76 63 83 3f ba fe 74 fc b3 4f fa 72 d8 5b 9c 1f 76 53 9a bf ba c7 e9 fc 38 fd 3b 7e 28 0b 32 fe cf c3 75 d6 b7 f5 0e b6 9f 82 cb b1 a1 f2 74 75 8e bc d4 fc 1b af 3f 0f 3f 8a d1 Data Ascii: @lOg=~7Oem[gCY973$fB^FIvI0Kg7{3T_oyb(e\|N'Ece#rd>SzTfxPpvR458thU5rhHnzkj5I /Svc?tOr[vS8;~(2utu??
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 73 82 92 d1 43 60 f0 14 24 40 50 e1 f1 34 53 83 a2 b2 c2 05 63 93 44 ff da 00 08 01 01 00 06 3f 02 ff 00 94 65 63 f6 10 b0 a5 41 fa 93 db 9f a9 d5 61 05 9d 3b 32 8a b8 a9 52 ba 20 d6 6a 7b 34 59 50 88 ec 84 4c 76 65 70 ae 1d 11 b4 e5 67 b0 2d 51 8d 51 96 e5 34 9d 16 30 b0 01 f3 52 e7 0e c8 fa b9 53 1d 90 b8 8a 8d 97 08 32 b2 21 63 3f 53 2b 1f f3 4d 33 db 3b ae 4a d1 a2 f0 a8 18 ec 24 68 a5 4c ad 3e af 4e cc 76 c2 9b 90 bb 55 8f a8 54 ac a9 95 c2 e5 22 65 71 e0 21 c2 b8 04 7d 7c 0d 56 56 98 fd 86 3e a4 03 95 2e 0b 92 04 95 85 95 8c f6 e2 57 17 66 3f e4 30 7f e1 25 68 b3 a9 fa dd 17 10 fa 9a 2d 31 f5 30 84 7d 78 28 b4 6d fb 2c fd 5d 16 7b 30 b2 f5 03 6f a9 a7 66 ab 05 4a e1 d1 78 b2 b5 c2 c8 1f 52 56 35 ff 00 92 89 fd b6 9f 5b 65 d5 75 fa d8 59 6f 6e 1b 2a Data Ascii: sC`$@P4ScD?ecAa;2R j{4YPLvepg-QQ40RS2!c?S+M3;J$hL>NvUT"eq!}\|VV>.Wf?0%h-10}x(m,]{0ofJxRV5[euYon*
2024-04-24 05:32:59 UTC	14935	IN	Data Raw: 55 fe ef 87 08 f1 c8 72 7b a9 77 8e 22 30 36 40 58 e6 96 ef 28 f7 87 8d a2 08 41 a3 82 a0 1e 24 d3 0c 0e 3c 52 10 3f 48 0e 67 5f 11 f4 4f 35 5e 3b b7 68 1d 82 a4 bb cb 0a 21 b9 dd 17 5d 73 59 cb 40 bf 7a 65 4d 30 4e ca 2a 48 7e cd 84 35 77 5d 32 b8 64 1e 65 ca 5e e6 0e a0 ae 22 e2 7c f2 51 b7 40 33 9f 92 73 64 35 d1 e1 72 2e a4 19 20 7c 4f 45 c4 c8 71 19 76 9a 22 d9 76 05 d8 c8 44 e5 cd e5 72 2d 14 66 a6 e1 5b 51 81 ad 1e e7 25 6b 40 21 70 f0 d3 19 85 6b 49 6b 49 e7 a7 92 c3 a6 4c 6a b1 30 31 8c 21 49 95 ec 02 37 56 30 1a 93 ab 80 85 60 8c 8e 21 32 8b e9 11 78 d9 c9 82 ab db c3 cd 54 87 b8 3a 72 0f 35 63 1b 97 37 ce 13 7b de 33 b8 62 f6 4c e1 3e ec ab 5a ee 1d 87 34 c0 e3 07 4e 6a 5c 4b d9 ab 42 0f a6 1b b8 87 a7 5a e7 17 5b 9b 76 f5 4c a1 51 a7 b8 b7 3b Data Ascii: Ur{w"06@X(A$<R?Hg_O5^;h!]sY@zeM0N*H~5w]2de^"\|Q@3sd5r. \|OEqv"vDr-f[Q%k@!pkIkILj01!I7V0`!2xT:r5c7{3bL>Z4Nj\KBZ[vLQ;
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: da 68 91 01 57 64 b4 ae 0a b9 f8 80 fa 90 05 79 9d 8f ea 8d 5b e6 30 db 88 ff 00 b7 99 c7 db 2c 30 63 bf 49 9d a5 54 30 d3 78 96 03 32 e9 3f ec 97 79 c2 5b e8 96 5f 14 fc 45 cd 19 c9 a8 09 98 ef c7 b9 51 94 b4 4b 10 d0 1b 7d 25 80 00 77 28 51 4c 7f 31 d2 ae 52 e6 67 52 d5 f0 73 17 c1 5b 36 0b a4 ad 87 5b 7b 9b 56 c8 6b d4 0a cd b3 7e 52 a6 bd 8d f1 2c 43 e5 92 50 dc 27 d1 2f f2 47 71 a8 c5 e2 0b ae 96 98 0f 8b 81 60 ae 4f 18 97 8b 1b ed c5 aa 5d e4 4c e5 d4 6b 2e 5a 5c 75 3b a1 62 9e 50 e0 c5 e7 e6 f7 f5 84 9e 81 b5 c5 25 eb 7c ab 2a 8c 41 45 7f 29 60 42 aa 51 bb fd b2 b5 af c6 4c 0b 96 f1 57 19 07 9f bf e0 80 c2 ec eb bf 2c 41 86 6e 54 ee a7 d9 dc 14 ac 8b 8a d1 7c 4c 9a a7 93 2a 93 92 bf 98 95 83 66 a6 01 2a 93 30 f7 11 a1 87 b9 89 76 f4 41 a2 ad 8e 20 Data Ascii: hWdy[0,0cIT0x2?y[_EQK}%w(QL1RgRs[6[{Vk~R,CP'/Gq`O]Lk.Z\u;bP%\|AE)`BQLW,AnT\|Lf*0vA
2024-04-24 05:32:59 UTC	16333	IN	Data Raw: 9d 57 f1 42 d0 17 b4 22 8a 39 ed cd 71 31 49 95 b8 c8 fb fc 71 39 1c de d0 f9 0a c7 07 31 46 81 58 35 dc db 4e 6b 7e 61 d0 84 4d 61 ed db 29 ad 41 ee 09 a4 d9 b4 b8 43 57 cf 28 d0 b5 7d c4 bd 8f 1e 65 26 81 ce bd 3f a7 e6 cf bd 7e 96 95 c0 31 4e d4 fa 86 21 fa ef ca 7c 4d bd 1f 87 f4 fb cf eb da e3 f8 4d 90 f5 02 d7 13 92 a2 36 48 39 fe a3 f0 22 29 6f 7c ac 57 32 95 fd 77 e6 27 50 f1 9f 89 68 5b 8d 66 10 57 ef c7 f3 70 e9 06 d1 35 5c 51 17 ae da ef ec c5 0c a7 fb 17 0a c3 cc ad d7 50 cb 81 a6 a5 2a 42 9b 79 98 76 41 da fe 61 1d 5b 8b d7 d6 56 05 35 8b f7 9e 4b 00 35 f7 94 1b 2d b7 a4 c5 14 5a 7f 29 80 ef 23 07 e7 30 5c 63 c8 fa cc 11 b2 5f 28 81 54 ad 4a ab f2 8a ec 0b eb 38 5f 9b 0e a3 1c 30 18 4b b0 a8 3a ca 2b 1b eb 15 68 fa 65 3b a2 ad 1b 61 a5 e6 c2 Data Ascii: WB"9q1Iq91FX5Nk~aMa)ACW(}e&?~1N!\|MM6H9")o\|W2w'Ph[fWp5\QP*ByvAa[V5K5-Z)#0\c_(TJ8_0K:+he;a
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: c6 af 81 29 79 d7 4e b5 16 d4 98 41 83 98 b8 7d da be 57 ee 17 53 ae 9a cf 20 c4 01 2d 55 5c 0e a1 29 9c 2d 03 86 a5 db be 53 43 6c 12 c8 1d a3 2d 2f f1 1c 0b 69 57 ea c4 a5 07 b7 c4 cb f4 14 be 95 ba f7 0d 95 bb 27 93 e2 09 83 46 46 4f f5 0b 2d 39 1b b1 c5 b5 05 73 3e 21 e7 5e 25 d5 89 38 15 c4 b5 a9 eb e2 4c 85 c4 29 c7 02 71 16 f7 6c 17 97 d6 65 aa a8 64 69 e6 c8 dd 41 6d 44 96 b4 5a ed 77 14 0d 87 e5 2d 94 ed 09 fa a3 af 14 c9 84 bf 95 2c f7 ee 3c dd c3 73 8f 72 f1 c8 6a aa ea 08 8a f6 97 72 ba 8b 00 73 9a ca 6f 14 73 57 bc 54 bb 21 e8 30 e9 30 95 2c b6 aa bd bc 42 a4 10 42 02 77 99 7a ea 10 f0 be e1 b4 9a d9 bc 55 ca b0 e1 99 92 7d 02 80 63 f6 21 61 c2 9b 7f 60 3f 11 e8 c5 a6 00 43 3b 8c 8e 8d ef cf dc ea 32 bb c2 a1 1e 38 f8 82 69 20 00 ab 7c 71 32 Data Ascii: )yNA}WS -U\)-SCl-/iW'FFO-9s>!^%8L)qlediAmDZw-,<srjrsosWT!00,BBwzU}c!a`?C;28i \|q2
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 26 af 8f ef ac d7 c3 01 81 71 7c b1 a8 10 01 eb 37 e3 c1 db 32 d8 30 64 fe 20 37 f6 c6 ce 04 23 b5 99 70 a5 92 9c 0a 4d f4 60 a7 12 eb 38 20 e5 5f 9e a6 57 de 3f 13 23 69 95 c8 cb 72 16 5d 39 61 16 98 61 43 7a 4a 85 94 c0 54 ab 7e 6a 35 9f b4 25 08 30 f4 22 eb c3 ad df 8f 8c 16 c5 cc b3 5c 39 3e cd f8 c4 8d 74 b3 df de 20 1b 9c df e2 66 36 b9 50 31 f3 30 04 bb a8 2b 14 1e 39 85 41 77 5e 30 54 20 cd 1f cc 38 93 f2 f1 a5 4d 46 81 72 cb 00 e2 68 38 33 5b 8a 86 07 68 88 17 ba b8 ed e3 33 ec af b7 84 50 89 fb 08 6f c3 01 41 a8 2c d7 2e 62 e2 5c e6 bc 3d ab 5e 13 28 4b 60 ac 3b e3 10 32 f7 ba e2 5f 08 98 c5 62 be ae b7 a2 55 5b 6f d2 5e c4 02 27 1b 83 d4 06 99 78 23 52 8d 2e fa 6a 65 34 f9 b9 5b da ff 00 10 c0 ae 70 4f cc a3 05 da 78 c1 11 5d c6 e5 b1 56 c1 44 Data Ascii: &q\|720d 7#pM`8 _W?#ir]9aaCzJT~j5%0"\9>t f6P10+9Aw^0T 8MFrh83[h3PoA,.b\=^(K`;2_bU[o^'x#R.je4[pOx]VD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50116	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	592	OUT	GET /v/t39.30808-6/434204982_732142639100127_4554239773083886536_n.jpg?stp=dst-jpg_s600x600&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kCAh3UDLwKEAb5RJjfL&_nc_ht=scontent-sjc3-1.xx&oh=00_AfAgqAcwDkNJxwB1YxewNbnMlGMa-eyceKGA_bOMDCHvBA&oe=662E5F3B HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	662	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 28 Mar 2024 22:06:36 GMT X-Needle-Checksum: 926203676 thrift_fmhk: GBCloSge1S+6N19sbqlOGhlgFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=24717699 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:58 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 42686
2024-04-24 05:32:59 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:32:59 UTC	15047	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 31 30 31 30 30 30 30 63 37 31 31 30 30 30 30 33 34 32 36 30 30 30 30 36 65 32 62 30 30 30 30 31 35 33 30 30 30 30 30 38 39 34 61 30 30 30 30 33 32 36 34 30 30 30 30 30 33 36 38 30 30 30 30 66 63 36 63 30 30 30 30 32 32 37 31 30 30 30 30 62 65 61 36 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a71010000c7110000342600006e2b000015300000894a00003264000003680000fc6c000022710000bea60000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 43 78 86 f9 f4 aa ac 41 da c1 ed 7d 45 3a e5 7e b1 7b 14 b1 3a cb d8 3b b2 e3 24 56 cc e4 85 ab 24 35 53 92 26 a9 49 15 56 46 bf 96 74 c8 45 f3 9a 24 89 57 f2 1f 47 8b e1 c7 23 15 c8 6f 10 df 3e 95 55 88 3b 58 3d af a8 96 b9 5f ac 5e c5 2c 4e b2 f6 0e ec f8 c9 15 b3 39 21 6a c9 0d 54 e4 89 aa 52 45 55 92 21 af 05 12 a4 fc 3f f9 a6 f2 39 0d 3f 3a 88 ba 93 35 c8 6f 10 df 3e 95 55 88 3b 58 3d af a8 a7 5c af d6 2f 62 96 27 59 7b 07 76 7c 64 8a d9 9c 90 d5 64 86 aa 72 44 d5 29 22 aa c8 b4 7c e8 93 f0 c5 d7 f6 92 19 bf 13 33 ea 4c d7 21 bc 43 7c fa 55 56 20 e5 60 f6 be 1d 45 3a e5 7e b1 70 96 28 ff 00 9e 60 ee cf 8c 91 3b 33 92 1a ac 90 d5 4e 48 9a a5 24 55 59 21 95 fc f3 5b 24 3b 9f 24 fe d2 36 8f 91 1d 49 9a e4 37 88 6f 9f 4a aa c4 1c ac 1e d7 d4 53 ae 5f cd Data Ascii: CxA}E:~{:;$V$5S&IVFtE$WG#o>U;X=_^,N9!jTREU!?9?:5o>U;X=\/b'Y{v\|ddrD)"\|3L!C\|UV `E:~p(`;3NH$UY![$;$6I7oJS_
2024-04-24 05:32:59 UTC	11254	IN	Data Raw: 52 ad 29 71 98 3d ee 17 ab c6 c7 16 2f a4 c0 b8 be 8a 22 9b 64 b5 a1 97 2c ab d0 1e 31 fe 0e 82 c4 8c 29 8c 4b 96 da 4d fa d7 5a 61 a7 ca c2 08 6d 71 7b 40 c1 03 ec ca 91 b7 3c 1c 47 05 41 92 c6 b4 37 7a e0 e2 61 ce 1b 18 02 97 81 8e 11 33 1b c2 61 70 aa b8 0b 3c 70 c2 84 dc 0d e0 cd 17 0a 66 5b da bb 59 54 5c aa 22 53 58 fd c3 1e 12 da 69 86 ce 8c 17 97 18 fb e1 fc 0b 10 0f d3 7d b3 0b b1 d5 81 ab 82 88 39 b3 19 20 ed 2c 7d b8 85 49 83 ef c4 58 ac 77 f7 c4 a2 f6 fd f8 97 8f 97 fe 73 a9 f7 fb 40 fc 2f 1f d2 78 0d fd f1 2a d5 af d7 53 40 76 78 7d 22 8d e5 dd ff 00 ce 2f 42 c1 d7 fa e5 65 55 5c 9f d3 30 d7 86 b8 fd 20 54 e6 df dc 96 ee ee af f5 c3 b2 f4 af e2 07 d8 6c ff 00 19 61 cd f5 e2 09 4a c7 c9 f4 9c f9 fe fc 41 5f ae f2 8d ea e5 74 7f 5c 5c 42 cb bd Data Ascii: R)q=/"d,1)KMZamq{@<GA7za3ap<pf[YT\"SXi}9 ,}IXws@/x*S@vx}"/BeU\0 TlaJA_t\\B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50117	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:58 UTC	680	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=7&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:59 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:59 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:59 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50118	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	1233	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=a&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 5406 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydPSHsJIkcdUrCMZP sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:59 UTC	5406	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 50 53 48 73 4a 49 6b 63 64 55 72 43 4d 5a 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 33 39 33 36 37 37 37 38 32 32 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 50 53 48 73 4a 49 6b 63 64 55 72 43 4d 5a 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c ed 5b 59 Data Ascii: ------WebKitFormBoundarydPSHsJIkcdUrCMZPContent-Disposition: form-data; name="ts"1713936777822------WebKitFormBoundarydPSHsJIkcdUrCMZPContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamx[Y
2024-04-24 05:32:59 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:59 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:59 UTC	1833	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50119	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	680	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=8&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:59 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:59 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:59 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50120	104.244.42.2	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	976	OUT	GET /1.1/jot/client_event.json HTTP/1.1 Host: api.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171393674004282413; guest_id_ads=v1%3A171393674004282413; guest_id=v1%3A171393674004282413; personalization_id="v1_ZCmPmPdTE0HbIeAo/npOVQ=="; gt=1783006035076403702; _ga=GA1.2.841105326.1713936757; _gid=GA1.2.500504037.1713936757; att=1-RkJA5y8JhNC6IKktHMFfPg76KIUNSq2gMjuXAJkt; _twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCP2flw6PAToMY3NyZl9p%250AZCIlMGY3MzQ0MjMyYzNlYTlhZGZiNzkyYzc4OGE4Y2Y4OTk6B2lkIiVlMmI2%250AMDRiMGI1MTIwNzliMDQzNjgzMGNmMjkzZWIyOA%253D%253D--6f7031030e1ecb0473abd3b0ab7161d3d2ad3658
2024-04-24 05:32:59 UTC	516	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 24 Apr 2024 05:32:59 UTC perf: 7402827104 allow: CONNECT, GET, POST, PUT, DELETE, OPTIONS, PATCH, HEAD, TRACE server: tsa_p cache-control: no-cache, no-store, max-age=0 content-length: 53 x-transaction-id: 2454b07a932d63ae timing-allow-origin: https://twitter.com, https://mobile.twitter.com strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: a92701a5c8dad8d82361c54098ecc02bdded944be5765f83fc80f0924255f8ee connection: close
2024-04-24 05:32:59 UTC	53	IN	GET is not allowed on path /1.1/jot/client_event.json

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50122	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	762	OUT	GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AfAhrUF3wEe3teFtCcM4DS7mXy23jdfSmXbYJsT5bcZaRg&oe=66500BC7&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	954	IN	HTTP/1.1 200 OK content-digest: adler32=2117721780 Content-Type: image/x.fb.keyframes ETag: 2867499861726367659 x-manifold-obj-blobsizebytes: 43036 x-manifold-obj-canonicalpath: flat/base:v7:support.kf x-manifold-obj-ctime: 1611967373 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"613557422527858","color":"f7b125","__ctime":"1611967373","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43036
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 00 00 0c 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 08 00 00 00 2c 00 00 00 74 0f 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 01 00 00 00 0b 00 00 00 01 01 01 00 02 01 00 01 01 01 01 00 01 00 00 00 1c 00 00 00 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 0c 00 00 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 05 00 00 00 28 00 00 00 e8 08 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 10 00 00 00 08 00 00 00 01 00 00 00 00 00 01 01 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 79 43 00 00 21 43 9f 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 a1 08 03 00 00 00 32 4c e9 38 00 00 00 42 50 4c 54 45 00 00 00 e2 69 18 e2 Data Ascii: KEYF( $$,t4C4C@pB( $$(4C4C@pByC!CPNGIHDR2L8BPLTEi
2024-04-24 05:32:59 UTC	15309	IN	Data Raw: 3b db cb d2 21 df d2 68 7e 76 d2 70 aa 3d df 38 be c9 c1 d5 57 79 fe bb d5 69 de df d9 5e 6f 3f d2 e4 a9 96 a0 33 db 8b 7c d0 f1 e6 be ca f3 37 0a 48 ff 05 f7 ce 17 40 12 d7 4f 75 dd c8 3f 5c fa df 76 ce b0 a7 6d 20 06 c3 5d 4e 15 1a a4 da 42 bb ff ff 57 97 d8 8e df ba 97 b1 00 17 c7 04 3f 54 48 05 f1 e1 c1 89 e3 34 ef 1d 37 fe aa 88 fa 1d 3f f8 57 6f 83 38 da db 36 34 2c 7a fd 2f 40 1f 80 f2 ff 2b 2e c7 3a cd ad 5b 98 63 7c b7 9f 46 ee 08 ba 1b 2e e5 95 78 fb 71 06 45 df 8f c2 e2 7c 92 af 1d d8 db 3f 51 f7 a7 fc 30 e2 8b 25 8f 33 ce b4 15 7f 72 15 bf 2b fa 2e ea f0 86 f8 6d 59 fc 98 45 97 8a bf 72 fe 78 70 10 ef f0 9c 6d bf a2 17 6e ea 9e e2 75 76 66 9f 26 b7 2c be b9 7b fd 70 d5 19 84 d2 ae 17 cd 81 6d aa 5d 7f 04 7d f6 bf a8 17 9b 48 7b fe 3d 38 a5 4f Data Ascii: ;!h~vp=8Wyi^o?3\|7H@Ou?\vm ]NBW?TH47?Wo864,z/@+.:[c\|F.xqE\|?Q0%3r+.mYErxpmnuvf&,{pm]}H{=8O
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 00 00 18 00 00 00 20 01 00 00 30 01 00 00 c0 02 00 00 48 04 00 00 14 00 00 00 90 b5 ff ff 0c 00 00 00 24 00 00 00 40 00 00 00 06 00 00 00 d4 00 00 00 ac 00 00 00 a0 00 00 00 78 00 00 00 6c 00 00 00 44 00 00 00 07 00 00 00 30 96 fc 3d 7e b1 64 3e 44 44 c4 3e 74 da 00 3f d7 a3 30 3f 82 4e 5b 3f 03 9d 76 3f 07 00 00 00 7c d9 20 be 0b be 75 be 7c d9 20 be 7c d9 20 be 00 00 00 00 00 00 00 00 7c d9 20 be 06 b4 ff ff 08 00 00 00 10 00 00 00 70 9a ff ff 00 00 80 3f c0 3e 8e 3c 7c 9a ff ff 18 70 b4 b2 eb 8c 68 3e aa b4 ff ff 00 00 00 01 32 b4 ff ff 08 00 00 00 10 00 00 00 9c 9a ff ff 05 00 80 3f 0b f2 a7 3e a8 9a ff ff 22 22 04 b5 55 1f 2e 3f d6 b4 ff ff 00 00 00 01 5e b4 ff ff 08 00 00 00 10 00 00 00 c8 9a ff ff 00 00 80 3f ab aa 2a 3f d4 9a ff ff ab aa 2a 3e ab Data Ascii: 0H$@xlD0=~d>DD>t?0?N[?v?\| u\| \| \| p?><\|ph>2?>""U.?^??>
2024-04-24 05:32:59 UTC	9842	IN	Data Raw: ff ff d2 4f a4 42 eb c7 16 43 e8 d9 ff ff 96 3d aa 42 c3 9a 1b 43 f4 d9 ff ff 52 13 a2 42 65 58 11 43 20 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 da ff ff aa 6d b1 42 79 71 1f 43 20 da ff ff 56 70 ae 42 4c cf 20 43 2c da ff ff 8a a4 ae 42 9f f4 1d 43 f8 d9 ff ff 04 00 00 00 40 da ff ff c6 fe ab 42 9b 0e 20 43 22 da ff ff 04 00 00 00 06 00 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 90 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 84 da ff ff 58 25 a8 42 55 ce 1b 43 90 da ff ff f2 3e a7 42 e3 04 19 43 9c da ff ff 1e 0b aa 42 6e 37 1f 43 c8 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 bc da ff ff 78 96 9a 42 f0 e2 11 43 c8 da ff ff 9e 52 99 42 63 94 11 43 d4 da ff ff 32 f4 9f 42 02 Data Ascii: OBC=BCRBeXC mByqC VpBL C,BC@B C"0\|@ X%BUC>BCBn7C xBCRBcC2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50124	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	556	OUT	GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AfDYWr_jHKdDH1-MmgHxR3uRWnZ9KnBaTGYBEecV00bNkw&oe=665011E6&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	916	IN	HTTP/1.1 200 OK content-digest: adler32=2160514895 Content-Type: image/x.fb.keyframes ETag: 7343664923330879133 x-manifold-obj-blobsizebytes: 6756 x-manifold-obj-canonicalpath: flat/base:v7:dorothy.kf x-manifold-obj-ctime: 1611967366 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1663186627268800","color":"7e64c4","__ctime":"1611967366","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6756
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 31 43 00 00 31 43 ab aa 22 40 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 01 00 00 00 30 00 00 00 00 00 2a 00 1c 00 18 00 04 00 00 00 00 00 14 00 10 00 0c 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 48 00 00 00 14 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 01 00 00 00 70 e7 ff ff 04 00 00 00 6c e6 ff ff 9a 99 b9 3f 9a 99 b9 3f 84 e7 ff ff 00 00 b1 42 8c e7 ff ff 00 00 b1 42 94 e7 ff ff 04 00 00 00 88 e7 ff ff 09 00 00 00 0c 16 00 00 f8 12 00 00 10 10 00 00 28 0d 00 00 40 0a 00 00 58 07 00 00 Data Ascii: KEYF@1C1C"@A0H$(,pl??BB(@X
2024-04-24 05:32:59 UTC	5255	IN	Data Raw: 00 00 00 10 00 00 00 94 eb ff ff aa 00 c0 3e ab aa 2a 3f 48 ee ff ff ab aa 2a 3e 72 ee ff ff 08 00 00 00 10 00 00 00 b4 eb ff ff 00 00 80 3f ab aa 2a 3f 68 ee ff ff ab aa aa 3e 92 ee ff ff 08 00 00 00 10 00 00 00 d4 eb ff ff 00 00 80 3f ab aa 2a 3f e0 eb ff ff 8e ff 7f 3e ab aa aa 3e f8 ec ff ff 04 00 00 00 f4 eb ff ff 48 e1 3a 3f 48 e1 3a 3f 0c ed ff ff d0 9d c5 40 14 ed ff ff c0 1a 5f c0 1c ed ff ff 04 00 00 00 18 ec ff ff 94 e3 8d 3e b7 f2 2e 41 02 00 00 00 d4 00 00 00 04 00 00 00 ae ed ff ff 18 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 34 00 00 00 0d 00 00 00 58 ed ff ff 04 00 00 00 84 ed ff ff 00 d2 87 9d 68 ed ff ff 02 ef ac 40 70 ed ff ff cf 75 be 3f 78 ed ff ff 04 00 00 00 6c ed ff ff 84 ed ff ff 04 00 00 00 56 ed ff ff 04 00 00 00 03 00 00 00 Data Ascii: >?H>r??h>??>>H:?H:?@_>.A$(,4Xh@pu?xlV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50127	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	552	OUT	GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AfAc1tv-PAaYO--X3sZzlpw-dYVdCaNRKAvJDHaRMHBnvw&oe=66500E71&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	914	IN	HTTP/1.1 200 OK content-digest: adler32=1456939275 Content-Type: image/x.fb.keyframes ETag: -4149138764619414100 x-manifold-obj-blobsizebytes: 8724 x-manifold-obj-canonicalpath: flat/base:v7:love.kf x-manifold-obj-ctime: 1611967371 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1678524932434102","color":"f33e58","__ctime":"1611967371","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8724
