Edit tour

Windows Analysis Report
https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256

Overview

General Information

Sample URL:	https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256
Analysis ID:	1431064
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Executes massive DNS lookups (> 50)

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Phishing site detected (based on OCR NLP Model)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2676 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6492 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.signaturit.com/en/legality/	HTTP Parser: Form action: https://forms-eu1.hsforms.com/submissions/v3/public/submit/formsnext/multipart/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3 signaturit hsforms
Source: https://www.signaturit.com/en/legality/	HTTP Parser: Form action: https://forms-eu1.hsforms.com/submissions/v3/public/submit/formsnext/multipart/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3 signaturit hsforms

Source: https://www.signaturit.com/en/legality/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WFK9SV
Source: https://www.signaturit.com/en/legality/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WFK9SV
Source: https://account.signaturit.com/en/login	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-K5CJVDJ
Source: https://account.signaturit.com/en/login	HTTP Parser: Iframe src: https://consentcdn.cookiebot.com/sdk/bc-v4.min.html

Source: https://account.signaturit.com/en/login

HTTP Parser: Number of links: 0

Source: https://account.signaturit.com/en/login

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.signaturit.com/en/legality/

HTTP Parser: Base64 decoded: https://www.signaturit.com:443

Source: https://account.signaturit.com/en/login

HTTP Parser: Title: Authentication app does not match URL

Source: Chrome DOM: 1.2

ML Model on OCR Text: Matched 95.6% probability on "D-Link How does it work? 1 . Review the document Please contact es-finance@dlink.com you do not agree with the contents of the document. 2. Sign the document Click on the "Sign" button or signing field to sign the document. 3. Privacy Policy Accept the privacy policy and click on "Send document". Start Signaturit complies with all electronic signature laws See more info here. Poweral by Signaturit "

Source: https://account.signaturit.com/en/login

HTTP Parser: <input type="password" .../> found

Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://consentcdn.cookiebot.com/sdk/bc-v4.min.html	HTTP Parser: No favicon
Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezr	HTTP Parser: No favicon

Source: https://www.signaturit.com/en/legality/	HTTP Parser: No <meta name="author".. found
Source: https://www.signaturit.com/en/legality/	HTTP Parser: No <meta name="author".. found
Source: https://account.signaturit.com/en/login	HTTP Parser: No <meta name="author".. found

Source: https://www.signaturit.com/en/legality/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.signaturit.com/en/legality/	HTTP Parser: No <meta name="copyright".. found
Source: https://account.signaturit.com/en/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.61.210.98:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.210.98:443 -> 192.168.2.4:49743 version: TLS 1.2

Networking

Executes massive DNS lookups (> 50)

Source: global traffic

DNS traffic detected: number of DNS queries: 78

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: app.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/en/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: sign-app.signaturit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/9763b81/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: sign-app.signaturit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /9763b81/runtime.js HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/polyfills.js HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/main.js HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/styles.css HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/sign-config/6248316d-8590-4dd2-9d39-fe90a1423256?t=1713961923 HTTP/1.1Host: app.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/assets/i18n/en.json HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/assets/img/loaders/preloader-sign-app.gif HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/sign-config/6248316d-8590-4dd2-9d39-fe90a1423256?t=1713961923 HTTP/1.1Host: app.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/assets/i18n/en.json HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/assets/img/loaders/preloader-sign-app.gif HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/validate/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: app.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Signer-Token: e661178d-04b6-4b93-9ef4-a27462c9066esec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/signatures/c3142696-0fbf-46ef-a245-5bb543bcb92c/documents/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: app.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69
Source: global traffic	HTTP traffic detected: GET /app/validate/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: app.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69
Source: global traffic	HTTP traffic detected: GET /9763b81/317.js HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9763b81/common.js HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/signatures/c3142696-0fbf-46ef-a245-5bb543bcb92c/documents/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1Host: app.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69
Source: global traffic	HTTP traffic detected: GET /9763b81/868.js HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5uZ3 HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1Host: sockets.signaturit.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://sign-app.signaturit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjfSec-WebSocket-Key: A/RzUHpOc9zPyUcumWUekw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5uwQ&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjf
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5uZ3 HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjf
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5uwO&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjf
Source: global traffic	HTTP traffic detected: GET /9763b81/signaturit-sign-app.woff HTTP/1.1Host: d2i8kkeqh9ciqw.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign-app.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5uwQ&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjf
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5vjN HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjf
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1Host: sockets.signaturit.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://sign-app.signaturit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=dMLwofBs2a63vpmXAAklSec-WebSocket-Key: jVIBlk9YWNb/uwO2jQS+rg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5vw8&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5vjN HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /en/legality HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/legality/ HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.10 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/10/logo-signaturit-group.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/simple-electronic-signature.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/fonts/Expose-Bold.woff2 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/fonts/N27-Bold.woff2 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/fonts/N27-Medium.woff2 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/fonts/Expose-Regular.woff2 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /menu/page.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/images/chevron-down.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/advanced-electronic-signature.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /forms/v2.js HTTP/1.1Host: js.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/10/logo-signaturit-group.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/simple-electronic-signature.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-electronic-signature.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/signaturit.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/js/theme.js?v=fix-anchor-0404 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /menu/modules/core.BRQnzO8v.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/images/chevron-down.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/advanced-electronic-signature.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /menu/sm.25.html HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.10 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/ivnosis.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/fonts/Expose-Medium.woff2 HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/api.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/salesforce.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/certified-email.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/certified-SMS.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/certified-manager.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/external-registration-authority.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/signaturit.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-electronic-signature.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/ivnosis.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/api.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-certificates.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/salesforce.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-time-stamp.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-certificates-seals.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/public-administration-notification.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/video-id.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/certified-manager.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/certified-email.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/external-registration-authority.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/certified-SMS.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/universign.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-certificates.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/qualified-certificates-seals-1_icon.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-time-stamp.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/group.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/accreditations.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/customer-first-approach.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/qualified-certificates-seals.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/customer-reviews.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/video-id.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/public-administration-notification.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/success-stories.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/universign.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/12/qualified-certificates-seals-1_icon.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/support.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/financial-services.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/group.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/insurance.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/accreditations.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/education.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/customer-first-approach.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/facilities.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/real_estate.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/customer-reviews.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/audit-compliance.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/success-stories.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/hr.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/procurement.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/sales-marketing.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/support.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/insurance.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/financial-services.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/facebook.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/education.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /c/hotjar-909661.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/facilities.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/instagram.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/linkedin.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/youtube.svg HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/real_estate.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /c/hotjar-2155700.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/audit-compliance.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/hr.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/procurement.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/sales-marketing.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/facebook.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/instagram.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/linkedin.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/youtube.svg HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
Source: global traffic	HTTP traffic detected: GET /attribution_tracking/conversions/5962.js?p=https://www.signaturit.com/en/legality/&e= HTTP/1.1Host: tracking.g2crowd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c84ebe43de7d3bac.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-ZB2TFCHC3F&gacid=1954242962.1713961954&gtm=45je44m0v880655858z86591828za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=905032389 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /143456774.js?businessUnitId=16226724 HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDI5MDF9.flQCMylC5XJoc6sWx2NSwqpWPPOOry21VZ9djKpQi9Y HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ariadne/v1/ariadne.js?ts=1713961949094 HTTP/1.1Host: appvizer.oneConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_aa59ca84_71c6_4a21_83cf_0aee24a58c81&render=explicit&hl=es HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDI5MDF9.flQCMylC5XJoc6sWx2NSwqpWPPOOry21VZ9djKpQi9Y HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v2-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&page_title=Page%20not%20found%20%7C%20Signaturit HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=4GA55AgMUbMyeoy-Uc1wYHNMMTqVHQ4MGUXuAVV70rbmioZKoV6Jmw==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v2-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /rest/ariadne/v2/script/AP-0 HTTP/1.1Host: appvizer.oneConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/jsonAccept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.588629dd3c10b20ab52d.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; CMPS=4248; CMPRO=4248
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&gjid=398648138&_gid=1531399362.1713961956&_u=YCDAgAABAAAAAG~&z=919864726 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /universalscript/releases/v0.181.0/bundle.js HTTP/1.1Host: assets.ubembed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=4GA55AgMUbMyeoy-Uc1wYHNMMTqVHQ4MGUXuAVV70rbmioZKoV6Jmw==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=e51f720edaab4e549610d4fd0f3aea50; tv_UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce
Source: global traffic	HTTP traffic detected: GET /analytics/1713959400000/143456774.js HTTP/1.1Host: js-eu1.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fb.js HTTP/1.1Host: js-eu1.hsadspixel.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-interactives-embed.js HTTP/1.1Host: js-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/ariadne/v2/script/AP-0 HTTP/1.1Host: appvizer.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/143456774/banner.js HTTP/1.1Host: js-eu1.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; CMPS=4248; CMPRO=4248
Source: global traffic	HTTP traffic detected: GET /web-interactives/public/v1/embed/combinedConfigs?portalId=143456774&currentUrl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F HTTP/1.1Host: cta-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CI6tHBoNCOn3o7EGEgUI6AcQAEIASgA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=h0aapfiVtZ8hj924faUTeYSC6voUbFj/7Z6s7YHch7E=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG60Qt&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG5vw8&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG607C&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=143456774 HTTP/1.1Host: api-eu1.hubapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=143456774&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&_u=YCDAgAABAAAAAG~&z=1255466199 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ea556916-5ff9-4bbe-87d1-172f8612a1ce; tuuid_lu=1713961957\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-interactives/public/v1/embed/combinedConfigs?portalId=143456774&currentUrl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F HTTP/1.1Host: cta-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG60Qt&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&_u=YCDAgAABAAAAAG~&z=1255466199 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc HTTP/1.1Host: segments.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ea556916-5ff9-4bbe-87d1-172f8612a1ce; tuuid_lu=1713961957\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=143456774&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ariadne/v1/ariadne_scraping.js HTTP/1.1Host: appvizer.oneConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=config-loaded-success&value=1 HTTP/1.1Host: perf-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=143456774 HTTP/1.1Host: api-eu1.hubapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG613M HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=config-loaded-success&value=1 HTTP/1.1Host: perf-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG61GV&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=tCEDyrh5I7R_YWX3AAtQ
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG613M HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=tCEDyrh5I7R_YWX3AAtQ
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1Host: sockets.signaturit.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://sign-app.signaturit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=tCEDyrh5I7R_YWX3AAtQSec-WebSocket-Key: ekRhzNC+Ml3GgYM+Poq8Tw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /td/rul/1018022215?random=1713961964710&cv=11&fst=1713961964710&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1018022215/?random=1713961964710&cv=11&fst=1713961964710&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /rest/ariadne/v1/domain HTTP/1.1Host: appvizer.oneConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/jsonAccept: /Origin: https://www.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1018022215/?random=1713961964710&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq413nPGWpwkP_r56HRHl3GKpKlzNnqGV2jdcck_y7lGn7sDFg&random=818378193&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984957836/?random=1713961965805&cv=11&fst=1713961965805&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnHRLhvY_qnzkwGhChyVw_nPAXcMBxLruzQZJl2KVHtlBED8XXXkXFCUUse
Source: global traffic	HTTP traffic detected: GET /td/rul/984957836?random=1713961965805&cv=11&fst=1713961965805&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnHRLhvY_qnzkwGhChyVw_nPAXcMBxLruzQZJl2KVHtlBED8XXXkXFCUUse
Source: global traffic	HTTP traffic detected: GET /rest/ariadne/v1/domain HTTP/1.1Host: appvizer.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984957836/?random=1713961965805&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1GtnD_OWmBYYYZ1_7sfhsEbgOrJTyw2a3vepm14Ea0IO1ue2&random=3038026455&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1018022215/?random=1713961964710&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq413nPGWpwkP_r56HRHl3GKpKlzNnqGV2jdcck_y7lGn7sDFg&random=818378193&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/images/favicon.png HTTP/1.1Host: www.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/en/legality/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; slireg=https://scout.us2.salesloft.com; sliguid=bb66a4db-f8d8-4594-ac91-0ef358c3712d; slirequested=true; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _gd_visitor=debda57b-e0dd-4674-85a9-d29d168ac8f0; _gd_session=f036755f-cdc3-4234-8b92-271a76fee068; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984957836/?random=1713961965805&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1GtnD_OWmBYYYZ1_7sfhsEbgOrJTyw2a3vepm14Ea0IO1ue2&random=3038026455&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/payload?p=06AFcWeA5d-vJe2uMuWW9qFbA8rVEt5N5az5wb7Wb5EepBorcdDRatbyaI0R7xyTotWEjJXo253d46Ne6RBdWfhOOAsS5KOj2zTsq3rmlA40TgAv5Mmyl4_SMp3EdO6QwNjgTfXN4X-laqGSSbPALR-k_o9kKH_uBROZUUDWf3X-OtVAMvVcsV9OZsWmBo1xZpOJIPaOkUEf3E2uuzD1NLyURapwSjAgDE8A&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/signaturit/images/favicon.png HTTP/1.1Host: www.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; slireg=https://scout.us2.salesloft.com; sliguid=bb66a4db-f8d8-4594-ac91-0ef358c3712d; slirequested=true; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _gd_visitor=debda57b-e0dd-4674-85a9-d29d168ac8f0; _gd_session=f036755f-cdc3-4234-8b92-271a76fee068; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192
Source: global traffic	HTTP traffic detected: GET /signals/config/539386581403116?v=2.9.154&r=stable&domain=www.signaturit.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/payload?p=06AFcWeA5d-vJe2uMuWW9qFbA8rVEt5N5az5wb7Wb5EepBorcdDRatbyaI0R7xyTotWEjJXo253d46Ne6RBdWfhOOAsS5KOj2zTsq3rmlA40TgAv5Mmyl4_SMp3EdO6QwNjgTfXN4X-laqGSSbPALR-k_o9kKH_uBROZUUDWf3X-OtVAMvVcsV9OZsWmBo1xZpOJIPaOkUEf3E2uuzD1NLyURapwSjAgDE8A&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968228&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=88d35df0-d3c8-4847-a056-b715eb5386c3&fci=aa59ca84-71c6-4a21-83cf-0aee24a58c81&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968236&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ariadne/external-event HTTP/1.1Host: ariadne.appvizer.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ariadne/external-event HTTP/1.1Host: ariadne.appvizer.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968228&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=88d35df0-d3c8-4847-a056-b715eb5386c3&fci=aa59ca84-71c6-4a21-83cf-0aee24a58c81&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968236&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/en-us HTTP/1.1Host: help.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249
Source: global traffic	HTTP traffic detected: GET /hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/theming_assets/708839/550881/style.css?digest=15992025776401 HTTP/1.1Host: p17.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/assets/en-us.05a4d042de4a0bd7e0e4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /theme_assets/708839/7248320f1e80605a0d15a4cf8f811be0b619bd68.png HTTP/1.1Host: theme.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://p17.zdassets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png HTTP/1.1Host: theme.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://p17.zdassets.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /theme_assets/708839/39a538119dff681270eb7a0d5641a347b77d0089.png HTTP/1.1Host: theme.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/en-us/sections/20917497510929-Certified-files HTTP/1.1Host: help.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://help.signaturit.com/hc/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978
Source: global traffic	HTTP traffic detected: GET /theme_assets/708839/39a538119dff681270eb7a0d5641a347b77d0089.png HTTP/1.1Host: theme.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/assets/en-us.05a4d042de4a0bd7e0e4.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/theming_assets/708839/550881/script.js?digest=15992025776401 HTTP/1.1Host: p17.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/assets/hc_enduser-fb88a13df887cd7e3577fa4983341c63.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/v2/host/without_iframe.js HTTP/1.1Host: signaturit.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ekr/snippet.js?key=web_widget/signaturit.zendesk.com HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/assets/react-59929afd541f3d4213b2a81d773e1d73.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/assets/61618-e00125bb003008fb81737a0eb569cb2b.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/assets/subscribe-bcea9748128daed810dc1d824bcc210d.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: help.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1
Source: global traffic	HTTP traffic detected: GET /compose/web_widget/signaturit.zendesk.com HTTP/1.1Host: ekr.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://help.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hc/activity HTTP/1.1Host: help.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js HTTP/1.1Host: help.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/web_widget/signaturit.zendesk.com HTTP/1.1Host: ekr.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /theme_assets/708839/aaf0bfd0e0dc6bcd40849adc95d1517096cbeeaa.jpg HTTP/1.1Host: theme.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zendesk/widget/r0l5nqfm HTTP/1.1Host: app.hellozest.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/87961e88ff6969e6 HTTP/1.1Host: help.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; cf_clearance=5vQ24BR0ehrs9Mkf0yqA4XzpOPC7DtkICiLJbPmWfrc-1713961985-1.0.1.1-E4gr8V4LrWx_tG.l.4zA84hlcID9ZOnJSOA15F29YahIlgQA7tJyrnlYP4m4fd_Mf504sS0imM5DJ23XODAyjg
Source: global traffic	HTTP traffic detected: GET /theme_assets/708839/aaf0bfd0e0dc6bcd40849adc95d1517096cbeeaa.jpg HTTP/1.1Host: theme.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: signaturit.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://help.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zendesk/widget/r0l5nqfm HTTP/1.1Host: app.birdie.soConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-sdk-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: signaturit.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=7164262fe2a06e812899d7c447996a5777237e03-1713961981
Source: global traffic	HTTP traffic detected: GET /s/W/ws/HlHzlAqgzRYBFW6x/c/1713961986349 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://help.signaturit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: QWEj2Q173XZoJt+K3WZugg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /en/login HTTP/1.1Host: account.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/c/1713961987306 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main-a73c411dc2.js HTTP/1.1Host: account.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.signaturit.com/en/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/d/1713961988077/1713961988077%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%22pwcI91sGFmxEtTCDa1631bEHfZpzs4fG%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Certified%20files%20%E2%80%93%20Signaturit%22%2C%22url%22%3A%22https%3A%2F%2Fhelp.signaturit.com%2Fhc%2Fen-us%2Fsections%2F20917497510929-Certified-files%22%2C%22ref%22%3A%22https%3A%2F%2Fhelp.signaturit.com%2Fhc%2Fen-us%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=EoOu8uEFbQQz+6D1NcVGPvtNTufKXsw1iF1Xpt4fg+Dd0v4+YJMkjUb4af7nyEDHQW8D7KKybHVwXkDjWBNw4lh7FFZObhQ9lmGRaBY8FEFrKlwD1QQ/kYUfJDJQ
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961988079 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=EoOu8uEFbQQz+6D1NcVGPvtNTufKXsw1iF1Xpt4fg+Dd0v4+YJMkjUb4af7nyEDHQW8D7KKybHVwXkDjWBNw4lh7FFZObhQ9lmGRaBY8FEFrKlwD1QQ/kYUfJDJQ
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: signaturit.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=7164262fe2a06e812899d7c447996a5777237e03-1713961981
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961988869 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=I28C0/txeJvKq/wlrIxqI5h4Sb3rTKKPAM+nxIQ6nomKYsUq42HCIMC2qAYD6sg6towohe1UsiOKil6KZ8uUrYalmPhfxaRS13dA9FdHe0y2sqsf9+G13kDO/JTW
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961989641 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=/LNSHrOV63j/o0JLhXZxFscISQmFvi9gPgEUejz1c4EbL/lnbjSAfryxgKEAGIppT5wcVPyX9WFy4n8IFG8stIoG9F7Hd9jJRK2f1N6GbgntnTI9pEF6T7APGMch
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961990573 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=9/GhluKOA0UjbtEMO6BqZuTbpAqPUrI+iKio1at+g9+QUImJ0GR0Ww/bkp9+FiFxFk1j6yU20V3820UGcqXcDagqbidi4onxJRD3RI3f69zNsuVymakx1IEizQ9D
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/HlHzlAqgzRYBFW6x/d/1713961990733/1713961990733%0A-697.1520369977142%0A2%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713961986350%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=9/GhluKOA0UjbtEMO6BqZuTbpAqPUrI+iKio1at+g9+QUImJ0GR0Ww/bkp9+FiFxFk1j6yU20V3820UGcqXcDagqbidi4onxJRD3RI3f69zNsuVymakx1IEizQ9D
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG61GV&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG67RX&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG67kp&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
Source: global traffic	HTTP traffic detected: GET /widget/embed/r0l5nqfm HTTP/1.1Host: app.hellozest.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /locales/en.json HTTP/1.1Host: d47l4duuvaadc.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://account.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common-assets/v1/favicons/favicon-32x32.png HTTP/1.1Host: d3dvn1tnyxabn5.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/embed/r0l5nqfm HTTP/1.1Host: app.birdie.soConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=INuQAz3RM3mZDdXcEsAssMjqqa4WA87hOqanAs9IMbtONyXcFUr+xe36sNZjOfbAmfXOsLB3UnjsdPXgXz9ehw/bYDoaEugaqYGQgdlpwv1bXpHG2UQGCdSIRGdc; XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG688e HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /es/account/user HTTP/1.1Host: app.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://account.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d
Source: global traffic	HTTP traffic detected: GET /common-assets/v1/favicons/favicon-32x32.png HTTP/1.1Host: d3dvn1tnyxabn5.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /locales/en.json HTTP/1.1Host: d47l4duuvaadc.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/embed/manifest.json?r=1713961993118 HTTP/1.1Host: cdn.birdie.soConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://account.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket&sid=uxWQgoxnncAT64DmAA1T HTTP/1.1Host: sockets.signaturit.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://sign-app.signaturit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=uxWQgoxnncAT64DmAA1TSec-WebSocket-Key: DayjDMDQICmSG9H64BhQPg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG68L0&sid=uxWQgoxnncAT64DmAA1T HTTP/1.1Host: sockets.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=uxWQgoxnncAT64DmAA1T
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=polling&t=OyG688e HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=uxWQgoxnncAT64DmAA1T
Source: global traffic	HTTP traffic detected: GET /widget/embed/main.3c5b36cba0c64ce3ed94.js?slug=r0l5nqfm&wk=worker.cf1859efc210e2dcc36c.js HTTP/1.1Host: cdn.birdie.soConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /698-23b1986463.js HTTP/1.1Host: account.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.signaturit.com/en/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d
Source: global traffic	HTTP traffic detected: GET /widget/embed/manifest.json?r=1713961993118 HTTP/1.1Host: cdn.birdie.soConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /widget/embed/css/main2.css HTTP/1.1Host: cdn.birdie.soConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /widget/embed/worker.cf1859efc210e2dcc36c.js HTTP/1.1Host: cdn.birdie.soConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://account.signaturit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /636-558c93c544.js HTTP/1.1Host: account.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.signaturit.com/en/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; CookieConsent={stamp:%27um5jqEOEusZkBw+K6wAfeekEV2fzAbuQ5MW1MEl3HsHPjovZN15Ykg==%27%2Cnecessary:true%2Cpreferences:false%2Cstatistics:false%2Cmarketing:false%2Cmethod:%27explicit%27%2Cver:1%2Cutc:1713961995814%2Cregion:%27us-32%27}
Source: global traffic	HTTP traffic detected: GET /widget/embed/worker.cf1859efc210e2dcc36c.js HTTP/1.1Host: cdn.birdie.soConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /b009a76ad6.woff2 HTTP/1.1Host: account.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://account.signaturit.com/en/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; CookieConsent={stamp:%27um5jqEOEusZkBw+K6wAfeekEV2fzAbuQ5MW1MEl3HsHPjovZN15Ykg==%27%2Cnecessary:true%2Cpreferences:false%2Cstatistics:false%2Cmarketing:false%2Cmethod:%27explicit%27%2Cver:1%2Cutc:1713961995814%2Cregion:%27us-32%27}
Source: global traffic	HTTP traffic detected: GET /f25d774ecf.woff2 HTTP/1.1Host: account.signaturit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.signaturit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://account.signaturit.com/en/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; CookieConsent={stamp:%27um5jqEOEusZkBw+K6wAfeekEV2fzAbuQ5MW1MEl3HsHPjovZN15Ykg==%27%2Cnecessary:true%2Cpreferences:false%2Cstatistics:false%2Cmarketing:false%2Cmethod:%27explicit%27%2Cver:1%2Cutc:1713961995814%2Cregion:%27us-32%27}
Source: global traffic	HTTP traffic detected: GET /new._.blue.svg HTTP/1.1Host: diysyudrbtisp.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sockp.birdie.soConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://account.signaturit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3DSec-WebSocket-Key: aAG1BSTZBkILCr8iB7xe+Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /wsauth/r0l5nqfm HTTP/1.1Host: app.birdie.soConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D; AWSALBCORS=ogZFtsDUNbiI827XxWlIpq+UyxrukV66GMHTouzrWVeag2WV3Ro7ycumlyxO3YpaCd+EVfowPuZSSaEtHyiulHkUJupW1xWDEiolYdjxICwqxhnSupZ/abfY9TwE
Source: global traffic	HTTP traffic detected: GET /new._.blue.svg HTTP/1.1Host: diysyudrbtisp.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_255.2.dr	String found in binary or memory: <a href="https://www.facebook.com/signaturit" class="footer__rrss-item" target="blank"> equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/signaturit/" class="footer__rrss-item" target="blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_255.2.dr	String found in binary or memory: <a href="https://www.youtube.com/c/Signaturit/featured" class="footer__rrss-item" target="blank"> equals www.youtube.com (Youtube)
Source: chromecache_255.2.dr	String found in binary or memory: <span class="footer__rrss-icon" style="background-image: url(https://www.signaturit.com/wp-content/uploads/2023/11/facebook.svg)"></span> equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr	String found in binary or memory: <span class="footer__rrss-icon" style="background-image: url(https://www.signaturit.com/wp-content/uploads/2023/11/linkedin.svg)"></span> equals www.linkedin.com (Linkedin)
Source: chromecache_255.2.dr	String found in binary or memory: <span class="footer__rrss-icon" style="background-image: url(https://www.signaturit.com/wp-content/uploads/2023/11/youtube.svg)"></span> equals www.youtube.com (Youtube)
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/signaturit" target="_blank"><i class="fab fa-facebook-f"></i></a></li> equals www.facebook.com (Facebook)
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/c/Signaturit/featured" target="_blank"><i class="fab fa-youtube"></i></a></li> equals www.youtube.com (Youtube)
Source: chromecache_222.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_298.2.dr	String found in binary or memory: CookieConsentDialog.cookieTableNecessary = [["CookieConsent","account.signaturit.com<br/>account-cj.qa.signaturit.com<br/>app.signaturit.com<br/>app.signit.coe.int<br/>meet.signaturit.com<br/>www.signaturit.com","Stores the user's cookie consent state for the current domain","1 year","HTTP","1","","consent.cookiebot.com","en"],["AWSALB","app.birdie.so","Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. ","7 days","HTTP","1","","app.birdie.so","en"],["AWSALBCORS","app.birdie.so<br/>storm.birdie.so","Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. ","7 days","HTTP","1","","app.birdie.so<br/>storm.birdie.so","en"],["PHPSESSID","app.signaturit.com<br/>app.signit.coe.int","Preserves user session state across page requests.","4 days","HTTP","1","","app.signaturit.com<br/>app.signit.coe.int","en"],["__cf_bm","g2crowd.com<br/>hsforms.com<br/>hsforms.net<br/>hubspot.com<br/>info.signaturit.com<br/>js.ubembed.com<br/>pexels.com<br/>www.signaturit.com","This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.","1 day","HTTP","1","","g2crowd.com<br/>hsforms.com<br/>info.signaturit.com<br/>js.ubembed.com<br/>pexels.com<br/>www.signaturit.com","en"],["rc::a","gstatic.com","This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.","Persistent","HTML","2","","www.google.com","en"],["rc::b","gstatic.com","This cookie is used to distinguish between humans and bots. ","Session","HTML","2","","js.hsforms.net","en"],["rc::c","gstatic.com","This cookie is used to distinguish between humans and bots. ","Session","HTML","2","","www.google.com","en"],["rc::d-15#","gstatic.com","This cookie is used to distinguish between humans and bots. ","Persistent","HTML","2","","js.hsforms.net","en"],["__cfruid","help.signaturit.com<br/>info.signaturit.com","This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators. ","Session","HTTP","1","","help.signaturit.com<br/>info.signaturit.com","en"],["_cfuvid","hsforms.com<br/>hubspot.com","This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators. ","Session","HTTP","1","","hsforms.com","en"],["1.gif","imgsct.cookiebot.com","Used to count the number of sessions to the website, necessary for optimizing CMP product delivery. ","Session","Pixel","5","","imgsct.cookiebot.com","en"],["li_gc","linkedin.com","Stores the user's cookie consent state for the current domain","180 days","HTTP","1","","linkedin.com","en"],["bscookie","www.linkedin.com","This cooki
Source: chromecache_298.2.dr	String found in binary or memory: CookieConsentDialog.privacyPolicies = [["app.signit.coe.int","Council of Europe","https://www.coe.int/en/web/portal/cookies-disclaimer"],["bat.bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["casalemedia.com","Casale Media","http://www.casalemedia.com/"],["company-target.com","DemandBase","https://www.demandbase.com/privacy-policy/"],["connect.facebook.net"," Meta Platforms, Inc.","https://www.facebook.com/policy.php/"],["consent.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["consentcdn.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["doubleclick.net","Google","https://policies.google.com/privacy"],["g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["google.com","Google","https://policies.google.com/privacy"],["google-analytics.com","Google","https://policies.google.com/privacy"],["hsforms.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["hubspot.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["imgsct.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["js.hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["js-eu1.hs-analytics.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["pexels.com","Pexels","https://www.pexels.com/privacy-policy/"],["scout.salesloft.com","Salesloft","https://salesloft.com/privacy-policies/"],["scout-cdn.salesloft.com","SalesLoft","https://salesloft.com/privacy-policies/"],["script.hotjar.com","Hotjar","https://www.hotjar.com/legal/policies/privacy/"],["snap.licdn.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["t.co","Twitter Inc.","https://twitter.com/en/privacy"],["tracking.g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["tremorhub.com","Telaria","https://www.magnite.com/legal/advertising-technology-privacy-policy/"],["twitter.com","Twitter Inc.","https://twitter.com/en/privacy"],["www.google.com","Google","https://policies.google.com/privacy"],["www.google-analytics.com","Google","https://policies.google.com/privacy"],["www.googletagmanager.com","Google","https://policies.google.com/privacy"],["www.linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["www.youtube.com","YouTube","https://policies.google.com/privacy"],["youtube.com","YouTube","https://policies.google.com/privacy"]]; equals www.facebook.com (Facebook)
Source: chromecache_298.2.dr	String found in binary or memory: CookieConsentDialog.privacyPolicies = [["app.signit.coe.int","Council of Europe","https://www.coe.int/en/web/portal/cookies-disclaimer"],["bat.bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["casalemedia.com","Casale Media","http://www.casalemedia.com/"],["company-target.com","DemandBase","https://www.demandbase.com/privacy-policy/"],["connect.facebook.net"," Meta Platforms, Inc.","https://www.facebook.com/policy.php/"],["consent.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["consentcdn.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["doubleclick.net","Google","https://policies.google.com/privacy"],["g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["google.com","Google","https://policies.google.com/privacy"],["google-analytics.com","Google","https://policies.google.com/privacy"],["hsforms.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["hubspot.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["imgsct.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["js.hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["js-eu1.hs-analytics.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["pexels.com","Pexels","https://www.pexels.com/privacy-policy/"],["scout.salesloft.com","Salesloft","https://salesloft.com/privacy-policies/"],["scout-cdn.salesloft.com","SalesLoft","https://salesloft.com/privacy-policies/"],["script.hotjar.com","Hotjar","https://www.hotjar.com/legal/policies/privacy/"],["snap.licdn.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["t.co","Twitter Inc.","https://twitter.com/en/privacy"],["tracking.g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["tremorhub.com","Telaria","https://www.magnite.com/legal/advertising-technology-privacy-policy/"],["twitter.com","Twitter Inc.","https://twitter.com/en/privacy"],["www.google.com","Google","https://policies.google.com/privacy"],["www.google-analytics.com","Google","https://policies.google.com/privacy"],["www.googletagmanager.com","Google","https://policies.google.com/privacy"],["www.linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["www.youtube.com","YouTube","https://policies.google.com/privacy"],["youtube.com","YouTube","https://policies.google.com/privacy"]]; equals www.linkedin.com (Linkedin)
Source: chromecache_298.2.dr	String found in binary or memory: CookieConsentDialog.privacyPolicies = [["app.signit.coe.int","Council of Europe","https://www.coe.int/en/web/portal/cookies-disclaimer"],["bat.bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["casalemedia.com","Casale Media","http://www.casalemedia.com/"],["company-target.com","DemandBase","https://www.demandbase.com/privacy-policy/"],["connect.facebook.net"," Meta Platforms, Inc.","https://www.facebook.com/policy.php/"],["consent.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["consentcdn.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["doubleclick.net","Google","https://policies.google.com/privacy"],["g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["google.com","Google","https://policies.google.com/privacy"],["google-analytics.com","Google","https://policies.google.com/privacy"],["hsforms.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["hubspot.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["imgsct.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["js.hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["js-eu1.hs-analytics.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["pexels.com","Pexels","https://www.pexels.com/privacy-policy/"],["scout.salesloft.com","Salesloft","https://salesloft.com/privacy-policies/"],["scout-cdn.salesloft.com","SalesLoft","https://salesloft.com/privacy-policies/"],["script.hotjar.com","Hotjar","https://www.hotjar.com/legal/policies/privacy/"],["snap.licdn.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["t.co","Twitter Inc.","https://twitter.com/en/privacy"],["tracking.g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["tremorhub.com","Telaria","https://www.magnite.com/legal/advertising-technology-privacy-policy/"],["twitter.com","Twitter Inc.","https://twitter.com/en/privacy"],["www.google.com","Google","https://policies.google.com/privacy"],["www.google-analytics.com","Google","https://policies.google.com/privacy"],["www.googletagmanager.com","Google","https://policies.google.com/privacy"],["www.linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["www.youtube.com","YouTube","https://policies.google.com/privacy"],["youtube.com","YouTube","https://policies.google.com/privacy"]]; equals www.twitter.com (Twitter)
Source: chromecache_427.2.dr, chromecache_298.2.dr	String found in binary or memory: CookieConsentDialog.privacyPolicies = [["app.signit.coe.int","Council of Europe","https://www.coe.int/en/web/portal/cookies-disclaimer"],["bat.bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["bing.com","Microsoft","https://privacy.microsoft.com/en-US/privacystatement"],["casalemedia.com","Casale Media","http://www.casalemedia.com/"],["company-target.com","DemandBase","https://www.demandbase.com/privacy-policy/"],["connect.facebook.net"," Meta Platforms, Inc.","https://www.facebook.com/policy.php/"],["consent.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["consentcdn.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["doubleclick.net","Google","https://policies.google.com/privacy"],["g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["google.com","Google","https://policies.google.com/privacy"],["google-analytics.com","Google","https://policies.google.com/privacy"],["hsforms.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["hubspot.com","Hubspot","https://legal.hubspot.com/privacy-policy"],["imgsct.cookiebot.com","Cookiebot","https://www.cookiebot.com/goto/privacy-policy/"],["js.hsforms.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["js-eu1.hs-analytics.net","Hubspot","https://legal.hubspot.com/privacy-policy"],["linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["pexels.com","Pexels","https://www.pexels.com/privacy-policy/"],["scout.salesloft.com","Salesloft","https://salesloft.com/privacy-policies/"],["scout-cdn.salesloft.com","SalesLoft","https://salesloft.com/privacy-policies/"],["script.hotjar.com","Hotjar","https://www.hotjar.com/legal/policies/privacy/"],["snap.licdn.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["t.co","Twitter Inc.","https://twitter.com/en/privacy"],["tracking.g2crowd.com","G2Crowd","https://www.g2crowd.com/static/privacy"],["tremorhub.com","Telaria","https://www.magnite.com/legal/advertising-technology-privacy-policy/"],["twitter.com","Twitter Inc.","https://twitter.com/en/privacy"],["www.google.com","Google","https://policies.google.com/privacy"],["www.google-analytics.com","Google","https://policies.google.com/privacy"],["www.googletagmanager.com","Google","https://policies.google.com/privacy"],["www.linkedin.com","LinkedIn","https://www.linkedin.com/legal/privacy-policy"],["www.youtube.com","YouTube","https://policies.google.com/privacy"],["youtube.com","YouTube","https://policies.google.com/privacy"]]; equals www.youtube.com (Youtube)
Source: chromecache_411.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Pj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: Te ayudamos?","hero_unit_title_color":"rgba(57, 220, 115, 1)","search_placeholder":"Busca lo que necesitas...","instant_search":true,"scoped_kb_search":true,"scoped_community_search":true,"brand_color":"rgba(57, 220, 115, 1)","brand_text_color":"rgba(255, 255, 255, 1)","text_color":"rgba(30, 63, 63, 1)","link_color":"rgba(30, 63, 63, 1)","footer_color":"rgba(30, 63, 63, 1)","text_font":"Helvetica, Arial, sans-serif","categories_bg_color":"rgba(255, 255, 255, 1)","categories_icon_color":"rgba(57, 220, 115, 1)","toggle_promoted_articles":"no","toggle_recently_viewed_article":"no","toggle_community_block":"yes","community_image":"//theme.zdassets.com/theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png","toggle_recent_activity":"yes","footer_text_color":"#FFFFFF","facebook_url":"https://www.facebook.com/signaturit","twitter_url":"https://twitter.com/signaturit","linkedin_url":"https://es.linkedin.com/company/signaturit","pinterest_url":"-","instagram_url":"https://www.instagram.com/signaturit_team/","youtube_url":"https://www.youtube.com/c/Signaturit/featured","github_url":"-","copyright_text":"Copyright Signaturit 2022. All Rights Reserved.","show_articles_in_section":"yes","show_article_author":false,"show_article_comments":false,"show_follow_article":false,"show_recently_viewed_articles":true,"show_related_articles":true,"show_article_sharing":false,"show_follow_section":false,"show_follow_post":false,"show_post_sharing":false,"show_follow_topic":false},"has_pci_credit_card_custom_field":true,"current_brand_id":550881,"help_center_restricted":false,"current_brand_active":true,"is_assuming_someone_else":false,"flash_messages":[],"user_photo_editing_enabled":true,"has_docs_importer":false,"user_preferred_locale":"es","has_end_user_session_renewal":true,"has_user_session_cookie_enabled":false,"has_end_user_2fa":true,"has_custom_statuses_enabled":false,"has_generative_answers_in_help_center":false,"has_hc_generative_answers_setting_enabled":false,"version":"v24446"}; equals www.facebook.com (Facebook)
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: Te ayudamos?","hero_unit_title_color":"rgba(57, 220, 115, 1)","search_placeholder":"Busca lo que necesitas...","instant_search":true,"scoped_kb_search":true,"scoped_community_search":true,"brand_color":"rgba(57, 220, 115, 1)","brand_text_color":"rgba(255, 255, 255, 1)","text_color":"rgba(30, 63, 63, 1)","link_color":"rgba(30, 63, 63, 1)","footer_color":"rgba(30, 63, 63, 1)","text_font":"Helvetica, Arial, sans-serif","categories_bg_color":"rgba(255, 255, 255, 1)","categories_icon_color":"rgba(57, 220, 115, 1)","toggle_promoted_articles":"no","toggle_recently_viewed_article":"no","toggle_community_block":"yes","community_image":"//theme.zdassets.com/theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png","toggle_recent_activity":"yes","footer_text_color":"#FFFFFF","facebook_url":"https://www.facebook.com/signaturit","twitter_url":"https://twitter.com/signaturit","linkedin_url":"https://es.linkedin.com/company/signaturit","pinterest_url":"-","instagram_url":"https://www.instagram.com/signaturit_team/","youtube_url":"https://www.youtube.com/c/Signaturit/featured","github_url":"-","copyright_text":"Copyright Signaturit 2022. All Rights Reserved.","show_articles_in_section":"yes","show_article_author":false,"show_article_comments":false,"show_follow_article":false,"show_recently_viewed_articles":true,"show_related_articles":true,"show_article_sharing":false,"show_follow_section":false,"show_follow_post":false,"show_post_sharing":false,"show_follow_topic":false},"has_pci_credit_card_custom_field":true,"current_brand_id":550881,"help_center_restricted":false,"current_brand_active":true,"is_assuming_someone_else":false,"flash_messages":[],"user_photo_editing_enabled":true,"has_docs_importer":false,"user_preferred_locale":"es","has_end_user_session_renewal":true,"has_user_session_cookie_enabled":false,"has_end_user_2fa":true,"has_custom_statuses_enabled":false,"has_generative_answers_in_help_center":false,"has_hc_generative_answers_setting_enabled":false,"version":"v24446"}; equals www.linkedin.com (Linkedin)
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: Te ayudamos?","hero_unit_title_color":"rgba(57, 220, 115, 1)","search_placeholder":"Busca lo que necesitas...","instant_search":true,"scoped_kb_search":true,"scoped_community_search":true,"brand_color":"rgba(57, 220, 115, 1)","brand_text_color":"rgba(255, 255, 255, 1)","text_color":"rgba(30, 63, 63, 1)","link_color":"rgba(30, 63, 63, 1)","footer_color":"rgba(30, 63, 63, 1)","text_font":"Helvetica, Arial, sans-serif","categories_bg_color":"rgba(255, 255, 255, 1)","categories_icon_color":"rgba(57, 220, 115, 1)","toggle_promoted_articles":"no","toggle_recently_viewed_article":"no","toggle_community_block":"yes","community_image":"//theme.zdassets.com/theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png","toggle_recent_activity":"yes","footer_text_color":"#FFFFFF","facebook_url":"https://www.facebook.com/signaturit","twitter_url":"https://twitter.com/signaturit","linkedin_url":"https://es.linkedin.com/company/signaturit","pinterest_url":"-","instagram_url":"https://www.instagram.com/signaturit_team/","youtube_url":"https://www.youtube.com/c/Signaturit/featured","github_url":"-","copyright_text":"Copyright Signaturit 2022. All Rights Reserved.","show_articles_in_section":"yes","show_article_author":false,"show_article_comments":false,"show_follow_article":false,"show_recently_viewed_articles":true,"show_related_articles":true,"show_article_sharing":false,"show_follow_section":false,"show_follow_post":false,"show_post_sharing":false,"show_follow_topic":false},"has_pci_credit_card_custom_field":true,"current_brand_id":550881,"help_center_restricted":false,"current_brand_active":true,"is_assuming_someone_else":false,"flash_messages":[],"user_photo_editing_enabled":true,"has_docs_importer":false,"user_preferred_locale":"es","has_end_user_session_renewal":true,"has_user_session_cookie_enabled":false,"has_end_user_2fa":true,"has_custom_statuses_enabled":false,"has_generative_answers_in_help_center":false,"has_hc_generative_answers_setting_enabled":false,"version":"v24446"}; equals www.twitter.com (Twitter)
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: Te ayudamos?","hero_unit_title_color":"rgba(57, 220, 115, 1)","search_placeholder":"Busca lo que necesitas...","instant_search":true,"scoped_kb_search":true,"scoped_community_search":true,"brand_color":"rgba(57, 220, 115, 1)","brand_text_color":"rgba(255, 255, 255, 1)","text_color":"rgba(30, 63, 63, 1)","link_color":"rgba(30, 63, 63, 1)","footer_color":"rgba(30, 63, 63, 1)","text_font":"Helvetica, Arial, sans-serif","categories_bg_color":"rgba(255, 255, 255, 1)","categories_icon_color":"rgba(57, 220, 115, 1)","toggle_promoted_articles":"no","toggle_recently_viewed_article":"no","toggle_community_block":"yes","community_image":"//theme.zdassets.com/theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png","toggle_recent_activity":"yes","footer_text_color":"#FFFFFF","facebook_url":"https://www.facebook.com/signaturit","twitter_url":"https://twitter.com/signaturit","linkedin_url":"https://es.linkedin.com/company/signaturit","pinterest_url":"-","instagram_url":"https://www.instagram.com/signaturit_team/","youtube_url":"https://www.youtube.com/c/Signaturit/featured","github_url":"-","copyright_text":"Copyright Signaturit 2022. All Rights Reserved.","show_articles_in_section":"yes","show_article_author":false,"show_article_comments":false,"show_follow_article":false,"show_recently_viewed_articles":true,"show_related_articles":true,"show_article_sharing":false,"show_follow_section":false,"show_follow_post":false,"show_post_sharing":false,"show_follow_topic":false},"has_pci_credit_card_custom_field":true,"current_brand_id":550881,"help_center_restricted":false,"current_brand_active":true,"is_assuming_someone_else":false,"flash_messages":[],"user_photo_editing_enabled":true,"has_docs_importer":false,"user_preferred_locale":"es","has_end_user_session_renewal":true,"has_user_session_cookie_enabled":false,"has_end_user_2fa":true,"has_custom_statuses_enabled":false,"has_generative_answers_in_help_center":false,"has_hc_generative_answers_setting_enabled":false,"version":"v24446"}; equals www.youtube.com (Youtube)
Source: chromecache_337.2.dr, chromecache_426.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=iA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},lA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_411.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Yg:d,Wg:e,Xg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!CC&&JC(x[B],n.ye))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_396.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vI(q, equals www.facebook.com (Facebook)
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_298.2.dr	String found in binary or memory: s interaction with embedded content.","1 day","HTTP","1","","www.youtube.com","en"],["VISITOR_INFO1_LIVE","youtube.com","Tries to estimate the users' bandwidth on pages with integrated YouTube videos.","180 days","HTTP","1","","youtube.com","en"],["VISITOR_PRIVACY_METADATA","youtube.com","Stores the user's cookie consent state for the current domain","180 days","HTTP","1","","youtube.com","en"],["YSC","youtube.com","Registers a unique ID to keep statistics of what videos from YouTube the user has seen.","Session","HTTP","1","","youtube.com","en"],["yt.innertube::nextId","youtube.com","Registers a unique ID to keep statistics of what videos from YouTube the user has seen.","Persistent","HTML","2","","www.youtube.com","en"],["ytidb::LAST_RESULT_ENTRY_KEY","youtube.com","Stores the user's video player preferences using embedded YouTube video","Persistent","HTML","2","","www.youtube.com","en"],["YtIdbMeta#databases","youtube.com","Used to track user equals www.youtube.com (Youtube)
Source: chromecache_298.2.dr	String found in binary or memory: s interaction with embedded content.","Persistent","IDB","6","","www.youtube.com","en"],["yt-remote-cast-available","youtube.com","Stores the user's video player preferences using embedded YouTube video","Session","HTML","2","","www.youtube.com","en"],["yt-remote-cast-installed","youtube.com","Stores the user's video player preferences using embedded YouTube video","Session","HTML","2","","www.youtube.com","en"],["yt-remote-connected-devices","youtube.com","Stores the user's video player preferences using embedded YouTube video","Persistent","HTML","2","","www.youtube.com","en"],["yt-remote-device-id","youtube.com","Stores the user's video player preferences using embedded YouTube video","Persistent","HTML","2","","www.youtube.com","en"],["yt-remote-fast-check-period","youtube.com","Stores the user's video player preferences using embedded YouTube video","Session","HTML","2","","www.youtube.com","en"],["yt-remote-session-app","youtube.com","Stores the user's video player preferences using embedded YouTube video","Session","HTML","2","","www.youtube.com","en"],["yt-remote-session-name","youtube.com","Stores the user's video player preferences using embedded YouTube video","Session","HTML","2","","www.youtube.com","en"]]; equals www.youtube.com (Youtube)
Source: chromecache_298.2.dr	String found in binary or memory: s interaction with embedded content.","Session","HTTP","1","","www.youtube.com","en"],["LogsDatabaseV2:V#\|\|LogsRequestsStore","youtube.com","Pending","Persistent","IDB","6","","www.youtube.com",null],["nextId","youtube.com","Used to track user equals www.youtube.com (Youtube)
Source: chromecache_298.2.dr	String found in binary or memory: s interaction with embedded content.","Session","HTTP","1","","www.youtube.com","en"],["ServiceWorkerLogsDatabase#SWHealthLog","youtube.com","Necessary for the implementation and functionality of YouTube video-content on the website. ","Persistent","IDB","6","","www.youtube.com","en"],["TESTCOOKIESENABLED","youtube.com","Used to track user equals www.youtube.com (Youtube)
Source: chromecache_298.2.dr	String found in binary or memory: s interaction with embedded content.","Session","HTTP","1","","www.youtube.com","en"],["remote_sid","youtube.com","Necessary for the implementation and functionality of YouTube video-content on the website. ","Session","HTTP","1","","www.youtube.com","en"],["requests","youtube.com","Used to track user equals www.youtube.com (Youtube)
Source: chromecache_327.2.dr	String found in binary or memory: tpl:'<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>'}}),e(t).on("click","[data-fancybox-share]",function(){var t,o,i=e.fancybox.getInstance(),a=i.current\|\|null;a&&("function"===e.type(a.opts.share.url)&&(t=a.opts.share.url.apply(a,[i,a])),o=a.opts.share.tpl.replace(/\{\{media\}\}/g,"image"===a.type?encodeURIComponent(a.src):"").replace(/\{\{url\}\}/g,encodeURIComponent(t)).replace(/\{\{url_raw\}\}/g,n(t)).replace(/\{\{descr\}\}/g,i.$caption?encodeURIComponent(i.$caption.text()):""),e.fancybox.open({src:i.translate(i,o),type:"html",opts:{touch:!1,animationEffect:!1,afterLoad:function(t,e){i.$refs.container.one("beforeClose.fb",function(){t.close(null,0)}),e.$content.find(".fancybox-share__button").click(function(){return window.open(this.href,"Share","width=550, height=450"),!1})},mobile:{autoFocus:!1}}}))})}(document,jQuery),function(t,e,n){"use strict";function o(){var e=t.location.hash.substr(1),n=e.split("-"),o=n.length>1&&/^\+?\d+$/.test(n[n.length-1])?parseInt(n.pop(-1),10)\|\|1:1,i=n.join("-");return{hash:e,index:o<1?1:o,gallery:i}}function i(t){""!==t.gallery&&n("[data-fancybox='"+n.escapeSelector(t.gallery)+"']").eq(t.index-1).focus().trigger("click.fb-start")}function a(t){var e,n;return!!t&&(e=t.current?t.current.opts:t.opts,""!==(n=e.hash\|\|(e.$orig?e.$orig.data("fancybox")\|\|e.$orig.data("fancybox-trigger"):""))&&n)}n.escapeSelector\|\|(n.escapeSelector=function(t){return(t+"").replace(/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,
Source: chromecache_327.2.dr	String found in binary or memory: tpl:'<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>'}}),e(t).on("click","[data-fancybox-share]",function(){var t,o,i=e.fancybox.getInstance(),a=i.current\|\|null;a&&("function"===e.type(a.opts.share.url)&&(t=a.opts.share.url.apply(a,[i,a])),o=a.opts.share.tpl.replace(/\{\{media\}\}/g,"image"===a.type?encodeURIComponent(a.src):"").replace(/\{\{url\}\}/g,encodeURIComponent(t)).replace(/\{\{url_raw\}\}/g,n(t)).replace(/\{\{descr\}\}/g,i.$caption?encodeURIComponent(i.$caption.text()):""),e.fancybox.open({src:i.translate(i,o),type:"html",opts:{touch:!1,animationEffect:!1,afterLoad:function(t,e){i.$refs.container.one("beforeClose.fb",function(){t.close(null,0)}),e.$content.find(".fancybox-share__button").click(function(){return window.open(this.href,"Share","width=550, height=450"),!1})},mobile:{autoFocus:!1}}}))})}(document,jQuery),function(t,e,n){"use strict";function o(){var e=t.location.hash.substr(1),n=e.split("-"),o=n.length>1&&/^\+?\d+$/.test(n[n.length-1])?parseInt(n.pop(-1),10)\|\|1:1,i=n.join("-");return{hash:e,index:o<1?1:o,gallery:i}}function i(t){""!==t.gallery&&n("[data-fancybox='"+n.escapeSelector(t.gallery)+"']").eq(t.index-1).focus().trigger("click.fb-start")}function a(t){var e,n;return!!t&&(e=t.current?t.current.opts:t.opts,""!==(n=e.hash\|\|(e.$orig?e.$orig.data("fancybox")\|\|e.$orig.data("fancybox-trigger"):""))&&n)}n.escapeSelector\|\|(n.escapeSelector=function(t){return(t+"").replace(/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,
Source: chromecache_337.2.dr, chromecache_426.2.dr	String found in binary or memory: var NB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var h=Fz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: app.signaturit.com
Source: global traffic	DNS traffic detected: DNS query: sign-app.signaturit.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d2i8kkeqh9ciqw.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: dag0091vkqtc7.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: sockets.signaturit.com
Source: global traffic	DNS traffic detected: DNS query: www.signaturit.com
Source: global traffic	DNS traffic detected: DNS query: static.addtoany.com
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: consent.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: consentcdn.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: 23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com
Source: global traffic	DNS traffic detected: DNS query: appvizer.one
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: secure.bali6nora.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: assets.ubembed.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hsadspixel.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: cta-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: api-eu1.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: perf-eu1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ariadne.appvizer.one
Source: global traffic	DNS traffic detected: DNS query: imgsct.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: track-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: help.signaturit.com
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: p17.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: theme.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: signaturit.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: app.hellozest.io
Source: global traffic	DNS traffic detected: DNS query: app.birdie.so
Source: global traffic	DNS traffic detected: DNS query: widget-mediator.zopim.com
Source: global traffic	DNS traffic detected: DNS query: account.signaturit.com
Source: global traffic	DNS traffic detected: DNS query: zendesk-eu.my.sentry.io
Source: global traffic	DNS traffic detected: DNS query: d47l4duuvaadc.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: d3dvn1tnyxabn5.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: cdn.birdie.so
Source: global traffic	DNS traffic detected: DNS query: diysyudrbtisp.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: sockp.birdie.so

Source: unknown

HTTP traffic detected: POST /socket.io/?EIO=3&transport=polling&t=OyG5uwO&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1Host: sockets.signaturit.comConnection: keep-aliveContent-Length: 147sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign-app.signaturit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign-app.signaturit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io=-mRrFZl6_yTEJkZ6AAjf

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 12:32:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineExpires: Wed, 11 Jan 1984 05:00:00 GMTLink: <https://www.signaturit.com/wp-json/>; rel="https://api.w.org/"X-Cacheable: non200Cache-Control: max-age=600, must-revalidateX-Cache: HIT: 2X-Cache-Group: normalCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 87961dac7f6509f1-LASalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 12:33:04 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Ray: 87961e9f9ec10a01-LASCF-Cache-Status: MISSVary: Accept-Encodingreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-download-options: noopenx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: noneX-Request-ID: 87961e9fc0190a01-LAXx-runtime: 0.001169x-xss-protection: 1; mode=blockX-Zendesk-Zorg: yesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y4bblrhRxDEbpgdWFMXkcSHiF6eZk7Utlebm9OUi2JkBerS10kJg3iehisKquJHcuM9HM0pvfSXEAEu7VvbF2fUjqrqwvGw370soERh%2BEPEJcVeX3wzk0X2fUvZSSQLPSCP2kOU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 24 Apr 2024 12:33:14 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: Accept-EncodingCache-Control: max-age=0, must-revalidate, privatex-content-type-options: nosniffstrict-transport-security: max-age=31536000; includeSubDomains; preloadstrict-transport-security: max-age=31536000x-frame-options: DENY

Source: chromecache_332.2.dr	String found in binary or memory: http://dbushell.com/
Source: chromecache_385.2.dr, chromecache_294.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_229.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_255.2.dr	String found in binary or memory: https://account.signaturit.com/en/login
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_255.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
Source: chromecache_367.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_248.2.dr	String found in binary or memory: https://app.birdie.
Source: chromecache_248.2.dr	String found in binary or memory: https://app.hellozest.io
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://app.hellozest.io/zendesk/widget/r0l5nqfm
Source: chromecache_369.2.dr, chromecache_318.2.dr	String found in binary or memory: https://appvizer.one/ariadne/v1/ariadne_scraping.js
Source: chromecache_314.2.dr, chromecache_183.2.dr	String found in binary or memory: https://ariadne.appvizer.one/ariadne
Source: chromecache_325.2.dr	String found in binary or memory: https://assets.ubembed.com/universalscript/releases/v0.181.0/bundle.js
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://assets.zendesk.com/hc/assets/default_avatar.png
Source: chromecache_439.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=68196
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_248.2.dr	String found in binary or memory: https://cdn.birdie.so/widget/embed
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_396.2.dr, chromecache_398.2.dr	String found in binary or memory: https://consent.cookiebot.com/uc.js?cbid=
Source: chromecache_415.2.dr	String found in binary or memory: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/
Source: chromecache_390.2.dr	String found in binary or memory: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/main.js
Source: chromecache_390.2.dr	String found in binary or memory: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/polyfills.js
Source: chromecache_390.2.dr	String found in binary or memory: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/runtime.js
Source: chromecache_390.2.dr	String found in binary or memory: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/styles.css
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/android-icon-192x192.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-114x114.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-120x120.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-144x144.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-152x152.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-180x180.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-57x57.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-60x60.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-72x72.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-76x76.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/android-chrome-192x192.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-114x114.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-120x120.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-144x144.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-152x152.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-180x180.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-57x57.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-60x60.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-72x72.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-76x76.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/favicon-16x16.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/favicon-32x32.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile-144x144.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile-310x310.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile-70x70.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile150x150.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/favicon-16x16.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/favicon-32x32.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/ms-icon-144x144.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/ms-icon-150x150.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/ms-icon-310x310.png
Source: chromecache_194.2.dr	String found in binary or memory: https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/ms-icon-70x70.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-144x144.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-192x192.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-36x36.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-48x48.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-72x72.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-114x114.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-120x120.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-144x144.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-152x152.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-180x180.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-57x57.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-60x60.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-72x72.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-76x76.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/favicon-16x16.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/favicon-32x32.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/favicon-96x96.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/ms-icon-150x150.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/ms-icon-310x310.png
Source: chromecache_390.2.dr	String found in binary or memory: https://dag0091vkqtc7.cloudfront.net/static-files/ms-icon-70x70.png
Source: chromecache_441.2.dr	String found in binary or memory: https://dashboard.signaturit.com/es/#/request/all/all
Source: chromecache_198.2.dr, chromecache_226.2.dr	String found in binary or memory: https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_248.2.dr	String found in binary or memory: https://docs.birdie.so/birdie-docs/getting-started/snippet
Source: chromecache_256.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea55691
Source: chromecache_381.2.dr, chromecache_299.2.dr	String found in binary or memory: https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://es.linkedin.com/company/signaturit
Source: chromecache_436.2.dr, chromecache_402.2.dr, chromecache_422.2.dr, chromecache_351.2.dr, chromecache_275.2.dr, chromecache_408.2.dr, chromecache_186.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_436.2.dr, chromecache_402.2.dr, chromecache_422.2.dr, chromecache_351.2.dr, chromecache_275.2.dr, chromecache_408.2.dr, chromecache_186.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v141/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_458.2.dr	String found in binary or memory: https://github.com/philipwalton/flexbugs#1-minimum-content-sizing-of-flex-items-not-honored)
Source: chromecache_439.2.dr, chromecache_317.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_317.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE
Source: chromecache_439.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.1/LICENSE
Source: chromecache_417.2.dr	String found in binary or memory: https://google.com
Source: chromecache_417.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/activity
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/admin/arrange_contents?locale=en-us
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/admin/general_settings?locale=en-us
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/admin/language_settings?locale=en-us
Source: chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/en-us
Source: chromecache_227.2.dr, chromecache_341.2.dr	String found in binary or memory: https://help.signaturit.com/hc/en-us/articles/360000275677-Two-factor-verification
Source: chromecache_227.2.dr, chromecache_341.2.dr	String found in binary or memory: https://help.signaturit.com/hc/en-us/articles/360017115438
Source: chromecache_312.2.dr	String found in binary or memory: https://help.signaturit.com/hc/en-us/sections/20917497510929-Certified-files
Source: chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/es
Source: chromecache_312.2.dr	String found in binary or memory: https://help.signaturit.com/hc/es/sections/20917497510929-Archivos-certificados
Source: chromecache_418.2.dr	String found in binary or memory: https://help.signaturit.com/hc/fr
Source: chromecache_255.2.dr	String found in binary or memory: https://ivnosys.com/en/terms-and-conditions/
Source: chromecache_364.2.dr	String found in binary or memory: https://js-eu1.hs-analytics.net/analytics/1713959400000/143456774.js
Source: chromecache_294.2.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2
Source: chromecache_364.2.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2/143456774/banner.js
Source: chromecache_385.2.dr	String found in binary or memory: https://js-eu1.hs-scripts.com/143456774.js
Source: chromecache_364.2.dr	String found in binary or memory: https://js-eu1.hsadspixel.net/fb.js
Source: chromecache_364.2.dr	String found in binary or memory: https://js-eu1.hscollectedforms.net/collectedforms.js
Source: chromecache_364.2.dr	String found in binary or memory: https://js-eu1.hubspot.com/web-interactives-embed.js
Source: chromecache_271.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_271.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://kit.fontawesome.com/bfc862380e.js
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://oss.maxcdn.com/respond/1.4.2/respond.min.js
Source: chromecache_411.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_256.2.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce
Source: chromecache_256.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=ea556916-5ff9-4bbe-87d1-172f8612a1ce&v
Source: chromecache_368.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_255.2.dr	String found in binary or memory: https://policy.ivsign.net/
Source: chromecache_396.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_368.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_255.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_354.2.dr, chromecache_433.2.dr	String found in binary or memory: https://scout.us2.salesloft.com
Source: chromecache_309.2.dr	String found in binary or memory: https://secure.bali6nora.com/Track/Capture.aspx?retType=js&trk_jshv=1&trk_uid=&trk_user=263839&trk_s
Source: chromecache_334.2.dr	String found in binary or memory: https://signaturit.birdie.so/zendesk/launcher/signaturit?1713961986&bgcolor=&source=$
Source: chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/auth/v2/host/without_iframe.js
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/arrange?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/community_badges?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/community_settings?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/content_tags?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/import_articles?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/search_settings?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/user_segments?brand_id=550881
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://signaturit.zendesk.com/knowledge/verification?brand_id=550881
Source: chromecache_227.2.dr, chromecache_341.2.dr	String found in binary or memory: https://signaturitteam.typeform.com/to/kgcKBi
Source: chromecache_227.2.dr, chromecache_341.2.dr	String found in binary or memory: https://signaturitteam.typeform.com/to/mabkDB
Source: chromecache_396.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_195.2.dr	String found in binary or memory: https://static.addtoany.com/menu/
Source: chromecache_255.2.dr	String found in binary or memory: https://static.addtoany.com/menu/page.js
Source: chromecache_195.2.dr	String found in binary or memory: https://static.addtoany.com/menu/sm.25.html#type=core&event=load
Source: chromecache_396.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_396.2.dr, chromecache_398.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://static.zdassets.com/ekr/snippet.js
Source: chromecache_381.2.dr, chromecache_299.2.dr	String found in binary or memory: https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js
Source: chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_367.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_368.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_441.2.dr	String found in binary or memory: https://survey-images.hotjar.com/surveys/logo/d8954f7e54be4ca396d775348dfef882
Source: chromecache_367.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://twitter.com/signaturit
Source: chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v6.1.1/css/all.css
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_427.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.coe.int/en/web/portal/cookies-disclaimer
Source: chromecache_427.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.cookiebot.com
Source: chromecache_346.2.dr, chromecache_458.2.dr	String found in binary or memory: https://www.customersupporttheme.com
Source: chromecache_396.2.dr, chromecache_398.2.dr, chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_367.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_367.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_367.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_411.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_367.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_359.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1018022215/?random
Source: chromecache_218.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/984957836/?random
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_335.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_337.2.dr, chromecache_396.2.dr, chromecache_426.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_367.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_255.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_255.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WFK9SV
Source: chromecache_346.2.dr, chromecache_458.2.dr	String found in binary or memory: https://www.grow-shine.com
Source: chromecache_288.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_335.2.dr, chromecache_460.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__es.js
Source: chromecache_255.2.dr, chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.instagram.com/signaturit_team/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.linkedin.com/company/signaturit/
Source: chromecache_320.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/#website
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/?s=
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/about-us/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/all-solutions/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/alliances/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/blog/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/careers/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/consulting-firms/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/contact/
Source: chromecache_255.2.dr, chromecache_427.2.dr, chromecache_298.2.dr	String found in binary or memory: https://www.signaturit.com/cookie-policy/
Source: chromecache_227.2.dr, chromecache_341.2.dr	String found in binary or memory: https://www.signaturit.com/digital-certificate-manager/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/e-signature/advanced/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/e-signature/qualified/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/e-signature/simple/
Source: chromecache_341.2.dr	String found in binary or memory: https://www.signaturit.com/en
Source: chromecache_227.2.dr, chromecache_341.2.dr	String found in binary or memory: https://www.signaturit.com/en/legality
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/forrester-landscape/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/free-trial/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/gdpr-policy/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/industries/education/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/industries/facility-services/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/industries/financial-services/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/industries/insurance/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/industries/real-estate/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/integrators/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/iso-norms/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/legal-notice/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/legality/certification-authority/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/marketplace/google-docs/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/marketplace/poplee-core-hr-lucca/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/marketplace/salesforce/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/marketplace/zapier/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/our-partner-program/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/partners/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/press/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/pricing/
Source: chromecache_227.2.dr, chromecache_255.2.dr, chromecache_341.2.dr	String found in binary or memory: https://www.signaturit.com/privacy-policy/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/certified-comunications/email/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/certified-comunications/sms/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/digital-certification/electronic-seal-ivnosys/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/digital-certification/external-registration-authority/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/digital-certification/manager/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/digital-certification/qualified-ivnosys/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/digital-certification/time-stamp/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/egovernment/e-notifications/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/integrations/api/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/integrations/salesforce/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/service-providers/ivnosys/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/service-providers/signaturit/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/service-providers/universign/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/signature/ivnosys/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/signature/signaturit/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/products/video-identification/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/resellers/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/resources/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/roi-esignature/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/security-policy/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/terms-conditions-signaturit/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/use-cases/audits/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/use-cases/human-resources/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/use-cases/procurement/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/use-cases/sales-marketing/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/why-signaturit/our-accreditations/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/why-signaturit/our-customer-first-approach/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/why-signaturit/success-stories/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/why-signaturit/support/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-coo
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switcher
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/themes/signaturit/images/favicon.png
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/themes/signaturit/js/theme.js?v=fix-anchor-0404
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/10/logo-signaturit-group.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/accreditations.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/advanced-electronic-signature.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/api.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/audit-compliance.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/certified-SMS.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/certified-email.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/certified-manager.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/customer-first-approach.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/customer-reviews.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/education.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/external-registration-authority.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/facebook.svg)
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/facilities.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/financial-services.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/group.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/hr.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/instagram.svg)
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/insurance.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/ivnosis.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/linkedin.svg)
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/procurement.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/public-administration-notification.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/qualified-certificates-seals.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/qualified-certificates.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/qualified-electronic-signature.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/qualified-time-stamp.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/real_estate.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/sales-marketing.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/salesforce.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/signaturit.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/simple-electronic-signature.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/success-stories.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/support.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/universign.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/video-id.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/11/youtube.svg)
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/12/favicon-signaturit-group.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.signaturit.com/wp-content/uploads/2023/12/qualified-certificates-seals-1_icon.svg
Source: chromecache_255.2.dr	String found in binary or memory: https://www.universign.com/en/terms-and-conditions/
Source: chromecache_255.2.dr	String found in binary or memory: https://www.universign.com/fr/certifications/
Source: chromecache_334.2.dr	String found in binary or memory: https://www.willpeavy.com/tools/minifier/
Source: chromecache_255.2.dr, chromecache_312.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.youtube.com/c/Signaturit/featured
Source: chromecache_411.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_347.2.dr	String found in binary or memory: https://www.zendesk.com/answer-bot/
Source: chromecache_347.2.dr	String found in binary or memory: https://www.zendesk.com/embeddables/
Source: chromecache_347.2.dr	String found in binary or memory: https://www.zendesk.com/guide/#gallery
Source: chromecache_347.2.dr	String found in binary or memory: https://www.zendesk.com/guide/features/knowledge-capture-app/
Source: chromecache_255.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443

Source: unknown	HTTPS traffic detected: 23.61.210.98:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.210.98:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: classification engine

Classification label: sus23.troj.win@26/490@279/74

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2676 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6492 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2676 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6492 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256	0%	Avira URL Cloud	safe
https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256	0%	Virustotal		Browse