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 ac 11 00 00 00 00 34 43 00 00 34 43 00 00 40 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 6d 11 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ 4C4C@@pB4C4CmAdobe
2024-04-24 05:32:59 UTC	7223	IN	Data Raw: 18 e9 66 0c 74 b3 06 3a 59 87 37 c6 ef f3 4b 30 e0 e8 a0 85 26 52 78 42 8b 10 1a a5 b1 3f 35 34 cb f4 34 3f 05 2d 99 e1 67 c0 f8 87 33 22 4a bc f8 a1 f8 a1 ff 00 a9 eb ea ac 74 df 1c af b1 d5 b6 f0 ff d6 f6 7c 6a 7b 0e 54 42 07 c5 1c d3 fe 46 a7 f6 5f c4 27 a7 d4 27 7c fe 94 72 b1 05 45 d4 b7 28 e1 7b 06 28 0d 14 f8 2b 12 e9 1f 38 4e 6c 60 07 54 b6 e3 87 66 46 1a d9 5b 30 e9 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c3 18 e1 2c c3 81 8f de bd 54 b3 0e 11 22 8f 9a 5b 33 f3 54 cc c4 ea 2b d9 4b 62 7e 6a d9 79 dc ac e4 28 b5 a3 41 a3 ff 00 d4 e8 52 25 39 e6 a5 ed f1 c6 eb 56 ed 87 ff d7 93 c5 e6 f1 27 04 3a e9 09 a0 52 e7 c4 57 f0 a9 eb f6 fa 8b fa 73 fb 25 e2 d2 94 3a Data Ascii: ft:Y7K0&RxB?544?-g3"Jt\|j{TBF_''\|rE({(+8Nl`TfF[0t=K0c,t=K0c,t=K0c,,T"[3T+Kb~jy(AR%9V':RWs%:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50126	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	760	OUT	GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AfAghl1gEHN29C2ZODbbICogRb1L1XF35YmRNUxKYWYl4w&oe=66501230&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	951	IN	HTTP/1.1 200 OK content-digest: adler32=630572011 Content-Type: image/x.fb.keyframes ETag: 4980362363275973831 x-manifold-obj-blobsizebytes: 34560 x-manifold-obj-canonicalpath: flat/base:v7:sorry.kf x-manifold-obj-ctime: 1611967372 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"908563459236466","color":"f7b125","__ctime":"1611967372","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 34560
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 33 33 83 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C33@pB4C4CAdobe
2024-04-24 05:32:59 UTC	15251	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-04-24 05:32:59 UTC	16384	IN	Data Raw: 84 ba ff ff b8 7e f2 42 97 60 1d 43 2c bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a4 ba ff ff f8 d3 e6 42 9a a8 20 43 b0 ba ff ff 32 06 e4 42 0c e1 1f 43 bc ba ff ff 92 fa ea 42 9a a8 20 43 64 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 dc ba ff ff d4 a7 db 42 4e f1 1d 43 e8 ba ff ff 8a df da 42 35 af 1d 43 f4 ba ff ff b0 50 e1 42 9d 40 1f 43 9c bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 bb ff ff 8a df da 42 f9 11 1d 43 20 bb ff ff d4 a7 db 42 ec cf 1c 43 2c bb ff ff 8a df da 42 97 60 1d 43 d4 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 4c bb ff ff 32 06 e4 42 27 e0 1a 43 58 bb ff ff f8 d3 e6 42 93 18 1a 43 64 bb ff ff b0 50 e1 42 a4 80 1b 43 0c bc ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 Data Ascii: ~B`C, B C2BCB Cd BNCB5CPB@C BC BC,B`C L2B'CXBCdPBC
2024-04-24 05:32:59 UTC	1424	IN	Data Raw: d0 26 27 c1 b8 ff ff ff 08 00 00 00 00 00 00 01 94 fa ff ff 0d 04 5c c1 d0 26 27 c1 d0 ff ff ff 08 00 00 00 00 00 00 01 ac fa ff ff d2 ab 02 c1 12 bc 0e c1 e8 ff ff ff 08 00 00 00 00 00 00 01 c4 fa ff ff 33 10 50 c0 5a fe 1c 40 08 00 0c 00 0b 00 04 00 08 00 00 00 08 00 00 00 00 00 00 01 e4 fa ff ff 33 10 50 c0 5a fe 1c 40 54 fb ff ff 04 00 00 00 f8 fa ff ff 40 37 47 c1 d0 26 13 c1 6a ff ff ff 08 00 00 00 0c 00 00 00 74 fb ff ff 00 00 80 3f 26 fb ff ff 9a 99 19 3f 86 ff ff ff 08 00 00 00 0c 00 00 00 90 fb ff ff 00 00 80 3f 42 fb ff ff 9a 99 19 3f a2 ff ff ff 08 00 00 00 0c 00 00 00 ac fb ff ff 00 00 80 3f 50 fb ff ff ab aa 2a 3e ab aa 2a 3e c2 ff ff ff 08 00 00 00 10 00 00 00 68 fb ff ff 55 55 55 3f 55 55 55 3f 82 fb ff ff 9a 99 19 3f e2 ff ff ff 08 00 00 Data Ascii: &'\&'3PZ@3PZ@T@7G&jt?&??B??P>>hUUU?UUU??

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50128	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	758	OUT	GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AfDaUubXx4OfTJn4DccajD9sBj7XD81SszpxLqsNxNf20Q&oe=664FF6D7&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	952	IN	HTTP/1.1 200 OK content-digest: adler32=649957559 Content-Type: image/x.fb.keyframes ETag: -4761830269030928794 x-manifold-obj-blobsizebytes: 32856 x-manifold-obj-canonicalpath: flat/base:v7:anger.kf x-manifold-obj-ctime: 1611967365 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"444813342392137","color":"e9710f","__ctime":"1611967365","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 32856
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 3c 28 00 00 00 00 34 43 00 00 34 43 66 66 76 40 00 00 70 42 01 00 00 00 02 00 00 00 34 15 00 00 04 00 00 00 dc ea ff ff 0c 00 00 00 00 00 34 43 00 00 34 43 0e 15 00 00 ff d8 ff db 00 84 00 03 02 02 02 02 02 03 02 02 03 04 03 02 03 04 05 03 03 03 03 05 05 04 04 05 04 04 05 07 05 06 06 06 06 05 07 07 08 08 09 08 08 07 0b 0b 0c 0c 0b 0b 0c 0c 0c 0c 0c 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 01 03 03 03 05 05 05 0a 07 07 0a 0f 0c 0a 0c 0f 12 0e 0e 0e 0e 12 11 0e 0e 0e 0e 0e 11 11 0e 0e 0e 0e 0e 0e 11 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 Data Ascii: KEYF$ <(4C4Cffv@pB44C4CAdobed
2024-04-24 05:32:59 UTC	15251	IN	Data Raw: 7b 87 ba ce bf 35 f5 e9 b1 cf b4 a4 cf 03 63 a7 01 a0 2f a9 50 f9 9e 5d 36 40 02 a6 a5 a5 42 6c a9 52 2a 32 84 a8 81 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 04 0c 81 2a 4c 14 e4 70 21 4a 21 52 21 88 b9 d3 b6 68 c8 f5 f3 07 75 2e 65 92 0f a7 1a 98 2c 5b 2c 5b 91 51 61 4a e4 62 51 24 49 ff d5 cc 3a 3e 50 5c 7c 87 55 c9 0d 45 55 84 3b 01 16 4b aa 16 86 b7 5f 53 d4 ac e3 59 56 a2 21 75 fc 38 19 36 3c 00 a2 0b 0a 84 e2 51 dd 20 a6 06 5d d2 04 11 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a9 0c bb a4 08 20 64 dd 20 94 42 da 72 1c 0a a9 10 b8 d3 12 f6 0c ce 6f 7e Data Ascii: {5c/P]6@BlR2%EFPBTTeQQ%EFPBTTeQQ%EFPBTTeQLp!J!R!hu.e,[,[QaJbQ$I:>P\\|UEU;K_SYV!u86<Q ]@@@@@@@@@@@@@ d Bro~
2024-04-24 05:32:59 UTC	16104	IN	Data Raw: 03 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 d6 ce ff ff 08 00 00 00 10 00 00 00 58 c1 ff ff 55 55 55 3f 55 55 55 3f 72 c1 ff ff 00 00 80 3f f6 ce ff ff 08 00 00 00 0c 00 00 00 dc c1 ff ff 00 00 80 3f 8e c1 ff ff ab aa aa 3e 88 c1 ff ff 7a f9 c4 42 30 dc 58 43 94 c1 ff ff 63 86 c6 42 84 07 59 43 a0 c1 ff ff 7a f9 c4 42 30 dc 58 43 20 c4 ff ff 0c 00 00 00 14 00 00 00 20 00 00 00 02 00 00 00 48 00 00 00 24 00 00 00 03 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 72 cf ff ff 08 00 00 00 10 00 00 00 f4 c1 ff ff 55 55 55 3f 55 55 55 3f 0e c2 ff ff 00 00 80 3f 92 cf ff ff 08 00 00 00 0c 00 00 00 78 c2 ff ff 00 00 80 3f 2a c2 ff ff ab aa aa 3e 24 c2 ff ff 0d 96 b0 Data Ascii: ><N6>?`P@XUUU?UUU?r??>zB0XCcBYCzB0XC H$><N6>?`P@rUUU?UUU??x?*>$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50129	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	552	OUT	GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AfABJ8SwyWeSMuXofMm_jfkH1HTgW2Sg7J402E--jmbvjg&oe=66501200&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	916	IN	HTTP/1.1 200 OK content-digest: adler32=1060390509 Content-Type: image/x.fb.keyframes ETag: -1103541200696250300 x-manifold-obj-blobsizebytes: 13996 x-manifold-obj-canonicalpath: flat/base:v7:like.kf x-manifold-obj-ctime: 1611967368 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1635855486666999","color":"2078f4","__ctime":"1611967368","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 13996
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 5c 13 00 00 00 00 34 43 00 00 34 43 00 00 00 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 1e 13 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ \4C4C@pB4C4CAdobe
2024-04-24 05:32:59 UTC	12495	IN	Data Raw: b8 ff 00 ae af 8d c5 13 3d b1 a9 ce a3 5b df 9a da 61 d5 76 ac 6f dd 67 31 2e 7b 74 75 8f b5 85 d5 3a 65 31 0b 84 9e 00 fd d5 7a 95 3a 5c 24 b7 8e a9 93 30 96 5d d3 27 50 ee 53 d5 3a 3a 87 72 6e a3 a4 74 32 75 2a 3a 94 74 32 ee 9d 49 d0 cb ba 9e 93 d4 39 94 a7 47 50 e6 5d d4 e5 3d 40 cb 7f 14 c9 98 54 e7 db c7 c9 32 66 15 3a 45 31 09 82 d2 3f 9e ea d1 12 d2 21 9d 33 ae 0e bf 75 a4 43 7a 74 46 1a c7 51 d4 32 56 1d 1b ef 37 5d 5b e2 15 a6 9d c7 4d 2f c7 16 ab da 32 a5 b2 31 b2 31 dc 4c 78 05 a7 62 b9 26 b3 0f cc 9a 74 9e 5d d4 74 8c c3 ff d5 f6 0f a9 6c 6c 7c 8f 36 6b 01 2e 3b 0d 57 d0 c4 71 f6 f0 42 29 32 f1 2f ab 7d 55 44 93 3f f5 9d 07 41 e0 17 64 f1 f5 1d 3f 4a 94 ea 3a 69 40 f3 a6 ff 00 b2 ca 68 ca f0 d3 8d f6 b2 a6 18 4d 4c 36 53 e8 ab 34 65 30 b8 4a Data Ascii: =[avog1.{tu:e1z:\$0]'PS::rnt2u*:t2I9GP]=@T2f:E1?!3uCztFQ2V7][M/211Lxb&t]tll\|6k.;WqB)2/}UD?Ad?J:i@hML6S4e0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50130	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	424	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:32:59 UTC	1412	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:32:59 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936778; path=/; domain=.facebook.com; httponly Set-Cookie: fr=0UXlf7ZgyzrFgd7b4..BmKJmL..AAA.0.0.BmKJmL.AWUVWgGOmUk; expires=Tue, 23-Jul-2024 05:32:59 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:32:59 UTC	1965	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:32:59 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:32:59 UTC	2554	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4b 75 71 30 6b 59 4e 76 62 6d 4b 56 67 39 6b 31 2d 5f 51 57 33 49 48 50 38 6e 63 59 68 53 59 49 49 41 52 6f 4c 33 4e 33 2d 4b 74 74 32 67 5f 48 44 4e 42 4c 34 50 6e 78 51 4a 74 51 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 48 36 6c 59 4b 4a 6a 65 67 48 6d 6f 63 30 66 39 65 68 79 74 65 68 6f 75 6a 67 56 64 55 57 4e 55 67 51 70 67 2d 6e 4c 4a 30 59 5a 64 31 48 4e 56 2d 52 35 47 75 77 42 61 76 6f 79 54 4e 55 6d 7a 71 5a 5a 53 6d 4d 33 52 63 4b 68 41 62 65 62 56 33 72 4d 5f 79 32 59 2d 67 5a 4f 77 76 32 6a 41 64 50 4d 77 74 50 72 58 4b 58 76 6b 44 6e 41 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcKuq0kYNvbmKVg9k1-_QW3IHP8ncYhSYIIARoL3N3-Ktt2g_HDNBL4PnxQJtQ"; e_clientaddr="AcJH6lYKJjegHmoc0f9ehytehoujgVdUWNUgQpg-nLJ0YZd1HNV-R5GuwBavoyTNUmzqZZSmM3RcKhAbebV3rM_y2Y-gZOwv2jAdPMwtPrXKXvkDnA"; e_fb_
2024-04-24 05:32:59 UTC	170	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 32 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 32 30 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=120, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-24 05:32:59 UTC	1330	IN	Data Raw: 31 64 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4b 45 76 37 45 61 6f 6b 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 1db8<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="KEv7Eaok">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 Data Ascii: y screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta proper
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: ":{"20935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":n
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 4b 74 70 42 43 42 34 Data Ascii: ",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"KtpBCB4
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 31 33 38 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 Data Ascii: oadingFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2138,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"transla
2024-04-24 05:33:00 UTC	286	IN	Data Raw: 4e 45 53 53 5f 44 4f 4d 41 49 4e 22 3a 66 61 6c 73 65 7d 2c 32 37 30 5d 2c 5b 22 4c 53 44 22 2c 5b 5d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 41 56 6f 79 6d 6f 65 36 51 73 34 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 30 33 38 32 36 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 39 39 34 35 36 38 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 37 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 Data Ascii: NESS_DOMAIN":false},270],["LSD",[],{"token":"AVoymoe6Qs4"},323],["SiteData",[],{"server_revision":1013003826,"client_revision":1012994568,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19837.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50131	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	552	OUT	GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AfD7Ym2hhKakU4zYqIkqPxEzmAAXm5W2WGsqzcqZEtJ-4g&oe=66502298&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	913	IN	HTTP/1.1 200 OK content-digest: adler32=1035192163 Content-Type: image/x.fb.keyframes ETag: 7938460552592410943 x-manifold-obj-blobsizebytes: 22168 x-manifold-obj-canonicalpath: flat/base:v7:wow.kf x-manifold-obj-ctime: 1611967376 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"478547315650144","color":"f7b125","__ctime":"1611967376","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 22168
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:32:59 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 89 88 a0 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-04-24 05:33:00 UTC	15255	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-04-24 05:33:00 UTC	5412	IN	Data Raw: 04 00 00 00 f4 ea ff ff 35 c0 d6 42 87 1b 22 42 01 00 00 00 3c 00 00 00 00 00 36 00 30 00 2c 00 04 00 00 00 00 00 24 00 20 00 1c 00 14 00 18 00 28 00 10 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 36 00 00 00 fc 12 00 00 00 00 00 00 30 00 00 00 08 05 00 00 0c 05 00 00 0c 05 00 00 1c 05 00 00 1c 05 00 00 1c 05 00 00 30 05 00 00 07 00 00 00 0c 00 14 00 10 00 0c 00 08 00 04 00 0c 00 00 00 10 00 00 00 58 02 00 00 a4 04 00 00 b0 04 00 00 04 fb ff ff 0c 00 00 00 34 00 00 00 60 00 00 00 0a 00 00 00 90 01 00 00 6c 01 00 00 4c 01 00 00 2c 01 00 00 0c 01 00 00 ec 00 00 00 c8 00 00 00 a4 00 00 00 84 00 00 00 64 00 00 00 0b 00 00 00 42 ba 59 3c 8b f1 f4 3c 84 19 aa 3d 14 88 60 3e 74 58 78 3e b7 6d db 3e ff a4 f6 3e af 3a 07 Data Ascii: 5B"B<60,$ (600X4`lL,dBY<<=`>tXx>m>>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50132	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	371	OUT	GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:32:59 UTC	1648	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/x.fb.keyframes Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Z5o6ShcDfXOoxSieZi5xvg== Expires: Sat, 12 Apr 2025 14:49:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: NKKT6YkP7FoBumwDPnEhpwkqSQfy6A3d+F7NCyYDpoegG/lmcqYWGjqbva/nJEyxSkBxsYpB26Galmp+hBweTQ== Date: Wed, 24 Apr 2024 05:32:59 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 64756
2024-04-24 05:32:59 UTC	1	IN	Data Raw: 1c Data Ascii:
2024-04-24 05:33:00 UTC	15515	IN	Data Raw: 00 00 00 4b 45 59 46 14 00 24 00 14 00 20 00 1c 00 04 00 10 00 00 00 0c 00 08 00 14 00 00 00 04 00 00 00 1c 00 00 00 38 00 00 00 c0 fb 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 01 00 00 00 04 00 00 00 11 00 00 00 52 61 6e 64 6f 6d 53 75 62 64 6f 63 75 6d 65 6e 74 00 00 00 03 00 00 00 d8 dc 00 00 98 a5 00 00 04 00 00 00 42 23 ff ff 05 00 00 00 14 00 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 d0 03 ff ff 04 00 00 00 08 00 00 00 1c 92 00 00 a4 7e 00 00 54 6b 00 00 04 58 00 00 b4 44 00 00 64 31 00 00 10 1e 00 00 04 00 00 00 4e 23 ff ff 8c 01 00 00 18 00 00 00 18 00 00 00 5c 01 00 00 60 01 00 00 64 01 00 00 01 00 00 00 7c 04 ff ff b4 1a ff ff 0c 00 00 00 20 00 00 00 38 00 00 00 05 00 00 00 cc 00 00 00 ac 00 00 00 88 00 00 00 60 00 00 00 Data Ascii: KEYF$ 8BB?pBRandomSubdocumentB#BB?pB~TkXDd1N#\`d\| 8`
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 0a 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ac 41 ff ff 08 00 00 00 00 00 00 01 1c 40 ff ff 28 01 c9 41 60 aa ea c1 0c 40 ff ff 04 00 00 00 30 40 ff ff d0 e2 c6 41 30 7c e9 c1 4a 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ec 41 ff ff 08 00 00 00 00 00 00 01 5c 40 ff ff 28 01 c9 41 60 aa ea c1 4c 40 ff ff 04 00 00 00 70 40 ff ff 28 48 c6 41 c8 24 e9 c1 8a 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 2c 42 ff ff 08 00 00 00 00 00 00 01 9c 40 ff ff 20 97 c7 41 60 e1 e9 c1 8c 40 ff ff 04 00 00 00 b0 40 ff ff a0 30 c4 41 10 f2 e7 c1 ca 40 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 6c 42 ff ff 08 00 00 00 00 00 00 01 dc 40 ff ff 38 2f c6 41 a8 16 e9 c1 cc 40 ff ff 04 00 00 00 f0 40 ff ff 00 04 c2 41 40 ac e6 Data Ascii: @ A@(A`@0@A0\|J@ A\@(A`L@p@(HA$@ ,B@ A`@@0A@ lB@8/A@@A@
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 00 00 00 01 00 80 ff ff f0 a2 4a 41 70 09 d4 41 f0 7f ff ff 04 00 00 00 14 80 ff ff 00 cc 2b 41 90 c2 ba 41 2e 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 d0 81 ff ff 08 00 00 00 00 00 00 01 40 80 ff ff c0 12 40 41 a8 ee cb 41 30 80 ff ff 04 00 00 00 54 80 ff ff 00 8f 21 41 80 20 b1 41 6e 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 10 82 ff ff 08 00 00 00 00 00 00 01 80 80 ff ff d0 95 34 41 d8 7c c2 41 70 80 ff ff 04 00 00 00 94 80 ff ff 60 aa 16 41 d8 02 a6 41 ae 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 50 82 ff ff 08 00 00 00 00 00 00 01 c0 80 ff ff 80 07 28 41 78 4c b7 41 b0 80 ff ff 04 00 00 00 d4 80 ff ff 80 0a 0b 41 60 f5 98 41 ee 80 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 90 82 ff ff 08 00 00 Data Ascii: JApA+AA. @@AA0T!A An 4A\|Ap`AA P(AxLAA`A
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 88 00 00 00 88 00 00 00 e8 00 00 00 58 01 00 00 68 01 00 00 09 00 00 00 22 c0 ff ff 00 00 80 40 94 d6 ff ff 0c 00 00 00 10 00 00 00 18 00 00 00 01 00 00 00 1c 00 00 00 02 00 00 00 c8 d6 39 3f 68 b8 63 3f 02 00 00 00 00 00 a0 40 00 00 00 00 2e d6 ff ff 08 00 00 00 10 00 00 00 58 c0 ff ff 55 55 55 3f 55 55 55 3f 72 c0 ff ff 00 00 80 3f 7a c0 ff ff 04 00 00 00 42 d7 ff ff 00 ff 84 37 8a c0 ff ff 00 00 80 3f c8 c0 ff ff 00 d7 ff ff 0c 00 00 00 10 00 00 00 18 00 00 00 01 00 00 00 1c 00 00 00 02 00 00 00 8f ad 08 3f 64 2b 22 3f 02 00 00 00 38 00 00 00 28 00 00 00 9a d6 ff ff 08 00 00 00 10 00 00 00 c4 c0 ff ff 00 00 80 3f a4 70 bd 3e d0 c0 ff ff ef 5b f1 3d ab aa 2a 3e dc c0 ff ff 00 00 80 3f 00 00 80 3f 2c c1 ff ff f4 d8 ff ff 0c 00 00 00 10 00 00 00 18 00 00 Data Ascii: Xh"@9?hc?@.XUUU?UUU?r?zB7??d+"?8(?p>[=*>??,
2024-04-24 05:33:00 UTC	88	IN	Data Raw: 0c 00 00 00 08 00 0c 00 08 00 04 00 08 00 00 00 00 00 1c 42 00 00 1c 42 01 00 00 00 0c 00 00 00 08 00 08 00 00 00 04 00 08 00 00 00 04 00 00 00 24 00 00 00 0c 00 00 00 00 00 06 00 08 00 04 00 06 00 00 00 04 00 00 00 03 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 Data Ascii: BB$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50133	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	551	OUT	GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AfCOHOiTQWr87AQIbi_TO8UIAXibgPGQj-vu1mHxXN9QEA&oe=6650164B&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	914	IN	HTTP/1.1 200 OK content-digest: adler32=3371172350 Content-Type: image/x.fb.keyframes ETag: 9016135132004091149 x-manifold-obj-blobsizebytes: 45660 x-manifold-obj-canonicalpath: flat/base:v7:haha.kf x-manifold-obj-ctime: 1611967367 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"115940658764963","color":"f7b125","__ctime":"1611967367","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:32:59 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 45660
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 ab aa 1a 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-04-24 05:33:00 UTC	15256	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 03 34 8f ff ff 44 cd 44 c2 04 15 55 c2 40 8f ff ff 94 ba 50 c2 30 d1 52 c2 4c 8f ff ff 54 06 3c c2 14 9d 40 c2 f4 8f ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 6c 8f ff ff d0 9c 65 c2 50 0b 4a c2 78 8f ff ff 64 28 60 c2 d0 f0 32 c2 84 8f ff ff 14 35 57 c2 74 18 50 c2 2c 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a4 8f ff ff b4 8b 48 c2 20 e9 fc c1 b0 8f ff ff 94 fa 3d c2 28 20 d9 c1 bc 8f ff ff 2c 0d 56 c2 b8 79 1c c2 2c 90 ff ff 04 00 00 00 d0 8f ff ff 5c 18 2c c2 f0 3f a4 c1 ea 8f ff ff 04 00 00 00 0c 00 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 b4 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 Data Ascii: 4DDU@P0RLT<@ lePJxd(`25WtP, H =( ,Vy,\,?\ l0\|@
2024-04-24 05:33:00 UTC	12519	IN	Data Raw: 9c d8 c1 cc cf ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 44 cf ff ff 94 ba 9a 42 c6 7f 8b c2 50 cf ff ff ae 0e a2 42 dc c5 97 c2 5c cf ff ff 94 ba 9a 42 3c c7 4d c2 04 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 7c cf ff ff d2 4e bd 42 dc c5 97 c2 88 cf ff ff 5e a2 d2 42 82 3a 89 c2 94 cf ff ff cc 0c a4 42 dc c5 97 c2 04 d0 ff ff 04 00 00 00 a8 cf ff ff 5e a2 d2 42 30 4b 4e c2 c2 cf ff ff 04 00 00 00 05 00 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 70 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e8 cf ff ff 5e 22 cd 42 d0 cf 12 c2 f4 cf ff ff 08 8e b7 42 60 56 f0 c1 00 d0 ff ff 5e 22 cd 42 84 0b 4e c2 a8 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 20 d0 ff ff c6 08 a5 42 60 56 f0 c1 Data Ascii: DBPB\B<M \|NB^B:B^B0KN\|@p ^"BB`V^"BN B`V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50134	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	734	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=a&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0ZrNyjt1uln5OxsOz..BmKJmK..AAA.0.0.BmKJmK.AWUlky46bPs
2024-04-24 05:33:00 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:00 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50135	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:32:59 UTC	554	OUT	GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AfB1V5zviFKmuGr4twHkPoHpTckmnxNUS318pRe6Kv1Vrw&oe=664FF470&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	918	IN	HTTP/1.1 200 OK Content-Type: image/x.fb.keyframes ETag: 1488915451716286797 x-manifold-obj-blobsizebytes: 151112 x-manifold-obj-canonicalpath: flat/base:v7:toto.kf x-manifold-obj-ctime: 1611967375 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"899779720071651","color":"ec7ebd","__ctime":"1611967375","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: x-upstream-checksum-algorithm: crc32 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT Cache-Control: max-age=1209600, no-transform X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=6, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 151112
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 d2 43 00 00 d2 43 55 55 a5 3f 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 06 00 00 00 94 ec 01 00 84 88 01 00 90 25 01 00 d4 c3 00 00 b0 63 00 00 04 00 00 00 ae 13 fe ff 24 00 00 00 30 00 00 00 34 00 00 00 34 00 00 00 44 00 00 00 48 00 00 00 4c 00 00 00 54 00 00 00 01 00 00 00 2c 13 fe ff 04 00 00 00 84 13 fe ff 00 c0 64 7b 3c 13 fe ff 00 00 80 3f 78 13 fe ff 48 13 fe ff 04 00 00 00 98 b2 fd ff 00 00 80 3f 00 00 80 3f 5c 13 fe ff 00 00 52 43 64 13 fe ff 00 00 52 43 6c 13 fe ff 04 00 00 00 60 13 fe ff 58 13 fe ff 0c 00 00 00 84 00 00 00 Data Ascii: KEYF@CCUU?A**%c$044DHLT,d{<?xH??\RCdRCl`X
2024-04-24 05:33:00 UTC	16332	IN	Data Raw: 00 33 43 04 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 b7 fd ff 38 6f de 42 7c 26 50 43 cc b7 fd ff 78 3a ff 42 86 99 4f 43 d8 b7 fd ff 00 00 da 42 00 00 4e 43 3c b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 b7 fd ff 1e c6 0e 43 fa b9 50 43 04 b8 fd ff cc 3b 17 43 38 56 50 43 10 b8 fd ff 00 00 05 43 00 00 50 43 30 b8 fd ff 04 00 00 00 24 b8 fd ff 00 00 1d 43 00 00 52 43 fa ba fd ff 04 00 00 00 0f 00 00 00 4c 03 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 d0 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 8c b8 fd ff aa aa 1d 43 00 00 52 43 98 b8 fd ff 56 55 1e 43 00 00 52 43 a4 b8 fd ff Data Ascii: 3C 8oB\|&PCx:BOCBNC< CPC;C8VPCCPC0$CRCL\ l0\|@ CRCVUCRC
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: f7 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 f7 fd ff 00 1d 39 43 22 d0 af c2 94 f7 fd ff b4 90 3e 43 ee 58 c9 c2 a0 f7 fd ff 00 00 34 43 02 00 9a c2 04 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 f7 fd ff 78 ee 43 43 a8 7c ff c2 cc f7 fd ff 6a a9 49 43 1d 88 24 c3 d8 f7 fd ff 00 00 42 43 00 00 ec c2 3c f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 f7 fd ff 6c b5 41 43 89 36 2c c3 04 f8 fd ff 78 ab 30 43 b0 85 2b c3 10 f8 fd ff 00 00 44 43 00 00 2a c3 74 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 30 f8 fd ff ee bc 21 43 82 97 2c c3 3c f8 fd ff c4 ef 10 43 0d 2a 2e c3 48 f8 fd ff 00 00 2a 43 00 00 2c c3 ac f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 68 f8 fd ff 82 26 0e 43 6a b3 2a c3 Data Ascii: 9C">CX4C xCC\|jIC$BC< lAC6,x0C+DCt 0!C,<C.HC, h&Cj
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 69 f2 41 14 a8 e0 42 7c 37 fe ff 58 21 8a 41 b4 52 0a 43 88 37 fe ff 00 00 40 42 00 00 b0 42 ec 37 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a8 37 fe ff 30 d9 59 41 7e 8d 35 43 b4 37 fe ff 50 ba 2e 41 d4 5f 45 43 c0 37 fe ff 00 00 60 41 00 00 31 43 24 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 37 fe ff 68 b6 87 41 fa 86 4a 43 ec 37 fe ff c0 c0 04 42 16 83 48 43 f8 37 fe ff 00 00 60 41 00 00 48 43 5c 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 38 fe ff e0 c0 3c 42 d2 83 49 43 24 38 fe ff 88 ca 7b 42 5e 0d 4d 43 30 38 fe ff 00 00 20 42 00 00 49 43 94 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 38 fe ff 58 a5 84 42 54 ad 49 43 5c 38 fe ff 98 54 81 42 44 fe 3b 43 68 38 fe ff 00 00 82 42 00 00 4b 43 Data Ascii: iAB\|7X!ARC7@BB7 70YA~5C7P.A_EC7`A1C$8 7hAJC7BHC7`AHC\8 8<BIC$8{B^MC08 BIC8 P8XBTIC\8TBD;Ch8BKC
2024-04-24 05:33:00 UTC	14935	IN	Data Raw: ef 3d 3f 8c 31 46 3f 9d 73 4e 3f ad b5 56 3f be f7 5e 3f ce 39 67 3f df 7b 6f 3f ef bd 77 3f 1f 00 00 00 48 5d 00 00 50 5a 00 00 58 57 00 00 24 54 00 00 f0 50 00 00 34 4e 00 00 00 4b 00 00 90 47 00 00 5c 44 00 00 64 41 00 00 30 3e 00 00 fc 3a 00 00 c8 37 00 00 94 34 00 00 24 31 00 00 2c 2e 00 00 f8 2a 00 00 c4 27 00 00 94 24 00 00 9c 21 00 00 e0 1e 00 00 70 1b 00 00 3c 18 00 00 44 15 00 00 d4 11 00 00 64 0e 00 00 a8 0b 00 00 ec 08 00 00 30 06 00 00 b0 03 00 00 f4 00 00 00 26 d6 fe ff 00 00 00 02 2e d6 fe ff 00 00 00 02 36 d6 fe ff 00 00 00 02 3e d6 fe ff 00 00 00 02 46 d6 fe ff 00 00 00 02 4e d6 fe ff 00 00 00 02 56 d6 fe ff 00 00 00 02 5e d6 fe ff 00 00 00 02 66 d6 fe ff 00 00 00 02 6e d6 fe ff 00 00 00 02 76 d6 fe ff 00 00 00 02 7e d6 fe ff 00 00 00 02 Data Ascii: =?1F?sN?V?^?9g?{o?w?H]PZXW$TP4NKG\DdA0>:74$1,.*'$!p<Dd0&.6>FNV^fnv~
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 24 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 b1 fe ff e8 7d b0 c1 cc bb 16 43 ec b1 fe ff 50 ef 88 c1 38 7e 27 43 f8 b1 fe ff 00 00 c8 c1 00 00 0a 43 5c b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 b2 fe ff a0 58 2b c1 10 2a 3c 43 24 b2 fe ff 20 d9 f4 c0 a2 89 45 43 30 b2 fe ff 00 00 40 c1 00 00 38 43 94 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 b2 fe ff 00 70 2e c0 9a 08 49 43 5c b2 fe ff 50 23 59 41 ea 71 47 43 68 b2 fe ff 00 00 e0 c0 00 00 46 43 cc b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 b2 fe ff 70 1c f8 41 88 bf 48 43 94 b2 fe ff 30 63 1f 42 fc 03 49 43 a0 b2 fe ff 00 00 a8 41 00 00 48 43 c0 b2 fe ff 04 00 00 00 b4 b2 fe ff 00 00 40 42 00 00 4a 43 8a b5 fe ff 04 00 00 00 0e 00 00 Data Ascii: $ }CP8~'CC\ X+*<C$ EC0@8C Pp.IC\P#YAqGChFC pAHC0cBICAHC@BJC
2024-04-24 05:33:00 UTC	16333	IN	Data Raw: 8c e8 30 42 76 21 17 c3 b0 b7 fe ff 00 00 20 42 00 00 35 c3 14 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d0 b7 fe ff 4c 48 21 42 8e 30 c1 c2 dc b7 fe ff 88 24 a6 41 2c 99 98 c2 e8 b7 fe ff 00 00 2c 42 00 00 06 c3 4c b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 08 b8 fe ff 50 d0 87 c1 e8 43 bb c1 14 b8 fe ff 90 63 de c1 e0 51 98 40 20 b8 fe ff 00 00 00 40 00 00 48 c2 84 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 40 b8 fe ff 1c 5c 0a c2 ac 7d b8 42 4c b8 fe ff 10 09 5a c1 d4 7f 0e 43 58 b8 fe ff 00 00 f8 c1 00 00 38 42 bc b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 78 b8 fe ff 00 04 32 be 00 0c 3b 43 84 b8 fe ff 00 c4 f4 3f 02 40 46 43 90 b8 fe ff 00 00 00 c0 00 00 35 43 f4 b8 fe ff 10 00 00 00 18 00 00 Data Ascii: 0Bv! B5 LH!B0$A,,BL PCcQ@ @H @\}BLZCX8B x2;C?@FC5C
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 5f ce c2 78 f7 fe ff 00 00 10 42 00 00 a0 41 dc f7 fe ff 10 00 00 00 18 00 00 00 28 00 00 00 00 00 00 03 98 f7 fe ff 80 56 d5 bf 92 85 25 c3 a4 f7 fe ff 00 44 93 c0 60 d7 36 c3 08 00 08 00 04 00 00 00 08 00 00 00 00 00 1f c3 18 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d4 f7 fe ff 60 98 14 c1 80 b9 3a c3 e0 f7 fe ff e0 17 d3 c1 ec 7c 39 c3 ec f7 fe ff 00 00 c0 c0 00 00 38 c3 50 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 0c f8 fe ff d0 80 2a c2 c8 be 3a c3 18 f8 fe ff 88 74 4e c2 de e5 3a c3 24 f8 fe ff 00 00 04 c2 00 00 3a c3 44 f8 fe ff 04 00 00 00 38 f8 fe ff 00 00 6c c2 00 00 3c c3 0e fb fe ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 Data Ascii: _xBA(V%D`6 `:\|98P *:tN:$:D8l<\ l0
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 00 0d 43 8c 37 ff ff 04 00 00 00 80 37 ff ff 00 00 2c c2 00 00 44 43 56 3a ff ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 28 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e4 37 ff ff 5c 1e 2b c2 45 6e 43 43 f0 37 ff ff 10 27 06 c2 51 23 44 43 fc 37 ff ff 00 00 4c c2 01 00 43 43 60 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 1c 38 ff ff 00 f2 6d c1 59 88 45 43 28 38 ff ff 00 02 d1 3f b9 41 49 43 34 38 ff ff f8 ff af c1 01 00 45 43 98 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 54 38 ff ff 80 e6 29 41 fd 9c 44 43 60 38 ff ff 80 d9 6a 41 d5 d1 2f 43 6c 38 ff ff 20 00 c0 40 Data Ascii: C77,DCV:\ l0\|@(8 7\+EnCC7'Q#DC7LCC`8 8mYEC(8?AIC48EC8 T8)ADC`8jA/Cl8 @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50136	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	424	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:33:00 UTC	1412	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:00 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936779; path=/; domain=.facebook.com; httponly Set-Cookie: fr=0JikbgsPU2zJpn98Q..BmKJmM..AAA.0.0.BmKJmM.AWXCnyJdrG0; expires=Tue, 23-Jul-2024 05:33:00 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:00 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:00 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:33:00 UTC	2556	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4b 6a 4d 46 6f 6a 36 6c 6c 7a 77 69 68 57 58 52 36 39 32 52 58 76 44 39 6a 66 59 61 6b 70 50 6c 6b 41 62 75 76 45 44 70 35 6e 33 53 74 51 48 43 36 75 32 46 62 6a 4b 32 33 4d 59 77 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 49 5f 6a 4b 52 4e 6a 79 6a 64 69 6c 73 73 74 4d 64 4c 77 61 2d 6f 75 4e 66 73 7a 6f 32 57 55 7a 38 7a 35 62 4a 70 57 51 72 33 45 44 76 5a 6e 57 57 75 4d 79 68 58 47 44 5a 44 70 37 51 69 4f 36 34 52 30 6c 53 5a 77 66 38 36 7a 51 34 73 5a 5f 46 5f 61 36 53 6f 52 74 41 68 79 6d 71 57 30 67 77 44 5f 5f 42 34 4d 4d 6f 62 6b 4d 54 66 36 77 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcKjMFoj6llzwihWXR692RXvD9jfYakpPlkAbuvEDp5n3StQHC6u2FbjK23MYw"; e_clientaddr="AcI_jKRNjyjdilsstMdLwa-ouNfszo2WUz8z5bJpWQr3EDvZnWWuMyhXGDZDp7QiO64R0lSZwf86zQ4sZ_F_a6SoRtAhymqW0gwD__B4MMobkMTf6w"; e_fb_
2024-04-24 05:33:00 UTC	170	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 31 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 32 32 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=122, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-24 05:33:00 UTC	1330	IN	Data Raw: 64 39 39 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 44 4d 61 73 54 30 7a 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: d990<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="PDMasT0z">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 Data Ascii: y screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta proper
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: ":{"20935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":n
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 6f 67 74 2d 45 6d 58 Data Ascii: ",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"ogt-EmX
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 31 33 38 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 Data Ascii: oadingFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2138,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"transla
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 4e 45 53 53 5f 44 4f 4d 41 49 4e 22 3a 66 61 6c 73 65 7d 2c 32 37 30 5d 2c 5b 22 4c 53 44 22 2c 5b 5d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 41 56 6f 79 6d 6f 65 36 66 61 4d 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 30 33 38 32 36 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 39 39 34 35 36 38 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 37 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 Data Ascii: NESS_DOMAIN":false},270],["LSD",[],{"token":"AVoymoe6faM"},323],["SiteData",[],{"server_revision":1013003826,"client_revision":1012994568,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19837.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50138	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	827	OUT	GET /v/t39.30808-6/432668852_796155295887560_588370489562300368_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eDQuve-aS-sAb5LNrB5&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB5mJMGFLBrA-mEsMyjPpEuIa7NkDwnKZ7m7vkd3Pfk2g&oe=662E7DF6 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	790	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Fri, 15 Mar 2024 17:26:52 GMT X-Needle-Checksum: 3015067689 thrift_fmhk: GBDM+/Bs8+e1SsYYX96mcQwsFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3184855043 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Edge-Debug: 1nWJyywDSJB4Z3nc8i3a8A_Lp1GqSTmRCuY-lCjBg1kdKIitsXz_nTg-mC37-MfdPjsXwH5y7ehjvrwUV1VqcWXaUb8dnMjTr4b1fdR4hz0 X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=59, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7288
2024-04-24 05:33:00 UTC	710	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 30 30 33 30 30 30 30 63 30 30 36 30 30 30 30 35 39 30 37 30 30 30 30 32 61 30 38 30 30 30 30 31 35 30 63 30 30 30 30 35 64 31 31 30 30 30 30 64 37 31 31 30 30 30 30 39 62 31 32 30 30 30 30 38 65 31 33 30 30 30 30 37 38 31 63 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f01000060030000c0060000590700002a080000150c00005d110000d71100009b1200008e130000781c0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:00 UTC	3318	IN	Data Raw: 9e 17 8e 2f 45 d2 0d 30 4b 0d 35 ba f7 62 d4 d4 b1 56 94 a1 08 ca 1d 9b 7a b4 af f5 f2 a8 29 06 a0 ca ad 29 1b 4a b5 aa 41 a4 5a b6 58 70 a0 b1 8d 43 85 90 d1 6f 9d e8 0e 13 6d 32 13 74 25 89 27 d2 e2 47 07 47 21 eb 3d 42 8d 05 fa 7a 8c 08 95 94 99 56 d9 62 4d 92 73 56 0c 73 8f 19 49 0e 60 ae 23 b4 17 be a9 3a 20 a1 af 56 b4 ff c4 00 2b 10 00 02 02 02 01 02 05 04 02 03 01 00 00 00 00 00 01 02 00 03 04 11 12 10 13 05 14 21 31 33 15 22 23 32 34 41 20 30 42 44 ff da 00 08 01 01 00 01 05 02 3c 21 02 71 1c 75 d1 9d 48 dc 64 06 3d 64 07 f7 9e 1d f3 f4 37 d7 3b cb 3b 82 73 86 d0 23 59 ce 7a cd 34 d3 4f 5e 85 48 9a 87 8f 13 a2 94 60 8b 13 37 1f cb d9 e1 83 76 d8 bc 45 b6 bd 91 ff 00 6f fb 84 ea 57 ed 57 ea 9e 29 ca 3e 6f 33 e6 44 b3 39 01 fa 8d 3b 36 87 6c 67 5b Data Ascii: /E0K5bVz))JAZXpCom2t%'GG!=BzVbMsVsI`#: V+!13"#24A 0BD<!quHd=d7;;s#Yz4O^H`7vEoWW)>o3D9;6lg[
2024-04-24 05:33:00 UTC	3260	IN	Data Raw: 72 b1 5c f4 8a e8 68 33 fa 73 50 81 0a 67 8b ab 95 6b 92 16 ab 22 0f f7 da 69 50 52 e9 e6 2d 17 21 dc ae bf 74 be c4 f0 27 b2 7b 3d 04 10 3e 66 60 b7 d5 ed 32 1b 51 3e f2 56 ae a8 4b b7 7f a5 00 1d 97 d2 2b 14 bc b9 a5 57 58 e3 15 1c c4 40 e4 b8 fe 77 fe 2e 5c b8 3e 95 c4 5e 6d 6c 98 c2 a4 72 1c 5f dc 57 f2 4c bb 1c ab 08 d4 04 18 27 f2 47 25 b6 8d 85 9b 6f 02 b0 6e 3f 74 fc 99 aa 58 73 45 ca 29 86 b5 53 31 e1 c2 d4 f6 2c fb 8a 52 e3 e2 03 38 8b 7f 26 00 06 5e 90 68 f4 a1 ac 30 18 6a ed f2 85 68 36 19 35 98 8b 0f 7f f1 3b f6 a3 7e 04 5f b4 10 78 4f a7 a4 98 ca 97 71 f5 03 4d 07 4a bf 30 d4 57 66 60 b6 eb fe 21 ae b5 ac 78 60 2e d6 75 17 80 ff 00 3f f1 28 a3 aa 19 2b 11 8b 97 f2 65 e5 65 6a c9 9e 7c 4b 33 a1 cf 24 c7 b1 55 3c 65 83 0d cb 2b e7 70 8d b2 9f Data Ascii: r\h3sPgk"iPR-!t'{=>f`2Q>VK+WX@w.\>^mlr_WL'G%on?tXsE)S1,R8&^h0jh65;~_xOqMJ0Wf`!x`.u?(+eej\|K3$U<e+p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50139	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	552	OUT	GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AfDaUubXx4OfTJn4DccajD9sBj7XD81SszpxLqsNxNf20Q&oe=664FF6D7&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	915	IN	HTTP/1.1 200 OK content-digest: adler32=649957559 Content-Type: image/x.fb.keyframes ETag: -4761830269030928794 x-manifold-obj-blobsizebytes: 32856 x-manifold-obj-canonicalpath: flat/base:v7:anger.kf x-manifold-obj-ctime: 1611967365 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"444813342392137","color":"e9710f","__ctime":"1611967365","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 32856