Source	Detection	Scanner	Link
segments.company-target.com	0%	Virustotal	Browse
sockp.birdie.so	0%	Virustotal	Browse
4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com	0%	Virustotal	Browse
a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com	0%	Virustotal	Browse
adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com	0%	Virustotal	Browse
c23f1bb1b6d0420a94d3aeebea36c4c1.pacloudflare.com	0%	Virustotal	Browse
15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	0%	Virustotal	Browse
app.birdie.so	0%	Virustotal	Browse
18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	0%	Virustotal	Browse
assets.ubembed.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://consentcdn.cookiebot.com/sdk/bc-v4.min.html	0%	URL Reputation	safe
https://s.company-target.com/s/sync?exc=lr	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://cdn.birdie.so/widget/embed/manifest.json?r=1713961993118	0%	Avira URL Cloud	safe
https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc	0%	Avira URL Cloud	safe
https://ivnosys.com/en/terms-and-conditions/	0%	Avira URL Cloud	safe
https://perf-eu1.hsforms.com/embed/v3/counters.gif?key=config-loaded-success&value=1	0%	Avira URL Cloud	safe
https://appvizer.one/rest/ariadne/v2/script/AP-0	0%	Avira URL Cloud	safe
https://signaturit.birdie.so/zendesk/launcher/signaturit?1713961986&bgcolor=&source=$	0%	Avira URL Cloud	safe
https://www.customersupporttheme.com	0%	Avira URL Cloud	safe
https://policy.ivsign.net/	0%	Avira URL Cloud	safe
https://forms-eu1.hsforms.com/embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064	0%	Avira URL Cloud	safe
https://www.grow-shine.com	0%	Avira URL Cloud	safe
https://app.birdie.	0%	Avira URL Cloud	safe
https://ariadne.appvizer.one/ariadne/external-event	0%	Avira URL Cloud	safe
https://app.birdie.so/zendesk/widget/r0l5nqfm	0%	Avira URL Cloud	safe
https://cdn.birdie.so/widget/embed/worker.cf1859efc210e2dcc36c.js	0%	Avira URL Cloud	safe
https://app.hellozest.io	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com	172.65.232.43	true	false	0%, Virustotal, Browse	unknown
app.birdie.so	3.141.154.91	true	false	0%, Virustotal, Browse	unknown
sockp.birdie.so	3.140.57.243	true	false	0%, Virustotal, Browse	unknown
segments.company-target.com	216.137.39.63	true	false	0%, Virustotal, Browse	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false		high
scout.us1.salesloft.com	54.160.89.81	true	false		high
18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	172.65.238.60	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.250.101.155	true	false		high
static.zdassets.com	104.18.72.113	true	false		high
cdnjs.cloudflare.com	104.17.24.14	true	false		high
ekr.zdassets.com	104.18.72.113	true	false		high
www.google.com	142.250.141.106	true	false		high
tracking.g2crowd.com	172.64.144.225	true	false		high
c23f1bb1b6d0420a94d3aeebea36c4c1.pacloudflare.com	172.65.219.229	true	false	0%, Virustotal, Browse	unknown
id.rlcdn.com	35.244.154.8	true	false		high
assets.ubembed.com	18.164.174.40	true	false	0%, Virustotal, Browse	unknown
adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com	172.65.198.159	true	false	0%, Virustotal, Browse	unknown
static-cdn.hotjar.com	18.154.132.120	true	false		high
star-mini.c10r.facebook.com	157.240.11.35	true	false		high
15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	172.65.192.122	true	false	0%, Virustotal, Browse	unknown
d47l4duuvaadc.cloudfront.net	13.227.74.91	true	false		high
sockets.signaturit.com	104.18.4.186	true	false		high
a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com	172.65.236.181	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.217.130	true	false		high
static.addtoany.com	104.22.71.197	true	false		high
iolliroykg49.wpeproxy.com	141.193.213.20	true	false		unknown
td.doubleclick.net	142.250.101.156	true	false		high
api-eu1.hubapi.com	141.101.90.96	true	false		high
partners-alb-1113315349.us-east-1.elb.amazonaws.com	54.236.114.45	true	false		high
forms.hsforms.com	104.19.175.188	true	false		unknown
d3dvn1tnyxabn5.cloudfront.net	18.154.207.209	true	false		high
e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com	172.65.240.166	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
theme.zdassets.com	104.18.70.113	true	false		high
tag.demandbase.com	108.139.10.63	true	false		high
scontent.xx.fbcdn.net	31.13.70.7	true	false		high
script.hotjar.com	18.161.6.2	true	false		high
js.hsforms.net	104.18.142.119	true	false		high
zendesk-eu.my.sentry.io	34.36.90.178	true	false		high
prod.k8s.appvizer.net	135.125.85.242	true	false		unknown
2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com	172.65.208.22	true	false		unknown
appvizer.one	37.59.241.167	true	false		unknown
tag-logger.demandbase.com	99.84.66.60	true	false		high
d2xgws9bdz6u6p.cloudfront.net	13.226.210.34	true	false		high
a.nel.cloudflare.com	35.190.80.1	true	false		high
cdn.birdie.so	18.164.174.89	true	false		unknown
app.signaturit.com	104.18.4.186	true	false		high
p17.zdassets.com	104.18.72.113	true	false		high
dsum-sec.casalemedia.com	104.18.36.155	true	false		high
diysyudrbtisp.cloudfront.net	13.225.141.96	true	false		high
app.hellozest.io	3.141.154.91	true	false		unknown
widget-mediator.zopim.com	52.37.227.74	true	false		high
d2i8kkeqh9ciqw.cloudfront.net	13.226.228.59	true	false		high
api.company-target.com	18.154.144.9	true	false		unknown
7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com	172.65.202.201	true	false		unknown
analytics.google.com	142.250.141.113	true	false		high
signaturit.zendesk.com	104.16.53.111	true	false		high
ariadne.appvizer.one	unknown	unknown	false		unknown
ka-f.fontawesome.com	unknown	unknown	false		high
scout.salesloft.com	unknown	unknown	false		high
js-eu1.hs-analytics.net	unknown	unknown	false		unknown
scout-cdn.salesloft.com	unknown	unknown	false		high
www.signaturit.com	unknown	unknown	false		high
use.fontawesome.com	unknown	unknown	false		high
static.hotjar.com	unknown	unknown	false		high
js-eu1.hsadspixel.net	unknown	unknown	false		unknown
j.6sc.co	unknown	unknown	false		unknown
consentcdn.cookiebot.com	unknown	unknown	false		high
23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com	unknown	unknown	false		unknown
js-eu1.hubspot.com	unknown	unknown	false		high
secure.bali6nora.com	unknown	unknown	false		unknown
s.company-target.com	unknown	unknown	false		unknown
c.6sc.co	unknown	unknown	false		unknown
kit.fontawesome.com	unknown	unknown	false		high
consent.cookiebot.com	unknown	unknown	false		high
pixel.rubiconproject.com	unknown	unknown	false		high
px.ads.linkedin.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
account.signaturit.com	unknown	unknown	false		high
js-eu1.hs-scripts.com	unknown	unknown	false		high
help.signaturit.com	unknown	unknown	false		high
forms-eu1.hsforms.com	unknown	unknown	false		unknown
partners.tremorhub.com	unknown	unknown	false		unknown
perf-eu1.hsforms.com	unknown	unknown	false		unknown
ipv6.6sc.co	unknown	unknown	false		unknown
cta-eu1.hubspot.com	unknown	unknown	false		high
js-eu1.hscollectedforms.net	unknown	unknown	false		unknown
sign-app.signaturit.com	unknown	unknown	false		high
track-eu1.hubspot.com	unknown	unknown	false		high
forms-eu1.hscollectedforms.net	unknown	unknown	false		unknown
dag0091vkqtc7.cloudfront.net	unknown	unknown	false		high
imgsct.cookiebot.com	unknown	unknown	false		high
b.6sc.co	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		high
www.linkedin.com	unknown	unknown	false		high
snap.licdn.com	unknown	unknown	false		high
js-eu1.hs-banner.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://diysyudrbtisp.cloudfront.net/new._.blue.svg	false		high
https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.10	false		high
https://www.signaturit.com/wp-content/themes/signaturit/fonts/N27-Bold.woff2	false		high
https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=FGET	false		high
https://www.signaturit.com/wp-content/uploads/2023/11/qualified-certificates.svg	false		high
https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG5uZ3	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.facebook.com/tr/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=GET	false		high
https://static.zdassets.com/hc/assets/subscribe-bcea9748128daed810dc1d824bcc210d.js	false		high
https://cdn.birdie.so/widget/embed/manifest.json?r=1713961993118	false	Avira URL Cloud: safe	unknown
https://www.signaturit.com/wp-content/uploads/2023/11/salesforce.svg	false		high
https://sign-app.signaturit.com/en/9763b81/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256	false		high
https://www.signaturit.com/wp-content/uploads/2023/11/facilities.svg	false		high
https://www.signaturit.com/wp-content/uploads/2023/11/education.svg	false		high
https://perf-eu1.hsforms.com/embed/v3/counters.gif?key=config-loaded-success&value=1	false	Avira URL Cloud: safe	unknown
https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&gjid=398648138&_gid=1531399362.1713961956&_u=YCDAgAABAAAAAG~&z=919864726	false		high
https://sockets.signaturit.com/socket.io/?EIO=3&transport=websocket&sid=-mRrFZl6_yTEJkZ6AAjf	false		high
https://theme.zdassets.com/theme_assets/708839/7248320f1e80605a0d15a4cf8f811be0b619bd68.png	false		high
https://appvizer.one/rest/ariadne/v2/script/AP-0	false	Avira URL Cloud: safe	unknown
https://account.signaturit.com/698-23b1986463.js	false		high
https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/main.js	false		high
https://forms-eu1.hsforms.com/embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064	false	Avira URL Cloud: safe	unknown
https://app.signaturit.com/es/account/user	false		high
https://script.hotjar.com/modules.588629dd3c10b20ab52d.js	false		high
https://www.signaturit.com/wp-content/uploads/2023/11/qualified-certificates-seals.svg	false		high
https://help.signaturit.com/cdn-cgi/challenge-platform/h/b/jsd/r/87961e88ff6969e6	false		high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-ZB2TFCHC3F&cid=1954242962.1713961954&gtm=45je44m0v880655858z86591828za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false		high
https://www.signaturit.com/wp-content/uploads/2023/11/instagram.svg	false		high
https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG613M	false		high
https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/polyfills.js	false		high
https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/styles.css	false		high
https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1	false		high
https://ariadne.appvizer.one/ariadne/external-event	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css	false		high
https://app.birdie.so/zendesk/widget/r0l5nqfm	false	Avira URL Cloud: safe	unknown
https://static.zdassets.com/hc/assets/61618-e00125bb003008fb81737a0eb569cb2b.js	false		high
https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/signaturit-sign-app.woff	false		high
https://cdn.birdie.so/widget/embed/worker.cf1859efc210e2dcc36c.js	false	Avira URL Cloud: safe	unknown
https://tag.demandbase.com/c84ebe43de7d3bac.min.js	false		high
https://theme.zdassets.com/theme_assets/708839/39a538119dff681270eb7a0d5641a347b77d0089.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://survey-images.hotjar.com/surveys/logo/d8954f7e54be4ca396d775348dfef882	chromecache_441.2.dr	false		high
https://js-eu1.hs-scripts.com/143456774.js	chromecache_385.2.dr	false		high
https://www.signaturit.com/industries/facility-services/	chromecache_255.2.dr	false		high
https://dag0091vkqtc7.cloudfront.net/static-files/ms-icon-70x70.png	chromecache_390.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_367.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile-310x310.png	chromecache_194.2.dr	false		high
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	chromecache_312.2.dr, chromecache_418.2.dr	false		high
https://ivnosys.com/en/terms-and-conditions/	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_396.2.dr	false		high
https://www.signaturit.com/careers/	chromecache_255.2.dr	false		high
https://www.signaturit.com/security-policy/	chromecache_255.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-114x114.png	chromecache_194.2.dr	false		high
https://www.signaturit.com/#website	chromecache_255.2.dr	false		high
https://www.cookiebot.com	chromecache_427.2.dr, chromecache_298.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_288.2.dr, chromecache_368.2.dr	false		high
https://www.signaturit.com/products/digital-certification/time-stamp/	chromecache_255.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/ms-icon-150x150.png	chromecache_194.2.dr	false		high
https://www.signaturit.com/e-signature/simple/	chromecache_255.2.dr	false		high
https://www.signaturit.com/alliances/	chromecache_255.2.dr	false		high
https://www.signaturit.com/resources/	chromecache_255.2.dr	false		high
https://support.google.com/recaptcha	chromecache_368.2.dr	false		high
https://www.signaturit.com/products/service-providers/signaturit/	chromecache_255.2.dr	false		high
https://policy.ivsign.net/	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://www.customersupporttheme.com	chromecache_346.2.dr, chromecache_458.2.dr	false	Avira URL Cloud: safe	unknown
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/apple-touch-icon-72x72.png	chromecache_194.2.dr	false		high
https://www.signaturit.com/iso-norms/	chromecache_255.2.dr	false		high
https://www.instagram.com/signaturit_team/	chromecache_255.2.dr, chromecache_312.2.dr, chromecache_418.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile-144x144.png	chromecache_194.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-72x72.png	chromecache_194.2.dr	false		high
https://www.signaturit.com/partners/	chromecache_255.2.dr	false		high
https://www.signaturit.com/products/certified-comunications/email/	chromecache_255.2.dr	false		high
https://signaturit.birdie.so/zendesk/launcher/signaturit?1713961986&bgcolor=&source=$	chromecache_334.2.dr	false	Avira URL Cloud: safe	unknown
https://dag0091vkqtc7.cloudfront.net/static-files/favicon-96x96.png	chromecache_390.2.dr	false		high
https://www.signaturit.com/industries/financial-services/	chromecache_255.2.dr	false		high
https://www.signaturit.com/free-trial/	chromecache_255.2.dr	false		high
https://use.fontawesome.com/releases/v6.1.1/css/all.css	chromecache_312.2.dr, chromecache_418.2.dr	false		high
http://www.hubspot.com	chromecache_385.2.dr, chromecache_294.2.dr	false		high
https://www.zendesk.com/guide/features/knowledge-capture-app/	chromecache_347.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/coe/mstile150x150.png	chromecache_194.2.dr	false		high
https://signaturit.zendesk.com/knowledge/community_settings?brand_id=550881	chromecache_312.2.dr, chromecache_418.2.dr	false		high
https://www.signaturit.com/contact/	chromecache_255.2.dr	false		high
https://dag0091vkqtc7.cloudfront.net/static-files/favicon-32x32.png	chromecache_390.2.dr	false		high
https://cloud.google.com/contact	chromecache_288.2.dr, chromecache_368.2.dr	false		high
https://fontawesome.com/license/free	chromecache_436.2.dr, chromecache_402.2.dr, chromecache_422.2.dr, chromecache_351.2.dr, chromecache_275.2.dr, chromecache_408.2.dr, chromecache_186.2.dr	false		high
https://es.linkedin.com/company/signaturit	chromecache_312.2.dr, chromecache_418.2.dr	false		high
https://www.grow-shine.com	chromecache_346.2.dr, chromecache_458.2.dr	false	Avira URL Cloud: safe	unknown
https://www.signaturit.com/products/digital-certification/manager/	chromecache_255.2.dr	false		high
https://app.birdie.	chromecache_248.2.dr	false	Avira URL Cloud: safe	unknown
https://www.signaturit.com/products/certified-comunications/sms/	chromecache_255.2.dr	false		high
https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-120x120.png	chromecache_390.2.dr	false		high
https://app.hellozest.io	chromecache_248.2.dr	false	Avira URL Cloud: safe	unknown
https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-60x60.png	chromecache_390.2.dr	false		high
https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-57x57.png	chromecache_194.2.dr	false		high
https://www.signaturit.com/press/	chromecache_255.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_288.2.dr, chromecache_368.2.dr	false		high
https://www.signaturit.com/products/integrations/salesforce/	chromecache_255.2.dr	false		high
https://static.hotjar.com/c/hotjar-	chromecache_396.2.dr, chromecache_398.2.dr	false		high
https://dag0091vkqtc7.cloudfront.net/static-files/apple-icon-114x114.png	chromecache_390.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.189.125.189	unknown	United States	16509	AMAZON-02US	false
104.18.5.186	unknown	United States	13335	CLOUDFLARENETUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
18.161.6.2	script.hotjar.com	United States	3	MIT-GATEWAYSUS	false
104.18.72.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
31.13.70.36	unknown	Ireland	32934	FACEBOOKUS	false
172.65.232.43	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
157.240.11.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.65.192.122	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.70.113	theme.zdassets.com	United States	13335	CLOUDFLARENETUS	false
18.164.174.89	cdn.birdie.so	United States	3	MIT-GATEWAYSUS	false
18.154.207.209	d3dvn1tnyxabn5.cloudfront.net	United States	16509	AMAZON-02US	false
18.164.174.82	unknown	United States	3	MIT-GATEWAYSUS	false
172.65.219.229	c23f1bb1b6d0420a94d3aeebea36c4c1.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
37.59.241.167	appvizer.one	France	16276	OVHFR	false
135.125.85.242	prod.k8s.appvizer.net	United States	18676	AVAYAUS	false
172.65.236.181	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
99.84.66.60	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
142.250.101.99	unknown	United States	15169	GOOGLEUS	false
13.227.74.91	d47l4duuvaadc.cloudfront.net	United States	16509	AMAZON-02US	false
104.22.70.197	unknown	United States	13335	CLOUDFLARENETUS	false
216.137.39.126	unknown	United States	16509	AMAZON-02US	false
104.18.4.186	sockets.signaturit.com	United States	13335	CLOUDFLARENETUS	false
18.154.144.129	unknown	United States	16509	AMAZON-02US	false
34.233.102.171	unknown	United States	14618	AMAZON-AESUS	false
142.250.101.156	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.101.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
99.84.66.95	unknown	United States	16509	AMAZON-02US	false
141.193.213.21	unknown	United States	396845	DV-PRIMARY-ASN1US	false
34.36.90.178	zendesk-eu.my.sentry.io	United States	2686	ATGS-MMD-ASUS	false
54.160.89.81	scout.us1.salesloft.com	United States	14618	AMAZON-AESUS	false
172.65.202.201	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
141.193.213.20	iolliroykg49.wpeproxy.com	United States	396845	DV-PRIMARY-ASN1US	false
142.250.141.106	www.google.com	United States	15169	GOOGLEUS	false
142.250.141.103	unknown	United States	15169	GOOGLEUS	false
172.65.238.60	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.225.141.4	unknown	United States	16509	AMAZON-02US	false
18.154.132.120	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
104.18.80.204	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.72.228	unknown	United States	15169	GOOGLEUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
104.16.53.111	signaturit.zendesk.com	United States	13335	CLOUDFLARENETUS	false
216.137.39.96	unknown	United States	16509	AMAZON-02US	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
18.154.207.24	unknown	United States	16509	AMAZON-02US	false
3.140.57.243	sockp.birdie.so	United States	16509	AMAZON-02US	false
18.164.174.40	assets.ubembed.com	United States	3	MIT-GATEWAYSUS	false
142.250.141.113	analytics.google.com	United States	15169	GOOGLEUS	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
52.23.83.161	unknown	United States	14618	AMAZON-AESUS	false
216.137.39.63	segments.company-target.com	United States	16509	AMAZON-02US	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
54.236.114.45	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
13.226.228.59	d2i8kkeqh9ciqw.cloudfront.net	United States	16509	AMAZON-02US	false
104.22.71.197	static.addtoany.com	United States	13335	CLOUDFLARENETUS	false
172.64.144.225	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
172.65.240.166	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.225.141.96	diysyudrbtisp.cloudfront.net	United States	16509	AMAZON-02US	false
3.141.154.91	app.birdie.so	United States	16509	AMAZON-02US	false
13.226.210.34	d2xgws9bdz6u6p.cloudfront.net	United States	16509	AMAZON-02US	false
52.37.227.74	widget-mediator.zopim.com	United States	16509	AMAZON-02US	false
141.101.90.96	api-eu1.hubapi.com	European Union	13335	CLOUDFLARENETUS	false
141.101.90.97	unknown	European Union	13335	CLOUDFLARENETUS	false
18.154.144.9	api.company-target.com	United States	16509	AMAZON-02US	false
172.65.198.159	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.217.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
31.13.70.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
172.65.208.22	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
108.139.10.63	tag.demandbase.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431064
Start date and time:	2024-04-24 14:31:00 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus23.troj.win@26/490@279/74
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.signaturit.com/en/legality Browse: https://help.signaturit.com/hc/en-us Browse: https://account.signaturit.com/en/login

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.2.94, 74.125.137.84, 142.250.189.14, 34.104.35.123, 142.250.141.94, 142.251.2.95, 13.85.23.86, 23.1.234.24, 23.1.234.57, 52.165.164.15, 192.229.211.108, 20.242.39.171, 142.250.141.95, 142.250.101.97, 23.43.51.70, 23.43.51.78, 23.43.51.73, 23.43.51.81, 74.125.137.95, 23.36.140.7, 23.199.47.143, 23.199.47.141, 13.107.21.237, 204.79.197.237, 104.16.72.105, 104.16.71.105, 104.18.39.181, 172.64.148.75, 13.107.42.14, 40.78.102.238, 142.250.72.142, 23.36.15.34, 23.36.15.10, 8.39.36.142, 8.39.36.141, 142.250.101.94, 172.217.12.131, 142.250.217.131, 104.21.27.152, 172.67.142.245, 104.18.40.68, 172.64.147.188, 104.21.26.223, 172.67.139.119, 104.110.134.4
Excluded domains from analysis (whitelisted): ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, use.fontawesome.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, update.googleapis.com, consent.cookiebot.com-v2.edgekey.net, www.gstatic.com, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, ajax.googleapis.com, ghochv3eng.trafficmanager.net, j2.6sc.co.edgekey.net, od.linkedin.edgesuite.net, edgedl.me.gvt1.com, imgsct.cookiebot.com.edgekey.net, clients.l.google.com, a1916.dscg2.akamai.net, e110990.dsca.akamaiedge.net, bat-bing-com.dual-a-0034.a-msedge.net, pixel.rubiconproject.net.akadns.net, scout-cdn.salesloft.com.cdn.cloudflare.net, ipv6-2.6sc.co.edgekey.net, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, bat.bing.com, e212585.b.akamaiedge.net, consentcdn.cookiebot.com-v1.edgekey.net,
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	5.19067373292885
Encrypted:	false
SSDEEP:	6:TMVBd/i9mc4slzXdhC/gKjnmdhgHiKOjLBGRxqRIBTXec2RbyPM:TMHd6BdU/gKzmdyOjdGaqpOhRbyE
MD5:	926E30C0486491E69CC0FDA62F9DC9E8
SHA1:	86D1BCCC1AED5B577FD71F491A20B724B91F72AE
SHA-256:	A24C4D5FB41C8CFFCA3744E24B8784545BB6BC587B0D0E2B45296E0095CF2669
SHA-512:	A0D02C97792BB6C49AD36D646CBACCB344A62454BD5BE1D6B30760D5DEA0AA1F75E58FA212782C97AFB10B77470F26CE9E9704816A1E378F9CAA0983265BE553
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/ivnosis.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M10.9922 7.16998H13.0082V16.83H10.9922V7.16998Z" fill="#FAFAFF"></path>.</svg>.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	401261
Entropy (8bit):	5.186154773092967
Encrypted:	false
SSDEEP:	1536:drexa4Tv9LWwQgF5PN+GgCbvNJIISIMqG+7/1S0Iuk9xXS+OYITLVBWJ2+FSB56k:drJ2+4OXZUUhFql9Kqt9l5
MD5:	AC12346290935833706294454EC9EFF8
SHA1:	EF8008431E9DF5F1F086D002851ECD0268A99B5E
SHA-256:	20F0AA28172A33FC334254E60A873F6A6B13F266AEE91DBB14C488DA7EE3556E
SHA-512:	F229D62454953E40761FD60A9529F57AF1D3D150BA8A155C0B5885FD369EC2F0075FE2C299A7986A953984833DD79338866200E4ECD101C27340920CA7E7761B
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/868.js
Preview:	"use strict";(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[868],{74868:(E,_,e)=>{e.r(_),e.d(_,{SgIntroductionModule:()=>T});var i=e(36895),O=e(24006),P=e(60202),p=e(4484),f=e(82804),u=e(5065),b=e(94088),h=e(24587),x=e(35987),w=e(84357),l=e(93870);class m{constructor(){this.slug="icon-check-outline"}}class M{constructor(){this.slug="icon-document-img"}}class d{constructor(){this.slug="icon-review"}}class s{constructor(){this.slug="icon-sign-mobile"}}class r{constructor(c,o,a,g){this.title=c,this.text=o,this.icon=a,this.multidocument=g,this.title=c,this.text=o,this.icon=a,this.multidocument=g}}class k{constructor(){this.steps=[new r("app.intro.advanced_widget_first_header","app.intro.advanced_widget_first_body",new d,"app.intro.advanced_multi_widget_first_header"),new r("app.intro.advanced_widget_second_header","app.intro.advanced_widget_second_body",new M),new r("app.intro.advanced_widget_third_header","app.intro.advanced_widget_third_body",new s,"app.intro.advanced_w

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.127089249997475
Encrypted:	false
SSDEEP:	24:2d6TU/dq6I5F56EtHxl+OKTA13PH2TIy3wv2qE1WoxGDwtDMoLaFaMh1MowAEK9p:cD/PIb5lHaU1WAItociPpEowt9A
MD5:	1002B6E61E56324F151B7257DAAE8C42
SHA1:	B20E412DE7280F92BC411284D6239B39DBD955ED
SHA-256:	9D7C0B22E2C8071A653C75E9C26C3C1F0EF51964E00718D577D9C38A9B862800
SHA-512:	FD5830CD67BF01D8BCF09E88718D119B092C04E63C9B0E132345B631B802B66A392CF05C3CFA3FF694AA1443C0AD7C5FC0E395F97578902E3D821DA07A638232
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/success-stories.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_8712)">. <mask id="mask0_2056_8712" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="80" height="80">. <rect width="80" height="80" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8712)">. <path d="M5 19V15H4C3.45 15 2.97917 14.8042 2.5875 14.4125C2.19583 14.0208 2 13.55 2 13V11C2 10.45 2.19583 9.97917 2.5875 9.5875C2.97917 9.19583 3.45 9 4 9H8L13 6V18L8 15H7V19H5ZM14 15.35V8.65C14.45 9.05 14.8125 9.5375 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6833 15.3625 13.3125 15.0875 13.8875C14.8125 14.4625 14.45 14.95 14 15.35ZM4 11V13H8.55L11 14.45V9.55L8.55 11H4Z" fill="#030352"></path>. <path d="M18 10.9998V12.9998H22V10.9998H18Z" fill="#0A0AF4"></path>. <path d="M16 17.5998L19.2 19.9998L20.4 18.3998L17.2 15.9998L16 17.5998Z" fill="#0A0AF4"></path>.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	270110
Entropy (8bit):	5.07990439427993
Encrypted:	false
SSDEEP:	6144:z5qMHZquG6a3SYiHENM6HN26baquVx3QqxP:z5qMHrquVx3QqxP
MD5:	0AC2DD2DD75BE141C123DF2C32E36D47
SHA1:	91DAD07B0FE7C9686E4ED2F460432C7A582F581A
SHA-256:	94518763581BB1A3CFA2EDEDB413AA3F59E3FE5D9598242F5E96922DB0A52128
SHA-512:	661FEE9EDBBA6B9D3222CC79354F551FA7923226BE28C24A0EB818CDE4E7A2DF9FEA8290E07181CD9D64F2CF444B94A7E3D3F2589A2C0B73C736611948E44329
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/styles.css
Preview:	@import"https://fonts.googleapis.com/css?family=Roboto:300,400,500";[class^=icon-]:before,[class=" icon-"]:before{width:1em;margin-right:.2em;text-align:center;margin-left:.2em}.icon-indicator-success:before{background-color:#fff;border-radius:50%}@font-face{font-family:signaturit-sign-app;src:url(signaturit-sign-app.eot);src:url(signaturit-sign-app.eot?#iefix) format("embedded-opentype"),url(signaturit-sign-app.woff) format("woff"),url(signaturit-sign-app.ttf) format("truetype"),url(signaturit-sign-app.svg#signaturit-sign-app) format("svg");font-weight:400;font-style:normal}[data-icon]:before{font-family:signaturit-sign-app,sans-serif!important;content:attr(data-icon);font-style:normal!important;font-weight:400!important;font-variant:normal!important;text-transform:none!important;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}[class^=icon-]:before,[class=" icon-"]:before{font-family:signaturit-sign-app,sans-serif!important;font-style:normal!import

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	111824
Entropy (8bit):	5.16779470584218
Encrypted:	false
SSDEEP:	1536:vb6I3l3okfYD8EvKDJ5b1Q39FyfzRJtunPG0b2BJrMdXq41nEqZUgJeW5QKF9xFP:13okfYD8P9un/buVYEMwFK
MD5:	EFA7232B42C346B1A41E9F1489C6602A
SHA1:	6808E3EFCC30292B6708208C9A05550C34ADBD0C
SHA-256:	6DEC01698BD7318CCEE3DAE6E824F02FF358D309DBE5A97F21B70A726C903421
SHA-512:	0DD50F0370720CB020ED36ED9BEF3A96C8964908B311FC894BEB233818AEA11E8D3454E278928F8C3FA8F308D2727F7AD3090AB2E1B56F63F8EA1787DE3F758A
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/uc.js?cbid=2ab275e9-1e4a-4473-958a-242d1f1243ee
Preview:	// 2.66.0 - 2024-04-15T08:16:33.363Z.!function(){function finallyConstructor(callback){var constructor=this.constructor;return this.then((function(value){return constructor.resolve(callback()).then((function(){return value}))}),(function(reason){return constructor.resolve(callback()).then((function(){return constructor.reject(reason)}))}))}function allSettled(arr){var P=this;return new P((function(resolve,reject){if(!arr\|\|void 0===arr.length)return reject(new TypeError(typeof arr+" "+arr+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var args=Array.prototype.slice.call(arr);if(0===args.length)return resolve([]);var remaining=args.length;function res(i,val){if(val&&("object"==typeof val\|\|"function"==typeof val)){var then=val.then;if("function"==typeof then)return void then.call(val,(function(val){res(i,val)}),(function(e){args[i]={status:"rejected",reason:e},0==--remaining&&resolve(args)}))}args[i]={status:"fulfilled",value:val},0==--remaining&&resolve(args)}for(var

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3133
Entropy (8bit):	4.289134164455651
Encrypted:	false
SSDEEP:	96:I2tb/l6sX9IjpiOsuj6NSMosT07qb6NzR6H5:I2tb/0sX9Yp1sue4d17FzRg5
MD5:	1781ACD11CD929929BF48EDD98FA82D6
SHA1:	0F4F5BC6901FBBA24AD3D01AE33B105E15053E98
SHA-256:	122C2DC120F0725D6F3946040E22C5F11D6909A4CD63C9DE7E2767729795D547
SHA-512:	90C72B9C24DC4572784D669C4ACE1FF1F76B24BC1D793E1AC14C1CAAED46ECD399A3E7B0F0B3EB617484304D718CDAD0DCEEC5597DDE84B9A2DA831CCB040216
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7232" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7232)">. <path d="M17.275 20.25L20.75 16.8L19.7 15.75L17.275 18.125L16.3 17.15L15.25 18.225L17.275 20.25ZM18 13C19.3833 13 20.5625 13.4875 21.5375 14.4625C22.5125 15.4375 23 16.6167 23 18C23 19.3833 22.5125 20.5625 21.5375 21.5375C20.5625 22.5125 19.3833 23 18 23C16.6167 23 15.4375 22.5125 14.4625 21.5375C13.4875 20.5625 13 19.3833 13 18C13 16.6167 13.4875 15.4375 14.4625 14.4625C15.4375 13.4875 16.6167 13 18 13Z" fill="#0A0AF4"></path>. <path fill-rule="evenodd" clip-rule="evenodd" d="M4 16.75V21H8.25L12.0544 17.1883C12.4142 14.5277 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625 21.75 7.4 21.85 7.15C21.95 6.9 22 6.65 22 6.4C22 6.13333 2

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1817
Entropy (8bit):	4.519816380494812
Encrypted:	false
SSDEEP:	48:cD/OtbUlHaiYsqAXRQMzb1RE7/842IdIt1rAXRQM2u:I2tbUl6sTBd1A/p2GIt1kBdl
MD5:	333B06789E8788CAEE1F5A964BC9AD03
SHA1:	D76906DDBEA73602D778616622C41490852224C8
SHA-256:	F81944F2C9BA4BFA9D0FAAFC9B6AD07CC5DB2FA924BC6C683483BA8C958C4480
SHA-512:	412D0BA45F252C9E794C51614BD1BD41D38BB880CDB667F0B1DF23F434379ACC7482E29BDED2E78813A8137697852AA289817A62FE93D3DED1379FCB43C563D0
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8690" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8690)">. <path d="M12 13C11.1667 13 10.4583 12.7083 9.875 12.125C9.29167 11.5417 9 10.8333 9 10C9 9.16667 9.29167 8.45833 9.875 7.875C10.4583 7.29167 11.1667 7 12 7C12.8333 7 13.5417 7.29167 14.125 7.875C14.7083 8.45833 15 9.16667 15 10C15 10.8333 14.7083 11.5417 14.125 12.125C13.5417 12.7083 12.8333 13 12 13ZM6 23V15.275C5.36667 14.575 4.875 13.775 4.525 12.875C4.175 11.975 4 11.0167 4 10C4 7.76667 4.775 5.875 6.325 4.325C7.875 2.775 9.76667 2 12 2C14.2333 2 16.125 2.775 17.675 4.325C19.225 5.875 20 7.76667 20 10C20 11.0167 19.825 11.975 19.475 12.875C19.125 13.775 18.6333 14.575 18 15.275V23L12 21L6 23ZM12 16C13.6667 16 15.0833 15.4167 16.25 1

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	901
Entropy (8bit):	4.941519703140459
Encrypted:	false
SSDEEP:	24:Y646VoKo+x+Aco/mRTYRXZoMCenucc9H5vKo8klQet:YFKuemxYtZ0H0wGet
MD5:	18CE092EDDCD9FB6C77311164FA7F15D
SHA1:	B2761338D9F96E0F32B4F39540D32CE4A1D59BF9
SHA-256:	F0210DFEB89FD8A9D9300B1CD68B4B85AD8385A3A87AD24C181AB840C076D5B0
SHA-512:	69223C9F522A08C4B4BEF9913DEFCA8280BB7FEB0F36E233CEEF5B724D8F80401C3C58C50FCA832A073D055C89493A44CB04462CBCC68515EE2EC7658EAE9B42
Malicious:	false
Reputation:	low
URL:	https://signaturit.zendesk.com/embeddable/config
Preview:	{"brand":"Signaturit","brandCount":1,"hostMapping":"help.signaturit.com","color":"#2c352b","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#2c352b","customFields":{"ids":["1900000545333","1900000545513"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true,"nameFieldRequired":true}},"chat":{"embed":"chat","props":{"color":"#2c352b","zopimId":"pwcI91sGFmxEtTCDa1631bEHfZpzs4fG","badge":{"color":"#2c352b","enabled":true,"imagePath":"","layout":"image_left","text":"Chat with us"},"forms":{"offlineEnabled":true,"preChatEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color":"#2c352b"}}},"features":{"prechatFormVisibleDepartments":true,"fastLoad":true,"answerBotCbpUsage":true}}

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=337330&time=1713961953910&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	36
Entropy (8bit):	3.798145057407474
Encrypted:	false
SSDEEP:	3:N88AAfX7LAn:2s4
MD5:	6B2D79210CB223C7FAB48ADF4CA9DB55
SHA1:	37AB550E0A87A952061A844BCCEF1EE0C1A6664F
SHA-256:	63073E1BADDA644CB868C9464E9F781BDBA1A1ABD0CA1427B4A9845AC2A2D5D2
SHA-512:	C23E609FDCA5F3E7C2AAA590443BE895770460DADCFEEA8304C411C1C9B3333F3DA8B127CF3419F4AF197FEF4E527430FF3F21D5B09E3B779C22316FF21AE50F
Malicious:	false
Reputation:	low
Preview:	https://ariadne.appvizer.one/ariadne

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.253038289558972
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKMt5FQEjoh6EtHxl+UdTmdEKGZX4FWQSTd5klPBzQx1aUoZzs8ZgDL:2d6TU/dMt5FtW6EtHxl+4iEKbsTdal2P
MD5:	B17FF0ADA0A8A107EF88C4F8104BAF65
SHA1:	2B11551521AC70F2E6D8A7BAF01DAA136E6E7AE3
SHA-256:	753F7BE087B397B10F3D3EB2308F7106FDBBDE31EB9D1234838B9B29EA0F7E14
SHA-512:	7CC60E83046BF494D6ED78531C45ED2A9E9441A7D1E8F1CD6B6BE85741FCE4BC918584E14B89D13C581E323946D1C2A2C20A73DDBB05A9DC90DF1098306510ED
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/education.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7963" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7963)">. <path d="M12 21L5 17.2V11.2L1 9L12 3L23 9V17H21V10.1L19 11.2V17.2L12 21ZM12 12.7L18.85 9L12 5.3L5.15 9L12 12.7ZM12 18.725L17 16.025V12.25L12 15L7 12.25V16.025L12 18.725Z" fill="#030352"></path>. <path d="M23 17V9L21 10.1V17H23Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28208)
Category:	downloaded
Size (bytes):	28304
Entropy (8bit):	5.300608169901437
Encrypted:	false
SSDEEP:	768:S4W4Z4gZYGSawbdn/bmY4CEPWr9S6wOUMN:SQVYGSawFCY4CbrjXUMN
MD5:	E5F85E6BD463E2E2730EE981ABC816AB
SHA1:	07BA652DD2E8C425759E99EBD55679E759873D4A
SHA-256:	674B5CF8D02B7FCDF3274AFD0363177C7A5016AD6820B53714FD886DA97A38C2
SHA-512:	A76BB511E32AB4997F31EBDB25CD32A564791A84E4FBF0B4BEC90ACDB1C5F8D7B8AA11D2231256F9A41CC15E3603A676AA6BF687A3B4836B42BE35372E49982C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/61618-e00125bb003008fb81737a0eb569cb2b.js
Preview:	/! For license information please see 61618-e00125bb003008fb81737a0eb569cb2b.js.LICENSE.txt /.(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[61618],{90093:function(e,t,n){var r=n(28196);e.exports=r},15684:function(e,t,n){var r=n(19373);e.exports=r},65362:function(e,t,n){var r=n(63383);e.exports=r},73151:function(e,t,n){var r=n(9534);e.exports=r},45012:function(e,t,n){var r=n(23059);e.exports=r},27700:function(e,t,n){n(73381);var r=n(35703);e.exports=r("Function").bind},16246:function(e,t,n){var r=n(7046),o=n(27700),a=Function.prototype;e.exports=function(e){var t=e.bind;return e===a\|\|r(a,e)&&t===a.bind?o:t}},14122:function(e,t,n){e.exports=n(89097)},69447:function(e,t,n){e.exports=n(628)},60269:function(e,t,n){e.exports=n(76936)},84710:function(e,t,n){e.exports=n(14058)},93799:function(e,t,n){e.exports=n(92093)},89097:function(e,t,n){var r=n(90093);e.exports=r},628:function(e,t,n){var r=n(15684);e.exports=r},76936:function(e,t,n){var r=n(65362);e.exports=r},14

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3604
Entropy (8bit):	4.147642207419846
Encrypted:	false
SSDEEP:	96:I2tbQl6shCwfQD4b6NzR6HSMD4b6NzR6H5:I2tbQ0sUwfQnzRgSMnzRg5
MD5:	5913916DC944B80E9D44EDA59F45575A
SHA1:	3B912F9EF56FE681E80B8197162E3DE523ADE826
SHA-256:	9FE36A1361C6D038BA8B674CFD3A3B4150C27685B3B3612824F956D6CE3F90BE
SHA-512:	7ECF797C921BB9C1B2CCC7D146AF7508F7E6168456F0B5C21A5DFA8EDE78DEB2ABE394FC7ABD79C8C60A57B53195D52B8F05D30DBB2936513B2F38D4869EE5FF
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/simple-electronic-signature.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7211" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7211)">. <path d="M4 21V16.75L17.175 3.6C17.375 3.4 17.6 3.25 17.85 3.15C18.1 3.05 18.35 3 18.6 3C18.8667 3 19.1208 3.05 19.3625 3.15C19.6042 3.25 19.8167 3.4 20 3.6L21.4 5C21.6 5.18333 21.75 5.39583 21.85 5.6375C21.95 5.87917 22 6.13333 22 6.4C22 6.65 21.95 6.9 21.85 7.15C21.75 7.4 21.6 7.625 21.4 7.825L8.25 21H4ZM6 19H7.4L17.225 9.2L16.525 8.475L15.8 7.775L6 17.6V19ZM16.525 8.475L15.8 7.775L17.225 9.2L16.525 8.475ZM14 21C15.2333 21 16.375 20.6917 17.425 20.075C18.475 19.4583 19 18.6 19 17.5C19 16.9 18.8417 16.3833 18.525 15.95C18.2083 15.5167 17.7833 15.1417 17.25 14.825L15.775 16.3C16.1583 16.4667 16.4583 16.65 16.675 16.85C16.8917 17.05 17 1

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:04:28 16:24:41], baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	43069
Entropy (8bit):	7.429056455699336
Encrypted:	false
SSDEEP:	768:vo0bNApWo0bNdnMIFO3q7nQJ/T0m2BVpqdaMHw:voAhoA7MiO3q7CTKmlHw
MD5:	A2D140E69BB89F074A957794CF3978C8
SHA1:	AAF0BFD0E0DC6BCD40849ADC95D1517096CBEEAA
SHA-256:	01859D370F300E99A44DCA9DA334B0D33EF6F5ECAEC7783B21A22455D807D879
SHA-512:	87B6422144D262754AEFDF0EC8FAB3F09D8ACDB3AB500E32955273E11DFEA0175313E17E929C7D3438AAEA4288853F94C33F57B0F28B1E268E5E77EE3F883257
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/708839/aaf0bfd0e0dc6bcd40849adc95d1517096cbeeaa.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 21.2 (Windows).2022:04:28 16:24:41........................................................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................`.`.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..I2...)..W....$..%2...OS.....c.&..G..O{.w........ZIj.Qs..\.....+.V.R..].7.......}-...b...-.eVOX...]..x..[k;.S...^.?..%i.....`X.\|.....i...#....mk...7

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21367)
Category:	downloaded
Size (bytes):	21467
Entropy (8bit):	5.52899647681262
Encrypted:	false
SSDEEP:	384:X/T0M0QySBvnkH0R0LPgTw8FkhqfmHAHYKdHf3cYd303QSHZCGdqX2PxhYzV9:P4TQRBsUOLPV8FkhqfbHYKdHEYsTQSI9
MD5:	FF27F27E6F093644D38DF3B19332EE00
SHA1:	96DAFDA621945DB2A6D028A97378A61C917B7CD4
SHA-256:	3A3789D87B04629A3296EF99F693037ADBB8F5C8C76A0D3D76ED31A54BABEB1F
SHA-512:	57D915E5A59574E315531BA51B3C323BF8B647F35B6AF1FAA917523DE5ED18BDD927008B7AD6D779B3BA9769C9E8C3FC0C2043E17F1F831C21A98454A020ACA7
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/subscribe-bcea9748128daed810dc1d824bcc210d.js
Preview:	/! For license information please see subscribe-bcea9748128daed810dc1d824bcc210d.js.LICENSE.txt /.(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[56295,63840],{61425:function(e,n,t){"use strict";var r,o=t(67294);function i(){return i=Object.assign\|\|function(e){for(var n=1;n<arguments.length;n++){var t=arguments[n];for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])}return e},i.apply(this,arguments)}n.Z=function(e){return o.createElement("svg",i({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,viewBox:"0 0 12 12"},e),r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M1 7l3 3 7-7"})))}},734:function(e,n,t){"use strict";t.d(n,{v2:function(){return c.v2},j2:function(){return h},sN:function(){return y},Uk:function(){return E},qy:function(){return w},Cl:function(){return g}});var r=t(41266),o=t(73126),i=t(67294),a=t(45697),s=t.n(a),c=t(80956),l=t(55877),u=t.n(l);functi

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	240
Entropy (8bit):	4.76825870451173
Encrypted:	false
SSDEEP:	6:tnr2nli/UYDumc4slvIPtcDZckctcslckccc62tcMKZ:tr2nubuCWcZGr6KKZ
MD5:	4AB6B148F7544B6CEB0CAF6F351F9B9B
SHA1:	BDD166387004EDF49B260DA1D3BA76AE6476768F
SHA-256:	BF703BB78D849162AC6E4A297BD0E02B96FF3CF4235A487AA1BD94F2CF89E0E5
SHA-512:	2676C0965783D52C2FAA465B2681D4DB31E23CD23BB840C25E507F4863627C11275FF1B1FB54D12B9CABD354849E9977623D17D0AE3BFCCC6B03A735C8AC2F9B
Malicious:	false
Reputation:	low
Preview:	<svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M2.3121 0.399994L6.9021 4.97999L11.4921 0.399994L12.9021 1.80999L6.9021 7.80999L0.9021 1.80999L2.3121 0.399994Z" fill="#030352"/>.</svg>.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	5.288571114461417
Encrypted:	false
SSDEEP:	6:oMjYzi6Ac1MjYzi6A7crmWrQkj9HOvGRFVVe2Nxd2pn:XDbDkm+/ZBRF/e2Nb2p
MD5:	77BB07CA171E3FF2B72A7DAFA7822BC8
SHA1:	2FBD32C0E434F7F2C355A92CE29C35F29EFA9A9F
SHA-256:	A29E4AF6AA6A95982D1092A20F0068173B9A9D5DF0A89BC99DA556AEBEC3CE54
SHA-512:	C86D851298EAD9DA81837465F1BA608DB05F00F0E2282C58FCC24F32CBC78116C1E9380C31DCA1B6F6C731B3227ACA463586D4C75BE595EBE4B74B1E8CECDAC9
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-7bc1c0f.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[5376],{62677:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.p+"fda6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2440)
Category:	downloaded
Size (bytes):	7149
Entropy (8bit):	5.086560806481992
Encrypted:	false
SSDEEP:	96:RSVCpTr3LbACSmX/BFb89LvH8pPqvcbz4oaYHs7Xf:44uODLWWkXf
MD5:	08B8D01350D13C8A6F98DCF0E41B2631
SHA1:	70203EAFAE72EC0295FF63C22D850C89EF6769E0
SHA-256:	D00945489FB9D445D258751AB8B61FDB55C6DC7E655A035344B03E8B9D1CB8CD
SHA-512:	4DEEFF78451F3E1D68115B3D76CB648B8EED5E69EE0F1097ED4CBC29A6659ABD4073E8B97A06AC032370AFD54D5271C8EF0EECEF92C112A07C9A9074BE74681F
Malicious:	false
Reputation:	low
URL:	https://account.signaturit.com/en/login
Preview:	<!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><base href="/"/><title>Authentication app</title><link rel="icon" type="image/png" sizes="16x16" href="https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/favicon-16x16.png"/><link rel="icon" type="image/png" sizes="32x32" href="https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="192x192" href="https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/android-icon-192x192.png"/><link rel="apple-touch-icon" sizes="57x57" href="https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-57x57.png"/><link rel="apple-touch-icon" sizes="60x60" href="https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-60x60.png"/><link rel="apple-touch-icon" sizes="72x72" href="https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/apple-icon-72x72.png"/><l

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003), with no line terminators
Category:	downloaded
Size (bytes):	3003
Entropy (8bit):	5.167974738136301
Encrypted:	false
SSDEEP:	48:hTaJfy+hiQFNB7GEGTbTzLEoPpKkVr54TH4y3yXHlrMPbEz2gqGC7samDw8//yYZ:hTsiQFNBGEGLco7DiH4eyXHhMPMoxm8o
MD5:	5F984FDD1D3384220C67422C1F544A95
SHA1:	79C8A48B5FAB47972DD69CE7DFD08CEE895006B5
SHA-256:	6E0CC78C402CBC02FDFD41CD77C5FD6FFBD8066CC07935EA8EB5F3FCC59744A3
SHA-512:	213D46E642971BE740CE74EE1F4B05835F11B88A05E89045BA6869391C40E871150ED22D96C9865203A767E45B5FBB09E879FE605D82E0E7B59CC8CF4BE3019A
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/page.js
Preview:	!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".BRQnzO8v",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.init=function(e,a){void 0===a&&(a=n);var t=":not([data-a2a-url]):not(.a2a_target)";o.querySelectorAll(".a2a_dd"+t+",.a2a_kit"+t).forEach(function(e){e.matches(".a2a_kit .a2a_dd");e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init("page",{linkurl:n.linkurl,linkname:n.linkname})),i.a2a.page\|\|(i.a2a.page=!0,s=[],["init_all","svg_css"].forEach(function(t){i.a2a[t]=function(){for(var e=[],a=0;a<arguments.length;a++)e[a]=arguments[a];s.push([t,e])}}),t=(v=n.static_server)?v+"/":"https://static.addtoany.com/menu/",a=e&&-1!==e.split("/")[2].indexOf("a

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10187), with no line terminators
Category:	downloaded
Size (bytes):	10187
Entropy (8bit):	5.17908949611252
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCx37YoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkoxrpN
MD5:	C0053B411B753138AF468DB1BD3B19F3
SHA1:	7C3A187AA58F2B9E5446EDB761B3D4D2BA506FE7
SHA-256:	CE337EC7DDA4B3A741363A2673C7EDCE5C736F1660E2AA908131ECFD9DD1343F
SHA-512:	E0EAF480CC88817BCE216614F9813C10D7FC3930A8899F4C7C68B442E90846AABE0B5A536D9B273570671B7E8DDE614B347891839BD6699EDA355EC8B5FB1852
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/ekr/snippet.js?key=web_widget/signaturit.zendesk.com
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	992059
Entropy (8bit):	5.51512413886698
Encrypted:	false
SSDEEP:	6144:+MjOm+cvh9e8/4qAhVStRiX0xpVCrg+6GbC2BDtNMGDGWdwD6TwFfy9MOQaTgU5G:7VUktyeG4be1chePwAG3bmFy+fo
MD5:	3784CF5E1DDD3A68E335F3BB4A5E2FCD
SHA1:	617BEBEE8C2ACFFF41763B25AA8E2B65BDEBC1D3
SHA-256:	7F4AC95D1AB40C0D78D98ACF1DA862B901CE896B43F738C7B1731C986A612BF4
SHA-512:	A53D86A35C099EC66735015D479ABA8865D1AB318AF49E88636CF608CEE12677781EE38CCD09CC890F70EDEEABA545591377D7318225196CD9A20DAD3FE0E3DA
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={20916:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(15826);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(this,arguments)}const i=e=>{let{title:t,titleId:n,...i}=e;return o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))}},18266:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.264460876028362
Encrypted:	false
SSDEEP:	3:YRKOAzXUJIR+bY:YY4GRv
MD5:	3E0822EF75A4F8DF3D220A6DF0776F8F
SHA1:	B3173C2F3B540AED3F8EDBC5DBB15622B3946788
SHA-256:	5AA0890A85FF58161DB3C204EE276C61B59376F05AE8FCE7376A6C00BB090591
SHA-512:	EF1153EF38801E528E64C83CDD0BC4129E2EFBE0A6AA1425011521870607DA17B181EF4BA42C26AED5A39AC82D566BC277B2C9B525F95A0C4E5E9886AA3FAD93
Malicious:	false
Reputation:	low
Preview:	{"token":"445234c2-cce0-4260-8a15-d898be5d249d"}

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9545
Entropy (8bit):	3.896119391230306
Encrypted:	false
SSDEEP:	192:UUKoi729n8pZirK4+87kj20s6/FMGlvPIYoPeOPiNWNhJ8adL:Udoi65A4+1jPjIYoPrK4yadL
MD5:	EE0B0664D065BABEB90DDFC92FB1C0A0
SHA1:	B853982C4130E24C6FEC79F5B9A1F2910B868C9A
SHA-256:	8A13CE62DEE9151D9EE8AA16F0B6E8564F232A736E3B10AE6C968F6622498FAF
SHA-512:	2BA5C1AD37FDE5A93CD8693FD3C9ABA0E10486395E0AFB75FFC304BC14B0244D7480A9E9DC3D0B8B49300ADC1D47F98ABFA8437727E13B28A3258897480EF5B6
Malicious:	false
Reputation:	low
URL:	https://diysyudrbtisp.cloudfront.net/new._.blue.svg
Preview:	<svg width="145" height="48" viewBox="0 0 145 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_3047_8093)">.<path d="M132.681 34.9432C132.661 34.8807 132.661 34.9223 132.681 34.9432V34.9432Z" fill="#0F3E4D"/>.<path d="M17.168 29.8218L17.2305 29.9052C17.2096 29.8427 17.1888 29.801 17.168 29.8218Z" fill="#0F3E4D"/>.<path d="M32.1635 15.3873C33.0589 15.3664 34.4958 13.9504 33.1213 13.4922C32.3925 13.1174 31.0389 13.284 30.56 13.8046C30.2476 14.2627 30.435 14.7418 30.7682 15.1582C30.7682 15.1582 30.8932 15.4081 32.1635 15.3873Z" fill="#0F3E4D"/>.<path d="M143.947 11.9108C141.906 10.7863 139.261 10.4323 135.72 10.6197C135.679 10.6197 135.617 10.6406 135.576 10.6406C132.931 10.7863 129.786 11.2444 126.017 11.9317C125.913 11.9525 125.809 11.9525 125.725 11.9733C126.266 10.7446 127.537 7.62101 128.641 4.99715C129.349 3.37285 127.787 3.68521 127.141 4.76808C125.538 7.62101 125.267 8.74552 123.664 12.2648C122.977 12.3689 121.602 12.5355 121.06 12.7438C120.79 12.8479 1

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1665
Entropy (8bit):	4.664826082790288
Encrypted:	false
SSDEEP:	48:cD/OtbOlHaiYsLfQGcFgw4EGHOOz+efWmhu:I2tbOl6sLI5gWGHOOJbA
MD5:	8EB128A46D995A3F29C68D643DDD8F1B
SHA1:	08C7CBDBC6192E364516CED85D512BF4ED082953
SHA-256:	76320794590BC951A8170455B772202291501ABD7509AD3385610D4FCEA655E3
SHA-512:	5F1047A19E78F6A9DAAA1E570D790CD192F07C58AD2C1CDDB2001CDFB187B3AD402C59ECFBC318D5701BA01E345513C3D119CB054BB24C0D701575F987155109
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/financial-services.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7947" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7947)">. <path d="M16 11C16.2833 11 16.5208 10.9042 16.7125 10.7125C16.9042 10.5208 17 10.2833 17 10C17 9.71667 16.9042 9.47917 16.7125 9.2875C16.5208 9.09583 16.2833 9 16 9C15.7167 9 15.4792 9.09583 15.2875 9.2875C15.0958 9.47917 15 9.71667 15 10C15 10.2833 15.0958 10.5208 15.2875 10.7125C15.4792 10.9042 15.7167 11 16 11ZM8 9H13V7H8V9ZM4.5 21C3.93333 19.1 3.375 17.2042 2.825 15.3125C2.275 13.4208 2 11.4833 2 9.5C2 7.96667 2.53333 6.66667 3.6 5.6C4.66667 4.53333 5.96667 4 7.5 4H12.5C12.9833 3.36667 13.5708 2.875 14.2625 2.525C14.9542 2.175 15.7 2 16.5 2C16.9167 2 17.2708 2.14583 17.5625 2.4375C17.8542 2.72917 18 3.08333 18 3.5C18 3.6 17.9875 3.7

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	901
Entropy (8bit):	4.941519703140459
Encrypted:	false
SSDEEP:	24:Y646VoKo+x+Aco/mRTYRXZoMCenucc9H5vKo8klQet:YFKuemxYtZ0H0wGet
MD5:	18CE092EDDCD9FB6C77311164FA7F15D
SHA1:	B2761338D9F96E0F32B4F39540D32CE4A1D59BF9
SHA-256:	F0210DFEB89FD8A9D9300B1CD68B4B85AD8385A3A87AD24C181AB840C076D5B0
SHA-512:	69223C9F522A08C4B4BEF9913DEFCA8280BB7FEB0F36E233CEEF5B724D8F80401C3C58C50FCA832A073D055C89493A44CB04462CBCC68515EE2EC7658EAE9B42
Malicious:	false
Reputation:	low
Preview:	{"brand":"Signaturit","brandCount":1,"hostMapping":"help.signaturit.com","color":"#2c352b","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#2c352b","customFields":{"ids":["1900000545333","1900000545513"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true,"nameFieldRequired":true}},"chat":{"embed":"chat","props":{"color":"#2c352b","zopimId":"pwcI91sGFmxEtTCDa1631bEHfZpzs4fG","badge":{"color":"#2c352b","enabled":true,"imagePath":"","layout":"image_left","text":"Chat with us"},"forms":{"offlineEnabled":true,"preChatEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color":"#2c352b"}}},"features":{"prechatFormVisibleDepartments":true,"fastLoad":true,"answerBotCbpUsage":true}}

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6542
Entropy (8bit):	5.39363256193057
Encrypted:	false
SSDEEP:	192:pNa5N4NXNO3qNWNIXNENFQNDN8NW3XNtNGqN+rNU7N8NHNs3sNWNiNNJ:vafWdMQcMCFe5KkdjjmUBKtaacMJ
MD5:	249EC1D203F16C8005C823C5429D6D63
SHA1:	8B0093EA71543D5FEB6F3952A6DE52F3FE94B0F0
SHA-256:	3190E9796E3E6B7BDF421C3864F69FCDCF147379B0E3C16C73488E041F6DE805
SHA-512:	D73E33818E1CB8A5B364BBAD1D5B465BE9E8FAF3444BB5625A5FBBBC2586FECCF869685D85481AEF0630B7137B942A5347FEC3BC625210BED2B3F08731480FBA
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.869508021388662
Encrypted:	false
SSDEEP:	3:j8HNvBDvHMDgdSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8uDgdznYJOWg/w/o2kR9aXL
MD5:	A847C8B125C043AFC3C60E744E1BABCC
SHA1:	F352B7BD8B744CE6213FEDDDB0968776B6DAB1C5
SHA-256:	78AABB4B261246463AD731112273319062AB0287BDDF238AA8ED5F4916F2D94D
SHA-512:	7AEB27A5196DC5B6022D854D14B112CBA640F9D5D6DE24838AFC648E3F78A70EDD10F616A2FD07D5758801A4B1E0EDF8904CD2859547345B64A7C0866E703F04
Malicious:	false
Reputation:	low
Preview:	97:0{"sid":"eWeEpe9fpKZMdZliAAtt","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	downloaded
Size (bytes):	183251
Entropy (8bit):	5.2684807724214595
Encrypted:	false
SSDEEP:	1536:dC1JNgt4qoIWe4N5NoclvOV23lOWNnvGiKSVySq12u6We/ZfB/19dX:dC1JNgtGIWeO5NtWVH2nvGrN2uOZ5zt
MD5:	BEE109817BC465795A512E104E4319D5
SHA1:	0A03857F5EBF7968E912680C5AAB50ED10AA4F53
SHA-256:	20793B6C6ECFEDC79EBBB79343333131E1DC059F7366D56902F1D6B9730DC1E1
SHA-512:	0229D4CD08CA17722CB8AB7D0943AAEC94EDA942EF0AFCED2F0D89F46381499EBC9A7FAA04E27B97C55DC60EF8B3B66785200123BFA1A4A0270EB86DC4DBE34B
Malicious:	false
Reputation:	low
URL:	https://assets.ubembed.com/universalscript/releases/v0.181.0/bundle.js
Preview:	!function(){var e={935:function(e,t,r){"use strict";var n=this&&this.__createBinding\|\|(Object.create?function(e,t,r,n){void 0===n&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);i&&!("get"in i?!t.__esModule:i.writable\|\|i.configurable)\|\|(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__exportStar\|\|function(e,t){for(var r in e)"default"===r\|\|Object.prototype.hasOwnProperty.call(t,r)\|\|n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),t.upgradeActivationRule=t.isUbCode=t.ACTIVATION_RULE_VERSION=void 0,i(r(27),t);var o=r(38);Object.defineProperty(t,"ACTIVATION_RULE_VERSION",{enumerable:!0,get:function(){return o.ACTIVATION_RULE_VERSION}}),Object.defineProperty(t,"isUbCode",{enumerable:!0,get:function(){return o.isUbCode}}),Object.defineProperty(t,"upgradeActivationRule",{enumerable:!0,get:function(){return o.upgradeActivationRule}})},27:function(e,t){"use strict";Object.defineProperty(t,"__

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3594), with no line terminators
Category:	downloaded
Size (bytes):	3594
Entropy (8bit):	5.194843444325048
Encrypted:	false
SSDEEP:	96:wrtnIBIwWpou6Tcf6695+Wpk6jfALbAwrH:w5nIBIqcy0M6jmcwrH
MD5:	35166401913BC433E702156B229ABB6D
SHA1:	45A86719273893BDAE5649D711C1D0BE844C539A
SHA-256:	7F919BB8DB7A2FE7126380D85836C540C3FC883CC4DFF3F44AE1ECC697027A6C
SHA-512:	4474D15E615B579B01AF6EB736381777360A1AC74C1A98F49ECAC4AA39BFEE53F64B5BCD657C5945865213EF6E5EAF4145BD0603818022DDD5C830E3E2EE3B71
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js
Preview:	(()=>{var t={78:(t,e,r)=>{var n=r(427);t.exports=function(t,e){if(!t)throw new Error("Missing elm");var r={};return(e\|\|[]).forEach((function(e){var o="data-"+n(e),i=t.getAttribute(o);/^(true\|false)$/.test(i)&&(i="true"===i),/^\d+$/.test(i)&&(i=parseInt(i,10)),null!==i&&(r[e]=i)})),r}},427:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"-".concat(t.toLowerCase())}))}},462:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"_".concat(t.toLowerCase())}))}},54:(t,e,r)=>{function n(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function o(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?n(Object(r),!0).forEach((function(e){i(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):n(Obje

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1008
Entropy (8bit):	5.032820986088475
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fgj6EtHxl+4iEKbsAykmw3ZLdZRE3gSHfB2sUHLwvA2sUHLMu:cD/OtbAlHaiYsAyCjRE3gS/wsu0vlsuH
MD5:	FB0F9CB0B2A697D837F240C98FC253AC
SHA1:	F522DF10A8BFE5F5C63645C57C18027BD1E974EC
SHA-256:	BB7ECC5682739E8986540F3E5106B86C084C213FF8AE943226C0E6695CBB5B76
SHA-512:	6DE38FDDC3C3DE802AA230C9528102BE25A4F24E80DA07D6F671F81446D3078130D3AA2E1EA47F30F63FB980E2DABB8CD4C6ADDC99DB978C381A5B2E53210890
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/external-registration-authority.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8676" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8676)">. <path d="M4 21C3.45 21 2.97917 20.8042 2.5875 20.4125C2.19583 20.0208 2 19.55 2 19V5C2 4.45 2.19583 3.97917 2.5875 3.5875C2.97917 3.19583 3.45 3 4 3H20C20.55 3 21.0208 3.19583 21.4125 3.5875C21.8042 3.97917 22 4.45 22 5V19C22 19.55 21.8042 20.0208 21.4125 20.4125C21.0208 20.8042 20.55 21 20 21H4ZM4 19H20V5H4V19ZM5 17H10V15H5V17ZM14.55 15L19.5 10.05L18.075 8.625L14.55 12.175L13.125 10.75L11.725 12.175L14.55 15ZM5 13H10V11H5V13ZM5 9H10V7H5V9Z" fill="#030352"></path>. <path d="M5 17H10V15H5V17ZM14.55 15L19.5 10.05L18.075 8.625L14.55 12.175L13.125 10.75L11.725 12.175L14.55 15ZM5 13H10V11H5V13ZM5 9H10V7H5V9Z" fill="#0A0AF4"></path>. </g>

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20568, version 1.0
Category:	downloaded
Size (bytes):	20568
Entropy (8bit):	7.9894161086742495
Encrypted:	false
SSDEEP:	384:M/LHcF3wHM1fsYXbJFjYK5lBHf6UKp0pa9eN983N4D1bDYJ2KgAKgK:Mo3KM5Fx5lBHf6UKWpYeX8u54w
MD5:	BBC6DD56458E60C373833E47D14DECE2
SHA1:	4C2BCF8EDDB1A5146AA34DCC447DE3081B243B00
SHA-256:	EEDC77E3A915932DC722D79F5138E352D4AC2B9BF08D7D0A309DF9BBE4D5E671
SHA-512:	481DDF20D12B7C4169349093367E00AEE63A4309BD03FF9109E288FED60EA63DC368E66955F60B42B73C01C57AB900D43352B9B54A9925EB9FDCB54451904262
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/fonts/Expose-Bold.woff2
Preview:	wOF2......PX..........O.........................?FFTM.........x.`..&.....d..y..0..6.$..\. ..X......pg/.p;...........v".....@.q.x..f....T.0....~.!.-.E.B.a.FkU.x...y.M...K.;t.c....f.~j.. .<.......Q4I..}.b....a.?<...,..O....M.....L.p2.1.V....;....F....,H..{.....\.T........q..5.^.x~.f.}$.pTT.8...1J.MO.0.........Ax...s..@.N$!."1b.H.Z3F...#.!..-jV.T.1fQ-.ZU...K.]:.....\|...s..S.L@IFiB.'.7..Tw..\....Tn&gH.k..q..82.B..x.....T....) ...=.,.~..K.R.d+\.$.1e.J..Y.!t.0....Y.._x.J.s.2_.....X-R.....2g...U.1.R....J0..DS..W..+Y..\|....-..$....z.^.J__W.!..z.5...............'......:...a.....r..^.......g`h..... .H..h.p..%........^nw.c!.).J}U`CPPg.g.8hZ..pM{.l..L5...a..9.)+,%9....9.z?.%....vgW..A....."..PT.3;3G$...B..r......C.c..v.)\4..........ymc.G.m[.....N.y`Y.Q<...f.l.8V.'..a.H3.r..eh.e..j..8U.d.A!.. $A.......Y...WagL..-..... ..~...n... .n...XO..:9`55a...\...k..=MXs)...+qX...fCg..G.e)yH.p..........y1.r.. ...$.....].V.:.....G....!..2..a..j'..o...y.K.."Q.....

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	852
Entropy (8bit):	5.049815526305825
Encrypted:	false
SSDEEP:	24:2d6TU/dqY4qdUI9+ap7lLp7lWggAC/p7lpEK9OA:cD/h4qD++vHiI9A
MD5:	1BEE203D3D1011492D9B0FB3ADAA1E68
SHA1:	6FE221F5C4B396248B15974B6C07D1469F0F420A
SHA-256:	91380F6203DFB2BEDB52F91C9AF629503A76C9A056EC1569E672813F2B8FA07F
SHA-512:	0C6F23F8E77165AA728CAF09B9EDEC58C450E3243FCDCECA88FCC7B8310B6543D15544C7B5587867C70BD9E3E3C3C8078516FD4A707879A04C0E4670F5BF8BA2
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/linkedin.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_1548_2723)">. <path d="M23.994 24L24 23.999V15.197C24 10.891 23.073 7.57397 18.039 7.57397C15.619 7.57397 13.995 8.90198 13.332 10.161H13.262V7.97597H8.48901V23.999H13.459V16.065C13.459 13.976 13.855 11.956 16.442 11.956C18.991 11.956 19.029 14.34 19.029 16.199V24H23.994Z" fill="#CECEF5"></path>. <path d="M0.395996 7.97705H5.372V24H0.395996V7.97705Z" fill="#CECEF5"></path>. <path d="M2.882 0C1.291 0 0 1.291 0 2.882C0 4.473 1.291 5.791 2.882 5.791C4.473 5.791 5.764 4.473 5.764 2.882C5.763 1.291 4.472 0 2.882 0Z" fill="#CECEF5"></path>. </g>. <defs>. <clipPath id="clip0_1548_2723">. <rect width="24" height="24" fill="white"></rect>. </clipPath>. </defs>.</svg>.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.940132809541991
Encrypted:	false
SSDEEP:	3:j8HNvKTR7kEUSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8KTR5UznYJOWg/w/o2kR9aXL
MD5:	941F82A9487540C6F5FEFA3733F92BF6
SHA1:	88D16882E33DE2EFCA98768C85486676C3A7C724
SHA-256:	5EE5DC5B38E9D6D9F21CAF9F79511C172205DA215E9EAAAEE4D328D249CA4791
SHA-512:	586DFFDD5247C28C30FB0AC4E7498D0DCC83C9C33852526A940A5456F892D7DB9F53B1BCB6A5B6EE7C196EE575EB57CF248D3924FF5B66B1BD26AB052D576BDA
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG688e
Preview:	97:0{"sid":"uxWQgoxnncAT64DmAA1T","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:GWn:GWn
MD5:	5F649E24AFCD658CCF64513A5CE71950
SHA1:	A28B1E3EFFEABE43F91BB03F435C1276B1B08ECE
SHA-256:	85F2EF987B76F4C3FC081ACEF84E0A730F5DF8A2488A5BB7DDAE4F7DEE721ED8
SHA-512:	8FA1F315267F724BA5C8817B7D518423A299CC60A168BC62A545732814CE4138B2AE8D3E8C6AEA8B5C0FDB69EEF339B36672691B7791EE037A5F188ECB6AD24B
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG5vw8&sid=dMLwofBs2a63vpmXAAkl
Preview:	1:3

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3604
Entropy (8bit):	4.147642207419846
Encrypted:	false
SSDEEP:	96:I2tbQl6shCwfQD4b6NzR6HSMD4b6NzR6H5:I2tbQ0sUwfQnzRgSMnzRg5
MD5:	5913916DC944B80E9D44EDA59F45575A
SHA1:	3B912F9EF56FE681E80B8197162E3DE523ADE826
SHA-256:	9FE36A1361C6D038BA8B674CFD3A3B4150C27685B3B3612824F956D6CE3F90BE
SHA-512:	7ECF797C921BB9C1B2CCC7D146AF7508F7E6168456F0B5C21A5DFA8EDE78DEB2ABE394FC7ABD79C8C60A57B53195D52B8F05D30DBB2936513B2F38D4869EE5FF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7211" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7211)">. <path d="M4 21V16.75L17.175 3.6C17.375 3.4 17.6 3.25 17.85 3.15C18.1 3.05 18.35 3 18.6 3C18.8667 3 19.1208 3.05 19.3625 3.15C19.6042 3.25 19.8167 3.4 20 3.6L21.4 5C21.6 5.18333 21.75 5.39583 21.85 5.6375C21.95 5.87917 22 6.13333 22 6.4C22 6.65 21.95 6.9 21.85 7.15C21.75 7.4 21.6 7.625 21.4 7.825L8.25 21H4ZM6 19H7.4L17.225 9.2L16.525 8.475L15.8 7.775L6 17.6V19ZM16.525 8.475L15.8 7.775L17.225 9.2L16.525 8.475ZM14 21C15.2333 21 16.375 20.6917 17.425 20.075C18.475 19.4583 19 18.6 19 17.5C19 16.9 18.8417 16.3833 18.525 15.95C18.2083 15.5167 17.7833 15.1417 17.25 14.825L15.775 16.3C16.1583 16.4667 16.4583 16.65 16.675 16.85C16.8917 17.05 17 1

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	129
Entropy (8bit):	4.741534528953829
Encrypted:	false
SSDEEP:	3:zMS1Rc/P0+D4Qy88HpRBEBc2LGRFlekK8MxPtxNeGffDqiML4QYZf:gMKF4Q18HpULeet7eGXuvL4NZf
MD5:	5EF26B5E47E6951F43ECF2B1FC645222
SHA1:	081AFB52577F6F3BB044FDEA6D34A632C3CCE7E8
SHA-256:	50679E0E3933C945348A2DB0CC128BB14B57A60A74FABF8CAE13ACC14EFBB2E1
SHA-512:	A0876397327A5C6B4BCA75605FA97ED7243AD78D9FD285F8A55AD2525E1070FDB197D1AE0687B3FB603946BF6DFB567EB3BE3A636FB9FCA6E36D03055CE7794C
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1
Preview:	"function"==typeof jQuery&&jQuery(document).ready(function(a){a("body").on("post-load",function(){window.a2a&&a2a.init_all()})});

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1916
Entropy (8bit):	4.6560858411318815
Encrypted:	false
SSDEEP:	48:cv+5lHaz/FJ4qvcgmcRHX+ORAGORPj7y/FU1A:p5li/Ldv5V1gPy/F
MD5:	29D70E721AA2A0100E372468112984CD
SHA1:	56314E15BF958EE9D13190690D43109749BD2B60
SHA-256:	D8BDC4637D4132B2C65070DDDD00B7D5D563BBE5192863828418B38FA8F7D553
SHA-512:	90A1507661DC2D5B0A3F416EA228B35F11115A3A9B35B64145EF24355BCF16825C4DB364D6B7FAD506A6DB4B2597254C5D034AB30224DC5584C91D04DB8B2DF5
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/12/qualified-certificates-seals-1_icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="96" height="96" viewBox="0 0 96 96" fill="none">. <g clip-path="url(#clip0_2447_1483)">. <mask id="mask0_2447_1483" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="96" height="96">. <path d="M96 0H0V96H96V0Z" fill="#D9D9D9"></path>. </mask>. <g mask="url(#mask0_2447_1483)">. <path d="M48 52C44.6668 52 41.8332 50.8332 39.5 48.5C37.1667 46.1668 36 43.3332 36 40C36 36.6667 37.1667 33.8333 39.5 31.5C41.8332 29.1667 44.6668 28 48 28C51.3332 28 54.1668 29.1667 56.5 31.5C58.8332 33.8333 60 36.6667 60 40C60 43.3332 58.8332 46.1668 56.5 48.5C54.1668 50.8332 51.3332 52 48 52ZM24 92V61.1C21.4667 58.3 19.5 55.1 18.1 51.5C16.7 47.9 16 44.0668 16 40C16 31.0667 19.1 23.5 25.3 17.3C31.5 11.1 39.0667 8 48 8C56.9332 8 64.5 11.1 70.7 17.3C76.9 23.5 80 31.0667 80 40C80 44.0668 79.3 47.9 77.9 51.5C76.5 55.1 74.5332 58.3 72 61.1V92L48 84L24 92ZM48 64C54.6668 64 60.3332 61.6668 65 5

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	5.025274665044621
Encrypted:	false
SSDEEP:	3:j8HNv/DGw3fKhHJQfSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8bG2KfQfznYJOWg/w/o2kR9aXL
MD5:	891FDDBAF7420D3F930E4165AD4973A7
SHA1:	528932C1A3DB7467FF5ED7838629702D9BC422A4
SHA-256:	40A81720E272E48D7C7712393D6FBCBF91BF76C8B5D78ECD3E03C742E2A88D4A
SHA-512:	E6A46F2925B8E524F3EE1421729CEA9F0754B318E92129E345F9C4A295EEBE30652B15F40908CE881FF0C2E60FAD4A5EB885521D02DB7630AE392CAB80C6AF59
Malicious:	false
Reputation:	low
Preview:	97:0{"sid":"oA3aBcYwEDRbz1kEAAlD","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	4.828102040031845
Encrypted:	false
SSDEEP:	6:yLzCRo6lpahRszqvyRURst0uGmp1tRivDMORiAds7bRiXvhen:uSoUZNeRUHXRivfRiAd2Rig
MD5:	C6A55456AF4776C733018888483ABA22
SHA1:	297B53F8538BA3B59D2028F16DE4E14EC90337CE
SHA-256:	20BE9B3C63A01D921697A0EF1C1596F647678498EEFE6DC508E2363BE25277F8
SHA-512:	DBAF5D9A1B0F5D4195D3B9C62650AF622D66F1B68BFEC20CE79E84185C558F91AEEB6718452E1196BF783BB3CA7A0574223726FC4D80076EA9AD115F1FDD1EAB
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.10
Preview:	document.addEventListener('DOMContentLoaded', function() {..for(var cookieName in wpml_cookies) {...var cookieData = wpml_cookies[cookieName];...document.cookie = cookieName + '=' + cookieData.value + ';expires=' + cookieData.expires + '; path=' + cookieData.path;..}.});

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2683), with no line terminators
Category:	downloaded
Size (bytes):	2683
Entropy (8bit):	5.863126347278957
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08wTO0QkshG9sKG3GH6:wsbSUtJfxrqLWWWdV6j1MTdMZ
MD5:	70137484A065660D51C659AD6AEFCC84
SHA1:	547DBD162CAAC6F95D47C6C8391E22E32C155E46
SHA-256:	B50A6D83332A8C705F98503ABA8EE3B6ED14A4C86337980D17127BF79CF377EB
SHA-512:	86796716D8B37445197924A6FBC40A75F3F2EE51646B9529C45642673D2BAF4C050FDDB3F3E1A62283666C93EE51B1A174547ACBDC78E0768627ECD1810D5ABE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984957836/?random=1713961965805&cv=11&fst=1713961965805&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	1009
Entropy (8bit):	5.218358175423394
Encrypted:	false
SSDEEP:	12:hY291I73W29qihtHdhk80O5UcqBrp/DTES0RX7c+a4xiBFBBxmyPxO109lYl+VQZ:hY29yRVJ04U1BrdsXwfllZKGlYQVQaU
MD5:	FA7E6640EBE32E632E7D04C9B7F917C1
SHA1:	05FC3ABDEDF8E1EB3BC0002554AC2CA40ACAAFAE
SHA-256:	28FBAA349DDC0CC381802CAF58BDEBDFEA299E4169E8A5921B12587B059CBA26
SHA-512:	A0E9527242DE899A71B4D599BA44622DF69713E49609E51835CF340ED81AA3315BDB3A2D1432E400763EEA6CF69C6EF2ED1239AC2E4BD8AB9A805C568DAAE22B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8" />. <meta name="robots" content="noindex,nofollow,noarchive" />. <title>An Error Occurred: Method Not Allowed</title>. <link rel="icon" href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 128 128%22><text y=%221.2em%22 font-size=%2296%22>.</text></svg>">. <style>body { background-color: #fff; color: #222; font: 16px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; margin: 0; }..container { margin: 30px; max-width: 600px; }.h1 { color: #dc3545; font-size: 24px; }.h2 { font-size: 18px; }</style>.</head>.<body>.<div class="container">. <h1>Oops! An Error Occurred</h1>. <h2>The server returned a "405 Method Not Allowed".</h2>.. <p>. Something is broken. Please let us know what you were doing when this error occurred.. We will fix it as soon as possible. Sorry for any inconvenience caused.. </p>.</div>.</body

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:04:28 16:24:41], baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	43069
Entropy (8bit):	7.429056455699336
Encrypted:	false
SSDEEP:	768:vo0bNApWo0bNdnMIFO3q7nQJ/T0m2BVpqdaMHw:voAhoA7MiO3q7CTKmlHw
MD5:	A2D140E69BB89F074A957794CF3978C8
SHA1:	AAF0BFD0E0DC6BCD40849ADC95D1517096CBEEAA
SHA-256:	01859D370F300E99A44DCA9DA334B0D33EF6F5ECAEC7783B21A22455D807D879
SHA-512:	87B6422144D262754AEFDF0EC8FAB3F09D8ACDB3AB500E32955273E11DFEA0175313E17E929C7D3438AAEA4288853F94C33F57B0F28B1E268E5E77EE3F883257
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 21.2 (Windows).2022:04:28 16:24:41........................................................................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................`.`.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..I2...)..W....$..%2...OS.....c.&..G..O{.w........ZIj.Qs..\.....+.V.R..].7.......}-...b...-.eVOX...]..x..[k;.S...^.?..%i.....`X.\|.....i...#....mk...7

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65392), with no line terminators
Category:	downloaded
Size (bytes):	70460
Entropy (8bit):	5.379168529781915
Encrypted:	false
SSDEEP:	768:4WDlzIsI97B4dcI+ZhMMuxOC9eXRsZvPVJcrrLcO26RjTNtsJy5hSDVsZO7S/Qhp:47jisDp4aR6fcLzleJGhC7B8u4OmStl
MD5:	020909A609CF986B4A8A88CFB577A8DB
SHA1:	B433B99760F44C8A494A5C13A07AA1A9933D0179
SHA-256:	5C76DD89A767AFD512CE6C6370424F39A632EBB736C16AC37952FBFD97575448
SHA-512:	7A4304CE2CA889479B5E9D7D7368EAF2246018663ABDA95B54A72558EED93033F1F814B16AE47A91A2278844851A7FE292ED6E9FF55989E61F7060E24AB3C418
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hscollectedforms.net/collectedforms.js
Preview:	!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},f=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},d=function(t){try{return!!t()}catch(t){return!0}},h=!d((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Math==Math?window:"object"==typeof self&&self&&self.Math==Math?self

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	5.2368725597776615
Encrypted:	false
SSDEEP:	12:qTjxS1BKFaGCGT9MTkKqqzi8EmpGe3whGe3OgyGhlzUNBfgxy02sUf0OPv4S:0jE+FaGCTTqq2Vmce3wUe3gBkFUFXf
MD5:	41B7ED0CBE240173EEA85148FCBA633E
SHA1:	39ACD5FE099974486A1C9BA11BA0FE7BE6BC97CA
SHA-256:	274D4116239B63097BB7C16E56E27CBB5A77BE20392FB8E2317C0A0235185CAD
SHA-512:	1EE1D21B138A9F55F823B93D809B3BC58453DDFC3B3EE4D00A1010BBD4EC296546277C6777819CFB744C393BA93FE7578B60CCF0259FD17901F4542714D6C06F
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/sm.25.html
Preview:	<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>.!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&&(-1==(t=o.indexOf(";",n=n+t.length+1))&&(t=o.length),n=decodeURIComponent(o.substring(n,t)),a[e]=n.split(","))}),n={a2a:!0,h1:(t=!1,"function"==typeof performance.getEntriesByType&&(n=(n=performance.getEntriesByType("navigation")[0])&&n.nextHopProtocol?n.nextHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	206903
Entropy (8bit):	5.378855086321751
Encrypted:	false
SSDEEP:	1536:AI33Y96b+S+n8pCA+Qgoi1j6JK0A0Ws6+pY8laT+a4kzFPbe4uSw03RSupFMHdFw:26KSSVQWYBcFMjclJK0p24x7lRbg2J
MD5:	B8284A4B45E40625C2B90A641EBE4A68
SHA1:	8285EA200E6679B92B07818033EE54199CCC13D5
SHA-256:	965CBA95C928E95003CE37271090406EAA7D5C2D955230A785B2B3BE8A9A17F5
SHA-512:	BA9BEFB2DCCDEF7FC088C927DD8C123BFA70989618552B644D229420B3F97F665FCBC16B0DEC39E2A1191A99ACF0C265BA9CA7E83AB2B22C128BD5BE4FE34E7B
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-7bc1c0f.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[8876],{65532:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o])return t[o].exports;var n=t[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,o){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(r.r(o),Object.defineProperty(o,"default",{enume

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63496
Entropy (8bit):	4.635241253261782
Encrypted:	false
SSDEEP:	1536:EWmFauiT+OD5y25fGDNbjxxrBLB0lUHRAGv5y6CMAbWnWooHC5hL1wWGUMVWcc1S:c8MPRprgOCPag
MD5:	4F45C8C515F61EB6C2F38811FF340D9F
SHA1:	3EEFAB29A6D250206BA03F790A22A72419B950A4
SHA-256:	346ADD0EDCBFC84706F6552725AFE246EA5BE157978958C3E29A0E3192CC38C7
SHA-512:	013F952F69A15BD61F138553067E9EB52C0374C5903D25281811832D8BABF30C113DF8E1E5075342D27FC194AFB1F2D95D66475DE37666C8027D0B43248DF34D
Malicious:	false
Reputation:	low
Preview:	{. "acceptButtonKey": null,. "app": {. "404": {. "button": "Go back to the main page",. "message": "Ask the sender to resend it to you so that you can access it correctly.",. "subtitle": "404",. "title": "We're having trouble showing you this document for some unknown reason.". },. "authorization_error": {. "button": "Activate",. "description": "You need to activate the 2-step authentication in order to sign with your Qualified Signature certificate.\nClick the button below to activate it and then <strong>refresh this screen</strong> when you're done.",. "header": "2-step authentication disabled",. "more_information": "More info on <a href=\"https://help.signaturit.com/hc/en-us/articles/360000275677-Two-factor-verification\" target=\"_blank\">2-step authentication</a>". },. "authorization_service": {. "survey_url": "https://signaturitteam.typef

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16988, version 1.0
Category:	downloaded
Size (bytes):	16988
Entropy (8bit):	7.984919953708955
Encrypted:	false
SSDEEP:	384:M1BbiwaDW3Dr0xZaxTKzYuz9Pgt5MbB30Qs4E3Rwfaik:OB70WfKnzdw5Mb9vEuyik
MD5:	B98470926F0C8CDAB8E343465C468AEA
SHA1:	2ABE586F7EED6A6B806F57446809B5C39A33103F
SHA-256:	154A7460D4768B559450CCAD9B726D9485F27210AABF9EA4957D1638D483F648
SHA-512:	C651A12048705EF762BA7EFD412E6809116377D395C67730EAC090EA88EBC63100811CC5B886CA03BE1992244EC475A467E28F3DBB5045C14A8754D762110DE0
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/fonts/N27-Medium.woff2
Preview:	wOF2......B\.......D..A.........................?FFTM..6..2..D.`..^.....P..%..$..6.$..D. .....k.n.7d...:....;.Q..0.N#.... ..D.....T..wd...+..\..i!h=...",..a.(c...u.H..:.....'..sLY.Z.n...T....8. ......duq.Y...Y".&c...O...[z._.uKG.(..!....['.y._.....~.Kw.e.........?..{D....]b.BH".....Hh.....(./...D...f..[\|.Q.K......Ul.u.+.Z......:....N.f.X.Z..HB.....3J.E.,A.....k....u5V.9k..D....S\..Leh.......33W..h#i..\I.W7k/t.V..(.R....G....H.BZ.T:....V....?.......lf.o...v.....(..(..(..(z.EQ.EQ.EQ4...g[S.....Sh.eQ.'B.zmt3.T.......<.E..y!.A:az..178q..(..h..)....EQ.EQ..EQ..F.....(..h...]....{P.E.u.BN.......i.p.RJ).\....t.f.b...+.[.....8....w.).w.a.....e..J.-....X(.M._..u...gJ....%e..X......t.{DC.lR..B4k...&'C.<...).`..y..+..34.......RhNh...{J..*...]LKPP...J...c...........Q.atQ..W..[..-.+u.$..3.+...........fA..&.Z..pt......%.e.F...../.......F^.T..l&?...........&....a..h..f..`...H.s..IbU..u.+.........alz...E1.`.,.?...?._-.Z.. .J.d...w....n.............B....