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 3c 28 00 00 00 00 34 43 00 00 34 43 66 66 76 40 00 00 70 42 01 00 00 00 02 00 00 00 34 15 00 00 04 00 00 00 dc ea ff ff 0c 00 00 00 00 00 34 43 00 00 34 43 0e 15 00 00 ff d8 ff db 00 84 00 03 02 02 02 02 02 03 02 02 03 04 03 02 03 04 05 03 03 03 03 05 05 04 04 05 04 04 05 07 05 06 06 06 06 05 07 07 08 08 09 08 08 07 0b 0b 0c 0c 0b 0b 0c 0c 0c 0c 0c 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 01 03 03 03 05 05 05 0a 07 07 0a 0f 0c 0a 0c 0f 12 0e 0e 0e 0e 12 11 0e 0e 0e 0e 0e 11 11 0e 0e 0e 0e 0e 0e 11 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 Data Ascii: KEYF$ <(4C4Cffv@pB44C4CAdobed
2024-04-24 05:33:00 UTC	15251	IN	Data Raw: 7b 87 ba ce bf 35 f5 e9 b1 cf b4 a4 cf 03 63 a7 01 a0 2f a9 50 f9 9e 5d 36 40 02 a6 a5 a5 42 6c a9 52 2a 32 84 a8 81 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 04 0c 81 2a 4c 14 e4 70 21 4a 21 52 21 88 b9 d3 b6 68 c8 f5 f3 07 75 2e 65 92 0f a7 1a 98 2c 5b 2c 5b 91 51 61 4a e4 62 51 24 49 ff d5 cc 3a 3e 50 5c 7c 87 55 c9 0d 45 55 84 3b 01 16 4b aa 16 86 b7 5f 53 d4 ac e3 59 56 a2 21 75 fc 38 19 36 3c 00 a2 0b 0a 84 e2 51 dd 20 a6 06 5d d2 04 11 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a9 0c bb a4 08 20 64 dd 20 94 42 da 72 1c 0a a9 10 b8 d3 12 f6 0c ce 6f 7e Data Ascii: {5c/P]6@BlR2%EFPBTTeQQ%EFPBTTeQQ%EFPBTTeQLp!J!R!hu.e,[,[QaJbQ$I:>P\\|UEU;K_SYV!u86<Q ]@@@@@@@@@@@@@ d Bro~
2024-04-24 05:33:00 UTC	16104	IN	Data Raw: 03 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 d6 ce ff ff 08 00 00 00 10 00 00 00 58 c1 ff ff 55 55 55 3f 55 55 55 3f 72 c1 ff ff 00 00 80 3f f6 ce ff ff 08 00 00 00 0c 00 00 00 dc c1 ff ff 00 00 80 3f 8e c1 ff ff ab aa aa 3e 88 c1 ff ff 7a f9 c4 42 30 dc 58 43 94 c1 ff ff 63 86 c6 42 84 07 59 43 a0 c1 ff ff 7a f9 c4 42 30 dc 58 43 20 c4 ff ff 0c 00 00 00 14 00 00 00 20 00 00 00 02 00 00 00 48 00 00 00 24 00 00 00 03 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 72 cf ff ff 08 00 00 00 10 00 00 00 f4 c1 ff ff 55 55 55 3f 55 55 55 3f 0e c2 ff ff 00 00 80 3f 92 cf ff ff 08 00 00 00 0c 00 00 00 78 c2 ff ff 00 00 80 3f 2a c2 ff ff ab aa aa 3e 24 c2 ff ff 0d 96 b0 Data Ascii: ><N6>?`P@XUUU?UUU?r??>zB0XCcBYCzB0XC H$><N6>?`P@rUUU?UUU??x?*>$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50137	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	842	OUT	GET /v/t39.30808-6/434225809_986346610049172_409589886129999166_n.jpg?stp=c24.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nXzthKFyQOwAb6u1zRw&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCF-fyzT-Hv9sf9KdaPTk6XQIwFJRwMhMHQ5m4rZ5vwng&oe=662E7DF7 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	790	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 28 Mar 2024 03:44:19 GMT X-Needle-Checksum: 1881832713 thrift_fmhk: GBAXG75ypMKcBRIzleMAiQk3FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1295063724 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Edge-Debug: xIQF42hDVBIgg0aNRHp6FElQxiP8vJGcp0s-UPlgg1gsxhkDyI3Nsyzvm0Qsuyf6KBeYPAg_LHqLEABLyruvNzcGv4_usN7EFLfGyzV6hP8 X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=91, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9848
2024-04-24 05:33:00 UTC	710	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 35 33 30 33 30 30 30 30 38 33 30 37 30 30 30 30 36 34 30 38 30 30 30 30 36 64 30 39 30 30 30 30 63 37 31 31 30 30 30 30 65 33 31 38 30 30 30 30 36 36 31 39 30 30 30 30 38 31 31 61 30 30 30 30 63 63 31 62 30 30 30 30 37 38 32 36 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100005303000083070000640800006d090000c7110000e318000066190000811a0000cc1b000078260000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: db 3e 95 61 b3 46 3b a0 4e ad 93 cf 62 55 32 3e 04 89 7d 89 0e cf c9 eb dc 15 e0 07 a3 df 22 43 2e 37 b2 6f 1e dd 04 9a 2c f9 96 0e 45 93 c6 6a 24 f4 56 39 95 41 e8 4a 40 0f 0b 48 f3 6a 2e fc 9c ba 0d 40 b4 28 34 ac ce a4 f4 0b 3e 95 68 16 7d 00 f9 7d 6b 3a f9 33 4d d3 ab 8c a4 5b 04 d6 42 5d 52 0f ff c4 00 27 10 00 01 04 01 05 00 01 05 00 03 00 00 00 00 00 00 02 00 01 03 04 05 11 12 13 14 15 31 10 21 22 23 33 20 24 35 ff da 00 08 01 01 00 01 05 02 3a 50 02 e9 41 bd aa 56 22 e9 d6 5d 6a a9 aa 56 77 1a 30 1b f9 b1 af 36 34 34 2b 8c c1 8e 8a 55 e4 c6 8f 19 10 0f 9f 07 1b 53 ac e9 a9 55 75 d3 ac 9b 1f 5d c7 a1 5f 60 63 22 31 b1 f6 02 88 41 8f 5d a0 26 40 05 b4 d9 99 9a be dd df 49 7f b5 2f e2 ad ff 00 0e 56 ed 03 b9 53 dc 07 58 5c 5a cc 6f 1b 44 f2 a8 a5 61 Data Ascii: >aF;NbU2>}"C.7o,Ej$V9AJ@Hj.@(4>h}}k:3M[B]R'1!"#3 $5:PAV"]jVw0644+USUu]_`c"1A]&@I/VSX\ZoDa
2024-04-24 05:33:00 UTC	1794	IN	Data Raw: aa 2e 2e 2e 33 50 69 56 3c bd 99 8c 2f 1f d1 69 18 49 35 61 b7 c2 f1 fd 16 3e 17 87 e9 64 ba d0 51 97 a3 67 3f 46 99 1a 41 57 b9 f5 9f 58 8a 6a 4e 8c be 5d cd a3 2f 97 72 72 6f 99 1b 69 c4 95 bd 08 b7 77 a2 a8 c4 85 ca 89 90 d0 f1 63 2a ad c9 09 c3 a8 dc 3a 11 38 9c 77 59 58 d0 6e 34 22 53 75 3a 6a 52 81 58 50 8e e2 3a ea 91 7c 7b 0e 51 22 9d 0b 59 6b 2d 65 4a 95 1e bc 3d 22 c8 db 43 35 e8 cd fa 33 7e 8f ff c4 00 41 10 00 01 03 02 02 05 0a 04 03 06 05 05 00 00 00 00 01 00 02 03 11 12 04 21 13 22 31 32 92 10 33 34 41 51 61 71 91 a1 e1 23 42 72 d1 62 81 93 14 20 52 73 b1 c1 24 43 44 82 94 53 63 83 b2 f0 ff da 00 08 01 01 00 06 3f 02 17 e1 70 2d af 6b dc ac fd 97 03 7f 65 ee 56 8c 36 04 bb b2 f7 27 7f 86 c0 ea ed d7 76 4b 98 c0 71 b9 0a 61 f0 19 fe 37 22 1b Data Ascii: ...3PiV</iI5a>dQg?FAWXjN]/rroiwc*:8wYXn4"Su:jRXP:\|{Q"Yk-eJ="C53~A!"1234AQaq#Brb Rs$CDSc?p-keV6'vKqa7"
2024-04-24 05:33:00 UTC	4064	IN	Data Raw: 5a dd 82 c5 ba fe 14 eb 6f 01 db 75 55 00 22 9d a3 93 4a 64 94 3c 6c b5 d4 a2 d2 6b 6f 5f 6d 75 6e ed a2 73 8b a4 7d db c1 ee a8 72 7b e2 60 69 7e de 47 6b fa 05 be 7c 82 df 3e 41 6f 9f 1a 05 be 7c 82 d6 24 f9 2d 87 d1 32 cd ca 66 b3 0c a2 90 42 5e 1e 69 9b 36 8c d4 a2 46 e2 de 09 d5 34 27 2e 46 bf 58 d3 b3 92 79 19 bc d6 92 16 16 18 88 6b e5 15 2f 22 b4 c9 7e cb 56 69 f4 96 69 29 96 ca ec ed 4c 6e 91 8e 9d c4 e6 45 a2 81 00 de 68 c2 24 1e 7c 8e ac b4 3d 8b 9e 54 d3 2e 79 67 2a e7 97 3c b2 cb bf b1 10 1d 78 a7 23 0d f5 71 da de 47 d6 4b 6d d8 10 ae d4 f6 3f 75 d9 15 61 0e a0 35 1a e6 a1 68 b4 7a 95 ae dc eb db 55 5b 2e 34 a6 b9 b9 02 d0 e0 46 ca 3c f8 f2 1a 3b d5 64 e3 e6 b7 fd 56 f1 e2 5b c7 cd 0a bb d5 6d f5 5b ac e2 f6 59 31 9c 5e cb 75 9c 5e cb 71 9c Data Ascii: ZouU"Jd<lko_muns}r{`i~Gk\|>Ao\|$-2fB^i6F4'.FXyk/"~Vii)LnEh$\|=T.yg*<x#qGKm?ua5hzU[.4F<;dV[m[Y1^u^q
2024-04-24 05:33:00 UTC	1780	IN	Data Raw: 7c 5f 6f 28 61 40 08 01 7b 16 5e 7c e3 a1 60 37 71 16 0f 3c 3d 3d ef 1d a4 22 ed 08 5c 7f 86 9c d1 58 de f1 a8 74 59 20 73 1a 5a f3 90 6c 13 0a 73 5d e8 98 93 ca 92 56 71 b7 c7 9f f5 82 8c f2 1e 34 e8 d8 ac 71 74 51 c4 14 08 f9 20 1b f0 62 e3 0a 9b b8 62 3a 2e f3 51 22 41 3c 19 3e 3f 2f 8c de a2 49 27 92 f3 6f bf 7c e2 8e d9 ad 96 17 e4 c2 be b3 d1 aa ee 8a 4e e5 c5 2e 60 43 a2 1a b1 27 1e f9 c2 61 ac cd 93 0a ee 88 75 a3 13 bb c0 e5 e3 96 ca 53 97 15 6b d4 74 01 3d 26 a6 15 24 2c d6 85 9f c5 c2 8d 4a 1b 17 54 d8 7b 35 ee e4 d9 50 0b 10 9e ad c0 af b7 b3 12 62 a3 6a 31 6a f1 f3 ee f5 82 99 58 6d 67 b2 7c b7 e5 c8 46 05 b4 9a 85 3c 72 ff 00 99 17 60 d1 03 85 b7 a9 23 c6 68 75 08 10 e5 79 e5 9f 4c 06 ba 20 93 a9 79 3d 99 7a 02 00 55 56 18 2c 3a c2 83 6b 03 Data Ascii: \|_o(a@{^\|`7q<=="\XtY sZls]Vq4qtQ bb:.Q"A<>?/I'o\|N.`C'auSkt=&$,JT{5Pbj1jXmg\|F<r`#huyL y=zUV,:k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50146	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	611	OUT	GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: rieOeATijCczzumIPaOM6Q== Expires: Fri, 11 Apr 2025 12:40:02 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: RGoGTSg2b0j3bnQj++g+0H7HjrwhRFWnJPvpZwLFdTqlq6o0Ca5kj/y1tOcHHz+DU1+uRx30LYXuFAUsOwjPaQ== Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 376
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:00 UTC	375	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 6c 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 09 e9 09 00 00 00 23 74 52 4e 53 00 8a a5 fe 51 f6 fa f9 55 05 f3 b6 dc fd 90 d1 1c 02 e0 da 2f 62 af 19 2a dd 76 e1 d9 a4 e3 e2 8b 3a 39 ff a1 d5 cd 00 00 00 98 49 44 41 54 78 5e 6d 91 47 8e c3 40 10 03 a9 38 33 4a b6 62 70 0c f5 ff 3f 2e 20 68 75 b0 bb 8e 04 88 26 d9 da 08 be 2c 92 a4 28 7d d0 41 5a b1 53 a5 bb d4 Data Ascii: PNGIHDRW?lPLTEGpLN#tRNSQU/b*v:9IDATx^mG@83Jbp?. hu&,(}AZS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50142	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	843	OUT	GET /v/t39.30808-6/393310192_718523496989526_6043121057059152698_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=p7c_FRo1cLsAb5rFBd9&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA5tAq0YSchwbtnK_GRq3hJkC8hC9q6B8Jc7xckCu0k9w&oe=662E7B13 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	790	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Wed, 18 Oct 2023 01:46:16 GMT X-Needle-Checksum: 1998986351 thrift_fmhk: GBBWTRAz3KjJouX7hxCd7+G9FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2416158965 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Edge-Debug: ENq08ydKp0QRlmH8Ldr-pSV-fvBiFYFqOQtXXvZXOiD9Z3l9Hr2a1xmLEL69BDNOfpdxSwdeasTmLceuCVxw0JPjIrGBViOHZ6DsdMftQ0o X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=43, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8176
2024-04-24 05:33:00 UTC	710	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 35 39 30 33 30 30 30 30 64 63 30 36 30 30 30 30 64 37 30 37 30 30 30 30 62 65 30 38 30 30 30 30 33 33 30 64 30 30 30 30 32 38 31 33 30 30 30 30 61 62 31 33 30 30 30 30 66 35 31 34 30 30 30 30 30 32 31 36 30 30 30 30 66 30 31 66 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000059030000dc060000d7070000be080000330d000028130000ab130000f514000002160000f01f0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:00 UTC	3318	IN	Data Raw: ef 1b c8 95 a4 06 9f 25 b6 a9 3d 68 f3 33 86 cd 60 07 15 e5 ce 4e e7 41 4d 9d 55 5a c9 80 88 eb aa 94 fe ea 9f e6 fa bc 9b b6 0f 2b 18 5d 76 31 e5 5c 78 73 f5 f9 9e bd 76 5f 20 cf 2d 2a 7b 4b 0a d6 10 80 2c 36 f1 70 06 ba 99 6f d4 a7 47 9d 29 62 cf a4 d3 6c 52 ac de e4 91 d4 90 75 89 02 49 33 89 20 49 20 ff c4 00 2b 10 00 02 02 02 01 04 01 02 06 03 01 00 00 00 00 00 01 02 00 03 04 11 12 05 13 14 21 22 23 31 10 15 20 24 33 41 16 32 42 43 ff da 00 08 01 01 00 01 05 02 c7 50 d5 57 4e eb 32 9f 8d b7 0d 91 67 6e 59 01 d2 b3 72 8a fe 8e 84 3e d4 8d b3 45 d6 f6 48 ae fe 0b 5b d6 e2 ef 83 9f a6 52 d7 ae 73 3c 3c 8d 3d 97 17 b1 ab 68 7f d9 5a 6d 44 d8 78 db 31 97 42 71 3c ad 7e 25 79 4b 5d 0a 83 a8 4e e6 cd a8 5b b8 ce 58 8e 40 2d 6c 21 e3 ad 09 f0 30 21 33 8f d4 Data Ascii: %=h3`NAMUZ+]v1\xsv_ -*{K,6poG)blRuI3 I +!"#1 $3A2BCPWN2gnYr>EH[Rs<<=hZmDx1Bq<~%yK]N[X@-l!0!3
2024-04-24 05:33:00 UTC	4064	IN	Data Raw: 8b 2a 31 5f b9 72 69 69 9d 09 ca 93 02 8d c6 0e 22 04 d2 90 05 ca 18 81 ce 0f 4f 69 41 2b 8a a0 99 60 42 d4 e0 3b 98 c7 64 de b3 74 d9 e4 99 95 40 cd cd fb 20 d8 78 3e a0 00 38 15 75 c8 c3 df 32 ef bf 39 f8 85 4e 43 7b 3f 89 e6 86 54 22 cd 51 84 0a 1f e2 00 0a 7e 92 83 0e 61 ce ca a7 a9 82 65 ef c3 d8 d4 e4 02 53 fd d4 c6 58 28 71 f9 7f 44 06 04 53 14 d5 4a 05 6e ad f8 88 71 e1 ce 1b 6a 54 f2 a4 9b 37 5e fc cb 36 be 4b 1c 11 26 a2 61 4f 55 73 3b e9 65 8a 77 98 3c 3f 82 91 0f 6b 69 5a be ed 31 61 15 ba 66 2c fe 43 e9 2c ec be 25 bc 49 92 d5 51 cc 20 95 72 d3 65 e2 11 bf 58 31 56 a7 b4 99 84 02 4a c1 37 5f 71 0e c8 71 ab 47 06 c1 fb 71 8f a9 94 ba bb 6a d2 4b 82 1a a1 55 79 63 1f 3c 0a ff 00 84 00 8c ca 0c 9a e3 f2 43 85 cc 8f 0e ea 17 95 8e 45 86 9a 7d e6 Data Ascii: *1_rii"OiA+`B;dt@ x>8u29NC{?T"Q~aeSX(qDSJnqjT7^6K&aOUs;ew<?kiZ1af,C,%IQ reX1VJ7_qqGqjKUyc<CE}
2024-04-24 05:33:00 UTC	84	IN	Data Raw: a4 a0 42 05 c6 85 41 f5 3c a1 82 02 3d 07 c2 0c 99 6b 03 67 3a 36 20 06 68 0c f3 82 0c 03 e7 01 57 45 df 1a 32 ea a8 e9 83 94 2d eb 9d 19 63 82 fb 0c 17 a6 9f 18 e1 6b dd 8f 1e 73 69 ab e8 b8 95 14 e2 f3 ac 8e 6e 75 bd 60 96 b0 3b b8 9c bf 06 7f ff d9 Data Ascii: BA<=kg:6 hWE2-cksinu`;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50141	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	828	OUT	GET /v/t39.30808-6/352230347_642498977400229_7245798881627614562_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=qBZxTxVqogYAb5_rX9a&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlIkpj_DYYAm2exgqXfO2IurQjjy8C0QMKtToF__aj1Q&oe=662E7B2D HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	789	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 05 Jun 2023 23:00:54 GMT X-Needle-Checksum: 1049931577 thrift_fmhk: GBDL9VSK18MS3nZ+SP3pS78jFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=181150200 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Edge-Debug: m9UlBFl9f8NY0RO_v_H3UrY7ZrdhRlkTWdw8C6qcDDETBQPlVP_xCjAzkEPuMKJ4cmSrZCUPNKvvfrJM-5IjGnwzGHZE3efrI9EUbxWrXhk X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=58, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5304
2024-04-24 05:33:00 UTC	711	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 32 37 30 33 30 30 30 30 37 61 30 35 30 30 30 30 62 65 30 36 30 30 30 30 66 63 30 37 30 30 30 30 64 63 30 61 30 30 30 30 61 64 30 64 30 30 30 30 33 30 30 65 30 30 30 30 34 66 30 66 30 30 30 30 36 39 31 30 30 30 30 30 62 38 31 34 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a70010000270300007a050000be060000fc070000dc0a0000ad0d0000300e00004f0f000069100000b8140000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:00 UTC	3317	IN	Data Raw: 5c 7c 4a e9 50 ec e4 8c 56 09 e6 79 8f ab f9 da 42 a0 a6 60 00 1e 2a d6 c4 bb 43 da b8 c2 59 28 ec 7e 34 ac 96 2a d5 af 72 72 e7 52 3d 3e 63 9c a8 5b fe 95 a8 23 c0 0f ff c4 00 26 10 00 02 02 02 01 03 04 03 01 01 00 00 00 00 00 00 02 03 01 04 00 05 10 11 13 30 12 14 20 32 06 15 21 22 40 ff da 00 08 01 01 00 01 05 02 f9 b5 ea 4e 1e de a0 e4 ee eb e4 6e eb e0 6d aa 16 29 cb 6f 96 e6 d1 35 f2 ce ce cb f8 00 26 12 b5 36 8f 07 46 79 fa 2c 2d 23 62 42 76 95 32 a6 c9 2f 9f 03 58 2a 0d 86 d0 df c2 d6 4d 3a 9a 71 18 66 ca a5 41 6e e6 c1 61 5f b4 59 ee ac 60 6c 2d 0e 27 74 f1 c1 b7 46 fc 2d 6d ad 82 50 51 f1 32 80 1d 83 2c 5b 67 b7 6e 56 a0 f7 b2 05 3a d4 9d 6b f7 e5 5a 54 0e 46 b6 a4 64 eb aa 4e 37 4d 58 b2 c6 99 eb c9 ac e8 9f 6e dc a5 62 dd 5c ac e1 70 7c 6e bf Data Ascii: \\|JPVyB`CY(~4rrR=>c[#&0 2!"@Nnm)o5&6Fy,-#bBv2/X*M:qfAna_Y`l-'tF-mPQ2,[gnV:kZTFdN7MXnb\p\|n
2024-04-24 05:33:00 UTC	1276	IN	Data Raw: a5 24 a7 e2 fe 3f 51 1a d8 1e d7 f7 05 e9 81 eb 7f 9c e2 1f 43 d1 fe c4 ef c3 e1 fa 8c ba 42 88 1c eb 94 b9 65 03 ca 1a 60 7b c5 74 1f 5f c8 94 d3 cd 50 28 5f 8f e4 ba a2 f6 86 33 12 92 ce e4 44 86 bb 91 11 a7 8a 3a 16 cd 43 06 7c 7a 45 38 c8 cb 73 85 f9 a6 3d 18 f7 da 6a 0d 2f 53 33 2c a4 dc 7f 08 65 0f 9d 85 15 d0 45 eb 67 26 13 f9 36 47 c3 f2 27 2b ef 35 ff 00 8b 07 03 d6 37 6e f8 ff 00 ff c4 00 28 10 01 00 01 02 04 05 05 01 01 01 00 00 00 00 00 00 01 11 00 21 31 41 51 61 71 81 91 a1 b1 10 20 30 c1 f0 d1 f1 e1 ff da 00 08 01 01 00 01 3f 10 f7 a8 73 28 31 72 c6 92 09 1a c3 ab 05 29 65 d6 3a 3d 64 d6 91 d0 7d d1 ba 82 54 55 31 36 51 c4 2f f2 ac 6b 44 52 f4 4e 04 b4 f0 cb d4 b7 7c 6e a5 23 ba b8 a4 af 3a 10 ff 00 82 7a 45 0e 95 cc 07 b8 d1 84 ce 9d e1 4a Data Ascii: $?QCBe`{t_P(_3D:C\|zE8s=j/S3,eEg&6G'+57n(!1AQaq 0?s(1r)e:=d}TU16Q/kDRN\|n#:zEJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50145	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	611	OUT	GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 336hN8ZAy/yJiOv8vqPnTA== Expires: Fri, 11 Apr 2025 13:07:26 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: uj9FfouXE97D0GXmDSXgZY/i1jlV2qWrJIIUitNY35IixkT+Y+qTHNsZ62yJaL+wr6EpvMgm1vWXdxSeznNrRQ== Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 467
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:00 UTC	466	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 ab 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 35 b4 44 00 00 00 38 74 52 4e 53 00 fa f5 f7 ef f4 f6 f8 f2 f3 f0 f9 98 03 64 48 a8 66 e0 1d f1 b4 55 fe 3b 21 71 25 0a 05 0b 75 Data Ascii: PNGIHDRW?PLTE45D8tRNSdHfU;!q%u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50143	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	554	OUT	GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AfAghl1gEHN29C2ZODbbICogRb1L1XF35YmRNUxKYWYl4w&oe=66501230&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	914	IN	HTTP/1.1 200 OK content-digest: adler32=630572011 Content-Type: image/x.fb.keyframes ETag: 4980362363275973831 x-manifold-obj-blobsizebytes: 34560 x-manifold-obj-canonicalpath: flat/base:v7:sorry.kf x-manifold-obj-ctime: 1611967372 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"908563459236466","color":"f7b125","__ctime":"1611967372","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 34560
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 33 33 83 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C33@pB4C4CAdobe
2024-04-24 05:33:00 UTC	15251	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 84 ba ff ff b8 7e f2 42 97 60 1d 43 2c bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a4 ba ff ff f8 d3 e6 42 9a a8 20 43 b0 ba ff ff 32 06 e4 42 0c e1 1f 43 bc ba ff ff 92 fa ea 42 9a a8 20 43 64 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 dc ba ff ff d4 a7 db 42 4e f1 1d 43 e8 ba ff ff 8a df da 42 35 af 1d 43 f4 ba ff ff b0 50 e1 42 9d 40 1f 43 9c bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 bb ff ff 8a df da 42 f9 11 1d 43 20 bb ff ff d4 a7 db 42 ec cf 1c 43 2c bb ff ff 8a df da 42 97 60 1d 43 d4 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 4c bb ff ff 32 06 e4 42 27 e0 1a 43 58 bb ff ff f8 d3 e6 42 93 18 1a 43 64 bb ff ff b0 50 e1 42 a4 80 1b 43 0c bc ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 Data Ascii: ~B`C, B C2BCB Cd BNCB5CPB@C BC BC,B`C L2B'CXBCdPBC
2024-04-24 05:33:00 UTC	1424	IN	Data Raw: d0 26 27 c1 b8 ff ff ff 08 00 00 00 00 00 00 01 94 fa ff ff 0d 04 5c c1 d0 26 27 c1 d0 ff ff ff 08 00 00 00 00 00 00 01 ac fa ff ff d2 ab 02 c1 12 bc 0e c1 e8 ff ff ff 08 00 00 00 00 00 00 01 c4 fa ff ff 33 10 50 c0 5a fe 1c 40 08 00 0c 00 0b 00 04 00 08 00 00 00 08 00 00 00 00 00 00 01 e4 fa ff ff 33 10 50 c0 5a fe 1c 40 54 fb ff ff 04 00 00 00 f8 fa ff ff 40 37 47 c1 d0 26 13 c1 6a ff ff ff 08 00 00 00 0c 00 00 00 74 fb ff ff 00 00 80 3f 26 fb ff ff 9a 99 19 3f 86 ff ff ff 08 00 00 00 0c 00 00 00 90 fb ff ff 00 00 80 3f 42 fb ff ff 9a 99 19 3f a2 ff ff ff 08 00 00 00 0c 00 00 00 ac fb ff ff 00 00 80 3f 50 fb ff ff ab aa 2a 3e ab aa 2a 3e c2 ff ff ff 08 00 00 00 10 00 00 00 68 fb ff ff 55 55 55 3f 55 55 55 3f 82 fb ff ff 9a 99 19 3f e2 ff ff ff 08 00 00 Data Ascii: &'\&'3PZ@3PZ@T@7G&jt?&??B??P>>hUUU?UUU??