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1562
Entropy (8bit):	7.362779065125132
Encrypted:	false
SSDEEP:	48:hdYDb898rqpwW0AzBtevPyZZvTogOiEt9+7D4FNAn0lB:E898rNBAavPyLMRM7kH
MD5:	98D9AD910C2B17DF06FD37C2489C2C8D
SHA1:	33763F91EA1FAD70B2AB3C77D09DDA17EBF935BE
SHA-256:	95A85E5A95DD5E62B80E08FE3884D7661D028DB6B078EFC4EBC97B60DBF607EC
SHA-512:	F96C568A02250AB2DE844092FE7AB1171042EBB3AB8DED1DFC9E44E1ADCA7D8034489B66A675DA5CF4210F06817BBA90C7198EFC568D2C8D83A9D4EE2DBA2109
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTE.q..r..q..q..q..q..q..q..q..q..q..r..q..q..q..q..q..q..q..q..r..q..q..q..q..q..q..o..p..s..w..t..u.L...........R...p..p.L.................;...s.n...........x...........o.r...........i..${..m.C.................=...o. x.......\|...s.......^.....;..+........v...n..r.)~.....%\|..q.~.............Z...o..w.f..............!y.N..q.........r.H..Y...t.>...........S..@........E...t........Q..(~.....................u............x.J..............g...v.............a..).."z..v.....\.....tRNS..o...j....pa....^.}.....']....bKGD.......pHYs...H...H.F.k>....IDAT8.c``dbf...XX......9$q.N.n..NI<....O./.g`........2.C.......N.2..J..j.8.hhji.......`U``h.clbjfnah.U............4..2j..n...R.^.>.......{.....AX.......aG`.zd.ntL..........OHL.N.L..@5.$.&#3+9B........\|.m..l......-#JJ..+.1..TVU..k.2..0..4.5.CA..Y..S.z.n.....\r[{..6+.u;:....uzz.4.(.k314Cg..)S....M.i.g..5{.4r.CR

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3191
Entropy (8bit):	4.335961963606658
Encrypted:	false
SSDEEP:	96:I2tb4l6sXNls4wiOsuj6NSMosT07qb6NzR6H5:I2tb40sXNKH1sue4d17FzRg5
MD5:	EFE4AD66755152BC6D6024556AAA1BB8
SHA1:	F2914D8BDB15E13897E7A8ABABEE136A85F8109B
SHA-256:	F7FCA217CDA22F64C7892C09333136495B4754476B4535552C00403797F938BF
SHA-512:	4274B0A77AC37223C43C9CE4F692F18AF362E3EDC2F3697F6F25DFB02D8C67C797FFAAAADE0C24F7506CA4EA7ABEF36A0511340BA34148E9BE47D83F391108AB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7219" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7219)">. <path fill-rule="evenodd" clip-rule="evenodd" d="M21.5375 14.4625C20.5625 13.4875 19.3833 13 18 13C16.6167 13 15.4375 13.4875 14.4625 14.4625C13.4875 15.4375 13 16.6167 13 18C13 19.3833 13.4875 20.5625 14.4625 21.5375C15.4375 22.5125 16.6167 23 18 23C19.3833 23 20.5625 22.5125 21.5375 21.5375C22.5125 20.5625 23 19.3833 23 18C23 16.6167 22.5125 15.4375 21.5375 14.4625ZM18 19.6L16.16 21L16.84 18.72L15 17.24H17.28L18 15L18.72 17.24H21L19.16 18.72L19.84 21L18 19.6Z" fill="#0A0AF4"></path>. <path fill-rule="evenodd" clip-rule="evenodd" d="M4 16.75V21H8.25L12.0544 17.1883C12.4142 14.5277 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2508
Entropy (8bit):	4.329420787936661
Encrypted:	false
SSDEEP:	48:cD/OtbvlHaiYsvOOiWiryfQtzRFeae3OOiWiryfQGu:I2tbvl6smOxfIhRFeleOxfIV
MD5:	E0A72D44A0B70BF64646E31409A53C2C
SHA1:	9C1D0DBDBF19B24008B7842AEAC41AC896D1C69A
SHA-256:	2EEE69C85FC0BC9FF896145549D7549D92CDB5806F9B27B1B0A98EA259E59599
SHA-512:	6DAD5248DC70DFC62D927500AF08C0FC7BCF2CDBE52C7D277AC7A8D7CF2E7883A9B0D259272E35A1F53667223860F43A884DCFD5CB91CCBC65AB2134A606C17E
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/certified-SMS.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8668" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8668)">. <path d="M8 11C8.28333 11 8.52083 10.9042 8.7125 10.7125C8.90417 10.5208 9 10.2833 9 10C9 9.71667 8.90417 9.47917 8.7125 9.2875C8.52083 9.09583 8.28333 9 8 9C7.71667 9 7.47917 9.09583 7.2875 9.2875C7.09583 9.47917 7 9.71667 7 10C7 10.2833 7.09583 10.5208 7.2875 10.7125C7.47917 10.9042 7.71667 11 8 11ZM12 11C12.2833 11 12.5208 10.9042 12.7125 10.7125C12.9042 10.5208 13 10.2833 13 10C13 9.71667 12.9042 9.47917 12.7125 9.2875C12.5208 9.09583 12.2833 9 12 9C11.7167 9 11.4792 9.09583 11.2875 9.2875C11.0958 9.47917 11 9.71667 11 10C11 10.2833 11.0958 10.5208 11.2875 10.7125C11.4792 10.9042 11.7167 11 12 11ZM16 11C16.2833 11 16.5208 10.9042 16

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3202
Entropy (8bit):	4.2185363961788855
Encrypted:	false
SSDEEP:	96:I2tbgl6siFEJxtS/5GilekR5xiQbCGGVjCmB3ssfPMyFc1uf3kmlhw:I2tbg0siForSc9cbtmJ9KyCU0D
MD5:	7E250054DAFA2C8A5D370D08DB6C9F2B
SHA1:	FCBA9BC22366E91625C1517D83AB52BC7C84221C
SHA-256:	5F24A4C875D042D87CD3F8AEBC2973358189EE8C3F7245367F2287E7EE8427C3
SHA-512:	307A7D95FD97FCCA10A769E2D94CD810D589072A64E15DF6FE76441CC7D45434C7E7553885269EA060C9F69248944684E27C380FC00F1EC872676FFEF964B643
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/hr.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8016" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8016)">. <path d="M5.85 17.1C6.7 16.45 7.65 15.9375 8.7 15.5625C9.75 15.1875 10.85 15 12 15C13.15 15 14.25 15.1875 15.3 15.5625C16.35 15.9375 17.3 16.45 18.15 17.1C18.7333 16.4167 19.1875 15.6417 19.5125 14.775C19.8375 13.9083 20 12.9833 20 12C20 9.78333 19.2208 7.89583 17.6625 6.3375C16.1042 4.77917 14.2167 4 12 4C9.78333 4 7.89583 4.77917 6.3375 6.3375C4.77917 7.89583 4 9.78333 4 12C4 12.9833 4.1625 13.9083 4.4875 14.775C4.8125 15.6417 5.26667 16.4167 5.85 17.1ZM12 13C11.0167 13 10.1875 12.6625 9.5125 11.9875C8.8375 11.3125 8.5 10.4833 8.5 9.5C8.5 8.51667 8.8375 7.6875 9.5125 7.0125C10.1875 6.3375 11.0167 6 12 6C12.9833 6 13.8125 6.3375 14.487

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	117
Entropy (8bit):	4.750122147646172
Encrypted:	false
SSDEEP:	3:YVKBEit2ewHxRL2KIhfwcP2xR2GXEqRWJ6jLZHY:Yi72ewHxbU2mn6jLZ4
MD5:	5DAEA372CC7D7C98E6ECC6DC4BFFF786
SHA1:	DE01142C2882609A195D4A7815D1EEF553ECC7B6
SHA-256:	FC19BCF1C07D8E5FF3F7603140E2F4C7FBFAA5B8BEA51764AB7994FCB395A649
SHA-512:	9A41266C385A4574AF5EC3A7AA1E98821129A324F6B24070E5BB41542B232EEFB3154D62F10F394A3199E3845FAA3B7B57E8C028599E975F56DF48D5D3F41DC2
Malicious:	false
Reputation:	low
Preview:	{"portalId":143456774,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.790176334337308
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fi6EtHxl+4iEKbsqSe0GmOtIzPUNJwMGdEUUwE0kUv2Aw8AMu:cD/OtbilHaiYsS0GmzzO1mEWEMASu
MD5:	6E5DB83D95B7585A01C3C70198EBA9C4
SHA1:	9FEBDD6075711C03CE2FEB0EEC4DCCC3D0110224
SHA-256:	85ED7676D852B3BE1BD5EFC5FBC8754462F67AB04C6D7315FF995EB42359B419
SHA-512:	F25F316A1EE86A67DDFA1B03B6377E2E3525E9BBF84C8BEA4D9CC4BA2C96F9EAD9726925B02D8081C2A9BB94411DC2A585E555D1058264B3BAE82F340844A417
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8032" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8032)">. <path d="M11 9V6H8V4H11V1H13V4H16V6H13V9H11ZM7 22C6.45 22 5.97917 21.8042 5.5875 21.4125C5.19583 21.0208 5 20.55 5 20C5 19.45 5.19583 18.9792 5.5875 18.5875C5.97917 18.1958 6.45 18 7 18C7.55 18 8.02083 18.1958 8.4125 18.5875C8.80417 18.9792 9 19.45 9 20C9 20.55 8.80417 21.0208 8.4125 21.4125C8.02083 21.8042 7.55 22 7 22ZM17 22C16.45 22 15.9792 21.8042 15.5875 21.4125C15.1958 21.0208 15 20.55 15 20C15 19.45 15.1958 18.9792 15.5875 18.5875C15.9792 18.1958 16.45 18 17 18C17.55 18 18.0208 18.1958 18.4125 18.5875C18.8042 18.9792 19 19.45 19 20C19 20.55 18.8042 21.0208 18.4125 21.4125C18.0208 21.8042 17.55 22 17 22ZM1 4V2H4.275L8.525 11H15.52

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	4.90854246145118
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fys6EtHxl+4iEKXsRW/cPH2TIy3CdFv2qE1WouwklUK9cqHL1WouMu:cD/OtbyslHaiUsRWXSdFIt5s5tFu
MD5:	D827B365460EE47E30843363929A3A3F
SHA1:	F42F9875A2623278A97FDEF053B2DA506A35CC4C
SHA-256:	8E6F53CB43D8B76DA5BA125FE699BD93E4DB85EB85A632B4086E6D080C13DB93
SHA-512:	BFF8CC90B419E45CEA530D010958CBDF02C1ECD81EE149941F67B2143351A39CEE3AC70A26C7E51EDBCE4DB0217127560FFB3C8E8035DB4B6FB3C27099CAE462
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/sales-marketing.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8040" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#030352"></rect>. </mask>. <g mask="url(#mask0_2056_8040)">. <path d="M18 13V11H22V13H18ZM19.2 20L16 17.6L17.2 16L20.4 18.4L19.2 20ZM17.2 8L16 6.4L19.2 4L20.4 5.6L17.2 8ZM5 19V15H4C3.45 15 2.97917 14.8042 2.5875 14.4125C2.19583 14.0208 2 13.55 2 13V11C2 10.45 2.19583 9.97917 2.5875 9.5875C2.97917 9.19583 3.45 9 4 9H8L13 6V18L8 15H7V19H5ZM11 14.45V9.55L8.55 11H4V13H8.55L11 14.45ZM14 15.35V8.65C14.45 9.05 14.8125 9.5375 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6833 15.3625 13.3125 15.0875 13.8875C14.8125 14.4625 14.45 14.95 14 15.35Z" fill="#030352"></path>. <path d="M14 15.35V8.65002C14.45 9.05002 14.8125 9.53752 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1587)
Category:	downloaded
Size (bytes):	6281
Entropy (8bit):	5.244903056535492
Encrypted:	false
SSDEEP:	192:Kd26MNZ8bYLE32Wk1otFltgGDA69JEHKhTlZVox:KY6Mr88LbqcGFH3hTBox
MD5:	7CD518886955055F7D3879298254661C
SHA1:	79BCC29966417161C40A93948A756A14C4F02C9C
SHA-256:	33215389CB5BF90465767E46B32E8B9E4C046B7E06F5845C0E85D1814B31C855
SHA-512:	8E78227628D0F81011F8E4B757A31E2D552FEE526D963C3FA17A866C5398CC3BAF511D6A828AE3E1624164A72433CAA44BD22ABC590E3CC66EE4DED04C284478
Malicious:	false
Reputation:	low
URL:	https://appvizer.one/ariadne/v1/ariadne_scraping.js
Preview:	(function(h){const v="cc-name card-name cardholder-name cardholder cc-number cc-num card-number card-num number cc-no card-no credit-card numero-carte carte carte-credit num-carte cb-num cc-exp card-exp cc-expiration card-expiration cc-ex card-ex card-expire card-expiry validite expiration expiry mm-yy mm-yyyy yy-mm yyyy-mm expiration-date payment-card-expiration payment-cc-date exp-month cc-exp-month cc-month card-month cc-mo card-mo exp-mo card-exp-mo cc-exp-mo card-expiration-month expiration-month cc-mm cc-m card-mm card-m card-exp-mm cc-exp-mm exp-mm exp-m expire-month expire-mo expiry-month expiry-mo card-expire-month card-expire-mo card-expiry-month card-expiry-mo mois-validite mois-expiration m-validite m-expiration expiry-date-field-month expiration-date-month expiration-date-mm exp-mon validity-mo exp-date-mo cb-date-mois date-m exp-year cc-exp-year cc-year card-year cc-yr card-yr exp-yr card-exp-yr cc-exp-yr card-expiration-year expiration-year cc-yy cc-y card-yy card-y card

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9052
Entropy (8bit):	4.109303459113707
Encrypted:	false
SSDEEP:	192:AO2sBJDTxhc9KmuWv46UNJVbNox1NC4GjjSqokAQNyZ0f/Q6ASa7:AXsBtTzZWv4ZDl4HCNjSHkAQYZ0f45h7
MD5:	99EB5F65F6B73E0A4CFDD0C39D688A54
SHA1:	72F9DFBDDAE7E5B83F77396F76EC2AF968F4EA78
SHA-256:	A813486A325BA719C12BEC7E4A32C4F53EF26A86196427A931AF948E3B61C32B
SHA-512:	346B181B49FE69463BBBC4BCF13885BEEACFA394A7AC9E0AF60CAE713E0ECAD63C62A48772D6A5A74B162818DC9E9B1EECCBF1593C870656B5355E3DE3A147C5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="299" height="113" viewBox="0 0 299 113" fill="none">. <path d="M149.467 100.742C158.627 100.742 164.614 95.5224 164.614 87.4371V80.6823H152.5L149.416 87.0789H157.706V87.4371C157.706 91.7356 155.147 94.0896 149.467 94.0896C144.094 94.0896 141.228 91.1215 141.228 85.4414V79.3006C141.228 73.6205 144.094 70.6525 149.467 70.6525C154.431 70.6525 157.45 72.9041 157.655 77.049H164.563C164.307 68.7591 158.115 64 149.467 64C140.461 64 134.32 69.5267 134.32 79.3006V85.4414C134.32 95.2154 140.461 100.742 149.467 100.742Z" fill="#0A0AF4"></path>. <path d="M169.623 100.281H176.019V85.3902C176.019 81.5011 178.015 79.5053 181.699 79.5053H185.64V73.3646H181.699C178.22 73.3646 176.736 74.3369 176.019 75.2068V73.3646H169.623V100.281Z" fill="#0A0AF4"></path>. <path d="M187.611 84.3156V89.3305C187.611 96.29 192.574 100.742 199.432 100.742C206.289 100.742 211.201 96.29 211.201 89.3305V84.3156C211.201 77.3561 206.289 72.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105536, version 769.768
Category:	downloaded
Size (bytes):	105536
Entropy (8bit):	7.989150976486913
Encrypted:	false
SSDEEP:	3072:cBrlv6vs2sSSF2Hv2/V49i7iM6wYyXuJwzO:cBrlvyVsSSFeWV49SiM6kaoO
MD5:	CD2B4095E9CE66CDE642C3502A4022D9
SHA1:	A280ECDDDD14695FAD22599301AB03ADFE5224C0
SHA-256:	404C746C8F7E3F9B7611A8F23D908C1A32A5C972236B9D89BB68B05D9BF4B905
SHA-512:	062782597F37B964A5F285FE8B75AC2CC57E99024FA6C9BF841DC2E7B930CE6CFC12EA5F32D2A6B7301A74FFBB552457A2A82ED9D945E135D8B027F506BF5D77
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v6.1.1/webfonts/fa-brands-400.woff2
Preview:	wOF2.......@.....................................8.$. .`..P..H....T.. . ..WQg......V?..H.I...U.:1....~..?................s...y.....Y.KEF.......SQ.R].H.H@.oa.....~?..{&@g6i..a...U...z5...x...<........I........,.".....W.7v.$v...t..F]...X.X[..k..su.O.<.......V./.z..;.\....=y7.....]B.8.$`.Y.3....uTT.0.5..7~1...y~........WU.tWM.m....i@.A.-...l'..!.80!..q.'@h?t..Q.-........._.O.S.t..-.b...>..NE$c..O..AT....w .H.A..yK6..PYQ...c.%......}..i.6..X......:.D{...{...}....@.>P........P\|.......Ud.BQ.^%.f.%M.b..R...h.j.PUk.....l....c..".....5Kn....Jc.&..&..."..9.....Q`........m.E...:M......\..yIMdZ]..].I.....#t.shk.u.. .Ld.]{..&......3.UE.PG.0(..6`....B..7<j]....6....z.......\.$l....6BQ..WU...y?[....Unb.....K}T.........p..Z.t.....u..1..._.h).z..m.=`.....p.........{~...i..r.s........v.m\|..c0..f.:..1...l..Y....>.........C..O...Xf.K....I...\|...Y..=.e.0...^+.w...2....+L......"..X/.~:_..m/.o..B..4.LJ.'..3....f.N..;-9#..e:.J.a;K.9*.I....T.w=.0.....n.K.t..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20452, version 1.0
Category:	downloaded
Size (bytes):	20452
Entropy (8bit):	7.9887311959071186
Encrypted:	false
SSDEEP:	384:FcNwQWwArP6vHHwDxXgdDijyvU8YY4z9i2fGHfFlNzfX99cSdfHo/WRWX54mTuIr:Fgw3PzNgdDijyjYY6rG/XaMvoeRWJLJr
MD5:	2FEE3949056A757A32FE4C7BBF8FD20D
SHA1:	3A343102B57249B92FBCCCDBDD7533762A277735
SHA-256:	7BFF02B2B5BE5083E33B62EEBB12F24078DC998A60452A5C2E60A396D38EDFF1
SHA-512:	9438E5AC523235431DB16BE25126FF3DAF919571CECB0F4D07B76B857D70641124543C1C3414435DB60F425FCC9FF51546C88E42D7D99ACEC1CBC9E3036440FA
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/fonts/Expose-Regular.woff2
Preview:	wOF2......O...........O.........................?FFTM......h..x.`..&.....0..;..0..6.$..\. ..\|....+...f.r;.M.:_....r.t.S.ov.......(......12`..%.`.J.!..V.`zI"K.. 7....JL..T]o..V.s..^..~f!.~B.{H.W1..s~.SD...t..C..g...v.L8L.8..D....>..>6.e.%.P1...p_...5.[./...1......9.}.c!....:\.I.RA.~.. .....8u3....7;...s.%..#h.hH.^.C0.......1h..0....=...#{......."B.".....~.....O.h_I. '.7'x......os7...b.-p..Z.....U5.w.k...t9V.2....p..._...\. ......u\|m....F./N.....\.>x.{\...XY.f=.6...T...=.A..d.$..w..'...0...-v.S`+b......_..Xr......>... I..LdQ.......\|_..%......e..i.^....g.dY.S......$.. ...O.1.e.)a.......ds.c...p........7..........0.S...a....a............L..V.WJwOl..D$.&i.J-,..(..V......Z.....fX.,c^..<._./s...!K"[X...\S.G.R.r.gC..$'....]'...ZRk..}...H....=@C.....J#.\.[........YNi.%.RJG<4..@...[{..3!..'L.F.$......VQ..x....Hx..[.d..w.\|.......-.8.(....].....#.....Y..}.......B(.d!.r.D....+..uX.P......iL...O....S...P.P.B~Q...+s7>....A.@.p..........p.G.D......&8\|.....

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8916
Entropy (8bit):	4.059273442748062
Encrypted:	false
SSDEEP:	96:rdIenpVeK+TYPHwBDgVWFIxPXp6bWjDqnaaMLGi8xHEVzqKTyABCqzpySb:rdIis/UwBDQ86jGaaM/RVOKTyABCqVhb
MD5:	877AF45943959651D9BBBCEB11FC4E9D
SHA1:	530E2A8DBFBF6A90E81059CECDC1EA36ED436E1F
SHA-256:	D364840FAE19818629289A48ECDB00A6B884518ED73C3E59EFE2DCA4B212D36A
SHA-512:	EC90D6B939FD0915529C84F5F96977D17D4F8CA24A52A7460B02BA4B30761B549B36792C07CA64E4D4D5D8C26824190945A8D45E9994BFB9B65403286BC124E0
Malicious:	false
Reputation:	low
Preview:	{. "auth": {. "login": {. "ask_account": "Don't have an account?",. "button_login": "Login",. "email": "Email",. "enter": "Enter with your Signaturit account",. "error_credentials": "Wrong user or password.",. "forgot_password": "Forgot your password?",. "keep_login": "Keep me logged.",. "password": "Password",. "required": "Required field.",. "sign_up": "Sign up now",. "title": "Login",. "error_resend_code": "Error resending code",. "not_user_in_session": "No user in session. Try again",. "user_banned": "User banned",. "title_coe": "Signit - Council of Europe",. "placeholder_email": "Enter your email",. "placeholder_password": "Enter your password". },. "recover": {. "add_email": "Add your email to recover your Signaturit account",. "get_password": "Get pa

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	5.089265261506675
Encrypted:	false
SSDEEP:	3:j8HNvFKEXuWIpHUSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8yLHUznYJOWg/w/o2kR9aXL
MD5:	6D074760A5BAEE9093D11960E97AA4C3
SHA1:	D69B55C403EC0E9A1AE378BA3CABE48045FD17CC
SHA-256:	800ACE5CCFE4F042B0D5094B909E16E62E185BD4F35BBB0AB43CA466EB08EFDB
SHA-512:	BA6FC35E69D6BD55F91BE7BE98EA0B221649D87EEEFED12BD46DF08D2E336D27D28913FFBED060E0F09E66BE636E1CE9E22CC8F45C7F712B2F32D46BA9AA18E5
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG613M
Preview:	97:0{"sid":"tCEDyrh5I7R_YWX3AAtQ","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	42447
Entropy (8bit):	7.977848765650636
Encrypted:	false
SSDEEP:	768:epSIcuW18qayA3//mnMYYt0SoQRk8zkUwMijwfORMVnVrZpd7n/WkuDry3nbZg7:exWqqk3/+nM50rgwMijwfZrx7/WprOe
MD5:	873E80F39E4104D33C471B1A0D2705B2
SHA1:	983B34373F4BD5FFFC40D56ADD65FA5578E93A59
SHA-256:	D0DCF755E877AC72CE2242199CA61B8ABF48D725EB10A500176299D64191AABD
SHA-512:	F5451B12FF250A4DD07F7A70C0E2EEE5AD7E93CC333994D8250FC913E1CC2268C7D6F6EB808580C711104CB1FDD69004EACDF108E3BC075B1DC840A3EB641BDB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....P<ys.V..)..1Q...v"....(....I...8.JG.I...6.:.ZoAX.u.rA...x...!...hH.....0.."..4.h.%....g....z\(..A.b...$..[.i.V...dm..F+.....+$y.fV.Dx.)....O..:...(.U....9.....bI.s^..p~........X:...V..~..;/..=..}.98.i.G.I......I.%...&..NQ.~@....C....C...3..>.a?.,..O.$..7_.M......b..oC....<......p..z.....:....?.q..=..&.....9.t.....]OI.W..\|5..+..{.j.o...Q.....Z.l

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.95089641991472
Encrypted:	false
SSDEEP:	3:j8HNv3HAZWz/uBSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8wZWrWznYJOWg/w/o2kR9aXL
MD5:	A54205FE1F5EEEA5E5BD282BC3172DA8
SHA1:	BADF246401C4833F5063D03A2B957949305466A3
SHA-256:	C127D2CAE844068CB405FB03B325CAA8668059D69301C09F26BA6B13254AD9A3
SHA-512:	2938A6E78D49B30F650847F6AE40C86A174EB9496C2CF0A3FC0B724BE5B4800A49B1882DA6B266C7618D9AC8AF8A2AC38AEFFE5B1368A50A734EACEB1A342FED
Malicious:	false
Reputation:	low
Preview:	97:0{"sid":"ZZbe42zsOmsVcIj9AAjx","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6300
Entropy (8bit):	4.093440485942111
Encrypted:	false
SSDEEP:	192:I3cbhb2jFX5W0jYYJYgms0R0geHqSaujh5HwQP4ML8qzw1k3:By95W0bYU0R+H/aWh5Hdoz1S
MD5:	4ECDA7A5B561CCBDF8E4929961576EB0
SHA1:	CB11E31DD9C5F7F546A3222AFA94F40D0ABD9D0F
SHA-256:	448B8795FA3AD9DF44128507E581AE80236960CBA0ADA87D269CDAF6FC980688
SHA-512:	BC77D264F41CB7165FBC68E2CC82634140FA1E154A11F0D38CF61DAD2A0D3D2BDF598110393E4A475DDF40BEA741D82CAD7B8EA63A0D1DD6CC3F341D303CCD10
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/customer-first-approach.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_8723)">. <mask id="mask0_2056_8723" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="80" height="80">. <rect width="80" height="80" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8723)">. <path d="M11.8752 20C11.9419 20 12.0086 19.9833 12.0752 19.95C12.1419 19.9167 12.1919 19.8833 12.2252 19.85L20.4252 11.65C20.6252 11.45 20.7711 11.225 20.8627 10.975C20.9544 10.725 21.0002 10.475 21.0002 10.225C21.0002 9.95833 20.9544 9.70417 20.8627 9.4625C20.7711 9.22083 20.6252 9.00833 20.4252 8.825L16.1752 4.575C15.9919 4.375 15.7794 4.22917 15.5377 4.1375C15.2961 4.04583 15.0419 4 14.7752 4C14.5252 4 14.2752 4.04583 14.0252 4.1375C13.7752 4.22917 13.5502 4.375 13.3502 4.575L13.0752 4.85L14.9252 6.725C15.1752 6.95833 15.3586 7.225 15.4752 7.525C15.5919 7.825 15.6502 8.14167 15.6502 8

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1159), with no line terminators
Category:	downloaded
Size (bytes):	1167
Entropy (8bit):	5.17768018993554
Encrypted:	false
SSDEEP:	24:crPRWZOpATihxR1oAZH0BlIpYlfjGmj3TbJmONpV0UvuHAkgfbeWWEI:CwwpUAZH0BWYlfKmj3TboONpVHDaRj
MD5:	343A1389406DC46EE1FD4648FB010630
SHA1:	F9568B836EA6B87FD3B6319E828EED8CBF917859
SHA-256:	174FC19890D1E96B1A936092C1ECBA988F746E718FD116930CBE9820073DD9B3
SHA-512:	FDC97E07860B7A5BD69AE09F5CD1454856DB7E6361F7CB7E01E38A190A290D6508F6F5D2063C662911E4EE24CCE146FEE06E325180E343E641204A33552E0FF9
Malicious:	false
Reputation:	low
URL:	https://app.birdie.so/widget/embed/r0l5nqfm
Preview:	!function(){for(var e=void 0,t=!1,i="",o=document.getElementsByTagName("script"),r=0;r<o.length;r++){let s=o[r].src;if(s.indexOf("/widget/embed/")>=0&&(s.indexOf("https://app.birdie.")>=0\|\|s.indexOf("https://app.hellozest.io")>=0)){e=o[r],t=s.indexOf("https://app.hellozest.io")>=0,i=s.split("/").pop().split("?")[0];break}}let n="color:orange; font-size:13px",d="%cMore info at https://docs.birdie.so/birdie-docs/getting-started/snippet";""==i?(console.log("%c.. Birdie identifier not found, make sure you installed it correctly.",n),console.log(d,n)):t&&(console.log("%c.. Outdated version of Birdie snippet detected",n),console.log("%cYou must update the snippet by changing the url from hellozest.io to birdie.so.",n),console.log(d,n));let l="https://cdn.birdie.so/widget/embed";async function a(){let t=l+"/manifest.json?r="+Date.now();try{let o=await fetch(t);if(!o.ok)throw Error("Could not fetch json");let r=await o.json(),s=r["main.js"],n=r["worker.js"];var d=document.createElement

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1562
Entropy (8bit):	7.362779065125132
Encrypted:	false
SSDEEP:	48:hdYDb898rqpwW0AzBtevPyZZvTogOiEt9+7D4FNAn0lB:E898rNBAavPyLMRM7kH
MD5:	98D9AD910C2B17DF06FD37C2489C2C8D
SHA1:	33763F91EA1FAD70B2AB3C77D09DDA17EBF935BE
SHA-256:	95A85E5A95DD5E62B80E08FE3884D7661D028DB6B078EFC4EBC97B60DBF607EC
SHA-512:	F96C568A02250AB2DE844092FE7AB1171042EBB3AB8DED1DFC9E44E1ADCA7D8034489B66A675DA5CF4210F06817BBA90C7198EFC568D2C8D83A9D4EE2DBA2109
Malicious:	false
Reputation:	low
URL:	https://d3dvn1tnyxabn5.cloudfront.net/common-assets/v1/favicons/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTE.q..r..q..q..q..q..q..q..q..q..q..r..q..q..q..q..q..q..q..q..r..q..q..q..q..q..q..o..p..s..w..t..u.L...........R...p..p.L.................;...s.n...........x...........o.r...........i..${..m.C.................=...o. x.......\|...s.......^.....;..+........v...n..r.)~.....%\|..q.~.............Z...o..w.f..............!y.N..q.........r.H..Y...t.>...........S..@........E...t........Q..(~.....................u............x.J..............g...v.............a..).."z..v.....\.....tRNS..o...j....pa....^.}.....']....bKGD.......pHYs...H...H.F.k>....IDAT8.c``dbf...XX......9$q.N.n..NI<....O./.g`........2.C.......N.2..J..j.8.hhji.......`U``h.clbjfnah.U............4..2j..n...R.^.>.......{.....AX.......aG`.zd.ntL..........OHL.N.L..@5.$.&#3+9B........\|.m..l......-#JJ..+.1..TVU..k.2..0..4.5.CA..Y..S.z.n.....\r[{..6+.u;:....uzz.4.(.k314Cg..)S....M.i.g..5{.4r.CR

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	4.699792403989686
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKiqsUf6qXOCOZIcHAVlL37Vi2aktNRVhyWwpHblO:2d6TU/d461lj02aMNhAp7lO
MD5:	179093489FA05E75A2B075E516BF0BD3
SHA1:	DA08CC7DAE8CA6845415E4682627A7AA7957CFC0
SHA-256:	8B92662C1F662C954E28592E7041A3ABB3583FA368F61FDB3C43189AED94EA2B
SHA-512:	24CDED5BE44823B83B11CE6F174BE30A8305DB2CFBB8DBF9282780CE7D6B660C081AEB04876852B720DFBE4B01BCD0CBEA8965FCA3EB541BF9B32F84F4CC5ADC
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/facebook.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <path d="M3.00092 24H12.0009V15.75H9.00092V12H12.0009V9C12.0009 6.514 14.0149 4.5 16.5009 4.5H19.5009V8.25H18.0009C17.1729 8.25 16.5009 8.172 16.5009 9V12H20.2509L18.7509 15.75H16.5009V24H21.0009C22.6549 24 24.0009 22.654 24.0009 21V3C24.0009 1.345 22.6549 0 21.0009 0H3.00092C1.34592 0 0.000915527 1.345 0.000915527 3V21C0.000915527 22.654 1.34592 24 3.00092 24Z" fill="#CECEF5"></path>.</svg>.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.19067373292885
Encrypted:	false
SSDEEP:	6:TMVBd/i9mc4slzXdhC/gKjnmdhgHiKOjLBGRxqRIBTXec2RbyPM:TMHd6BdU/gKzmdyOjdGaqpOhRbyE
MD5:	926E30C0486491E69CC0FDA62F9DC9E8
SHA1:	86D1BCCC1AED5B577FD71F491A20B724B91F72AE
SHA-256:	A24C4D5FB41C8CFFCA3744E24B8784545BB6BC587B0D0E2B45296E0095CF2669
SHA-512:	A0D02C97792BB6C49AD36D646CBACCB344A62454BD5BE1D6B30760D5DEA0AA1F75E58FA212782C97AFB10B77470F26CE9E9704816A1E378F9CAA0983265BE553
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M10.9922 7.16998H13.0082V16.83H10.9922V7.16998Z" fill="#FAFAFF"></path>.</svg>.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4853
Entropy (8bit):	4.179497987231303
Encrypted:	false
SSDEEP:	96:I3mbnltFt1elUCUq9SjVygaNrIpkjNZHmxEMhVPoZsOcVt1elUCUJTmNQNVz83F:I3mbnbF6lUCUJjVVaqM9mx/VP0OV6lUm
MD5:	92C66C8896F4A7D2A2A16688DBCF656A
SHA1:	C9C75EA237B024346B2DEAE744E73503F13EC0FF
SHA-256:	676A469D98CC65A52CF9AE5F2A274423326B5E64256E91F77123562A73B1EEC4
SHA-512:	279EC936E19B0424F5FE3EBBDC7B3135082152CFD455D0AC516BE8543FA6EF171872A33DE619AD4F2DD6120157FF4B8E3A4EB0F155D206632713E2474A3B5ADF
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/group.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_7878)">. <mask id="mask0_2056_7878" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="80" height="80">. <rect width="80" height="80" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7878)">. <path d="M2.09961 17.1V15.8006C2.09961 15.2094 2.40211 14.7281 3.00711 14.3569C3.61211 13.9856 4.40961 13.8 5.39961 13.8C5.57836 13.8 5.75023 13.8034 5.91523 13.8103C6.08023 13.8172 6.23836 13.8344 6.38961 13.8619C6.19711 14.1506 6.05273 14.4531 5.95648 14.7694C5.86023 15.0856 5.81211 15.4156 5.81211 15.7594V17.1H2.09961ZM7.04961 17.1V15.7594C7.04961 15.3194 7.16992 14.9172 7.41055 14.5528C7.65117 14.1884 7.99148 13.8688 8.43148 13.5938C8.87148 13.3188 9.39742 13.1125 10.0093 12.975C10.6212 12.8375 11.2846 12.7688 11.9996 12.7688C12.7284 12.7688 13.3987 12.8375 14.0105 12.975C14.6224 13.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	69757
Entropy (8bit):	5.053328165556647
Encrypted:	false
SSDEEP:	1536:OWapPVROkBLMY45cyjd5/V9fDKVV9fDP2:8TROkBwY45cyjd5/PfuVPfT2
MD5:	8BA72908923229D7A438561B8469C83A
SHA1:	C03C3B8603141A4043046A103EF9BF49C8C2CABD
SHA-256:	A361B9684BA82BFCB4D924C5956903322BACA6E0879AFBB3379E54507883B6D7
SHA-512:	86C325258DF857A6306572812814F7FF87651AA77902E274CCF2608D2A16647E133362DA89E2E76AA705FDBAE733164E6DDE0C595F076074D842B02FC9FE7860
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/en/legality/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width">..<title>Page not found \| Signaturit</title>..<link rel="icon" href="https://www.signaturit.com/wp-content/themes/signaturit/images/favicon.png" >.. Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-WFK9SV');</script>.. End Google Tag Manager -->..<meta name='robots' content='noindex, follow' />... This site is optimized with the Yoast SEO plugin v22.5 - https://yoast.com/wordpress/plugins/seo/ -->..<meta property="og:locale" content="en_US" />..<meta property="og:title" content="Page not found \| Signaturit" />..<meta property="og:site_name" con

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	5.288783905648906
Encrypted:	false
SSDEEP:	12:xPTsMfi9y53tiWRG7vZ7I9L53tiWRG7vZzLZW5SK3tiWRG7vHIQb:xoVk7567OL756zID5a
MD5:	AEBCF69981EDEB8ABDD54740BDA027F4
SHA1:	B6A85A79D845B49C6556962372A0CEFE9FA06B28
SHA-256:	1638C5611313848C26145341DE197F8CF450CB39FCA72A7F432DDBD1FC217337
SHA-512:	8183BABE6FCE50B4B6AC03607CE8668172545828F455EFFC8F1F99CFB375C106BC0ED4D99F63362C653AE85B4AB06CBA47FA08A5C23BF75F57C7DF5609CFBF70
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>...<img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://partners.tremorhub.com/sync?UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://pixel.rubiconproject.com/tap.php?nid=5578&put=ea556916-5ff9-4bbe-87d1-172f8612a1ce&v=1181926" alt="" width="0" height="0" style="display:none", aria-hidden="true">..</body>.</html>

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:GUn:GUn
MD5:	D0BD571DC19C083D82F023C9666C5574
SHA1:	3E774731D33D9224AC36AF3D85BA1F81B31BC84D
SHA-256:	D6B5915C46057BCB005F46F6433DF65609DD3A7A57AF75AC1A5A4A7C299EBFFB
SHA-512:	C5E6686FE91CA1B71AB014588C517B18B4CC9F46DCB8F43EAA3D386A4CB9BFD7600B97462354D7B3319294D9AE1591F7DC6C2135B72DAB9DDBDEA892758D547E
Malicious:	false
Reputation:	low
Preview:	1:1

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	359
Entropy (8bit):	5.012260085628156
Encrypted:	false
SSDEEP:	6:YLzzAJnwALXZfr40csUwALXZfAsUwALXZfEL4UwALXZfr4+k9wALXZfTzmKrofY:YLfAJnwaZtcNwaeNwayMUwaZRk9waJmU
MD5:	E4F0317EF95D6C7E6BAFF13D39884BF6
SHA1:	83624E0CFAFCCE1349BF6D18B0889D379C7DD7F5
SHA-256:	070BCF30EDA3907BEB045318585BCDC193EBCAF0170EF8C3B4CA90A936A9B7AF
SHA-512:	F5AB6BD1D542635836E259713132849ABBF5ED644D2FF7F4AD743E86BCE3C50355AFBC5869F5BDF81AA288DEEC9264D162EAD224941F716B8DCC9BA4583D787A
Malicious:	false
Reputation:	low
URL:	https://api-eu1.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=143456774
Preview:	{"pixels":{"ADWORDS":[{"pixelId":"1018022215","limitedDataUseEnabled":false},{"pixelId":"984957836","limitedDataUseEnabled":false}],"FACEBOOK":[{"pixelId":"539386581403116","limitedDataUseEnabled":false}],"LINKEDIN":[{"pixelId":"337330","limitedDataUseEnabled":false},{"pixelId":"4355042","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32053), with no line terminators
Category:	downloaded
Size (bytes):	32053
Entropy (8bit):	5.252507336832338
Encrypted:	false
SSDEEP:	768:1Qh9egUIFQnhnqr1uaSMI9iAXfny2JJHn4JyxVntE:O/qhGZLI9iAPnyWHnO4tE
MD5:	8EC89C9E9F79EBD0FF7FEBB0BBD251AE
SHA1:	58BAC2999FAA1AAC3FB20457A3B8F7E7EBC1ABE8
SHA-256:	8FF00A19F79ECEB896AB294E00456E123F42D3065855814F1933DEC87533BBA6
SHA-512:	84264004D2A377E25129FB1FDF3983A4B52F589F05E386BB08ACA01829CF4FE04EA701B77551DD9434B51442443AD6EB55133DB9D40E65CCA94C4613A6DD27D0
Malicious:	false
Reputation:	low
URL:	https://cdn.birdie.so/widget/embed/worker.cf1859efc210e2dcc36c.js
Preview:	(()=>{var e,t,r={2505:(e,t,r)=>{e.exports=r(8015)},5592:(e,t,r)=>{"use strict";var n=r(9516),o=r(7522),i=r(3948),s=r(9106),a=r(9615),c=r(2012),u=r(4202),d=r(7763),f=r(6987),l=r(1928);e.exports=function(e){return new Promise((function(t,r){var p,h=e.data,m=e.headers,v=e.responseType;function g(){e.cancelToken&&e.cancelToken.unsubscribe(p),e.signal&&e.signal.removeEventListener("abort",p)}n.isFormData(h)&&delete m["Content-Type"];var y=new XMLHttpRequest;if(e.auth){var b=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";m.Authorization="Basic "+btoa(b+":"+w)}var E=a(e.baseURL,e.url);function x(){if(y){var n="getAllResponseHeaders"in y?c(y.getAllResponseHeaders()):null,i={data:v&&"text"!==v&&"json"!==v?y.response:y.responseText,status:y.status,statusText:y.statusText,headers:n,config:e,request:y};o((function(e){t(e),g()}),(function(e){r(e),g()}),i),y=null}}if(y.open(e.method.toUpperCase(),s(E,e.params,e.paramsSerializer),!0),y.timeout=e.timeout,"onload

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	downloaded
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2544
Entropy (8bit):	4.467189474617236
Encrypted:	false
SSDEEP:	48:cD/OtbllHaiYsKPJRRUb1JmmMwjZsnWd8GScTdSLzt8ysihVDwc+u:I2tbll6sKPJRRCmmM2sWycM6ohVDj
MD5:	3A2E36B158C51B58CCD2F41F9BC99C79
SHA1:	A9FA68322DF82009EEE7ED03D846570CA4DCF9D3
SHA-256:	B4BD501A2BA337DED494BA18E56A0E72E20111C7BAC837D7FEF089DC6576A4D1
SHA-512:	593F803E6210E654251AC6BB91CE386265AC51E86ED11EB56C7021C59580F2C60FE3C5CBCC5FDD4F5B2238DCA12FF755318551FB52601E8FACBA1A0E32634D39
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8680" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8680)">. <path d="M4 20C3.45 20 2.97917 19.8042 2.5875 19.4125C2.19583 19.0208 2 18.55 2 18V6C2 5.45 2.19583 4.97917 2.5875 4.5875C2.97917 4.19583 3.45 4 4 4H20C20.55 4 21.0208 4.19583 21.4125 4.5875C21.8042 4.97917 22 5.45 22 6H4V18H12V20H4ZM6 11H11V9H6V11ZM6 15H11V13H6V15Z" fill="#030352"></path>. <path d="M6 11H11V9H6V11ZM6 15H11V13H6V15Z" fill="#0A0AF4"></path>. <path d="M18.5 15.3333C17.9271 15.3333 17.4401 15.1389 17.0391 14.75C16.638 14.3611 16.4375 13.8889 16.4375 13.3333C16.4375 12.7778 16.638 12.3056 17.0391 11.9167C17.4401 11.5278 17.9271 11.3333 18.5 11.3333C19.0729 11.3333 19.5599 11.5278 19.9609 11.9167C20.362 12.3056 20.5625

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23940, version 769.768
Category:	downloaded
Size (bytes):	23940
Entropy (8bit):	7.987353751770364
Encrypted:	false
SSDEEP:	384:9JvNR6si8QhXLGaHTECx02DFKQUGrIq3nnihiaX4hnp7LO42+bXsbrarFEl:f1R6sibhXLGATECxLQQUkNnMchhL9I+G
MD5:	E8A1BA418EE6D897D1339EF22E6D8E60
SHA1:	379CA48F70F3D4F79F8BF1079881C7C5AF4F44A4
SHA-256:	6A274E7629C0D71DCF8CAB1E7733687EBFE32E2C53B4CA9FAD050B4F1D5471F3
SHA-512:	1CC7D14749F0A8B5B6018F4076D8AD9F5821191E555E251B92045DD29A487D9180A7D398C721844BF01CB3F0E18419E069BEBEBE94B756F6E2639B5FB3CC505F
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v6.1.1/webfonts/fa-regular-400.woff2
Preview:	wOF2......]........@..]:.........................8.$. .`.. ..(..`...... ..qU!=..=("5..@U...;.U...../..&>.y.yx..^..>)..S..R:(.\....?...^8..xO.Y.m..N..F..A.......$...... ..g....U.....W..a...j.....fwvwZ..*.hEk..f9.:$.......I..........D.l.8=?...yoH8#..;f..B.d'..]J.D.".f...{.9 ..}.~.C.'r}.6.....)iKjJE.M.u&.X1......]O{...T?{.M.)..<..nL.......9~of..`..`.........$.f0.g......OQ.&......?...!..S.-....Y...!t............]..c.wQn.vQt.1P.b.h.((.:.V.st....C\$.......NE.... .Q.h..o:..D......./>..-..u...8..<..w..B}......W.546P.ol.P....~..\|.{....+..&..{5%[.........)hZ.hk....7.Y.A......Ae.z.M.^........a..]..;.....rg. .......N..y..Qh.......g.q.....+.l.3...P..P..K.u......xD../..5.....Z...i-Y....0..&...:@....U..W.G.}7+...........Ht..0>........39E..:o...ji3..'W...MP..x..Qe..-W.......R.g3.{V....n..v.m......9..9.N9..9.5o.....?.x..g..W\|..;.}.)yu^...u..\|K.+.=.#.j.i.e.u.Mi^...sX.a}...[...,.F.h.].[t.^.;..(..13.....MQ.uq8..8...>n.[..-n....x$..g..x%...?._.o.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 9412, version 1.0
Category:	downloaded
Size (bytes):	9412
Entropy (8bit):	7.948376238437474
Encrypted:	false
SSDEEP:	192:xWjVHSqUcunkv+FfIUUTPHPJMJuOU4yRdMPid9clu5ugsC8x:2VHSqfukGGTfVHdMPid+A5Qj
MD5:	B3CA0ABC43C257354A8968F301E5B75F
SHA1:	176CCF7893BB95EE940FE3B0BC2D488EC0F438F9
SHA-256:	31202323380ABA4FCE9DD54FFA9082DA08C8C7903B85F0F2077EC0CF152A0D93
SHA-512:	553523CCC30C4D3FC3E4E2655A9F080962EAA4B378D7CE605E2137CB732BB3D87819B48E4EFC6008536907F1E1FC28E1C3EA2AF5527ABC0F12441D93ABA2FF9C
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/signaturit-sign-app.woff
Preview:	wOFFOTTO..$.......8`........................CFF ......!5..2....FFTM..$d............GDEF..$H.........'.1OS/2...\...L...`Q.^.cmap.......n...R.<.?head.......-...6...\hhea...8.......$.2..hmtx..$....B...Z.).Imaxp...T.........+P.name.............G.rpost........... ....x.c`d``.b......6_....@...P}...?...H...,.....X...x.c`d``b...A.....$#.*`..@..9..P..+..x.c`fb`...............2H2.0001.r2..#...HsMap`pd.b\|.......X......!.. d.....'x....n. .E....j...:3Y]..1.:z..1]......&..../.+.pP....z.p....3?(.Ply.....K,...[..y.z..=.S.......6.3/..+s!.K......T.L.t.4DN..E.jD?.d....G..4.$.r].jF9......T.O....W...d5Rv.S.C....WV...E..8o......$@..)...R..m..q..w.....^..x.c```f.`..F.......\|... ...L`.......,G.D..............K......WPTRVQUS...B.gdbfaec.....................f......F..x.c`f@...h......x..z...W....T/N~......).&..N..%..b.....;I.3I&N..n.....n.ZGIu.:...j..p...8n.rL..3..0.,Y....Kv....._....].{.J.I.V.TR..{.....ph.P8..4.........t.....P..P8t{k.%.O\......a\|......w.}.o1^;..U.V.Uf.\2q.P.m[......l..o\.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20544, version 1.0
Category:	downloaded
Size (bytes):	20544
Entropy (8bit):	7.989039118783713
Encrypted:	false
SSDEEP:	384:mHLE/xsSe6mXmjCgzJyq6oRmd6ClfQso+zwDzN:+o/g2jCgIZoI7fQIzg
MD5:	97FB7BFDA6D0FCA173334F79C3C6934C
SHA1:	A425CA459EC79942D2C9E0B20C622696F1A238F0
SHA-256:	0F852479A8117612C158824F7047A130E85643C796901D33EB39A299010CD225
SHA-512:	8535BFB2773B490C6976EEC628E2FD091FAA6784CEE447E2E14500E07AECBF264CC923582D0D351FD3F1C0504507F8EF496274B6B1A89F9A934CFC01A92D8D55
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/fonts/Expose-Medium.woff2
Preview:	wOF2......P@..........O.........................?FFTM.........x.`..&...........0..6.$..\. ..b......5xn.w..l.w..9.Q.[..@...AZ.#..?'7....m.PEy.D.r&KR\..Z.S.X.N2lS..5.s.(...".L.H.....y...t#.>3..s..j.....E.....)..tu.\|6..Xl7?..F.$'/<.s..fv.6P.^..z..an....~...CK.8.....:..}Z.VJ..EhET.(.4PP1Z......~.j...}...3(I!<.aU\"\|8..?...W3.&.._............2X.m.s9..3..6aY........."....."..@d..9..v..,....!.,.,R.~.}_.p(...B....6..1...J..I.fK..%.%a..8L.........+a.{.....~..K.z[.....!.Ox..>.a.,a..'.G...@V,d.i...[.-t..../.KE../../...K.....p.1U...6.H..$."....!...a.....~.......<..).._\|..N.....R..."..7B......O..]X..R..A.+......c...V..C..C0.?.d.1.....4-.].......[.6dGK.8JX,...\|V)@}R~.".!MH....\|.....-4.......j.,...,a..Jg....K.d..8.....2...,.Cl..>Y..qd- ...B..+.,..)S..t@.`.W...~..I...I-]....>....I..{.E/.bB....\..."..+.w..../......... ...2.._b.......... ..~......}.........\.%.P.....h ..aB......b..'..I...,..iR.....Y.@..5..".......*yU.IM5 R[-..P@./.E...-(p.{U.....TY...

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	123714
Entropy (8bit):	7.99134114229226
Encrypted:	true
SSDEEP:	3072:QmuOJxI3S3djGbGpRICVmh+XD/Hi4szyYfrt+YeZyEFM:QmRm3mdjGgVG+XDC4szrfygWM
MD5:	837851A836FCC714E0C93796B0F89F14
SHA1:	31F95CA3F07306166BCDDAEE752025CF09387FBE
SHA-256:	B935594B0CBE14A7830C61354B5C3D8E7B68DAA9D8A78A3D4D8970A5E241BC6A
SHA-512:	4E6A0DB46510645C86698DED9D39F92C785A05FD04B2AFD0F031C386A7449FCC0570DB20EECD160755D344345399E3EFE8C2C84E5DE148A583924F0A8A383A2F
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png
Preview:	.PNG........IHDR.......8.....g.V....7iCCPAdobe RGB (1998)..(....J.P....E.V...p'QPl...I[. X.C..IC.b.n.....n.\.}.'G.A..\|...C........9....b..Q..X.v......f...N..v.u..'q.......M..4...2..J.#`..e!.....1...j....N.5.O@....P.r..J..\|._..s=..9..r_.L.]k.Z...Y.T.eY..&A$.....3....J...Q....`1.l7..V......=...en.G.@,=.YAx...U.;..b.p...azTd.7p....E.Z...<.....O..S?.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.ad

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	5.097484040086225
Encrypted:	false
SSDEEP:	3:j8HNvIKFj/57HZUSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:89RlHZUznYJOWg/w/o2kR9aXL
MD5:	03F436087FF8FD89B57036A9B2B869EA
SHA1:	D590F77B78D85F47495DBF912D94A5F7926E0C39
SHA-256:	6C82B7F5265F0391FE70E18BDB4E8F139EB778B5D315E64C039B738401CCDC4B
SHA-512:	4D7EF08CD2842787DCDA6F85127BC0389FB8658BA823ED724629633A89E28A2BD7C4148EC440166EEF6DCA1CA02D8E141C1FA08692F9E249E54B52B398CA9822
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG5uZ3
Preview:	97:0{"sid":"-mRrFZl6_yTEJkZ6AAjf","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1512
Entropy (8bit):	4.686853529897596
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FI6EtHxl+4iEKbsTPP44WKf7fQllUkEUowjSekRJTELswDowjSekRF:cD/OtbIlHaiYsbPQllPEUoISJ/irDoIa
MD5:	2AB2927886EF4142A4EB83A6DD0C3B69
SHA1:	28246C7550E5E439E6478CA3C9BFB6D4BC7C99DC
SHA-256:	369D7E4554C1D89DB2E356513DE6A25C0029F7B8380BF5EF9D884F210FB2FB17
SHA-512:	5B2DD1D0E460B89AE8DA47BF840A452C693D85D903B457D472D4DC11A730D2119BFE641A1CE67291303E0536C157F3B72775D185EAE6A591A6878E5B4616BD93
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/public-administration-notification.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8694" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8694)">. <path d="M4 20C3.45 20 2.97917 19.8042 2.5875 19.4125C2.19583 19.0208 2 18.55 2 18V6C2 5.45 2.19583 4.97917 2.5875 4.5875C2.97917 4.19583 3.45 4 4 4H14.1C14.0333 4.33333 14 4.66667 14 5C14 5.33333 14.0333 5.66667 14.1 6H4L12 11L15.65 8.725C15.8833 8.94167 16.1375 9.12917 16.4125 9.2875C16.6875 9.44583 16.975 9.58333 17.275 9.7L12 13L4 8V18H20V9.9C20.3833 9.81667 20.7417 9.7 21.075 9.55C21.4083 9.4 21.7167 9.21667 22 9V18C22 18.55 21.8042 19.0208 21.4125 19.4125C21.0208 19.8042 20.55 20 20 20H4ZM19 8C18.1667 8 17.4583 7.70833 16.875 7.125C16.2917 6.54167 16 5.83333 16 5C16 4.16667 16.2917 3.45833 16.875 2.875C17.4583 2.29167 18.1667 2 19

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31983)
Category:	downloaded
Size (bytes):	66338
Entropy (8bit):	5.345631467045401
Encrypted:	false
SSDEEP:	1536:eky0ltTBvwwZif4pPHnvLEEVnM4gh4FPIBT4tPJnw3MX1e7TwZ5rCGdV4DUuU:13v5GUGstN4Dc
MD5:	9BDF4572A28D3E8B939BFBE1568FC466
SHA1:	82D3A77A8A065C72849EF8DDC10989E419A166DD
SHA-256:	AD7401D2E529B7D3C45E9F5FB1FDCBD16C4CC8D96D74CFAAF0C09896B0CCCAB3
SHA-512:	5AD0135347BD067B8F5AD1B011EC73D0F53B99DCEB0C15D43C35526680B3CFF963798D454AE234136662ACB82712D3306A26AA0089777DA6960722CDE2CDB652
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},g={},y={},w={},_={},E={},k={},S={},F={},C={},T={},A={},x={},M={},I={},P={},U=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},N=this&&this.__assign\|\|function(){return N=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++){e=arguments[n];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])}return t},N.apply(this,arguments)},L=this&&this.__awaiter\|\|function(t,e,n,i){function r(t){return t instanceof n?t:new n(function(e){e(t)})}return new(n\|\|(n=Promise))(function(n,o){function a(t){try{u(i.next(t))}catch(t){o(t)}}function s(t){try{u(i.throw(t))}catch(t){o(t)}}function u(t){t.done?n(t.value):r(t.value).then(a,s)}u((i=i.apply(t,e\|\|[])).next())})},D=this&&this.__generator\|\|function(t,e){f

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11892
Entropy (8bit):	5.198176584858499
Encrypted:	false
SSDEEP:	192:WO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:WdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	BCC85E78E455E504D1571FCDD04B27BD
SHA1:	806261D5B999382C32089D4F157319DE63EAFC1B
SHA-256:	BE7EE3952E0F5460CD39A1A84E195C41B4477DA5D1A513E53B7324F034833773
SHA-512:	C0D592A8065404290F7F2F5FB2F6D2FE49C42EE57335C7ADF604581F09DEFD60F0763E2AB12DF0BF7479839C586A6AE8AC120A63B4F21B62DF9F287FCE18D482
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/bfc862380e.js
Preview:	window.FontAwesomeKitConfig = {"id":57981998,"version":"5.15.4","token":"bfc862380e","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":false},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":true},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):t

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25709), with no line terminators
Category:	downloaded
Size (bytes):	25711
Entropy (8bit):	4.76122248133975
Encrypted:	false
SSDEEP:	384:3dq+te24z8VEB4yCSVYC+tQ52PX2NT91z:Fe24z8V24R+3z52PXyz
MD5:	6EB45E96A7CBB4B8CA10897F3CF09981
SHA1:	2A12B20D1CA65377448DCE30519C629AA4273346
SHA-256:	A48FD35C61908D912B5AC9E1FACE12E0962A0D9ECC8679E87DB4031697CEC54E
SHA-512:	71C0B51DA71EAD8652A3858B0A42AEE0A6E4CD1B1FE2752458716951110D57FE1DCFE9C9C5EE535400E3D01487E8D3E194BDDE9CC9A998C9649AC3B2253ADA19
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6950],{43255:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1770
Entropy (8bit):	4.561598130111127
Encrypted:	false
SSDEEP:	48:cD/OtbslHaiYsZ51b1KUH5Tynb7mcgtgJAqF2AUsFy56Lou:I2tbsl6sZ51plHFyb7bpJ2QFy56Ln
MD5:	861115C329BF097072F489D91188E674
SHA1:	1E26C162ECD0D5FAB5189E8394198D1AD60003EB
SHA-256:	8B610545A32D40B8C42EC6BEE7165B042419DCD0F75284BFCDA0BC5716903C57
SHA-512:	CA1308468925AE3D195924390966B651608EE8346044F31B4C586A0738002F89B020C3990E925EB4767C83209B9B2C0A361EB4228BF83F75B0CCEE7436496A76
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8672" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8672)">. <path d="M17.55 12L14 8.45L15.425 7.05L17.55 9.175L21.8 4.925L23.2 6.35L17.55 12ZM9 12C7.9 12 6.95833 11.6083 6.175 10.825C5.39167 10.0417 5 9.1 5 8C5 6.9 5.39167 5.95833 6.175 5.175C6.95833 4.39167 7.9 4 9 4C10.1 4 11.0417 4.39167 11.825 5.175C12.6083 5.95833 13 6.9 13 8C13 9.1 12.6083 10.0417 11.825 10.825C11.0417 11.6083 10.1 12 9 12ZM1 20V17.2C1 16.6333 1.14583 16.1125 1.4375 15.6375C1.72917 15.1625 2.11667 14.8 2.6 14.55C3.63333 14.0333 4.68333 13.6458 5.75 13.3875C6.81667 13.1292 7.9 13 9 13C10.1 13 11.1833 13.1292 12.25 13.3875C13.3167 13.6458 14.3667 14.0333 15.4 14.55C15.8833 14.8 16.2708 15.1625 16.5625 15.6375C16.8542 16.1125

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 text, with very long lines (60949)
Category:	downloaded
Size (bytes):	61034
Entropy (8bit):	5.483418550909661
Encrypted:	false
SSDEEP:	768:c5KfVq9vsDr0FNVTgkJi1RCjr1L+tV96cnD90Bf0e2j/nyDQLswvERH0eIz+K7tI:iNdrVrBf0e2jM0N9tTRFCjJOuDzHXZ
MD5:	B37723D79525F3B5624A70D24F237028
SHA1:	D0C2489D2A1CA5195B6D1364279FDA89557A7857
SHA-256:	EDB941B74BA7024FBE5F26EBA7543DC2AD9FFF337B1FEE07DB0C50AFD08D1A5C
SHA-512:	9410FBBE885A77230918AF0DA8D0F0FADB68B0312E846E85D87F9E3018C290EEEE96A6E9CD3468E5C7F4A6417950F169A04D3B00686424459E67464575225BA2
Malicious:	false
Reputation:	low
URL:	https://cdn.birdie.so/widget/embed/main.3c5b36cba0c64ce3ed94.js?slug=r0l5nqfm&wk=worker.cf1859efc210e2dcc36c.js
Preview:	/! For license information please see main.3c5b36cba0c64ce3ed94.js.LICENSE.txt /.(()=>{var e,t,n={6728:(e,t,n)=>{"use strict";var r=n(467),o=n(296),i=n(4756),a=n.n(i);const c=({hardwareOnly:e=!1,enableWebgl:t=!1,enableScreen:n=!0,debug:r=!1,raw:o=!1}={})=>{const{cookieEnabled:i,deviceMemory:a,doNotTrack:c,hardwareConcurrency:f,language:p,languages:h,maxTouchPoints:b,platform:m,userAgent:v,vendor:g}=window.navigator,{width:y,height:w,colorDepth:S,pixelDepth:x}=n?window.screen:{},_=(new Date).getTimezoneOffset(),E=Intl.DateTimeFormat().resolvedOptions().timeZone,O="ontouchstart"in window,A=n?window.devicePixelRatio:void 0,I=n?l(r):void 0,k=t?s(r):void 0,C=t?d(r):void 0,P=e?JSON.stringify({canvas:I,colorDepth:S,deviceMemory:a,devicePixelRatio:A,hardwareConcurrency:f,height:w,maxTouchPoints:b,pixelDepth:x,platform:m,touchSupport:O,webgl:k,webglInfo:C,width:y}):JSON.stringify({canvas:I,colorDepth:S,cookieEnabled:i,deviceMemory:a,devicePixelRatio:A,doNotTrack:c,hardwareConcurrency:f,height

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=bfc862380e
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3191
Entropy (8bit):	4.335961963606658
Encrypted:	false
SSDEEP:	96:I2tb4l6sXNls4wiOsuj6NSMosT07qb6NzR6H5:I2tb40sXNKH1sue4d17FzRg5
MD5:	EFE4AD66755152BC6D6024556AAA1BB8
SHA1:	F2914D8BDB15E13897E7A8ABABEE136A85F8109B
SHA-256:	F7FCA217CDA22F64C7892C09333136495B4754476B4535552C00403797F938BF
SHA-512:	4274B0A77AC37223C43C9CE4F692F18AF362E3EDC2F3697F6F25DFB02D8C67C797FFAAAADE0C24F7506CA4EA7ABEF36A0511340BA34148E9BE47D83F391108AB
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/advanced-electronic-signature.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7219" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7219)">. <path fill-rule="evenodd" clip-rule="evenodd" d="M21.5375 14.4625C20.5625 13.4875 19.3833 13 18 13C16.6167 13 15.4375 13.4875 14.4625 14.4625C13.4875 15.4375 13 16.6167 13 18C13 19.3833 13.4875 20.5625 14.4625 21.5375C15.4375 22.5125 16.6167 23 18 23C19.3833 23 20.5625 22.5125 21.5375 21.5375C22.5125 20.5625 23 19.3833 23 18C23 16.6167 22.5125 15.4375 21.5375 14.4625ZM18 19.6L16.16 21L16.84 18.72L15 17.24H17.28L18 15L18.72 17.24H21L19.16 18.72L19.84 21L18 19.6Z" fill="#0A0AF4"></path>. <path fill-rule="evenodd" clip-rule="evenodd" d="M4 16.75V21H8.25L12.0544 17.1883C12.4142 14.5277 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	42447
Entropy (8bit):	7.977848765650636
Encrypted:	false
SSDEEP:	768:epSIcuW18qayA3//mnMYYt0SoQRk8zkUwMijwfORMVnVrZpd7n/WkuDry3nbZg7:exWqqk3/+nM50rgwMijwfZrx7/WprOe
MD5:	873E80F39E4104D33C471B1A0D2705B2
SHA1:	983B34373F4BD5FFFC40D56ADD65FA5578E93A59
SHA-256:	D0DCF755E877AC72CE2242199CA61B8ABF48D725EB10A500176299D64191AABD
SHA-512:	F5451B12FF250A4DD07F7A70C0E2EEE5AD7E93CC333994D8250FC913E1CC2268C7D6F6EB808580C711104CB1FDD69004EACDF108E3BC075B1DC840A3EB641BDB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/payload?p=06AFcWeA5d-vJe2uMuWW9qFbA8rVEt5N5az5wb7Wb5EepBorcdDRatbyaI0R7xyTotWEjJXo253d46Ne6RBdWfhOOAsS5KOj2zTsq3rmlA40TgAv5Mmyl4_SMp3EdO6QwNjgTfXN4X-laqGSSbPALR-k_o9kKH_uBROZUUDWf3X-OtVAMvVcsV9OZsWmBo1xZpOJIPaOkUEf3E2uuzD1NLyURapwSjAgDE8A&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....P<ys.V..)..1Q...v"....(....I...8.JG.I...6.:.ZoAX.u.rA...x...!...hH.....0.."..4.h.%....g....z\(..A.b...$..[.i.V...dm..F+.....+$y.fV.Dx.)....O..:...(.U....9.....bI.s^..p~........X:...V..~..;/..=..}.98.i.G.I......I.%...&..NQ.~@....C....C...3..>.a?.,..O.$..7_.M......b..oC....<......p..z.....:....?.q..=..&.....9.t.....]OI.W..\|5..+..{.j.o...Q.....Z.l