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50140	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	829	OUT	GET /v/t39.30808-6/325474282_1575853666210428_5352904713362534565_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=fqs8zQc-t7MAb7ZEJix&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA7iY0CIzV0ai4ZmToaNs0NG7T8RjJ1FXTTorKJNo_Zqg&oe=662E5AF9 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	791	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Fri, 27 Jan 2023 23:20:11 GMT X-Needle-Checksum: 1867748954 thrift_fmhk: GBA5V0r7X3XvmLn2TdUAFHF/FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1620193988 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Edge-Debug: CqVvF5uCDps9aq8SSgaBgbpReIJrB_SRduDHolRng5OFxqMznZmxZNqGDjq-aP1libkZLdUYfAwKuIUJkgA5NjXB8rkLQ6OO74z74CG2sik X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=203, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6884
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 33 38 30 33 30 30 30 30 36 63 30 36 30 30 30 30 66 36 30 36 30 30 30 30 61 62 30 37 30 30 30 30 35 63 30 62 30 30 30 30 34 63 31 30 30 30 30 30 63 39 31 30 30 30 30 30 36 65 31 31 30 30 30 30 31 63 31 32 30 30 30 30 65 34 31 61 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000380300006c060000f6060000ab0700005c0b00004c100000c91000006e1100001c120000e41a0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:00 UTC	2504	IN	Data Raw: 76 d8 d5 fc f6 11 52 ef bf 6f 33 79 40 54 a4 d9 16 ba 65 e0 d5 62 b7 70 07 b7 a7 81 5d 23 b9 bb aa 89 dc 33 1d b2 93 c8 f3 30 67 b5 5d 0d 36 f9 3a 4d d4 fd d3 97 91 6c 6e be 60 62 1b 2a 27 f9 39 2c fe 5b d5 5e d0 b9 3d 3f 8f e7 e4 78 c8 3e 0a d5 6b de d4 b8 53 61 0e 5d 2c b5 ca f7 bb 91 c5 2d 4f 55 54 57 d8 ad d6 72 34 cf 7c ff c4 00 21 11 00 03 00 02 02 02 03 01 01 00 00 00 00 00 00 00 00 01 12 02 11 10 13 03 20 21 41 51 31 32 ff da 00 08 01 03 01 01 3f 01 92 49 24 92 49 34 68 d1 04 10 41 04 12 49 24 90 41 04 10 4f d1 d6 41 04 7a 7c 0d fe 18 7f a3 2c e4 48 92 3d 76 61 fd 3c c7 6a 31 c9 21 f9 91 3b 35 cb d8 9e 43 4f ed 8b 13 ac 78 22 0e 93 a9 7e 8f 04 8d 7c 0b c7 b1 f8 f6 46 9f 0e 4a 36 f9 62 e3 7c 2c 53 f7 c5 fb bf 44 f7 c3 3f ff c4 00 22 11 00 02 02 01 Data Ascii: vRo3y@Tebp]#30g]6:Mln`b*'9,[^=?x>kSa],-OUTWr4\|! !AQ12?I$I4hAI$AOAz\|,H=va<j1!;5COx"~\|FJ6b\|,SD?"
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: f5 76 8a c6 8d eb 6c a4 bd 7e a3 ea 26 2f 94 aa 6e 5c f5 54 69 e4 84 2f 93 1f 5e 8a 33 d9 31 df 33 a4 5e f2 d4 ae f5 9b 0c ba af cb 94 c5 60 05 61 18 d9 7b 89 b9 72 41 4b dd e6 09 3b 95 ff 00 0c 57 d6 c5 e8 1e cf 33 0d 2d ce b0 e2 31 c0 f3 f2 2b cc 6c 0b 1e 62 21 8e d4 3e 0b df 51 ce 4c bc 63 f1 1a 91 d6 5d f6 d7 31 83 81 d3 8e e7 06 a5 e5 c8 91 fb 99 00 ed 65 17 17 e2 2b 63 bd 3e 9f c8 6a 09 ad 81 d3 a1 09 b6 fb e2 e4 1f 67 fe ca 96 db 4b 5b af 31 cb 8c d1 88 2b 92 fe 22 53 a9 be 74 40 34 14 ea cf ff da 00 0c 03 01 00 02 00 03 00 00 00 10 0d 59 38 50 44 cd b3 36 04 ad f2 eb eb 18 88 76 17 ee 3a 1f 1e a5 00 9b 3f 16 31 6d de 02 a4 de 11 f6 8d ea 0e f6 34 aa 78 f9 c4 a8 b4 03 d9 75 e2 72 59 e8 bb aa ba b9 03 98 f6 c1 d2 20 9c 51 ef 67 bd a2 ea 01 43 d0 7b Data Ascii: vl~&/n\Ti/^313^`a{rAK;W3-1+lb!>QLc]1e+c>jgK[1+"St@4Y8PD6v:?1m4xurY QgC{
2024-04-24 05:33:00 UTC	1380	IN	Data Raw: ce b9 b0 52 77 d8 e2 22 76 76 3c bf cb 80 54 12 a5 48 93 83 11 12 04 e0 0b b4 6b ef 18 14 0d 4e 76 b4 fb e3 db 61 ba f8 3b 61 2f 6c 65 eb a2 6f a7 8c 3e 88 3a c1 f6 e9 72 b8 24 45 73 31 35 3b 0a 37 7c 5f 59 bd 24 c3 8b 1e 98 c8 09 15 a7 0f 57 16 69 38 0e 9b 61 54 80 14 56 8a f6 c7 5a 42 8b d8 0d 73 ce 37 88 eb 51 df 93 00 94 d8 1e 18 aa 88 c4 87 7d 19 9e 96 49 84 38 75 97 1a dc 42 69 41 a2 97 9c 64 5a a4 05 f1 fb 62 55 bb 9b 35 b5 cb 7a ba 8c 27 17 be f1 16 90 31 9a 84 b8 04 1e 9d d4 fd 23 ad e1 ea aa e1 47 85 3a dc 44 81 43 a3 b3 78 ff 00 78 18 71 10 ea c2 5f 8d 7b c9 0d d0 9b 13 65 2b ad 78 1c 75 5e 49 80 e2 10 d7 5b ef 1c 17 b1 c3 61 bd 73 e3 18 a6 0d 81 09 fd 5b 8c 45 89 54 b0 8c 7b 5b db 2b f7 82 29 7c d2 97 06 84 17 1a 4b 22 6d 21 6f c6 26 ee 25 48 Data Ascii: Rw"vv<THkNva;a/leo>:r$Es15;7\|_Y$Wi8aTVZBs7Q}I8uBiAdZbU5z'1#G:DCxxq_{e+xu^I[as[ET{[+)\|K"m!o&%H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50144	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	843	OUT	GET /v/t39.30808-6/305262992_451188083712872_1835908681663258642_n.png?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=107&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6pmRLTc1RUwAb453RIY&_nc_ht=scontent-sjc3-1.xx&oh=00_AfD67zDS4ZCd3Oluy7rReiwQPmwiSBDhpVXWELehNk3DdQ&oe=662E5DE1 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	790	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 19 Sep 2022 17:27:58 GMT X-Needle-Checksum: 2278575025 thrift_fmhk: GBB/8fWWGKmGKKba9QTlKcMPFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2344738358 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Edge-Debug: YMhoqXke5uXa_vGtZu6PrQc3xJMNh3G8cCGiMTxqIFdvBpENjHku_9f1-btnWXWCdUc9aO2TTdu7_6f0QblpdIArVxu2UdfjQzW0uJFexV8 X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=15, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8174
2024-04-24 05:33:00 UTC	710	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 37 38 30 33 30 30 30 30 35 34 30 37 30 30 30 30 65 65 30 37 30 30 30 30 38 38 30 38 30 30 30 30 35 65 30 65 30 30 30 30 38 30 31 34 30 30 30 30 66 62 31 34 30 30 30 30 61 30 31 35 30 30 30 30 35 30 31 36 30 30 30 30 65 65 31 66 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100007803000054070000ee070000880800005e0e000080140000fb140000a015000050160000ee1f0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:00 UTC	1556	IN	Data Raw: 99 d2 4d 49 5a d4 db 41 76 23 e3 12 a6 89 a5 b1 81 b8 b1 0a b4 18 c5 bb 4c 69 18 75 d5 2e 40 29 80 40 c6 63 e4 61 a2 99 d7 2f ba 90 16 49 a7 ab ba 53 66 15 b3 62 da d2 a5 bb 7a 1b 60 19 70 fb 99 32 00 ed 12 5d bd 20 6b 6b 33 07 3e 87 73 9c cc 2a ca 3c 8d 68 ad d7 9e 9c f3 ba a4 3e 98 24 b9 51 89 58 4a 46 34 33 58 e2 de e5 66 25 96 3a a5 99 ea ed a1 2b 63 64 c1 01 c1 53 aa c5 b8 16 0e 83 7c ff c4 00 2d 10 00 02 02 01 03 02 05 03 04 03 01 00 00 00 00 00 02 03 01 04 00 05 11 12 13 14 10 21 22 31 34 23 33 41 06 15 32 35 20 25 42 30 ff da 00 08 01 01 00 01 05 02 f1 fc 17 ab 38 c6 71 8c da 33 68 cd a3 36 cd b3 6f 18 f7 32 10 c8 b0 92 ff 00 2f c7 fe 97 ae b4 ac ae c9 8e 51 d6 1c 89 a3 68 6d 56 5d b8 d9 67 06 39 f8 f0 b5 65 55 57 3f a8 55 ca be b3 51 d3 1e 7f e6 Data Ascii: MIZAv#Liu.@)@ca/ISfbz`p2] kk3>s*<h>$QXJF43Xf%:+cdS\|-!"14#3A25 %B08q3h6o2/QhmV]g9eUW?UQ
2024-04-24 05:33:00 UTC	4064	IN	Data Raw: 43 d4 73 55 fc aa 8d e6 59 4f d0 75 46 59 4f d0 74 dd 44 62 9d e7 b3 3f a4 5e e3 c2 33 55 c0 44 6c f1 15 2b f9 ae 41 b3 db e7 6e 9b df 66 09 24 fe d3 04 83 5f 1a a7 6c f6 0c e1 36 36 b4 63 53 4d 55 46 48 4e 8d e3 2c fc 84 43 ab 6e aa a3 73 c0 cc 6c 34 6f 8e ec aa bc eb a2 79 a5 2d 5b 25 f9 36 fe 51 73 ca 21 39 a8 5c 6a 5b 8d d2 b9 bf 05 d8 42 52 41 6f 47 62 88 63 2d cd 77 0a 2b db 87 95 e5 c1 42 de 58 4e a1 e3 76 06 ec 2b 7b be 2a c9 08 78 eb 45 25 2d 36 8e ab 64 a6 68 c5 70 ad 7a 10 81 a7 79 78 f8 a9 a3 3a d6 b4 dc f7 38 12 d2 e2 ad 85 e5 cd 3a 85 c3 a9 d4 ee a8 c3 0f c2 98 79 06 e5 3f aa 9e 47 e4 b4 81 f7 a2 32 4c e2 e7 fa 6e 23 9a 02 e6 b4 9e aa d9 fa e0 f2 4c 0d c5 fa db cd 3e 3a 0b 5a e2 d0 13 71 72 ee 9a 0e 69 b4 75 6a 9c 79 35 b4 dc e7 d3 ba e2 d3 Data Ascii: CsUYOuFYOtDb?^3UDl+Anf$_l66cSMUFHN,Cnsl4oy-[%6Qs!9\j[BRAoGbc-w+BXNv+{*xE%-6dhpzyx:8:y?G2Ln#L>:Zqriujy5
2024-04-24 05:33:00 UTC	1844	IN	Data Raw: 43 c2 9f df 6e 53 44 49 af da b9 fe 33 73 09 2f 54 f1 3a d6 f3 4b 68 00 29 ec 8f 5f 4e 21 63 80 9b af 59 13 34 cf 21 a3 f1 8f dc ce cb 7c 95 ef d4 8f c3 9b 5e 9b a9 01 7e 4b 4f b3 1c 83 c6 73 f2 13 40 c6 89 81 8d a1 b2 1b df 8c 21 df 52 6a 9a 9b 6f 0b 59 3c d0 38 8f 33 8e 78 c9 c1 84 e5 c5 c1 3f 31 c9 17 97 d6 57 e1 5d 3a 7e 1c 2f 15 de 0a 3d 91 a6 43 74 aa fb 00 7a f6 1a 7a 0c 1a 26 ef 69 01 e9 2b e7 01 7d 68 4c 71 5c 1c 45 ee 98 94 2e 28 5e cb 5b 3f 19 69 d9 50 3e ad 19 2d ca 30 e8 57 83 f3 33 5e 28 7f 4d 1a 0d 1b fc b9 c3 f3 80 c6 59 05 9c fe 5c 58 04 36 af 65 4e c2 60 dd 52 14 0f 09 8e c6 98 4b f7 fe f0 e4 29 17 88 ea c3 b3 19 e0 6d 6e 17 9c 42 01 08 07 e5 b9 4c 2a 68 06 90 ed 07 4e bf 18 17 b1 33 81 d8 eb 44 46 f1 c5 c1 22 02 29 c8 cb 28 13 72 d9 ce Data Ascii: CnSDI3s/T:Kh)_N!cY4!\|^~KOs@!RjoY<83x?1W]:~/=Ctzz&i+}hLq\E.(^[?iP>-0W3^(MY\X6eN`RK)mnBL*hN3DF")(r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50147	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	556	OUT	GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AfAhrUF3wEe3teFtCcM4DS7mXy23jdfSmXbYJsT5bcZaRg&oe=66500BC7&_nc_sid=7da55a HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:00 UTC	917	IN	HTTP/1.1 200 OK content-digest: adler32=2117721780 Content-Type: image/x.fb.keyframes ETag: 2867499861726367659 x-manifold-obj-blobsizebytes: 43036 x-manifold-obj-canonicalpath: flat/base:v7:support.kf x-manifold-obj-ctime: 1611967373 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"613557422527858","color":"f7b125","__ctime":"1611967373","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:00 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43036
2024-04-24 05:33:00 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-24 05:33:00 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 00 00 0c 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 08 00 00 00 2c 00 00 00 74 0f 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 01 00 00 00 0b 00 00 00 01 01 01 00 02 01 00 01 01 01 01 00 01 00 00 00 1c 00 00 00 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 0c 00 00 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 05 00 00 00 28 00 00 00 e8 08 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 10 00 00 00 08 00 00 00 01 00 00 00 00 00 01 01 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 79 43 00 00 21 43 9f 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 a1 08 03 00 00 00 32 4c e9 38 00 00 00 42 50 4c 54 45 00 00 00 e2 69 18 e2 Data Ascii: KEYF( $$,t4C4C@pB( $$(4C4C@pByC!CPNGIHDR2L8BPLTEi
2024-04-24 05:33:00 UTC	15309	IN	Data Raw: 3b db cb d2 21 df d2 68 7e 76 d2 70 aa 3d df 38 be c9 c1 d5 57 79 fe bb d5 69 de df d9 5e 6f 3f d2 e4 a9 96 a0 33 db 8b 7c d0 f1 e6 be ca f3 37 0a 48 ff 05 f7 ce 17 40 12 d7 4f 75 dd c8 3f 5c fa df 76 ce b0 a7 6d 20 06 c3 5d 4e 15 1a a4 da 42 bb ff ff 57 97 d8 8e df ba 97 b1 00 17 c7 04 3f 54 48 05 f1 e1 c1 89 e3 34 ef 1d 37 fe aa 88 fa 1d 3f f8 57 6f 83 38 da db 36 34 2c 7a fd 2f 40 1f 80 f2 ff 2b 2e c7 3a cd ad 5b 98 63 7c b7 9f 46 ee 08 ba 1b 2e e5 95 78 fb 71 06 45 df 8f c2 e2 7c 92 af 1d d8 db 3f 51 f7 a7 fc 30 e2 8b 25 8f 33 ce b4 15 7f 72 15 bf 2b fa 2e ea f0 86 f8 6d 59 fc 98 45 97 8a bf 72 fe 78 70 10 ef f0 9c 6d bf a2 17 6e ea 9e e2 75 76 66 9f 26 b7 2c be b9 7b fd 70 d5 19 84 d2 ae 17 cd 81 6d aa 5d 7f 04 7d f6 bf a8 17 9b 48 7b fe 3d 38 a5 4f Data Ascii: ;!h~vp=8Wyi^o?3\|7H@Ou?\vm ]NBW?TH47?Wo864,z/@+.:[c\|F.xqE\|?Q0%3r+.mYErxpmnuvf&,{pm]}H{=8O
2024-04-24 05:33:00 UTC	16384	IN	Data Raw: 00 00 18 00 00 00 20 01 00 00 30 01 00 00 c0 02 00 00 48 04 00 00 14 00 00 00 90 b5 ff ff 0c 00 00 00 24 00 00 00 40 00 00 00 06 00 00 00 d4 00 00 00 ac 00 00 00 a0 00 00 00 78 00 00 00 6c 00 00 00 44 00 00 00 07 00 00 00 30 96 fc 3d 7e b1 64 3e 44 44 c4 3e 74 da 00 3f d7 a3 30 3f 82 4e 5b 3f 03 9d 76 3f 07 00 00 00 7c d9 20 be 0b be 75 be 7c d9 20 be 7c d9 20 be 00 00 00 00 00 00 00 00 7c d9 20 be 06 b4 ff ff 08 00 00 00 10 00 00 00 70 9a ff ff 00 00 80 3f c0 3e 8e 3c 7c 9a ff ff 18 70 b4 b2 eb 8c 68 3e aa b4 ff ff 00 00 00 01 32 b4 ff ff 08 00 00 00 10 00 00 00 9c 9a ff ff 05 00 80 3f 0b f2 a7 3e a8 9a ff ff 22 22 04 b5 55 1f 2e 3f d6 b4 ff ff 00 00 00 01 5e b4 ff ff 08 00 00 00 10 00 00 00 c8 9a ff ff 00 00 80 3f ab aa 2a 3f d4 9a ff ff ab aa 2a 3e ab Data Ascii: 0H$@xlD0=~d>DD>t?0?N[?v?\| u\| \| \| p?><\|ph>2?>""U.?^??>
2024-04-24 05:33:00 UTC	9842	IN	Data Raw: ff ff d2 4f a4 42 eb c7 16 43 e8 d9 ff ff 96 3d aa 42 c3 9a 1b 43 f4 d9 ff ff 52 13 a2 42 65 58 11 43 20 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 da ff ff aa 6d b1 42 79 71 1f 43 20 da ff ff 56 70 ae 42 4c cf 20 43 2c da ff ff 8a a4 ae 42 9f f4 1d 43 f8 d9 ff ff 04 00 00 00 40 da ff ff c6 fe ab 42 9b 0e 20 43 22 da ff ff 04 00 00 00 06 00 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 90 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 84 da ff ff 58 25 a8 42 55 ce 1b 43 90 da ff ff f2 3e a7 42 e3 04 19 43 9c da ff ff 1e 0b aa 42 6e 37 1f 43 c8 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 bc da ff ff 78 96 9a 42 f0 e2 11 43 c8 da ff ff 9e 52 99 42 63 94 11 43 d4 da ff ff 32 f4 9f 42 02 Data Ascii: OBC=BCRBeXC mByqC VpBL C,BC@B C"0\|@ X%BUC>BCBn7C xBCRBcC2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50148	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	611	OUT	GET /rsrc.php/v3/yW/r/n3z98p2y3lw.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: fJVrTCJulEDByx8OkiaIKg== Expires: Fri, 11 Apr 2025 10:43:36 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 1aixEV42kb9hocnaBPlYRUFKib7t98zzBykUn6U10lzSIO2aj8vHdgeiuNUwIbjG6V7vS86yhrIxAnOJpfrpzg== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=162, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 482
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	481	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 04 00 00 00 27 80 d5 86 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 07 74 49 4d 45 07 e3 02 1a 0f 1a 08 ac ca 12 c3 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 ea 49 44 41 54 78 da cd 8f af 4e 42 61 1c 86 1f ca d9 60 8c 00 85 84 04 6c a0 dd 06 14 e6 06 dc 82 89 3b a0 d8 a8 78 03 34 37 af c0 42 a0 50 1d 89 c8 06 85 a6 09 03 09 c6 c0 67 67 8e 1d 91 33 4d ce e7 2d ef 9f 5f f8 3e fe 07 57 dc 33 66 c1 5a 2d 18 9b ae f9 46 9d 09 87 33 9a b8 1c c9 f0 1c 96 6f 0c 68 52 22 ad 4a ba 81 8d bd 6b 06 b9 64 66 58 d1 25 c9 29 49 db 95 eb cc 2b 46 9a Data Ascii: PNGIHDR'gAMAa cHRMz&u0`:pQ<tIMEbKGDIDATxNBa`l;x47BPgg3M-_>W3fZ-F3ohR"JkdfX%)I+F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50149	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	611	OUT	GET /rsrc.php/v3/yn/r/CYXtIISfX0k.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1613	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: sfsNOcERN8vfxmE79P15Tg== Expires: Sat, 12 Apr 2025 12:58:45 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: mFRsh5s+LXwFvtm2ZgpqsTiMEJMVGOxqpJQ5v8hOlZ4boOir7vfDsoRwPv7+vvswL6oR6Jd6OyT3k4KdKS0GqQ== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=161, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 4476
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	4475	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 02 fd 08 03 00 00 00 e9 7d 3d ec 00 00 01 80 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR}=PLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50151	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	375	OUT	GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: rieOeATijCczzumIPaOM6Q== Expires: Fri, 11 Apr 2025 12:40:02 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: RGoGTSg2b0j3bnQj++g+0H7HjrwhRFWnJPvpZwLFdTqlq6o0Ca5kj/y1tOcHHz+DU1+uRx30LYXuFAUsOwjPaQ== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=160, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 376
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	375	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 6c 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 09 e9 09 00 00 00 23 74 52 4e 53 00 8a a5 fe 51 f6 fa f9 55 05 f3 b6 dc fd 90 d1 1c 02 e0 da 2f 62 af 19 2a dd 76 e1 d9 a4 e3 e2 8b 3a 39 ff a1 d5 cd 00 00 00 98 49 44 41 54 78 5e 6d 91 47 8e c3 40 10 03 a9 38 33 4a b6 62 70 0c f5 ff 3f 2e 20 68 75 b0 bb 8e 04 88 26 d9 da 08 be 2c 92 a4 28 7d d0 41 5a b1 53 a5 bb d4 Data Ascii: PNGIHDRW?lPLTEGpLN#tRNSQU/b*v:9IDATx^mG@83Jbp?. hu&,(}AZS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50150	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:00 UTC	375	OUT	GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 336hN8ZAy/yJiOv8vqPnTA== Expires: Fri, 11 Apr 2025 13:07:26 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: uj9FfouXE97D0GXmDSXgZY/i1jlV2qWrJIIUitNY35IixkT+Y+qTHNsZ62yJaL+wr6EpvMgm1vWXdxSeznNrRQ== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=160, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 467
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	466	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 ab 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 35 b4 44 00 00 00 38 74 52 4e 53 00 fa f5 f7 ef f4 f6 f8 f2 f3 f0 f9 98 03 64 48 a8 66 e0 1d f1 b4 55 fe 3b 21 71 25 0a 05 0b 75 Data Ascii: PNGIHDRW?PLTE45D8tRNSdHfU;!q%u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50152	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	424	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:33:01 UTC	1412	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:01 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936780; path=/; domain=.facebook.com; httponly Set-Cookie: fr=0x9NqxW3pvRr05nOz..BmKJmN..AAA.0.0.BmKJmN.AWVnkPyGF50; expires=Tue, 23-Jul-2024 05:33:01 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:01 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:01 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:33:01 UTC	2760	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4c 70 70 51 63 32 63 62 64 4d 57 6c 30 33 72 79 55 4f 63 48 63 79 79 6d 64 61 37 50 50 30 73 38 64 6b 6c 4b 33 65 70 49 32 77 4d 38 30 53 74 56 70 51 68 53 44 70 44 61 4f 58 44 72 47 2d 41 45 5a 4d 55 48 2d 37 38 4e 35 53 5f 33 43 72 42 62 53 75 76 4c 4f 65 67 30 61 2d 42 58 4a 44 53 34 63 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4c 37 36 6a 32 5a 48 57 32 7a 74 6c 34 4d 53 6c 58 57 35 33 46 76 32 44 6e 76 56 2d 34 6a 35 61 68 43 6a 4d 5f 78 6a 72 7a 47 45 6c 67 79 35 54 64 59 4e 4b 4d 57 44 51 30 4d 43 48 51 73 54 4f 56 59 49 67 42 53 4c 69 34 57 58 2d 45 39 77 55 65 78 43 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcLppQc2cbdMWl03ryUOcHcyymda7PP0s8dklK3epI2wM80StVpQhSDpDaOXDrG-AEZMUH-78N5S_3CrBbSuvLOeg0a-BXJDS4c"; e_clientaddr="AcL76j2ZHW2ztl4MSlXW53Fv2DnvV-4j5ahCjM_xjrzGElgy5TdYNKMWDQ0MCHQsTOVYIgBSLi4WX-E9wUexC
2024-04-24 05:33:01 UTC	6	IN	Data Raw: 32 66 39 32 0d 0a Data Ascii: 2f92
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6a 55 4b 37 4f 51 47 55 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="jUK7OQGU">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 68 6f 74 6f 73 20 61 6e 64 20 6d 6f 72 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 Data Ascii: route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, photos and more on Facebook." /><link rel="mask-icon" sizes="any" href="
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 7d 2c 22 6a 75 73 74 6b 6e 6f 62 78 44 61 74 61 22 3a 7b 22 32 32 36 39 22 3a 7b 22 72 22 3a 66 61 6c 73 65 7d 7d 7d 29 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 54 69 6d 65 53 Data Ascii: sh":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"20948":{"result":true,"hash":null},"25572":{"result":false,"hash":null},"25571":{"result":false,"hash":null}},"justknobxData":{"2269":{"r":false}}})});requireLazy(["TimeS
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 63 52 51 30 65 54 78 71 45 46 62 49 67 31 49 54 30 4a 63 4c 4c 4e 22 7d 2c 31 34 31 5d 2c 5b 22 4b 53 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 6b 69 6c 6c 65 64 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 43 52 45 41 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 44 45 4c 45 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 55 50 44 41 54 45 5f 4e 41 4d 45 22 2c 22 54 50 41 5f 53 52 54 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 22 2c 22 57 4f 52 4b 52 4f 4f 4d 53 5f 52 45 51 55 45 Data Ascii: ore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"cRQ0eTxqEFbIg1IT0JcLLN"},141],["KSConfig",[],{"killed":{"__set":["POCKET_MONSTERS_CREATE","POCKET_MONSTERS_DELETE","POCKET_MONSTERS_UPDATE_NAME","TPA_SRT_TRANSLATION","WORKROOMS_REQUE