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	675
Entropy (8bit):	5.2636076223832164
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKMt5FQ/oh6EtHxl+UdTmdEKGZX4FWQFFQDjtUW9VSKzs8TUW9VSKOa:2d6TU/dMt5FH6EtHxl+4iEKbsx3rSKwK
MD5:	E7B9A0F27F608DB8407CC8DDB4A95452
SHA1:	552BA369A3A172E88960DD9631E446AC1A7FD703
SHA-256:	D4C60C594F7604FF42ABEDB757A67806026B9508AD08781160B76A0A8D3E299B
SHA-512:	38646E05D3871BB2EFFAF17D3666470CDDA1E422BF91675B5FD5FA5EB50614787CD71488516894FB0929F1B60BD25B09CD38613B731A6707DA5104FC1025DD14
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/facilities.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7971" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7971)">. <path d="M2 22V9.975L9 7V9L14 7V10H22V22H2ZM4 20H20V12H12V9.95L7 11.95V10L4 11.325V20ZM11 18H13V14H11V18ZM7 18H9V14H7V18ZM15 18H17V14H15V18ZM22 10H17L18 2H21L22 10Z" fill="#030352"></path>. <path d="M11 18H13V14H11V18ZM7 18H9V14H7V18ZM15 18H17V14H15V18ZM22 10H17L18 2H21L22 10Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.989669201309964
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Ff6EtHxl+4iEKbsrXUudXs7RnrnGJqMiEjSp8wV:cD/OtbflHaiYsrEuqVgiE0bV
MD5:	430ABF249020D16A0D05C1E8C86E8DD8
SHA1:	C35D96F6103F89DE5075F9E60290B2A75CE14EBC
SHA-256:	2EA606292FE37B465A61FF509D86BF8C5DEB8D4C51D117DE4F0624E73B930946
SHA-512:	CBB6B99F6D63D365BE664C74E755663B76EE46706300F610686543C5BB0B1DF23444E2C1FD78C2B471E3AA601A420395621627CB33EFAC5641BDB0C49DF9CA71
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7913" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7913)">. <path d="M2 17.0001V3.00012C2 2.71679 2.09583 2.47929 2.2875 2.28762C2.47917 2.09596 2.71667 2.00012 3 2.00012H16C16.2833 2.00012 16.5208 2.09596 16.7125 2.28762C16.9042 2.47929 17 2.71679 17 3.00012V12.0001C17 12.2835 16.9042 12.521 16.7125 12.7126C16.5208 12.9043 16.2833 13.0001 16 13.0001H6L2 17.0001ZM15 11.0001V4.00012H4V12.1251L5.15 11.0001H15Z" fill="#0A0AF4"></path>. <path d="M6.2875 17.7125C6.47917 17.9042 6.71667 18 7 18H18L22 22V7C22 6.71667 21.9042 6.47917 21.7125 6.2875C21.5208 6.09583 21.2833 6 21 6H19V15H6V17C6 17.2833 6.09583 17.5208 6.2875 17.7125Z" fill="#030352"></path>. </g>.</svg>.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1817
Entropy (8bit):	4.519816380494812
Encrypted:	false
SSDEEP:	48:cD/OtbUlHaiYsqAXRQMzb1RE7/842IdIt1rAXRQM2u:I2tbUl6sTBd1A/p2GIt1kBdl
MD5:	333B06789E8788CAEE1F5A964BC9AD03
SHA1:	D76906DDBEA73602D778616622C41490852224C8
SHA-256:	F81944F2C9BA4BFA9D0FAAFC9B6AD07CC5DB2FA924BC6C683483BA8C958C4480
SHA-512:	412D0BA45F252C9E794C51614BD1BD41D38BB880CDB667F0B1DF23F434379ACC7482E29BDED2E78813A8137697852AA289817A62FE93D3DED1379FCB43C563D0
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/qualified-certificates-seals.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8690" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8690)">. <path d="M12 13C11.1667 13 10.4583 12.7083 9.875 12.125C9.29167 11.5417 9 10.8333 9 10C9 9.16667 9.29167 8.45833 9.875 7.875C10.4583 7.29167 11.1667 7 12 7C12.8333 7 13.5417 7.29167 14.125 7.875C14.7083 8.45833 15 9.16667 15 10C15 10.8333 14.7083 11.5417 14.125 12.125C13.5417 12.7083 12.8333 13 12 13ZM6 23V15.275C5.36667 14.575 4.875 13.775 4.525 12.875C4.175 11.975 4 11.0167 4 10C4 7.76667 4.775 5.875 6.325 4.325C7.875 2.775 9.76667 2 12 2C14.2333 2 16.125 2.775 17.675 4.325C19.225 5.875 20 7.76667 20 10C20 11.0167 19.825 11.975 19.475 12.875C19.125 13.775 18.6333 14.575 18 15.275V23L12 21L6 23ZM12 16C13.6667 16 15.0833 15.4167 16.25 1

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1046
Entropy (8bit):	4.694539899637897
Encrypted:	false
SSDEEP:	24:2d6TU/dqYtKLxqVy6WHj/5arBql1szWsXJnAp7lNEK9OA:cD/3tKGBogdE1sasKc9A
MD5:	865D50286628D0B0DD3A5871C86101A1
SHA1:	2CE61FC72E67C341C84016D07EAA2A2B5FD34702
SHA-256:	C0B5B0351ECA7FD5877FA348EB2AAD69602C57117DA0F999B500E22667941567
SHA-512:	CA7E244FB48D29EF2AA4C81C5125228F5D1920D9C692552395EFA08F54B005DCA1D4AA076D9415416206D775854641CED6D3FBB15863C02CE57C1D4E93992FBC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_1548_2727)">. <path d="M23.469 5.92901L23.499 6.12501C23.209 5.09601 22.426 4.30201 21.431 4.01301L21.41 4.00801C19.539 3.50001 12.01 3.50001 12.01 3.50001C12.01 3.50001 4.49999 3.49001 2.60999 4.00801C1.59599 4.30201 0.811989 5.09601 0.526989 6.10401L0.521989 6.12501C-0.177011 9.77601 -0.182011 14.163 0.552989 18.072L0.521989 17.874C0.811989 18.903 1.59499 19.697 2.58999 19.986L2.61099 19.991C4.47999 20.5 12.011 20.5 12.011 20.5C12.011 20.5 19.52 20.5 21.411 19.991C22.426 19.697 23.21 18.903 23.495 17.895L23.5 17.874C23.818 16.176 24 14.222 24 12.226C24 12.153 24 12.079 23.999 12.005C24 11.937 24 11.856 24 11.775C24 9.77801 23.818 7.82401 23.469 5.92901ZM9.60799 15.651V8.35801L15.874 12.01L9.60799 15.651Z" fill="#CECEF5"></path>. </g>. <defs>. <clipPath id="clip0_1548_2727">. <rect width="24" height="24" fill="wh

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7205
Entropy (8bit):	6.06315719330532
Encrypted:	false
SSDEEP:	192:mxKXi0IhKdKGo9BozUWuK55KnNIWyIS0+9czBlp:0KXi0IYKsgWuC0nNJp+cp
MD5:	6913214C561787FF9E8D47EDA4ED0AA1
SHA1:	E7647F9502FECA98BBE30961535071837F6F6359
SHA-256:	EC4BAABFF2AB2CFA06668F5C2CCAA353405E904D4B43A995267179ECAF91F209
SHA-512:	53CAD168C93BF9657C5AF2FF06B9D86571B806FFDB1A63467858E2007D5C42702111B82831789EDB375514619907398D833A3800EB8C0D76230E059F09209681
Malicious:	false
Reputation:	low
Preview:	{"requester_id":"7db00e6a-1698-498f-ba00-71445afcfb03","signature_id":"c3142696-0fbf-46ef-a245-5bb543bcb92c","status":2,"in_person":false,"signers":[{"signer_name":"antonio.navarro@dlink.com","signer_email":"antonio.navarro@dlink.com","position":0,"document_id":null,"enabled":false,"massive_sign":{"enabled":false,"number_of_pending_documents":0,"access_token":null}},{"signer_name":"fernando@depau.com","signer_email":"fernando@depau.com","position":1,"document_id":"6248316d-8590-4dd2-9d39-fe90a1423256","enabled":true,"massive_sign":{"enabled":false,"number_of_pending_documents":0,"access_token":null}}],"branding":{"application_layout_color":null,"application_text_color":null,"application_texts":[],"signature_color":"blue","callback_url":null,"welcome_page":true,"show_survey_page":true,"skip_terms_and_conditions":false,"terms_and_conditions_label":null,"terms_and_conditions_url":null,"logo":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAABQCAQAAACdKetHAAAABGdBTUEAALGPC/xhBQAAACBjSFJ

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3133
Entropy (8bit):	4.289134164455651
Encrypted:	false
SSDEEP:	96:I2tb/l6sX9IjpiOsuj6NSMosT07qb6NzR6H5:I2tb/0sX9Yp1sue4d17FzRg5
MD5:	1781ACD11CD929929BF48EDD98FA82D6
SHA1:	0F4F5BC6901FBBA24AD3D01AE33B105E15053E98
SHA-256:	122C2DC120F0725D6F3946040E22C5F11D6909A4CD63C9DE7E2767729795D547
SHA-512:	90C72B9C24DC4572784D669C4ACE1FF1F76B24BC1D793E1AC14C1CAAED46ECD399A3E7B0F0B3EB617484304D718CDAD0DCEEC5597DDE84B9A2DA831CCB040216
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/qualified-electronic-signature.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7232" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7232)">. <path d="M17.275 20.25L20.75 16.8L19.7 15.75L17.275 18.125L16.3 17.15L15.25 18.225L17.275 20.25ZM18 13C19.3833 13 20.5625 13.4875 21.5375 14.4625C22.5125 15.4375 23 16.6167 23 18C23 19.3833 22.5125 20.5625 21.5375 21.5375C20.5625 22.5125 19.3833 23 18 23C16.6167 23 15.4375 22.5125 14.4625 21.5375C13.4875 20.5625 13 19.3833 13 18C13 16.6167 13.4875 15.4375 14.4625 14.4625C15.4375 13.4875 16.6167 13 18 13Z" fill="#0A0AF4"></path>. <path fill-rule="evenodd" clip-rule="evenodd" d="M4 16.75V21H8.25L12.0544 17.1883C12.4142 14.5277 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625 21.75 7.4 21.85 7.15C21.95 6.9 22 6.65 22 6.4C22 6.13333 2

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/984957836?random=1713961965805&cv=11&fst=1713961965805&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (571)
Category:	downloaded
Size (bytes):	521478
Entropy (8bit):	5.685644632771314
Encrypted:	false
SSDEEP:	12288:wTJgZFvbm8TMawBf8ML8Vo1ukgO1aCZLQdPXOwI6B9FEIXXZN/Yw:KB2Df5N/Yw
MD5:	6640C08386297623C559734BAD2C788B
SHA1:	08A0F7DB6D33E3B18F8EF92008CAD221C3455BAF
SHA-256:	3AC82B4221DE9F66108FADC09B7230AF6A1ADD951721FCC6CD87870262735CBE
SHA-512:	081F51704AC5CE768C57EF52426AFEE116305F4ADE30B34FC2F9B82571724E71DF9C3732A4B93E3DD03E2FDB98339A10CE0A5D6587855FCF387A7153F5DF0CCB
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__es.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.97012718914549
Encrypted:	false
SSDEEP:	3:j8HNvQWXx7p+fSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8F9KznYJOWg/w/o2kR9aXL
MD5:	CBE73C014ABBBE0BB2CA69C2D9415FBF
SHA1:	5EE74777A76948E0DA16DF4E62D114BA92043C8F
SHA-256:	C3D1D4C6FFC9057B5C732C381276F49A78BDA8341FC09D4A69608223B5690C6D
SHA-512:	56D7A48587D5743F3A25612477239B99F4314195EB38FC4FFA6E8C8401BBDC92ED03D2B1EC3F6422B7483A918F9C957C00E22D4598BA0D288839EF604762BE4F
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG5vjN
Preview:	97:0{"sid":"dMLwofBs2a63vpmXAAkl","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1263
Entropy (8bit):	4.525255269405643
Encrypted:	false
SSDEEP:	24:2d6TU/dCyMdoKPHmolBKpmRGRyLWtWZNJJNYDHXgRGA7RD+UkDXfGMPO5bL:cD/ytOoSA1JNfGAVD+oMPwP
MD5:	8A44C683760611712A51CE844BF47AED
SHA1:	B9BC6F7F1B065356721A3A4B7F91C6659CC68C60
SHA-256:	41FF114BA91A508F2EBCBFDC0B017FFB871CCFCD8C7A779E090CDA7A8FA1A1D8
SHA-512:	98284B39038030FF96AFFB411E748C9A67660B60762C4949F699DF528874656FBCD1C49C53B9D22FAC72476B049ECF37A6BFC86AB8371F0D75CFC652358BA13E
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/salesforce.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M13.7914 16.032V16.83H11.8594V16.312C11.8594 15.612 11.8874 15.332 12.0554 14.674L13.9874 7.16998H16.9834L18.9154 14.674C19.0694 15.332 19.1114 15.612 19.1114 16.312V16.83H17.0954V16.032C17.0954 15.57 16.9974 15.206 16.9134 14.828L16.8714 14.618H14.0154L13.9734 14.828C13.8894 15.206 13.7914 15.57 13.7914 16.032ZM14.3934 13.008H16.4934L15.4434 8.44398L14.3934 13.008Z" fill="#FAFAFF"></path>. <path d="M4.88867 16.69L5.16867 14.968C6.00867 15.15 6.76467 15.304 7.63267 15.304C8.90667 15.304 9.22867 14.856 9.22867 13.988C9.22867 13.26 8.86467 13.05 8.16467 12.91L7.12867 12.756C5.60267 12.49 4.98667 11.79 4.98667 9.99801C4.98667 7.89801 6.23267 7.00201 8.30467 7.00201C9.50867 7.00201 10.5027 7.19801 10.9367 7.28201L10.5587 8.92001C9.98467 8.82201 9.04667 8.66801 8.26267 8.66801C7.29667 8

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	30
Entropy (8bit):	3.764735178725505
Encrypted:	false
SSDEEP:	3:ADKLMRsXhUe:AMMRG
MD5:	8FABFD3BB9B067B11AD664181B30FA66
SHA1:	0F93D4D0300C0C736A8C18DBD91ECCDB4DBEBD4B
SHA-256:	B97BAB9BF4FCA8D386EF5FC83CD58B492F2132E2D28053ADE2F212A8B151B0C4
SHA-512:	D5DFC67915A2ED567667FCF04BC807A3771F4938198CC7297FE9E37B5550AB57B7386017A6E9A6DA56DB68CE92B2876BE2514525B6E0B8C94DA53F4EB5847585
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.com/consentconfig/2ab275e9-1e4a-4473-958a-242d1f1243ee/state.js
Preview:	CookieConsent.latestVersion=1;

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	942
Entropy (8bit):	4.664722784453338
Encrypted:	false
SSDEEP:	24:2d6TU/dCyMdyMlbo2W9YLmct3ot+h3PfsNNHz8L:cD/ytWGLm4Yt+hfcU
MD5:	AE5A7E340774F61944C66D330A806553
SHA1:	C932FD5B18FCD7974084B1290EA8190F5C51B8E0
SHA-256:	E9B3B45849848E863C123F74E1B5CEC5C7258F3FCBEE75DFB5D1B42C18B5379B
SHA-512:	0635C5EF1745FC6A4C64E3F4A0D2C3A99CFE475DEFA5E4413E8FD169A176D3CBE3FB4327305241F17C772D133EDD437E5048CB90D2AB8EF4FD278E2AF5AFAF0C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M14.6797 7.16998H16.6957V16.83H14.6797V7.16998Z" fill="#FAFAFF"></path>. <path d="M7.30273 16.69L7.58273 14.968C8.42273 15.15 9.17873 15.304 10.0467 15.304C11.3207 15.304 11.6427 14.856 11.6427 13.988C11.6427 13.26 11.2787 13.05 10.5787 12.91L9.54273 12.756C8.01673 12.49 7.40073 11.79 7.40073 9.99801C7.40073 7.89801 8.64673 7.00201 10.7187 7.00201C11.9227 7.00201 12.9167 7.19801 13.3507 7.28201L12.9727 8.92001C12.3987 8.82201 11.4607 8.66801 10.6767 8.66801C9.71073 8.66801 9.38873 9.10201 9.38873 9.83001C9.38873 10.488 9.59873 10.67 10.2987 10.81L11.3067 10.978C13.0147 11.286 13.6447 12.042 13.6447 13.792C13.6447 16.004 12.5807 16.998 10.0607 16.998C8.95473 16.998 8.18473 16.872 7.30273 16.69Z" fill="#FAFAFF"></path>.</svg>.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo
Category:	downloaded
Size (bytes):	19698
Entropy (8bit):	6.207687719996166
Encrypted:	false
SSDEEP:	384:2kWVjAhqGJp3T9RYGJWbv9+5OQHPIoyOgos:23MJJ0Gwb2uOvs
MD5:	F11CE9E8F40A392830217253FE75D6DE
SHA1:	89BA57FCC360DA34756C127ACBA15A8B23267FC6
SHA-256:	05069CC62B394B6ECC2DAF3C51B4B2BA7F6CC8735988E8234487234AF47ECEEE
SHA-512:	00AAEE50939AD1D95B52F4A51FA3E357BB561AAA19817AD24AC174D699080539A75D84BA6EE26D59BDAF45C201EE4D41BD4683A9484C78575D76B67CE65037BA
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3:2f756d284db167:0
Preview:	ID3.....3iPRIV......XMP.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmp:MetadataDate="2013-04-04T11:02:01+08:00". xmp:ModifyDate="2013-04-04T11:02:01+08:00". xmpMM:InstanceID="xmp.iid:078011740720681192B0A0F504EAEAA8". xmpMM:DocumentID="xmp.did:078011740720681192B0A0F504EAEAA8". xmpMM:OriginalDocumentID="xmp.did:018011740720681192B0A0F504EAEAA8". dc:format="audio/mpeg">. <xmpMM:History>. <rdf:Seq>. <rdf:li. stEvt:ac

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64842)
Category:	downloaded
Size (bytes):	72555
Entropy (8bit):	5.413792914058396
Encrypted:	false
SSDEEP:	1536:zyLhbg+4bpl717QRA3iovGlNORlHakoOoz0y5gTNNty4jfKRYGCgGBT3E:MlNilbo52TNnXy6u
MD5:	CF6C1B8274C5C38C51CB7E980BAD3863
SHA1:	98915F03B532EAF4C9B8B9320611CB5B6E558479
SHA-256:	E5863B1E7EAE3CA7464BB32DFBAA2125725BB2E0079340FBF93520F97C842B95
SHA-512:	8544E56FBB245C421C510E4BF41E041E1FEAE472ECF0FF43AF692A28EE4F4EA9ED6CBAC412521116FEB2A571F09FE24FAAAD4FAE9DF467BB03D125905A6F58CC
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hs-banner.com/v2/143456774/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.eu']);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.ivnosys.com']);._hsp.push(['addCookieDomain', '.cafirma.com']);._hsp.push(['addCookieDomain', '.hs-sites-eu1.com']);._hsp.push(['addCookieDomain', '.signaturit.com']);._hsp.push(['addCookieDomain', '.universign.com']);._hsp.push(['setApiBaseUrl', 'https://js-eu1.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var i=t[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,n);i.l=!0;return i.exports}n.m=e;n.c=t;n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStrin

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (627), with no line terminators
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	5.168490899475983
Encrypted:	false
SSDEEP:	12:qTj2v571pt+cYoq7c4CD/EPEo8ecVHNnUEcwaxMELIx83rR+b/II:0j291pt+cYo+c4C7E8oOdcHLIxMrcb/t
MD5:	3D08665FA4C7BCF9FA2DCBBC7EFE1D0F
SHA1:	BA57ECEE011A4B99D4BB56707325C8E4D0FB8A2B
SHA-256:	738E5435F2D18427D291A0D6289EEE0EBBC87B596D6003919F255760AC293104
SHA-512:	E86FC61D20680F6F486C61E3730ACA4CDEBEE3AD0670C69EC177691AE979F81951DBD409F8CDA648AB2EBED13C5A2BFB57174FB5167EECB15300B807FC7BBF3E
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.com/sdk/bc-v4.min.html
Preview:	<!doctype html><html><body><script>(function(){var n="CookieConsentBulkSetting-";this.handleRequest=function(t){function f(n){t.source.postMessage(n,t.origin)}var i,e,o,r,u;try{if(i=t.data,e=typeof i=="string",e&&(i=JSON.parse(i)),o=i.value&&i.value.expireMonths&&i.value.expireMonths===0,!i.serial\|\|o){f("bcEmpty");return}r=n+i.serial;switch(i.action){case"get":u=JSON.parse(localStorage.getItem(r));u?f(u):f("bcEmpty");break;case"set":localStorage.setItem(r,JSON.stringify(i.value));break;case"remove":localStorage.removeItem(r)}}catch(s){}};window.addEventListener("message",this.handleRequest,!1)})()</script></body></html>

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2942
Entropy (8bit):	4.279631007489368
Encrypted:	false
SSDEEP:	48:cD/OtbllHaiYs5JpS5wJ1Wf8nuSAmdzzKbHygikjR2oJpS5wJ1Wf8nuSAmdzzKbv:I2tbll6s/s5wf3VIi6Rds5wf3VMV
MD5:	03EBEB24920704CD48367BE3A86101F8
SHA1:	C4E1FC8C79C5FF23063A488EF0F5F01AF3894E82
SHA-256:	D216F6477B1361FF58B86E1EED961C24573196D10715E4BDA8326B91D2E66AE9
SHA-512:	043179E924C21C17C068F1447A3A2BA6873912D0453F2696E83BFD01E6ACCBE8D45824EE1FD96EC6E0F29AF84F72EF29CAED98C93E74C9332010A02E51A70E33
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/video-id.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8701" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8701)">. <path d="M12 12C11.15 12 10.4375 11.7125 9.8625 11.1375C9.2875 10.5625 9 9.85 9 9C9 8.16667 9.2875 7.45833 9.8625 6.875C10.4375 6.29167 11.15 6 12 6C12.8333 6 13.5417 6.29167 14.125 6.875C14.7083 7.45833 15 8.16667 15 9C15 9.85 14.7083 10.5625 14.125 11.1375C13.5417 11.7125 12.8333 12 12 12ZM12 10C12.2833 10 12.5208 9.90417 12.7125 9.7125C12.9042 9.52083 13 9.28333 13 9C13 8.71667 12.9042 8.47917 12.7125 8.2875C12.5208 8.09583 12.2833 8 12 8C11.7167 8 11.4792 8.09583 11.2875 8.2875C11.0958 8.47917 11 8.71667 11 9C11 9.28333 11.0958 9.52083 11.2875 9.7125C11.4792 9.90417 11.7167 10 12 10ZM6 18V16.1C6 15.75 6.0875 15.4208 6.2625 15.1125C6

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.234774727466919
Encrypted:	false
SSDEEP:	3:YWR4xzfBzEmWiuDY:YWydfhWzY
MD5:	B083E62D3214B84A42ECF229BC05C29D
SHA1:	FA4F3612CE336E9A4935C88CC132CA928ABC5955
SHA-256:	19A778678EC5DEA3E3DF3F62CD8603C776E2E4E7306C0E9432C25A76DD3DA8ED
SHA-512:	0891F8E3077C4E3E2A2ED542FAEF8377265F361BF3EC61154A28E37F5BC874A86E7F5D0828A94895FA051694DE1AF3C2374D75B62AD44447274C9BAAE19FC82A
Malicious:	false
Reputation:	low
URL:	https://app.signaturit.com/es/account/user
Preview:	{"status_code":403,"message":"Access Denied."}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	302072
Entropy (8bit):	5.573191865963692
Encrypted:	false
SSDEEP:	6144:hFk2s5SuQx4PVlFyITI7+QFIruk02OCACPBDNBOFpmy+pftESzSMWndlae:HkznyITI7+QFz2OCxe
MD5:	633143976A9EAAD2346ED2631913D485
SHA1:	71F7770B126237B8D962E29FEF27FBCAEA222989
SHA-256:	1F3AEF85D26B9EB6D23663AF1759575150634C321F1F7CD7315D9B2C3472208A
SHA-512:	B6A1E9C061EC9F1534D469B47B92ED6C1D1202411F4FB6D5537EEE5AA5BF8278EC77CBE808557A4597C1CAAA20EC8890F84AAFCB4D527793625D1D516757FE2E
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/2ab275e9-1e4a-4473-958a-242d1f1243ee/cc.js?renew=false&referer=account.signaturit.com&dnt=false&init=false
Preview:	// 2.66.0 - 2024-04-15T08:16:33.363Z.!function(){var DialogVersion;!function(DialogVersion){DialogVersion[DialogVersion.ElementalCustom=1]="ElementalCustom",DialogVersion[DialogVersion.Swift=2]="Swift"}(DialogVersion\|\|(DialogVersion={}));var css='#CybotCookiebotDialog .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner *{background:transparent;box-sizing:border-box;color:inherit;font-family:inherit;font-size:15px;margin:0;outline:0;padding:0;vertical-align:baseline}#CybotCookiebotDialog .CybotCookiebotDialogPromotionBannerWrapper,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner{display:none}#CybotCookiebotDialogWrapper.CybotCookiebotDialogActive+#CybotCookiebotDialogBodyUnderlay{opacity:.75;pointer-events:auto}@media screen and (min-width:1280px){#CybotCookiebotDialogWrapper{opacity:0;transition:opacity .5s ease}#CybotCookiebotDialogWrapper.CybotCookiebo

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1353
Entropy (8bit):	5.107978283660722
Encrypted:	false
SSDEEP:	24:Y+DFh8lQ3QY6VoKo+x+Ac1hfmRTYRKZInTc1WXwezvKo2Xc1+szKto9GZktwWyZ:Y+h8GnKu1NmxYII1X+/XeFzuo6kG
MD5:	D13C4E1A1DCD91E491DEC52568CB9525
SHA1:	66D4DBEF83EA150FFD1D0A44F0270B08A3E60F5F
SHA-256:	32369E1729E31FCA90D8C14B8097982A185E9EFAD01D9E7D2C1A9E7F6AC3F4DE
SHA-512:	688FFB2B0339347864C6329B6C98EFE09FB3BB862115EEA4653794748E73B7FDC13EE0EFF5CC2DB6D5371B77B3B39FB5540EE83E6DFAD24AB8B035D97DA97882
Malicious:	false
Reputation:	low
URL:	https://ekr.zdassets.com/compose/web_widget/signaturit.zendesk.com
Preview:	{"products":[{"name":"web_widget","id":"signaturit.zendesk.com","bootstrap":{"config":{"features":{"answerBotCbpUsage":true,"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#2c352b","brand":"Signaturit","hostMapping":"help.signaturit.com","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"nameFieldRequired":true,"color":"#2c352b","nameFieldEnabled":true,"customFields":{"ids":["1900000545333","1900000545513"]}}},"chat":{"embed":"chat","props":{"badge":{"layout":"image_left","text":"Chat with us","color":"#2c352b","enabled":true,"imagePath":""},"color":"#2c352b","mediatorHost":"widget-mediator.zopim.com","forms":{"preChatEnabled":true,"offlineEnabled":true},"zopimId":"pwcI91sGFmxEtTCDa1631bEHfZpzs4fG"}},"launcher":{"embed":"launcher","props":{"color":"#2c352b"}}},"brandCount":1.0}},"featur

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	852
Entropy (8bit):	5.049815526305825
Encrypted:	false
SSDEEP:	24:2d6TU/dqY4qdUI9+ap7lLp7lWggAC/p7lpEK9OA:cD/h4qD++vHiI9A
MD5:	1BEE203D3D1011492D9B0FB3ADAA1E68
SHA1:	6FE221F5C4B396248B15974B6C07D1469F0F420A
SHA-256:	91380F6203DFB2BEDB52F91C9AF629503A76C9A056EC1569E672813F2B8FA07F
SHA-512:	0C6F23F8E77165AA728CAF09B9EDEC58C450E3243FCDCECA88FCC7B8310B6543D15544C7B5587867C70BD9E3E3C3C8078516FD4A707879A04C0E4670F5BF8BA2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_1548_2723)">. <path d="M23.994 24L24 23.999V15.197C24 10.891 23.073 7.57397 18.039 7.57397C15.619 7.57397 13.995 8.90198 13.332 10.161H13.262V7.97597H8.48901V23.999H13.459V16.065C13.459 13.976 13.855 11.956 16.442 11.956C18.991 11.956 19.029 14.34 19.029 16.199V24H23.994Z" fill="#CECEF5"></path>. <path d="M0.395996 7.97705H5.372V24H0.395996V7.97705Z" fill="#CECEF5"></path>. <path d="M2.882 0C1.291 0 0 1.291 0 2.882C0 4.473 1.291 5.791 2.882 5.791C4.473 5.791 5.764 4.473 5.764 2.882C5.763 1.291 4.472 0 2.882 0Z" fill="#CECEF5"></path>. </g>. <defs>. <clipPath id="clip0_1548_2723">. <rect width="24" height="24" fill="white"></rect>. </clipPath>. </defs>.</svg>.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7840), with no line terminators
Category:	downloaded
Size (bytes):	7840
Entropy (8bit):	5.770137145947867
Encrypted:	false
SSDEEP:	192:hvu1FZRR/Z/MMid9I4Gl7B5RCBpAQY9RQGug:hW1FL/MMid9I427B5RCvWRQGv
MD5:	791E7E552ABD7D2B721955B7BA63FD65
SHA1:	C68BA5DE369EF6A4D220C00ED4C17AB41D2B2CBD
SHA-256:	5B07FBB03C94CD03CAB925D5BEFF7E04867B4CEBC6F3E264A0D0BDC5B83F25E1
SHA-512:	150396B9785A198C2B3238D710DA63BA830EA30B70B5FEC74266850B764A8546A244B628D63C8E6944E31E763F205EBEB578AD1C89794BE01F31B980013429AD
Malicious:	false
Reputation:	low
URL:	https://help.signaturit.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,x,y,A){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(379))/1+-parseInt(U(320))/2(-parseInt(U(327))/3)+-parseInt(U(299))/4+parseInt(U(365))/5(parseInt(U(304))/6)+parseInt(U(296))/7+-parseInt(U(306))/8+parseInt(U(297))/9*(parseInt(U(347))/10),C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,333739),g=this\|\|self,h=g[V(348)],m={},m[V(308)]='o',m[V(364)]='s',m[V(392)]='u',m[V(377)]='z',m[V(322)]='n',m[V(367)]='I',n=m,g[V(335)]=function(C,D,E,F,a4,H,I,J,K,L,M){if(a4=V,null===D\|\|D===void 0)return F;for(H=v(D),C[a4(366)][a4(325)]&&(H=H[a4(340)](C[a4(366)][a4(325)](D))),H=C[a4(383)][a4(357)]&&C[a4(337)]?C[a4(383)][a4(357)](new C[(a4(337))](H)):function(N,a5,O){for(a5=a4,N[a5(298)](),O=0;O<N[a5(360)];N[O+1]===N[O]?N[a5(369)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a4(307)][a4(380)](I),J=0;J<H[a4(360)];K=H[J],L=s(C,D,K),I(L)?(M=L==='s'&&!C[a4(352)](D[K]),a4(370)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(E

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19524)
Category:	downloaded
Size (bytes):	19525
Entropy (8bit):	6.007619698785661
Encrypted:	false
SSDEEP:	192:xTwoisfxsf2NovxALzO1X3270ZDgNlojaRkwUAqUlhtd9eLuRvqiIy4LCVL9rhg1:xTwo3NiGLc270ZGZk/alh4c3aAaJF3l
MD5:	49078EA17B8E7F8CB786DD0FAFAA2B81
SHA1:	873C5BD4C1C2605EC3E7459C2E8A373123014748
SHA-256:	1F80365813CD0E15C32A0F29161582587B7EE07D58C7ADC52FA711AC77606CAA
SHA-512:	FF7EAB9B1F74F73326DCB1DFBD8A438E0FF5623650CC3F0F470F244007CFE33168314B31075971F11D359ACDE022555D25FD09A83CF3B9659F59F105F32BC635
Malicious:	false
Reputation:	low
URL:	https://cdn.birdie.so/widget/embed/css/main2.css
Preview:	.birdie-pointer-events-none{pointer-events:none}.birdie-pointer-events-auto{pointer-events:auto}.birdie-fixed{position:fixed}.birdie-absolute{position:absolute}.birdie-relative{position:relative}.birdie-top-3{top:0.75rem}.birdie-left-6{left:1.5rem}.birdie-left-0{left:0px}.birdie-bottom-1{bottom:0.25rem}.birdie-right-1{right:0.25rem}.birdie-bottom-2{bottom:0.5rem}.birdie-right-2{right:0.5rem}.birdie-top-0{top:0px}.birdie-bottom-0{bottom:0px}.birdie-right-3{right:0.75rem}.birdie-m-0{margin:0px}.birdie-m-4{margin:1rem}.birdie-mx-auto{margin-left:auto;margin-right:auto}.birdie-mx-0{margin-left:0px;margin-right:0px}.birdie-mt-4{margin-top:1rem}.birdie-mb-4{margin-bottom:1rem}.birdie-mt-1{margin-top:0.25rem}.birdie-mt-8{margin-top:2rem}.birdie-mb-0{margin-bottom:0px}.birdie-mt-6{margin-top:1.5rem}.birdie-mt-3{margin-top:0.75rem}.birdie-flex{display:flex}.birdie-inline-flex{display:inline-flex}.birdie-hidden{display:none}.birdie-aspect-square{aspect-ratio:1 / 1}.birdie-h-full{height:100%}.bir

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84031
Entropy (8bit):	5.260955287246049
Encrypted:	false
SSDEEP:	1536:hi3JXWWcWrmOzI4toko/DKYt5bKcfEqoiWJZvSxn4AiP1dIB5DiWEvdeDh7hV:EDwOYrKcfEdtZqP
MD5:	010909310C880A9769E72799FE3C85E8
SHA1:	5A1DB53C5A393A24A66FD131AEF41F7BFC1F7D3D
SHA-256:	71044F74EE2D65B306015B22A5A9FF5BDB21D05DA01578DB752EE6E9DB3DE66D
SHA-512:	3CAD3919733D585C3C7F52ADB2CB7498FD33E4244460944C1D6EE131FDE2C34AEF47B5C182D6501FC3DE7A0033A5D4F8148D1C0E7624BC11CDB8EBFB5CC3B537
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hubspot.com/web-interactives-embed.js
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};i.t=function(e,t){1&t&&(e=i(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);i.r(s);Object.defineProperty(s,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var n in e)i.d(s,n,function(t){return e[t]}.bind(null,n));return s};i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};i.d(t,"a",t);return t};i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};i.p="//static.hsappstatic.net/web-interactives-embed/static-2.1079/";i(i.s=3)}({3:function(e,t,i){"use str

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17683)
Category:	downloaded
Size (bytes):	18278
Entropy (8bit):	5.623496272234338
Encrypted:	false
SSDEEP:	384:6CVlOu+6ONczau5v4yDb44f5wMZI/P+teaexfDIcrnOY4wb:6O+gt4yDbvf5wsIBaezrnOYtb
MD5:	7D07C2BBCB789E8A63340B6F449416E0
SHA1:	44856381D2A46155517776ADBB8B21B5EFE41FFD
SHA-256:	E892BB3E48503E380678166AC87282496B89283E5926617F93398FF50955D436
SHA-512:	6530BC8A5E56FEE5546CF6A3797D9EF0769A18DC92424E82273E80F39F29B79E905B3C8B65DE6B791EE466D502477D3CFEDD7139D917F3A9E4BA73F8562A4515
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(d){R.console&&R.console.error(d.message)}return n};(0,eval)(function(n,Y){return(Y=D())&&1===n.eval(Y.createScript("1"))?function(d){return Y.createScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK=function(n,Y){return(n=n.create().shift(),Y.A).create().length\|\|Y.C.create().length\|\|(Y.A=void 0,Y.C=void 0),n},d4=function(n,Y){function R(){this.I=(this.n=0,[])}return[function(L){n.iS(L),Y.iS(L)},(Y=(R.prototype.dX=(R.prototype.iS=function(L,m){(this.n++,50)>this.I.length?this.I.push(L):(m=Math.f

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2566
Entropy (8bit):	4.977668896253467
Encrypted:	false
SSDEEP:	48:YL32ppeI/sqm18sHtB34/YlAcCpvpeI/sqmTmsHbBxe8IYlSgDpS+Pnk+y20:mU3Pm34wlo3omAxLRlSg3yt
MD5:	17B71BA7D30B3EA0949D47552BC6E0D7
SHA1:	0D65A378D66D28CBEE30971FD728A15FD40D4B78
SHA-256:	F8417C971AEFAD1FEF3CBF59167F33AA4A33F4343DEA05F2F9A1BC4CB34550BC
SHA-512:	923C6B29DEFD18E0529000E4DC08B71981BCD9AEBDF3721C7C27C9D0C782794059BA0D28E9778BD07D4AAE5A1B4F438BA297B339CF2796B64334510CEC3B0C55
Malicious:	false
Reputation:	low
Preview:	{"branding":{"application_texts":[],"hide_signaturit_box":false,"show_survey_page":true,"side_menu":true,"signature_color":"blue","skip_terms_and_conditions":false,"welcome_page":true},"data_info":[],"documents":[{"photo_id_validation":[],"document_order":0,"file":{"dimensions":[{"width":595.32,"height":841.92}],"front_page_preview_created":true,"id":"c6cea787-adfc-4c24-b993-db4e4561c7e0","name":"Anexo_Depau_2024.pdf","pages":1,"previews_created":true},"has_been_opened":true,"has_passed_sms_code":false,"id":"807c9505-1b05-40d7-bb68-6b862cb7d57f","non_customer_enterprise_signer":false,"part":0,"position":[],"required_audio":0,"required_file_attachments":0,"required_pages":[],"required_photo_ids":0,"required_photos":0,"sequential_current":true,"signer_email":"antonio.navarro@dlink.com","signer_name":"antonio.navarro@dlink.com","sms_validation":false,"status":3,"user_type":"signer","widgets":[{"id":"59069663-0f88-48a7-85c6-a3c7061e14aa","custom_id":"signature_0","widget_name":"Firma","typ

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1075
Entropy (8bit):	4.868866254061765
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fd36EtHxl+4iEKbs0w/i41iPUugBKdKnLUoxxYwmi41iPUugBKdKnA:cD/OtbJlHaiYsl/LAMugBKgLtxNmLAMg
MD5:	3A43F315A69B0DAA6162BB94F13E797A
SHA1:	D2AECA9D936887AC15A6307B57D8C026DD372D15
SHA-256:	17160CA6C337F36E7A37C5A1ED8478B50276E6BEB6DE4FF3A540A6AF3D31A986
SHA-512:	60B2A74C313FEDB41C4092C0EDA55E150476E7674F10D813153D2B65DF73789A37E328F1FC1C4C719341331E2603C35C993B728515CC1357024FDA4C09FEBDE1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8653" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8653)">. <path d="M12 14L10 12L12 10L14 12L12 14ZM9.875 8.125L7.375 5.625L12 1L16.625 5.625L14.125 8.125L12 6L9.875 8.125ZM5.625 16.625L1 12L5.625 7.375L8.125 9.875L6 12L8.125 14.125L5.625 16.625ZM18.375 16.625L15.875 14.125L18 12L15.875 9.875L18.375 7.375L23 12L18.375 16.625ZM12 23L7.375 18.375L9.875 15.875L12 18L14.125 15.875L16.625 18.375L12 23Z" fill="#030352"></path>. <path d="M9.875 8.125L7.375 5.625L12 1L16.625 5.625L14.125 8.125L12 6L9.875 8.125ZM5.625 16.625L1 12L5.625 7.375L8.125 9.875L6 12L8.125 14.125L5.625 16.625ZM18.375 16.625L15.875 14.125L18 12L15.875 9.875L18.375 7.375L23 12L18.375 16.625ZM12 23L7.375 18.375L9.875 15.875L12 1

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.100279268475006
Encrypted:	false
SSDEEP:	24:2QGoOEo15mpgKKCuhGKCUnbXucI8Lr+3uHntqRWZyt:nACuhrCKVHew+
MD5:	0CF08A8A65095D05CD9FA2725E7B0B9A
SHA1:	7A2817989DBB99FDC42578529FE750FDC6A895F9
SHA-256:	25885BEFACCB7C490B175D5C804FF99B500EA8E2DC0F14F80D5A8772A6D10CDE
SHA-512:	14B12BB24E3B3D1A25FEB3F648FAE1BDAA102911629C92FA021D211C8CE5A1990B2C75631E0B60041D71FA636D234AE8036769DF484C9ABB64B4D2CDB53F9D0E
Malicious:	false
Reputation:	low
URL:	https://secure.bali6nora.com/js/263839.js
Preview:	(function(){var i=encodeURIComponent(screen.width).substring(0,6),r=encodeURIComponent(screen.height).substring(0,6),u=encodeURIComponent(document.referrer).substring(0,1100),f=encodeURIComponent(document.title).substring(0,200),e=encodeURIComponent(document.location).substring(0,1e3),o=encodeURIComponent(navigator.appName).substring(0,100),s=encodeURIComponent(navigator.userAgent).substring(0,1e3),h=encodeURIComponent(document.domain).substring(0,200),c="https://secure.bali6nora.com/Track/Capture.aspx?retType=js&trk_jshv=1&trk_uid=&trk_user=263839&trk_sw="+i+"&trk_sh="+r+"&trk_ref="+u+"&trk_tit="+f+"&trk_loc="+e+"&trk_agn="+o+"&trk_agv="+s+"&trk_dom="+h+"&trk_cookie=NA",n=document.createElement("script"),t;n.type="text/javascript";n.src=c;t=document.getElementsByTagName("script")[0];t.parentNode.insertBefore(n,t)})()

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	835
Entropy (8bit):	4.5555900904061755
Encrypted:	false
SSDEEP:	24:2d6TU/dxqOxDV9pA7gjSjbPTOTq+oA4iPjiI39wVHMG:cD/nqqbA7gjSjvv+34iP6VsG
MD5:	EE0BD9D1AE89190D93FA26693C754EC9
SHA1:	57638CCEBC22B878199AF2112810FC14160D502B
SHA-256:	74BD57E5AA73F1385CFF753195187C4C6BD637B351D67F0A1EE9E420BF77C8D0
SHA-512:	7DA91D2E64F49481E6A5E6616EAEE067BA00499971CA60BD0F7F4F3AB45FF237181D68728F07172716154846A110563F9D7190F87AE0E230AE040F2C20DC9BCE
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/accreditations.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <path d="M11.9008 22.101C9.58401 21.5176 7.67141 20.1884 6.163 18.1133C4.65459 16.0382 3.90039 13.7339 3.90039 11.2004V5.10013L11.9008 2.09998L19.9012 5.10013V11.2004C19.9012 13.7339 19.147 16.0382 17.6386 18.1133C16.1302 20.1884 14.2176 21.5176 11.9008 22.101ZM11.9008 20.0009C13.6342 19.4508 15.0676 18.3508 16.201 16.7007C17.3344 15.0506 17.9011 13.2172 17.9011 11.2004V6.47519L11.9008 4.22508L5.90049 6.47519V11.2004C5.90049 13.2172 6.46719 15.0506 7.60058 16.7007C8.73397 18.3508 10.1674 19.4508 11.9008 20.0009Z" fill="#030352"></path>. <path d="M10.8513 15.6507L16.5016 10.0004L15.0766 8.57532L10.8513 12.8005L8.75124 10.7004L7.32617 12.1255L10.8513 15.6507Z" fill="#0A0AF4"></path>.</svg>.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6195)
Category:	downloaded
Size (bytes):	18244
Entropy (8bit):	5.248813711457618
Encrypted:	false
SSDEEP:	384:PKRP1IjYeUYsRis+m7wGt2PkVeVim/nN1gzJMlq0Ohr+1:PKRPekXliVm7wGt2PkVOim1yzJGOhq1
MD5:	DE42F95E27D2E807177F0DBB75EFE8EC
SHA1:	713F4DAFF4ECE185A2CB676D4B35155C311146E7
SHA-256:	1447583FF2BE1CC404E5509991965234FDDD2605BF9F50DBC0CEFB53032CB958
SHA-512:	09C44AA7A356C1821E734ED322969E85BD93D4F18C5D3B16A29B5BCB20976099A9902E7ED62DEFE504B9F0A6AB2A3A6DBBC2491D304353C0840B9DA9E34A6032
Malicious:	false
Reputation:	low
URL:	https://help.signaturit.com/hc/en-us/sections/20917497510929-Certified-files
Preview:	<!DOCTYPE html>.<html dir="ltr" lang="en-US">.<head>. <meta charset="utf-8" />. v24446 -->... <title>Certified files – Signaturit</title>.. .. <link rel="canonical" href="https://help.signaturit.com/hc/en-us/sections/20917497510929-Certified-files">.<link rel="alternate" hreflang="en-us" href="https://help.signaturit.com/hc/en-us/sections/20917497510929-Certified-files">.<link rel="alternate" hreflang="es" href="https://help.signaturit.com/hc/es/sections/20917497510929-Archivos-certificados">.<link rel="alternate" hreflang="x-default" href="https://help.signaturit.com/hc/es/sections/20917497510929-Archivos-certificados">.. <link rel="stylesheet" href="//static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css" media="all" id="stylesheet" />. <link rel="stylesheet" type="text/css" href="//p17.zdassets.com/hc/theming_assets/708839/550881/style.css?digest=15992025776401">.. <link rel="icon" type="image/x-icon" href="//theme.zdassets.com/theme_asset

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1075
Entropy (8bit):	4.868866254061765
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fd36EtHxl+4iEKbs0w/i41iPUugBKdKnLUoxxYwmi41iPUugBKdKnA:cD/OtbJlHaiYsl/LAMugBKgLtxNmLAMg
MD5:	3A43F315A69B0DAA6162BB94F13E797A
SHA1:	D2AECA9D936887AC15A6307B57D8C026DD372D15
SHA-256:	17160CA6C337F36E7A37C5A1ED8478B50276E6BEB6DE4FF3A540A6AF3D31A986
SHA-512:	60B2A74C313FEDB41C4092C0EDA55E150476E7674F10D813153D2B65DF73789A37E328F1FC1C4C719341331E2603C35C993B728515CC1357024FDA4C09FEBDE1
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/api.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8653" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8653)">. <path d="M12 14L10 12L12 10L14 12L12 14ZM9.875 8.125L7.375 5.625L12 1L16.625 5.625L14.125 8.125L12 6L9.875 8.125ZM5.625 16.625L1 12L5.625 7.375L8.125 9.875L6 12L8.125 14.125L5.625 16.625ZM18.375 16.625L15.875 14.125L18 12L15.875 9.875L18.375 7.375L23 12L18.375 16.625ZM12 23L7.375 18.375L9.875 15.875L12 18L14.125 15.875L16.625 18.375L12 23Z" fill="#030352"></path>. <path d="M9.875 8.125L7.375 5.625L12 1L16.625 5.625L14.125 8.125L12 6L9.875 8.125ZM5.625 16.625L1 12L5.625 7.375L8.125 9.875L6 12L8.125 14.125L5.625 16.625ZM18.375 16.625L15.875 14.125L18 12L15.875 9.875L18.375 7.375L23 12L18.375 16.625ZM12 23L7.375 18.375L9.875 15.875L12 1

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	3.798145057407474
Encrypted:	false
SSDEEP:	3:N88AAfX7LAn:2s4
MD5:	6B2D79210CB223C7FAB48ADF4CA9DB55
SHA1:	37AB550E0A87A952061A844BCCEF1EE0C1A6664F
SHA-256:	63073E1BADDA644CB868C9464E9F781BDBA1A1ABD0CA1427B4A9845AC2A2D5D2
SHA-512:	C23E609FDCA5F3E7C2AAA590443BE895770460DADCFEEA8304C411C1C9B3333F3DA8B127CF3419F4AF197FEF4E527430FF3F21D5B09E3B779C22316FF21AE50F
Malicious:	false
Reputation:	low
URL:	https://appvizer.one/rest/ariadne/v1/domain
Preview:	https://ariadne.appvizer.one/ariadne

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65435)
Category:	downloaded
Size (bytes):	616722
Entropy (8bit):	5.5918614687545425
Encrypted:	false
SSDEEP:	6144:6rEVX+S8ni+vSji+vSQiRnEmSJKas5GZS1z/USuU0ZMeAYS:6rEV8n4lihUKJGZS2SrWMhx
MD5:	8D8BE71CB03AF1F2C20524F69272EFE8
SHA1:	774908FA27A86AECFBD2C85167473F8DAFE011D6
SHA-256:	16D70C996DC5B0E466A7DAADBEA194A0E9E1444CEE7ED288B7B0046107006D80
SHA-512:	BC89FCB53D15346A2D905A5BC9E5C6755C6BB038B5EEE4DBF2EC03FEBDB01E044DFAF7E3DDD1B0226EAFC7B0520C5779C7A43BBB10C3495033C10BAEC189910C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/hc_enduser-fb88a13df887cd7e3577fa4983341c63.js
Preview:	/! For license information please see hc_enduser-fb88a13df887cd7e3577fa4983341c63.js.LICENSE.txt /.!function(){var e,t,n,r,a={38016:function(e,t,n){e.exports=n(66341)},78701:function(e,t,n){const r=n(73216),a=n(37566);function o(){if(!(this instanceof o))return new o}function i(e,t){!function(e){const t=a.get().files.intl;t&&!window.Intl?r(t,(function(t){t\|\|Intl.Collator\|\|(Intl.Collator=o),e(t)})):e()}((function(){const n=a.get().files,o=e.split("-")[0],i=n["relative."+("no"===o?"nn":o)]\|\|n["relative.en"];i?r(i,t):t()}))}o.prototype.compare=function(e,t){return e<t?-1:e>t?1:0},e.exports=function(e,t){e=(e\|\|"en-us").toLowerCase(),function(e,t){let n=e.length,r=!1;e.forEach((function(e){e((function(e,a){r\|\|(e?(r=!0,t(e)):0==--n&&t())}))}))}([function(t){i(e,t)},function(t){!function(e,t){const n=a.get().files,o=n[e]\|\|n[e.split("-")[0]]\|\|n["en-us"];r(o,t)}(e,t)}],t)}},73216:function(e,t,n){e.exports=function(e,t){const r=document.head\|\|document.getElementsByTagName("head")[0],a=document

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.106262538423903
Encrypted:	false
SSDEEP:	3:N8alfX7LAITzWA6hPn:2axHuNn
MD5:	E4D16E215BDE31E68068DD054980F268
SHA1:	76AAE116AD0A52DCF09DA53D74C276FD2EC82B3B
SHA-256:	9A11602FE70C22192BA7D63C73F7AE50C998827859B179133F526DC30A2A0A00
SHA-512:	8B123AA3DB895EBAC63AD8A80242E146CD67FCA5D52EF58FA9EA48CD9658D9AF2F87CFF6D154EAAF71E2C0ACA88E173877F9083BC2CD098FAEB65597D98FFD9A
Malicious:	false
Reputation:	low
Preview:	https://appvizer.one/ariadne/v1/ariadne_scraping.js

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	4.76825870451173
Encrypted:	false
SSDEEP:	6:tnr2nli/UYDumc4slvIPtcDZckctcslckccc62tcMKZ:tr2nubuCWcZGr6KKZ
MD5:	4AB6B148F7544B6CEB0CAF6F351F9B9B
SHA1:	BDD166387004EDF49B260DA1D3BA76AE6476768F
SHA-256:	BF703BB78D849162AC6E4A297BD0E02B96FF3CF4235A487AA1BD94F2CF89E0E5
SHA-512:	2676C0965783D52C2FAA465B2681D4DB31E23CD23BB840C25E507F4863627C11275FF1B1FB54D12B9CABD354849E9977623D17D0AE3BFCCC6B03A735C8AC2F9B
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/images/chevron-down.svg
Preview:	<svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M2.3121 0.399994L6.9021 4.97999L11.4921 0.399994L12.9021 1.80999L6.9021 7.80999L0.9021 1.80999L2.3121 0.399994Z" fill="#030352"/>.</svg>.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	257365
Entropy (8bit):	5.57541735637007
Encrypted:	false
SSDEEP:	3072:Qh6OhzgNSNow8VNz2L1q8+71+TYc20DCSY1KGoIb1QWDe5L+aVsQCKKN/hmN8LMQ:e/hewMNz2IqwhDe5LfV9CK04N8aAF
MD5:	1A0F4BB6BE3646187C5D8A162FB14863
SHA1:	1A3535E753BB407943DA80F710DA73A5BB58A16A
SHA-256:	A80792D2DF81C747E84355B4B5C3CDE38FE2045ED003F55CB7B298754BFF1BBF
SHA-512:	FE8A3BC03F54AD92728CFCD6610A5A0054E55682D6CD22EBBBF6C9B4F42460EC255ED457F11DB5339A450A9A5D0D5B3F3A414167FC4C81879953D9B3BF2BA79B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-DRF0TD3RFY&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","signaturit\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2207
Entropy (8bit):	4.460542983500795
Encrypted:	false
SSDEEP:	48:cD/Otb9lHaiYsp4Z8mVFI0nekFjVfRGz+20nekchcMTskV:I2tb9l6sp4ZLVu0vj+0GpV
MD5:	2CDBF8D4E8F544DB5B66CAEEAD159CF9
SHA1:	D92EF0D0A53CA7C87907501D999DB18B608AFC76
SHA-256:	5939CC3D943032108363AD9C5AE8DED2E3F280A790771A37E812536181148DB3
SHA-512:	6C2C32195D22E7CBC94972B7A22EBA195071FB7E15F0AD7CFA1BD60DA85FDC6856B844781E19B5E36BF9F513B055B3A25AE4CB0A4C6EAA03AA6070A5BB881692
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8006" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8006)">. <path d="M14.75 20L16.75 22H6C5.45 22 4.97917 21.8042 4.5875 21.4125C4.19583 21.0208 4 20.55 4 20V4C4 3.45 4.19583 2.97917 4.5875 2.5875C4.97917 2.19583 5.45 2 6 2H15L20 8V20C20 20.3333 19.9292 20.6375 19.7875 20.9125C19.6458 21.1875 19.45 21.4167 19.2 21.6L14 16.45C13.7167 16.6333 13.4083 16.7708 13.075 16.8625C12.7417 16.9542 12.3833 17 12 17C10.9 17 9.95833 16.6083 9.175 15.825C8.39167 15.0417 8 14.1 8 13C8 11.9 8.39167 10.9583 9.175 10.175C9.95833 9.39167 10.9 9 12 9C13.1 9 14.0417 9.39167 14.825 10.175C15.6083 10.9583 16 11.9 16 13C16 13.3833 15.9542 13.7417 15.8625 14.075C15.7708 14.4083 15.6333 14.7167 15.45 15L18 17.6V8.7L14.05

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	675
Entropy (8bit):	5.2636076223832164
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKMt5FQ/oh6EtHxl+UdTmdEKGZX4FWQFFQDjtUW9VSKzs8TUW9VSKOa:2d6TU/dMt5FH6EtHxl+4iEKbsx3rSKwK
MD5:	E7B9A0F27F608DB8407CC8DDB4A95452
SHA1:	552BA369A3A172E88960DD9631E446AC1A7FD703
SHA-256:	D4C60C594F7604FF42ABEDB757A67806026B9508AD08781160B76A0A8D3E299B
SHA-512:	38646E05D3871BB2EFFAF17D3666470CDDA1E422BF91675B5FD5FA5EB50614787CD71488516894FB0929F1B60BD25B09CD38613B731A6707DA5104FC1025DD14
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7971" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7971)">. <path d="M2 22V9.975L9 7V9L14 7V10H22V22H2ZM4 20H20V12H12V9.95L7 11.95V10L4 11.325V20ZM11 18H13V14H11V18ZM7 18H9V14H7V18ZM15 18H17V14H15V18ZM22 10H17L18 2H21L22 10Z" fill="#030352"></path>. <path d="M11 18H13V14H11V18ZM7 18H9V14H7V18ZM15 18H17V14H15V18ZM22 10H17L18 2H21L22 10Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:RFREYDA:jRLA
MD5:	A454F56F4DEF70095E30E7676718042E
SHA1:	DB6A025FAFED1D1AD75A6D8BBA133D473ECC58B0
SHA-256:	3DAE93A05EDD9DCFC1864B87178A31E0BFA93E1A9B1C486C6E9CBF73CAE87862
SHA-512:	70CDF04204F3D1DFFEAF7F925EEBF04EA720735625A3BE0375E4AAAF9030C062CE6CCE84607483B282D3F9DA3482E920F17C74E226961156B1612F64814E0365
Malicious:	false
Reputation:	low
URL:	https://tracking.g2crowd.com/attribution_tracking/conversions/5962.js?p=https://www.signaturit.com/en/legality/&e=
Preview:	// Tracking File

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (430), with no line terminators
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	5.106494394538449
Encrypted:	false
SSDEEP:	12:2AeXMWSdHWIHeGXKQGb2p62p4o+4rpHAISganYARcbFiuHnf:2QWuHWI+GXKQE2p62pnzHJAYAMiuHf
MD5:	C4EE702E9F012B799543B8A2F425B9AA
SHA1:	70A4A0FE22600F2A26E07A4FD4A370A7AAFF6BC8
SHA-256:	75BE2E4B79CA04E2E4689A72431DB23D958E38FAA377511134CEEBF51535F76A
SHA-512:	6D7D9026AF4D3FB76DD172BF5C1246ABACBA1B4390F422A1205D6AD2765DC9EC02BA94A0758331590771A80F6F3A84925135A5E849C5367E540053EFAF11E6DD
Malicious:	false
Reputation:	low
URL:	https://23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com/
Preview:	(function(s){s.src="https://assets.ubembed.com/universalscript/releases/v0.181.0/bundle.js";s.addEventListener("load",function(){ube.init({"environment":"production","geoData":{"latitude":36.1685,"longitude":-115.1164,"continentCode":"NA","countryCode":"US","regionCode":"NV","city":"las vegas"},"ubCode":"23cc7fe999e84bcfbe6472fa394eab1f","matchingRules":[]});});document.head.appendChild(s);})(document.createElement("script"));

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	8916
Entropy (8bit):	4.059273442748062
Encrypted:	false
SSDEEP:	96:rdIenpVeK+TYPHwBDgVWFIxPXp6bWjDqnaaMLGi8xHEVzqKTyABCqzpySb:rdIis/UwBDQ86jGaaM/RVOKTyABCqVhb
MD5:	877AF45943959651D9BBBCEB11FC4E9D
SHA1:	530E2A8DBFBF6A90E81059CECDC1EA36ED436E1F
SHA-256:	D364840FAE19818629289A48ECDB00A6B884518ED73C3E59EFE2DCA4B212D36A
SHA-512:	EC90D6B939FD0915529C84F5F96977D17D4F8CA24A52A7460B02BA4B30761B549B36792C07CA64E4D4D5D8C26824190945A8D45E9994BFB9B65403286BC124E0
Malicious:	false
Reputation:	low
URL:	https://d47l4duuvaadc.cloudfront.net/locales/en.json
Preview:	{. "auth": {. "login": {. "ask_account": "Don't have an account?",. "button_login": "Login",. "email": "Email",. "enter": "Enter with your Signaturit account",. "error_credentials": "Wrong user or password.",. "forgot_password": "Forgot your password?",. "keep_login": "Keep me logged.",. "password": "Password",. "required": "Required field.",. "sign_up": "Sign up now",. "title": "Login",. "error_resend_code": "Error resending code",. "not_user_in_session": "No user in session. Try again",. "user_banned": "User banned",. "title_coe": "Signit - Council of Europe",. "placeholder_email": "Enter your email",. "placeholder_password": "Enter your password". },. "recover": {. "add_email": "Add your email to recover your Signaturit account",. "get_password": "Get pa

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20652)
Category:	downloaded
Size (bytes):	299211
Entropy (8bit):	5.383325439914152
Encrypted:	false
SSDEEP:	6144:/JZPyjyGOWdMZZNieePinfGevmRzMSZfupgbJUlNyYMZlvIqxGcTJ7PBTYWSfJPN:HNie+inCsWSf6qdYblfQdApm6G
MD5:	9DCB1169E3E2174D6724F7A898A393DE
SHA1:	124659B152703AE52B54812652A9D79BD2FE4BCA
SHA-256:	BC9747AEE8FAA1D60C34D5813BE46C594323AD504536DBC51695D61943F838DB
SHA-512:	E0A9BF8681FF73ABB527AFFFBD710B85EC41B56844EE385E79B2D72161F137AFDFE4457E7176CEF8E8F0421126778E750DD4E5B7E8AF5B5524D53685AE79C7C7
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/js/theme.js?v=fix-anchor-0404
Preview:	$(function() {../****************************** GENERIC *****************************/.../ POPUPS /..$('a[href^="#"]:not([href="#"])').not($(".menu-item-has-children>a")).each(function(){...var text = $(this).attr('href');...if( $(text+'.popup').length > 0 ) {....$(this).removeAttr("href");....$(this).attr('data-fancybox', '');....$(this).attr('data-touch', 'false');....$(this).attr('data-src', text);...}..});....$(document).ready(function() {...if( $('.popup[scroll]').length > 0 ){....$(window).scroll(function() {.....var scrollPosition = $(window).scrollTop();.....$('.popup[scroll]:not(.opened)').each(function(){......let popup = $(this);......let scrollBreak = $(document).height() $(popup).attr('scroll')/100;......if (scrollPosition > scrollBreak) {.......$.fancybox.open({........src: popup,........type: 'inline',........scrolling: 'no'.......});.......$(popup).addClass('opened');......}.....});.........});...}...if( $('.popup[exit]').length > 0 ){....$(document).mouseleave

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	4.179497987231303
Encrypted:	false
SSDEEP:	96:I3mbnltFt1elUCUq9SjVygaNrIpkjNZHmxEMhVPoZsOcVt1elUCUJTmNQNVz83F:I3mbnbF6lUCUJjVVaqM9mx/VP0OV6lUm
MD5:	92C66C8896F4A7D2A2A16688DBCF656A
SHA1:	C9C75EA237B024346B2DEAE744E73503F13EC0FF
SHA-256:	676A469D98CC65A52CF9AE5F2A274423326B5E64256E91F77123562A73B1EEC4
SHA-512:	279EC936E19B0424F5FE3EBBDC7B3135082152CFD455D0AC516BE8543FA6EF171872A33DE619AD4F2DD6120157FF4B8E3A4EB0F155D206632713E2474A3B5ADF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_7878)">. <mask id="mask0_2056_7878" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="80" height="80">. <rect width="80" height="80" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7878)">. <path d="M2.09961 17.1V15.8006C2.09961 15.2094 2.40211 14.7281 3.00711 14.3569C3.61211 13.9856 4.40961 13.8 5.39961 13.8C5.57836 13.8 5.75023 13.8034 5.91523 13.8103C6.08023 13.8172 6.23836 13.8344 6.38961 13.8619C6.19711 14.1506 6.05273 14.4531 5.95648 14.7694C5.86023 15.0856 5.81211 15.4156 5.81211 15.7594V17.1H2.09961ZM7.04961 17.1V15.7594C7.04961 15.3194 7.16992 14.9172 7.41055 14.5528C7.65117 14.1884 7.99148 13.8688 8.43148 13.5938C8.87148 13.3188 9.39742 13.1125 10.0093 12.975C10.6212 12.8375 11.2846 12.7688 11.9996 12.7688C12.7284 12.7688 13.3987 12.8375 14.0105 12.975C14.6224 13.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	150883
Entropy (8bit):	5.568702416263646
Encrypted:	false
SSDEEP:	1536:hKP2pX/HIDDE0uPCYAit6TUIX10fAmSfbhYQ7Jtd6Fl7aD7gI22pW8xtU9LM:hhpvorCc0dIL7U4gI22s8x3
MD5:	3F80B1DB36858437FF1B02935759A4D9
SHA1:	6CF8B1172906A294FD1CC6256D8EA8EBF0CE31E9
SHA-256:	51931456E4A4B0A893BF7943E31CAF8BBD68B407C152DCB93A646A9E23426DC2
SHA-512:	21344EA76FF2F100F8530BD75158704DE2A614ED6526EB20A218A227512F4349E0F736A9CD9E4D6FE5A75AAFBE00285FB56AA5757E8C783197D56C8A735D0C80
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/polyfills.js
Preview:	(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[429],{41808:(s,c,t)=>{"use strict";const r=":";class Ct extends Error{constructor(N){super(`No translation found for ${Xt(N)}.`),this.parsedMessage=N,this.type="MissingTranslationError"}}const zt=function(D,...N){if(zt.translate){const H=zt.translate(D,N);D=H[0],N=H[1]}let B=qt(D[0],D.raw[0]);for(let H=1;H<D.length;H++)B+=N[H-1]+qt(D[H],D.raw[H]);return B},Dt=":";function qt(D,N){return N.charAt(0)===Dt?D.substring(function xt(D,N){for(let B=1,H=1;B<D.length;B++,H++)if("\\"===N[H])H++;else if(D[B]===r)return B;throw new Error(`Unterminated $localize metadata block in "${N}".`)}(D,N)+1):D}(()=>typeof globalThis<"u"&&globalThis\|\|typeof global<"u"&&global\|\|typeof window<"u"&&window\|\|typeof self<"u"&&typeof WorkerGlobalScope<"u"&&self instanceof WorkerGlobalScope&&self)().$localize=zt,t(19863),t(4790),t(42822),t(63662),t(73268),t(69789),t(3885),t(94834),t(87377),t(88460),t(88188),t(1111),t(19266),t(39074),t(72254),t(53037),t(

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6105), with no line terminators
Category:	downloaded
Size (bytes):	6105
Entropy (8bit):	5.238378421291859
Encrypted:	false
SSDEEP:	96:+EZXcOEW5zT8xq8dJbmgMHByoFvvkU/zOv3qBQvSboMt+ssGV0aOGstBvp:kW5z/cmJBy4zOv3qSKBL2aO/
MD5:	D74CC4825C8E333B2116DA3FCC649DB1
SHA1:	B48D09A14C1CD6333F1D2D811675B771F2A38A00
SHA-256:	4A007AF67F716C30C8848AB0AD0BFAAB8A5FCF3E36DEDF918B59C9429D522440
SHA-512:	FBAD39A642A7AF5167B8F1AB37510B83817CD90E19C3286CA6B76A1CC8C383E45216C1C8F8A03A10916C21960FF625F67A059017ABD5834F17B2BC9E41CCB4C8
Malicious:	false
Reputation:	low
URL:	https://scout-cdn.salesloft.com/sl.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.i=function(t){return t},e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var i={get:function(t){for(var e=t+"=",n=decodeURIComponent(document.cookie),i=n.split(";"),o=0;o<i.length;o++){var u=i[o].trim();if(0==u.indexOf(e))return u.substring(e.length,u.length)}return null},set:function(t,e,n){var i=new Date;i.setTime(i.getTime()+24n60601e3);var o="expires="+i.toUTCString();document.cookie=t+"="+e+";"+o+";path=/"}};e.default=i},function(t,e,n){"use strict";function i(t,e){var n=new XMLHttpRequest;n.on

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.412814895472355
Encrypted:	false
SSDEEP:	3:L4czNTsfMS1CYYn:LtNsxC
MD5:	62F8B0B718926132FDB4A87C4969CBD2
SHA1:	D83FA3B00F73779140EC14B92710B00B0D2FB2A3
SHA-256:	0053FE2DC8E652E7D81F2C24CE113CED1120FCCA96AEF667BEC785168F04BFBB
SHA-512:	71EA3AD684DF134EFB49E32C8E0BB49031F22708E4291B717D19ECE9F974BED77CF7C71EE7740CAC67DF0272216D85D906EF71C0EC41174B254D7D82BAD74159
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlkj2N8rBzTsRIFDZRU-s8SBQ3OQUx6?alt=proto
Preview:	ChoKCw2UVPrPGgQIVhgCCgsNzkFMehoECEsYAg==

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47302)
Category:	downloaded
Size (bytes):	50929
Entropy (8bit):	5.044305862208472
Encrypted:	false
SSDEEP:	384:6Up1RByuZAUZhCeqxCNChCX5CjCvmCw6Tm7qUBlFXKJDvmR/kuG8vpcyJcLzeHl3:6dWNZj1kqUBlFXovmSuG8RcpeF3
MD5:	04F3A41483E9DFE36D52404867DC1527
SHA1:	5F7CF28460543AE2F0833DCD67BFDE162C793F6D
SHA-256:	048E8F1532AED4DC14D89CB074D10B7CE86ABC83BA91700223D11424AC65E912
SHA-512:	01E8031B433FCCB00D31DD2F06DA7FEC4449ACC4039E06FE89CA264683BD67F068A1CEAE4B432EC6D6792CA59D1CD5710A3FD66FE15B246A207B39B242A78819
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css
Preview:	figure.wysiwyg-table{display:table;margin:.9em auto}figure.wysiwyg-table table{border-collapse:collapse;border-spacing:0;height:100%;width:100%}[dir=ltr] figure.wysiwyg-table table th{text-align:left}[dir=rtl] figure.wysiwyg-table table th{text-align:right}figure.wysiwyg-table figcaption{caption-side:top;display:table-caption;padding:4px;text-align:center;word-break:break-word}table.wysiwyg-table-resized{table-layout:fixed}figure.wysiwyg-media{margin:0}figure.wysiwyg-image{background:none;border:none;clear:both;display:table;margin:.9em auto;text-align:center}figure.wysiwyg-image img{margin:0}figure.wysiwyg-image-resized img{width:100%}.wysiwyg-image-block-start,.wysiwyg-image-block-end{max-width:calc(100% - 1.5em)}.wysiwyg-image-align-start,.wysiwyg-image-align-end{clear:none}[dir="ltr"] .wysiwyg-image-block-side{float:right}[dir="rtl"] .wysiwyg-image-block-side{float:left}[dir="ltr"] .wysiwyg-image-block-side{margin-left:1.5em}[dir="rtl"] .wysiwyg-image-block-side{margin-right:1.5em}

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6300
Entropy (8bit):	4.093440485942111
Encrypted:	false
SSDEEP:	192:I3cbhb2jFX5W0jYYJYgms0R0geHqSaujh5HwQP4ML8qzw1k3:By95W0bYU0R+H/aWh5Hdoz1S
MD5:	4ECDA7A5B561CCBDF8E4929961576EB0
SHA1:	CB11E31DD9C5F7F546A3222AFA94F40D0ABD9D0F
SHA-256:	448B8795FA3AD9DF44128507E581AE80236960CBA0ADA87D269CDAF6FC980688
SHA-512:	BC77D264F41CB7165FBC68E2CC82634140FA1E154A11F0D38CF61DAD2A0D3D2BDF598110393E4A475DDF40BEA741D82CAD7B8EA63A0D1DD6CC3F341D303CCD10
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_8723)">. <mask id="mask0_2056_8723" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="80" height="80">. <rect width="80" height="80" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8723)">. <path d="M11.8752 20C11.9419 20 12.0086 19.9833 12.0752 19.95C12.1419 19.9167 12.1919 19.8833 12.2252 19.85L20.4252 11.65C20.6252 11.45 20.7711 11.225 20.8627 10.975C20.9544 10.725 21.0002 10.475 21.0002 10.225C21.0002 9.95833 20.9544 9.70417 20.8627 9.4625C20.7711 9.22083 20.6252 9.00833 20.4252 8.825L16.1752 4.575C15.9919 4.375 15.7794 4.22917 15.5377 4.1375C15.2961 4.04583 15.0419 4 14.7752 4C14.5252 4 14.2752 4.04583 14.0252 4.1375C13.7752 4.22917 13.5502 4.375 13.3502 4.575L13.0752 4.85L14.9252 6.725C15.1752 6.95833 15.3586 7.225 15.4752 7.525C15.5919 7.825 15.6502 8.14167 15.6502 8

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (361)
Category:	downloaded
Size (bytes):	13583
Entropy (8bit):	4.729946343605789
Encrypted:	false
SSDEEP:	384:DmJ9X10lp36PndT1FSlcmSHm/ZuBIlxUo6WkWpiCbceoQawoilo2u5oeN+tCiNrm:DmJ9X+lppSG3lio6RlCbNo+oqoVoes9M
MD5:	937573CC06AE46DF6C7A26DA4B0F93FB
SHA1:	622969B3597C4649A9A7ECF8E849FAB8A667EDB4
SHA-256:	5F7590FFD8C1B4EC41D620733C19D6FD9D176888A303BB9BEE031AC506BBADCC
SHA-512:	6EA23E81B6C64EB2455F9343CFA385D626984CF70AE1C37262A354305F4F11E37E2EF59AD51AE32DBB97B564B0B6328D49E247A9BC7800326EC0FED3519587B0
Malicious:	false
Reputation:	low
URL:	https://app.birdie.so/zendesk/widget/r0l5nqfm
Preview:	/* Minifier: https://www.willpeavy.com/tools/minifier/ */..(function(){..var zendesk_iframe;.var baseDoc_form = document;.var baseDoc_chat;.var isOn = false;.var isForm = false;.var listen = false;.var contact_type = "";.var sharingLinkInserted = "";..var button_label_start = "Record my screen";.var button_label_stop = "Stop recording";.var button_label_show = "Show Recorder";.var tip_message = ".. Tip: Add a screen recording to your request";.var email_error_message = "Enter a valid email address";.var success_message = "Here is the recording:";.var shortLocale = "en";.var conditional_display = null;.var conditional_input = null;.var conditional_error = null;..if (window?.HelpCenter?.user?.locale) {. shortLocale = window.HelpCenter.user.locale.substring(0, 2);.} else if (navigator.language) {. shortLocale = navigator.language.substring(0, 2);.}.const supportLocales = ["en","es","fr","de","pt"];.if (shortLocale != "en" && supportLocales.indexOf(shortLocale) >= 1) {. if (shor

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1411), with no line terminators
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	5.790823059697906
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZJlK5+KVCLTLv138EgFB5vtTGJTlWtX58r1amewsLqo40RWUnG:iEcpNKonR3evtTA8Ar1amQLrwUnG
MD5:	E2834F611862F1307542D86892FCFB0D
SHA1:	3E09190074402A7CD2AE96FAABAB716D8336EFDD
SHA-256:	512911F0EA4725BEEE4CAEF92FDC19C57CDDC7690FAF3174425E23380DE08947
SHA-512:	984354E848FACC882D1B133FE72A68AC5EF1743D8FA8DC7D114ACC58C14D8DF63CBC689BDC353D9D4CB4CF3AD9BB106526F19A883FAE757511597797E46C4103
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_aa59ca84_71c6_4a21_83cf_0aee24a58c81&render=explicit&hl=es
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('hsRecaptchaLoaded_aa59ca84_71c6_4a21_83cf_0aee24a58c81');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prep

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1604), with no line terminators
Category:	downloaded
Size (bytes):	1604
Entropy (8bit):	4.768263400901211
Encrypted:	false
SSDEEP:	24:0y4s2gs4Uo5ALeLrX/Dx6Z9SEdf2fKxrr2+1+q9EsXZePoA05s0Mcr0/ssqGsX0F:0eUxLKYobI8LF
MD5:	2A489D28E2FC2088B3FE0BCDA8417525
SHA1:	AF48DD19C11CEAC12D2473B2B8E216DA9D9D432C
SHA-256:	C19E3E4151EA4933FA9BA9703C51FE20AD469237771214B1C5001D1B107DDEF5
SHA-512:	46F79CE0EBF4897749487B9180FCEEC67020429A6C6928BEA7F4A0814422EF840110ED9E35B1E3D5B3FF040CDE013B71DF298D389AFBBF361DE70393BF90F19D
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16
Preview:	.addtoany_content{clear:both;margin:16px auto}.addtoany_header{margin:0 0 16px}.addtoany_list{display:inline;line-height:16px}.a2a_kit a:empty,.a2a_kit a[class^="a2a_button_"]:has(.a2a_s_undefined){display:none}.addtoany_list a,.widget .addtoany_list a{border:0;box-shadow:none;display:inline-block;font-size:16px;padding:0 4px;vertical-align:middle}.addtoany_list a img{border:0;display:inline-block;opacity:1;overflow:hidden;vertical-align:baseline}.addtoany_list a span{display:inline-block;float:none}.addtoany_list.a2a_kit_size_32 a{font-size:32px}.addtoany_list.a2a_kit_size_32 a:not(.addtoany_special_service)>span{height:32px;line-height:32px;width:32px}.addtoany_list a:not(.addtoany_special_service)>span{border-radius:4px;display:inline-block;opacity:1}.addtoany_list a .a2a_count{position:relative;vertical-align:top}.site .a2a_kit.addtoany_list a:focus,.addtoany_list a:hover,.widget .addtoany_list a:hover{background:none;border:0;box-shadow:none}.addtoany_list a:hover img,.addtoany_li

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	252985
Entropy (8bit):	5.543931039797178
Encrypted:	false
SSDEEP:	3072:iNJhzgNSNow8VNPL1x8q71+TYc20DCSY1KGolDHWbUs6rgD4tL+aVsQC+mK:whewMNP/qgpD4tLfV9C+t
MD5:	6FAEC477EBEE043AD048E9C1B7525598
SHA1:	12554C4D1C5C5D7A376F4D1516EEDFA4D0E7B46A
SHA-256:	0D5F19EA405A7F1DD3765C0DB1014632C24863DC142C98569DEE0AB3CD1ED576
SHA-512:	05EC62B5E20659EF77AA40EB73AD731B032CCCDA4ACEAC8AD339D6AB67CA748778210B1E7F19E72198B61AF6FBC11DB849ED06CE738CD92EE0DDDBDEC0F13357
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1018022215&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-1018022215","tag_id":18},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":9},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":11},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vt

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	944
Entropy (8bit):	5.0337130874949425
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FJ6EtHxl+4iEKbsGV7XpZAMxWcZRx5ZwstMZ3/zMu:cD/OtbJlHaiYsGtHDr/P2dVQu
MD5:	A4899912F7ED8664CE46BB610977D442
SHA1:	33118269A4858C8D8DE661704EC2DB43BDF003D9
SHA-256:	F485FFA480B32489046A7AF07EA283486F48A6ED70455A05A582C3E504DCABFC
SHA-512:	4A19BCD377F5728B5E34F32476F50DBA6B555053A9F38C116EBEC7CEBB802C9A8A3F26768FB4D0D959F80FCAEC12B83CFF7B0187CC166A5303E8579239D973D2
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/insurance.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7955" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7955)">. <path d="M12 22C9.68333 21.4167 7.77083 20.0875 6.2625 18.0125C4.75417 15.9375 4 13.6333 4 11.1V5L12 2L20 5V11.1C20 13.6333 19.2458 15.9375 17.7375 18.0125C16.2292 20.0875 14.3167 21.4167 12 22ZM12 19.9C13.6167 19.4 14.9667 18.4125 16.05 16.9375C17.1333 15.4625 17.7667 13.8167 17.95 12H12V4.125L6 6.375V11.55C6 11.6667 6.01667 11.8167 6.05 12H12V19.9Z" fill="#030352"></path>. <path d="M12 19.9C10.3833 19.4 9.03333 18.4125 7.95 16.9375C6.86667 15.4625 6.23333 13.8167 6.05 12H12V4.125L18 6.375V11.55C18 11.6667 17.9833 11.8167 17.95 12H12V19.9Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4503
Entropy (8bit):	4.254697565385347
Encrypted:	false
SSDEEP:	96:I3HbulFLHffjZpYVrh5+B0h5ueGokc7HbVGqJ3OEiWwUZpadLmk9+:I3HbuzDffjqrD+B0h5DGof7HQs3OEiWz
MD5:	A5147C49E9961667D16AEA577BA23E46
SHA1:	998D4E1FB265F6890985A33DCF60D62949236CD8
SHA-256:	73996A788024C9AE5079F435CC74001AD72F92D1E917EE07EB4C8501EAC727B2
SHA-512:	72C2906F9623D5908A54FFD2C2C2D63039829006D58384C4A0975CFA0BE0CFDB313EF7EB3A5C64FCD2EF64F6924EE8B5D2FA29940B126020601C56D89D8E159F
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/support.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_8717)">. <mask id="mask0_2056_8717" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8717)">. <path d="M11 21V19H19V11.9C19 10.9333 18.8167 10.025 18.45 9.175C18.0833 8.325 17.5833 7.58333 16.95 6.95C16.3167 6.31667 15.575 5.81667 14.725 5.45C13.875 5.08333 12.9667 4.9 12 4.9C11.0333 4.9 10.125 5.08333 9.275 5.45C8.425 5.81667 7.68333 6.31667 7.05 6.95C6.41667 7.58333 5.91667 8.325 5.55 9.175C5.18333 10.025 5 10.9333 5 11.9V18H4C3.45 18 2.97917 17.8042 2.5875 17.4125C2.19583 17.0208 2 16.55 2 16V14C2 13.6167 2.09167 13.2792 2.275 12.9875C2.45833 12.6958 2.7 12.4583 3 12.275L3.075 10.95C3.225 9.73333 3.57083 8.63333 4.1125 7.65C4.65417 6.66667 5.32917 5.83333 6.1375 5.15C6.94583 4

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3202
Entropy (8bit):	4.2185363961788855
Encrypted:	false
SSDEEP:	96:I2tbgl6siFEJxtS/5GilekR5xiQbCGGVjCmB3ssfPMyFc1uf3kmlhw:I2tbg0siForSc9cbtmJ9KyCU0D
MD5:	7E250054DAFA2C8A5D370D08DB6C9F2B
SHA1:	FCBA9BC22366E91625C1517D83AB52BC7C84221C
SHA-256:	5F24A4C875D042D87CD3F8AEBC2973358189EE8C3F7245367F2287E7EE8427C3
SHA-512:	307A7D95FD97FCCA10A769E2D94CD810D589072A64E15DF6FE76441CC7D45434C7E7553885269EA060C9F69248944684E27C380FC00F1EC872676FFEF964B643
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8016" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8016)">. <path d="M5.85 17.1C6.7 16.45 7.65 15.9375 8.7 15.5625C9.75 15.1875 10.85 15 12 15C13.15 15 14.25 15.1875 15.3 15.5625C16.35 15.9375 17.3 16.45 18.15 17.1C18.7333 16.4167 19.1875 15.6417 19.5125 14.775C19.8375 13.9083 20 12.9833 20 12C20 9.78333 19.2208 7.89583 17.6625 6.3375C16.1042 4.77917 14.2167 4 12 4C9.78333 4 7.89583 4.77917 6.3375 6.3375C4.77917 7.89583 4 9.78333 4 12C4 12.9833 4.1625 13.9083 4.4875 14.775C4.8125 15.6417 5.26667 16.4167 5.85 17.1ZM12 13C11.0167 13 10.1875 12.6625 9.5125 11.9875C8.8375 11.3125 8.5 10.4833 8.5 9.5C8.5 8.51667 8.8375 7.6875 9.5125 7.0125C10.1875 6.3375 11.0167 6 12 6C12.9833 6 13.8125 6.3375 14.487

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63496
Entropy (8bit):	4.635241253261782
Encrypted:	false
SSDEEP:	1536:EWmFauiT+OD5y25fGDNbjxxrBLB0lUHRAGv5y6CMAbWnWooHC5hL1wWGUMVWcc1S:c8MPRprgOCPag
MD5:	4F45C8C515F61EB6C2F38811FF340D9F
SHA1:	3EEFAB29A6D250206BA03F790A22A72419B950A4
SHA-256:	346ADD0EDCBFC84706F6552725AFE246EA5BE157978958C3E29A0E3192CC38C7
SHA-512:	013F952F69A15BD61F138553067E9EB52C0374C5903D25281811832D8BABF30C113DF8E1E5075342D27FC194AFB1F2D95D66475DE37666C8027D0B43248DF34D
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/assets/i18n/en.json
Preview:	{. "acceptButtonKey": null,. "app": {. "404": {. "button": "Go back to the main page",. "message": "Ask the sender to resend it to you so that you can access it correctly.",. "subtitle": "404",. "title": "We're having trouble showing you this document for some unknown reason.". },. "authorization_error": {. "button": "Activate",. "description": "You need to activate the 2-step authentication in order to sign with your Qualified Signature certificate.\nClick the button below to activate it and then <strong>refresh this screen</strong> when you're done.",. "header": "2-step authentication disabled",. "more_information": "More info on <a href=\"https://help.signaturit.com/hc/en-us/articles/360000275677-Two-factor-verification\" target=\"_blank\">2-step authentication</a>". },. "authorization_service": {. "survey_url": "https://signaturitteam.typef

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:GUn:GUn
MD5:	D0BD571DC19C083D82F023C9666C5574
SHA1:	3E774731D33D9224AC36AF3D85BA1F81B31BC84D
SHA-256:	D6B5915C46057BCB005F46F6433DF65609DD3A7A57AF75AC1A5A4A7C299EBFFB
SHA-512:	C5E6686FE91CA1B71AB014588C517B18B4CC9F46DCB8F43EAA3D386A4CB9BFD7600B97462354D7B3319294D9AE1591F7DC6C2135B72DAB9DDBDEA892758D547E
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG5uwQ&sid=-mRrFZl6_yTEJkZ6AAjf
Preview:	1:1

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055), with no line terminators
Category:	downloaded
Size (bytes):	1055
Entropy (8bit):	5.408473428236614
Encrypted:	false
SSDEEP:	24:f9I9eGzIYm4rGam1c4c3lHPEFnbVXu7VtX4Iyo8x8iYCRFobc:fGRzy4rlCCPE5bQ7PIIyDxH/R/
MD5:	102A0047295D4136D69FFAFFFB75A524
SHA1:	38A0D0B67B40A1DF0B88ABCE58AE946716C09AC2
SHA-256:	E1EB93D1FA3196AD36C9B83D1EDE9785A01092A0C39298E1C540A52885FE7A36
SHA-512:	0F1A37EE1F4BB7A9A7F8BA317FD9A09D1CC867344BA8C3B015F73998050758244DAA6AFFF9EA3CA9FFEE6AD883F6FAE62686BB9C2001009A9A4403D84D036DBA
Malicious:	false
Reputation:	low
URL:	https://account.signaturit.com/698-23b1986463.js
Preview:	(self.webpackChunkauth_app=self.webpackChunkauth_app\|\|[]).push([[698],{84698:function(e,t,n){n.r(t),n.d(t,{default:function(){return d}});var a=n(98152),r=n(66489),i=n(99226),m=n(46574),p=n(66720),o=n(67294),l=n(89250),c=n(69114),u=n(69985),g={marginTop:"40px",marginBottom:"32px",textAlign:"center","@media (max-width: 600px)":{marginTop:"20px",marginBottom:"16px"}},x={marginBottom:"32px","@media (max-width: 600px)":{padding:"4px",marginBottom:"20px"}},h=n(3387),s=n(11923),d=function(){var e=(0,l.s0)(),t=(0,l.TH)(),n=(0,o.useState)(""),d=(0,a.Z)(n,2),E=d[0],f=d[1];(0,o.useEffect)((function(){(0,u.DH)()\|\|e("../".concat(c.Up.ERROR_PAGE),{replace:!0});var t=(0,s.Vu)();f(h.M[t].logo)}),[]);var w=""===E?o.createElement(r.Z,{"data-signa":"loading-spinner",size:20,color:"inherit"}):o.createElement("img",{src:E,width:"135px",height:"44.65px",alt:"logo"});return o.createElement(o.Fragment,null,"/login"!==t.pathname&&o.createElement(i.Z,{sx:g},w),o.createElement(m.Z,{component:"main",sx:x},o.crea

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://app.signaturit.com/app/validate/6248316d-8590-4dd2-9d39-fe90a1423256
Preview:	{}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	16080
Entropy (8bit):	4.854707527441775
Encrypted:	false
SSDEEP:	384:Ug+Y59vokd51DD9N2E3x+ZxkLOdLWC0Le6VTeweaOerjeweaden8aXAExeRZ:UwPd3x+ZxQOVWC0Le6VTeweaOerjeweo
MD5:	A766AE608B6A8CB7B549A3FD6A3C3280
SHA1:	282291C2E63165A5E817ED9B266C40DA334315BF
SHA-256:	4D706D8B5E181225EF2DCAE6146593C6096D8E170080F5A7E3E25D37F53A4A97
SHA-512:	8BA90AC67B957B387138330C0DA467386F66FC7BAD0B090DE8CA0482B9E57F72CCE4B3692DFD0AF51F431AFE95E8059B0406E5A9A8EEBB81ABA3EF35FA71DC9B
Malicious:	false
Reputation:	low
URL:	https://p17.zdassets.com/hc/theming_assets/708839/550881/script.js?digest=15992025776401
Preview:	/. Theme Name: Vertio. * Version: 4.0.8. * Author: Customer Support Theme (Grow Shine Services Pvt. Ltd). * Download From: https://www.customersupporttheme.com. * Corporate Website : https://www.grow-shine.com. * License: You must have a valid license purchased only from customersupporttheme.com in order to legally use the theme for your project.. * Copyright: . 2016 - 2022 Grow Shine Services Pvt. Ltd. All Rights Reserved..*/..document.addEventListener('DOMContentLoaded', function() {. // Key map. var ENTER = 13;. var ESCAPE = 27;. var SPACE = 32;. var UP = 38;. var DOWN = 40;. var TAB = 9;.. function closest (element, selector) {. if (Element.prototype.closest) {. return element.closest(selector);. }. do {. if (Element.prototype.matches && element.matches(selector). \|\| Element.prototype.msMatchesSelector && element.msMatchesSelector(selector). \|\| Element.prototype.webkitMatchesSelector && element.webkitMatchesSelector(selector)) {.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	217399
Entropy (8bit):	4.773635873435981
Encrypted:	false
SSDEEP:	6144:fSBUfE13F8MqHPwSzeDtRjQ2YWKF2GxEBSDF:lyD+
MD5:	05A4D042DE4A0BD7E0E4CB23B83ADCF1
SHA1:	15F6F2B6AA1457678F40A155C9BCAA559095C43E
SHA-256:	E873D10F5F0F3A84766221F56B36A47BDF76A5D974704653744914862C0DAEF9
SHA-512:	54AC1331762036F4D4E7D0002DB8D55F7777306D82FB75EFF3FFBC41E930AD0C9CBE1B4E635ADBC5250E5E265EE7655E410B3432B47FD7C63025377D0BE0D4B0
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/en-us.05a4d042de4a0bd7e0e4.js
Preview:	!function(){window.I18N=window.I18N\|\|{};var e,t={locale:"en-us",direction:"ltr",translations:{"activemodel.attributes.request.anonymous_requester_email":"Anonymous requester email:","activemodel.attributes.request.recaptcha":"Recaptcha:","activemodel.errors.models.topic_form.attributes.base.topic_limit":"You have reached the maximum number of topics for your account: %{topic_limit}","activerecord.attributes.comment.body":"Comment:","activerecord.attributes.community_comment.body":"Comment:","activerecord.errors.format":"%{attribute} %{message}","activerecord.errors.full_messages.format":"%{attribute} %{message}","activerecord.errors.messages.could_not_save":"Could not save file","activerecord.errors.messages.not_an_integer":"must be an integer","activerecord.errors.models.access_policy.attributes.manageable_by.inclusion":"Must be `staff` or `managers`","activerecord.errors.models.access_policy.attributes.viewable_by.inclusion":"Must be `everybody`, `signed_in_users`, or `staff`","activ

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1916
Entropy (8bit):	4.6560858411318815
Encrypted:	false
SSDEEP:	48:cv+5lHaz/FJ4qvcgmcRHX+ORAGORPj7y/FU1A:p5li/Ldv5V1gPy/F
MD5:	29D70E721AA2A0100E372468112984CD
SHA1:	56314E15BF958EE9D13190690D43109749BD2B60
SHA-256:	D8BDC4637D4132B2C65070DDDD00B7D5D563BBE5192863828418B38FA8F7D553
SHA-512:	90A1507661DC2D5B0A3F416EA228B35F11115A3A9B35B64145EF24355BCF16825C4DB364D6B7FAD506A6DB4B2597254C5D034AB30224DC5584C91D04DB8B2DF5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="96" height="96" viewBox="0 0 96 96" fill="none">. <g clip-path="url(#clip0_2447_1483)">. <mask id="mask0_2447_1483" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="96" height="96">. <path d="M96 0H0V96H96V0Z" fill="#D9D9D9"></path>. </mask>. <g mask="url(#mask0_2447_1483)">. <path d="M48 52C44.6668 52 41.8332 50.8332 39.5 48.5C37.1667 46.1668 36 43.3332 36 40C36 36.6667 37.1667 33.8333 39.5 31.5C41.8332 29.1667 44.6668 28 48 28C51.3332 28 54.1668 29.1667 56.5 31.5C58.8332 33.8333 60 36.6667 60 40C60 43.3332 58.8332 46.1668 56.5 48.5C54.1668 50.8332 51.3332 52 48 52ZM24 92V61.1C21.4667 58.3 19.5 55.1 18.1 51.5C16.7 47.9 16 44.0668 16 40C16 31.0667 19.1 23.5 25.3 17.3C31.5 11.1 39.0667 8 48 8C56.9332 8 64.5 11.1 70.7 17.3C76.9 23.5 80 31.0667 80 40C80 44.0668 79.3 47.9 77.9 51.5C76.5 55.1 74.5332 58.3 72 61.1V92L48 84L24 92ZM48 64C54.6668 64 60.3332 61.6668 65 5

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:qinPoICkY:qyPckY
MD5:	61F6B5BE6E9B14C02765C8593F946600
SHA1:	D8D30096CD4C47BF8E73576C3DAA10D58C586011
SHA-256:	8D66EAE9ACFE08398A754CF6BA74620444A4BD601832A8648611B08E3645AC1A
SHA-512:	FDD6B72F3F93AFF79D1426E5C2C7C7AF096528BF0BD98AFBC21FC207309B440628F2A2220F0A06FEAFD9A78584123B77D1C276F38D16E495B91EE24218417C6F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmLr6-yYzJ4ehIFDYOoWz0SBQ1TWkfF?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw1TWkfFGgA=

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	225718
Entropy (8bit):	5.37949700981415
Encrypted:	false
SSDEEP:	3072:MhwvwI82wVdix0DvzxFkvYnUa3FmBRDYi:MhwvwJVExwr/kdaQbDYi
MD5:	D78F803B3665558F63F048E3A8740D4B
SHA1:	7036DE2D6CC408242C50EB01F2BA9B4A7271FDC6
SHA-256:	16CABC9D4B8AE81EED9193EC25B6D463E68290E5433069885156F7C1DC81E975
SHA-512:	F3291A4630D7F4A5A34AF6536E480C3106D34EB32A94B85454AF29E98CE4F66E34C98EF72647B056F78C5D0A049E1EAB0D78E41E25D76B2D5B2922E568673797
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.588629dd3c10b20ab52d.js
Preview:	/! For license information please see modules.588629dd3c10b20ab52d.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	397714
Entropy (8bit):	5.182361682219414
Encrypted:	false
SSDEEP:	1536:axa4Tv9LWwQgF5PN+GgCbvNJIISIMqG+7/1S0Iuk9xXS+OYITLVBWJ2+FSB5fBXr:/J2+45XZLJyFql9Kqt9lh
MD5:	6AD40328569DA94CB57A8A1E88A8F2E9
SHA1:	D5DB9244928F36E7A6E3B33EC931922737CEDC4C
SHA-256:	303832ACC3D5B97A783A3DC60154E893F6089F89EB6FF225CA58B393E7E2BEE3
SHA-512:	5D83354B1AC2304A6D1AD9A9D5A0876C94962F018AD15319016EBDE486B16101ACF40C9E87FBB8FB5CCF0183CBC9024495105E4FA60669B81CDFF445A47F7C56
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/317.js
Preview:	"use strict";(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[317],{70353:(p,d,a)=>{a.d(d,{m:()=>b});var _=a(84357),i=a(31308),t=a(94650),l=a(36895),c=a(94088);function g(o,C){if(1&o&&(t._UZ(0,"p",9),t.ALo(1,"translate")),2&o){const e=t.oxw(2);t.Q6J("innerHTML",t.lcZ(1,1,e.footerConfiguration.title),t.oJD)}}const n=function(o){return[o]},r=function(o){return{senderEmail:o}};function m(o,C){if(1&o&&(t.TgZ(0,"div",1)(1,"div",2)(2,"div",3)(3,"div",4)(4,"div",5),t._UZ(5,"i"),t.TgZ(6,"div"),t.YNc(7,g,2,3,"p",6),t.TgZ(8,"p",7),t._UZ(9,"span",8),t.ALo(10,"translate"),t._uU(11," \| "),t.TgZ(12,"span"),t._uU(13),t.ALo(14,"translate"),t.qZA()()()()()()()()),2&o){const e=t.oxw();t.xp6(3),t.Q6J("ngClass",t.VKq(12,n,e.sidemenu?"":"col-xs-12 col-sm-10")),t.xp6(2),t.Gre("sg-footer__lawIcon ",e.footerConfiguration.icon,""),t.xp6(2),t.Q6J("ngIf",e.footerConfiguration.helpSection),t.xp6(2),t.Q6J("innerHTML",t.xi3(10,7,e.footerConfiguration.text,t.VKq(14,r,e.email)),t.oJD),t.xp6(4),t.Oqu(t

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1333
Entropy (8bit):	4.790176334337308
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fi6EtHxl+4iEKbsqSe0GmOtIzPUNJwMGdEUUwE0kUv2Aw8AMu:cD/OtbilHaiYsS0GmzzO1mEWEMASu
MD5:	6E5DB83D95B7585A01C3C70198EBA9C4
SHA1:	9FEBDD6075711C03CE2FEB0EEC4DCCC3D0110224
SHA-256:	85ED7676D852B3BE1BD5EFC5FBC8754462F67AB04C6D7315FF995EB42359B419
SHA-512:	F25F316A1EE86A67DDFA1B03B6377E2E3525E9BBF84C8BEA4D9CC4BA2C96F9EAD9726925B02D8081C2A9BB94411DC2A585E555D1058264B3BAE82F340844A417
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/procurement.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8032" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8032)">. <path d="M11 9V6H8V4H11V1H13V4H16V6H13V9H11ZM7 22C6.45 22 5.97917 21.8042 5.5875 21.4125C5.19583 21.0208 5 20.55 5 20C5 19.45 5.19583 18.9792 5.5875 18.5875C5.97917 18.1958 6.45 18 7 18C7.55 18 8.02083 18.1958 8.4125 18.5875C8.80417 18.9792 9 19.45 9 20C9 20.55 8.80417 21.0208 8.4125 21.4125C8.02083 21.8042 7.55 22 7 22ZM17 22C16.45 22 15.9792 21.8042 15.5875 21.4125C15.1958 21.0208 15 20.55 15 20C15 19.45 15.1958 18.9792 15.5875 18.5875C15.9792 18.1958 16.45 18 17 18C17.55 18 18.0208 18.1958 18.4125 18.5875C18.8042 18.9792 19 19.45 19 20C19 20.55 18.8042 21.0208 18.4125 21.4125C18.0208 21.8042 17.55 22 17 22ZM1 4V2H4.275L8.525 11H15.52

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.07391321234758
Encrypted:	false
SSDEEP:	3:YQZPNVUxXLWFOKaY:YQx+bOT
MD5:	8C11E15DB0F3E1EA036EDBA78ABF1151
SHA1:	72F74F85AA08C65E9927B8D53916A7C45A102D44
SHA-256:	AA011ED383CB780028A85CAAA0DDA67DCE19B0F4BC596F4F708D1857015C1362
SHA-512:	985C2D0148E254CA3386C955DB8F18C02639F156D0FF565BADA0CF91E52A691C504FAEA3A109F9D7CDB4A9C1F6CF48B343EEEEC5803941AE56599411388E4B9A
Malicious:	false
Reputation:	low
Preview:	{"url":"https://scout.us2.salesloft.com"}

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4503
Entropy (8bit):	4.254697565385347
Encrypted:	false
SSDEEP:	96:I3HbulFLHffjZpYVrh5+B0h5ueGokc7HbVGqJ3OEiWwUZpadLmk9+:I3HbuzDffjqrD+B0h5DGof7HQs3OEiWz
MD5:	A5147C49E9961667D16AEA577BA23E46
SHA1:	998D4E1FB265F6890985A33DCF60D62949236CD8
SHA-256:	73996A788024C9AE5079F435CC74001AD72F92D1E917EE07EB4C8501EAC727B2
SHA-512:	72C2906F9623D5908A54FFD2C2C2D63039829006D58384C4A0975CFA0BE0CFDB313EF7EB3A5C64FCD2EF64F6924EE8B5D2FA29940B126020601C56D89D8E159F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_8717)">. <mask id="mask0_2056_8717" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8717)">. <path d="M11 21V19H19V11.9C19 10.9333 18.8167 10.025 18.45 9.175C18.0833 8.325 17.5833 7.58333 16.95 6.95C16.3167 6.31667 15.575 5.81667 14.725 5.45C13.875 5.08333 12.9667 4.9 12 4.9C11.0333 4.9 10.125 5.08333 9.275 5.45C8.425 5.81667 7.68333 6.31667 7.05 6.95C6.41667 7.58333 5.91667 8.325 5.55 9.175C5.18333 10.025 5 10.9333 5 11.9V18H4C3.45 18 2.97917 17.8042 2.5875 17.4125C2.19583 17.0208 2 16.55 2 16V14C2 13.6167 2.09167 13.2792 2.275 12.9875C2.45833 12.6958 2.7 12.4583 3 12.275L3.075 10.95C3.225 9.73333 3.57083 8.63333 4.1125 7.65C4.65417 6.66667 5.32917 5.83333 6.1375 5.15C6.94583 4

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32053), with no line terminators
Category:	dropped
Size (bytes):	32053
Entropy (8bit):	5.252507336832338
Encrypted:	false
SSDEEP:	768:1Qh9egUIFQnhnqr1uaSMI9iAXfny2JJHn4JyxVntE:O/qhGZLI9iAPnyWHnO4tE
MD5:	8EC89C9E9F79EBD0FF7FEBB0BBD251AE
SHA1:	58BAC2999FAA1AAC3FB20457A3B8F7E7EBC1ABE8
SHA-256:	8FF00A19F79ECEB896AB294E00456E123F42D3065855814F1933DEC87533BBA6
SHA-512:	84264004D2A377E25129FB1FDF3983A4B52F589F05E386BB08ACA01829CF4FE04EA701B77551DD9434B51442443AD6EB55133DB9D40E65CCA94C4613A6DD27D0
Malicious:	false
Reputation:	low
Preview:	(()=>{var e,t,r={2505:(e,t,r)=>{e.exports=r(8015)},5592:(e,t,r)=>{"use strict";var n=r(9516),o=r(7522),i=r(3948),s=r(9106),a=r(9615),c=r(2012),u=r(4202),d=r(7763),f=r(6987),l=r(1928);e.exports=function(e){return new Promise((function(t,r){var p,h=e.data,m=e.headers,v=e.responseType;function g(){e.cancelToken&&e.cancelToken.unsubscribe(p),e.signal&&e.signal.removeEventListener("abort",p)}n.isFormData(h)&&delete m["Content-Type"];var y=new XMLHttpRequest;if(e.auth){var b=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";m.Authorization="Basic "+btoa(b+":"+w)}var E=a(e.baseURL,e.url);function x(){if(y){var n="getAllResponseHeaders"in y?c(y.getAllResponseHeaders()):null,i={data:v&&"text"!==v&&"json"!==v?y.response:y.responseText,status:y.status,statusText:y.statusText,headers:n,config:e,request:y};o((function(e){t(e),g()}),(function(e){r(e),g()}),i),y=null}}if(y.open(e.method.toUpperCase(),s(E,e.params,e.paramsSerializer),!0),y.timeout=e.timeout,"onload

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2942
Entropy (8bit):	4.279631007489368
Encrypted:	false
SSDEEP:	48:cD/OtbllHaiYs5JpS5wJ1Wf8nuSAmdzzKbHygikjR2oJpS5wJ1Wf8nuSAmdzzKbv:I2tbll6s/s5wf3VIi6Rds5wf3VMV
MD5:	03EBEB24920704CD48367BE3A86101F8
SHA1:	C4E1FC8C79C5FF23063A488EF0F5F01AF3894E82
SHA-256:	D216F6477B1361FF58B86E1EED961C24573196D10715E4BDA8326B91D2E66AE9
SHA-512:	043179E924C21C17C068F1447A3A2BA6873912D0453F2696E83BFD01E6ACCBE8D45824EE1FD96EC6E0F29AF84F72EF29CAED98C93E74C9332010A02E51A70E33
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8701" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8701)">. <path d="M12 12C11.15 12 10.4375 11.7125 9.8625 11.1375C9.2875 10.5625 9 9.85 9 9C9 8.16667 9.2875 7.45833 9.8625 6.875C10.4375 6.29167 11.15 6 12 6C12.8333 6 13.5417 6.29167 14.125 6.875C14.7083 7.45833 15 8.16667 15 9C15 9.85 14.7083 10.5625 14.125 11.1375C13.5417 11.7125 12.8333 12 12 12ZM12 10C12.2833 10 12.5208 9.90417 12.7125 9.7125C12.9042 9.52083 13 9.28333 13 9C13 8.71667 12.9042 8.47917 12.7125 8.2875C12.5208 8.09583 12.2833 8 12 8C11.7167 8 11.4792 8.09583 11.2875 8.2875C11.0958 8.47917 11 8.71667 11 9C11 9.28333 11.0958 9.52083 11.2875 9.7125C11.4792 9.90417 11.7167 10 12 10ZM6 18V16.1C6 15.75 6.0875 15.4208 6.2625 15.1125C6

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	944
Entropy (8bit):	5.0337130874949425
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FJ6EtHxl+4iEKbsGV7XpZAMxWcZRx5ZwstMZ3/zMu:cD/OtbJlHaiYsGtHDr/P2dVQu
MD5:	A4899912F7ED8664CE46BB610977D442
SHA1:	33118269A4858C8D8DE661704EC2DB43BDF003D9
SHA-256:	F485FFA480B32489046A7AF07EA283486F48A6ED70455A05A582C3E504DCABFC
SHA-512:	4A19BCD377F5728B5E34F32476F50DBA6B555053A9F38C116EBEC7CEBB802C9A8A3F26768FB4D0D959F80FCAEC12B83CFF7B0187CC166A5303E8579239D973D2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7955" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7955)">. <path d="M12 22C9.68333 21.4167 7.77083 20.0875 6.2625 18.0125C4.75417 15.9375 4 13.6333 4 11.1V5L12 2L20 5V11.1C20 13.6333 19.2458 15.9375 17.7375 18.0125C16.2292 20.0875 14.3167 21.4167 12 22ZM12 19.9C13.6167 19.4 14.9667 18.4125 16.05 16.9375C17.1333 15.4625 17.7667 13.8167 17.95 12H12V4.125L6 6.375V11.55C6 11.6667 6.01667 11.8167 6.05 12H12V19.9Z" fill="#030352"></path>. <path d="M12 19.9C10.3833 19.4 9.03333 18.4125 7.95 16.9375C6.86667 15.4625 6.23333 13.8167 6.05 12H12V4.125L18 6.375V11.55C18 11.6667 17.9833 11.8167 17.95 12H12V19.9Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2683), with no line terminators
Category:	downloaded
Size (bytes):	2683
Entropy (8bit):	5.8630092873647826
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08d8c3QkshG9sKyX2w6:wsbSUtJfxrqLWWWdV6j1h8MGS
MD5:	3766C3CCC3ABCC7EC0699AC76CAE9C09
SHA1:	09FD039D66D7C40C60CDE2DD3C7CD66A5C524B6E
SHA-256:	A813E55A0476088D3CC8EFE25A407BE3D95671F6A9B9B3B465463A243005349A
SHA-512:	F8B899F8D67D251AD1E0B1211EAFF05F2D76AF22845999FEB59030324A9A8B0ED3347CBF8DA9F44706FEDF18FCEDE28744899AA52759E7463972C714A0534FA2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1018022215/?random=1713961964710&cv=11&fst=1713961964710&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	359
Entropy (8bit):	5.012260085628156
Encrypted:	false
SSDEEP:	6:YLzzAJnwALXZfr40csUwALXZfAsUwALXZfEL4UwALXZfr4+k9wALXZfTzmKrofY:YLfAJnwaZtcNwaeNwayMUwaZRk9waJmU
MD5:	E4F0317EF95D6C7E6BAFF13D39884BF6
SHA1:	83624E0CFAFCCE1349BF6D18B0889D379C7DD7F5
SHA-256:	070BCF30EDA3907BEB045318585BCDC193EBCAF0170EF8C3B4CA90A936A9B7AF
SHA-512:	F5AB6BD1D542635836E259713132849ABBF5ED644D2FF7F4AD743E86BCE3C50355AFBC5869F5BDF81AA288DEEC9264D162EAD224941F716B8DCC9BA4583D787A
Malicious:	false
Reputation:	low
Preview:	{"pixels":{"ADWORDS":[{"pixelId":"1018022215","limitedDataUseEnabled":false},{"pixelId":"984957836","limitedDataUseEnabled":false}],"FACEBOOK":[{"pixelId":"539386581403116","limitedDataUseEnabled":false}],"LINKEDIN":[{"pixelId":"337330","limitedDataUseEnabled":false},{"pixelId":"4355042","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2508
Entropy (8bit):	4.329420787936661
Encrypted:	false
SSDEEP:	48:cD/OtbvlHaiYsvOOiWiryfQtzRFeae3OOiWiryfQGu:I2tbvl6smOxfIhRFeleOxfIV
MD5:	E0A72D44A0B70BF64646E31409A53C2C
SHA1:	9C1D0DBDBF19B24008B7842AEAC41AC896D1C69A
SHA-256:	2EEE69C85FC0BC9FF896145549D7549D92CDB5806F9B27B1B0A98EA259E59599
SHA-512:	6DAD5248DC70DFC62D927500AF08C0FC7BCF2CDBE52C7D277AC7A8D7CF2E7883A9B0D259272E35A1F53667223860F43A884DCFD5CB91CCBC65AB2134A606C17E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8668" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8668)">. <path d="M8 11C8.28333 11 8.52083 10.9042 8.7125 10.7125C8.90417 10.5208 9 10.2833 9 10C9 9.71667 8.90417 9.47917 8.7125 9.2875C8.52083 9.09583 8.28333 9 8 9C7.71667 9 7.47917 9.09583 7.2875 9.2875C7.09583 9.47917 7 9.71667 7 10C7 10.2833 7.09583 10.5208 7.2875 10.7125C7.47917 10.9042 7.71667 11 8 11ZM12 11C12.2833 11 12.5208 10.9042 12.7125 10.7125C12.9042 10.5208 13 10.2833 13 10C13 9.71667 12.9042 9.47917 12.7125 9.2875C12.5208 9.09583 12.2833 9 12 9C11.7167 9 11.4792 9.09583 11.2875 9.2875C11.0958 9.47917 11 9.71667 11 10C11 10.2833 11.0958 10.5208 11.2875 10.7125C11.4792 10.9042 11.7167 11 12 11ZM16 11C16.2833 11 16.5208 10.9042 16

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1480
Entropy (8bit):	4.922095174075952
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FP6EtHxl+4iEKbsKJ1oc8iPLDQQhe3MODVVn54Fi7DZWgumSwJMM7A:cD/OtbPlHaiYs+1oZcLkQhA7Vn54UPZI
MD5:	3DE326EBABD7D4A9B8D9E3636DFEAA81
SHA1:	4E8350BAF644F8C927DEC4FDA0FDAAEAB45AC4F7
SHA-256:	4CC8F503B763352B3C9FA3D289934128BB3D71B4AD15F18343B4DD31F5B939C7
SHA-512:	3633BEA371BB4EB7282A6CC6AEF36E9417B0555B660FD1C11B9AC36550F27B8F04BA7188E3B16BEC257AFE73B9DAF627988601C5E528F52F5D430FA04AE6379F
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/real_estate.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7979" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7979)">. <path d="M19 14V7.5L14 4L9 7.5V9H7V6.5L14 1.5L21 6.5V14H19ZM14.5 8H15.5V7H14.5V8ZM12.5 8H13.5V7H12.5V8ZM14.5 10H15.5V9H14.5V10ZM12.5 10H13.5V9H12.5V10ZM7 18.5L13.95 20.4L19.9 18.55C19.8167 18.4 19.6958 18.2708 19.5375 18.1625C19.3792 18.0542 19.2 18 19 18H13.95C13.5 18 13.1417 17.9833 12.875 17.95C12.6083 17.9167 12.3333 17.85 12.05 17.75L9.725 16.975L10.275 15.025L12.3 15.7C12.5833 15.7833 12.9167 15.85 13.3 15.9C13.6833 15.95 14.25 15.9833 15 16C15 15.8167 14.9458 15.6417 14.8375 15.475C14.7292 15.3083 14.6 15.2 14.45 15.15L8.6 13H7V18.5ZM1 22V11H8.6C8.71667 11 8.83333 11.0125 8.95 11.0375C9.06667 11.0625 9.175 11.0917 9.275 11.125L15

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:GWn:GWn
MD5:	5F649E24AFCD658CCF64513A5CE71950
SHA1:	A28B1E3EFFEABE43F91BB03F435C1276B1B08ECE
SHA-256:	85F2EF987B76F4C3FC081ACEF84E0A730F5DF8A2488A5BB7DDAE4F7DEE721ED8
SHA-512:	8FA1F315267F724BA5C8817B7D518423A299CC60A168BC62A545732814CE4138B2AE8D3E8C6AEA8B5C0FDB69EEF339B36672691B7791EE037A5F188ECB6AD24B
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG61GV&sid=tCEDyrh5I7R_YWX3AAtQ
Preview:	1:3

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2460), with no line terminators
Category:	downloaded
Size (bytes):	2460
Entropy (8bit):	5.200523062168502
Encrypted:	false
SSDEEP:	48:8psdy65wmpkukpwWOdkpw8uIbp41wkpwjK4kpwlln:asdyZIQet+eDSp+lejwej
MD5:	E04EB27150C6E056CAB7182783615756
SHA1:	66BED41B0D06C464177F182481A8FE3085502879
SHA-256:	EB6079573982D341F1BBF5E6596330B561644297F93904203554F52990FA79BE
SHA-512:	2ED0D05A08142D2D15C9AED82343EEDD3B5A2A86E4179DB024042459CE3F3BF6F4878904F636277DA5A4B7D111F98C7A063AFB477E2BD275A4122E0D564B7F03
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hs-scripts.com/143456774.js?businessUnitId=16226724
Preview:	!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js-eu1.hs-analytics.net/analytics/1713959400000/143456774.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hsadspixel.net/fb.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hs-ads-pixel-143456774",0,{"data-ads-portal-id":143456774,"data-ads-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":143456774,"data-hsjs-env":"prod","data-hsjs-hublet":"eu1"});!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hubspot.com/web-interactives-embed.js",n.type="text/javascript",n.id=t,r)r.hasOwnProper

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3694), with no line terminators
Category:	downloaded
Size (bytes):	3694
Entropy (8bit):	5.3874142459906045
Encrypted:	false
SSDEEP:	48:i7APJhjQpAPdceMH06SLCxaZkNCAYernTKTOqaQZK9YnHLcuE/ozeMOXrPFJMW7U:zEqceMZSuxDNC6GOKUYnHoXVXr3MWLxu
MD5:	348781FF9702931175942EAEBE45F2A7
SHA1:	9C46D4A2EDCECC03990FF7FFC76AE568CA12C3BE
SHA-256:	45D2A84E27CAEF71D99260CA9A84179524B89BA3E2C2DF3F976BDFB5756561D5
SHA-512:	78E68BC0D4A16CE31D923AC4DB86B7400B5EDE16BC3BA0228B044A286308C48C42B357108048B113DA0FF365AF1E2468E7AA45CED9C4D8EED5B0AB5A68BFB99A
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/common.js
Preview:	"use strict";(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[592],{39108:(v,S,s)=>{s.d(S,{l:()=>c});var l=s(4316);class c extends l.J{constructor(u,o,h,e){super(o),this.signatureDocument=u,this.sgDocumentService=h,this.signatureService=e}}},88052:(v,S,s)=>{s.d(S,{V:()=>h});var l=s(80529),c=s(69751),g=s(35987),u=s(27471),o=s(94650);let h=(()=>{class e{constructor(n,t,a){this.sgRouterService=n,this.http=t,this.signerTokenService=a}validateSMSCode(n){return new c.y(t=>{const a=this.sgRouterService.getPath(n.validateKeyUrl,n.parameters);let r=new l.WM;r=r.append("X-Signer-Token",this.signerTokenService.getSignerToken()),this.http.post(a,n.validateSMSCodeBodyReq,{observe:"response",headers:r,withCredentials:n.withCredentials}).subscribe(d=>{const _=d;403!==d.status?t.next(!0):t.error(_)},d=>{t.error(d)})})}requestSMSCodeSending(n){return new c.y(t=>{const a=this.sgRouterService.getPath("request_sms_code_sending");this.http.post(a,{document_id:n},{observe:"response",withCred

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (571)
Category:	downloaded
Size (bytes):	521478
Entropy (8bit):	5.685644632771314
Encrypted:	false
SSDEEP:	12288:wTJgZFvbm8TMawBf8ML8Vo1ukgO1aCZLQdPXOwI6B9FEIXXZN/Yw:KB2Df5N/Yw
MD5:	6640C08386297623C559734BAD2C788B
SHA1:	08A0F7DB6D33E3B18F8EF92008CAD221C3455BAF
SHA-256:	3AC82B4221DE9F66108FADC09B7230AF6A1ADD951721FCC6CD87870262735CBE
SHA-512:	081F51704AC5CE768C57EF52426AFEE116305F4ADE30B34FC2F9B82571724E71DF9C3732A4B93E3DD03E2FDB98339A10CE0A5D6587855FCF387A7153F5DF0CCB
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__es.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.106262538423903
Encrypted:	false
SSDEEP:	3:N8alfX7LAITzWA6hPn:2axHuNn
MD5:	E4D16E215BDE31E68068DD054980F268
SHA1:	76AAE116AD0A52DCF09DA53D74C276FD2EC82B3B
SHA-256:	9A11602FE70C22192BA7D63C73F7AE50C998827859B179133F526DC30A2A0A00
SHA-512:	8B123AA3DB895EBAC63AD8A80242E146CD67FCA5D52EF58FA9EA48CD9658D9AF2F87CFF6D154EAAF71E2C0ACA88E173877F9083BC2CD098FAEB65597D98FFD9A
Malicious:	false
Reputation:	low
URL:	https://appvizer.one/rest/ariadne/v2/script/AP-0
Preview:	https://appvizer.one/ariadne/v1/ariadne_scraping.js

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	968
Entropy (8bit):	4.989669201309964
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Ff6EtHxl+4iEKbsrXUudXs7RnrnGJqMiEjSp8wV:cD/OtbflHaiYsrEuqVgiE0bV
MD5:	430ABF249020D16A0D05C1E8C86E8DD8
SHA1:	C35D96F6103F89DE5075F9E60290B2A75CE14EBC
SHA-256:	2EA606292FE37B465A61FF509D86BF8C5DEB8D4C51D117DE4F0624E73B930946
SHA-512:	CBB6B99F6D63D365BE664C74E755663B76EE46706300F610686543C5BB0B1DF23444E2C1FD78C2B471E3AA601A420395621627CB33EFAC5641BDB0C49DF9CA71
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/customer-reviews.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7913" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7913)">. <path d="M2 17.0001V3.00012C2 2.71679 2.09583 2.47929 2.2875 2.28762C2.47917 2.09596 2.71667 2.00012 3 2.00012H16C16.2833 2.00012 16.5208 2.09596 16.7125 2.28762C16.9042 2.47929 17 2.71679 17 3.00012V12.0001C17 12.2835 16.9042 12.521 16.7125 12.7126C16.5208 12.9043 16.2833 13.0001 16 13.0001H6L2 17.0001ZM15 11.0001V4.00012H4V12.1251L5.15 11.0001H15Z" fill="#0A0AF4"></path>. <path d="M6.2875 17.7125C6.47917 17.9042 6.71667 18 7 18H18L22 22V7C22 6.71667 21.9042 6.47917 21.7125 6.2875C21.5208 6.09583 21.2833 6 21 6H19V15H6V17C6 17.2833 6.09583 17.5208 6.2875 17.7125Z" fill="#030352"></path>. </g>.</svg>.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	5.0543087997432155
Encrypted:	false
SSDEEP:	3:j8HNvEWSXSg8smDHeoUSS1M0YJ8TWEJ/XA/o2TAKQR/FVQXLn:8EWSCy05UznYJOWg/w/o2kR9aXL
MD5:	F26EEFE5E5B1C26727C626172D707C49
SHA1:	4B7357207181C19140402DD26C5384D9B69FE73F
SHA-256:	11782DD5E8502B73B6FDEA93496E1AFAB4F8F9FB070533C86DA312A786ED34F7
SHA-512:	4627F7374FEE2029BCC7C2E9A06351D70794B58A36CF0E7677D8E5F5391EEBB24921250EF546F10B4B999F4577A506971556286BF693B82497802C774BB7B97A
Malicious:	false
Reputation:	low
Preview:	97:0{"sid":"OZ37Y9kCnW7gzEYIAA1f","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13407), with no line terminators
Category:	downloaded
Size (bytes):	13407
Entropy (8bit):	5.388297201448889
Encrypted:	false
SSDEEP:	192:HwhNU48WUq1ut32SXB/7yV7+vUt04a4zzfHGiRF1Aqpn2vitP4+jHTmFB1J:mNaXzda77zeiP1AqhqB1J
MD5:	AE67B09C4C952BEAC81B0255A26B2FC5
SHA1:	1C3766C1D2AB69DA6CFFACCD97145869681E13B9
SHA-256:	EF63532CCABA8EC01784418D9F2F5D6AFA593AD03C8362AA55DDEA08D3569C18
SHA-512:	1B160FE7D23F03365DAA426C2724727CAF2EB352EC3BEF319E28BF9C29184F01AE77954F6358931C11BA77FFBADF3AC2BE870E8750C758DFFED153950797A4D2
Malicious:	false
Reputation:	low
URL:	https://account.signaturit.com/636-558c93c544.js
Preview:	(self.webpackChunkauth_app=self.webpackChunkauth_app\|\|[]).push([[636,480],{39917:function(e,t,a){a.d(t,{Z:function(){return Z}});var n=a(87462),o=a(4942),r=a(98152),i=(a(66992),a(41539),a(33948),a(37268),a(66489)),l=a(23972),c=a(73891),s=a(14290),u=a(41054),d=a(67294),p=a(85278),m=a(92329),f=a(39126),h=a(19501),g=a(22650),b=h.Ry().shape({code:g.Gb}),v=function(e){return e[e.code=1]="code",e[e.createCode=2]="createCode",e[e.finish=3]="finish",e}({}),E=a(959),x=a(62702),w=a(11923),k=a(98568),Z=function(e){var t,a,h,g,Z,_,y,C=e.statusCode,S=e.statusPage,z=(0,p.$G)().t,O=(0,d.useState)(!1),L=(0,r.Z)(O,2),B=L[0],P=L[1],R=(0,d.useState)(v.code),j=(0,r.Z)(R,2),I=j[0],F=j[1],G=(0,m.hQ)(),D=(0,r.Z)(G,2),M=D[0],T=D[1],Q=(0,m.KO)(),A=(0,r.Z)(Q,2),N=A[0],V=A[1],W=(_=I,(y={},(0,o.Z)(y,v.code,{title:"auth.twofactor.title_verification_code",subtitle:"auth.twofactor.subtitle_verification_code",text:null,form:!0,button:{text:"auth.button.continue",color:s.Color.primary,type:s.ButtonType.button},createC

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	5361488
Entropy (8bit):	5.493243309889851
Encrypted:	false
SSDEEP:	49152:dyJU5XeQ4aGROC3bztMl2T3XngCot8iFOUATvsc7L4S1eCgY6QeIA8BaEVYJRfdg:2h3XtMl2T3XngCot8ioYCF
MD5:	7DF74544A09D09543E1708CC11325DDD
SHA1:	2C621F2A0E20A7D6F7B8237A7BC4D868BF514D8F
SHA-256:	EC6939FEFA510E4089E0353D55A44AA9DEB3D280C9B875ADB424AD5EB27877FF
SHA-512:	0941C4371E03467C330B7CE88BD17EC5CA7188D881B652E288EFA850A17074485B03049A1AC400C91169D1F38D0CF72749C3D9FC1D82A8DB39FC9BC6117B5D2F
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/main.js
Preview:	(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[179],{22489:(lt,M,r)=>{"use strict";r.d(M,{qj:()=>No,NG:()=>qa,M:()=>ki,J4:()=>Er,IJ:()=>ks,Ly:()=>Us});var n=r(97582),t=r(94650),g=r(36895),s=r(24006),_=r(77579),l=r(61135),m=(r(39841),r(5963)),C=r(69751),O=r(25032);new C.y(O.Z);var E=r(54968),j=r(56451),H=r(38421);const{isArray:ot}=Array;var U=r(25403);var G=r(54004),yt=(r(68675),r(71884),r(63900)),rt=r(82722),Pt=r(39300),F=r(95698),tt=r(18505),Tt=r(54482),St=r(44671),et=r(63269);function Rt(...p){const N=(0,et.jO)(p);return(0,Tt.e)((d,S)=>{const st=p.length,kt=new Array(st);let Fn=p.map(()=>!1),jn=!1;for(let le=0;le<st;le++)(0,H.Xf)(p[le]).subscribe((0,U.x)(S,Me=>{kt[le]=Me,!jn&&!Fn[le]&&(Fn[le]=!0,(jn=Fn.every(St.y))&&(Fn=null))},O.Z));d.subscribe((0,U.x)(S,le=>{if(jn){const Me=[le,...kt];S.next(N?N(...Me):Me)}}))})}var Ut=r(34986),zt=r(97272),wt=r(69718),Xt=r(95577);function Vt(p,N){return N?d=>(0,zt.z)(N.pipe((0,F.q)(1),function Ft(){return(0,Tt.e)((p,N)=>{p.subscri

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2544
Entropy (8bit):	4.467189474617236
Encrypted:	false
SSDEEP:	48:cD/OtbllHaiYsKPJRRUb1JmmMwjZsnWd8GScTdSLzt8ysihVDwc+u:I2tbll6sKPJRRCmmM2sWycM6ohVDj
MD5:	3A2E36B158C51B58CCD2F41F9BC99C79
SHA1:	A9FA68322DF82009EEE7ED03D846570CA4DCF9D3
SHA-256:	B4BD501A2BA337DED494BA18E56A0E72E20111C7BAC837D7FEF089DC6576A4D1
SHA-512:	593F803E6210E654251AC6BB91CE386265AC51E86ED11EB56C7021C59580F2C60FE3C5CBCC5FDD4F5B2238DCA12FF755318551FB52601E8FACBA1A0E32634D39
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/qualified-certificates.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8680" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8680)">. <path d="M4 20C3.45 20 2.97917 19.8042 2.5875 19.4125C2.19583 19.0208 2 18.55 2 18V6C2 5.45 2.19583 4.97917 2.5875 4.5875C2.97917 4.19583 3.45 4 4 4H20C20.55 4 21.0208 4.19583 21.4125 4.5875C21.8042 4.97917 22 5.45 22 6H4V18H12V20H4ZM6 11H11V9H6V11ZM6 15H11V13H6V15Z" fill="#030352"></path>. <path d="M6 11H11V9H6V11ZM6 15H11V13H6V15Z" fill="#0A0AF4"></path>. <path d="M18.5 15.3333C17.9271 15.3333 17.4401 15.1389 17.0391 14.75C16.638 14.3611 16.4375 13.8889 16.4375 13.3333C16.4375 12.7778 16.638 12.3056 17.0391 11.9167C17.4401 11.5278 17.9271 11.3333 18.5 11.3333C19.0729 11.3333 19.5599 11.5278 19.9609 11.9167C20.362 12.3056 20.5625

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	5.127089249997475
Encrypted:	false
SSDEEP:	24:2d6TU/dq6I5F56EtHxl+OKTA13PH2TIy3wv2qE1WoxGDwtDMoLaFaMh1MowAEK9p:cD/PIb5lHaU1WAItociPpEowt9A
MD5:	1002B6E61E56324F151B7257DAAE8C42
SHA1:	B20E412DE7280F92BC411284D6239B39DBD955ED
SHA-256:	9D7C0B22E2C8071A653C75E9C26C3C1F0EF51964E00718D577D9C38A9B862800
SHA-512:	FD5830CD67BF01D8BCF09E88718D119B092C04E63C9B0E132345B631B802B66A392CF05C3CFA3FF694AA1443C0AD7C5FC0E395F97578902E3D821DA07A638232
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_2056_8712)">. <mask id="mask0_2056_8712" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="80" height="80">. <rect width="80" height="80" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8712)">. <path d="M5 19V15H4C3.45 15 2.97917 14.8042 2.5875 14.4125C2.19583 14.0208 2 13.55 2 13V11C2 10.45 2.19583 9.97917 2.5875 9.5875C2.97917 9.19583 3.45 9 4 9H8L13 6V18L8 15H7V19H5ZM14 15.35V8.65C14.45 9.05 14.8125 9.5375 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6833 15.3625 13.3125 15.0875 13.8875C14.8125 14.4625 14.45 14.95 14 15.35ZM4 11V13H8.55L11 14.45V9.55L8.55 11H4Z" fill="#030352"></path>. <path d="M18 10.9998V12.9998H22V10.9998H18Z" fill="#0A0AF4"></path>. <path d="M16 17.5998L19.2 19.9998L20.4 18.3998L17.2 15.9998L16 17.5998Z" fill="#0A0AF4"></path>.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://account.signaturit.com/b009a76ad6.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	362
Entropy (8bit):	7.3226644758258965
Encrypted:	false
SSDEEP:	6:pZHGN05D4pUFNgSWN/cGl8KeSToD3mbGN6fhTvUiodN9vtgFt4esnOHy6a6UWAjX:leI7WlhlJhobmqofhLUisgFWeDyP6l4X
MD5:	3FC383430621668CFEFFCC56877AB033
SHA1:	86EF711F3BF0E3945F5D5AD2554F2AA9AEA98931
SHA-256:	85619D84B4BBE2D48EE1149BED5600D64201BA73DBAA57111533822F0DC9D6D3
SHA-512:	9285E4FDB1557E29DA67F3771E414B6789CDD359A1DEB88A22E2AC4DEE3DAC443F275BD307BB8CA69B606F8AE3A9B3AFDC87AE7054C091AD25E800A1E818149C
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/images/favicon.png
Preview:	RIFFb...WEBPVP8LU.../......m#I....73Mh0l.6R....Kbi...m...w7.F..S....My..]..nv........@Q.#.H.......].E..P.%!..Q.-!A......P.].....H.AQ4@.....W.*.U.JU.. .m:.;F.m.J.x.S.U.@D.' ....C..U.\+y..WPo.?\..Z^___.4.....,..txj.......+.....,.u.&\|...g.M.....o......G#.n)Os..J...L..ov.^.`..irr..va...2.V.0k.~.o.3.........Z..?,...O\...m....u.fw}..].5x..W...j.`.....

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	644
Entropy (8bit):	7.397813265411628
Encrypted:	false
SSDEEP:	12:6v/7iwU7XDTPLt2RCGhQWelCVWO1S4idiJYGJFXsL9O1GIXz3efRyz:n7PJ2RCqNVnidiZWZVRfRo
MD5:	47D14989ABF79837CCDE8374605D7A0E
SHA1:	CF00F9A6F034E456090949763177C34C3967449F
SHA-256:	9B157D48FC67238E5CA4C1E724632B649AA6CB20D9771A27936FB1E8F7A61003
SHA-512:	0FAFE067917D2B8C5F849225E44A1A91DCA48168919D2B7488D0236FE875B396174A3D82A1F71B0B45CD55C797601CF20A58AFBB5357C4E3101B3EF7A82B40B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....IDATx..=K.P........."........m....\T.."..&.....N.J.@).fj..tn.m>.M..&.zK.Z.........''.9'Gr...FxpP.m..._....3...D.... .o..$K<...t...&....}..+.x.....77..Q....`uUC&c.0.S..%6...:.....".".`tTA......-..S.B:...'.......@0.....I.[...P.p{kx_.GG....5..X^.\...3...z..^_M....,[..7...LL.....S.....{..j....%...0.....VW.z....=.......OO&.U...ggUo.........R1....c@....{..q.\..M1....h.........v.....0....b.0>. ..... .......L6Y{....CpyIQ(.M8=-.CC.K...0.....2d.gg..r..'.H$.........t...NO)..33.k..../&~.fY.Y.}\N.$....z..g..$I.n..G.].....IEND.B`.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57478
Entropy (8bit):	5.324677020710066
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyY2YwsxcmAG:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyQ
MD5:	0CA4F99E8F88F9D2F8BBA5C74A16BD62
SHA1:	702452C5943C59B4C443EAFA9ACBAFDA8A10E42C
SHA-256:	151594F8B46526DFD9DCC30F03408346ED4B9D83FE3AE9DCEBE40ABF40CD946F
SHA-512:	33081EC13066331BC2089ECFD1C41DA3EEB99A2B3520EBD11CBBFE0E597A93F8526BF8E3EBB0D5D59D4173C4995D969E860034C04B27180C8EE38A8747197572
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/539386581403116?v=2.9.154&r=stable&domain=www.signaturit.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1353
Entropy (8bit):	5.107978283660722
Encrypted:	false
SSDEEP:	24:Y+DFh8lQ3QY6VoKo+x+Ac1hfmRTYRKZInTc1WXwezvKo2Xc1+szKto9GZktwWyZ:Y+h8GnKu1NmxYII1X+/XeFzuo6kG
MD5:	D13C4E1A1DCD91E491DEC52568CB9525
SHA1:	66D4DBEF83EA150FFD1D0A44F0270B08A3E60F5F
SHA-256:	32369E1729E31FCA90D8C14B8097982A185E9EFAD01D9E7D2C1A9E7F6AC3F4DE
SHA-512:	688FFB2B0339347864C6329B6C98EFE09FB3BB862115EEA4653794748E73B7FDC13EE0EFF5CC2DB6D5371B77B3B39FB5540EE83E6DFAD24AB8B035D97DA97882
Malicious:	false
Reputation:	low
Preview:	{"products":[{"name":"web_widget","id":"signaturit.zendesk.com","bootstrap":{"config":{"features":{"answerBotCbpUsage":true,"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#2c352b","brand":"Signaturit","hostMapping":"help.signaturit.com","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"nameFieldRequired":true,"color":"#2c352b","nameFieldEnabled":true,"customFields":{"ids":["1900000545333","1900000545513"]}}},"chat":{"embed":"chat","props":{"badge":{"layout":"image_left","text":"Chat with us","color":"#2c352b","enabled":true,"imagePath":""},"color":"#2c352b","mediatorHost":"widget-mediator.zopim.com","forms":{"preChatEnabled":true,"offlineEnabled":true},"zopimId":"pwcI91sGFmxEtTCDa1631bEHfZpzs4fG"}},"launcher":{"embed":"launcher","props":{"color":"#2c352b"}}},"brandCount":1.0}},"featur

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	625
Entropy (8bit):	5.253038289558972
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKMt5FQEjoh6EtHxl+UdTmdEKGZX4FWQSTd5klPBzQx1aUoZzs8ZgDL:2d6TU/dMt5FtW6EtHxl+4iEKbsTdal2P
MD5:	B17FF0ADA0A8A107EF88C4F8104BAF65
SHA1:	2B11551521AC70F2E6D8A7BAF01DAA136E6E7AE3
SHA-256:	753F7BE087B397B10F3D3EB2308F7106FDBBDE31EB9D1234838B9B29EA0F7E14
SHA-512:	7CC60E83046BF494D6ED78531C45ED2A9E9441A7D1E8F1CD6B6BE85741FCE4BC918584E14B89D13C581E323946D1C2A2C20A73DDBB05A9DC90DF1098306510ED
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7963" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7963)">. <path d="M12 21L5 17.2V11.2L1 9L12 3L23 9V17H21V10.1L19 11.2V17.2L12 21ZM12 12.7L18.85 9L12 5.3L5.15 9L12 12.7ZM12 18.725L17 16.025V12.25L12 15L7 12.25V16.025L12 18.725Z" fill="#030352"></path>. <path d="M23 17V9L21 10.1V17H23Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	835
Entropy (8bit):	4.5555900904061755
Encrypted:	false
SSDEEP:	24:2d6TU/dxqOxDV9pA7gjSjbPTOTq+oA4iPjiI39wVHMG:cD/nqqbA7gjSjvv+34iP6VsG
MD5:	EE0BD9D1AE89190D93FA26693C754EC9
SHA1:	57638CCEBC22B878199AF2112810FC14160D502B
SHA-256:	74BD57E5AA73F1385CFF753195187C4C6BD637B351D67F0A1EE9E420BF77C8D0
SHA-512:	7DA91D2E64F49481E6A5E6616EAEE067BA00499971CA60BD0F7F4F3AB45FF237181D68728F07172716154846A110563F9D7190F87AE0E230AE040F2C20DC9BCE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <path d="M11.9008 22.101C9.58401 21.5176 7.67141 20.1884 6.163 18.1133C4.65459 16.0382 3.90039 13.7339 3.90039 11.2004V5.10013L11.9008 2.09998L19.9012 5.10013V11.2004C19.9012 13.7339 19.147 16.0382 17.6386 18.1133C16.1302 20.1884 14.2176 21.5176 11.9008 22.101ZM11.9008 20.0009C13.6342 19.4508 15.0676 18.3508 16.201 16.7007C17.3344 15.0506 17.9011 13.2172 17.9011 11.2004V6.47519L11.9008 4.22508L5.90049 6.47519V11.2004C5.90049 13.2172 6.46719 15.0506 7.60058 16.7007C8.73397 18.3508 10.1674 19.4508 11.9008 20.0009Z" fill="#030352"></path>. <path d="M10.8513 15.6507L16.5016 10.0004L15.0766 8.57532L10.8513 12.8005L8.75124 10.7004L7.32617 12.1255L10.8513 15.6507Z" fill="#0A0AF4"></path>.</svg>.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64512)
Category:	downloaded
Size (bytes):	68469
Entropy (8bit):	5.30146151082092
Encrypted:	false
SSDEEP:	1536:MCO9kVMtvaEpWJIV0nZXPNtWGqscVDXXl6lzlIgEXETjX80uoEFfOpDw6usi5TK4:FNPqYlzlIgEX+Z7e
MD5:	DB51F75A88462F28B955DFB366E51596
SHA1:	E0CE378BBD88FDFD859EE9FCEC7B620285C804E1
SHA-256:	74699972596C4915ADD4F5F6149D905A3961A3EAE0C4E89BD1F0E072D23F4CF7
SHA-512:	2B49E360530973259DF65C1D9B2D235D87BD18B362F707A5617960BB0B69697E6733ABACC1CB87E2178A4458F3416D82617F5AE0FED85994D1D1F5C7A78480FD
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hs-analytics.net/analytics/1713959400000/143456774.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.639. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];.var _paq = _paq \|\| [];._hsq.push(['setTrackingGate', 'AnalyticsTracking:UseHashedDomains']);._hsq.push(['setPortalId', 143456774]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '115452825']);._hsq.push(['addHashedCookieDomain', '205882892']);._hsq.push(['addHashedCookieDomain', '77344330']);._hsq.push(['addHashedCookieDomain', '55366260']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '87680967']);._hsq.push(['addHashedCookieDomain', '157971941']);._hsq.push(['enableAutomaticLinker', true]);._hsq.push(['embedHubSpotScript', 'https://js-eu1.hs-scripts.com/143456774.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track-eu1.hubspot.com']);./* _anon_wra

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16920, version 1.0
Category:	downloaded
Size (bytes):	16920
Entropy (8bit):	7.986131155800774
Encrypted:	false
SSDEEP:	384:DzZ5YU6AOVrubVRaa3HVgdeK1clHK0UmwMHSIoBUHqUAr35:55YUJOVrwRalEqSHK0vwMHroB335
MD5:	7CDF5112CE774E4502744DE08767610C
SHA1:	D0722DCA0BC59E8E33BFB18AEFDEA8B7B2740AC3
SHA-256:	FD1C06A54485DA5519197B2728F437229EA78F5DF4B493FC442D2A8B40B4C9FE
SHA-512:	AAC7335EA78B781A82AA85A005827499302F3DA48F8F5E75E292136F13882F390DE668865041F7C3DFEAA1F1B2C5204E74621D45476A65ED14C281D16E5D4596
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/fonts/N27-Bold.woff2
Preview:	wOF2......B........H..A.........................?FFTM..6..2..D.`..^........A..$..6.$..D. ..]..k.T.7.6..a..$..:.....D.{n>..f.H.....T...vGTeD.P..zDv.A..tr+.:E..iW..g.m2y...........n......v....c\|.es.Mt=.......?V.X.,y..=a6\|.`...`..D..FS...7.v.Ue.8...&![..v.3.m.Or.........".tb%......s.{o.Fo..=RBz.$Fl...mT.D......S" ". ""V`..Gh.P..........$._....ww..F".P..K$.Ei..P...L....nh..uM:?..l..P..tZ..Hv2..&: ,.k..i$+..3..X.4.ng'.TbG..v.Q.d{......ZB.Q..(.....=.$knIrtj..;).0`...u.[..&.%miR.u.q.=...2.Xg`=0..w...l.?.......^2.m`..!.u`.!.Q.}4..W.r.c..O%,....f.CV.j*x...\|h.j...._...CI.....%...J.;.....(..%.t..X.............}...........Xp...Hco..:MC~3..Sje.,.8..c..`..s..\|..pN...JvQ..[_Q.t5...$@0...#.B.m..)8h.3.I...\|..R.....E..jS..cu.z.X..[.!.m..5...q,...C.x.o_...z.m..dq."...%...o...).E.....a...u++~...(8R..........{?I..?.1..~..\.........6.<.P....L..@`....+V...3]}A..[.R@......#.r.=.....w.N.v....U_...UD_.\.f.G.##.D_. U.....K..".(..Z...N..+a..>.v...bW..S..Di.c...T.L/.!Hg.B.D(..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkIsNzFuP1_-RIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2566
Entropy (8bit):	4.977668896253467
Encrypted:	false
SSDEEP:	48:YL32ppeI/sqm18sHtB34/YlAcCpvpeI/sqmTmsHbBxe8IYlSgDpS+Pnk+y20:mU3Pm34wlo3omAxLRlSg3yt
MD5:	17B71BA7D30B3EA0949D47552BC6E0D7
SHA1:	0D65A378D66D28CBEE30971FD728A15FD40D4B78
SHA-256:	F8417C971AEFAD1FEF3CBF59167F33AA4A33F4343DEA05F2F9A1BC4CB34550BC
SHA-512:	923C6B29DEFD18E0529000E4DC08B71981BCD9AEBDF3721C7C27C9D0C782794059BA0D28E9778BD07D4AAE5A1B4F438BA297B339CF2796B64334510CEC3B0C55
Malicious:	false
Reputation:	low
URL:	https://app.signaturit.com/app/signatures/c3142696-0fbf-46ef-a245-5bb543bcb92c/documents/6248316d-8590-4dd2-9d39-fe90a1423256
Preview:	{"branding":{"application_texts":[],"hide_signaturit_box":false,"show_survey_page":true,"side_menu":true,"signature_color":"blue","skip_terms_and_conditions":false,"welcome_page":true},"data_info":[],"documents":[{"photo_id_validation":[],"document_order":0,"file":{"dimensions":[{"width":595.32,"height":841.92}],"front_page_preview_created":true,"id":"c6cea787-adfc-4c24-b993-db4e4561c7e0","name":"Anexo_Depau_2024.pdf","pages":1,"previews_created":true},"has_been_opened":true,"has_passed_sms_code":false,"id":"807c9505-1b05-40d7-bb68-6b862cb7d57f","non_customer_enterprise_signer":false,"part":0,"position":[],"required_audio":0,"required_file_attachments":0,"required_pages":[],"required_photo_ids":0,"required_photos":0,"sequential_current":true,"signer_email":"antonio.navarro@dlink.com","signer_name":"antonio.navarro@dlink.com","sms_validation":false,"status":3,"user_type":"signer","widgets":[{"id":"59069663-0f88-48a7-85c6-a3c7061e14aa","custom_id":"signature_0","widget_name":"Firma","typ