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a 33 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 54 69 6d 65 22 3a 35 30 7d 2c 33 32 39 5d 2c 5b 22 43 53 53 4c 6f 61 64 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 6d 6f 64 75 6c 65 50 72 65 66 69 78 22 3a 22 42 4c 43 53 53 3a 22 2c 22 66 6f 72 63 65 50 6f 6c 6c 46 6f 72 42 6f 6f 74 6c 6f 61 64 65 72 22 3a 74 72 75 65 2c 22 6c 6f 61 64 45 76 65 6e 74 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 7d Data Ascii: rLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRetryAbortNum":3,"translationRetryAbortTime":50},329],["CSSLoaderConfig",[],{"timeout":5000,"modulePrefix":"BLCSS:","forcePollForBootloader":true,"loadEventSupported":true}
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 37 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 67 69 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 72 74 6c 22 3a 66 61 6c 73 65 2c 22 69 73 5f 65 78 70 65 72 69 6d 65 6e 74 61 6c 5f 74 69 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 5f 6a 69 74 5f 77 61 72 6d 65 64 5f 75 70 22 3a 74 72 75 65 2c 22 68 73 Data Ascii: AULT","haste_session":"19837.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_origin":null,"manifest_version_prefix":null,"be_one_ahead":false,"is_rtl":false,"is_experimental_tier":false,"is_jit_warmed_up":true,"hs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50154	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	607	OUT	GET /v/t39.30808-6/305262992_451188083712872_1835908681663258642_n.png?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=107&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6pmRLTc1RUwAb453RIY&_nc_ht=scontent-sjc3-1.xx&oh=00_AfD67zDS4ZCd3Oluy7rReiwQPmwiSBDhpVXWELehNk3DdQ&oe=662E5DE1 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 19 Sep 2022 17:27:58 GMT X-Needle-Checksum: 2278575025 thrift_fmhk: GBB/8fWWGKmGKKba9QTlKcMPFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2344738358 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=175, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8174
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	8173	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 37 38 30 33 30 30 30 30 35 34 30 37 30 30 30 30 65 65 30 37 30 30 30 30 38 38 30 38 30 30 30 30 35 65 30 65 30 30 30 30 38 30 31 34 30 30 30 30 66 62 31 34 30 30 30 30 61 30 31 35 30 30 30 30 35 30 31 36 30 30 30 30 65 65 31 66 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100007803000054070000ee070000880800005e0e000080140000fb140000a015000050160000ee1f0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50153	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	843	OUT	GET /v/t39.30808-6/295727862_414160250748989_1177096163670263996_n.png?stp=c71.0.154.155a_dst-jpg_p296x100&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=j5dhy87QTmwAb63QD6F&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCt0JaFs05idTJ4P5xhITxM_7cO2enhon94CN-mtzA_vw&oe=662E7A1F HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	790	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 25 Jul 2022 18:33:49 GMT X-Needle-Checksum: 1765161152 thrift_fmhk: GBCmA2x0FyFoXdlYdHD7FqU5FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=909650601 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Edge-Debug: dAyZ3AERjbZPVvGikFHE0UWYVXc62yW3Xf7um5dd3aoYCiSxpyzzwHcoF1LhGiJoxWntaWYS4IVTVZQX0XYenrXPYp5vcV_o8sLFEFDMclA X-FB-Connection-Quality: MODERATE; q=0.3, rtt=175, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=140, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6342
2024-04-24 05:33:01 UTC	1500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 35 35 30 33 30 30 30 30 62 39 30 36 30 30 30 30 39 31 30 37 30 30 30 30 33 66 30 38 30 30 30 30 35 34 30 62 30 30 30 30 61 33 30 66 30 30 30 30 32 31 31 30 30 30 30 30 30 61 31 31 30 30 30 30 65 31 31 31 30 30 30 30 63 36 31 38 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f01000055030000b9060000910700003f080000540b0000a30f0000211000000a110000e1110000c6180000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-24 05:33:01 UTC	2504	IN	Data Raw: 4b 2d 29 4f d4 dc 65 ba 96 d8 49 8a c5 60 c8 79 cd cc 36 58 0d 76 96 4d 96 2a e3 59 ad f8 c3 71 b4 79 80 4d ea 07 8c fb 98 55 77 19 c0 75 ee d6 23 31 e6 3e 7d 7b b6 ab 77 dc ca c3 d8 7d 94 55 5d db 96 0e 4b 9d 5e 9a ab 20 69 b8 4c a2 a7 bd ce 33 77 c0 87 16 82 74 55 84 13 fe f1 30 28 10 71 8b c4 d9 d4 8f 0a ab bf 81 a3 2d 5e 64 50 2d 4b a9 34 be ce b4 38 61 f4 db 9e 0e 34 cb 76 95 62 67 77 ae ee 46 3e f1 16 2f a5 8a 18 f6 d2 60 aa 86 ba b5 bb 34 62 d1 5c 1e 20 33 a8 a8 35 27 ec e8 b5 21 aa c2 79 63 0f c7 78 0e b4 56 a8 da 9f ff c4 00 2a 11 00 02 02 01 04 01 02 04 07 00 00 00 00 00 00 00 00 01 02 11 03 10 12 21 31 04 20 d1 05 14 61 a1 13 22 32 41 51 91 b1 ff da 00 08 01 03 01 01 3f 01 2b 83 f0 dd 8a 08 a2 6f d4 b4 65 8d df a9 6a f5 64 e4 63 6d ab 3a 46 39 Data Ascii: K-)OeI`y6XvMYqyMUwu#1>}{w}U]K^ iL3wtU0(q-^dP-K48a4vbgwF>/`4b\ 35'!ycxV!1 a"2AQ?+oejdcm:F9
2024-04-24 05:33:01 UTC	2338	IN	Data Raw: da 00 0c 03 01 00 02 00 03 00 00 00 10 a4 67 de a0 74 ad 93 41 1f 15 86 80 77 28 a8 c3 bb ae d3 8a 7c 85 fc c3 4f 22 47 f4 1f e5 e3 01 7e 46 d6 59 04 b5 50 a7 c4 99 e1 7d 4a 31 54 3a dd ae 25 d8 f3 63 0d 65 13 de a5 4d 74 af fb fd 3e b6 0a 43 51 ef ef 50 57 c5 09 ff c4 00 23 11 01 01 01 00 01 04 02 01 05 00 00 00 00 00 00 00 01 00 11 21 10 31 41 51 61 71 81 20 a1 b1 c1 d1 ff da 00 08 01 03 01 01 3f 10 3b 4b 68 da 86 72 40 3b 59 19 65 96 41 3c 43 70 b2 10 51 d2 df bd 56 db bb 3d 76 d9 ed 07 17 a3 2e 19 45 0f 1f 7f ed ba 7c fb f8 f7 69 b3 0a ea c8 4e 9a 47 88 f4 7a 49 0e 9d 4f 10 77 bb 7d fc 3e 67 a3 b6 87 8b 16 24 cd c9 16 36 b6 b3 ae 3c 67 b8 75 d8 a8 58 67 d0 7f 4b 44 30 72 26 f4 4a 9d dc bc 75 79 cf e7 f5 0c e3 41 e2 fe 3c cf e1 fb db 88 ef e3 b4 92 40 Data Ascii: gtAw(\|O"G~FYP}J1T:%ceMt>CQPW#!1AQaq ?;Khr@;YeA<CpQV=v.E\|iNGzIOw}>g$6<guXgKD0r&JuyA<@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50155	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	845	OUT	GET /v/t39.30808-6/236827637_10159748894181202_2169988089763910096_n.jpg?stp=c60.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eyUcgU6E1RUAb5oTdVX&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCScx29jxRZiTA0yPYOjhEPmR3Lv84z3u132jZiAKOMrw&oe=662E6706 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	790	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 10 Aug 2021 21:45:41 GMT X-Needle-Checksum: 1852287875 thrift_fmhk: GBAXShxj+ErJYwXqBm4A30gsFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1126225400 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Edge-Debug: OP6L4S8EpsMcIEz8vIE9YP_r_2CLh_h4b1h7R9tiJorHOZmoWw_al-U5XseLT1AdSl9ap6A0Of0IHCBwzRQd8xvI1Sqzk2P8R0reWexqSzY X-FB-Connection-Quality: MODERATE; q=0.3, rtt=175, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=58, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5664
2024-04-24 05:33:01 UTC	710	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 5e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 82 98 00 02 00 00 00 3c 00 00 00 1a 00 00 00 00 c2 a9 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 42 65 6e 6a 61 6d 69 6e 20 42 65 6e 73 63 68 6e 65 69 64 65 72 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 00 ff ed 00 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 cc 1c 02 74 00 3b c2 a9 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 42 65 6e 6a 61 6d 69 6e 20 42 65 6e 73 63 68 6e 65 69 64 65 72 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 1c 02 55 00 05 4f 77 6e 65 72 1c 02 50 00 15 42 65 6e 6a 61 6d 69 6e 20 42 65 6e 73 63 68 6e 65 69 64 65 72 1c 02 28 00 62 46 42 4d 44 Data Ascii: JFIF^ExifMM*< Copyright 2021 Benjamin Benschneider All Rights ReservedPhotoshop 3.08BIMt; Copyright 2021 Benjamin Benschneider All Rights ReservedUOwnerPBenjamin Benschneider(bFBMD
2024-04-24 05:33:01 UTC	3318	IN	Data Raw: 5c 7e 2d 95 17 e7 65 c1 0d b3 f7 78 95 9e a2 bd ce ac 33 6c e4 2f 2f 57 43 61 7a 8f 68 ce f3 a5 23 e1 1a 49 6f ea 99 d8 7c f3 9d df 3d d0 dd 79 71 fa 92 35 07 9f f4 ff 00 2a 2d 0c af bc ee c5 d3 c7 c9 bf 52 5c 0a 52 fa 23 c6 da 1a d5 b4 06 74 cf ce 9a 95 f4 4e a6 ee b7 73 9a 55 5a 97 86 ce 3b 9e 9e 79 e8 d4 57 e9 73 b9 f5 c0 2e f8 6c 91 9a b6 89 ae 39 d7 3b 46 88 34 3d 3a 54 f9 f2 e9 06 bc 6a 1b 39 1d 0c 15 34 ac a8 2d 29 c9 48 d3 ac 26 fa 4d 6f 91 13 d8 b9 eb 9d 63 cf d7 2d 72 34 f4 18 39 fb 59 a5 e1 ea 49 66 b3 cb 79 6b 07 53 32 5c b7 3f 45 f3 d3 9e f9 e1 ae 57 a6 4a b5 ab d8 95 9b c6 1f 23 6a 65 f0 5e 6b e4 1f 28 1b f9 08 12 be 0a 19 78 3f ff c4 00 28 10 00 02 02 02 01 04 02 03 00 02 03 00 00 00 00 00 01 02 00 03 04 11 12 10 13 20 21 23 30 14 22 31 24 Data Ascii: \~-ex3l//WCazh#Io\|=yq5*-R\R#tNsUZ;yWs.l9;F4=:Tj94-)H&Moc-r49YIfykS2\?EWJ#je^k(x?( !#0"1$
2024-04-24 05:33:01 UTC	1636	IN	Data Raw: 07 e2 59 c4 d1 c4 d8 d5 15 cc 22 a2 bd 4a 65 78 8d f5 37 8e 36 10 4a 23 07 98 3c a1 f7 90 37 e8 22 44 2f d4 b6 50 7d 21 28 26 f9 3b 64 1b ea 36 26 46 87 21 49 17 d0 6b e8 a3 06 05 10 8b 49 14 66 12 aa 23 10 ed 99 79 00 11 63 61 66 26 e0 e4 76 1c c3 60 99 26 10 bc 0d 7d 00 f1 2c 62 c8 c3 70 20 91 3b 19 cc b1 1c 62 d8 43 12 aa 72 84 30 84 11 ca 39 86 e6 71 63 f4 44 58 b5 3c 03 b6 64 ba ba 8e a5 02 30 2d 53 26 19 2a c5 8c 1b 2f e8 59 96 8a 8e 61 4a 62 d4 db c3 4e 0f db 11 58 8e e0 9c 4e ab cf e6 e3 60 f0 20 a4 f0 9d 31 c8 81 97 36 8e 95 b5 41 f0 64 a5 14 b5 cf 0c 02 7e 80 ec 35 cc ad e4 b2 c8 8f 32 e1 e2 52 b2 ca f5 15 1b ea 5f 89 e6 18 da e9 7d f1 e2 e3 26 0b d9 2f 21 7a ef ec f1 02 f7 15 5a 2d 5a 7b 80 cb 0f 58 0e 05 75 e7 ec f5 6f d1 78 89 49 da 3a 4f 11 Data Ascii: Y"Jex76J#<7"D/P}!(&;d6&F!IkIf#ycaf&v`&},bp ;bCr09qcDX<d0-S&*/YaJbNXN` 16Ad~52R_}&/!zZ-Z{XuoxI:O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50157	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	828	OUT	GET /v/t39.30808-6/434738801_903046718527004_2875905521727260665_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=7h4eP_Dka8UAb7E6TIi&_nc_ht=scontent-sjc3-1.xx&oh=00_AfBS7yoKFIceCz3ZSneb7IqWPdpshZnlJvExT1w3_6K7gw&oe=662E5890 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Fri, 05 Apr 2024 23:34:01 GMT X-Needle-Checksum: 2388778859 thrift_fmhk: GBCzt/EoHCFV9AAtRBTjqI36FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3157375219 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=174, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6245
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	6244	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 32 36 30 33 30 30 30 30 39 33 30 35 30 30 30 30 34 62 30 36 30 30 30 30 30 35 30 37 30 30 30 30 38 34 30 61 30 30 30 30 31 30 30 66 30 30 30 30 39 31 30 66 30 30 30 30 35 39 31 30 30 30 30 30 32 30 31 31 30 30 30 30 36 35 31 38 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000026030000930500004b06000005070000840a0000100f0000910f0000591000002011000065180000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50156	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	607	OUT	GET /v/t39.30808-6/393310192_718523496989526_6043121057059152698_n.jpg?stp=c38.0.152.152a_dst-jpg_p228x119&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=p7c_FRo1cLsAb5rFBd9&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA5tAq0YSchwbtnK_GRq3hJkC8hC9q6B8Jc7xckCu0k9w&oe=662E7B13 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Wed, 18 Oct 2023 01:46:16 GMT X-Needle-Checksum: 1998986351 thrift_fmhk: GBBWTRAz3KjJouX7hxCd7+G9FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2416158965 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=175, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8176
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	8175	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 35 39 30 33 30 30 30 30 64 63 30 36 30 30 30 30 64 37 30 37 30 30 30 30 62 65 30 38 30 30 30 30 33 33 30 64 30 30 30 30 32 38 31 33 30 30 30 30 61 62 31 33 30 30 30 30 66 35 31 34 30 30 30 30 30 32 31 36 30 30 30 30 66 30 31 66 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000059030000dc060000d7070000be080000330d000028130000ab130000f514000002160000f01f0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50158	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	830	OUT	GET /v/t39.30808-1/276269061_277708347876894_5728540495443750993_n.png?stp=cp0_dst-png_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=CsD_9pI4JToAb4bQu5G&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCJKiCsTTmbEVTCI1MEQLiu_2h5TWG2Fgy6FRIDb5h0NQ&oe=662E7DAA HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	662	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 22 Mar 2022 20:15:08 GMT X-Needle-Checksum: 1420688530 thrift_fmhk: GBClil4z5v3gC8XiL87NzggZFfDr4Z0EvFUAAAA= Content-Type: image/png content-digest: adler32=888102497 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=175, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2287
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	2286	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 52 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 69 70 74 63 00 00 08 99 05 c1 b1 11 80 30 0c 03 c0 de d3 38 92 65 99 71 b8 d0 d0 a5 60 ff e3 3f de f3 ed 80 62 ed 44 3b 73 95 9b aa 87 a0 c9 1a d2 a3 4b 26 d4 2d dd ad 32 51 43 c4 0f 9c 65 0d 02 21 27 a0 18 00 00 08 4b 49 44 41 54 58 85 ad 58 5b 90 14 d5 19 fe fe 73 4e f7 dc 76 66 f6 c2 ae 7b 5f 6e 12 76 23 a0 c8 35 24 18 4b 0b 09 d1 58 8a b1 4c 52 6a bc 51 49 25 f1 0d 0b 29 93 97 5c b0 c8 53 d4 aa 24 58 4a 8a 54 c5 58 02 49 d0 22 86 68 69 b0 28 65 25 1a 10 97 0d 02 0b b3 ec b2 b0 d7 99 dd 9d e9 e9 ee 73 fe 3c f4 ee ec 02 7b e1 92 bf fa 61 e6 74 9f Data Ascii: PNGIHDR((/:sRGB,RzTXtRaw profile type iptc08eq`?bD;sK&-2QCe!'KIDATXX[sNvf{_nv#5$KXLRjQI%)\S$XJTXI"hi(e%s<{at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50159	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	830	OUT	GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=cp0_dst-png_p40x40&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfClAOnz2eJZkYuBO3W0ozHjBvdkizIwnGg14B3XY6bT6g&oe=662E8562 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	663	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 05 May 2022 14:05:25 GMT X-Needle-Checksum: 2356526752 thrift_fmhk: GBAi8jtjDU+HNcV5Z+HKPovGFfDr4Z0EvFUAAAA= Content-Type: image/png content-digest: adler32=1798326039 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=173, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2255
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	2254	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 53 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 69 70 74 63 00 00 08 99 05 c1 b1 0d c0 30 08 04 c0 9e 69 30 fe 7f f0 3c a0 48 e9 5c 64 7f e5 ce de fb b5 05 6d b5 87 d2 7d 41 c4 b0 76 00 7c f2 60 12 3c 1a 05 b4 4b 9d 2b 0b 22 09 fb 01 ac 56 0d a5 b4 3d 54 34 00 00 08 2a 49 44 41 54 58 85 ad 58 6b 70 55 57 15 fe d6 de e7 9c fb ca bd 79 91 07 09 90 f0 08 01 42 01 85 ca a3 e0 c4 d2 02 3f 1c 2a 2a e2 8c ad f4 05 63 b5 e3 38 d6 3a ad d3 a9 e3 d8 ce 74 9c 5a 7f d8 07 33 68 c5 81 f1 51 54 da 32 54 3b 5a 10 84 16 ca ab 22 24 85 40 12 42 08 90 77 ee cd 7d 9d bb f7 5e fe 38 37 b7 80 49 48 a8 eb e7 39 67 ed Data Ascii: PNGIHDR((/:sRGB,SzTXtRaw profile type iptc0i0<H\dm}Av\|`<K+"V=T4IDATXXkpUWyB?*c8:tZ3hQT2T;Z"$@Bw}^87IH9g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50161	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	591	OUT	GET /v/t39.30808-6/432668852_796155295887560_588370489562300368_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eDQuve-aS-sAb5LNrB5&_nc_ht=scontent-sjc3-1.xx&oh=00_AfB5mJMGFLBrA-mEsMyjPpEuIa7NkDwnKZ7m7vkd3Pfk2g&oe=662E7DF6 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Fri, 15 Mar 2024 17:26:52 GMT X-Needle-Checksum: 3015067689 thrift_fmhk: GBDM+/Bs8+e1SsYYX96mcQwsFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3184855043 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=173, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7288
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	7287	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 30 30 33 30 30 30 30 63 30 30 36 30 30 30 30 35 39 30 37 30 30 30 30 32 61 30 38 30 30 30 30 31 35 30 63 30 30 30 30 35 64 31 31 30 30 30 30 64 37 31 31 30 30 30 30 39 62 31 32 30 30 30 30 38 65 31 33 30 30 30 30 37 38 31 63 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f01000060030000c0060000590700002a080000150c00005d110000d71100009b1200008e130000781c0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50162	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	592	OUT	GET /v/t39.30808-6/352230347_642498977400229_7245798881627614562_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=qBZxTxVqogYAb5_rX9a&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDlIkpj_DYYAm2exgqXfO2IurQjjy8C0QMKtToF__aj1Q&oe=662E7B2D HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	663	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 05 Jun 2023 23:00:54 GMT X-Needle-Checksum: 1049931577 thrift_fmhk: GBDL9VSK18MS3nZ+SP3pS78jFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=181150200 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=173, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5304
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	5303	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 32 37 30 33 30 30 30 30 37 61 30 35 30 30 30 30 62 65 30 36 30 30 30 30 66 63 30 37 30 30 30 30 64 63 30 61 30 30 30 30 61 64 30 64 30 30 30 30 33 30 30 65 30 30 30 30 34 66 30 66 30 30 30 30 36 39 31 30 30 30 30 30 62 38 31 34 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a70010000270300007a050000be060000fc070000dc0a0000ad0d0000300e00004f0f000069100000b8140000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50163	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	606	OUT	GET /v/t39.30808-6/434225809_986346610049172_409589886129999166_n.jpg?stp=c24.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nXzthKFyQOwAb6u1zRw&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCF-fyzT-Hv9sf9KdaPTk6XQIwFJRwMhMHQ5m4rZ5vwng&oe=662E7DF7 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 28 Mar 2024 03:44:19 GMT X-Needle-Checksum: 1881832713 thrift_fmhk: GBAXG75ypMKcBRIzleMAiQk3FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1295063724 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=173, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9848
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	9847	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 35 33 30 33 30 30 30 30 38 33 30 37 30 30 30 30 36 34 30 38 30 30 30 30 36 64 30 39 30 30 30 30 63 37 31 31 30 30 30 30 65 33 31 38 30 30 30 30 36 36 31 39 30 30 30 30 38 31 31 61 30 30 30 30 63 63 31 62 30 30 30 30 37 38 32 36 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100005303000083070000640800006d090000c7110000e318000066190000811a0000cc1b000078260000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50160	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	828	OUT	GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=dst-png_p200x200&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDSUfPF5rTDhXWuDBUBGPiJpIfJPc_0IyZvseAkUZNJyQ&oe=662E8562 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 05 May 2022 14:05:25 GMT X-Needle-Checksum: 2356526752 thrift_fmhk: GBAi8jtjDU+HNcV5Z+HKPovGFfDr4Z0EvFUAAAA= Content-Type: image/png content-digest: adler32=1222875606 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=174, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 14270
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	14269	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 02 00 00 00 22 3a 39 c9 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 53 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 69 70 74 63 00 00 08 99 05 c1 b1 0d c0 30 08 04 c0 9e 69 30 fe 7f f0 3c a0 48 e9 5c 64 7f e5 ce de fb b5 05 6d b5 87 d2 7d 41 c4 b0 76 00 7c f2 60 12 3c 1a 05 b4 4b 9d 2b 0b 22 09 fb 01 ac 56 0d a5 b4 3d 54 34 00 00 20 00 49 44 41 54 78 9c ed 5d 77 9c 1c c5 95 7e af aa 7b f2 e6 bc ab 0d ca 11 49 c8 48 02 91 73 12 41 c6 06 83 01 13 0c 9c 7d 36 36 b6 71 38 ce e7 3b 1b 07 f0 9d 0f c3 d9 87 c9 60 30 19 8e 8c 41 60 a2 90 04 42 08 a1 b8 4a ab cd 39 4c 9e ee aa 77 7f d4 4c ef ec 0a d0 ec f4 6c 90 98 4f fe 09 7e b8 a7 a7 a7 fb eb 17 be f7 ea 15 12 11 64 91 Data Ascii: PNGIHDR":9sRGB,SzTXtRaw profile type iptc0i0<H\dm}Av\|`<K+"V=T4 IDATx]w~{IHsA}66q8;`0A`BJ9LwLlO~d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50164	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	593	OUT	GET /v/t39.30808-6/325474282_1575853666210428_5352904713362534565_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=fqs8zQc-t7MAb7ZEJix&_nc_ht=scontent-sjc3-1.xx&oh=00_AfA7iY0CIzV0ai4ZmToaNs0NG7T8RjJ1FXTTorKJNo_Zqg&oe=662E5AF9 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Fri, 27 Jan 2023 23:20:11 GMT X-Needle-Checksum: 1867748954 thrift_fmhk: GBA5V0r7X3XvmLn2TdUAFHF/FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1620193988 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=173, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6884