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3074
Entropy (8bit):	4.176952073273879
Encrypted:	false
SSDEEP:	48:cD/4l37+oQwDZs1Q/r7ckrIxBO+5hij+FRXCp8aqvsyPtqBVBVUg9o:IAzOa/HcXBO+5hiKDXC7qKV4Eo
MD5:	EBB8565DD6E59E8D6AAE393275087431
SHA1:	13FEC08DF51FA5A1BF80E1175977935C5CA4A008
SHA-256:	FF2FE35E4D5F53A0E83BE34CE117327242A0EC7ED8071FBAF9DB5D9B1BC518AF
SHA-512:	3910C14E95A7D3624AF3C0884A6DCD1D4FAA7D42221065AB6D47F279BDF981B5739169D86CC592C5ABA76E7CD1B0ADE56E74F791EE154FAFEFD3F536E0354066
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/instagram.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <path fill-rule="evenodd" clip-rule="evenodd" d="M6.09421 12C6.09421 15.236 8.71754 17.8594 11.9536 17.8594C15.1896 17.8594 17.813 15.236 17.813 12C17.813 8.76395 15.1896 6.14062 11.9536 6.14062C8.71754 6.14062 6.09421 8.76395 6.09421 12ZM11.9536 15.9844C9.75307 15.9844 7.96921 14.2005 7.96921 12C7.96921 9.79948 9.75307 8.01562 11.9536 8.01562C14.1541 8.01562 15.938 9.79948 15.938 12C15.938 14.2005 14.1541 15.9844 11.9536 15.9844Z" fill="#CECEF5"></path>. <path d="M18.4692 7.07811C19.2458 7.07811 19.8755 6.44848 19.8755 5.67186C19.8755 4.89523 19.2458 4.26561 18.4692 4.26561C17.6926 4.26561 17.063 4.89523 17.063 5.67186C17.063 6.44848 17.6926 7.07811 18.4692 7.07811Z" fill="#CECEF5"></path>. <path fill-rule="evenodd" clip-rule="evenodd" d="M6.68834 23.8535C8.46157 23.9614 10.2328 24.0039 12.0005 23.9997C13.768 24.0039 15.5393 23.9614 17.3126 23.8535

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1141)
Category:	downloaded
Size (bytes):	5399
Entropy (8bit):	5.257023627737016
Encrypted:	false
SSDEEP:	96:TwudSP9NP3PeOOoYmwsPJu/C+6CiwFfFIkqOIzNPWrXl8UfFvj:UP9NP3PeOOoYmwsPk/C+6CHFfFIeIzw5
MD5:	AB2A41828D2BE2B93BA125C6CA42286A
SHA1:	C14A8BFABDCEC236D93B449E89C3EEA3DBA43E78
SHA-256:	24652006B516774C5340159D4EE4F018DCD36DE1D040FC360F38E7FAD783C775
SHA-512:	D2EAE235A1D48B67B7FEA6E9BDF15E0EFE35A942F51D4302465C09992ADAC4F0AC625EFD66649C122B6AAD174382E2D9FE45B5F4270471D1348AD535D7DDD71E
Malicious:	false
Reputation:	low
URL:	https://sign-app.signaturit.com/en/9763b81/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256
Preview:	<!DOCTYPE html><html lang="en"><head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="">. <meta charset="utf-8">. <title>SignApp</title>. <base href="/">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">. Favicon -->. <link rel="icon" type="image/png" sizes="16x16" href="https://dag0091vkqtc7.cloudfront.net/static-files/favicon-16x16.png">. <link rel="icon" type="image/png" sizes="32x32" href="https://dag0091vkqtc7.cloudfront.net/static-files/favicon-32x32.png">. <link rel="icon" type="image/png" sizes="96x96" href="https://dag0091vkqtc7.cloudfront.net/static-files/favicon-96x96.png">.. <link rel="icon" type="image/png" sizes="36x36" href="https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-36x36.png">. <link rel="icon" type="image/png" sizes="48x48" href="https://dag0091vkqtc7.cloudfront.net/static-files/android-icon-48x48

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1480
Entropy (8bit):	4.922095174075952
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FP6EtHxl+4iEKbsKJ1oc8iPLDQQhe3MODVVn54Fi7DZWgumSwJMM7A:cD/OtbPlHaiYs+1oZcLkQhA7Vn54UPZI
MD5:	3DE326EBABD7D4A9B8D9E3636DFEAA81
SHA1:	4E8350BAF644F8C927DEC4FDA0FDAAEAB45AC4F7
SHA-256:	4CC8F503B763352B3C9FA3D289934128BB3D71B4AD15F18343B4DD31F5B939C7
SHA-512:	3633BEA371BB4EB7282A6CC6AEF36E9417B0555B660FD1C11B9AC36550F27B8F04BA7188E3B16BEC257AFE73B9DAF627988601C5E528F52F5D430FA04AE6379F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7979" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7979)">. <path d="M19 14V7.5L14 4L9 7.5V9H7V6.5L14 1.5L21 6.5V14H19ZM14.5 8H15.5V7H14.5V8ZM12.5 8H13.5V7H12.5V8ZM14.5 10H15.5V9H14.5V10ZM12.5 10H13.5V9H12.5V10ZM7 18.5L13.95 20.4L19.9 18.55C19.8167 18.4 19.6958 18.2708 19.5375 18.1625C19.3792 18.0542 19.2 18 19 18H13.95C13.5 18 13.1417 17.9833 12.875 17.95C12.6083 17.9167 12.3333 17.85 12.05 17.75L9.725 16.975L10.275 15.025L12.3 15.7C12.5833 15.7833 12.9167 15.85 13.3 15.9C13.6833 15.95 14.25 15.9833 15 16C15 15.8167 14.9458 15.6417 14.8375 15.475C14.7292 15.3083 14.6 15.2 14.45 15.15L8.6 13H7V18.5ZM1 22V11H8.6C8.71667 11 8.83333 11.0125 8.95 11.0375C9.06667 11.0625 9.175 11.0917 9.275 11.125L15

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://account.signaturit.com/f25d774ecf.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	621
Entropy (8bit):	4.777236185856332
Encrypted:	false
SSDEEP:	12:YSAWJrNvbQV8rArDtCgvP3QFWINegzhR+1HP:YSpzfuCgv/gX7OHP
MD5:	AD9130EBECF4B87C4E9B2263F4733580
SHA1:	C4A5E2062F699DC762D1C6E15BE926FE89BEE5F9
SHA-256:	6FB344BED8807FA00A596BD410439887F25BD6396CC9864C898787D822D568D1
SHA-512:	A5B9D1EF6279D40C38E4ECB0EF9E0F0B301730D7112AA08343D93571DF5E2EE407F88A92C4B671F3AFEDFAC88B6682A09C89DBEDDD65DA00B250B73826781F40
Malicious:	false
Reputation:	low
Preview:	{"widget":{"enabled":false,"position":{"position":"bottom-left","distanceVerticalPx":10,"distanceHorizontalPx":10},"theme":{"closed":{"backgroundColor":"#141414","foregroundColor":"#FFFFFF"},"opened":{"backgroundColor":"#FFFFFF","foregroundColor":"#141414","highlightColor":"#1032CF","shadeColor":"#D6D6D6","changeBackgroundColor":"#1032CF","changeTextColor":"#FFFFFF","changeBorderColor":"#1032CF","withdrawBackgroundColor":"#FFFFFF","withdrawTextColor":"#141414","withdrawBorderColor":"#1032CF","detailsBackgroundColor":"#F2F2F2"}},"content":{"cultures":["en","es","fr","de"],"default":"en","autodetectLanguage":true}}}

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1046
Entropy (8bit):	4.694539899637897
Encrypted:	false
SSDEEP:	24:2d6TU/dqYtKLxqVy6WHj/5arBql1szWsXJnAp7lNEK9OA:cD/3tKGBogdE1sasKc9A
MD5:	865D50286628D0B0DD3A5871C86101A1
SHA1:	2CE61FC72E67C341C84016D07EAA2A2B5FD34702
SHA-256:	C0B5B0351ECA7FD5877FA348EB2AAD69602C57117DA0F999B500E22667941567
SHA-512:	CA7E244FB48D29EF2AA4C81C5125228F5D1920D9C692552395EFA08F54B005DCA1D4AA076D9415416206D775854641CED6D3FBB15863C02CE57C1D4E93992FBC
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/youtube.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <g clip-path="url(#clip0_1548_2727)">. <path d="M23.469 5.92901L23.499 6.12501C23.209 5.09601 22.426 4.30201 21.431 4.01301L21.41 4.00801C19.539 3.50001 12.01 3.50001 12.01 3.50001C12.01 3.50001 4.49999 3.49001 2.60999 4.00801C1.59599 4.30201 0.811989 5.09601 0.526989 6.10401L0.521989 6.12501C-0.177011 9.77601 -0.182011 14.163 0.552989 18.072L0.521989 17.874C0.811989 18.903 1.59499 19.697 2.58999 19.986L2.61099 19.991C4.47999 20.5 12.011 20.5 12.011 20.5C12.011 20.5 19.52 20.5 21.411 19.991C22.426 19.697 23.21 18.903 23.495 17.895L23.5 17.874C23.818 16.176 24 14.222 24 12.226C24 12.153 24 12.079 23.999 12.005C24 11.937 24 11.856 24 11.775C24 9.77801 23.818 7.82401 23.469 5.92901ZM9.60799 15.651V8.35801L15.874 12.01L9.60799 15.651Z" fill="#CECEF5"></path>. </g>. <defs>. <clipPath id="clip0_1548_2727">. <rect width="24" height="24" fill="wh

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28961)
Category:	downloaded
Size (bytes):	331976
Entropy (8bit):	5.573690889356477
Encrypted:	false
SSDEEP:	3072:u624hzgNSNoe8VNca1n8sF1+TYc20DCSY1KGolDHWbUs6rQDe5L+aVsQCSzmzl6O:T24heeMNcOqgHDe5LfV9CWmd
MD5:	F5751C6A3C63CB17EFD017D993D14A3A
SHA1:	B797208751DF4ABC39E50C897193CE70F91B4D26
SHA-256:	B4122332F4215CB47E27ABA355A2DDA412C8A56AD074587CC43D1B2F74D11A85
SHA-512:	8C5166C277AE70C82842AA7FE70FAC78BCDD098A7E125AD9AF531B29D71B7C30D8F15CE8A72BA1F6435EBB7956D9749594BCD9C0D8B360F49ED7DD97F7BA51E8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WFK9SV
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"173",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"action"},{"function":"__cvt_591828_54"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"hs-data.data"},{"function":"__jsm","vtp_javascript":["template","(function(){for(var b,a=0;a\u003C",["escape",["macro",7],8,16],".length;a++)\"acq

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	749
Entropy (8bit):	5.132233273443575
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKMt5FQPgoh6EtHxl+UdTmdEKGZX4FWQPGD95Vt6C20PlS33WR6VPuX:2d6TU/dMt5F86EtHxl+4iEKbsdxPP421
MD5:	E534D64506434517CD1974C9E40631FC
SHA1:	08FB3EEEA9B7DBC8AF44B11A4F9D01429374C9D7
SHA-256:	7C1047C7D3CE2B91E5552F6C66989874D5CB13D82857053706918FC891A5B8F5
SHA-512:	2918F3863CB5382BE429DDA84BFF06830EE22FC9D88E3DF5AC2BE8332441DFD55E12825A11C40C6DA4D81D6D38EC6A7AE78833099D1A2885E1A0C78A84750A57
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8665" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8665)">. <path d="M4 20C3.45 20 2.97917 19.8042 2.5875 19.4125C2.19583 19.0208 2 18.55 2 18V6C2 5.45 2.19583 4.97917 2.5875 4.5875C2.97917 4.19583 3.45 4 4 4H20C20.55 4 21.0208 4.19583 21.4125 4.5875C21.8042 4.97917 22 5.45 22 6V18C22 18.55 21.8042 19.0208 21.4125 19.4125C21.0208 19.8042 20.55 20 20 20H4ZM12 13L4 8V18H20V8L12 13ZM12 11L20 6H4L12 11ZM4 8V6V18V8Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44876)
Category:	downloaded
Size (bytes):	326910
Entropy (8bit):	5.56176231933451
Encrypted:	false
SSDEEP:	3072:LChzgNSNoe8VNen1x8qF1+TYc20DCSY1KGolDHWbUs6rQDe5L+aVsQCrwBtpyfR:LCheeMNezqgHDe5LfV9CsBjM
MD5:	FFAD50458BF281471C791D84D9E4801E
SHA1:	83FC425646E614E2818EF10552904A439420EF5E
SHA-256:	4B0A4135FFEF3514E2297F622C873728EEBD5CEA82CF09802C7C7702823D0F8D
SHA-512:	5175FB3CB750BCC74E3BBA98DB30DB0888D978C7102E311D0D638D4FD68AE09646D9F1F6D5D3430383FC76C8DC1F4F2C74B7D5F41AF9F9E0E722501C0E43DA92
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K5CJVDJ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"85",. . "macros":[{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-61329482-5","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"content-name"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataL

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1158
Entropy (8bit):	4.914081182089492
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FP6EtHxl+4iEKbs5EZgSluz8zccriwLZwJKLai2wwOIUMTjhgMu:cD/OtbPlHaiYs5DbcvroLi2wzmTjJu
MD5:	EC1D6BC38434F46020DBCD639919A6E9
SHA1:	C182611006254D8954F7C601AF472470B8605CA9
SHA-256:	223316DECFFDB7FDAA25E3C0AFBBE46758617FCBFDF132269984A4E5DF50D234
SHA-512:	4F5219F2834C2D67336012673CE872857C471863158AF28C8B69A874CF617E960E24BE372A9DF838D90A0CC5E8ADDEE545A0A189621EFDF19FE647ECFE774D56
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8686" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8686)">. <path d="M11.9992 23.3L8.64922 20H3.99922V15.35L0.699219 12L3.99922 8.64995V3.99995H8.64922L11.9992 0.699951L15.3492 3.99995H19.9992V8.64995L23.2992 12L19.9992 15.35V20H15.3492L11.9992 23.3ZM11.9992 20.5L14.4992 18H17.9992V14.5L20.4992 12L17.9992 9.49995V5.99995H14.4992L11.9992 3.49995L9.49922 5.99995H5.99922V9.49995L3.49922 12L5.99922 14.5V18H9.49922L11.9992 20.5Z" fill="#030352"></path>. <path d="M13.675 14.375L14.375 13.675L12.5 11.8V9H11.5V12.2L13.675 14.375ZM12 17C10.6167 17 9.4375 16.5125 8.4625 15.5375C7.4875 14.5625 7 13.3833 7 12C7 10.6167 7.4875 9.4375 8.4625 8.4625C9.4375 7.4875 10.6167 7 12 7C13.3833 7 14.5625 7.4875 15.5

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1010 x 462, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	120606
Entropy (8bit):	7.990713744908597
Encrypted:	true
SSDEEP:	3072:2zFWGYiDQfsO0YYliNFQJWrF33piAMQjRssANgqWb:L0O9GIomFpDsw
MD5:	DDB977C29B7967E7402E8EF0CBE86120
SHA1:	7248320F1E80605A0D15A4CF8F811BE0B619BD68
SHA-256:	D36DAF856B77F09B591C7EBAE1E401DD1DC3FC8FD07A46A92E08AD5B49AA0341
SHA-512:	A01CD86869CF99AD4230EFF61AB2620E5B5F6C27C31A44201EE9A61E82B87F1B765B28DA64588D68EB9A92729CF66C89D2F582837814FDF0509EA595124A1EF7
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/708839/7248320f1e80605a0d15a4cf8f811be0b619bd68.png
Preview:	.PNG........IHDR.............LB.Q....pHYs...........~... .IDATx...,9.&.z.sE......k..f..c...s.mvm...tU.B9..N..@...'.\.....S...@......O.....'....vE.c.~.\|...;..^w..t.>.....:"....#Z......8.......<.-.."..4".G..x.!....oy(b.\^....8....4..O/{.<...7......z..i}.{...Qc..8O...T.\|....".i.ue....z..=.S.~.p.'.c...._9...........:..8@a....NE..$.OtEM.....p<.,..7.i..ll..':....S......Y.O.+..V.C..T..".......G{..^....)6..~hw....9N.0.q.....Q`,.......D.'[Z.b.&<P...:V....0...q.p..$.....<,...&<....e._.i...f.>..y...&...u#g..wb..q.....I.[.)P}1..P...S.O..>..0...E...qB]...;r~.......:...h..8M..nW`.b .z....{.....o.\.1..T,6.....P.{Z.u..........D.L...\|-..eym.T.A...WE.^=....>.......a:&]..aBO......b...............u.I....sj...S......&Fd(.;}$5.....O....*.+..#.....qH#)...j"A}........'nv...z.U. .g............w......A`....{...&..!K....w..._...z~S{..<v."].C.....0.Rq.....N.Ix..@.f.},l.7....I&.,...09..R..H..Q48..]..L.&3........gZ}....!....0....$j...(9.^r.......E.eG.h...W....'.E.$.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	5.132233273443575
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKMt5FQPgoh6EtHxl+UdTmdEKGZX4FWQPGD95Vt6C20PlS33WR6VPuX:2d6TU/dMt5F86EtHxl+4iEKbsdxPP421
MD5:	E534D64506434517CD1974C9E40631FC
SHA1:	08FB3EEEA9B7DBC8AF44B11A4F9D01429374C9D7
SHA-256:	7C1047C7D3CE2B91E5552F6C66989874D5CB13D82857053706918FC891A5B8F5
SHA-512:	2918F3863CB5382BE429DDA84BFF06830EE22FC9D88E3DF5AC2BE8332441DFD55E12825A11C40C6DA4D81D6D38EC6A7AE78833099D1A2885E1A0C78A84750A57
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/certified-email.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8665" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8665)">. <path d="M4 20C3.45 20 2.97917 19.8042 2.5875 19.4125C2.19583 19.0208 2 18.55 2 18V6C2 5.45 2.19583 4.97917 2.5875 4.5875C2.97917 4.19583 3.45 4 4 4H20C20.55 4 21.0208 4.19583 21.4125 4.5875C21.8042 4.97917 22 5.45 22 6V18C22 18.55 21.8042 19.0208 21.4125 19.4125C21.0208 19.8042 20.55 20 20 20H4ZM12 13L4 8V18H20V8L12 13ZM12 11L20 6H4L12 11ZM4 8V6V18V8Z" fill="#0A0AF4"></path>. </g>.</svg>.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65317)
Category:	downloaded
Size (bytes):	100782
Entropy (8bit):	4.782445110770722
Encrypted:	false
SSDEEP:	1536:mUMVM6MVMkMVM9MVMNMVMispLudL+P8Wcn0Fwib3ePyUHsE+z:hudL25cn0FfePyUME+z
MD5:	6386FB409D4A2ABC96EEE7BE8F6D4CC4
SHA1:	09102CFC60EFB430A25EE97CEE9A6A35DF6DFC59
SHA-256:	0DF5A33710E433DE1F5415B1D47E4130CA7466AEE5B81955F1045C4844BBB3ED
SHA-512:	29F91FC180EC2E4225C10A7A2C59E5F3335D2C6C6EF58000D50BF020D92CE0F85C125412BEA73254B2C3F5A3215DDD77B908E85ED10A368B0E59A66A5E07A5D2
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v6.1.1/css/all.css
Preview:	/!. Font Awesome Free 6.1.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2022 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-duotone,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125em}.fa-sm{font-size:.875em;line-height:.07143em;vertical-align:.05357em

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	137983
Entropy (8bit):	5.289406868283081
Encrypted:	false
SSDEEP:	3072:SJhgjBhOC1t7qPvVqUTpnX/tIh56IrjL0z:S7Cn2nVqYpnvtI/6H
MD5:	369B985D745FD3BACA53908699104A02
SHA1:	3407D673566B7804A561811BB6BD6D6252D73207
SHA-256:	84F0BDD85FEF21051F9A2592BF767BA112D745949315A860B8D9AF9B12ED4E5C
SHA-512:	34152DA86B2302EDEB00716364C0AEC33B26C9832B9EF27E22182EC2DF2B9EFAD043B39CE581C90DFDF27067ACEBEADC8AF5C6A21EE9671A6924A98734EDAEB4
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/react-59929afd541f3d4213b2a81d773e1d73.js
Preview:	/! For license information please see react-59929afd541f3d4213b2a81d773e1d73.js.LICENSE.txt /."use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[75514],{38698:function(e,t,n){var r=n(27418),l=n(67294);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var o=60106,i=60107,u=60108,s=60114,c=60109,f=60110,d=60112,p=60113,h=60120,m=60115,g=60116,v=60121,y=60117,b=60119,w=60129,k=60131;if("function"==typeof Symbol&&Symbol.for){var S=Symbol.for;o=S("react.portal"),i=S("react.fragment"),u=S("react.strict_mode"),s=S("react.profiler"),c=S("react.provider"),f=S("react.context"),d=S("react.forward_ref"),p=S("react.suspense"),h=S("react.suspense_list"),m=S("react.memo"),g=S("react.lazy"),v=S("react.bloc

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.750122147646172
Encrypted:	false
SSDEEP:	3:YVKBEit2ewHxRL2KIhfwcP2xR2GXEqRWJ6jLZHY:Yi72ewHxbU2mn6jLZ4
MD5:	5DAEA372CC7D7C98E6ECC6DC4BFFF786
SHA1:	DE01142C2882609A195D4A7815D1EEF553ECC7B6
SHA-256:	FC19BCF1C07D8E5FF3F7603140E2F4C7FBFAA5B8BEA51764AB7994FCB395A649
SHA-512:	9A41266C385A4574AF5EC3A7AA1E98821129A324F6B24070E5BB41542B232EEFB3154D62F10F394A3199E3845FAA3B7B57E8C028599E975F56DF48D5D3F41DC2
Malicious:	false
Reputation:	low
URL:	https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=143456774&utk=
Preview:	{"portalId":143456774,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true}

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	493059
Entropy (8bit):	5.8212371143237425
Encrypted:	false
SSDEEP:	6144:Z/Tpp9EfYJ9HWLXC8bMJHKqHAw/pdcpgzGbPFfWu6lezdSBySSyizdrx:9J84JHKqHAmpapgsPhWLezdSBydtx
MD5:	B0047A8901D8ED9F81DB3DCB5982114E
SHA1:	C8FDF3933CB067D1C2AEB1DD4919A4BC9FFC8E8B
SHA-256:	F171DB8DC0EB7CEC86C84CEAC278DBF2FBE33770334635A2703186D14F4828B2
SHA-512:	EE2E249DE446371C2D6C5C1EBFC7A23743503033BE0168665AF5345F27DFF149D269CBB6E6655016BD91558F3E32D690235034CDE396D600C69DCF60127AD0CA
Malicious:	false
Reputation:	low
URL:	https://js.hsforms.net/forms/v2.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.5064/";n(n.s="bxrb")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.525255269405643
Encrypted:	false
SSDEEP:	24:2d6TU/dCyMdoKPHmolBKpmRGRyLWtWZNJJNYDHXgRGA7RD+UkDXfGMPO5bL:cD/ytOoSA1JNfGAVD+oMPwP
MD5:	8A44C683760611712A51CE844BF47AED
SHA1:	B9BC6F7F1B065356721A3A4B7F91C6659CC68C60
SHA-256:	41FF114BA91A508F2EBCBFDC0B017FFB871CCFCD8C7A779E090CDA7A8FA1A1D8
SHA-512:	98284B39038030FF96AFFB411E748C9A67660B60762C4949F699DF528874656FBCD1C49C53B9D22FAC72476B049ECF37A6BFC86AB8371F0D75CFC652358BA13E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M13.7914 16.032V16.83H11.8594V16.312C11.8594 15.612 11.8874 15.332 12.0554 14.674L13.9874 7.16998H16.9834L18.9154 14.674C19.0694 15.332 19.1114 15.612 19.1114 16.312V16.83H17.0954V16.032C17.0954 15.57 16.9974 15.206 16.9134 14.828L16.8714 14.618H14.0154L13.9734 14.828C13.8894 15.206 13.7914 15.57 13.7914 16.032ZM14.3934 13.008H16.4934L15.4434 8.44398L14.3934 13.008Z" fill="#FAFAFF"></path>. <path d="M4.88867 16.69L5.16867 14.968C6.00867 15.15 6.76467 15.304 7.63267 15.304C8.90667 15.304 9.22867 14.856 9.22867 13.988C9.22867 13.26 8.86467 13.05 8.16467 12.91L7.12867 12.756C5.60267 12.49 4.98667 11.79 4.98667 9.99801C4.98667 7.89801 6.23267 7.00201 8.30467 7.00201C9.50867 7.00201 10.5027 7.19801 10.9367 7.28201L10.5587 8.92001C9.98467 8.82201 9.04667 8.66801 8.26267 8.66801C7.29667 8

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2774)
Category:	downloaded
Size (bytes):	2956
Entropy (8bit):	5.124762572686671
Encrypted:	false
SSDEEP:	48:avPioG2d9OtPw90tH89ytnDHCpnwt3jyTwJ9ctlZCLH3fsBAM:kP6WOtP+0tHiytnDXTfjctlZCj3o
MD5:	F2E0B2680D9B0BCB6E0039C4424E5A59
SHA1:	1EA995CEA90B79F3AD16C318572313A671718645
SHA-256:	7F8B63BFF49FBA3C5BAE30F4EB39F2FD6D088FBE9D7292BDF37B0EF4A1EC68D6
SHA-512:	DF7C65B3DF1A4F5AC7F697B1D6DCC264ECF3C177F9BD0375B5C52A4A124AC8CEA4FDE3429226875D3B39D1235623A0869230AF25E6028C452C9E7E417A53FAC3
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=bfc862380e
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.eot);src:url(../webfonts/free-fa-solid-900.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.woff) format("woff"),url(../webfonts/free-fa-solid-900.ttf) format("truetype"),url(../webfonts/free-fa-solid-900.svg#fontawesome) format("svg")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.eot);src:url(../webfonts/free-fa-brands-400.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.woff) format("woff"),url(../webfonts/free-fa-brands-400.ttf) format("truetype"),url(../webfonts/free-fa-brands-400.svg#fontawesome)

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18820)
Category:	downloaded
Size (bytes):	59240
Entropy (8bit):	4.873494161336656
Encrypted:	false
SSDEEP:	768:qu4BXbuqfvcFoc1qmjJVsDzI3u+uu4BXbuqfvcFD:qXdc1qmjJVsDzI3u+uXY
MD5:	4940E4AE72B6124A6EAB7E97FC8DF1F4
SHA1:	20986CBB9965F176B6C6CCF1ADEFCF783F9E9E9A
SHA-256:	58C855E7EB9B917E71E6B733E73C542C25BACB986F3BA7DF2BE1570200312135
SHA-512:	C7F03DD29CA7BD8EA746477DC3E234FD860B21CC2D6823DBFA48D2BBB28F8BCD3256394AF849B2A5BA2DDB2074D7D9F5BF7053EAE621EFE39B05DCA162517895
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.10
Preview:	html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li{text-align:right}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li a img{margin-left:12px}.wpml-language-switcher-block{display:flex;box-sizing:border-box;width:100% !important}.wpml-language-switcher-block>.wp-block-navigation-item,.wpml-language-switcher-block>.wp-block-navigation-item>div{display:flex;width:100% !important}.wpml-language-switcher-block .wp-block-navigation__container{background:unset !important}.wpml-language-switcher-block .hide-arrow .wp-block-navigation__submenu-icon{display:none}.wpml-language-switcher-block .wpml-ls-dropdown ul li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-wi

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 250 x 250
Category:	dropped
Size (bytes):	93413
Entropy (8bit):	7.85999264709632
Encrypted:	false
SSDEEP:	1536:MzrLZEzdM1n2J560SZL3THjkIMk+dZqCcOfGKY59LDslfxGkU2+k:MzrtAd62J4ZZTHFMk+d8CrGKY59Pejf
MD5:	67AF1392231708A90AF9E4A4B61F5448
SHA1:	98C349B13A52FE9913C82D4ECF305355BC31128C
SHA-256:	A70B840E2811FE4866A50607A79775C160F46296D115030DBE2E92541A14C368
SHA-512:	C1057856FC22BC0BA0FA0525516D1FFC149E332F9DF2B3D69B8946E1211864DE154FE940CFA3D8C908B85F14FD7B60CBE3B9A1E4115B765094EF376F5EBE7F01
Malicious:	false
Reputation:	low
Preview:	GIF89a.......C.....i..A........;..w...IW1..#..........(..$r.......V..,......9I...r...!3p........"..2........J.....\..F..Q.......7.....Dht...........-..c..9...........>.....6..........................A........[}....J............................~..@........M.............................(.....'.............................................................................6....................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:8DA88EB29F2A11E9A203E23A405FB3F6" xmpMM:DocumentID="xmp.did:8DA88EB39F2A11E9A203E2

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10320)
Category:	downloaded
Size (bytes):	316260
Entropy (8bit):	5.598564308081419
Encrypted:	false
SSDEEP:	3072:ObA4lgH+hzgNSNow8VNz2V1d8471+TYc20DCSY1KGoub1QgD4tL+aVsQC+g2mN8M:N4zhewMNz2tqSJD4tLfV9C+gBN8Ssir
MD5:	3B18641F25B643BB859981A785586644
SHA1:	30AFED1668F084A80BC5DC815977594151700BDD
SHA-256:	0BDEE223EB688B3E112332BC1E5217E18880561008E9C79A32B235307108E541
SHA-512:	A53936503C16A86374F8808E866EDD5C3EB73D9B7DF5F78BCE9D0C1AA897C31CC70E970D9A64F5AB40DBAE4B230DF161D807D53560B86756E2FAFE434F680B72
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZB2TFCHC3F&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"8",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":29,"vtp_rules":["list","signaturit\\.com"],"tag_id":113},{"function":"__ogt_ga_send","priority":19,"vtp_value":true,"tag_id":115},{"function":"__ogt_dma","priority":19,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":116},{"function":"__ogt_1p_data_v2","priority":19,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CS

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 250 x 250
Category:	downloaded
Size (bytes):	93413
Entropy (8bit):	7.85999264709632
Encrypted:	false
SSDEEP:	1536:MzrLZEzdM1n2J560SZL3THjkIMk+dZqCcOfGKY59LDslfxGkU2+k:MzrtAd62J4ZZTHFMk+d8CrGKY59Pejf
MD5:	67AF1392231708A90AF9E4A4B61F5448
SHA1:	98C349B13A52FE9913C82D4ECF305355BC31128C
SHA-256:	A70B840E2811FE4866A50607A79775C160F46296D115030DBE2E92541A14C368
SHA-512:	C1057856FC22BC0BA0FA0525516D1FFC149E332F9DF2B3D69B8946E1211864DE154FE940CFA3D8C908B85F14FD7B60CBE3B9A1E4115B765094EF376F5EBE7F01
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/assets/img/loaders/preloader-sign-app.gif
Preview:	GIF89a.......C.....i..A........;..w...IW1..#..........(..$r.......V..,......9I...r...!3p........"..2........J.....\..F..Q.......7.....Dht...........-..c..9...........>.....6..........................A........[}....J............................~..@........M.............................(.....'.............................................................................6....................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:8DA88EB29F2A11E9A203E23A405FB3F6" xmpMM:DocumentID="xmp.did:8DA88EB39F2A11E9A203E2

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://imgsct.cookiebot.com/1.gif?dgi=2ab275e9-1e4a-4473-958a-242d1f1243ee
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3074
Entropy (8bit):	4.176952073273879
Encrypted:	false
SSDEEP:	48:cD/4l37+oQwDZs1Q/r7ckrIxBO+5hij+FRXCp8aqvsyPtqBVBVUg9o:IAzOa/HcXBO+5hiKDXC7qKV4Eo
MD5:	EBB8565DD6E59E8D6AAE393275087431
SHA1:	13FEC08DF51FA5A1BF80E1175977935C5CA4A008
SHA-256:	FF2FE35E4D5F53A0E83BE34CE117327242A0EC7ED8071FBAF9DB5D9B1BC518AF
SHA-512:	3910C14E95A7D3624AF3C0884A6DCD1D4FAA7D42221065AB6D47F279BDF981B5739169D86CC592C5ABA76E7CD1B0ADE56E74F791EE154FAFEFD3F536E0354066
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <path fill-rule="evenodd" clip-rule="evenodd" d="M6.09421 12C6.09421 15.236 8.71754 17.8594 11.9536 17.8594C15.1896 17.8594 17.813 15.236 17.813 12C17.813 8.76395 15.1896 6.14062 11.9536 6.14062C8.71754 6.14062 6.09421 8.76395 6.09421 12ZM11.9536 15.9844C9.75307 15.9844 7.96921 14.2005 7.96921 12C7.96921 9.79948 9.75307 8.01562 11.9536 8.01562C14.1541 8.01562 15.938 9.79948 15.938 12C15.938 14.2005 14.1541 15.9844 11.9536 15.9844Z" fill="#CECEF5"></path>. <path d="M18.4692 7.07811C19.2458 7.07811 19.8755 6.44848 19.8755 5.67186C19.8755 4.89523 19.2458 4.26561 18.4692 4.26561C17.6926 4.26561 17.063 4.89523 17.063 5.67186C17.063 6.44848 17.6926 7.07811 18.4692 7.07811Z" fill="#CECEF5"></path>. <path fill-rule="evenodd" clip-rule="evenodd" d="M6.68834 23.8535C8.46157 23.9614 10.2328 24.0039 12.0005 23.9997C13.768 24.0039 15.5393 23.9614 17.3126 23.8535

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3136), with no line terminators
Category:	downloaded
Size (bytes):	3136
Entropy (8bit):	5.307561796364784
Encrypted:	false
SSDEEP:	48:SfCjC3mZOZje8YDXQSY+1k1o0Kwk0DdVedVpvVaMzNpvgYMsDS4MI5tUOfmF/V04:TjfMZj77kk1TLVeFVJbzS4MIb0BIa
MD5:	9DBC9B599246EAED7D4BA3EBEAF826B2
SHA1:	51342FC10E1C6B0D2FAD043752241EA2A0DE5685
SHA-256:	4062582D3EE7360D14D88E2097395458729C3C2FFC644F162C312E45DAC3CFE3
SHA-512:	3319FD56E09CA1F3E5F83AC764C2F1268446FFE0F4D9EB8DCB57B9883843F3D68D8E1EAB125C9B1A6C2FE0B4CA7CE735F6662ECC6D4246334A9EC20F8A52EB9B
Malicious:	false
Reputation:	low
URL:	https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/runtime.js
Preview:	(()=>{"use strict";var e,v={},h={};function r(e){var n=h[e];if(void 0!==n)return n.exports;var t=h[e]={id:e,loaded:!1,exports:{}};return v[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=v,e=[],r.O=(n,t,o,f)=>{if(!t){var a=1/0;for(i=0;i<e.length;i++){for(var[t,o,f]=e[i],l=!0,s=0;s<t.length;s++)(!1&f\|\|a>=f)&&Object.keys(r.O).every(b=>r.O[b](t[s]))?t.splice(s--,1):(l=!1,f<a&&(a=f));if(l){e.splice(i--,1);var d=o();void 0!==d&&(n=d)}}return n}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,o,f]},r.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return r.d(n,{a:n}),n},r.d=(e,n)=>{for(var t in n)r.o(n,t)&&!r.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:n[t]})},r.f={},r.e=e=>Promise.all(Object.keys(r.f).reduce((n,t)=>(r.f[t](e,n),n),[])),r.u=e=>(592===e?"common":e)+".js",r.miniCssF=e=>{},r.hmd=e=>((e=Object.create(e)).children\|\|(e.children=[]),Object.defineProperty(e,"exports",{enumerable:!0,set:()=>{throw new Error("ES Modules may not assign module.expor

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.840276786362852
Encrypted:	false
SSDEEP:	12:zvAF5dvhpdo6buIYsWVtluTbWQsw6fTZHYkeIRZYB1HKa:7g5ZlekJnGZ4keIRZYXKa
MD5:	5DBAB1BA7DDFA643591063EF0825210E
SHA1:	F2E238F6254E3038665868AF3E3D5CB2CF9F8106
SHA-256:	F37959A35E3E6E2B5AE6CA8808904BE1D88C1F49BC749593F1EC882C35D90E8A
SHA-512:	6EAD853D650AF8D1ADDBA7609AD9422D03A32C2138C4A242E657E019B188C75EF4440B088EFA99B9A87046C678710B6BE28565C97AEAD419E4350F5B4111B484
Malicious:	false
Reputation:	low
URL:	https://cdn.birdie.so/widget/embed/manifest.json?r=1713961993118
Preview:	{. "main.css": "css/main2.css",. "main.js": "main.3c5b36cba0c64ce3ed94.js",. "worker.js": "worker.cf1859efc210e2dcc36c.js",. "remote.js": "remote.a173c0df97fe36e3971f.js",. "883.js": "883.a3817f13193679591050.js",. "remotenetwork.js": "remotenetwork.f710bbfecd353667d5a0.js",. "remoteconsole.js": "remoteconsole.8bae9d99064d916659e2.js",. "mirror.js": "mirror.ff22b37666d8316c8d12.js",. "664.js": "664.6426c865a2a54ad73c14.js",. "638.js": "638.b5fe9cd5c7d13e585ed3.js",. "505.js": "505.daae075ca822990b0f09.js".}

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	225006
Entropy (8bit):	5.543382938084184
Encrypted:	false
SSDEEP:	3072:WMzhzgNSNow8VNMA1q8+71+TYc20DCSY1KGolDHWbUs6rWDe5L+aVsQC3UKK:BhewMNM5qgBDe5LfV9CEJ
MD5:	C87E1B4BC576F654AF860FAB0F0EFA2E
SHA1:	FF838AF4441157FC41657993E797AB8266F4B589
SHA-256:	8EA058A037319501DF656D55C98A11B9E2E134ECE3B6E524D49CB015BC4815F4
SHA-512:	F674895942DD7A58BA17252A3C9524C6FCAB8B971FD3B01E4F2AADA2727038ED96E0E42FBB2378D0C412D07DCC51139D2D82B152E7D178914B3B309331F49D95
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-984957836&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-984957836","tag_id":110},{"function":"__ogt_dma","priority":3,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameV

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6107)
Category:	downloaded
Size (bytes):	21179
Entropy (8bit):	5.112569729226281
Encrypted:	false
SSDEEP:	384:QKRP1IjYeUYsRil+MLoLMGtZPkjeVim/nN1gzJMMq0Ohr+1:QKRPekXli4MLoLMGtZPkjOim1yzJDOhI
MD5:	9B5FB6369205227B65523FD38AC2220D
SHA1:	83D4FB54387E8202A0A9CFF6E0925293A4F8E82F
SHA-256:	FEAEA5BC4A9A5C8CBFB91A802FCC9EFCFCED11499CB63D23C06E6853B9FB6B79
SHA-512:	737BF914F18339D27DCC4E81E167D12D574014C4D2690ADA1FB488CA3171D694917FCF35A3FA61FDF60B7E28E575C16DEFD14CA3163C54590D8DDE213E2B2119
Malicious:	false
Reputation:	low
URL:	https://help.signaturit.com/hc/en-us
Preview:	<!DOCTYPE html>.<html dir="ltr" lang="en-US">.<head>. <meta charset="utf-8" />. v24446 -->... <title>Signaturit</title>.. .. <link rel="canonical" href="https://help.signaturit.com/hc/en-us">.<link rel="alternate" hreflang="en-us" href="https://help.signaturit.com/hc/en-us">.<link rel="alternate" hreflang="es" href="https://help.signaturit.com/hc/es">.<link rel="alternate" hreflang="fr" href="https://help.signaturit.com/hc/fr">.<link rel="alternate" hreflang="x-default" href="https://help.signaturit.com/hc/es">.. <link rel="stylesheet" href="//static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css" media="all" id="stylesheet" />. <link rel="stylesheet" type="text/css" href="//p17.zdassets.com/hc/theming_assets/708839/550881/style.css?digest=15992025776401">.. <link rel="icon" type="image/x-icon" href="//theme.zdassets.com/theme_assets/708839/aaf0bfd0e0dc6bcd40849adc95d1517096cbeeaa.jpg" />.. <script>.window.ga=window.ga\|\|function(){(ga.q=ga.q\|\|[]

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1859)
Category:	downloaded
Size (bytes):	184880
Entropy (8bit):	5.021496864829014
Encrypted:	false
SSDEEP:	1536:Uy7tuLju40bBnvfdBdKrc91CAxoj4K0uDg6+2aNCYnfgGZlAOb6uADRKEaQKs4Vf:Uyn6o2iKRA7OTQ5
MD5:	2B123B817D0ACDBD7E97EC49C7DE6B3F
SHA1:	35F60B2162FF8877C0593E84BC270F8C948BD525
SHA-256:	E50B109A2781E4014E778ADB7362292B0BDDE546395210FC6A44F0B9011EDC0F
SHA-512:	F07982CB9A69852C4A2BD227A23B60CCCEF919332C7B3175342580F67FD845F9D0F9F9995BF0226A0289EB739763555B7C8F0F58E27354E44422076CADF131D6
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3
Preview:	@charset "UTF-8";./.Theme Name: Signaturit.Author: INSIDEERS (jordi@insideers.com).Version: 1.0./.@font-face {. font-family: "Expose";. src: url("fonts/Expose-Bold.eot");. src: url("fonts/Expose-Bold.eot?#iefix") format("embedded-opentype"), url("fonts/Expose-Bold.woff2") format("woff2"), url("fonts/Expose-Bold.woff") format("woff"), url("fonts/Expose-Bold.ttf") format("truetype"), url("fonts/Expose-Bold.svg#Expose-Bold") format("svg");. font-weight: 700;. font-style: normal;. font-display: swap;.}.@font-face {. font-family: "Expose";. src: url("fonts/Expose-Medium.eot");. src: url("fonts/Expose-Medium.eot?#iefix") format("embedded-opentype"), url("fonts/Expose-Medium.woff2") format("woff2"), url("fonts/Expose-Medium.woff") format("woff"), url("fonts/Expose-Medium.ttf") format("truetype"), url("fonts/Expose-Medium.svg#Expose-Medium") format("svg");. font-weight: 500;. font-style: normal;. font-display: swap;.}.@font-face {. font-family: "Expose";. src: url("fonts/Expose

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	942
Entropy (8bit):	4.664722784453338
Encrypted:	false
SSDEEP:	24:2d6TU/dCyMdyMlbo2W9YLmct3ot+h3PfsNNHz8L:cD/ytWGLm4Yt+hfcU
MD5:	AE5A7E340774F61944C66D330A806553
SHA1:	C932FD5B18FCD7974084B1290EA8190F5C51B8E0
SHA-256:	E9B3B45849848E863C123F74E1B5CEC5C7258F3FCBEE75DFB5D1B42C18B5379B
SHA-512:	0635C5EF1745FC6A4C64E3F4A0D2C3A99CFE475DEFA5E4413E8FD169A176D3CBE3FB4327305241F17C772D133EDD437E5048CB90D2AB8EF4FD278E2AF5AFAF0C
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/signaturit.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M14.6797 7.16998H16.6957V16.83H14.6797V7.16998Z" fill="#FAFAFF"></path>. <path d="M7.30273 16.69L7.58273 14.968C8.42273 15.15 9.17873 15.304 10.0467 15.304C11.3207 15.304 11.6427 14.856 11.6427 13.988C11.6427 13.26 11.2787 13.05 10.5787 12.91L9.54273 12.756C8.01673 12.49 7.40073 11.79 7.40073 9.99801C7.40073 7.89801 8.64673 7.00201 10.7187 7.00201C11.9227 7.00201 12.9167 7.19801 13.3507 7.28201L12.9727 8.92001C12.3987 8.82201 11.4607 8.66801 10.6767 8.66801C9.71073 8.66801 9.38873 9.10201 9.38873 9.83001C9.38873 10.488 9.59873 10.67 10.2987 10.81L11.3067 10.978C13.0147 11.286 13.6447 12.042 13.6447 13.792C13.6447 16.004 12.5807 16.998 10.0607 16.998C8.95473 16.998 8.18473 16.872 7.30273 16.69Z" fill="#FAFAFF"></path>.</svg>.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71454
Entropy (8bit):	5.515556518573246
Encrypted:	false
SSDEEP:	1536:T8fsjrsdDVstcbYT1rVEC/OcfRp/evG/JlWjgShAvcxIGGHV3ouFbOA2jCxZ:IfOsoUvGHGg4AvcxIp13m4xZ
MD5:	629401C31553D2F42A6CA46E58C2A97B
SHA1:	0AB6084CAA72F90913C7E4119F491838726EC5C2
SHA-256:	91B9B24F0AA59668E4D0A770EE7A294B9BAA361A76A20ADE8128CD0482A5D805
SHA-512:	1FDFF160DBC2E006E3CF12BADC53F9062B87C9F85D78ACDA67ED8FB1E6BA9E0B615416E9D08E1AE88243ED33313465376281EEAEE7A4DA5E3D2A2B20D8F013DE
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/modules/core.BRQnzO8v.js
Preview:	const t=".BRQnzO8v",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,track_links:X,track_links_key:"",callbacks:[],tracking_callback:X,add_services:!1,thanks:{},locale:X,no_3p:X,icon_color:X,color_main:X,color_bg:X,color_border:X,color_link_text:X,color_link_text_hover:X,counts:X,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},v=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=function(e){for(const a in e)Z[a]=e[a],J.a2a_config[a]&&(J.a2a_config[a]=e[a])},u=(v(),"https://static.addtoany.com/menu"),o=["feed","mail","page"];let w,x=0;const k=e=>{e?x=e.a2a_index:A&&(x=A)};let j=0;const Q={},n={feed:[],page:[]};let i=["a2a","share

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=bfc862380e
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-ZB2TFCHC3F&gacid=1954242962.1713961954&gtm=45je44m0v880655858z86591828za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=905032389
Preview:	<html></html>

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2207
Entropy (8bit):	4.460542983500795
Encrypted:	false
SSDEEP:	48:cD/Otb9lHaiYsp4Z8mVFI0nekFjVfRGz+20nekchcMTskV:I2tb9l6sp4ZLVu0vj+0GpV
MD5:	2CDBF8D4E8F544DB5B66CAEEAD159CF9
SHA1:	D92EF0D0A53CA7C87907501D999DB18B608AFC76
SHA-256:	5939CC3D943032108363AD9C5AE8DED2E3F280A790771A37E812536181148DB3
SHA-512:	6C2C32195D22E7CBC94972B7A22EBA195071FB7E15F0AD7CFA1BD60DA85FDC6856B844781E19B5E36BF9F513B055B3A25AE4CB0A4C6EAA03AA6070A5BB881692
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/audit-compliance.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8006" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8006)">. <path d="M14.75 20L16.75 22H6C5.45 22 4.97917 21.8042 4.5875 21.4125C4.19583 21.0208 4 20.55 4 20V4C4 3.45 4.19583 2.97917 4.5875 2.5875C4.97917 2.19583 5.45 2 6 2H15L20 8V20C20 20.3333 19.9292 20.6375 19.7875 20.9125C19.6458 21.1875 19.45 21.4167 19.2 21.6L14 16.45C13.7167 16.6333 13.4083 16.7708 13.075 16.8625C12.7417 16.9542 12.3833 17 12 17C10.9 17 9.95833 16.6083 9.175 15.825C8.39167 15.0417 8 14.1 8 13C8 11.9 8.39167 10.9583 9.175 10.175C9.95833 9.39167 10.9 9 12 9C13.1 9 14.0417 9.39167 14.825 10.175C15.6083 10.9583 16 11.9 16 13C16 13.3833 15.9542 13.7417 15.8625 14.075C15.7708 14.4083 15.6333 14.7167 15.45 15L18 17.6V8.7L14.05

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	492
Entropy (8bit):	4.938599981481038
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKzmdyOjdGaqd5hlegUno7TC1Ogmyh0AiHouO:2d6TU/dCyMd256gUoSPmm0AIO
MD5:	EBF2F62DE0A505EAE2F46B1EBCED9ACB
SHA1:	8C1C0906D3DCBCAB13701F7939983FFA80287864
SHA-256:	B775E058F2E49E38CB905A39F1DC410DDEBEAEED03BE85278EE34BB1EA8C5CD7
SHA-512:	2FAECA1D35D19057F26A4A4B27677B8DDD2ABF0B6CDEBE3E872C8E7B1E7D0D41594E6DECF9A0D11F2F152FD44389530A1BE8628A554B6F7B6F7B473FE6D69A6C
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/universign.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M11.9798 16.9211C9.36181 16.9211 8.50781 15.8851 8.50781 13.5051V7.0791H10.5238V13.5051C10.5238 14.7231 10.8178 15.2551 11.9938 15.2551C13.1698 15.2551 13.4778 14.7231 13.4778 13.5051V7.0791H15.4938V13.5051C15.4938 15.8851 14.6398 16.9211 11.9798 16.9211Z" fill="white"></path>.</svg>.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	252959
Entropy (8bit):	5.543834852165398
Encrypted:	false
SSDEEP:	3072:iNJhzgNSNow8VNP41x8qF1+TYc20DCSY1KGolDHWbUs6rgD4tL+aVsQCXmR:whewMNP0qgpD4tLfV9CXK
MD5:	3DF4343FDD7E50D2011B8EEEBBD43E2D
SHA1:	70FFEB5EA1F5F0DC46B287FF0D10FC87C65F6410
SHA-256:	6718F5B06598E584790CCB05FF83FAC0544887C4A8E6980960016C41C91B565A
SHA-512:	27173E3FBD4DE20A50DD089E36310743EA865C70610C11885A62FDD778F0B426426D977665086D524E1D14CCD2670F8ADD6401FDDDF8DA48917FD706894E0790
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1018022215
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-1018022215","tag_id":18},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":9},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":11},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vt

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65499)
Category:	downloaded
Size (bytes):	302072
Entropy (8bit):	5.573181862824592
Encrypted:	false
SSDEEP:	6144:hFk2s5SuQx4PVlFyITI7+QFIruk02OCACPBDNBOFpmy+pftESzSMWndlje:HkznyITI7+QFz2OC4e
MD5:	5A69033F47C3BFB69541C547FA3A09C4
SHA1:	449F5CC5BB2052B42F12A96E71169E004B07D865
SHA-256:	0740B7469AB5EA31821C7EFDAEE922DA868E16588A7F1E2FC83E7E755D957F98
SHA-512:	5E6E458DF0523E289F6E62943DD861C06DB7EA3E1D9D77AE33F96F6E3D1A57B34B28C5D32C30E9202F9CDF265C3A745F9918353D58FA48144121B8A7F15FD4BE
Malicious:	false
Reputation:	low
URL:	https://consent.cookiebot.com/2ab275e9-1e4a-4473-958a-242d1f1243ee/cc.js?renew=false&referer=www.signaturit.com&dnt=false&init=false
Preview:	// 2.66.0 - 2024-04-15T08:16:33.363Z.!function(){var DialogVersion;!function(DialogVersion){DialogVersion[DialogVersion.ElementalCustom=1]="ElementalCustom",DialogVersion[DialogVersion.Swift=2]="Swift"}(DialogVersion\|\|(DialogVersion={}));var css='#CybotCookiebotDialog .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner *{background:transparent;box-sizing:border-box;color:inherit;font-family:inherit;font-size:15px;margin:0;outline:0;padding:0;vertical-align:baseline}#CybotCookiebotDialog .CybotCookiebotDialogPromotionBannerWrapper,#CybotCookiebotDialogWrapper .CybotCookiebotDialogPromotionBanner{display:none}#CybotCookiebotDialogWrapper.CybotCookiebotDialogActive+#CybotCookiebotDialogBodyUnderlay{opacity:.75;pointer-events:auto}@media screen and (min-width:1280px){#CybotCookiebotDialogWrapper{opacity:0;transition:opacity .5s ease}#CybotCookiebotDialogWrapper.CybotCookiebo

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1158
Entropy (8bit):	4.914081182089492
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FP6EtHxl+4iEKbs5EZgSluz8zccriwLZwJKLai2wwOIUMTjhgMu:cD/OtbPlHaiYs5DbcvroLi2wzmTjJu
MD5:	EC1D6BC38434F46020DBCD639919A6E9
SHA1:	C182611006254D8954F7C601AF472470B8605CA9
SHA-256:	223316DECFFDB7FDAA25E3C0AFBBE46758617FCBFDF132269984A4E5DF50D234
SHA-512:	4F5219F2834C2D67336012673CE872857C471863158AF28C8B69A874CF617E960E24BE372A9DF838D90A0CC5E8ADDEE545A0A189621EFDF19FE647ECFE774D56
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/qualified-time-stamp.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8686" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8686)">. <path d="M11.9992 23.3L8.64922 20H3.99922V15.35L0.699219 12L3.99922 8.64995V3.99995H8.64922L11.9992 0.699951L15.3492 3.99995H19.9992V8.64995L23.2992 12L19.9992 15.35V20H15.3492L11.9992 23.3ZM11.9992 20.5L14.4992 18H17.9992V14.5L20.4992 12L17.9992 9.49995V5.99995H14.4992L11.9992 3.49995L9.49922 5.99995H5.99922V9.49995L3.49922 12L5.99922 14.5V18H9.49922L11.9992 20.5Z" fill="#030352"></path>. <path d="M13.675 14.375L14.375 13.675L12.5 11.8V9H11.5V12.2L13.675 14.375ZM12 17C10.6167 17 9.4375 16.5125 8.4625 15.5375C7.4875 14.5625 7 13.3833 7 12C7 10.6167 7.4875 9.4375 8.4625 8.4625C9.4375 7.4875 10.6167 7 12 7C13.3833 7 14.5625 7.4875 15.5

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 181 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7255
Entropy (8bit):	7.815817955102127
Encrypted:	false
SSDEEP:	192:yEQtkngke4xDr6V4An10WGrt9yIlvceOI8zg4zB1Hpj3/H:yrOn4CDr6FnCyIlvci8PHJjPH
MD5:	02486E0910B93CE621ED304A4B8592C3
SHA1:	39A538119DFF681270EB7A0D5641A347B77D0089
SHA-256:	48A7AC4DCB88E1024EEFFF2D697DDB42CB299C6FBEB1EEFF52FBB8BCD057BA39
SHA-512:	A579AA9E582BD264E24B5D004EFE764CD8D81951BF9B79980E224E911D720705178C09DEB600ED6AB56A45B2C2008AFE0B81F97CAFBF1EBCC10568A476011D20
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/708839/39a538119dff681270eb7a0d5641a347b77d0089.png
Preview:	.PNG........IHDR.......<..... ......7iCCPAdobe RGB (1998)..(....J.P....E.V...p'QPl...I[. X.C..IC.b.n.....n.\.}.'G.A..\|...C........9....b..Q..X.v......f...N..v.u..'q.......M..4...2..J.#`..e!.....1...j....N.5.O@....P.r..J..\|._..s=..9..r_.L.]k.Z...Y.T.eY..&A$.....3....J...Q....`1.l7..V......=...en.G.@,=.YAx...U.;..b.p...azTd.7p....E.Z...<.....O..S?.....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2021-09-28T14:11:51+

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1716), with no line terminators
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	4.819062196126408
Encrypted:	false
SSDEEP:	24:O0M0U7YNTZ/PWCqWkPWaKxUmKYOqWaLUh9JVLFDmmL:On0U7YNtXWCqWOWJK/qWaUhnVVmg
MD5:	72A49C98F1C6118869DD01F1BDCE2FCE
SHA1:	0285DFE28B3E5CDFE7F5E06F53637D47DF788BF5
SHA-256:	1AEB9107928BB523947C28E17358EFB50A07B942E15ED0A72259A5794EA2CA96
SHA-512:	0C5D363D0A946012C9E59143B40FBD3E8F06C3CFDCD24BECFA1C99D30F5431F86851C13BB5FF431D6FD8EB09A5B1AB9E481AC812061726506B39F443D024D4DC
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1
Preview:	.wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-ls-current-language:hover .wpml-ls-sub-menu{visibility:visible}.wpml-ls-legacy-dropdown .wpml-ls-item{padding:0;margin:0;list-style-type:none}.wpml-ls-legacy-dropdown a{display:block;text-decoration:none;color:#444;border:1px solid #cdcdcd;background-color:#fff;padding:5px 10px;line-height:1}.wpml-ls-legacy-dropdown a span{vertical-align:middle}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{position:relative;padding-right:calc(10px + 1.4em)}.rtl .wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{padding-right:10px;padding-left:calc(10px + 1.4em)}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle:after{content:"";vertical-align:middle;display:inline-block;border:.35em solid transparent;border-top:.5em solid;position:absolute;right:10px;top:calc

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7205
Entropy (8bit):	6.06315719330532
Encrypted:	false
SSDEEP:	192:mxKXi0IhKdKGo9BozUWuK55KnNIWyIS0+9czBlp:0KXi0IYKsgWuC0nNJp+cp
MD5:	6913214C561787FF9E8D47EDA4ED0AA1
SHA1:	E7647F9502FECA98BBE30961535071837F6F6359
SHA-256:	EC4BAABFF2AB2CFA06668F5C2CCAA353405E904D4B43A995267179ECAF91F209
SHA-512:	53CAD168C93BF9657C5AF2FF06B9D86571B806FFDB1A63467858E2007D5C42702111B82831789EDB375514619907398D833A3800EB8C0D76230E059F09209681
Malicious:	false
Reputation:	low
URL:	https://app.signaturit.com/app/sign-config/6248316d-8590-4dd2-9d39-fe90a1423256?t=1713961923
Preview:	{"requester_id":"7db00e6a-1698-498f-ba00-71445afcfb03","signature_id":"c3142696-0fbf-46ef-a245-5bb543bcb92c","status":2,"in_person":false,"signers":[{"signer_name":"antonio.navarro@dlink.com","signer_email":"antonio.navarro@dlink.com","position":0,"document_id":null,"enabled":false,"massive_sign":{"enabled":false,"number_of_pending_documents":0,"access_token":null}},{"signer_name":"fernando@depau.com","signer_email":"fernando@depau.com","position":1,"document_id":"6248316d-8590-4dd2-9d39-fe90a1423256","enabled":true,"massive_sign":{"enabled":false,"number_of_pending_documents":0,"access_token":null}}],"branding":{"application_layout_color":null,"application_text_color":null,"application_texts":[],"signature_color":"blue","callback_url":null,"welcome_page":true,"show_survey_page":true,"skip_terms_and_conditions":false,"terms_and_conditions_label":null,"terms_and_conditions_url":null,"logo":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAABQCAQAAACdKetHAAAABGdBTUEAALGPC/xhBQAAACBjSFJ

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:GUn:GUn
MD5:	D0BD571DC19C083D82F023C9666C5574
SHA1:	3E774731D33D9224AC36AF3D85BA1F81B31BC84D
SHA-256:	D6B5915C46057BCB005F46F6433DF65609DD3A7A57AF75AC1A5A4A7C299EBFFB
SHA-512:	C5E6686FE91CA1B71AB014588C517B18B4CC9F46DCB8F43EAA3D386A4CB9BFD7600B97462354D7B3319294D9AE1591F7DC6C2135B72DAB9DDBDEA892758D547E
Malicious:	false
Reputation:	low
URL:	https://sockets.signaturit.com/socket.io/?EIO=3&transport=polling&t=OyG60Qt&sid=dMLwofBs2a63vpmXAAkl
Preview:	1:1

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.07391321234758
Encrypted:	false
SSDEEP:	3:YQZPNVUxXLWFOKaY:YQx+bOT
MD5:	8C11E15DB0F3E1EA036EDBA78ABF1151
SHA1:	72F74F85AA08C65E9927B8D53916A7C45A102D44
SHA-256:	AA011ED383CB780028A85CAAA0DDA67DCE19B0F4BC596F4F708D1857015C1362
SHA-512:	985C2D0148E254CA3386C955DB8F18C02639F156D0FF565BADA0CF91E52A691C504FAEA3A109F9D7CDB4A9C1F6CF48B343EEEEC5803941AE56599411388E4B9A
Malicious:	false
Reputation:	low
URL:	https://scout.salesloft.com/r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDI5MDF9.flQCMylC5XJoc6sWx2NSwqpWPPOOry21VZ9djKpQi9Y
Preview:	{"url":"https://scout.us2.salesloft.com"}

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.480388542207536
Encrypted:	false
SSDEEP:	3:YRKOAznH3BcRQWgdoVOe:YYTX6QWgdoVl
MD5:	D5462FB73E922ED71BD181839CF6A5C1
SHA1:	7633C1A6D1377DB1ACD78C2699F93DA5039A4EC4
SHA-256:	FF6940FA790359F777B272E2DBAC7CAC0563F6E568B1380DC5185FB3CE4C7D0D
SHA-512:	13B6A4EEF88FB783900EBB2C0471C4AE0D77CE46BC13A48EE7FC698492CC1C9EC9C0FD0FA938C3D350006E8AC121C6815FB44D4774340BB684498C5EC3045746
Malicious:	false
Reputation:	low
URL:	https://scout.salesloft.com/i
Preview:	{"token":"bb66a4db-f8d8-4594-ac91-0ef358c3712d"}

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (508)
Category:	downloaded
Size (bytes):	509
Entropy (8bit):	5.250884088851333
Encrypted:	false
SSDEEP:	12:2/hT2wT2Z2JERiK6MTAwatQrO3Q4cuHnrTnDRWCEI/Kiu1AH:292m2hR/gWOA4cuHfDRWPIChI
MD5:	2AE7E3242EB48CAD8B73F47A619E7A60
SHA1:	19A027686EFA5211B6F97E766FD297415CBDC2B7
SHA-256:	C3A88132F64B7AE62A76FCC88EADD7636136AF8312A04A05FB67CC35147098C3
SHA-512:	0D88DD90C5A545F04CF42C5BD9692A28B51857A747A7F4F55660E8131CE85CEF83623A1B4564034F8C2F4233BBD38DC4F7BAC964E94E0067B42BAEC790D8D6E6
Malicious:	false
Reputation:	low
URL:	https://appvizer.one/ariadne/v1/ariadne.js?ts=1713961949094
Preview:	(function(b){if(!window.isAvDefined){window.isAvDefined=!0;var d=((b.avPool&&b.avPool[0]\|\|{}).id\|\|"AP-0").toUpperCase();b=b.avURL+"/rest/ariadne/v2/script/";try{var a=new XMLHttpRequest;a.open("GET",b+d,!0);a.setRequestHeader("Content-type","application/json");a.onreadystatechange=function(){if(4===a.readyState&&200===a.status){var c=document.createElement("script");c.async=!0;c.src=a.responseText;document.getElementsByTagName("head")[0].appendChild(c)}};a.send(null)}catch(c){console.error(c)}}})(this);.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2774)
Category:	dropped
Size (bytes):	2956
Entropy (8bit):	5.124762572686671
Encrypted:	false
SSDEEP:	48:avPioG2d9OtPw90tH89ytnDHCpnwt3jyTwJ9ctlZCLH3fsBAM:kP6WOtP+0tHiytnDXTfjctlZCj3o
MD5:	F2E0B2680D9B0BCB6E0039C4424E5A59
SHA1:	1EA995CEA90B79F3AD16C318572313A671718645
SHA-256:	7F8B63BFF49FBA3C5BAE30F4EB39F2FD6D088FBE9D7292BDF37B0EF4A1EC68D6
SHA-512:	DF7C65B3DF1A4F5AC7F697B1D6DCC264ECF3C177F9BD0375B5C52A4A124AC8CEA4FDE3429226875D3B39D1235623A0869230AF25E6028C452C9E7E417A53FAC3
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-solid-900.eot);src:url(../webfonts/free-fa-solid-900.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-solid-900.woff2) format("woff2"),url(../webfonts/free-fa-solid-900.woff) format("woff"),url(../webfonts/free-fa-solid-900.ttf) format("truetype"),url(../webfonts/free-fa-solid-900.svg#fontawesome) format("svg")}@font-face{font-family:"FontAwesome";font-display:block;src:url(../webfonts/free-fa-brands-400.eot);src:url(../webfonts/free-fa-brands-400.eot?#iefix) format("embedded-opentype"),url(../webfonts/free-fa-brands-400.woff2) format("woff2"),url(../webfonts/free-fa-brands-400.woff) format("woff"),url(../webfonts/free-fa-brands-400.ttf) format("truetype"),url(../webfonts/free-fa-brands-400.svg#fontawesome)

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	532
Entropy (8bit):	4.699792403989686
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKiqsUf6qXOCOZIcHAVlL37Vi2aktNRVhyWwpHblO:2d6TU/d461lj02aMNhAp7lO
MD5:	179093489FA05E75A2B075E516BF0BD3
SHA1:	DA08CC7DAE8CA6845415E4682627A7AA7957CFC0
SHA-256:	8B92662C1F662C954E28592E7041A3ABB3583FA368F61FDB3C43189AED94EA2B
SHA-512:	24CDED5BE44823B83B11CE6F174BE30A8305DB2CFBB8DBF9282780CE7D6B660C081AEB04876852B720DFBE4B01BCD0CBEA8965FCA3EB541BF9B32F84F4CC5ADC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <path d="M3.00092 24H12.0009V15.75H9.00092V12H12.0009V9C12.0009 6.514 14.0149 4.5 16.5009 4.5H19.5009V8.25H18.0009C17.1729 8.25 16.5009 8.172 16.5009 9V12H20.2509L18.7509 15.75H16.5009V24H21.0009C22.6549 24 24.0009 22.654 24.0009 21V3C24.0009 1.345 22.6549 0 21.0009 0H3.00092C1.34592 0 0.000915527 1.345 0.000915527 3V21C0.000915527 22.654 1.34592 24 3.00092 24Z" fill="#CECEF5"></path>.</svg>.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9052
Entropy (8bit):	4.109303459113707
Encrypted:	false
SSDEEP:	192:AO2sBJDTxhc9KmuWv46UNJVbNox1NC4GjjSqokAQNyZ0f/Q6ASa7:AXsBtTzZWv4ZDl4HCNjSHkAQYZ0f45h7
MD5:	99EB5F65F6B73E0A4CFDD0C39D688A54
SHA1:	72F9DFBDDAE7E5B83F77396F76EC2AF968F4EA78
SHA-256:	A813486A325BA719C12BEC7E4A32C4F53EF26A86196427A931AF948E3B61C32B
SHA-512:	346B181B49FE69463BBBC4BCF13885BEEACFA394A7AC9E0AF60CAE713E0ECAD63C62A48772D6A5A74B162818DC9E9B1EECCBF1593C870656B5355E3DE3A147C5
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/10/logo-signaturit-group.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="299" height="113" viewBox="0 0 299 113" fill="none">. <path d="M149.467 100.742C158.627 100.742 164.614 95.5224 164.614 87.4371V80.6823H152.5L149.416 87.0789H157.706V87.4371C157.706 91.7356 155.147 94.0896 149.467 94.0896C144.094 94.0896 141.228 91.1215 141.228 85.4414V79.3006C141.228 73.6205 144.094 70.6525 149.467 70.6525C154.431 70.6525 157.45 72.9041 157.655 77.049H164.563C164.307 68.7591 158.115 64 149.467 64C140.461 64 134.32 69.5267 134.32 79.3006V85.4414C134.32 95.2154 140.461 100.742 149.467 100.742Z" fill="#0A0AF4"></path>. <path d="M169.623 100.281H176.019V85.3902C176.019 81.5011 178.015 79.5053 181.699 79.5053H185.64V73.3646H181.699C178.22 73.3646 176.736 74.3369 176.019 75.2068V73.3646H169.623V100.281Z" fill="#0A0AF4"></path>. <path d="M187.611 84.3156V89.3305C187.611 96.29 192.574 100.742 199.432 100.742C206.289 100.742 211.201 96.29 211.201 89.3305V84.3156C211.201 77.3561 206.289 72.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62783)
Category:	downloaded
Size (bytes):	1273600
Entropy (8bit):	5.4176882852762756
Encrypted:	false
SSDEEP:	24576:5qENzXoKhFSCUYvKrk6eYs6JP2UZUjVnTuWKl39/kOxShUHOJVbeVTnUZ:5qENzXoSFSCUYvKrk6eYs6JP2UZUjVnz
MD5:	96967EFB5D03A27DC48B6FBAE181914A
SHA1:	3DE1C5348F3C6157180CCA3ECE9761C68A9CC138
SHA-256:	C28425BAD517C7ED04E8253FC760712DD1E7971A7045253EC6913F0149A0D6A4
SHA-512:	43FBCDF0DC32FC33BB591BC0994220D92E6A67EDC9DBEAC4F84DDF04A35B5AB167AC9F065A7C891B2B02A0FB6F07E4FE81100EE3551FBC13C9F82A4271B58206
Malicious:	false
Reputation:	low
URL:	https://account.signaturit.com/main-a73c411dc2.js
Preview:	/! For license information please see main-a73c411dc2.js.LICENSE.txt /.var e,t,n,r,o={66751:function(e,t,n){n.d(t,{Z:function(){return re}});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.before:t.tags[t.tags.length-1].nextSibling,t.container.insertBefore(e,n),t.tags.push(e)},this.isSpeedy=void 0===e.speedy\|\|e.speedy,this.tags=[],this.ctr=0,this.nonce=e.nonce,this.key=e.key,this.container=e.container,this.prepend=e.prepend,this.insertionPoint=e.insertionPoint,this.before=null}var t=e.prototype;return t.hydrate=function(e){e.forEach(this._insertTag)},t.insert=function(e){this.ctr%(this.isSpeedy?65e3:1)==0&&this._insertTag(function(e){var t=document.createElement("style");return t.setAttribute("data-emotion",e.key),void 0!==e.nonce&&t.setAttribute("nonce",e.nonce),t.appendChild(document.createTextNode("")),t.setAttribute("data-s",""),t}(this));var t=this.tag

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1018022215?random=1713961964710&cv=11&fst=1713961964710&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7789)
Category:	downloaded
Size (bytes):	10947
Entropy (8bit):	5.3954276658499705
Encrypted:	false
SSDEEP:	192:5kFWtlYQen+bnMSH54wHePBCUoqkYPiJlipfgKiL1fIOu8yLftu8:CSYD+bnMbseWYPUurLftu8
MD5:	A5C93A7ABD9916A97BEA849007E53300
SHA1:	995321E54FE2408BF8E485A4C49997C9F10198AD
SHA-256:	76F7E9ADC4D65C35FFE5600075DB6A3677B0FCC1327864D2C4B6C2C87EF6448C
SHA-512:	50AF608B4C64AC6DC39EE005B1E0624535352752D3B4992C4DF7B767B0D08366EFDC816818CE027EA63C2BFE0C4E0AEC843212FAE05FF6B5639A34EA8363690F
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-2155700.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2155700,"rec_value":1.0239999994610116e-6,"state_change_listen_mode":"automatic","record":false,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[{"id":994225,"created_epoch_time":1708956414,"skin":"light","background":"#FFFFFF","effective_show_branding":true,"position":"right","content":{"version":2,"questions":[{"uuid":"e69c4dfe-12d3-4344-b807-823a30e99fec","type":"net-promoter-score","text":".Con qu. probabilidad recomendar.a Signaturit a un amigo o compa.ero?","required":true,"labels":[{"text":"Muy poco probable"},{"text":"Muy probable"}

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 181 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7255
Entropy (8bit):	7.815817955102127
Encrypted:	false
SSDEEP:	192:yEQtkngke4xDr6V4An10WGrt9yIlvceOI8zg4zB1Hpj3/H:yrOn4CDr6FnCyIlvci8PHJjPH
MD5:	02486E0910B93CE621ED304A4B8592C3
SHA1:	39A538119DFF681270EB7A0D5641A347B77D0089
SHA-256:	48A7AC4DCB88E1024EEFFF2D697DDB42CB299C6FBEB1EEFF52FBB8BCD057BA39
SHA-512:	A579AA9E582BD264E24B5D004EFE764CD8D81951BF9B79980E224E911D720705178C09DEB600ED6AB56A45B2C2008AFE0B81F97CAFBF1EBCC10568A476011D20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<..... ......7iCCPAdobe RGB (1998)..(....J.P....E.V...p'QPl...I[. X.C..IC.b.n.....n.\.}.'G.A..\|...C........9....b..Q..X.v......f...N..v.u..'q.......M..4...2..J.#`..e!.....1...j....N.5.O@....P.r..J..\|._..s=..9..r_.L.]k.Z...Y.T.eY..&A$.....3....J...Q....`1.l7..V......=...en.G.@,=.YAx...U.;..b.p...azTd.7p....E.Z...<.....O..S?.....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2021-09-28T14:11:51+

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1770
Entropy (8bit):	4.561598130111127
Encrypted:	false
SSDEEP:	48:cD/OtbslHaiYsZ51b1KUH5Tynb7mcgtgJAqF2AUsFy56Lou:I2tbsl6sZ51plHFyb7bpJ2QFy56Ln
MD5:	861115C329BF097072F489D91188E674
SHA1:	1E26C162ECD0D5FAB5189E8394198D1AD60003EB
SHA-256:	8B610545A32D40B8C42EC6BEE7165B042419DCD0F75284BFCDA0BC5716903C57
SHA-512:	CA1308468925AE3D195924390966B651608EE8346044F31B4C586A0738002F89B020C3990E925EB4767C83209B9B2C0A361EB4228BF83F75B0CCEE7436496A76
Malicious:	false
Reputation:	low
URL:	https://www.signaturit.com/wp-content/uploads/2023/11/certified-manager.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8672" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8672)">. <path d="M17.55 12L14 8.45L15.425 7.05L17.55 9.175L21.8 4.925L23.2 6.35L17.55 12ZM9 12C7.9 12 6.95833 11.6083 6.175 10.825C5.39167 10.0417 5 9.1 5 8C5 6.9 5.39167 5.95833 6.175 5.175C6.95833 4.39167 7.9 4 9 4C10.1 4 11.0417 4.39167 11.825 5.175C12.6083 5.95833 13 6.9 13 8C13 9.1 12.6083 10.0417 11.825 10.825C11.0417 11.6083 10.1 12 9 12ZM1 20V17.2C1 16.6333 1.14583 16.1125 1.4375 15.6375C1.72917 15.1625 2.11667 14.8 2.6 14.55C3.63333 14.0333 4.68333 13.6458 5.75 13.3875C6.81667 13.1292 7.9 13 9 13C10.1 13 11.1833 13.1292 12.25 13.3875C13.3167 13.6458 14.3667 14.0333 15.4 14.55C15.8833 14.8 16.2708 15.1625 16.5625 15.6375C16.8542 16.1125

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1665
Entropy (8bit):	4.664826082790288
Encrypted:	false
SSDEEP:	48:cD/OtbOlHaiYsLfQGcFgw4EGHOOz+efWmhu:I2tbOl6sLI5gWGHOOJbA
MD5:	8EB128A46D995A3F29C68D643DDD8F1B
SHA1:	08C7CBDBC6192E364516CED85D512BF4ED082953
SHA-256:	76320794590BC951A8170455B772202291501ABD7509AD3385610D4FCEA655E3
SHA-512:	5F1047A19E78F6A9DAAA1E570D790CD192F07C58AD2C1CDDB2001CDFB187B3AD402C59ECFBC318D5701BA01E345513C3D119CB054BB24C0D701575F987155109
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_7947" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_7947)">. <path d="M16 11C16.2833 11 16.5208 10.9042 16.7125 10.7125C16.9042 10.5208 17 10.2833 17 10C17 9.71667 16.9042 9.47917 16.7125 9.2875C16.5208 9.09583 16.2833 9 16 9C15.7167 9 15.4792 9.09583 15.2875 9.2875C15.0958 9.47917 15 9.71667 15 10C15 10.2833 15.0958 10.5208 15.2875 10.7125C15.4792 10.9042 15.7167 11 16 11ZM8 9H13V7H8V9ZM4.5 21C3.93333 19.1 3.375 17.2042 2.825 15.3125C2.275 13.4208 2 11.4833 2 9.5C2 7.96667 2.53333 6.66667 3.6 5.6C4.66667 4.53333 5.96667 4 7.5 4H12.5C12.9833 3.36667 13.5708 2.875 14.2625 2.525C14.9542 2.175 15.7 2 16.5 2C16.9167 2 17.2708 2.14583 17.5625 2.4375C17.8542 2.72917 18 3.08333 18 3.5C18 3.6 17.9875 3.7

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1112
Entropy (8bit):	4.90854246145118
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fys6EtHxl+4iEKXsRW/cPH2TIy3CdFv2qE1WouwklUK9cqHL1WouMu:cD/OtbyslHaiUsRWXSdFIt5s5tFu
MD5:	D827B365460EE47E30843363929A3A3F
SHA1:	F42F9875A2623278A97FDEF053B2DA506A35CC4C
SHA-256:	8E6F53CB43D8B76DA5BA125FE699BD93E4DB85EB85A632B4086E6D080C13DB93
SHA-512:	BFF8CC90B419E45CEA530D010958CBDF02C1ECD81EE149941F67B2143351A39CEE3AC70A26C7E51EDBCE4DB0217127560FFB3C8E8035DB4B6FB3C27099CAE462
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8040" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#030352"></rect>. </mask>. <g mask="url(#mask0_2056_8040)">. <path d="M18 13V11H22V13H18ZM19.2 20L16 17.6L17.2 16L20.4 18.4L19.2 20ZM17.2 8L16 6.4L19.2 4L20.4 5.6L17.2 8ZM5 19V15H4C3.45 15 2.97917 14.8042 2.5875 14.4125C2.19583 14.0208 2 13.55 2 13V11C2 10.45 2.19583 9.97917 2.5875 9.5875C2.97917 9.19583 3.45 9 4 9H8L13 6V18L8 15H7V19H5ZM11 14.45V9.55L8.55 11H4V13H8.55L11 14.45ZM14 15.35V8.65C14.45 9.05 14.8125 9.5375 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6833 15.3625 13.3125 15.0875 13.8875C14.8125 14.4625 14.45 14.95 14 15.35Z" fill="#030352"></path>. <path d="M14 15.35V8.65002C14.45 9.05002 14.8125 9.53752 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6180)
Category:	downloaded
Size (bytes):	6291
Entropy (8bit):	5.385080438006646
Encrypted:	false
SSDEEP:	96:u8nC+xPW/ksk6n15/AgxUaV4Xi4cLAUd9fz6TgXsdBt3xjDEYrL9:pVxW/kL6L/AOUk4GLxz6TIsjEYrp
MD5:	65A4CDF8F8C613EA8F766101EEA8E667
SHA1:	575C45FCEDDA87ED4402543B8CBAC6FFEC4034D4
SHA-256:	1C67D8CE90160A6586CFD2C2A936959738F5B1843EBDFBAC4325C4D1A9B61224
SHA-512:	6607C17B84DB705A26EE72668B97D4DFF62DEE85BFDFC305179E8D3D9E6470834A32FCE36627C59B5C86EF4D0D1A6989CCC6A3B4B94D0164C4F36AEB71E743A4
Malicious:	false
Reputation:	low
URL:	https://js-eu1.hsadspixel.net/fb.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,t);i.l=!0;return i.exports}var o=[{name:"head-dlb/bundle.production.js",path:"head-dlb/static-1.684/bundle.production.js",ids:{}}];t.dlbpr=function(e,n){var i=o[e];if(!i.r){i.r=window["__webpack_require_"+i.name+"__"];if(!i.r)throw new Error("dlb "+i.name+" not loaded");i.r.linkDlb(t,i.ids)}return i.r(n)};t.m=e;t.c=n;t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})};t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};t.t=function(e,n){1&n&&(e=t(e));if(8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);t.r(o);Object.defineProperty(o,"default",{enumerable:!0,value:e});if(2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o};t.n=f

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1008
Entropy (8bit):	5.032820986088475
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5Fgj6EtHxl+4iEKbsAykmw3ZLdZRE3gSHfB2sUHLwvA2sUHLMu:cD/OtbAlHaiYsAyCjRE3gS/wsu0vlsuH
MD5:	FB0F9CB0B2A697D837F240C98FC253AC
SHA1:	F522DF10A8BFE5F5C63645C57C18027BD1E974EC
SHA-256:	BB7ECC5682739E8986540F3E5106B86C084C213FF8AE943226C0E6695CBB5B76
SHA-512:	6DE38FDDC3C3DE802AA230C9528102BE25A4F24E80DA07D6F671F81446D3078130D3AA2E1EA47F30F63FB980E2DABB8CD4C6ADDC99DB978C381A5B2E53210890
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8676" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8676)">. <path d="M4 21C3.45 21 2.97917 20.8042 2.5875 20.4125C2.19583 20.0208 2 19.55 2 19V5C2 4.45 2.19583 3.97917 2.5875 3.5875C2.97917 3.19583 3.45 3 4 3H20C20.55 3 21.0208 3.19583 21.4125 3.5875C21.8042 3.97917 22 4.45 22 5V19C22 19.55 21.8042 20.0208 21.4125 20.4125C21.0208 20.8042 20.55 21 20 21H4ZM4 19H20V5H4V19ZM5 17H10V15H5V17ZM14.55 15L19.5 10.05L18.075 8.625L14.55 12.175L13.125 10.75L11.725 12.175L14.55 15ZM5 13H10V11H5V13ZM5 9H10V7H5V9Z" fill="#030352"></path>. <path d="M5 17H10V15H5V17ZM14.55 15L19.5 10.05L18.075 8.625L14.55 12.175L13.125 10.75L11.725 12.175L14.55 15ZM5 13H10V11H5V13ZM5 9H10V7H5V9Z" fill="#0A0AF4"></path>. </g>

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9545
Entropy (8bit):	3.896119391230306
Encrypted:	false
SSDEEP:	192:UUKoi729n8pZirK4+87kj20s6/FMGlvPIYoPeOPiNWNhJ8adL:Udoi65A4+1jPjIYoPrK4yadL
MD5:	EE0B0664D065BABEB90DDFC92FB1C0A0
SHA1:	B853982C4130E24C6FEC79F5B9A1F2910B868C9A
SHA-256:	8A13CE62DEE9151D9EE8AA16F0B6E8564F232A736E3B10AE6C968F6622498FAF
SHA-512:	2BA5C1AD37FDE5A93CD8693FD3C9ABA0E10486395E0AFB75FFC304BC14B0244D7480A9E9DC3D0B8B49300ADC1D47F98ABFA8437727E13B28A3258897480EF5B6
Malicious:	false
Reputation:	low
Preview:	<svg width="145" height="48" viewBox="0 0 145 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_3047_8093)">.<path d="M132.681 34.9432C132.661 34.8807 132.661 34.9223 132.681 34.9432V34.9432Z" fill="#0F3E4D"/>.<path d="M17.168 29.8218L17.2305 29.9052C17.2096 29.8427 17.1888 29.801 17.168 29.8218Z" fill="#0F3E4D"/>.<path d="M32.1635 15.3873C33.0589 15.3664 34.4958 13.9504 33.1213 13.4922C32.3925 13.1174 31.0389 13.284 30.56 13.8046C30.2476 14.2627 30.435 14.7418 30.7682 15.1582C30.7682 15.1582 30.8932 15.4081 32.1635 15.3873Z" fill="#0F3E4D"/>.<path d="M143.947 11.9108C141.906 10.7863 139.261 10.4323 135.72 10.6197C135.679 10.6197 135.617 10.6406 135.576 10.6406C132.931 10.7863 129.786 11.2444 126.017 11.9317C125.913 11.9525 125.809 11.9525 125.725 11.9733C126.266 10.7446 127.537 7.62101 128.641 4.99715C129.349 3.37285 127.787 3.68521 127.141 4.76808C125.538 7.62101 125.267 8.74552 123.664 12.2648C122.977 12.3689 121.602 12.5355 121.06 12.7438C120.79 12.8479 1

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 6792, version 331.-31196
Category:	downloaded
Size (bytes):	6792
Entropy (8bit):	7.973200253474229
Encrypted:	false
SSDEEP:	192:FG4CM0+JPQsySJ3vi6vqsyJ6qLT6Yd4/lZ+:FdCMDJ4fSJfIJ6cnQlZ+
MD5:	D1C11521F3C8677B87CC7E0A206DFBF6
SHA1:	0F28D3C41FB824E4A7B8AB4D12C4E433E23695D7
SHA-256:	2B87C479EADC6A3EAB40C4A0DBDCD525917BA8F22F66C6B647177D529A5E1543
SHA-512:	0A261DEA2DEFB2D2CDA7F19DBDDB59ACC502350DA1994451A8D0DAD3B8E7A3C23620189D7A85124AACE14A8FECC1744654BA45A316D1BBF40B6E542D869CB0D0
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-v4deprecations.woff2
Preview:	wOF2..............;....1.K.$....................?FFTM....`....... .4.6.$..J..(.. ..#....J1%r.iy.@....?%.c..xZ.!L\.2....i.v.......c..6.p`....c.=....]Y7.&RU...Y....D.:....[+..U.....,T.... $.P....v({&.E...f7...lQ..(..r..r...........w.h8...o.........R...F....v.............}...ZmK...P!.A.....6{....TL.Lt:...8.2.u,.X...'....Z:k...Upz.n.v.5f5g..rD..u./...B..n.H.O.w.4..2.]2.ke.u.e.m^..H..._..j....F.4.]&.'..._..Q.g......!.e.!P......<...?...wX:.-s...<U.....0,.G...n...=.L$G-.T.s....y.$....k.y.P.4..p.#<..3..v...By`....-Z..#r..j.p3.u....F..4H.tc.!w{.h.j;....[..1...e.4j.a..s.Ch.....#......^.u....Vf..4m....=<).-......~.M7..S.>........+..^..O2.Zu.....-{..._.~)Wt.%.8.."[.........)..z....Gw.Mh#Z...&T.F..h .rP6..4.=2.....\C.#g.3..#.!.H.R.. .7b.......W.s..<...;...6..6......_.3L.Qh2..f...{f..5...O..x......A..Xm......H.....9(.GD$TI1....T..k....$.D..;.Ar..x..?}q.Ts.b.m..1=.6.S.....B.HQ..n........-s..m..F...".-..l.7B.......}i. 6....Y&.[...P...P.7.Zo.n..'d.7T..'.*2....f.

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78460
Entropy (8bit):	5.314108872686945
Encrypted:	false
SSDEEP:	1536:2u23v7YtctGCxcYOKlI5Ar4j4INh7XOvnM5/Q0M:W7YtctGf7XOvnMWf
MD5:	59EC2E3127045C41EBBCC2AE5456C4B8
SHA1:	5EB5F664A5B5C5D3C2C2F5A7C6AC1E4A228F938B
SHA-256:	AFD5360C970589A55C773AC11651DCCF3E48CF3F6799D2E66A910F2D1572901B
SHA-512:	EAA88AF7565A4A334099C386CB341AE6030481780A31077D17FF48BACF45F0231958295FE8D518DA7DB2ACAC0D3C8E20CBDF579885FBCBF99B9053FD6D60BB42
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/c84ebe43de7d3bac.min.js
Preview:	var Demandbase=window.Demandbase\|\|{};!function(g){"use strict";var M,x=this&&this.__spreadArray\|\|function(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|((n=n\|\|Array.prototype.slice.call(e,0,o))[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))},n=this&&this.__extends\|\|(M=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(t,e){t.__proto__=e}:function(t,e){for(var i in e)e.hasOwnProperty(i)&&(t[i]=e[i])}),function(t,e){M(t,e);function i(){this.constructor=t}t.prototype=null===e?Object.create(e):(i.prototype=e.prototype,new i)}),e=this&&this.__awaiter\|\|function(r,a,s,l){return new(s=s\|\|C)(function(t,e){function i(t){try{o(l.next(t))}catch(t){e(t)}}function n(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.value):new s(function(t){t(e.value)}).then(i,n)}o((l=l.apply(r,a\|\|[])).next())})},l=this&&this.__generator\|\|function(n,o){var r,a,s,l={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]},t={next:e(0

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	4.777236185856332
Encrypted:	false
SSDEEP:	12:YSAWJrNvbQV8rArDtCgvP3QFWINegzhR+1HP:YSpzfuCgv/gX7OHP
MD5:	AD9130EBECF4B87C4E9B2263F4733580
SHA1:	C4A5E2062F699DC762D1C6E15BE926FE89BEE5F9
SHA-256:	6FB344BED8807FA00A596BD410439887F25BD6396CC9864C898787D822D568D1
SHA-512:	A5B9D1EF6279D40C38E4ECB0EF9E0F0B301730D7112AA08343D93571DF5E2EE407F88A92C4B671F3AFEDFAC88B6682A09C89DBEDDD65DA00B250B73826781F40
Malicious:	false
Reputation:	low
URL:	https://consentcdn.cookiebot.com/consentconfig/2ab275e9-1e4a-4473-958a-242d1f1243ee/settings.json
Preview:	{"widget":{"enabled":false,"position":{"position":"bottom-left","distanceVerticalPx":10,"distanceHorizontalPx":10},"theme":{"closed":{"backgroundColor":"#141414","foregroundColor":"#FFFFFF"},"opened":{"backgroundColor":"#FFFFFF","foregroundColor":"#141414","highlightColor":"#1032CF","shadeColor":"#D6D6D6","changeBackgroundColor":"#1032CF","changeTextColor":"#FFFFFF","changeBorderColor":"#1032CF","withdrawBackgroundColor":"#FFFFFF","withdrawTextColor":"#141414","withdrawBorderColor":"#1032CF","detailsBackgroundColor":"#F2F2F2"}},"content":{"cultures":["en","es","fr","de"],"default":"en","autodetectLanguage":true}}}

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1512
Entropy (8bit):	4.686853529897596
Encrypted:	false
SSDEEP:	24:2d6TU/dMt5FI6EtHxl+4iEKbsTPP44WKf7fQllUkEUowjSekRJTELswDowjSekRF:cD/OtbIlHaiYsbPQllPEUoISJ/irDoIa
MD5:	2AB2927886EF4142A4EB83A6DD0C3B69
SHA1:	28246C7550E5E439E6478CA3C9BFB6D4BC7C99DC
SHA-256:	369D7E4554C1D89DB2E356513DE6A25C0029F7B8380BF5EF9D884F210FB2FB17
SHA-512:	5B2DD1D0E460B89AE8DA47BF840A452C693D85D903B457D472D4DC11A730D2119BFE641A1CE67291303E0536C157F3B72775D185EAE6A591A6878E5B4616BD93
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <mask id="mask0_2056_8694" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">. <rect width="24" height="24" fill="#D9D9D9"></rect>. </mask>. <g mask="url(#mask0_2056_8694)">. <path d="M4 20C3.45 20 2.97917 19.8042 2.5875 19.4125C2.19583 19.0208 2 18.55 2 18V6C2 5.45 2.19583 4.97917 2.5875 4.5875C2.97917 4.19583 3.45 4 4 4H14.1C14.0333 4.33333 14 4.66667 14 5C14 5.33333 14.0333 5.66667 14.1 6H4L12 11L15.65 8.725C15.8833 8.94167 16.1375 9.12917 16.4125 9.2875C16.6875 9.44583 16.975 9.58333 17.275 9.7L12 13L4 8V18H20V9.9C20.3833 9.81667 20.7417 9.7 21.075 9.55C21.4083 9.4 21.7167 9.21667 22 9V18C22 18.55 21.8042 19.0208 21.4125 19.4125C21.0208 19.8042 20.55 20 20 20H4ZM19 8C18.1667 8 17.4583 7.70833 16.875 7.125C16.2917 6.54167 16 5.83333 16 5C16 4.16667 16.2917 3.45833 16.875 2.875C17.4583 2.29167 18.1667 2 19

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	492
Entropy (8bit):	4.938599981481038
Encrypted:	false
SSDEEP:	12:TMHd6BdU/gKzmdyOjdGaqd5hlegUno7TC1Ogmyh0AiHouO:2d6TU/dCyMd256gUoSPmm0AIO
MD5:	EBF2F62DE0A505EAE2F46B1EBCED9ACB
SHA1:	8C1C0906D3DCBCAB13701F7939983FFA80287864
SHA-256:	B775E058F2E49E38CB905A39F1DC410DDEBEAEED03BE85278EE34BB1EA8C5CD7
SHA-512:	2FAECA1D35D19057F26A4A4B27677B8DDD2ABF0B6CDEBE3E872C8E7B1E7D0D41594E6DECF9A0D11F2F152FD44389530A1BE8628A554B6F7B6F7B473FE6D69A6C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none">. <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect>. <path d="M11.9798 16.9211C9.36181 16.9211 8.50781 15.8851 8.50781 13.5051V7.0791H10.5238V13.5051C10.5238 14.7231 10.8178 15.2551 11.9938 15.2551C13.1698 15.2551 13.4778 14.7231 13.4778 13.5051V7.0791H15.4938V13.5051C15.4938 15.8851 14.6398 16.9211 11.9798 16.9211Z" fill="white"></path>.</svg>.

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196
Category:	downloaded
Size (bytes):	76736
Entropy (8bit):	7.997251565954726
Encrypted:	true
SSDEEP:	1536:H+PBHf887u/cbftitvX4pbcY3EF7kh8cw7BTY1QVOG8v35:EUm/4pX4htGHcw7BfSJ
MD5:	4F5EC865A8274AB291B6A42B5F70639E
SHA1:	6F00F8C75208B96E585646824C4011093446ACD2
SHA-256:	B5BE0732AB1CC16692E165A7950810F0C772E400F6A2F63E1026A0B938016813
SHA-512:	B0B51FEEDC480EEFDC72418FE08AB97E61AC4CBFBE73A7E3851E543E88314053845F46FAE04FD7AA16F04EB910625C7E5DBDD9C7D5A6247616CCCA6D31E739D5
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.woff2
Preview:	wOF2......+........`..+e.K.$....................?FFTM....`..z.....<..".6.$..,..... .....][.q..".~$.n"..{;Ucb...F.n...g1^p\.8..[=....W$.......m..@.+.,....RC..Q"@KD..S.V....p....jI.u^.k..`.8...... .jk.n..V...K.1.a..M...Y"Z....}.p.>.T...w..9u..R.G..%[.<8Mg...j]..~+..._E...I...h.jh.X.V.4..hA?./.v\|E2..C...4EK..m.e.g..n......gEC.)2.......(...B....r.0.^..at.......m>...O.....N..Z.i.P}\|...T}..._...2.K4:..!>..w..^............,L].........g?....X..&..HF.i.<.....FI....ys..9....63I&.7%."3..)..I!.).....m...k(.._......V.u../.-M].R....@'v..:.......G.Du.....g.i.....F..S...L5'_..\|G. .....r........tu.05e.)Q..f$..d....DGt.........W....Uk.L.g...V..K...7!.D.....d.r.......3u&].%..T .."...O.x..y!O>..!Z[..]D^.}M...)......RF'F.[o.............5G].y.Q&WD....")X......).X.):.)X5+.....d.f.}.Y@......\|.....i...^.>..H1...U....`.b...u.}...9...=?.~~.fZ.]....A.!..;aC2..PI...[..q.p..V]?.J..I%h....0...E...w.(.]9...??..W.....i}U.bUr3..w:`....I..8.3Y.t.H.......x..?....y...m..o..Vd4.m..

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2358)
Category:	downloaded
Size (bytes):	102807
Entropy (8bit):	5.030981090531276
Encrypted:	false
SSDEEP:	3072:UdmwLtixBT+yEELLuNMGDkc6njZTtktZwt8z1nCy7jI//CA:UdABT+yEEfuNMGDCTUnCy7jI5
MD5:	A3E35E7FDA15A122AD78817E2CDC01B8
SHA1:	3A62E1EFB8A2AFDDD79EF7C20FE8B4A66BBF35D6
SHA-256:	21207CE70183B4B9F89EB9F396C7FCB0ED870E5842BA5C792103DFFA11EDDD75
SHA-512:	8AD0F110D17BF9AA9430758DFBD36C0532D9D4885529F2A47EFE104A623C0885C001EE1ACF8B8D05EAE89244141972F5FF4DC1D48E32FFA93C2DF021B1D07297
Malicious:	false
Reputation:	low
URL:	https://p17.zdassets.com/hc/theming_assets/708839/550881/style.css?digest=15992025776401
Preview:	/. Theme Name: Vertio. * Version: 4.0.8. * Author: Customer Support Theme (Grow Shine Services Pvt. Ltd). * Download From: https://www.customersupporttheme.com. * Corporate Website : https://www.grow-shine.com. * License: You must have a valid license purchased only from customersupporttheme.com in order to legally use the theme for your project.. * Copyright: . 2016 - 2022 Grow Shine Services Pvt. Ltd. All Rights Reserved../..@charset "UTF-8";./** Normalize.css **/./! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css */..html {. line-height: 1.15;. -webkit-text-size-adjust: 100%;.}..body {. margin: 0;.}..main {. display: block;.}..h1 {. font-size: 2em;. margin: 0.67em 0;.}..hr {. box-sizing: content-box;. height: 0;. overflow: visible;.}..pre {. font-family: monospace, monospace;. font-size: 1em;.}..a {. background-color: transparent;. transition: all 0.3s ease;.}..a:hover {. transition: all 0.3s ease;.}..abbr[title] {. border-bottom: non

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	523
Entropy (8bit):	4.840276786362852
Encrypted:	false
SSDEEP:	12:zvAF5dvhpdo6buIYsWVtluTbWQsw6fTZHYkeIRZYB1HKa:7g5ZlekJnGZ4keIRZYXKa
MD5:	5DBAB1BA7DDFA643591063EF0825210E
SHA1:	F2E238F6254E3038665868AF3E3D5CB2CF9F8106
SHA-256:	F37959A35E3E6E2B5AE6CA8808904BE1D88C1F49BC749593F1EC882C35D90E8A
SHA-512:	6EAD853D650AF8D1ADDBA7609AD9422D03A32C2138C4A242E657E019B188C75EF4440B088EFA99B9A87046C678710B6BE28565C97AEAD419E4350F5B4111B484
Malicious:	false
Reputation:	low
Preview:	{. "main.css": "css/main2.css",. "main.js": "main.3c5b36cba0c64ce3ed94.js",. "worker.js": "worker.cf1859efc210e2dcc36c.js",. "remote.js": "remote.a173c0df97fe36e3971f.js",. "883.js": "883.a3817f13193679591050.js",. "remotenetwork.js": "remotenetwork.f710bbfecd353667d5a0.js",. "remoteconsole.js": "remoteconsole.8bae9d99064d916659e2.js",. "mirror.js": "mirror.ff22b37666d8316c8d12.js",. "664.js": "664.6426c865a2a54ad73c14.js",. "638.js": "638.b5fe9cd5c7d13e585ed3.js",. "505.js": "505.daae075ca822990b0f09.js".}

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8853868030025245
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWrMe:PLKdXNQK+QP51SMe
MD5:	47F1981DB189307453E8132E14F402A5
SHA1:	75051C892A29F42CFAB029E8BCFF922E8BB6659F
SHA-256:	8D1432CEAB93A29B0F70AE7A58A6A6FE8160D37D63D08CF381C9D7F7C385AEE9
SHA-512:	BC51EE8B3DA846AAB84333F580E3B99BE276EBBECD995674E2F19FEF8780F3366EA727EA1FBB253E18B67452FA7D5F86344C394C8DAD929ABC90AF2DDC18DB53
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/webworker.js?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__es.js');