2024-04-24 05:33:01 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:01 UTC	6883	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 33 38 30 33 30 30 30 30 36 63 30 36 30 30 30 30 66 36 30 36 30 30 30 30 61 62 30 37 30 30 30 30 35 63 30 62 30 30 30 30 34 63 31 30 30 30 30 30 63 39 31 30 30 30 30 30 36 65 31 31 30 30 30 30 31 63 31 32 30 30 30 30 65 34 31 61 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000380300006c060000f6060000ab0700005c0b00004c100000c91000006e1100001c120000e41a0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50165	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	617	OUT	GET /images/emoji.php/v9/t1f/1/16/1f3b6.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1939	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: a240yIW404CcdJcE0pSgdw== Expires: Sat, 12 Apr 2025 08:25:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin;report-to="coop_report" X-Content-Type-Options: nosniff report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
2024-04-24 05:33:01 UTC	329	IN	Data Raw: 58 2d 46 42 2d 44 65 62 75 67 3a 20 6e 62 57 56 58 4e 6c 7a 57 2b 7a 66 55 78 66 48 73 70 4d 41 4a 67 6d 73 32 58 4f 73 6a 68 37 6a 66 78 30 38 59 46 72 4a 65 4e 49 56 57 6c 52 72 43 39 44 46 79 51 43 59 61 4f 49 46 68 57 6f 4b 42 4b 6f 63 4b 69 46 32 54 7a 52 57 7a 5a 4b 36 6b 74 62 75 48 77 3d 3d 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 34 20 41 70 72 20 32 30 32 34 20 30 35 3a 33 33 3a 30 31 20 47 4d 54 0d 0a 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 34 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 31 31 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 30 2c 20 75 6c 6c 61 74 3d 2d 31 Data Ascii: X-FB-Debug: nbWVXNlzW+zfUxfHspMAJgms2XOsjh7jfx08YFrJeNIVWlRrC9DFyQCYaOIFhWoKBKocKiF2TzRWzZK6ktbuHw==Date: Wed, 24 Apr 2024 05:33:01 GMTX-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	470	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 a5 50 4c 54 45 47 70 4c 37 3a 40 35 39 41 3a 3e 46 3b 40 48 35 39 40 39 3d 45 30 32 39 44 48 50 42 46 50 35 38 3f 40 46 51 3b 3f 47 4d 53 5f 38 3c 43 2f 31 38 2e 30 37 2c 2d 33 32 34 3b 3d 40 49 3c 40 49 31 35 3c 2f 32 38 30 32 37 30 32 39 33 36 3d 33 35 3d 39 3b 42 51 59 66 33 36 3d 4c 53 5f 2c 2e 33 48 4f 5a 3d 43 4c 2c 2d 32 43 48 52 2e 31 37 38 3a 41 2d 2f 35 51 58 65 4d 54 61 44 4a 55 3d 41 4a 65 6d 7b 65 6f 7e 6d 76 87 69 71 80 6f 78 88 28 29 2e 5a 62 70 38 3b 43 44 49 54 67 71 81 7a 85 97 54 5c 69 44 b7 20 a4 00 00 00 33 74 52 4e 53 00 17 ee 0f 06 6e 41 9b 03 1f 4b ae 88 3b 5b 89 b9 71 fb 9c 2f a2 7e 69 62 37 e0 93 2d c8 53 90 68 f3 52 db b0 b0 Data Ascii: PNGIHDR(-SPLTEGpL7:@59A:>F;@H59@9=E029DHPBFP58?@FQ;?GMS_8<C/18.07,-324;=@I<@I15</2802702936=35=9;BQYf36=LS_,.3HOZ=CL,-2CHR.178:A-/5QXeMTaDJU=AJem{eo~mviqox().Zbp8;CDITgqzT\iD 3tRNSnAK;[q/~ib7-ShR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50166	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	611	OUT	GET /rsrc.php/v3/y3/r/RAS_7oBOZt9.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1708	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: k8u1AbC3WN2QlkxW0W4flQ== Expires: Sat, 19 Apr 2025 15:48:59 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: w9p4hZq8kqm/huNPJjyf6YuJTjrZmwGTIrAy7CbLO0JyglLaPj0sJ38NR0kAvmjXtfZEVe7uuvxIrVC/gLwjHQ== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8336
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	8335	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 05 3f 08 03 00 00 00 70 fa bc dd 00 00 02 f7 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 68 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR?pPLTEGpLbhp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50167	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	375	OUT	GET /rsrc.php/v3/yW/r/n3z98p2y3lw.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1638	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: fJVrTCJulEDByx8OkiaIKg== Expires: Fri, 11 Apr 2025 10:43:36 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 1aixEV42kb9hocnaBPlYRUFKib7t98zzBykUn6U10lzSIO2aj8vHdgeiuNUwIbjG6V7vS86yhrIxAnOJpfrpzg== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 482
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	481	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 04 00 00 00 27 80 d5 86 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 07 74 49 4d 45 07 e3 02 1a 0f 1a 08 ac ca 12 c3 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 ea 49 44 41 54 78 da cd 8f af 4e 42 61 1c 86 1f ca d9 60 8c 00 85 84 04 6c a0 dd 06 14 e6 06 dc 82 89 3b a0 d8 a8 78 03 34 37 af c0 42 a0 50 1d 89 c8 06 85 a6 09 03 09 c6 c0 67 67 8e 1d 91 33 4d ce e7 2d ef 9f 5f f8 3e fe 07 57 dc 33 66 c1 5a 2d 18 9b ae f9 46 9d 09 87 33 9a b8 1c c9 f0 1c 96 6f 0c 68 52 22 ad 4a ba 81 8d bd 6b 06 b9 64 66 58 d1 25 c9 29 49 db 95 eb cc 2b 46 9a Data Ascii: PNGIHDR'gAMAa cHRMz&u0`:pQ<tIMEbKGDIDATxNBa`l;x47BPgg3M-_>W3fZ-F3ohR"JkdfX%)I+F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50168	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	375	OUT	GET /rsrc.php/v3/yn/r/CYXtIISfX0k.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:01 UTC	1613	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: sfsNOcERN8vfxmE79P15Tg== Expires: Sat, 12 Apr 2025 12:58:45 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: mFRsh5s+LXwFvtm2ZgpqsTiMEJMVGOxqpJQ5v8hOlZ4boOir7vfDsoRwPv7+vvswL6oR6Jd6OyT3k4KdKS0GqQ== Date: Wed, 24 Apr 2024 05:33:01 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 4476
2024-04-24 05:33:01 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:01 UTC	4475	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 02 fd 08 03 00 00 00 e9 7d 3d ec 00 00 01 80 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR}=PLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50169	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	592	OUT	GET /v/t39.30808-6/434738801_903046718527004_2875905521727260665_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=7h4eP_Dka8UAb7E6TIi&_nc_ht=scontent-sjc3-1.xx&oh=00_AfBS7yoKFIceCz3ZSneb7IqWPdpshZnlJvExT1w3_6K7gw&oe=662E5890 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Fri, 05 Apr 2024 23:34:01 GMT X-Needle-Checksum: 2388778859 thrift_fmhk: GBCzt/EoHCFV9AAtRBTjqI36FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3157375219 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6245
2024-04-24 05:33:02 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:02 UTC	6244	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 32 36 30 33 30 30 30 30 39 33 30 35 30 30 30 30 34 62 30 36 30 30 30 30 30 35 30 37 30 30 30 30 38 34 30 61 30 30 30 30 31 30 30 66 30 30 30 30 39 31 30 66 30 30 30 30 35 39 31 30 30 30 30 30 32 30 31 31 30 30 30 30 36 35 31 38 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000026030000930500004b06000005070000840a0000100f0000910f0000591000002011000065180000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50170	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	594	OUT	GET /v/t39.30808-1/276269061_277708347876894_5728540495443750993_n.png?stp=cp0_dst-png_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=CsD_9pI4JToAb4bQu5G&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCJKiCsTTmbEVTCI1MEQLiu_2h5TWG2Fgy6FRIDb5h0NQ&oe=662E7DAA HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	662	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 22 Mar 2022 20:15:08 GMT X-Needle-Checksum: 1420688530 thrift_fmhk: GBClil4z5v3gC8XiL87NzggZFfDr4Z0EvFUAAAA= Content-Type: image/png content-digest: adler32=888102497 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2287
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	2286	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 52 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 69 70 74 63 00 00 08 99 05 c1 b1 11 80 30 0c 03 c0 de d3 38 92 65 99 71 b8 d0 d0 a5 60 ff e3 3f de f3 ed 80 62 ed 44 3b 73 95 9b aa 87 a0 c9 1a d2 a3 4b 26 d4 2d dd ad 32 51 43 c4 0f 9c 65 0d 02 21 27 a0 18 00 00 08 4b 49 44 41 54 58 85 ad 58 5b 90 14 d5 19 fe fe 73 4e f7 dc 76 66 f6 c2 ae 7b 5f 6e 12 76 23 a0 c8 35 24 18 4b 0b 09 d1 58 8a b1 4c 52 6a bc 51 49 25 f1 0d 0b 29 93 97 5c b0 c8 53 d4 aa 24 58 4a 8a 54 c5 58 02 49 d0 22 86 68 69 b0 28 65 25 1a 10 97 0d 02 0b b3 ec b2 b0 d7 99 dd 9d e9 e9 ee 73 fe 3c f4 ee ec 02 7b e1 92 bf fa 61 e6 74 9f Data Ascii: PNGIHDR((/:sRGB,RzTXtRaw profile type iptc08eq`?bD;sK&-2QCe!'KIDATXX[sNvf{_nv#5$KXLRjQI%)\S$XJTXI"hi(e%s<{at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50171	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	424	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:33:02 UTC	1412	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:02 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936781; path=/; domain=.facebook.com; httponly Set-Cookie: fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI; expires=Tue, 23-Jul-2024 05:33:02 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:02 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:33:02 UTC	2559	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 49 57 65 70 6d 70 55 65 5f 52 52 66 76 48 33 58 35 35 4d 39 2d 45 4a 39 51 45 6a 5f 70 4b 45 53 63 6d 74 73 51 31 5a 2d 46 71 72 57 69 54 4b 46 6a 5f 78 45 58 52 76 4d 2d 6f 48 41 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4b 54 69 79 4d 2d 65 56 31 57 4f 67 63 62 63 6b 65 63 37 59 43 43 4c 39 35 50 4d 37 55 64 31 6e 6a 62 2d 64 54 65 5f 70 30 64 42 61 55 37 44 76 6c 72 67 70 36 59 4f 59 37 76 55 6b 49 6c 6c 53 74 43 38 50 56 35 6b 46 68 53 6c 30 50 69 64 47 35 37 66 6c 71 78 6f 54 6d 4c 46 6c 49 6b 56 68 79 37 4f 37 5a 78 54 57 34 65 4f 39 73 66 32 67 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcIWepmpUe_RRfvH3X55M9-EJ9QEj_pKEScmtsQ1Z-FqrWiTKFj_xEXRvM-oHA"; e_clientaddr="AcKTiyM-eV1WOgcbckec7YCCL95PM7Ud1njb-dTe_p0dBaU7Dvlrgp6YOY7vUkIllStC8PV5kFhSl0PidG57flqxoTmLFlIkVhy7O7ZxTW4eO9sf2g"; e_fb_
2024-04-24 05:33:02 UTC	170	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 32 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 32 37 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=127, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-24 05:33:02 UTC	1330	IN	Data Raw: 38 64 37 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 67 51 63 77 6a 74 75 79 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 8d7c<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="gQcwjtuy">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-24 05:33:02 UTC	1500	IN	Data Raw: 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 Data Ascii: y screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta proper
2024-04-24 05:33:02 UTC	1500	IN	Data Raw: 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: ":{"20935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":n
2024-04-24 05:33:02 UTC	1500	IN	Data Raw: 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 76 55 5a 71 4a 75 5a Data Ascii: ",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"vUZqJuZ
2024-04-24 05:33:02 UTC	1500	IN	Data Raw: 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 31 33 38 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 Data Ascii: oadingFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2138,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"transla
2024-04-24 05:33:02 UTC	1500	IN	Data Raw: 4e 45 53 53 5f 44 4f 4d 41 49 4e 22 3a 66 61 6c 73 65 7d 2c 32 37 30 5d 2c 5b 22 4c 53 44 22 2c 5b 5d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 41 56 6f 79 6d 6f 65 36 37 59 67 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 30 33 38 32 36 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 30 33 38 32 36 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 37 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 Data Ascii: NESS_DOMAIN":false},270],["LSD",[],{"token":"AVoymoe67Yg"},323],["SiteData",[],{"server_revision":1013003826,"client_revision":1013003826,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19837.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50172	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	632	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	421	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Wed, 24 Apr 2024 05:33:02 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50173	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	594	OUT	GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=cp0_dst-png_p40x40&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfClAOnz2eJZkYuBO3W0ozHjBvdkizIwnGg14B3XY6bT6g&oe=662E8562 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	663	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 05 May 2022 14:05:25 GMT X-Needle-Checksum: 2356526752 thrift_fmhk: GBAi8jtjDU+HNcV5Z+HKPovGFfDr4Z0EvFUAAAA= Content-Type: image/png content-digest: adler32=1798326039 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2255
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	2254	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 53 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 69 70 74 63 00 00 08 99 05 c1 b1 0d c0 30 08 04 c0 9e 69 30 fe 7f f0 3c a0 48 e9 5c 64 7f e5 ce de fb b5 05 6d b5 87 d2 7d 41 c4 b0 76 00 7c f2 60 12 3c 1a 05 b4 4b 9d 2b 0b 22 09 fb 01 ac 56 0d a5 b4 3d 54 34 00 00 08 2a 49 44 41 54 58 85 ad 58 6b 70 55 57 15 fe d6 de e7 9c fb ca bd 79 91 07 09 90 f0 08 01 42 01 85 ca a3 e0 c4 d2 02 3f 1c 2a 2a e2 8c ad f4 05 63 b5 e3 38 d6 3a ad d3 a9 e3 d8 ce 74 9c 5a 7f d8 07 33 68 c5 81 f1 51 54 da 32 54 3b 5a 10 84 16 ca ab 22 24 85 40 12 42 08 90 77 ee cd 7d 9d bb f7 5e fe 38 37 b7 80 49 48 a8 eb e7 39 67 ed Data Ascii: PNGIHDR((/:sRGB,SzTXtRaw profile type iptc0i0<H\dm}Av\|`<K+"V=T4IDATXXkpUWyB?*c8:tZ3hQT2T;Z"$@Bw}^87IH9g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50174	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:01 UTC	609	OUT	GET /v/t39.30808-6/236827637_10159748894181202_2169988089763910096_n.jpg?stp=c60.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=eyUcgU6E1RUAb5oTdVX&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCScx29jxRZiTA0yPYOjhEPmR3Lv84z3u132jZiAKOMrw&oe=662E6706 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 10 Aug 2021 21:45:41 GMT X-Needle-Checksum: 1852287875 thrift_fmhk: GBAXShxj+ErJYwXqBm4A30gsFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1126225400 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5664
2024-04-24 05:33:02 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:02 UTC	5663	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 5e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 82 98 00 02 00 00 00 3c 00 00 00 1a 00 00 00 00 c2 a9 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 42 65 6e 6a 61 6d 69 6e 20 42 65 6e 73 63 68 6e 65 69 64 65 72 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 00 ff ed 00 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 cc 1c 02 74 00 3b c2 a9 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 42 65 6e 6a 61 6d 69 6e 20 42 65 6e 73 63 68 6e 65 69 64 65 72 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 1c 02 55 00 05 4f 77 6e 65 72 1c 02 50 00 15 42 65 6e 6a 61 6d 69 6e 20 42 65 6e 73 63 68 6e 65 69 64 65 72 1c 02 28 00 62 46 42 4d 44 30 Data Ascii: JFIF^ExifMM*< Copyright 2021 Benjamin Benschneider All Rights ReservedPhotoshop 3.08BIMt; Copyright 2021 Benjamin Benschneider All Rights ReservedUOwnerPBenjamin Benschneider(bFBMD0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50175	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	607	OUT	GET /v/t39.30808-6/295727862_414160250748989_1177096163670263996_n.png?stp=c71.0.154.155a_dst-jpg_p296x100&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=j5dhy87QTmwAb63QD6F&_nc_ht=scontent-sjc3-1.xx&oh=00_AfCt0JaFs05idTJ4P5xhITxM_7cO2enhon94CN-mtzA_vw&oe=662E7A1F HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	663	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 25 Jul 2022 18:33:49 GMT X-Needle-Checksum: 1765161152 thrift_fmhk: GBCmA2x0FyFoXdlYdHD7FqU5FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=909650601 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6342
2024-04-24 05:33:02 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-24 05:33:02 UTC	6341	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 35 35 30 33 30 30 30 30 62 39 30 36 30 30 30 30 39 31 30 37 30 30 30 30 33 66 30 38 30 30 30 30 35 34 30 62 30 30 30 30 61 33 30 66 30 30 30 30 32 31 31 30 30 30 30 30 30 61 31 31 30 30 30 30 65 31 31 31 30 30 30 30 63 36 31 38 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f01000055030000b9060000910700003f080000540b0000a30f0000211000000a110000e1110000c6180000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50176	157.240.22.25	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	592	OUT	GET /v/t39.30808-1/280122856_359396006225414_3676253660763236603_n.png?stp=dst-png_p200x200&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=XPmfmaepca0Ab7f1CUq&_nc_ht=scontent-sjc3-1.xx&oh=00_AfDSUfPF5rTDhXWuDBUBGPiJpIfJPc_0IyZvseAkUZNJyQ&oe=662E8562 HTTP/1.1 Host: scontent-sjc3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	664	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 05 May 2022 14:05:25 GMT X-Needle-Checksum: 2356526752 thrift_fmhk: GBAi8jtjDU+HNcV5Z+HKPovGFfDr4Z0EvFUAAAA= Content-Type: image/png content-digest: adler32=1222875606 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=172, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 14270
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	14269	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 02 00 00 00 22 3a 39 c9 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 53 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 69 70 74 63 00 00 08 99 05 c1 b1 0d c0 30 08 04 c0 9e 69 30 fe 7f f0 3c a0 48 e9 5c 64 7f e5 ce de fb b5 05 6d b5 87 d2 7d 41 c4 b0 76 00 7c f2 60 12 3c 1a 05 b4 4b 9d 2b 0b 22 09 fb 01 ac 56 0d a5 b4 3d 54 34 00 00 20 00 49 44 41 54 78 9c ed 5d 77 9c 1c c5 95 7e af aa 7b f2 e6 bc ab 0d ca 11 49 c8 48 02 91 73 12 41 c6 06 83 01 13 0c 9c 7d 36 36 b6 71 38 ce e7 3b 1b 07 f0 9d 0f c3 d9 87 c9 60 30 19 8e 8c 41 60 a2 90 04 42 08 a1 b8 4a ab cd 39 4c 9e ee aa 77 7f d4 4c ef ec 0a d0 ec f4 6c 90 98 4f fe 09 7e b8 a7 a7 a7 fb eb 17 be f7 ea 15 12 11 64 91 Data Ascii: PNGIHDR":9sRGB,SzTXtRaw profile type iptc0i0<H\dm}Av\|`<K+"V=T4 IDATx]w~{IHsA}66q8;`0A`BJ9LwLlO~d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50177	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	1287	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=b&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1884 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryZrHX0BiHSOaC5yxo sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0x9NqxW3pvRr05nOz..BmKJmN..AAA.0.0.BmKJmN.AWVnkPyGF50
2024-04-24 05:33:02 UTC	1884	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 5a 72 48 58 30 42 69 48 53 4f 61 43 35 79 78 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 33 39 33 36 37 38 30 38 33 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 5a 72 48 58 30 42 69 48 53 4f 61 43 35 79 78 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c d5 58 5b Data Ascii: ------WebKitFormBoundaryZrHX0BiHSOaC5yxoContent-Disposition: form-data; name="ts"1713936780833------WebKitFormBoundaryZrHX0BiHSOaC5yxoContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxX[
2024-04-24 05:33:02 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:02 UTC	1833	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50178	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	381	OUT	GET /images/emoji.php/v9/t1f/1/16/1f3b6.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	1939	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: a240yIW404CcdJcE0pSgdw== Expires: Sat, 12 Apr 2025 08:25:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin;report-to="coop_report" X-Content-Type-Options: nosniff report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
2024-04-24 05:33:02 UTC	329	IN	Data Raw: 58 2d 46 42 2d 44 65 62 75 67 3a 20 6e 62 57 56 58 4e 6c 7a 57 2b 7a 66 55 78 66 48 73 70 4d 41 4a 67 6d 73 32 58 4f 73 6a 68 37 6a 66 78 30 38 59 46 72 4a 65 4e 49 56 57 6c 52 72 43 39 44 46 79 51 43 59 61 4f 49 46 68 57 6f 4b 42 4b 6f 63 4b 69 46 32 54 7a 52 57 7a 5a 4b 36 6b 74 62 75 48 77 3d 3d 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 34 20 41 70 72 20 32 30 32 34 20 30 35 3a 33 33 3a 30 32 20 47 4d 54 0d 0a 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 34 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 31 30 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 30 2c 20 75 6c 6c 61 74 3d 2d 31 Data Ascii: X-FB-Debug: nbWVXNlzW+zfUxfHspMAJgms2XOsjh7jfx08YFrJeNIVWlRrC9DFyQCYaOIFhWoKBKocKiF2TzRWzZK6ktbuHw==Date: Wed, 24 Apr 2024 05:33:02 GMTX-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	470	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 a5 50 4c 54 45 47 70 4c 37 3a 40 35 39 41 3a 3e 46 3b 40 48 35 39 40 39 3d 45 30 32 39 44 48 50 42 46 50 35 38 3f 40 46 51 3b 3f 47 4d 53 5f 38 3c 43 2f 31 38 2e 30 37 2c 2d 33 32 34 3b 3d 40 49 3c 40 49 31 35 3c 2f 32 38 30 32 37 30 32 39 33 36 3d 33 35 3d 39 3b 42 51 59 66 33 36 3d 4c 53 5f 2c 2e 33 48 4f 5a 3d 43 4c 2c 2d 32 43 48 52 2e 31 37 38 3a 41 2d 2f 35 51 58 65 4d 54 61 44 4a 55 3d 41 4a 65 6d 7b 65 6f 7e 6d 76 87 69 71 80 6f 78 88 28 29 2e 5a 62 70 38 3b 43 44 49 54 67 71 81 7a 85 97 54 5c 69 44 b7 20 a4 00 00 00 33 74 52 4e 53 00 17 ee 0f 06 6e 41 9b 03 1f 4b ae 88 3b 5b 89 b9 71 fb 9c 2f a2 7e 69 62 37 e0 93 2d c8 53 90 68 f3 52 db b0 b0 Data Ascii: PNGIHDR(-SPLTEGpL7:@59A:>F;@H59@9=E029DHPBFP58?@FQ;?GMS_8<C/18.07,-324;=@I<@I15</2802702936=35=9;BQYf36=LS_,.3HOZ=CL,-2CHR.178:A-/5QXeMTaDJU=AJem{eo~mviqox().Zbp8;CDITgqzT\iD 3tRNSnAK;[q/~ib7-ShR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50179	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	375	OUT	GET /rsrc.php/v3/y3/r/RAS_7oBOZt9.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	1708	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: k8u1AbC3WN2QlkxW0W4flQ== Expires: Sat, 19 Apr 2025 15:48:59 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: w9p4hZq8kqm/huNPJjyf6YuJTjrZmwGTIrAy7CbLO0JyglLaPj0sJ38NR0kAvmjXtfZEVe7uuvxIrVC/gLwjHQ== Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8336
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:02 UTC	8335	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 05 3f 08 03 00 00 00 70 fa bc dd 00 00 02 f7 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 68 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR?pPLTEGpLbhp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50181	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	1287	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=c&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 4233 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryL5g6RHstv3jq28Eu sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
2024-04-24 05:33:02 UTC	4233	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4c 35 67 36 52 48 73 74 76 33 6a 71 32 38 45 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 33 39 33 36 37 38 31 33 36 31 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4c 35 67 36 52 48 73 74 76 33 6a 71 32 38 45 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c e5 1b d9 Data Ascii: ------WebKitFormBoundaryL5g6RHstv3jq28EuContent-Disposition: form-data; name="ts"1713936781361------WebKitFormBoundaryL5g6RHstv3jq28EuContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamx
2024-04-24 05:33:02 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:02 UTC	1833	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50180	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	424	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:33:03 UTC	1412	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: datr=gpkoZvxxn6P7-gcWd0dSPCGJ; expires=Thu, 29-May-2025 05:33:02 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1713936781; path=/; domain=.facebook.com; httponly Set-Cookie: fr=0wJH5rzMxIa7pNiJj..BmKJmO..AAA.0.0.BmKJmO.AWUIxQJEzPI; expires=Tue, 23-Jul-2024 05:33:02 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:03 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:33:03 UTC	2551	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 49 71 4f 6e 42 2d 52 66 66 77 75 59 58 38 46 6c 35 6a 41 52 45 46 30 43 73 6e 67 57 57 6b 68 34 56 74 4a 64 37 45 65 45 5a 4a 6f 64 45 6a 32 43 6e 76 4b 48 77 79 79 6d 30 2d 4d 77 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4b 56 48 36 65 70 7a 39 70 58 43 4b 77 51 4e 50 53 51 31 55 30 33 6f 2d 4b 5a 4c 75 77 33 70 45 33 69 46 39 51 76 79 45 59 78 49 42 76 35 4b 62 4a 55 64 4b 4d 66 46 6c 68 5f 59 49 33 64 34 7a 71 37 39 38 4c 56 69 32 4e 42 5a 5f 39 58 6a 43 67 73 72 71 67 44 6f 4f 66 49 69 32 38 54 42 4e 35 53 57 49 57 43 4d 6a 4e 4c 6b 75 77 47 22 3b 20 65 5f 66 62 5f 76 69 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcIqOnB-RffwuYX8Fl5jAREF0CsngWWkh4VtJd7EeEZJodEj2CnvKHwyym0-Mw"; e_clientaddr="AcKVH6epz9pXCKwQNPSQ1U03o-KZLuw3pE3iF9QvyEYxIBv5KbJUdKMfFlh_YI3d4zq798LVi2NBZ_9XjCgsrqgDoOfIi28TBN5SWIWCMjNLkuwG"; e_fb_vi
2024-04-24 05:33:03 UTC	170	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 32 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 32 30 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=120, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-24 05:33:03 UTC	1330	IN	Data Raw: 31 36 64 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 74 32 6c 5a 65 58 69 38 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 16d9<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="t2lZeXi8">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 Data Ascii: y screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta proper
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: ":{"20935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":n
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 31 57 55 4a 73 54 79 Data Ascii: ",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"1WUJsTy
2024-04-24 05:33:03 UTC	27	IN	Data Raw: 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 0d 0a Data Ascii: oadingFromTier":100,"hypS
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 32 61 31 66 0d 0a 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 31 33 38 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a Data Ascii: 2a1ftep4":false,"phdOn":false,"btCutoffIndex":2138,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRetryAbortNum":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50182	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	608	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:02 UTC	1642	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Fri, 11 Apr 2025 12:11:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: aeLBpB6gTrjxavicfJ/sTDx1XXxI1D3PALU82ItWgLGWodkwQmS5LkKop6mH5r2tk7suHUqtMCjTDhjj+/MTTg== Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3410, tp=-1, tpl=-1, uplat=6, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-04-24 05:33:02 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-04-24 05:33:02 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50183	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	879	OUT	GET /data/manifest/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
2024-04-24 05:33:03 UTC	955	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/json reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:03 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:33:03 UTC	62	IN	Data Raw: 34 61 66 0d 0a 7b 22 67 63 6d 5f 73 65 6e 64 65 72 5f 69 64 22 3a 22 31 35 30 35 37 38 31 34 33 35 34 22 2c 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 74 72 Data Ascii: 4af{"gcm_sender_id":"15057814354","gcm_user_visible_only":tr
2024-04-24 05:33:03 UTC	1149	IN	Data Raw: 75 65 2c 22 65 64 67 65 5f 73 69 64 65 5f 70 61 6e 65 6c 22 3a 7b 22 70 72 65 66 65 72 72 65 64 5f 77 69 64 74 68 22 3a 33 37 36 7d 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 22 2c 22 6e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 5c 2f 3f 72 65 66 3d 68 6f 6d 65 73 63 72 65 65 6e 70 77 61 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6d 69 6e 69 6d 61 6c 2d 75 69 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 31 38 37 37 46 32 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c Data Ascii: ue,"edge_side_panel":{"preferred_width":376},"short_name":"Facebook","name":"Facebook","start_url":"\/?ref=homescreenpwa","display":"minimal-ui","background_color":"#FFFFFF","theme_color":"#1877F2","icons":[{"src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50184	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	396	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:03 UTC	421	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Wed, 24 Apr 2024 05:33:02 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Wed, 24 Apr 2024 05:33:02 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-04-24 05:33:03 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:03 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50185	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:02 UTC	734	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=b&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
2024-04-24 05:33:03 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:03 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50186	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:03 UTC	372	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:03 UTC	1642	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Fri, 11 Apr 2025 12:11:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: aeLBpB6gTrjxavicfJ/sTDx1XXxI1D3PALU82ItWgLGWodkwQmS5LkKop6mH5r2tk7suHUqtMCjTDhjj+/MTTg== Date: Wed, 24 Apr 2024 05:33:03 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-04-24 05:33:03 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-04-24 05:33:03 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50187	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:03 UTC	734	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=MODERATE&__comet_req=15&__hs=19837.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7361302374905400051&__req=c&__rev=1012994568&__s=z9locg%3Ae6drie%3Alm199t&__spin_b=trunk&__spin_r=1012994568&__spin_t=1713936770&__user=0&dpr=1&jazoest=21035&lsd=AVoymoe64jw&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0zJnQE30LmDljrqRO..BmKJmO..AAA.0.0.BmKJmO.AWXPZfMwfnI
2024-04-24 05:33:03 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:03 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50188	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:03 UTC	611	OUT	GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:03 UTC	1639	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZFLtdcU+Go6QpmTfGJWakA== Expires: Fri, 11 Apr 2025 12:07:37 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 8MyTxO/ck3YpoNBHEdqULWWQ5/EzLufiK8J0QpU2ZOHYT2VTgSnjq85QBmkDawHFtsNUvE74CydR4vmFWchlUg== Date: Wed, 24 Apr 2024 05:33:03 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3409, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2106
2024-04-24 05:33:03 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:03 UTC	2105	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 59 50 4c 54 45 47 70 4c 05 65 ff 08 65 ff 07 65 ff 10 70 ff 07 65 ff 08 66 ff 08 66 ff 08 68 ff 08 66 ff 07 66 ff 00 60 ff 10 60 ff ff ff ff 08 67 ff 07 66 ff 08 66 ff 08 67 ff 08 67 ff 08 66 ff 08 66 ff 08 66 ff 08 67 ff 07 66 ff 08 68 ff 09 65 ff 08 66 ff 08 64 ff 09 67 ff 07 65 ff 07 65 ff 06 63 ff 0a 66 ff 07 66 ff 08 65 ff 07 66 ff 09 67 ff 06 67 ff 08 65 ff 08 66 ff 08 66 ff ff ff ff ff ff ff 08 69 ff 08 68 ff 07 65 ff 09 66 ff 07 66 ff ff ff ff 0b 65 ff ff ff ff ff ff ff 07 65 ff 07 67 ff 07 66 ff 07 66 ff 0a 66 ff 09 66 ff 07 66 ff 09 66 ff 07 67 ff ff ff ff ff ff ff 06 66 ff 08 65 ff 07 65 ff ff ff ff 87 b7 ff 46 8c ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRe5YPLTEGpLeeepeffhff``gffggfffgfhefdgeecffefggeffiheffeegffffffgfeeF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50189	31.13.70.36	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:03 UTC	420	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ
2024-04-24 05:33:03 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=0v1Zm3243eMWxePSz..BmKJmP..AAA.0.0.BmKJmP.AWVS5dFHMw0; expires=Tue, 23-Jul-2024 05:33:03 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 05:33:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 05:33:03 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 05:33:03 UTC	2554	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4b 6b 7a 37 54 63 6e 48 5a 6f 4f 77 46 32 34 51 32 50 32 59 74 78 70 72 76 37 79 44 51 72 62 65 66 56 51 4b 69 68 67 67 43 66 78 34 61 51 72 5f 4e 62 50 53 4f 72 51 4a 4d 2d 79 41 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 6a 73 38 72 5a 6b 4f 4f 33 5f 55 4b 67 6b 56 38 4b 59 45 6c 57 54 6c 6c 76 72 5f 71 74 56 59 45 51 6f 48 30 56 76 57 2d 43 75 70 4c 76 33 38 67 77 58 78 52 46 55 68 5f 41 49 6a 39 65 53 6a 36 55 4d 4b 4f 4e 34 4a 44 51 4b 75 68 69 30 49 4d 78 51 7a 77 71 68 5f 46 52 32 57 73 54 41 6a 78 30 6b 36 50 65 31 32 59 48 6f 45 4f 79 22 3b 20 65 5f 66 62 5f 76 69 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcKkz7TcnHZoOwF24Q2P2Ytxprv7yDQrbefVQKihggCfx4aQr_NbPSOrQJM-yA"; e_clientaddr="AcJjs8rZkOO3_UKgkV8KYElWTllvr_qtVYEQoH0VvW-CupLv38gwXxRFUh_AIj9eSj6UMKON4JDQKuhi0IMxQzwqh_FR2WsTAjx0k6Pe12YHoEOy"; e_fb_vi
2024-04-24 05:33:03 UTC	170	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 4d 4f 44 45 52 41 54 45 3b 20 71 3d 30 2e 33 2c 20 72 74 74 3d 31 35 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 33 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 31 31 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=111, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-24 05:33:03 UTC	1330	IN	Data Raw: 61 63 37 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 63 32 69 44 51 52 76 4c 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: ac7b<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="c2iDQRvL">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 Data Ascii: y screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta proper
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: ":{"20935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":n
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 44 74 43 36 55 2d 49 Data Ascii: ",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"DtC6U-I
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 31 33 38 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 Data Ascii: oadingFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2138,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"transla
2024-04-24 05:33:03 UTC	1500	IN	Data Raw: 4e 45 53 53 5f 44 4f 4d 41 49 4e 22 3a 66 61 6c 73 65 7d 2c 32 37 30 5d 2c 5b 22 4c 53 44 22 2c 5b 5d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 41 56 6f 79 6d 6f 65 36 57 6b 6f 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 30 33 38 32 36 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 39 39 34 35 36 38 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 65 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 37 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 Data Ascii: NESS_DOMAIN":false},270],["LSD",[],{"token":"AVoymoe6Wko"},323],["SiteData",[],{"server_revision":1013003826,"client_revision":1012994568,"push_phase":"C3e","pkg_cohort":"BP:DEFAULT","haste_session":"19837.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50190	31.13.70.7	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:04 UTC	375	OUT	GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 05:33:04 UTC	1639	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZFLtdcU+Go6QpmTfGJWakA== Expires: Fri, 11 Apr 2025 12:07:37 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 8MyTxO/ck3YpoNBHEdqULWWQ5/EzLufiK8J0QpU2ZOHYT2VTgSnjq85QBmkDawHFtsNUvE74CydR4vmFWchlUg== Date: Wed, 24 Apr 2024 05:33:04 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2106
2024-04-24 05:33:04 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-24 05:33:04 UTC	2105	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 59 50 4c 54 45 47 70 4c 05 65 ff 08 65 ff 07 65 ff 10 70 ff 07 65 ff 08 66 ff 08 66 ff 08 68 ff 08 66 ff 07 66 ff 00 60 ff 10 60 ff ff ff ff 08 67 ff 07 66 ff 08 66 ff 08 67 ff 08 67 ff 08 66 ff 08 66 ff 08 66 ff 08 67 ff 07 66 ff 08 68 ff 09 65 ff 08 66 ff 08 64 ff 09 67 ff 07 65 ff 07 65 ff 06 63 ff 0a 66 ff 07 66 ff 08 65 ff 07 66 ff 09 67 ff 06 67 ff 08 65 ff 08 66 ff 08 66 ff ff ff ff ff ff ff 08 69 ff 08 68 ff 07 65 ff 09 66 ff 07 66 ff ff ff ff 0b 65 ff ff ff ff ff ff ff 07 65 ff 07 67 ff 07 66 ff 07 66 ff 0a 66 ff 09 66 ff 07 66 ff 09 66 ff 07 67 ff ff ff ff ff ff ff 06 66 ff 08 65 ff 07 65 ff ff ff ff 87 b7 ff 46 8c ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRe5YPLTEGpLeeepeffhff``gffggfffgfhefdgeecffefggeffiheffeegffffffgfeeF

Session ID	Source IP	Source Port	Destination IP	Destination Port
410	192.168.2.4	50191	31.13.70.36	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 05:33:08 UTC	1035	OUT	POST /shared/user_preferences/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 12084 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVoymoe64jw sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/overlakemedicalcenter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=gpkoZvxxn6P7-gcWd0dSPCGJ; fr=0v1Zm3243eMWxePSz..BmKJmP..AAA.0.0.BmKJmP.AWVS5dFHMw0
2024-04-24 05:33:08 UTC	12084	OUT	Data Raw: 64 61 74 61 3d 65 79 4a 6c 64 6d 56 75 64 43 49 36 49 6e 4e 6a 59 57 35 66 63 6d 56 7a 64 57 78 30 49 69 77 69 62 47 39 6a 59 57 78 66 63 33 52 76 63 6d 46 6e 5a 53 49 36 57 79 4a 77 63 7a 6f 78 4d 44 41 77 4e 6a 51 32 4e 54 41 31 4d 6a 55 30 4e 54 4d 36 4d 44 6b 30 4e 6a 52 69 59 6a 41 74 59 6a 63 30 4d 43 30 30 4d 6a 49 30 4c 57 4a 68 5a 54 55 74 5a 44 4a 68 4e 54 6b 35 4e 57 49 77 4d 6a 64 6c 49 69 77 69 55 32 56 7a 63 32 6c 76 62 69 49 73 49 6d 68 69 58 33 52 70 62 57 56 7a 64 47 46 74 63 43 49 73 49 6e 4e 70 5a 32 35 68 62 46 39 6d 62 48 56 7a 61 46 39 30 61 57 31 6c 63 33 52 68 62 58 41 69 4c 43 4a 69 59 57 35 36 59 57 6b 36 62 47 46 7a 64 46 39 7a 64 47 39 79 59 57 64 6c 58 32 5a 73 64 58 4e 6f 49 6c 30 73 49 6e 4a 6c 63 33 56 73 64 48 4d 69 4f 6c Data Ascii: data=eyJldmVudCI6InNjYW5fcmVzdWx0IiwibG9jYWxfc3RvcmFnZSI6WyJwczoxMDAwNjQ2NTA1MjU0NTM6MDk0NjRiYjAtYjc0MC00MjI0LWJhZTUtZDJhNTk5NWIwMjdlIiwiU2Vzc2lvbiIsImhiX3RpbWVzdGFtcCIsInNpZ25hbF9mbHVzaF90aW1lc3RhbXAiLCJiYW56YWk6bGFzdF9zdG9yYWdlX2ZsdXNoIl0sInJlc3VsdHMiOl
2024-04-24 05:33:08 UTC	1557	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff
2024-04-24 05:33:08 UTC	1232	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-24 05:33:08 UTC	73	IN	Data Raw: 33 65 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 70 61 79 6c 6f 61 64 22 3a 6e 75 6c 6c 2c 22 6c 69 64 22 3a 22 37 33 36 31 33 30 32 34 35 33 39 35 39 33 32 37 36 31 38 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3efor (;;);{"__ar":1,"payload":null,"lid":"7361302453959327618"}0

Target ID:	0
Start time:	07:31:42
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:31:45
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2024,i,12559349652139094833,10463207426666830587,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:31:47
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://r20.rs6.net/tn.jsp?f=0010gdwZK1zsOsjQXb-NAukJySfgXZyz_K3wcrtWdl2c9a0M2KwjR32yV-GeMGFctnLGHo0GtQqLsZebrpcjBBULA9LMqt3w49x9wkoDyiMBjklNW7pZwYa6OeeIr-PNeI4bgnrTAwRul3N-k6n9hiG6bmsBpkGnWt8Gw_FE34bso9t1M0xU8FlqrRDD68kdxoheDaQHY3vX0pawfZuw1D9OWVNFz9h-FGlYBaAJHtPvL2dUahcqWyjoAFYZbQzE8Ju&c=CDP-xJS150Z3ymCYoLtVfB94X14h3tr41f-WpvECDOmVDOiSMB8rSA==&ch=7fTjmLIMiDfz6AP3b7f4xde6-aYiS2qARZHxH1qoKYKTXexZGWNlng=="
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324