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:31:46.521310091 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 24, 2024 14:31:56.129476070 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 24, 2024 14:31:56.553505898 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.553550959 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.553617954 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.556140900 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.556169987 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.556307077 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.556318045 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.556463957 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.556601048 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.556610107 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.873385906 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.873657942 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.873677015 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.874737978 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.874850035 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.875870943 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.875948906 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.876080036 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.876089096 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.884196043 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.884500980 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.884516954 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.885787010 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.885848045 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.886890888 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.886955023 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.924557924 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.940140963 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:56.940155983 CEST	443	49735	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:56.989414930 CEST	49735	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:57.875272989 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:57.875416040 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:57.875498056 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:57.875758886 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:57.875786066 CEST	443	49736	104.18.4.186	192.168.2.4
Apr 24, 2024 14:31:57.875797033 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:57.875849962 CEST	49736	443	192.168.2.4	104.18.4.186
Apr 24, 2024 14:31:58.077879906 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.077930927 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.078015089 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.078545094 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.078558922 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.410675049 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.411025047 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.411056995 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.412115097 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.412189960 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.415327072 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.415389061 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.415971041 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:58.415977001 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:58.458882093 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.134777069 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.134876966 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.134937048 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.135231018 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.135252953 CEST	443	49739	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.135263920 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.135370016 CEST	49739	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.461378098 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.461436033 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.461560965 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.462013960 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.462029934 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.621587992 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:31:59.621639013 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:31:59.621706963 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:31:59.622311115 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:31:59.622330904 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:31:59.787101030 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.790999889 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.791032076 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.791498899 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.795011997 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.795114994 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.796096087 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:31:59.840128899 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:31:59.982474089 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:31:59.983103991 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:31:59.983138084 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:31:59.985028982 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:31:59.985094070 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:31:59.986526012 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:31:59.986618042 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:32:00.036906004 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:32:00.036937952 CEST	443	49741	142.250.141.106	192.168.2.4
Apr 24, 2024 14:32:00.080162048 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.080207109 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.080426931 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.081975937 CEST	49741	443	192.168.2.4	142.250.141.106
Apr 24, 2024 14:32:00.085261106 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.085273981 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.425656080 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.425725937 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.445780993 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.445813894 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.446811914 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.489725113 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.540695906 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:32:00.540725946 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:32:00.540786028 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:32:00.540807962 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:32:00.542006016 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:32:00.542099953 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:32:00.597883940 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.599152088 CEST	49740	443	192.168.2.4	13.226.210.34
Apr 24, 2024 14:32:00.599190950 CEST	443	49740	13.226.210.34	192.168.2.4
Apr 24, 2024 14:32:00.640120983 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.758449078 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.758531094 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.758703947 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.759047031 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.759066105 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.759078979 CEST	49742	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.759083986 CEST	443	49742	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.795713902 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.795749903 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:00.795805931 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.796109915 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:00.796123981 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.120343924 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.120440006 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:01.127872944 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:01.127888918 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.128164053 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.131167889 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:01.172146082 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.215601921 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.215636969 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.215780973 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.215809107 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.215815067 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.215922117 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.216125011 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.216156006 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.216227055 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.216598034 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.216613054 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.217087984 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.217099905 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.217729092 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.217739105 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.439208984 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.439271927 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.439368963 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:01.443372011 CEST	49743	443	192.168.2.4	23.61.210.98
Apr 24, 2024 14:32:01.443387985 CEST	443	49743	23.61.210.98	192.168.2.4
Apr 24, 2024 14:32:01.549603939 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.550074100 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.550909996 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.560431004 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.560440063 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.560657978 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.560666084 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.561681032 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.561698914 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.561945915 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.562022924 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.562741995 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.562812090 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.563884974 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.563999891 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.565223932 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.565288067 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.565294981 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.565356970 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.565890074 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.565897942 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.568087101 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.568310022 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.568317890 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.568439960 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.568883896 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.568892002 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:01.613615036 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.613629103 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:01.613646030 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.389173031 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.389197111 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.389250040 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.389277935 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.389293909 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.389321089 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.389338017 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.390137911 CEST	49747	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.390151024 CEST	443	49747	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.392085075 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.392139912 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.392205000 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.392469883 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.392482996 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.407191992 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429570913 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429579973 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429619074 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429636002 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.429646015 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429656029 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429681063 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.429702997 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.429702997 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.429735899 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.474185944 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.474209070 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.474216938 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.474244118 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.474277020 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.474287033 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.474306107 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.474338055 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.474361897 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.547755003 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.547775984 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.547826052 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.547842026 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.547873974 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.547892094 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.582169056 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.582192898 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.582241058 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.582252979 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.582288980 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.582308054 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.586563110 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.586616039 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.586623907 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.591948032 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.591973066 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.592027903 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.592041016 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.592107058 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.626908064 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.626933098 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.626991987 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.627008915 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.627043009 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.627055883 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.628617048 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.631324053 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.631400108 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.650259972 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.650351048 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.650362015 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.691925049 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.698466063 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.698477983 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.698530912 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.698545933 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.698554993 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.698630095 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.718905926 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.719268084 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.719280958 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.720331907 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.720578909 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.720971107 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.721019983 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.721674919 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.721681118 CEST	443	49749	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729051113 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729077101 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729141951 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.729156971 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729181051 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.729211092 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.729567051 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729577065 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729614973 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729625940 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.729645014 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.729677916 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.754534960 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.754556894 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.754606009 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.754616022 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.754650116 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.754667997 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.755924940 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.755948067 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.755985022 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.755999088 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.756026030 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.756042957 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.760263920 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.760314941 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.771724939 CEST	49749	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.775846004 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.775919914 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.775933981 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.776757956 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.776774883 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.776804924 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.776813984 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.776838064 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.776856899 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.802436113 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.802464962 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.802495956 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.802506924 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.802539110 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.803600073 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.803646088 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.803661108 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.803670883 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.803711891 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.803725004 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.817317009 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.817370892 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.817416906 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.817420959 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.817451000 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.817472935 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.853413105 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.865401983 CEST	49746	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.865417004 CEST	443	49746	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.887150049 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.887176037 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.887240887 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.887254000 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.887279987 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.887300014 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.901829004 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.901879072 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.901916981 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.901926041 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.901969910 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.922389030 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.922416925 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.922450066 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.922463894 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.922494888 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.922508001 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.940229893 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.940254927 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.940351009 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.940372944 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.940385103 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.944185972 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.950953007 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.951003075 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.951047897 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.951057911 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.951095104 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.967515945 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.967571974 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.967623949 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.967634916 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.967664003 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.967684031 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.982203960 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.982250929 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.982278109 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.982285976 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.982333899 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.993196011 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.993252993 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.993267059 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:02.993277073 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:02.993428946 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.010199070 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.010246038 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.010270119 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.010278940 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.010325909 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.024960995 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.025013924 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.025058985 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.025068998 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.025105000 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.025110960 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.025157928 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.025166988 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.031615973 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.040546894 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.040590048 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.040646076 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.040654898 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.040680885 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.055119991 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.055176020 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.055211067 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.055223942 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.055243969 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.068661928 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.068681002 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.068741083 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.068749905 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.068773985 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.070614100 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.070655107 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.070660114 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.072042942 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.085117102 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.085134983 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.085211992 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.085220098 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.088049889 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.088056087 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.099396944 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.099423885 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.099473953 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.099484921 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.099524975 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.111963987 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.111987114 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.112040997 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.112052917 CEST	443	49748	13.226.228.59	192.168.2.4
Apr 24, 2024 14:32:03.112063885 CEST	49748	443	192.168.2.4	13.226.228.59
Apr 24, 2024 14:32:03.113830090 CEST	443	49748	13.226.228.59	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 14:31:56.397419930 CEST	192.168.2.4	1.1.1.1	0x195b	Standard query (0)	app.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:56.397707939 CEST	192.168.2.4	1.1.1.1	0x15dd	Standard query (0)	app.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:31:57.878669024 CEST	192.168.2.4	1.1.1.1	0x826a	Standard query (0)	sign-app.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:57.879750967 CEST	192.168.2.4	1.1.1.1	0x9a02	Standard query (0)	sign-app.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:31:59.466626883 CEST	192.168.2.4	1.1.1.1	0x3a11	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.466936111 CEST	192.168.2.4	1.1.1.1	0x6645	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:01.030566931 CEST	192.168.2.4	1.1.1.1	0xe909	Standard query (0)	d2i8kkeqh9ciqw.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:01.031055927 CEST	192.168.2.4	1.1.1.1	0x79b7	Standard query (0)	d2i8kkeqh9ciqw.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:05.299530029 CEST	192.168.2.4	1.1.1.1	0xb518	Standard query (0)	app.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.299856901 CEST	192.168.2.4	1.1.1.1	0x6e47	Standard query (0)	app.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:05.481403112 CEST	192.168.2.4	1.1.1.1	0xfd10	Standard query (0)	d2i8kkeqh9ciqw.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.481682062 CEST	192.168.2.4	1.1.1.1	0x67e7	Standard query (0)	d2i8kkeqh9ciqw.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:05.507589102 CEST	192.168.2.4	1.1.1.1	0xa8f5	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.507988930 CEST	192.168.2.4	1.1.1.1	0x3bfc	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:07.112435102 CEST	192.168.2.4	1.1.1.1	0x346a	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:07.112575054 CEST	192.168.2.4	1.1.1.1	0xec88	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:07.120837927 CEST	192.168.2.4	1.1.1.1	0x1894	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:07.290051937 CEST	192.168.2.4	1.1.1.1	0xeac2	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:07.290600061 CEST	192.168.2.4	1.1.1.1	0xd7de	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:07.631194115 CEST	192.168.2.4	1.1.1.1	0xd80e	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:07.631820917 CEST	192.168.2.4	1.1.1.1	0xb72e	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:07.960017920 CEST	192.168.2.4	1.1.1.1	0x78b1	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:07.961468935 CEST	192.168.2.4	1.1.1.1	0x478	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:08.140415907 CEST	192.168.2.4	1.1.1.1	0x1f2c	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:08.140603065 CEST	192.168.2.4	1.1.1.1	0xe6dc	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:08.308321953 CEST	192.168.2.4	1.1.1.1	0xe1a3	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:08.308938026 CEST	192.168.2.4	1.1.1.1	0xe2b2	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:08.783297062 CEST	192.168.2.4	1.1.1.1	0x1186	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:08.783622026 CEST	192.168.2.4	1.1.1.1	0x3b3e	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:08.947755098 CEST	192.168.2.4	1.1.1.1	0xac87	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:08.948376894 CEST	192.168.2.4	1.1.1.1	0x87d5	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:09.723079920 CEST	192.168.2.4	1.1.1.1	0x9a1d	Standard query (0)	sockets.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:09.723560095 CEST	192.168.2.4	1.1.1.1	0xddcb	Standard query (0)	sockets.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:11.214975119 CEST	192.168.2.4	1.1.1.1	0x7230	Standard query (0)	sockets.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:11.215322018 CEST	192.168.2.4	1.1.1.1	0x3fc0	Standard query (0)	sockets.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:12.214668989 CEST	192.168.2.4	1.1.1.1	0x6121	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:12.214864016 CEST	192.168.2.4	1.1.1.1	0xd96e	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:12.369344950 CEST	192.168.2.4	1.1.1.1	0xb994	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:12.526704073 CEST	192.168.2.4	1.1.1.1	0x4447	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:12.526968002 CEST	192.168.2.4	1.1.1.1	0x5729	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:12.724716902 CEST	192.168.2.4	1.1.1.1	0x2cd4	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:12.724864006 CEST	192.168.2.4	1.1.1.1	0x1dc1	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:12.882057905 CEST	192.168.2.4	1.1.1.1	0x8210	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:12.882298946 CEST	192.168.2.4	1.1.1.1	0x7f9e	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:13.058793068 CEST	192.168.2.4	1.1.1.1	0xbbf3	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:13.058954954 CEST	192.168.2.4	1.1.1.1	0x5f4a	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:13.236130953 CEST	192.168.2.4	1.1.1.1	0x6fe6	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:13.236239910 CEST	192.168.2.4	1.1.1.1	0x4965	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:13.393203974 CEST	192.168.2.4	1.1.1.1	0xb71f	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:13.393348932 CEST	192.168.2.4	1.1.1.1	0x1e06	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:13.552259922 CEST	192.168.2.4	1.1.1.1	0xbd93	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:13.552450895 CEST	192.168.2.4	1.1.1.1	0x7b16	Standard query (0)	dag0091vkqtc7.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:23.441550016 CEST	192.168.2.4	1.1.1.1	0x8928	Standard query (0)	www.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:23.441776991 CEST	192.168.2.4	1.1.1.1	0x81a4	Standard query (0)	www.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:25.356698036 CEST	192.168.2.4	1.1.1.1	0x2dbc	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:25.356698036 CEST	192.168.2.4	1.1.1.1	0x1736	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:26.731883049 CEST	192.168.2.4	1.1.1.1	0xd21a	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:26.732126951 CEST	192.168.2.4	1.1.1.1	0x74a7	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:26.807054043 CEST	192.168.2.4	1.1.1.1	0x3154	Standard query (0)	www.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:26.807223082 CEST	192.168.2.4	1.1.1.1	0xa9f4	Standard query (0)	www.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:27.539921999 CEST	192.168.2.4	1.1.1.1	0x6e98	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:27.540342093 CEST	192.168.2.4	1.1.1.1	0x3e03	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:29.220547915 CEST	192.168.2.4	1.1.1.1	0x63dc	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:29.221283913 CEST	192.168.2.4	1.1.1.1	0xb217	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:30.027384043 CEST	192.168.2.4	1.1.1.1	0xda4b	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:30.308880091 CEST	192.168.2.4	1.1.1.1	0x9fc8	Standard query (0)	forms-eu1.hsforms.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:30.309088945 CEST	192.168.2.4	1.1.1.1	0x2773	Standard query (0)	forms-eu1.hsforms.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:31.715004921 CEST	192.168.2.4	1.1.1.1	0x96b1	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:31.715353012 CEST	192.168.2.4	1.1.1.1	0x9d45	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:31.715670109 CEST	192.168.2.4	1.1.1.1	0x7def	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:31.715856075 CEST	192.168.2.4	1.1.1.1	0x1a23	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:32.209208965 CEST	192.168.2.4	1.1.1.1	0x89b0	Standard query (0)	forms-eu1.hsforms.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:32.209306955 CEST	192.168.2.4	1.1.1.1	0xeba1	Standard query (0)	forms-eu1.hsforms.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:33.071822882 CEST	192.168.2.4	1.1.1.1	0xd18b	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.072211027 CEST	192.168.2.4	1.1.1.1	0x63a4	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:33.072642088 CEST	192.168.2.4	1.1.1.1	0x8ce4	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.072969913 CEST	192.168.2.4	1.1.1.1	0x7643	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:33.783660889 CEST	192.168.2.4	1.1.1.1	0xf309	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.783811092 CEST	192.168.2.4	1.1.1.1	0xe6ee	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.101687908 CEST	192.168.2.4	1.1.1.1	0x5eee	Standard query (0)	scout-cdn.salesloft.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.101856947 CEST	192.168.2.4	1.1.1.1	0x6355	Standard query (0)	scout-cdn.salesloft.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.279974937 CEST	192.168.2.4	1.1.1.1	0x5ac5	Standard query (0)	23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.280121088 CEST	192.168.2.4	1.1.1.1	0xf65b	Standard query (0)	23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.349746943 CEST	192.168.2.4	1.1.1.1	0x5f47	Standard query (0)	appvizer.one	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.350286961 CEST	192.168.2.4	1.1.1.1	0x853f	Standard query (0)	appvizer.one	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.459649086 CEST	192.168.2.4	1.1.1.1	0x59d8	Standard query (0)	tracking.g2crowd.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.459820032 CEST	192.168.2.4	1.1.1.1	0xe79f	Standard query (0)	tracking.g2crowd.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.605851889 CEST	192.168.2.4	1.1.1.1	0x93c3	Standard query (0)	js-eu1.hs-scripts.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.606153965 CEST	192.168.2.4	1.1.1.1	0xe36f	Standard query (0)	js-eu1.hs-scripts.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.647758007 CEST	192.168.2.4	1.1.1.1	0xcdb7	Standard query (0)	secure.bali6nora.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.648576021 CEST	192.168.2.4	1.1.1.1	0xe023	Standard query (0)	secure.bali6nora.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.659890890 CEST	192.168.2.4	1.1.1.1	0x1f69	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.660274982 CEST	192.168.2.4	1.1.1.1	0xc4df	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.693744898 CEST	192.168.2.4	1.1.1.1	0x2c	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.693873882 CEST	192.168.2.4	1.1.1.1	0x1f46	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.705902100 CEST	192.168.2.4	1.1.1.1	0x2a00	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.706301928 CEST	192.168.2.4	1.1.1.1	0x2a67	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:34.939752102 CEST	192.168.2.4	1.1.1.1	0xef8	Standard query (0)	scout.salesloft.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.939899921 CEST	192.168.2.4	1.1.1.1	0x869f	Standard query (0)	scout.salesloft.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:35.692056894 CEST	192.168.2.4	1.1.1.1	0x9e18	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:35.693948030 CEST	192.168.2.4	1.1.1.1	0xbb27	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:35.964153051 CEST	192.168.2.4	1.1.1.1	0x653f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:35.964307070 CEST	192.168.2.4	1.1.1.1	0xfdf8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:35.990098953 CEST	192.168.2.4	1.1.1.1	0x69e2	Standard query (0)	scout.salesloft.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:35.990183115 CEST	192.168.2.4	1.1.1.1	0x4db6	Standard query (0)	scout.salesloft.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:36.191771984 CEST	192.168.2.4	1.1.1.1	0x917e	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.194077015 CEST	192.168.2.4	1.1.1.1	0xb389	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:36.202577114 CEST	192.168.2.4	1.1.1.1	0xaa26	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.202820063 CEST	192.168.2.4	1.1.1.1	0xa969	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:36.623529911 CEST	192.168.2.4	1.1.1.1	0x5aeb	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.623730898 CEST	192.168.2.4	1.1.1.1	0xdfa8	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:36.952970028 CEST	192.168.2.4	1.1.1.1	0x3fbe	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.953625917 CEST	192.168.2.4	1.1.1.1	0x3df9	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.058664083 CEST	192.168.2.4	1.1.1.1	0x97a3	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.059361935 CEST	192.168.2.4	1.1.1.1	0x1c6a	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.066438913 CEST	192.168.2.4	1.1.1.1	0xd3b8	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.067585945 CEST	192.168.2.4	1.1.1.1	0xd4c0	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.144406080 CEST	192.168.2.4	1.1.1.1	0x8cda	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.145579100 CEST	192.168.2.4	1.1.1.1	0x7ca2	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.146042109 CEST	192.168.2.4	1.1.1.1	0xc5a	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.146569967 CEST	192.168.2.4	1.1.1.1	0x10cb	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.257277012 CEST	192.168.2.4	1.1.1.1	0xe79e	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.258161068 CEST	192.168.2.4	1.1.1.1	0x191c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.259450912 CEST	192.168.2.4	1.1.1.1	0x9c0b	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.259764910 CEST	192.168.2.4	1.1.1.1	0x5636	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:37.265105963 CEST	192.168.2.4	1.1.1.1	0xd454	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.265902996 CEST	192.168.2.4	1.1.1.1	0x1577	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:38.161406040 CEST	192.168.2.4	1.1.1.1	0x96bf	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:38.161567926 CEST	192.168.2.4	1.1.1.1	0x7a37	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.152420998 CEST	192.168.2.4	1.1.1.1	0x3126	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.153004885 CEST	192.168.2.4	1.1.1.1	0xaf59	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.185837984 CEST	192.168.2.4	1.1.1.1	0xd3df	Standard query (0)	assets.ubembed.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.186086893 CEST	192.168.2.4	1.1.1.1	0xd8a2	Standard query (0)	assets.ubembed.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.194145918 CEST	192.168.2.4	1.1.1.1	0x42c3	Standard query (0)	js-eu1.hs-analytics.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.194626093 CEST	192.168.2.4	1.1.1.1	0x1bc8	Standard query (0)	js-eu1.hs-analytics.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.195415020 CEST	192.168.2.4	1.1.1.1	0x6767	Standard query (0)	js-eu1.hsadspixel.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.195985079 CEST	192.168.2.4	1.1.1.1	0x504c	Standard query (0)	js-eu1.hsadspixel.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.196846962 CEST	192.168.2.4	1.1.1.1	0xd668	Standard query (0)	js-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.197158098 CEST	192.168.2.4	1.1.1.1	0x9403	Standard query (0)	js-eu1.hubspot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.233052969 CEST	192.168.2.4	1.1.1.1	0xbaec	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.233627081 CEST	192.168.2.4	1.1.1.1	0x21f3	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.235193968 CEST	192.168.2.4	1.1.1.1	0x7c0a	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.235750914 CEST	192.168.2.4	1.1.1.1	0xe8d0	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.239217997 CEST	192.168.2.4	1.1.1.1	0x2a48	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.239496946 CEST	192.168.2.4	1.1.1.1	0x6d4f	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.240401983 CEST	192.168.2.4	1.1.1.1	0xa363	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.240993977 CEST	192.168.2.4	1.1.1.1	0x2e4e	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.243818045 CEST	192.168.2.4	1.1.1.1	0x9837	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.244306087 CEST	192.168.2.4	1.1.1.1	0x1e17	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.245388985 CEST	192.168.2.4	1.1.1.1	0xd2b4	Standard query (0)	appvizer.one	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.245656967 CEST	192.168.2.4	1.1.1.1	0x5ec9	Standard query (0)	appvizer.one	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.894737005 CEST	192.168.2.4	1.1.1.1	0xca0d	Standard query (0)	js-eu1.hs-banner.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.894896030 CEST	192.168.2.4	1.1.1.1	0xac9c	Standard query (0)	js-eu1.hs-banner.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:39.927495003 CEST	192.168.2.4	1.1.1.1	0xd72b	Standard query (0)	js-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.927679062 CEST	192.168.2.4	1.1.1.1	0x3401	Standard query (0)	js-eu1.hscollectedforms.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:40.253180027 CEST	192.168.2.4	1.1.1.1	0x98d8	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.253810883 CEST	192.168.2.4	1.1.1.1	0x3e36	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:40.506216049 CEST	192.168.2.4	1.1.1.1	0xa2f6	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.506923914 CEST	192.168.2.4	1.1.1.1	0x292a	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:40.750005007 CEST	192.168.2.4	1.1.1.1	0x7320	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.750313997 CEST	192.168.2.4	1.1.1.1	0xa6	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:40.763657093 CEST	192.168.2.4	1.1.1.1	0xef24	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.763931990 CEST	192.168.2.4	1.1.1.1	0x1c3a	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:40.823899984 CEST	192.168.2.4	1.1.1.1	0xcb6b	Standard query (0)	cta-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.824229002 CEST	192.168.2.4	1.1.1.1	0xf114	Standard query (0)	cta-eu1.hubspot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:41.729712963 CEST	192.168.2.4	1.1.1.1	0xfd7f	Standard query (0)	api-eu1.hubapi.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.730432034 CEST	192.168.2.4	1.1.1.1	0xc94f	Standard query (0)	api-eu1.hubapi.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:41.731239080 CEST	192.168.2.4	1.1.1.1	0xd467	Standard query (0)	forms-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.732039928 CEST	192.168.2.4	1.1.1.1	0xca38	Standard query (0)	forms-eu1.hscollectedforms.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:41.938945055 CEST	192.168.2.4	1.1.1.1	0x1367	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.939398050 CEST	192.168.2.4	1.1.1.1	0x540e	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Apr 24, 2024 14:32:42.206798077 CEST	192.168.2.4	1.1.1.1	0xd43	Standard query (0)	cta-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.206940889 CEST	192.168.2.4	1.1.1.1	0x5cfd	Standard query (0)	cta-eu1.hubspot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:42.498318911 CEST	192.168.2.4	1.1.1.1	0xb17a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.498658895 CEST	192.168.2.4	1.1.1.1	0x759c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:42.500046015 CEST	192.168.2.4	1.1.1.1	0x4ac6	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.500220060 CEST	192.168.2.4	1.1.1.1	0x6568	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:43.123862982 CEST	192.168.2.4	1.1.1.1	0x24cc	Standard query (0)	forms-eu1.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.123862982 CEST	192.168.2.4	1.1.1.1	0x2a83	Standard query (0)	forms-eu1.hscollectedforms.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:43.196753979 CEST	192.168.2.4	1.1.1.1	0x5728	Standard query (0)	perf-eu1.hsforms.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.196753979 CEST	192.168.2.4	1.1.1.1	0xd8c6	Standard query (0)	perf-eu1.hsforms.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:43.206779957 CEST	192.168.2.4	1.1.1.1	0x2062	Standard query (0)	api-eu1.hubapi.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.206779957 CEST	192.168.2.4	1.1.1.1	0x7b70	Standard query (0)	api-eu1.hubapi.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:43.207695007 CEST	192.168.2.4	1.1.1.1	0xa116	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.208133936 CEST	192.168.2.4	1.1.1.1	0x4549	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:43.380211115 CEST	192.168.2.4	1.1.1.1	0xcd8a	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.380384922 CEST	192.168.2.4	1.1.1.1	0x1cc6	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:44.076617956 CEST	192.168.2.4	1.1.1.1	0xd977	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.076771975 CEST	192.168.2.4	1.1.1.1	0x288	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:44.567569971 CEST	192.168.2.4	1.1.1.1	0xd68a	Standard query (0)	perf-eu1.hsforms.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.567831993 CEST	192.168.2.4	1.1.1.1	0xf06d	Standard query (0)	perf-eu1.hsforms.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:45.533315897 CEST	192.168.2.4	1.1.1.1	0x5ecd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:45.533932924 CEST	192.168.2.4	1.1.1.1	0xf858	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:46.849525928 CEST	192.168.2.4	1.1.1.1	0xc109	Standard query (0)	ariadne.appvizer.one	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:46.850054979 CEST	192.168.2.4	1.1.1.1	0xd054	Standard query (0)	ariadne.appvizer.one	65	IN (0x0001)	false
Apr 24, 2024 14:32:49.114051104 CEST	192.168.2.4	1.1.1.1	0x95e9	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:49.114648104 CEST	192.168.2.4	1.1.1.1	0xb183	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:49.115292072 CEST	192.168.2.4	1.1.1.1	0x20c	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:49.116558075 CEST	192.168.2.4	1.1.1.1	0xe9d5	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 14:32:49.945173979 CEST	192.168.2.4	1.1.1.1	0x4295	Standard query (0)	track-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:49.947164059 CEST	192.168.2.4	1.1.1.1	0xbbf7	Standard query (0)	track-eu1.hubspot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:50.139333963 CEST	192.168.2.4	1.1.1.1	0x1c66	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:50.234117985 CEST	192.168.2.4	1.1.1.1	0x8ad1	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:50.234448910 CEST	192.168.2.4	1.1.1.1	0xa08	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:50.235482931 CEST	192.168.2.4	1.1.1.1	0x3893	Standard query (0)	ariadne.appvizer.one	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:50.235716105 CEST	192.168.2.4	1.1.1.1	0x36b2	Standard query (0)	ariadne.appvizer.one	65	IN (0x0001)	false
Apr 24, 2024 14:32:51.823002100 CEST	192.168.2.4	1.1.1.1	0xaa4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:51.823434114 CEST	192.168.2.4	1.1.1.1	0xe1e3	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:51.828990936 CEST	192.168.2.4	1.1.1.1	0x5143	Standard query (0)	track-eu1.hubspot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:51.829473019 CEST	192.168.2.4	1.1.1.1	0x5916	Standard query (0)	track-eu1.hubspot.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:52.722783089 CEST	192.168.2.4	1.1.1.1	0xf989	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:52.723109007 CEST	192.168.2.4	1.1.1.1	0x93c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:57.445730925 CEST	192.168.2.4	1.1.1.1	0xb4d8	Standard query (0)	help.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:57.445916891 CEST	192.168.2.4	1.1.1.1	0x7a6e	Standard query (0)	help.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:58.618535042 CEST	192.168.2.4	1.1.1.1	0x89aa	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.618870974 CEST	192.168.2.4	1.1.1.1	0x86b2	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:58.619405985 CEST	192.168.2.4	1.1.1.1	0x22a8	Standard query (0)	p17.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.619491100 CEST	192.168.2.4	1.1.1.1	0xab76	Standard query (0)	p17.zdassets.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:58.620296955 CEST	192.168.2.4	1.1.1.1	0x4838	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.620296955 CEST	192.168.2.4	1.1.1.1	0xff3c	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:58.620747089 CEST	192.168.2.4	1.1.1.1	0x26ee	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.620956898 CEST	192.168.2.4	1.1.1.1	0xff72	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:58.621489048 CEST	192.168.2.4	1.1.1.1	0x6528	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.621489048 CEST	192.168.2.4	1.1.1.1	0xdfa0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:59.721586943 CEST	192.168.2.4	1.1.1.1	0xe76c	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:59.721662998 CEST	192.168.2.4	1.1.1.1	0x6b99	Standard query (0)	theme.zdassets.com	65	IN (0x0001)	false
Apr 24, 2024 14:32:59.775783062 CEST	192.168.2.4	1.1.1.1	0x3adb	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:59.775912046 CEST	192.168.2.4	1.1.1.1	0x7390	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:00.233923912 CEST	192.168.2.4	1.1.1.1	0x14c7	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.234209061 CEST	192.168.2.4	1.1.1.1	0xbbdb	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:00.595431089 CEST	192.168.2.4	1.1.1.1	0x4ea9	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.595694065 CEST	192.168.2.4	1.1.1.1	0xd4a1	Standard query (0)	theme.zdassets.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:00.651299000 CEST	192.168.2.4	1.1.1.1	0xc55e	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.651592016 CEST	192.168.2.4	1.1.1.1	0xa273	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:00.809770107 CEST	192.168.2.4	1.1.1.1	0x78c2	Standard query (0)	signaturit.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.809926987 CEST	192.168.2.4	1.1.1.1	0xfbde	Standard query (0)	signaturit.zendesk.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:03.093982935 CEST	192.168.2.4	1.1.1.1	0xf76a	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.094367981 CEST	192.168.2.4	1.1.1.1	0xd41a	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:03.210931063 CEST	192.168.2.4	1.1.1.1	0x573	Standard query (0)	help.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.211047888 CEST	192.168.2.4	1.1.1.1	0x9fc2	Standard query (0)	help.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:03.997591019 CEST	192.168.2.4	1.1.1.1	0xd580	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.997744083 CEST	192.168.2.4	1.1.1.1	0x2342	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:04.497034073 CEST	192.168.2.4	1.1.1.1	0x726e	Standard query (0)	app.hellozest.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:04.497338057 CEST	192.168.2.4	1.1.1.1	0x1ba8	Standard query (0)	app.hellozest.io	65	IN (0x0001)	false
Apr 24, 2024 14:33:05.679205894 CEST	192.168.2.4	1.1.1.1	0x87bf	Standard query (0)	app.birdie.so	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:05.679575920 CEST	192.168.2.4	1.1.1.1	0xbbc0	Standard query (0)	app.birdie.so	65	IN (0x0001)	false
Apr 24, 2024 14:33:06.310554028 CEST	192.168.2.4	1.1.1.1	0xc791	Standard query (0)	signaturit.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:06.310890913 CEST	192.168.2.4	1.1.1.1	0xba2b	Standard query (0)	signaturit.zendesk.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:07.149714947 CEST	192.168.2.4	1.1.1.1	0x646a	Standard query (0)	widget-mediator.zopim.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.151338100 CEST	192.168.2.4	1.1.1.1	0xa311	Standard query (0)	widget-mediator.zopim.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:07.418714046 CEST	192.168.2.4	1.1.1.1	0x3b	Standard query (0)	account.signaturit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.419794083 CEST	192.168.2.4	1.1.1.1	0x2610	Standard query (0)	account.signaturit.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:07.420855999 CEST	192.168.2.4	1.1.1.1	0x55ba	Standard query (0)	zendesk-eu.my.sentry.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.421319962 CEST	192.168.2.4	1.1.1.1	0x4d95	Standard query (0)	zendesk-eu.my.sentry.io	65	IN (0x0001)	false
Apr 24, 2024 14:33:07.743057966 CEST	192.168.2.4	1.1.1.1	0xee45	Standard query (0)	dag0091vkqtc7.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:10.901489019 CEST	192.168.2.4	1.1.1.1	0x887d	Standard query (0)	d47l4duuvaadc.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:10.901681900 CEST	192.168.2.4	1.1.1.1	0xc300	Standard query (0)	d47l4duuvaadc.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:33:12.189204931 CEST	192.168.2.4	1.1.1.1	0x8ad9	Standard query (0)	d3dvn1tnyxabn5.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:12.189387083 CEST	192.168.2.4	1.1.1.1	0xef6d	Standard query (0)	d3dvn1tnyxabn5.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:33:13.624685049 CEST	192.168.2.4	1.1.1.1	0xe06d	Standard query (0)	d3dvn1tnyxabn5.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.624876022 CEST	192.168.2.4	1.1.1.1	0x82cb	Standard query (0)	d3dvn1tnyxabn5.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:33:13.650778055 CEST	192.168.2.4	1.1.1.1	0x166f	Standard query (0)	d47l4duuvaadc.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.650924921 CEST	192.168.2.4	1.1.1.1	0xc79e	Standard query (0)	d47l4duuvaadc.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:33:13.920036077 CEST	192.168.2.4	1.1.1.1	0x3461	Standard query (0)	cdn.birdie.so	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.920254946 CEST	192.168.2.4	1.1.1.1	0x2956	Standard query (0)	cdn.birdie.so	65	IN (0x0001)	false
Apr 24, 2024 14:33:14.950311899 CEST	192.168.2.4	1.1.1.1	0xab4a	Standard query (0)	cdn.birdie.so	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:14.950438976 CEST	192.168.2.4	1.1.1.1	0xa015	Standard query (0)	cdn.birdie.so	65	IN (0x0001)	false
Apr 24, 2024 14:33:15.991734982 CEST	192.168.2.4	1.1.1.1	0xbda0	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:15.991838932 CEST	192.168.2.4	1.1.1.1	0x7900	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:16.816504002 CEST	192.168.2.4	1.1.1.1	0xde44	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:16.817440987 CEST	192.168.2.4	1.1.1.1	0xab13	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Apr 24, 2024 14:33:17.550035954 CEST	192.168.2.4	1.1.1.1	0xad3f	Standard query (0)	diysyudrbtisp.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:17.550127983 CEST	192.168.2.4	1.1.1.1	0xfe61	Standard query (0)	diysyudrbtisp.cloudfront.net	65	IN (0x0001)	false
Apr 24, 2024 14:33:18.633368969 CEST	192.168.2.4	1.1.1.1	0xa802	Standard query (0)	sockp.birdie.so	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.633610010 CEST	192.168.2.4	1.1.1.1	0xb794	Standard query (0)	sockp.birdie.so	65	IN (0x0001)	false
Apr 24, 2024 14:33:18.634473085 CEST	192.168.2.4	1.1.1.1	0x56b9	Standard query (0)	app.birdie.so	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.634677887 CEST	192.168.2.4	1.1.1.1	0xedd	Standard query (0)	app.birdie.so	65	IN (0x0001)	false
Apr 24, 2024 14:33:18.956646919 CEST	192.168.2.4	1.1.1.1	0x86c3	Standard query (0)	diysyudrbtisp.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.956810951 CEST	192.168.2.4	1.1.1.1	0x4fa0	Standard query (0)	diysyudrbtisp.cloudfront.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 14:31:56.552531004 CEST	1.1.1.1	192.168.2.4	0x15dd	No error (0)	app.signaturit.com			65	IN (0x0001)	false
Apr 24, 2024 14:31:56.552572012 CEST	1.1.1.1	192.168.2.4	0x195b	No error (0)	app.signaturit.com		104.18.4.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:56.552572012 CEST	1.1.1.1	192.168.2.4	0x195b	No error (0)	app.signaturit.com		104.18.5.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:58.057225943 CEST	1.1.1.1	192.168.2.4	0x9a02	No error (0)	sign-app.signaturit.com	d2xgws9bdz6u6p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:31:58.069802999 CEST	1.1.1.1	192.168.2.4	0x826a	No error (0)	sign-app.signaturit.com	d2xgws9bdz6u6p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:31:58.069802999 CEST	1.1.1.1	192.168.2.4	0x826a	No error (0)	d2xgws9bdz6u6p.cloudfront.net		13.226.210.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:58.069802999 CEST	1.1.1.1	192.168.2.4	0x826a	No error (0)	d2xgws9bdz6u6p.cloudfront.net		13.226.210.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:58.069802999 CEST	1.1.1.1	192.168.2.4	0x826a	No error (0)	d2xgws9bdz6u6p.cloudfront.net		13.226.210.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:58.069802999 CEST	1.1.1.1	192.168.2.4	0x826a	No error (0)	d2xgws9bdz6u6p.cloudfront.net		13.226.210.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.619761944 CEST	1.1.1.1	192.168.2.4	0x3a11	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.619761944 CEST	1.1.1.1	192.168.2.4	0x3a11	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.619761944 CEST	1.1.1.1	192.168.2.4	0x3a11	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.619761944 CEST	1.1.1.1	192.168.2.4	0x3a11	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.619761944 CEST	1.1.1.1	192.168.2.4	0x3a11	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.619761944 CEST	1.1.1.1	192.168.2.4	0x3a11	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:31:59.620466948 CEST	1.1.1.1	192.168.2.4	0x6645	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:01.214791059 CEST	1.1.1.1	192.168.2.4	0xe909	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.59	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:01.214791059 CEST	1.1.1.1	192.168.2.4	0xe909	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:01.214791059 CEST	1.1.1.1	192.168.2.4	0xe909	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:01.214791059 CEST	1.1.1.1	192.168.2.4	0xe909	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.453378916 CEST	1.1.1.1	192.168.2.4	0x6e47	No error (0)	app.signaturit.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:05.462569952 CEST	1.1.1.1	192.168.2.4	0xb518	No error (0)	app.signaturit.com		104.18.4.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.462569952 CEST	1.1.1.1	192.168.2.4	0xb518	No error (0)	app.signaturit.com		104.18.5.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.668131113 CEST	1.1.1.1	192.168.2.4	0xfd10	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.59	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.668131113 CEST	1.1.1.1	192.168.2.4	0xfd10	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.668131113 CEST	1.1.1.1	192.168.2.4	0xfd10	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:05.668131113 CEST	1.1.1.1	192.168.2.4	0xfd10	No error (0)	d2i8kkeqh9ciqw.cloudfront.net		13.226.228.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:09.886032104 CEST	1.1.1.1	192.168.2.4	0x9a1d	No error (0)	sockets.signaturit.com		104.18.4.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:09.886032104 CEST	1.1.1.1	192.168.2.4	0x9a1d	No error (0)	sockets.signaturit.com		104.18.5.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:09.892093897 CEST	1.1.1.1	192.168.2.4	0xddcb	No error (0)	sockets.signaturit.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:11.379009008 CEST	1.1.1.1	192.168.2.4	0x3fc0	No error (0)	sockets.signaturit.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:11.379082918 CEST	1.1.1.1	192.168.2.4	0x7230	No error (0)	sockets.signaturit.com		104.18.5.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:11.379082918 CEST	1.1.1.1	192.168.2.4	0x7230	No error (0)	sockets.signaturit.com		104.18.4.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:12.103195906 CEST	1.1.1.1	192.168.2.4	0x99f7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:12.103195906 CEST	1.1.1.1	192.168.2.4	0x99f7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:23.608186960 CEST	1.1.1.1	192.168.2.4	0x81a4	No error (0)	www.signaturit.com	iolliroykg49.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:23.608186960 CEST	1.1.1.1	192.168.2.4	0x81a4	No error (0)	iolliroykg49.wpeproxy.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:23.608391047 CEST	1.1.1.1	192.168.2.4	0x8928	No error (0)	www.signaturit.com	iolliroykg49.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:23.608391047 CEST	1.1.1.1	192.168.2.4	0x8928	No error (0)	iolliroykg49.wpeproxy.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:23.608391047 CEST	1.1.1.1	192.168.2.4	0x8928	No error (0)	iolliroykg49.wpeproxy.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:25.510514021 CEST	1.1.1.1	192.168.2.4	0x2dbc	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:25.510514021 CEST	1.1.1.1	192.168.2.4	0x2dbc	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:25.510514021 CEST	1.1.1.1	192.168.2.4	0x2dbc	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:25.518502951 CEST	1.1.1.1	192.168.2.4	0x1736	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:26.886852980 CEST	1.1.1.1	192.168.2.4	0x74a7	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Apr 24, 2024 14:32:26.894153118 CEST	1.1.1.1	192.168.2.4	0xd21a	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:26.894153118 CEST	1.1.1.1	192.168.2.4	0xd21a	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:26.964627981 CEST	1.1.1.1	192.168.2.4	0xa9f4	No error (0)	www.signaturit.com	iolliroykg49.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:26.964627981 CEST	1.1.1.1	192.168.2.4	0xa9f4	No error (0)	iolliroykg49.wpeproxy.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:26.970377922 CEST	1.1.1.1	192.168.2.4	0x3154	No error (0)	www.signaturit.com	iolliroykg49.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:26.970377922 CEST	1.1.1.1	192.168.2.4	0x3154	No error (0)	iolliroykg49.wpeproxy.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:26.970377922 CEST	1.1.1.1	192.168.2.4	0x3154	No error (0)	iolliroykg49.wpeproxy.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:27.694334984 CEST	1.1.1.1	192.168.2.4	0x3e03	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:27.694628954 CEST	1.1.1.1	192.168.2.4	0x6e98	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:27.694628954 CEST	1.1.1.1	192.168.2.4	0x6e98	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:27.694628954 CEST	1.1.1.1	192.168.2.4	0x6e98	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:29.374864101 CEST	1.1.1.1	192.168.2.4	0xb217	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:29.382893085 CEST	1.1.1.1	192.168.2.4	0x63dc	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:29.382893085 CEST	1.1.1.1	192.168.2.4	0x63dc	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:30.465048075 CEST	1.1.1.1	192.168.2.4	0x9fc8	No error (0)	forms-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:30.465048075 CEST	1.1.1.1	192.168.2.4	0x9fc8	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:30.465048075 CEST	1.1.1.1	192.168.2.4	0x9fc8	No error (0)	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		172.65.232.43	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:30.465302944 CEST	1.1.1.1	192.168.2.4	0x2773	No error (0)	forms-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:30.465302944 CEST	1.1.1.1	192.168.2.4	0x2773	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:31.868669033 CEST	1.1.1.1	192.168.2.4	0x9d45	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:31.868774891 CEST	1.1.1.1	192.168.2.4	0x96b1	No error (0)	consent.cookiebot.com	consent.cookiebot.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:31.869249105 CEST	1.1.1.1	192.168.2.4	0x7def	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:31.877877951 CEST	1.1.1.1	192.168.2.4	0x1a23	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:32.363504887 CEST	1.1.1.1	192.168.2.4	0x89b0	No error (0)	forms-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:32.363504887 CEST	1.1.1.1	192.168.2.4	0x89b0	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:32.363504887 CEST	1.1.1.1	192.168.2.4	0x89b0	No error (0)	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		172.65.232.43	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:32.374027967 CEST	1.1.1.1	192.168.2.4	0xeba1	No error (0)	forms-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:32.374027967 CEST	1.1.1.1	192.168.2.4	0xeba1	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:33.226166964 CEST	1.1.1.1	192.168.2.4	0x63a4	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:33.226821899 CEST	1.1.1.1	192.168.2.4	0x7643	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:33.232681990 CEST	1.1.1.1	192.168.2.4	0xd18b	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:33.234555006 CEST	1.1.1.1	192.168.2.4	0x8ce4	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:33.234555006 CEST	1.1.1.1	192.168.2.4	0x8ce4	No error (0)	static-cdn.hotjar.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.234555006 CEST	1.1.1.1	192.168.2.4	0x8ce4	No error (0)	static-cdn.hotjar.com		18.154.132.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.234555006 CEST	1.1.1.1	192.168.2.4	0x8ce4	No error (0)	static-cdn.hotjar.com		18.154.132.125	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.234555006 CEST	1.1.1.1	192.168.2.4	0x8ce4	No error (0)	static-cdn.hotjar.com		18.154.132.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:33.937392950 CEST	1.1.1.1	192.168.2.4	0xe6ee	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:33.945482016 CEST	1.1.1.1	192.168.2.4	0xf309	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.256186962 CEST	1.1.1.1	192.168.2.4	0x6355	No error (0)	scout-cdn.salesloft.com	scout-cdn.salesloft.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.263819933 CEST	1.1.1.1	192.168.2.4	0x5eee	No error (0)	scout-cdn.salesloft.com	scout-cdn.salesloft.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.441523075 CEST	1.1.1.1	192.168.2.4	0x5ac5	No error (0)	23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com	wc.js.ubembed.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.441736937 CEST	1.1.1.1	192.168.2.4	0xf65b	No error (0)	23cc7fe999e84bcfbe6472fa394eab1f.js.ubembed.com	wc.js.ubembed.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.613149881 CEST	1.1.1.1	192.168.2.4	0x59d8	No error (0)	tracking.g2crowd.com		172.64.144.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.613149881 CEST	1.1.1.1	192.168.2.4	0x59d8	No error (0)	tracking.g2crowd.com		104.18.43.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.613761902 CEST	1.1.1.1	192.168.2.4	0xe79f	No error (0)	tracking.g2crowd.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:34.763140917 CEST	1.1.1.1	192.168.2.4	0x93c3	No error (0)	js-eu1.hs-scripts.com	api-fra04-origin.spectrum.hs-scripts.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.763140917 CEST	1.1.1.1	192.168.2.4	0x93c3	No error (0)	api-fra04-origin.spectrum.hs-scripts.com	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.763140917 CEST	1.1.1.1	192.168.2.4	0x93c3	No error (0)	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		172.65.208.22	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.763578892 CEST	1.1.1.1	192.168.2.4	0xe36f	No error (0)	js-eu1.hs-scripts.com	api-fra04-origin.spectrum.hs-scripts.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.763578892 CEST	1.1.1.1	192.168.2.4	0xe36f	No error (0)	api-fra04-origin.spectrum.hs-scripts.com	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.813452959 CEST	1.1.1.1	192.168.2.4	0x1f69	No error (0)	tag.demandbase.com		108.139.10.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.813452959 CEST	1.1.1.1	192.168.2.4	0x1f69	No error (0)	tag.demandbase.com		108.139.10.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.813452959 CEST	1.1.1.1	192.168.2.4	0x1f69	No error (0)	tag.demandbase.com		108.139.10.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.813452959 CEST	1.1.1.1	192.168.2.4	0x1f69	No error (0)	tag.demandbase.com		108.139.10.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.831165075 CEST	1.1.1.1	192.168.2.4	0x5f47	No error (0)	appvizer.one		37.59.241.167	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.847238064 CEST	1.1.1.1	192.168.2.4	0x2c	No error (0)	td.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.847238064 CEST	1.1.1.1	192.168.2.4	0x2c	No error (0)	td.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.847238064 CEST	1.1.1.1	192.168.2.4	0x2c	No error (0)	td.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.847238064 CEST	1.1.1.1	192.168.2.4	0x2c	No error (0)	td.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:34.859477043 CEST	1.1.1.1	192.168.2.4	0x2a00	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.859477043 CEST	1.1.1.1	192.168.2.4	0x2a00	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.859505892 CEST	1.1.1.1	192.168.2.4	0x2a67	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.859505892 CEST	1.1.1.1	192.168.2.4	0x2a67	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.932722092 CEST	1.1.1.1	192.168.2.4	0xe023	No error (0)	secure.bali6nora.com	ghochv3eng.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:34.932960033 CEST	1.1.1.1	192.168.2.4	0xcdb7	No error (0)	secure.bali6nora.com	ghochv3eng.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:35.106750011 CEST	1.1.1.1	192.168.2.4	0x869f	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:35.111655951 CEST	1.1.1.1	192.168.2.4	0xef8	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:35.111655951 CEST	1.1.1.1	192.168.2.4	0xef8	No error (0)	scout.us1.salesloft.com		54.160.89.81	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:35.111655951 CEST	1.1.1.1	192.168.2.4	0xef8	No error (0)	scout.us1.salesloft.com		52.23.83.161	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:35.111655951 CEST	1.1.1.1	192.168.2.4	0xef8	No error (0)	scout.us1.salesloft.com		52.87.7.203	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:35.845781088 CEST	1.1.1.1	192.168.2.4	0x9e18	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:35.845781088 CEST	1.1.1.1	192.168.2.4	0x9e18	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:35.847018957 CEST	1.1.1.1	192.168.2.4	0xbb27	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:35.847018957 CEST	1.1.1.1	192.168.2.4	0xbb27	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117563963 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117563963 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117563963 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117563963 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117563963 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117563963 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.117618084 CEST	1.1.1.1	192.168.2.4	0xfdf8	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:36.143934011 CEST	1.1.1.1	192.168.2.4	0x69e2	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:36.143934011 CEST	1.1.1.1	192.168.2.4	0x69e2	No error (0)	scout.us1.salesloft.com		52.23.83.161	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.143934011 CEST	1.1.1.1	192.168.2.4	0x69e2	No error (0)	scout.us1.salesloft.com		54.160.89.81	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.143934011 CEST	1.1.1.1	192.168.2.4	0x69e2	No error (0)	scout.us1.salesloft.com		52.87.7.203	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.152189016 CEST	1.1.1.1	192.168.2.4	0x4db6	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:36.346098900 CEST	1.1.1.1	192.168.2.4	0x917e	No error (0)	api.company-target.com		18.154.144.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.346098900 CEST	1.1.1.1	192.168.2.4	0x917e	No error (0)	api.company-target.com		18.154.144.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.346098900 CEST	1.1.1.1	192.168.2.4	0x917e	No error (0)	api.company-target.com		18.154.144.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.346098900 CEST	1.1.1.1	192.168.2.4	0x917e	No error (0)	api.company-target.com		18.154.144.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.355773926 CEST	1.1.1.1	192.168.2.4	0xaa26	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:36.355773926 CEST	1.1.1.1	192.168.2.4	0xaa26	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.405141115 CEST	1.1.1.1	192.168.2.4	0xa969	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:36.785439968 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.785439968 CEST	1.1.1.1	192.168.2.4	0x5aeb	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:36.785618067 CEST	1.1.1.1	192.168.2.4	0xdfa8	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:37.106393099 CEST	1.1.1.1	192.168.2.4	0x3fbe	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.106393099 CEST	1.1.1.1	192.168.2.4	0x3fbe	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.106393099 CEST	1.1.1.1	192.168.2.4	0x3fbe	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.106393099 CEST	1.1.1.1	192.168.2.4	0x3fbe	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.212729931 CEST	1.1.1.1	192.168.2.4	0x97a3	No error (0)	tag-logger.demandbase.com		99.84.66.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.212729931 CEST	1.1.1.1	192.168.2.4	0x97a3	No error (0)	tag-logger.demandbase.com		99.84.66.18	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.212729931 CEST	1.1.1.1	192.168.2.4	0x97a3	No error (0)	tag-logger.demandbase.com		99.84.66.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.212729931 CEST	1.1.1.1	192.168.2.4	0x97a3	No error (0)	tag-logger.demandbase.com		99.84.66.57	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.228379965 CEST	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	api.company-target.com		18.154.144.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.228379965 CEST	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	api.company-target.com		18.154.144.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.228379965 CEST	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	api.company-target.com		18.154.144.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.228379965 CEST	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	api.company-target.com		18.154.144.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.299555063 CEST	1.1.1.1	192.168.2.4	0x7ca2	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.299896002 CEST	1.1.1.1	192.168.2.4	0x10cb	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.306704044 CEST	1.1.1.1	192.168.2.4	0xc5a	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.308144093 CEST	1.1.1.1	192.168.2.4	0x8cda	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.410531044 CEST	1.1.1.1	192.168.2.4	0xe79e	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.410531044 CEST	1.1.1.1	192.168.2.4	0xe79e	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.236.114.45	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.215.83.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.23.126.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.221.105.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413523912 CEST	1.1.1.1	192.168.2.4	0x9c0b	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.226.174.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:37.413618088 CEST	1.1.1.1	192.168.2.4	0x5636	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.418598890 CEST	1.1.1.1	192.168.2.4	0xd454	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.419518948 CEST	1.1.1.1	192.168.2.4	0x1577	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:37.420814037 CEST	1.1.1.1	192.168.2.4	0x191c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:38.314552069 CEST	1.1.1.1	192.168.2.4	0x96bf	No error (0)	script.hotjar.com		18.161.6.2	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:38.314552069 CEST	1.1.1.1	192.168.2.4	0x96bf	No error (0)	script.hotjar.com		18.161.6.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:38.314552069 CEST	1.1.1.1	192.168.2.4	0x96bf	No error (0)	script.hotjar.com		18.161.6.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:38.314552069 CEST	1.1.1.1	192.168.2.4	0x96bf	No error (0)	script.hotjar.com		18.161.6.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.305824041 CEST	1.1.1.1	192.168.2.4	0x3126	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.305824041 CEST	1.1.1.1	192.168.2.4	0x3126	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.305824041 CEST	1.1.1.1	192.168.2.4	0x3126	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.305824041 CEST	1.1.1.1	192.168.2.4	0x3126	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.348370075 CEST	1.1.1.1	192.168.2.4	0xd3df	No error (0)	assets.ubembed.com		18.164.174.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.348370075 CEST	1.1.1.1	192.168.2.4	0xd3df	No error (0)	assets.ubembed.com		18.164.174.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.348370075 CEST	1.1.1.1	192.168.2.4	0xd3df	No error (0)	assets.ubembed.com		18.164.174.61	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.348370075 CEST	1.1.1.1	192.168.2.4	0xd3df	No error (0)	assets.ubembed.com		18.164.174.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351349115 CEST	1.1.1.1	192.168.2.4	0x6767	No error (0)	js-eu1.hsadspixel.net	app-fra04-origin.spectrum.hsadspixel.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351349115 CEST	1.1.1.1	192.168.2.4	0x6767	No error (0)	app-fra04-origin.spectrum.hsadspixel.net	c23f1bb1b6d0420a94d3aeebea36c4c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351349115 CEST	1.1.1.1	192.168.2.4	0x6767	No error (0)	c23f1bb1b6d0420a94d3aeebea36c4c1.pacloudflare.com		172.65.219.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351386070 CEST	1.1.1.1	192.168.2.4	0x1bc8	No error (0)	js-eu1.hs-analytics.net	js-fra04-origin.spectrum.hs-analytics.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351386070 CEST	1.1.1.1	192.168.2.4	0x1bc8	No error (0)	js-fra04-origin.spectrum.hs-analytics.net	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351702929 CEST	1.1.1.1	192.168.2.4	0x504c	No error (0)	js-eu1.hsadspixel.net	app-fra04-origin.spectrum.hsadspixel.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.351702929 CEST	1.1.1.1	192.168.2.4	0x504c	No error (0)	app-fra04-origin.spectrum.hsadspixel.net	c23f1bb1b6d0420a94d3aeebea36c4c1.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.356393099 CEST	1.1.1.1	192.168.2.4	0x42c3	No error (0)	js-eu1.hs-analytics.net	js-fra04-origin.spectrum.hs-analytics.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.356393099 CEST	1.1.1.1	192.168.2.4	0x42c3	No error (0)	js-fra04-origin.spectrum.hs-analytics.net	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.356393099 CEST	1.1.1.1	192.168.2.4	0x42c3	No error (0)	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com		172.65.238.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.358524084 CEST	1.1.1.1	192.168.2.4	0xd668	No error (0)	js-eu1.hubspot.com	app-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.358524084 CEST	1.1.1.1	192.168.2.4	0xd668	No error (0)	app-fra04-origin.spectrum.hubspot.com	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.358524084 CEST	1.1.1.1	192.168.2.4	0xd668	No error (0)	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		172.65.236.181	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.358921051 CEST	1.1.1.1	192.168.2.4	0x9403	No error (0)	js-eu1.hubspot.com	app-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.358921051 CEST	1.1.1.1	192.168.2.4	0x9403	No error (0)	app-fra04-origin.spectrum.hubspot.com	a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.386564016 CEST	1.1.1.1	192.168.2.4	0xbaec	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.389383078 CEST	1.1.1.1	192.168.2.4	0xe8d0	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.392864943 CEST	1.1.1.1	192.168.2.4	0x2a48	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.393232107 CEST	1.1.1.1	192.168.2.4	0x6d4f	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.394926071 CEST	1.1.1.1	192.168.2.4	0x2e4e	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.396162987 CEST	1.1.1.1	192.168.2.4	0x21f3	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.396203995 CEST	1.1.1.1	192.168.2.4	0x7c0a	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.397736073 CEST	1.1.1.1	192.168.2.4	0x9837	No error (0)	tag-logger.demandbase.com		99.84.66.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.397736073 CEST	1.1.1.1	192.168.2.4	0x9837	No error (0)	tag-logger.demandbase.com		99.84.66.57	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.397736073 CEST	1.1.1.1	192.168.2.4	0x9837	No error (0)	tag-logger.demandbase.com		99.84.66.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.397736073 CEST	1.1.1.1	192.168.2.4	0x9837	No error (0)	tag-logger.demandbase.com		99.84.66.18	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.399518967 CEST	1.1.1.1	192.168.2.4	0xd2b4	No error (0)	appvizer.one		37.59.241.167	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.102.171	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.86.236	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.145.107.179	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.23.126.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.236.114.45	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:39.402596951 CEST	1.1.1.1	192.168.2.4	0xa363	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.051069975 CEST	1.1.1.1	192.168.2.4	0xca0d	No error (0)	js-eu1.hs-banner.com	js-fra04-origin.spectrum.hs-banner.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.051069975 CEST	1.1.1.1	192.168.2.4	0xca0d	No error (0)	js-fra04-origin.spectrum.hs-banner.com	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.051069975 CEST	1.1.1.1	192.168.2.4	0xca0d	No error (0)	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		172.65.202.201	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.051132917 CEST	1.1.1.1	192.168.2.4	0xac9c	No error (0)	js-eu1.hs-banner.com	js-fra04-origin.spectrum.hs-banner.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.051132917 CEST	1.1.1.1	192.168.2.4	0xac9c	No error (0)	js-fra04-origin.spectrum.hs-banner.com	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.089096069 CEST	1.1.1.1	192.168.2.4	0xd72b	No error (0)	js-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.089096069 CEST	1.1.1.1	192.168.2.4	0xd72b	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.089096069 CEST	1.1.1.1	192.168.2.4	0xd72b	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.089701891 CEST	1.1.1.1	192.168.2.4	0x3401	No error (0)	js-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.089701891 CEST	1.1.1.1	192.168.2.4	0x3401	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.406619072 CEST	1.1.1.1	192.168.2.4	0x98d8	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.407424927 CEST	1.1.1.1	192.168.2.4	0x3e36	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.407424927 CEST	1.1.1.1	192.168.2.4	0x3e36	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.668881893 CEST	1.1.1.1	192.168.2.4	0xa2f6	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.904242992 CEST	1.1.1.1	192.168.2.4	0xa6	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.912626982 CEST	1.1.1.1	192.168.2.4	0x7320	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.917367935 CEST	1.1.1.1	192.168.2.4	0xef24	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.917367935 CEST	1.1.1.1	192.168.2.4	0xef24	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:40.917404890 CEST	1.1.1.1	192.168.2.4	0x1c3a	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:40.980187893 CEST	1.1.1.1	192.168.2.4	0xf114	No error (0)	cta-eu1.hubspot.com	cta-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.980187893 CEST	1.1.1.1	192.168.2.4	0xf114	No error (0)	cta-fra04-origin.spectrum.hubspot.com	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.980994940 CEST	1.1.1.1	192.168.2.4	0xcb6b	No error (0)	cta-eu1.hubspot.com	cta-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.980994940 CEST	1.1.1.1	192.168.2.4	0xcb6b	No error (0)	cta-fra04-origin.spectrum.hubspot.com	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:40.980994940 CEST	1.1.1.1	192.168.2.4	0xcb6b	No error (0)	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com		172.65.198.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.884612083 CEST	1.1.1.1	192.168.2.4	0xfd7f	No error (0)	api-eu1.hubapi.com		141.101.90.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.884612083 CEST	1.1.1.1	192.168.2.4	0xfd7f	No error (0)	api-eu1.hubapi.com		141.101.90.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.884612083 CEST	1.1.1.1	192.168.2.4	0xfd7f	No error (0)	api-eu1.hubapi.com		141.101.90.98	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.884612083 CEST	1.1.1.1	192.168.2.4	0xfd7f	No error (0)	api-eu1.hubapi.com		141.101.90.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:41.888062000 CEST	1.1.1.1	192.168.2.4	0xca38	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:41.888062000 CEST	1.1.1.1	192.168.2.4	0xca38	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:41.892096996 CEST	1.1.1.1	192.168.2.4	0xc94f	No error (0)	api-eu1.hubapi.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:41.893227100 CEST	1.1.1.1	192.168.2.4	0xd467	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:41.893227100 CEST	1.1.1.1	192.168.2.4	0xd467	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:41.893227100 CEST	1.1.1.1	192.168.2.4	0xd467	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.093198061 CEST	1.1.1.1	192.168.2.4	0x540e	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:42.101763010 CEST	1.1.1.1	192.168.2.4	0x1367	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:42.360461950 CEST	1.1.1.1	192.168.2.4	0x5cfd	No error (0)	cta-eu1.hubspot.com	cta-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:42.360461950 CEST	1.1.1.1	192.168.2.4	0x5cfd	No error (0)	cta-fra04-origin.spectrum.hubspot.com	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:42.360802889 CEST	1.1.1.1	192.168.2.4	0xd43	No error (0)	cta-eu1.hubspot.com	cta-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:42.360802889 CEST	1.1.1.1	192.168.2.4	0xd43	No error (0)	cta-fra04-origin.spectrum.hubspot.com	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:42.360802889 CEST	1.1.1.1	192.168.2.4	0xd43	No error (0)	adebc6b12f2d428abfe2b66ceace1662.pacloudflare.com		172.65.198.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654810905 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654810905 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654810905 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654810905 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654810905 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654810905 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654856920 CEST	1.1.1.1	192.168.2.4	0x759c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:42.654967070 CEST	1.1.1.1	192.168.2.4	0x4ac6	No error (0)	segments.company-target.com		216.137.39.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654967070 CEST	1.1.1.1	192.168.2.4	0x4ac6	No error (0)	segments.company-target.com		216.137.39.37	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654967070 CEST	1.1.1.1	192.168.2.4	0x4ac6	No error (0)	segments.company-target.com		216.137.39.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:42.654967070 CEST	1.1.1.1	192.168.2.4	0x4ac6	No error (0)	segments.company-target.com		216.137.39.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.287008047 CEST	1.1.1.1	192.168.2.4	0x24cc	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.287008047 CEST	1.1.1.1	192.168.2.4	0x24cc	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.287008047 CEST	1.1.1.1	192.168.2.4	0x24cc	No error (0)	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		172.65.192.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.289189100 CEST	1.1.1.1	192.168.2.4	0x2a83	No error (0)	forms-eu1.hscollectedforms.net	app-fra04-origin.spectrum.hscollectedforms.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.289189100 CEST	1.1.1.1	192.168.2.4	0x2a83	No error (0)	app-fra04-origin.spectrum.hscollectedforms.net	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.352873087 CEST	1.1.1.1	192.168.2.4	0x5728	No error (0)	perf-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.352873087 CEST	1.1.1.1	192.168.2.4	0x5728	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.352873087 CEST	1.1.1.1	192.168.2.4	0x5728	No error (0)	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		172.65.232.43	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.352902889 CEST	1.1.1.1	192.168.2.4	0xd8c6	No error (0)	perf-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.352902889 CEST	1.1.1.1	192.168.2.4	0xd8c6	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:43.361143112 CEST	1.1.1.1	192.168.2.4	0xa116	No error (0)	www.google.com		142.250.72.228	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.361506939 CEST	1.1.1.1	192.168.2.4	0x4549	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:43.369085073 CEST	1.1.1.1	192.168.2.4	0x7b70	No error (0)	api-eu1.hubapi.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:43.369108915 CEST	1.1.1.1	192.168.2.4	0x2062	No error (0)	api-eu1.hubapi.com		141.101.90.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.369108915 CEST	1.1.1.1	192.168.2.4	0x2062	No error (0)	api-eu1.hubapi.com		141.101.90.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.369108915 CEST	1.1.1.1	192.168.2.4	0x2062	No error (0)	api-eu1.hubapi.com		141.101.90.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.369108915 CEST	1.1.1.1	192.168.2.4	0x2062	No error (0)	api-eu1.hubapi.com		141.101.90.98	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.533858061 CEST	1.1.1.1	192.168.2.4	0xcd8a	No error (0)	segments.company-target.com		216.137.39.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.533858061 CEST	1.1.1.1	192.168.2.4	0xcd8a	No error (0)	segments.company-target.com		216.137.39.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.533858061 CEST	1.1.1.1	192.168.2.4	0xcd8a	No error (0)	segments.company-target.com		216.137.39.37	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:43.533858061 CEST	1.1.1.1	192.168.2.4	0xcd8a	No error (0)	segments.company-target.com		216.137.39.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229830980 CEST	1.1.1.1	192.168.2.4	0x288	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229932070 CEST	1.1.1.1	192.168.2.4	0xd977	No error (0)	analytics.google.com		142.250.141.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229932070 CEST	1.1.1.1	192.168.2.4	0xd977	No error (0)	analytics.google.com		142.250.141.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229932070 CEST	1.1.1.1	192.168.2.4	0xd977	No error (0)	analytics.google.com		142.250.141.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229932070 CEST	1.1.1.1	192.168.2.4	0xd977	No error (0)	analytics.google.com		142.250.141.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229932070 CEST	1.1.1.1	192.168.2.4	0xd977	No error (0)	analytics.google.com		142.250.141.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.229932070 CEST	1.1.1.1	192.168.2.4	0xd977	No error (0)	analytics.google.com		142.250.141.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.721519947 CEST	1.1.1.1	192.168.2.4	0xd68a	No error (0)	perf-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:44.721519947 CEST	1.1.1.1	192.168.2.4	0xd68a	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:44.721519947 CEST	1.1.1.1	192.168.2.4	0xd68a	No error (0)	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		172.65.232.43	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:44.721575022 CEST	1.1.1.1	192.168.2.4	0xf06d	No error (0)	perf-eu1.hsforms.com	star-fra04-origin.spectrum.hsforms.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:44.721575022 CEST	1.1.1.1	192.168.2.4	0xf06d	No error (0)	star-fra04-origin.spectrum.hsforms.com	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:45.689454079 CEST	1.1.1.1	192.168.2.4	0x5ecd	No error (0)	googleads.g.doubleclick.net		142.250.217.130	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:45.689591885 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 14:32:47.277355909 CEST	1.1.1.1	192.168.2.4	0xc109	No error (0)	ariadne.appvizer.one	prod.k8s.appvizer.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:47.277355909 CEST	1.1.1.1	192.168.2.4	0xc109	No error (0)	prod.k8s.appvizer.net		135.125.85.242	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:47.657260895 CEST	1.1.1.1	192.168.2.4	0xd054	No error (0)	ariadne.appvizer.one	prod.k8s.appvizer.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:49.268328905 CEST	1.1.1.1	192.168.2.4	0xb183	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:49.268630981 CEST	1.1.1.1	192.168.2.4	0x20c	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:49.268630981 CEST	1.1.1.1	192.168.2.4	0x20c	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:49.269826889 CEST	1.1.1.1	192.168.2.4	0xe9d5	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:49.279071093 CEST	1.1.1.1	192.168.2.4	0x95e9	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.103530884 CEST	1.1.1.1	192.168.2.4	0xbbf7	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.103530884 CEST	1.1.1.1	192.168.2.4	0xbbf7	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.107364893 CEST	1.1.1.1	192.168.2.4	0x4295	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.107364893 CEST	1.1.1.1	192.168.2.4	0x4295	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.107364893 CEST	1.1.1.1	192.168.2.4	0x4295	No error (0)	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		172.65.240.166	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:50.388478041 CEST	1.1.1.1	192.168.2.4	0xa08	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.389530897 CEST	1.1.1.1	192.168.2.4	0x36b2	No error (0)	ariadne.appvizer.one	prod.k8s.appvizer.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.396414995 CEST	1.1.1.1	192.168.2.4	0x8ad1	No error (0)	imgsct.cookiebot.com	imgsct.cookiebot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.697942019 CEST	1.1.1.1	192.168.2.4	0x3893	No error (0)	ariadne.appvizer.one	prod.k8s.appvizer.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:50.697942019 CEST	1.1.1.1	192.168.2.4	0x3893	No error (0)	prod.k8s.appvizer.net		135.125.85.242	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:51.976414919 CEST	1.1.1.1	192.168.2.4	0xaa4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:51.976414919 CEST	1.1.1.1	192.168.2.4	0xaa4	No error (0)	star-mini.c10r.facebook.com		157.240.11.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:51.976535082 CEST	1.1.1.1	192.168.2.4	0xe1e3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:51.984083891 CEST	1.1.1.1	192.168.2.4	0x5916	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:51.984083891 CEST	1.1.1.1	192.168.2.4	0x5916	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:51.992326975 CEST	1.1.1.1	192.168.2.4	0x5143	No error (0)	track-eu1.hubspot.com	track-fra04-origin.spectrum.hubspot.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:51.992326975 CEST	1.1.1.1	192.168.2.4	0x5143	No error (0)	track-fra04-origin.spectrum.hubspot.com	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:51.992326975 CEST	1.1.1.1	192.168.2.4	0x5143	No error (0)	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com		172.65.240.166	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:52.876136065 CEST	1.1.1.1	192.168.2.4	0xf989	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:52.876136065 CEST	1.1.1.1	192.168.2.4	0xf989	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:52.876390934 CEST	1.1.1.1	192.168.2.4	0x93c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:57.608671904 CEST	1.1.1.1	192.168.2.4	0xb4d8	No error (0)	help.signaturit.com	signaturit.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:57.608671904 CEST	1.1.1.1	192.168.2.4	0xb4d8	No error (0)	signaturit.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:57.608671904 CEST	1.1.1.1	192.168.2.4	0xb4d8	No error (0)	signaturit.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:57.611556053 CEST	1.1.1.1	192.168.2.4	0x7a6e	No error (0)	help.signaturit.com	signaturit.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:58.772079945 CEST	1.1.1.1	192.168.2.4	0x89aa	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.772079945 CEST	1.1.1.1	192.168.2.4	0x89aa	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.773876905 CEST	1.1.1.1	192.168.2.4	0x4838	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:58.773998022 CEST	1.1.1.1	192.168.2.4	0xff3c	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:58.774379015 CEST	1.1.1.1	192.168.2.4	0x26ee	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:58.774452925 CEST	1.1.1.1	192.168.2.4	0xff72	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:58.774499893 CEST	1.1.1.1	192.168.2.4	0x6528	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.774499893 CEST	1.1.1.1	192.168.2.4	0x6528	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.774513960 CEST	1.1.1.1	192.168.2.4	0xdfa0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 14:32:58.783119917 CEST	1.1.1.1	192.168.2.4	0x22a8	No error (0)	p17.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:58.783119917 CEST	1.1.1.1	192.168.2.4	0x22a8	No error (0)	p17.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:59.875601053 CEST	1.1.1.1	192.168.2.4	0xe76c	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:59.875601053 CEST	1.1.1.1	192.168.2.4	0xe76c	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:32:59.929548025 CEST	1.1.1.1	192.168.2.4	0x7390	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:32:59.929600954 CEST	1.1.1.1	192.168.2.4	0x3adb	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:00.387808084 CEST	1.1.1.1	192.168.2.4	0x14c7	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.748928070 CEST	1.1.1.1	192.168.2.4	0x4ea9	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.748928070 CEST	1.1.1.1	192.168.2.4	0x4ea9	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.805234909 CEST	1.1.1.1	192.168.2.4	0xa273	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:00.805583954 CEST	1.1.1.1	192.168.2.4	0xc55e	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:00.973521948 CEST	1.1.1.1	192.168.2.4	0x78c2	No error (0)	signaturit.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:00.973521948 CEST	1.1.1.1	192.168.2.4	0x78c2	No error (0)	signaturit.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.248210907 CEST	1.1.1.1	192.168.2.4	0xf76a	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.248210907 CEST	1.1.1.1	192.168.2.4	0xf76a	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.376312971 CEST	1.1.1.1	192.168.2.4	0x573	No error (0)	help.signaturit.com	signaturit.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:03.376312971 CEST	1.1.1.1	192.168.2.4	0x573	No error (0)	signaturit.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.376312971 CEST	1.1.1.1	192.168.2.4	0x573	No error (0)	signaturit.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:03.376339912 CEST	1.1.1.1	192.168.2.4	0x9fc2	No error (0)	help.signaturit.com	signaturit.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:04.150707960 CEST	1.1.1.1	192.168.2.4	0xd580	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:04.150707960 CEST	1.1.1.1	192.168.2.4	0xd580	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:04.753770113 CEST	1.1.1.1	192.168.2.4	0x726e	No error (0)	app.hellozest.io		3.141.154.91	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:04.753770113 CEST	1.1.1.1	192.168.2.4	0x726e	No error (0)	app.hellozest.io		18.189.125.189	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:04.753770113 CEST	1.1.1.1	192.168.2.4	0x726e	No error (0)	app.hellozest.io		3.129.159.6	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:05.855433941 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	app.birdie.so		3.141.154.91	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:05.855433941 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	app.birdie.so		18.189.125.189	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:05.855433941 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	app.birdie.so		3.129.159.6	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:06.471366882 CEST	1.1.1.1	192.168.2.4	0xc791	No error (0)	signaturit.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:06.471366882 CEST	1.1.1.1	192.168.2.4	0xc791	No error (0)	signaturit.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.302849054 CEST	1.1.1.1	192.168.2.4	0x646a	No error (0)	widget-mediator.zopim.com		52.37.227.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.302849054 CEST	1.1.1.1	192.168.2.4	0x646a	No error (0)	widget-mediator.zopim.com		34.210.251.254	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.302849054 CEST	1.1.1.1	192.168.2.4	0x646a	No error (0)	widget-mediator.zopim.com		54.148.63.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.302849054 CEST	1.1.1.1	192.168.2.4	0x646a	No error (0)	widget-mediator.zopim.com		35.160.73.161	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.302849054 CEST	1.1.1.1	192.168.2.4	0x646a	No error (0)	widget-mediator.zopim.com		52.40.112.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.302849054 CEST	1.1.1.1	192.168.2.4	0x646a	No error (0)	widget-mediator.zopim.com		52.33.11.15	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.582825899 CEST	1.1.1.1	192.168.2.4	0x55ba	No error (0)	zendesk-eu.my.sentry.io		34.36.90.178	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.604624987 CEST	1.1.1.1	192.168.2.4	0x3b	No error (0)	account.signaturit.com	d47l4duuvaadc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:07.604624987 CEST	1.1.1.1	192.168.2.4	0x3b	No error (0)	d47l4duuvaadc.cloudfront.net		13.227.74.91	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.604624987 CEST	1.1.1.1	192.168.2.4	0x3b	No error (0)	d47l4duuvaadc.cloudfront.net		13.227.74.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.604624987 CEST	1.1.1.1	192.168.2.4	0x3b	No error (0)	d47l4duuvaadc.cloudfront.net		13.227.74.109	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.604624987 CEST	1.1.1.1	192.168.2.4	0x3b	No error (0)	d47l4duuvaadc.cloudfront.net		13.227.74.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:07.632375956 CEST	1.1.1.1	192.168.2.4	0x2610	No error (0)	account.signaturit.com	d47l4duuvaadc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:11.086675882 CEST	1.1.1.1	192.168.2.4	0x887d	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:11.086675882 CEST	1.1.1.1	192.168.2.4	0x887d	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.28	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:11.086675882 CEST	1.1.1.1	192.168.2.4	0x887d	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.92	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:11.086675882 CEST	1.1.1.1	192.168.2.4	0x887d	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:12.455672979 CEST	1.1.1.1	192.168.2.4	0x8ad9	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.209	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:12.455672979 CEST	1.1.1.1	192.168.2.4	0x8ad9	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:12.455672979 CEST	1.1.1.1	192.168.2.4	0x8ad9	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.29	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:12.455672979 CEST	1.1.1.1	192.168.2.4	0x8ad9	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.24	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.778317928 CEST	1.1.1.1	192.168.2.4	0xe06d	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.24	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.778317928 CEST	1.1.1.1	192.168.2.4	0xe06d	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.778317928 CEST	1.1.1.1	192.168.2.4	0xe06d	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.209	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.778317928 CEST	1.1.1.1	192.168.2.4	0xe06d	No error (0)	d3dvn1tnyxabn5.cloudfront.net		18.154.207.29	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.804239988 CEST	1.1.1.1	192.168.2.4	0x166f	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.804239988 CEST	1.1.1.1	192.168.2.4	0x166f	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.92	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.804239988 CEST	1.1.1.1	192.168.2.4	0x166f	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.28	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:13.804239988 CEST	1.1.1.1	192.168.2.4	0x166f	No error (0)	d47l4duuvaadc.cloudfront.net		216.137.39.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:14.091957092 CEST	1.1.1.1	192.168.2.4	0x3461	No error (0)	cdn.birdie.so		18.164.174.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:14.091957092 CEST	1.1.1.1	192.168.2.4	0x3461	No error (0)	cdn.birdie.so		18.164.174.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:14.091957092 CEST	1.1.1.1	192.168.2.4	0x3461	No error (0)	cdn.birdie.so		18.164.174.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:14.091957092 CEST	1.1.1.1	192.168.2.4	0x3461	No error (0)	cdn.birdie.so		18.164.174.42	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:15.122669935 CEST	1.1.1.1	192.168.2.4	0xab4a	No error (0)	cdn.birdie.so		18.164.174.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:15.122669935 CEST	1.1.1.1	192.168.2.4	0xab4a	No error (0)	cdn.birdie.so		18.164.174.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:15.122669935 CEST	1.1.1.1	192.168.2.4	0xab4a	No error (0)	cdn.birdie.so		18.164.174.42	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:15.122669935 CEST	1.1.1.1	192.168.2.4	0xab4a	No error (0)	cdn.birdie.so		18.164.174.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:16.152506113 CEST	1.1.1.1	192.168.2.4	0xbda0	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:16.154333115 CEST	1.1.1.1	192.168.2.4	0x7900	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:16.970846891 CEST	1.1.1.1	192.168.2.4	0xab13	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:16.978609085 CEST	1.1.1.1	192.168.2.4	0xde44	No error (0)	consentcdn.cookiebot.com	consentcdn.cookiebot.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:33:17.736165047 CEST	1.1.1.1	192.168.2.4	0xad3f	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:17.736165047 CEST	1.1.1.1	192.168.2.4	0xad3f	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:17.736165047 CEST	1.1.1.1	192.168.2.4	0xad3f	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.158	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:17.736165047 CEST	1.1.1.1	192.168.2.4	0xad3f	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.794501066 CEST	1.1.1.1	192.168.2.4	0xa802	No error (0)	sockp.birdie.so		3.140.57.243	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.794501066 CEST	1.1.1.1	192.168.2.4	0xa802	No error (0)	sockp.birdie.so		3.134.73.114	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.794501066 CEST	1.1.1.1	192.168.2.4	0xa802	No error (0)	sockp.birdie.so		13.58.83.28	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.795437098 CEST	1.1.1.1	192.168.2.4	0x56b9	No error (0)	app.birdie.so		18.189.125.189	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.795437098 CEST	1.1.1.1	192.168.2.4	0x56b9	No error (0)	app.birdie.so		3.141.154.91	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:18.795437098 CEST	1.1.1.1	192.168.2.4	0x56b9	No error (0)	app.birdie.so		3.129.159.6	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:19.141249895 CEST	1.1.1.1	192.168.2.4	0x86c3	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:19.141249895 CEST	1.1.1.1	192.168.2.4	0x86c3	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:19.141249895 CEST	1.1.1.1	192.168.2.4	0x86c3	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.158	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:33:19.141249895 CEST	1.1.1.1	192.168.2.4	0x86c3	No error (0)	diysyudrbtisp.cloudfront.net		13.225.141.96	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:31:56 UTC	743	OUT	GET /document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:31:57 UTC	497	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:31:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://sign-app.signaturit.com/v1/en/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 Cache-Control: no-cache, private strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961cfe2a88a984-LAS
2024-04-24 12:31:57 UTC	697	IN	Data Raw: 32 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 73 69 67 6e 2d 61 70 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 76 31 2f 65 6e 2f 63 33 31 34 32 36 39 36 2d 30 66 62 66 2d 34 36 65 66 2d 61 32 34 35 2d 35 62 62 35 34 33 62 63 62 39 32 63 2f 36 32 34 38 33 31 36 64 2d 38 35 39 30 2d 34 64 64 32 2d 39 64 33 39 2d 66 65 39 30 61 31 34 32 33 32 35 36 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 Data Ascii: 2b2<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://sign-app.signaturit.com/v1/en/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256'" /> <title
2024-04-24 12:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	13.226.210.34	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:31:58 UTC	745	OUT	GET /v1/en/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: sign-app.signaturit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:31:59 UTC	625	IN	HTTP/1.1 302 Found Content-Type: application/json Content-Length: 0 Connection: close Date: Wed, 24 Apr 2024 12:31:58 GMT x-amzn-RequestId: a3e7bcf3-7117-454c-9b65-9f383030fa50 x-amz-apigw-id: WuxF4FT9DoEEmpA= Location: /en/9763b81/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 X-Amzn-Trace-Id: Root=1-6628fbbe-585a85ed2b9401582088d6bf;Parent=31490f1afc5f4cd4;Sampled=0;lineage=24d1e21a:0 X-Cache: Miss from cloudfront Via: 1.1 ff59c1cd74c841ab9a3ebd5370e3b24a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: ylQNYUSvFuWI_7TRFe_1l2-2cMch5GsNIbtm0oKqJwf7N9QrCyVchA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	13.226.210.34	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:31:59 UTC	750	OUT	GET /en/9763b81/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: sign-app.signaturit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:00 UTC	521	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 5399 Connection: close Date: Wed, 24 Apr 2024 12:32:00 GMT x-amzn-RequestId: 5166354a-943e-4f19-8057-d1343f1c21bc x-amz-apigw-id: WuxGGGCkjoEEhTQ= X-Amzn-Trace-Id: Root=1-6628fbc0-0d0c1a606c9b67a8776cfc49;Parent=323871978b3ec434;Sampled=0;lineage=1e80a9a0:0 X-Cache: Miss from cloudfront Via: 1.1 37e37f3d71c99a5a71f8e766a6f4b9ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: Dg-5LfhtwP1a-9dlrvI204s2P9WvPpWOtADPvPbJHPIJeriAQEwuMw==
2024-04-24 12:32:00 UTC	5399	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 41 70 70 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 Data Ascii: <!DOCTYPE html><html lang="en"><head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin=""> <meta charset="utf-8"> <title>SignApp</title> <base href="/"> <meta name="viewport" content="width=device-width, i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	23.61.210.98	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:32:00 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=239483 Date: Wed, 24 Apr 2024 12:32:00 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	23.61.210.98	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:01 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:32:01 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2578) X-CID: 11 Cache-Control: public, max-age=239530 Date: Wed, 24 Apr 2024 12:32:01 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 12:32:01 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:01 UTC	592	OUT	GET /9763b81/runtime.js HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:02 UTC	595	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3136 Connection: close Date: Wed, 24 Apr 2024 12:32:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "9dbc9b599246eaed7d4ba3ebeaf826b2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 64e24cad8b52037c4c824ec57b5995be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: rBo-xizUpjqIB5hthM3k1iD9-EYACPRjVPYsdZDXzbojVUSVAUw7iw==
2024-04-24 12:32:02 UTC	3136	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 68 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 6e 3d 68 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 68 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 76 2c 65 3d 5b 5d 2c 72 2e 4f 3d 28 6e 2c 74 2c 6f 2c 66 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 Data Ascii: (()=>{"use strict";var e,v={},h={};function r(e){var n=h[e];if(void 0!==n)return n.exports;var t=h[e]={id:e,loaded:!1,exports:{}};return v[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=v,e=[],r.O=(n,t,o,f)=>{if(!t){var a=1/0;for(i=0;i<e.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:01 UTC	594	OUT	GET /9763b81/polyfills.js HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:02 UTC	597	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 150883 Connection: close Date: Wed, 24 Apr 2024 12:32:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "3f80b1db36858437ff1b02935759a4d9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 d3e84a8f73f8d6438930c5b709821f40.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: tq6OXH4rY9oHqlLhNqE4-ekx2yjy4rA4U4tpCh-3D8FAVmIq5twERQ==
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 34 31 38 30 38 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 22 3a 22 3b 63 6c 61 73 73 20 43 74 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 4e 29 7b 73 75 70 65 72 28 60 4e 6f 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 6f 75 6e 64 20 66 6f 72 20 24 7b 58 74 28 4e 29 7d 2e 60 29 2c 74 68 69 73 2e 70 61 72 73 65 64 4d 65 73 73 61 67 65 3d 4e 2c 74 68 69 73 2e 74 79 70 65 3d 22 4d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 45 72 72 6f 72 22 7d 7d 63 6f 6e Data Ascii: (self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[429],{41808:(s,c,t)=>{"use strict";const r=":";class Ct extends Error{constructor(N){super(`No translation found for ${Xt(N)}.`),this.parsedMessage=N,this.type="MissingTranslationError"}}con
2024-04-24 12:32:02 UTC	470	IN	Data Raw: 67 74 3d 47 26 26 28 47 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 43 3a 43 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 47 26 26 28 47 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 68 69 73 2e 7a 6f 6e 65 3a 43 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 29 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 5a 53 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 4f 77 6e 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 54 74 3d 47 26 26 47 2e 6f 6e 48 61 73 54 61 73 6b 3b 28 54 74 7c 7c 43 26 26 43 2e 5f 68 Data Ascii: gt=G&&(G.onCancelTask?C:C._cancelTaskDlgt),this._cancelTaskCurrZone=G&&(G.onCancelTask?this.zone:C._cancelTaskCurrZone),this._hasTaskZS=null,this._hasTaskDlgt=null,this._hasTaskDlgtOwner=null,this._hasTaskCurrZone=null;const Tt=G&&G.onHasTask;(Tt\|\|C&&C._h
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 47 2e 6f 6e 49 6e 76 6f 6b 65 54 61 73 6b 7c 7c 28 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 54 61 73 6b 5a 53 3d 6e 74 2c 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 54 61 73 6b 44 6c 67 74 3d 43 2c 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 74 68 69 73 2e 7a 6f 6e 65 29 2c 47 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 7c 7c 28 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 5a 53 3d 6e 74 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 3d 43 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 74 68 69 73 2e 7a 6f 6e 65 29 29 7d 66 6f 72 6b 28 70 74 2c 43 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 6f 72 6b 5a 53 3f 74 68 69 73 2e 5f 66 6f 72 6b 5a 53 2e 6f 6e 46 6f 72 6b 28 74 68 69 73 2e 5f 66 Data Ascii: G.onInvokeTask\|\|(this._invokeTaskZS=nt,this._invokeTaskDlgt=C,this._invokeTaskCurrZone=this.zone),G.onCancelTask\|\|(this._cancelTaskZS=nt,this._cancelTaskDlgt=C,this._cancelTaskCurrZone=this.zone))}fork(pt,C){return this._forkZS?this._forkZS.onFork(this._f
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 28 4b 74 3d 63 74 5b 64 28 59 2e 70 72 65 70 65 6e 64 29 5d 3d 63 74 5b 59 2e 70 72 65 70 65 6e 64 5d 29 3b 63 6f 6e 73 74 20 43 3d 6f 74 3f 66 75 6e 63 74 69 6f 6e 28 58 29 7b 69 66 28 21 64 74 2e 69 73 45 78 69 73 74 69 6e 67 29 72 65 74 75 72 6e 20 6a 74 2e 63 61 6c 6c 28 64 74 2e 74 61 72 67 65 74 2c 64 74 2e 65 76 65 6e 74 4e 61 6d 65 2c 64 74 2e 63 61 70 74 75 72 65 3f 44 3a 42 74 2c 64 74 2e 6f 70 74 69 6f 6e 73 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 6a 74 2e 63 61 6c 6c 28 64 74 2e 74 61 72 67 65 74 2c 64 74 2e 65 76 65 6e 74 4e 61 6d 65 2c 58 2e 69 6e 76 6f 6b 65 2c 64 74 2e 6f 70 74 69 6f 6e 73 29 7d 2c 47 3d 6f 74 3f 66 75 6e 63 74 69 6f 6e 28 58 29 7b 69 66 28 21 58 2e 69 73 52 65 6d 6f 76 65 64 29 7b 63 6f 6e 73 74 Data Ascii: (Kt=ct[d(Y.prepend)]=ct[Y.prepend]);const C=ot?function(X){if(!dt.isExisting)return jt.call(dt.target,dt.eventName,dt.capture?D:Bt,dt.options)}:function(X){return jt.call(dt.target,dt.eventName,X.invoke,dt.options)},G=ot?function(X){if(!X.isRemoved){const
2024-04-24 12:32:02 UTC	1765	IN	Data Raw: 29 3b 73 2e 65 78 70 6f 72 74 73 3d 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 7b 76 61 72 20 65 3d 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 38 29 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 65 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 38 7d 29 7d 7d 29 7d 2c 31 30 34 38 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 34 37 39 30 38 29 2c 65 3d 74 28 35 31 34 30 30 29 2c 6e 3d 74 28 32 36 32 34 34 29 2c 6f 3d 74 28 38 35 31 31 37 29 2c 61 3d 4d 61 74 68 2e 6d 69 6e 3b 73 2e 65 78 70 6f 72 74 73 3d 5b 5d 2e 63 6f 70 Data Ascii: );s.exports=r(function(){if("function"==typeof ArrayBuffer){var e=new ArrayBuffer(8);Object.isExtensible(e)&&Object.defineProperty(e,"a",{value:8})}})},1048:(s,c,t)=>{"use strict";var r=t(47908),e=t(51400),n=t(26244),o=t(85117),a=Math.min;s.exports=[].cop
2024-04-24 12:32:02 UTC	283	IN	Data Raw: 3d 3d 75 29 72 65 74 75 72 6e 20 61 7c 7c 68 7c 7c 30 3b 72 65 74 75 72 6e 21 61 26 26 2d 31 7d 7d 3b 73 2e 65 78 70 6f 72 74 73 3d 7b 69 6e 63 6c 75 64 65 73 3a 6f 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 6f 28 21 31 29 7d 7d 2c 39 36 37 31 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 34 39 39 37 34 29 2c 65 3d 74 28 36 38 33 36 31 29 2c 6e 3d 74 28 34 37 39 30 38 29 2c 6f 3d 74 28 32 36 32 34 34 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 75 3d 31 3d 3d 69 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6c 2c 66 2c 76 29 7b 66 6f 72 28 76 61 72 20 67 2c 68 3d 6e 28 6c 29 2c 64 3d 65 28 68 29 2c 70 3d 72 28 66 2c 76 29 2c 79 3d 6f 28 64 29 3b 79 2d 2d 20 3e 30 3b 29 69 66 28 70 28 67 3d Data Ascii: ==u)return a\|\|h\|\|0;return!a&&-1}};s.exports={includes:o(!0),indexOf:o(!1)}},9671:(s,c,t)=>{"use strict";var r=t(49974),e=t(68361),n=t(47908),o=t(26244),a=function(i){var u=1==i;return function(l,f,v){for(var g,h=n(l),d=e(h),p=r(f,v),y=o(d);y-- >0;)if(p(g=
2024-04-24 12:32:02 UTC	8949	IN	Data Raw: 65 74 75 72 6e 20 67 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 79 7d 72 65 74 75 72 6e 20 75 3f 2d 31 3a 76 6f 69 64 20 30 7d 7d 3b 73 2e 65 78 70 6f 72 74 73 3d 7b 66 69 6e 64 4c 61 73 74 3a 61 28 30 29 2c 66 69 6e 64 4c 61 73 74 49 6e 64 65 78 3a 61 28 31 29 7d 7d 2c 34 32 30 39 32 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 34 39 39 37 34 29 2c 65 3d 74 28 31 37 30 32 29 2c 6e 3d 74 28 36 38 33 36 31 29 2c 6f 3d 74 28 34 37 39 30 38 29 2c 61 3d 74 28 32 36 32 34 34 29 2c 69 3d 74 28 36 35 34 31 37 29 2c 75 3d 65 28 5b 5d 2e 70 75 73 68 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 76 3d 31 3d 3d 66 2c 68 3d 32 3d 3d 66 2c 64 3d 33 3d 3d 66 2c 70 3d 34 3d 3d 66 2c 79 3d 36 3d 3d 66 2c Data Ascii: eturn g;case 1:return y}return u?-1:void 0}};s.exports={findLast:a(0),findLastIndex:a(1)}},42092:(s,c,t)=>{"use strict";var r=t(49974),e=t(1702),n=t(68361),o=t(47908),a=t(26244),i=t(65417),u=e([].push),l=function(f){var v=1==f,h=2==f,d=3==f,p=4==f,y=6==f,
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 54 52 49 45 53 3a 45 7d 29 2c 75 74 7d 29 29 2e 70 72 6f 74 6f 74 79 70 65 3d 46 2c 46 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 4c 29 2c 28 51 7c 7c 7a 29 26 26 28 55 28 22 64 65 6c 65 74 65 22 29 2c 55 28 22 68 61 73 22 29 2c 45 26 26 55 28 22 67 65 74 22 29 29 2c 28 7a 7c 7c 57 29 26 26 55 28 53 29 2c 4d 26 26 46 2e 63 6c 65 61 72 26 26 64 65 6c 65 74 65 20 46 2e 63 6c 65 61 72 7d 72 65 74 75 72 6e 20 6a 5b 52 5d 3d 4c 2c 72 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 2c 66 6f 72 63 65 64 3a 4c 21 3d 50 7d 2c 6a 29 2c 79 28 4c 2c 52 29 2c 4d 7c 7c 4f 2e 73 65 74 53 74 72 6f 6e 67 28 4c 2c 52 2c 45 29 2c 4c 7d 7d 2c 39 39 39 32 30 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 Data Ascii: TRIES:E}),ut})).prototype=F,F.constructor=L),(Q\|\|z)&&(U("delete"),U("has"),E&&U("get")),(z\|\|W)&&U(S),M&&F.clear&&delete F.clear}return j[R]=L,r({global:!0,constructor:!0,forced:L!=P},j),y(L,R),M\|\|O.setStrong(L,R,E),L}},99920:(s,c,t)=>{"use strict";var r=t
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 4d 3d 22 6b 65 79 73 22 2c 53 3d 22 76 61 6c 75 65 73 22 2c 50 3d 22 65 6e 74 72 69 65 73 22 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 73 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 4c 2c 6a 2c 55 2c 56 2c 4b 2c 57 2c 51 29 7b 69 28 55 2c 6a 2c 56 29 3b 76 61 72 20 67 74 2c 73 74 2c 78 74 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 43 74 29 7b 69 66 28 43 74 3d 3d 3d 4b 26 26 5f 29 72 65 74 75 72 6e 20 5f 3b 69 66 28 21 4f 26 26 43 74 20 69 6e 20 71 29 72 65 74 75 72 6e 20 71 5b 43 74 5d 3b 73 77 69 74 63 68 28 43 74 29 7b 63 61 73 65 20 4d 3a 63 61 73 65 20 53 3a 63 61 73 65 20 50 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 28 74 68 69 73 2c 43 74 29 7d 7d 72 65 74 Data Ascii: M="keys",S="values",P="entries",F=function(){return this};s.exports=function(L,j,U,V,K,W,Q){i(U,j,V);var gt,st,xt,w=function(Ct){if(Ct===K&&_)return _;if(!O&&Ct in q)return q[Ct];switch(Ct){case M:case S:case P:return function(){return new U(this,Ct)}}ret
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 62 6f 6c 2e 6b 65 79 46 6f 72 7d 2c 35 30 38 36 33 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 31 37 30 32 29 3b 73 2e 65 78 70 6f 72 74 73 3d 72 28 31 2e 2e 76 61 6c 75 65 4f 66 29 7d 2c 35 31 34 30 30 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 31 39 33 30 33 29 2c 65 3d 4d 61 74 68 2e 6d 61 78 2c 6e 3d 4d 61 74 68 2e 6d 69 6e 3b 73 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 76 61 72 20 69 3d 72 28 6f 29 3b 72 65 74 75 72 6e 20 69 3c 30 3f 65 28 69 2b 61 2c 30 29 3a 6e 28 69 2c 61 29 7d 7d 2c 34 35 36 35 36 3a 28 73 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 38 33 36 31 29 2c 65 Data Ascii: bol.keyFor},50863:(s,c,t)=>{"use strict";var r=t(1702);s.exports=r(1..valueOf)},51400:(s,c,t)=>{"use strict";var r=t(19303),e=Math.max,n=Math.min;s.exports=function(o,a){var i=r(o);return i<0?e(i+a,0):n(i,a)}},45656:(s,c,t)=>{"use strict";var r=t(68361),e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:01 UTC	589	OUT	GET /9763b81/main.js HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:02 UTC	598	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5361488 Connection: close Date: Wed, 24 Apr 2024 12:32:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "7df74544a09d09543e1708cc11325ddd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 2276eb838fdfbb75e66a01647d420332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: Rx8edlCXyM6sL2rtJD5D3NSl5xtJKsI5VdhK64PBAgE75mLtBNAigQ==
2024-04-24 12:32:02 UTC	15786	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 32 32 34 38 39 3a 28 6c 74 2c 4d 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 4d 2c 7b 71 6a 3a 28 29 3d 3e 4e 6f 2c 4e 47 3a 28 29 3d 3e 71 61 2c 4d 3a 28 29 3d 3e 6b 69 2c 4a 34 3a 28 29 3d 3e 45 72 2c 49 4a 3a 28 29 3d 3e 6b 73 2c 4c 79 3a 28 29 3d 3e 55 73 7d 29 3b 76 61 72 20 6e 3d 72 28 39 37 35 38 32 29 2c 74 3d 72 28 39 34 36 35 30 29 2c 67 3d 72 28 33 36 38 39 35 29 2c 73 3d 72 28 32 34 30 30 36 29 2c 5f 3d 72 28 37 37 35 37 39 29 2c 6c 3d 72 28 36 31 31 33 35 29 2c 6d 3d 28 72 28 33 39 38 34 31 29 2c 72 28 35 39 Data Ascii: (self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[179],{22489:(lt,M,r)=>{"use strict";r.d(M,{qj:()=>No,NG:()=>qa,M:()=>ki,J4:()=>Er,IJ:()=>ks,Ly:()=>Us});var n=r(97582),t=r(94650),g=r(36895),s=r(24006),_=r(77579),l=r(61135),m=(r(39841),r(59
2024-04-24 12:32:02 UTC	1067	IN	Data Raw: 7d 61 66 74 65 72 28 4e 29 7b 72 65 74 75 72 6e 21 21 4e 26 26 28 74 68 69 73 2e 79 65 61 72 3d 3d 3d 4e 2e 79 65 61 72 3f 74 68 69 73 2e 6d 6f 6e 74 68 3d 3d 3d 4e 2e 6d 6f 6e 74 68 3f 74 68 69 73 2e 64 61 79 21 3d 3d 4e 2e 64 61 79 26 26 74 68 69 73 2e 64 61 79 3e 4e 2e 64 61 79 3a 74 68 69 73 2e 6d 6f 6e 74 68 3e 4e 2e 6d 6f 6e 74 68 3a 74 68 69 73 2e 79 65 61 72 3e 4e 2e 79 65 61 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 70 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4e 6f 28 70 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 70 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 31 2c 70 2e 67 65 74 44 61 74 65 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 72 28 70 29 7b 63 6f 6e 73 74 20 4e 3d 6e 65 77 20 44 61 74 65 28 70 2e 79 65 61 72 2c 70 2e 6d 6f 6e 74 68 2d 31 2c Data Ascii: }after(N){return!!N&&(this.year===N.year?this.month===N.month?this.day!==N.day&&this.day>N.day:this.month>N.month:this.year>N.year)}}function sa(p){return new No(p.getFullYear(),p.getMonth()+1,p.getDate())}function Ur(p){const N=new Date(p.year,p.month-1,
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 5b 28 31 31 2d 53 29 25 37 5d 29 3b 46 6e 2e 73 65 74 44 61 74 65 28 46 6e 2e 67 65 74 44 61 74 65 28 29 2b 34 2d 28 46 6e 2e 67 65 74 44 61 79 28 29 7c 7c 37 29 29 3b 63 6f 6e 73 74 20 6a 6e 3d 46 6e 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 46 6e 2e 73 65 74 4d 6f 6e 74 68 28 30 29 2c 46 6e 2e 73 65 74 44 61 74 65 28 31 29 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 6f 75 6e 64 28 28 6a 6e 2d 46 6e 2e 67 65 74 54 69 6d 65 28 29 29 2f 38 36 34 65 35 29 2f 37 29 2b 31 7d 67 65 74 54 6f 64 61 79 28 29 7b 72 65 74 75 72 6e 20 73 61 28 6e 65 77 20 44 61 74 65 29 7d 69 73 56 61 6c 69 64 28 64 29 7b 69 66 28 21 28 64 26 26 54 6f 28 64 2e 79 65 61 72 29 26 26 54 6f 28 64 2e 6d 6f 6e 74 68 29 26 26 54 6f 28 64 2e 64 61 79 29 26 26 30 21 3d Data Ascii: [(11-S)%7]);Fn.setDate(Fn.getDate()+4-(Fn.getDay()\|\|7));const jn=Fn.getTime();return Fn.setMonth(0),Fn.setDate(1),Math.floor(Math.round((jn-Fn.getTime())/864e5)/7)+1}getToday(){return sa(new Date)}isValid(d){if(!(d&&To(d.year)&&To(d.month)&&To(d.day)&&0!=
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 67 2d 74 65 6d 70 6c 61 74 65 22 2c 36 29 29 2c 32 26 64 29 7b 63 6f 6e 73 74 20 73 74 3d 74 2e 4d 41 73 28 33 29 3b 74 2e 78 70 36 28 35 29 2c 74 2e 51 36 4a 28 22 6e 67 49 66 22 2c 22 6e 6f 6e 65 22 21 3d 3d 53 2e 6e 61 76 69 67 61 74 69 6f 6e 29 2c 74 2e 78 70 36 28 31 29 2c 74 2e 65 6b 6a 28 22 6e 67 62 2d 64 70 2d 6d 6f 6e 74 68 73 22 2c 21 53 2e 63 6f 6e 74 65 6e 74 54 65 6d 70 6c 61 74 65 29 2c 74 2e 78 70 36 28 32 29 2c 74 2e 51 36 4a 28 22 6e 67 54 65 6d 70 6c 61 74 65 4f 75 74 6c 65 74 22 2c 28 6e 75 6c 6c 3d 3d 53 2e 63 6f 6e 74 65 6e 74 54 65 6d 70 6c 61 74 65 3f 6e 75 6c 6c 3a 53 2e 63 6f 6e 74 65 6e 74 54 65 6d 70 6c 61 74 65 2e 74 65 6d 70 6c 61 74 65 52 65 66 29 7c 7c 73 74 29 2c 74 2e 78 70 36 28 31 29 2c 74 2e 51 36 4a 28 22 6e 67 54 65 Data Ascii: g-template",6)),2&d){const st=t.MAs(3);t.xp6(5),t.Q6J("ngIf","none"!==S.navigation),t.xp6(1),t.ekj("ngb-dp-months",!S.contentTemplate),t.xp6(2),t.Q6J("ngTemplateOutlet",(null==S.contentTemplate?null:S.contentTemplate.templateRef)\|\|st),t.xp6(1),t.Q6J("ngTe
2024-04-24 12:32:02 UTC	2048	IN	Data Raw: 65 74 75 72 6e 20 70 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 4e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 53 29 7b 72 65 74 75 72 6e 28 4e 7c 7c 28 4e 3d 74 2e 6e 35 7a 28 70 29 29 29 28 53 7c 7c 70 29 7d 7d 28 29 2c 70 2e 5c 75 30 32 37 35 70 72 6f 76 3d 28 30 2c 74 2e 59 7a 37 29 28 7b 66 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 70 7d 2c 74 6f 6b 65 6e 3a 70 2c 70 72 6f 76 69 64 65 64 49 6e 3a 22 72 6f 6f 74 22 7d 29 2c 70 7d 29 28 29 3b 63 6f 6e 73 74 20 71 6f 3d 7b 70 72 6f 76 69 64 65 3a 73 2e 4a 55 2c 75 73 65 45 78 69 73 74 69 6e 67 3a 28 30 2c 74 2e 47 70 63 29 28 28 29 3d 3e 45 72 29 2c 6d 75 6c 74 69 3a 21 30 7d 2c 61 63 3d 7b 70 72 6f 76 69 64 65 3a 73 Data Ascii: eturn p.\u0275fac=function(){let N;return function(S){return(N\|\|(N=t.n5z(p)))(S\|\|p)}}(),p.\u0275prov=(0,t.Yz7)({factory:function(){return new p},token:p,providedIn:"root"}),p})();const qo={provide:s.JU,useExisting:(0,t.Gpc)(()=>Er),multi:!0},ac={provide:s
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 7d 6f 70 65 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 69 73 4f 70 65 6e 28 29 29 7b 63 6f 6e 73 74 20 64 3d 74 68 69 73 2e 5f 63 66 72 2e 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 6e 65 6e 74 46 61 63 74 6f 72 79 28 6c 61 29 3b 74 68 69 73 2e 5f 63 52 65 66 3d 74 68 69 73 2e 5f 76 63 52 65 66 2e 63 72 65 61 74 65 43 6f 6d 70 6f 6e 65 6e 74 28 64 29 2c 74 68 69 73 2e 5f 61 70 70 6c 79 50 6f 70 75 70 53 74 79 6c 69 6e 67 28 74 68 69 73 2e 5f 63 52 65 66 2e 6c 6f 63 61 74 69 6f 6e 2e 6e 61 74 69 76 65 45 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 61 70 70 6c 79 44 61 74 65 70 69 63 6b 65 72 49 6e 70 75 74 73 28 74 68 69 73 2e 5f 63 52 65 66 2e 69 6e 73 74 61 6e 63 65 29 2c 74 68 69 73 2e 5f 73 75 62 73 63 72 69 62 65 46 6f 72 44 61 74 65 70 69 63 6b 65 72 4f 75 74 70 Data Ascii: }open(){if(!this.isOpen()){const d=this._cfr.resolveComponentFactory(la);this._cRef=this._vcRef.createComponent(d),this._applyPopupStyling(this._cRef.location.nativeElement),this._applyDatepickerInputs(this._cRef.instance),this._subscribeForDatepickerOutp
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 21 64 2e 73 68 69 66 74 4b 65 79 26 26 64 2e 74 61 72 67 65 74 3d 3d 3d 6c 65 5b 6c 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 74 68 69 73 2e 5f 61 6e 63 68 6f 72 2e 6e 61 74 69 76 65 45 6c 65 6d 65 6e 74 2e 66 6f 63 75 73 28 29 2c 74 68 69 73 2e 63 6c 6f 73 65 28 29 29 7d 65 6c 73 65 28 30 2c 45 2e 52 29 28 64 2e 74 61 72 67 65 74 2c 22 66 6f 63 75 73 6f 75 74 22 29 2e 70 69 70 65 28 28 30 2c 46 2e 71 29 28 31 29 29 2e 73 75 62 73 63 72 69 62 65 28 28 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 6c 65 7d 29 3d 3e 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 52 65 66 2e 6e 61 74 69 76 65 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 6c 65 29 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 28 29 7d 29 7d 7d 65 6c 73 65 20 46 6e 26 26 28 21 30 3d 3d 3d 74 68 69 73 2e Data Ascii: !d.shiftKey&&d.target===le[le.length-1]&&(this._anchor.nativeElement.focus(),this.close())}else(0,E.R)(d.target,"focusout").pipe((0,F.q)(1)).subscribe(({relatedTarget:le})=>{this._elementRef.nativeElement.contains(le)\|\|this.close()})}}else Fn&&(!0===this.
2024-04-24 12:32:02 UTC	2048	IN	Data Raw: 30 32 37 35 69 6e 6a 3d 74 2e 63 4a 53 28 7b 69 6d 70 6f 72 74 73 3a 5b 67 2e 65 7a 5d 7d 29 2c 70 7d 29 28 29 2c 41 6c 3d 28 28 29 3d 3e 7b 6c 65 74 20 70 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6d 61 78 3d 31 30 30 2c 74 68 69 73 2e 61 6e 69 6d 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 73 74 72 69 70 65 64 3d 21 31 2c 74 68 69 73 2e 73 68 6f 77 56 61 6c 75 65 3d 21 31 7d 7d 3b 72 65 74 75 72 6e 20 70 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 64 7c 7c 70 29 7d 2c 70 2e 5c 75 30 32 37 35 70 72 6f 76 3d 28 30 2c 74 2e 59 7a 37 29 28 7b 66 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 70 7d 2c 74 6f 6b 65 6e 3a 70 2c 70 72 Data Ascii: 0275inj=t.cJS({imports:[g.ez]}),p})(),Al=(()=>{let p=class{constructor(){this.max=100,this.animated=!1,this.striped=!1,this.showValue=!1}};return p.\u0275fac=function(d){return new(d\|\|p)},p.\u0275prov=(0,t.Yz7)({factory:function(){return new p},token:p,pr
2024-04-24 12:32:02 UTC	8949	IN	Data Raw: 74 79 70 65 2c 22 74 79 70 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6e 2e 5f 5f 64 65 63 6f 72 61 74 65 29 28 5b 28 30 2c 74 2e 49 49 42 29 28 29 5d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6e 2e 5f 5f 64 65 63 6f 72 61 74 65 29 28 5b 28 30 2c 74 2e 49 49 42 29 28 29 5d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 65 69 67 68 74 22 2c 76 6f 69 64 20 30 29 2c 70 7d 29 28 29 2c 47 73 3d 28 28 29 3d 3e 7b 6c 65 74 20 70 3d 63 6c 61 73 73 7b 7d 3b 72 65 74 75 72 6e 20 70 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 64 7c 7c 70 29 7d 2c 70 2e 5c 75 30 32 37 35 6d 6f 64 3d 74 2e 6f 41 42 28 7b 74 79 70 65 3a 70 7d 29 2c 70 2e 5c 75 30 32 37 35 69 6e Data Ascii: type,"type",void 0),(0,n.__decorate)([(0,t.IIB)()],p.prototype,"value",void 0),(0,n.__decorate)([(0,t.IIB)()],p.prototype,"height",void 0),p})(),Gs=(()=>{let p=class{};return p.\u0275fac=function(d){return new(d\|\|p)},p.\u0275mod=t.oAB({type:p}),p.\u0275in
2024-04-24 12:32:02 UTC	16384	IN	Data Raw: 6b 65 72 22 5d 5d 2c 69 6e 70 75 74 73 3a 7b 6d 65 72 69 64 69 61 6e 3a 22 6d 65 72 69 64 69 61 6e 22 2c 73 70 69 6e 6e 65 72 73 3a 22 73 70 69 6e 6e 65 72 73 22 2c 73 65 63 6f 6e 64 73 3a 22 73 65 63 6f 6e 64 73 22 2c 68 6f 75 72 53 74 65 70 3a 22 68 6f 75 72 53 74 65 70 22 2c 6d 69 6e 75 74 65 53 74 65 70 3a 22 6d 69 6e 75 74 65 53 74 65 70 22 2c 73 65 63 6f 6e 64 53 74 65 70 3a 22 73 65 63 6f 6e 64 53 74 65 70 22 2c 72 65 61 64 6f 6e 6c 79 49 6e 70 75 74 73 3a 22 72 65 61 64 6f 6e 6c 79 49 6e 70 75 74 73 22 2c 73 69 7a 65 3a 22 73 69 7a 65 22 7d 2c 66 65 61 74 75 72 65 73 3a 5b 74 2e 5f 42 6e 28 5b 52 6e 5d 29 2c 74 2e 54 54 44 5d 2c 64 65 63 6c 73 3a 31 36 2c 76 61 72 73 3a 32 35 2c 63 6f 6e 73 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 4e Data Ascii: ker"]],inputs:{meridian:"meridian",spinners:"spinners",seconds:"seconds",hourStep:"hourStep",minuteStep:"minuteStep",secondStep:"secondStep",readonlyInputs:"readonlyInputs",size:"size"},features:[t._Bn([Rn]),t.TTD],decls:16,vars:25,consts:function(){let N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:02 UTC	568	OUT	GET /9763b81/styles.css HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:03 UTC	509	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 270110 Connection: close Date: Wed, 24 Apr 2024 12:32:04 GMT Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "0ac2dd2dd75be141c123df2c32e36d47" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a2f3f72865ff056225454005e6fdaae6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: RudfCdziA2SBupcXEh4cJULWGx3SsieYlVyP-vU7DAYdghqVsiaYYQ==
2024-04-24 12:32:03 UTC	15875	IN	Data Raw: 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 33 30 30 2c 34 30 30 2c 35 30 30 22 3b 5b 63 6c 61 73 73 5e 3d 69 63 6f 6e 2d 5d 3a 62 65 66 6f 72 65 2c 5b 63 6c 61 73 73 2a 3d 22 20 69 63 6f 6e 2d 22 5d 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 65 6d 7d 2e 69 63 6f 6e 2d 69 6e 64 69 63 61 74 6f 72 2d 73 75 63 63 65 73 73 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 40 66 6f 6e 74 2d Data Ascii: @import"https://fonts.googleapis.com/css?family=Roboto:300,400,500";[class^=icon-]:before,[class*=" icon-"]:before{width:1em;margin-right:.2em;text-align:center;margin-left:.2em}.icon-indicator-success:before{background-color:#fff;border-radius:50%}@font-
2024-04-24 12:32:03 UTC	3	IN	Data Raw: 74 6f 6e Data Ascii: ton
2024-04-24 12:32:03 UTC	16384	IN	Data Raw: 2d 64 69 73 61 62 6c 65 64 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 2e 6d 61 74 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2e 6d 61 74 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2c 2e 6d 61 74 2d 66 61 62 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2e 6d 61 74 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2c 2e 6d 61 74 2d 66 61 62 2e 6d 61 74 2d 61 63 63 65 6e 74 2e 6d 61 74 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2c 2e 6d 61 74 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 2e 6d 61 74 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2c 2e 6d 61 74 2d 66 61 62 2e 6d 61 74 2d 62 75 74 74 6f 6e Data Ascii: -disabled,.mat-raised-button.mat-warn.mat-button-disabled,.mat-raised-button.mat-button-disabled.mat-button-disabled,.mat-fab.mat-primary.mat-button-disabled,.mat-fab.mat-accent.mat-button-disabled,.mat-fab.mat-warn.mat-button-disabled,.mat-fab.mat-button
2024-04-24 12:32:03 UTC	16384	IN	Data Raw: 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 39 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 36 70 78 20 2d 33 70 78 20 23 30 30 30 33 2c 30 20 39 70 78 20 31 32 70 78 20 31 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 33 70 78 20 31 36 70 78 20 32 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 31 30 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 36 70 78 20 36 70 78 20 2d 33 70 78 20 23 30 30 30 33 2c 30 20 31 30 70 78 20 31 34 70 78 20 31 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 34 70 78 20 31 38 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 31 31 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 36 70 78 20 37 70 78 20 2d 34 70 78 20 23 30 30 30 Data Ascii: 01f}.mat-elevation-z9{box-shadow:0 5px 6px -3px #0003,0 9px 12px 1px #00000024,0 3px 16px 2px #0000001f}.mat-elevation-z10{box-shadow:0 6px 6px -3px #0003,0 10px 14px 1px #00000024,0 4px 18px 3px #0000001f}.mat-elevation-z11{box-shadow:0 6px 7px -4px #000
2024-04-24 12:32:03 UTC	2048	IN	Data Raw: 23 30 30 30 7d 2e 6d 61 74 2d 63 68 69 70 2e 6d 61 74 2d 73 74 61 6e 64 61 72 64 2d 63 68 69 70 2e 6d 61 74 2d 63 68 69 70 2d 73 65 6c 65 63 74 65 64 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 63 68 69 70 2d 72 65 6d 6f 76 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 6d 61 74 2d 63 68 69 70 2e 6d 61 74 2d 73 74 61 6e 64 61 72 64 2d 63 68 69 70 2e 6d 61 74 2d 63 68 69 70 2d 73 65 6c 65 63 74 65 64 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 31 61 7d 2e 6d 61 74 2d 63 68 69 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 61 74 2d 63 68 69 70 Data Ascii: #000}.mat-chip.mat-standard-chip.mat-chip-selected.mat-accent .mat-chip-remove{color:#000;opacity:.4}.mat-chip.mat-standard-chip.mat-chip-selected.mat-accent .mat-ripple-element{background-color:#0000001a}.mat-chip{font-size:16px;font-weight:400}.mat-chip
2024-04-24 12:32:03 UTC	16384	IN	Data Raw: 2d 72 61 64 69 6f 2d 72 69 70 70 6c 65 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 72 61 64 69 6f 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 29 2c 2e 6d 61 74 2d 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2e 6d 61 74 2d 72 61 64 69 6f 2d 63 68 65 63 6b 65 64 20 2e 6d 61 74 2d 72 61 64 69 6f 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 2c 2e 6d 61 74 2d 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 3a 61 63 74 69 76 65 20 2e 6d 61 74 2d 72 61 64 69 6f 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 61 62 61 62 7d 2e 6d 61 74 2d 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2e 6d 61 74 Data Ascii: -radio-ripple .mat-ripple-element:not(.mat-radio-persistent-ripple),.mat-radio-button.mat-accent.mat-radio-checked .mat-radio-persistent-ripple,.mat-radio-button.mat-accent:active .mat-radio-persistent-ripple{background-color:#ababab}.mat-radio-button.mat
2024-04-24 12:32:03 UTC	16384	IN	Data Raw: 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 20 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 64 69 73 61 62 6c 65 64 20 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 68 65 76 72 6f 6e 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 64 69 73 61 62 6c 65 64 20 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 68 65 76 72 6f 6e 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d Data Ascii: -primary>.mat-tab-header .mat-tab-header-pagination-disabled .mat-tab-header-pagination-chevron,.mat-tab-nav-bar.mat-background-primary>.mat-tab-header-pagination-disabled .mat-tab-header-pagination-chevron{border-color:#000;opacity:.4}.mat-tab-group.mat-
2024-04-24 12:32:03 UTC	16384	IN	Data Raw: 29 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 6f 6d 70 61 72 69 73 6f 6e 2d 69 64 65 6e 74 69 63 61 6c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 36 31 7d 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 64 69 73 61 62 6c 65 64 3e 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 74 6f 64 61 79 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c 65 63 74 65 64 29 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 6f 6d 70 61 72 69 73 6f 6e 2d 69 64 65 6e 74 69 63 61 6c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 32 65 7d 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 69 6e 2d 72 61 6e 67 65 3a 62 65 66 Data Ascii: ):not(.mat-calendar-body-comparison-identical){border-color:#00000061}.mat-calendar-body-disabled>.mat-calendar-body-today:not(.mat-calendar-body-selected):not(.mat-calendar-body-comparison-identical){border-color:#0000002e}.mat-calendar-body-in-range:bef
2024-04-24 12:32:03 UTC	3028	IN	Data Raw: 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 23 38 32 38 61 39 31 38 30 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 63 Data Ascii: d):not(.disabled):active:focus,.btn-secondary:not(:disabled):not(.disabled).active:focus,.show>.btn-secondary.dropdown-toggle:focus{box-shadow:0 0 0 .2rem #828a9180}.btn-success{color:#fff;background-color:#28a745;border-color:#28a745}.btn-success:hover{c
2024-04-24 12:32:03 UTC	16384	IN	Data Raw: 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 23 65 31 35 33 36 31 38 30 7d 2e 62 74 6e 2d 6c 69 67 68 74 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6c 69 67 68 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 36 65 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: not(:disabled):not(.disabled).active:focus,.show>.btn-danger.dropdown-toggle:focus{box-shadow:0 0 0 .2rem #e1536180}.btn-light{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:hover{color:#212529;background-color:#e2e6ea;border-color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49735	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:03 UTC	656	OUT	GET /app/sign-config/6248316d-8590-4dd2-9d39-fe90a1423256?t=1713961923 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:04 UTC	364	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: no-cache, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:04 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:04 UTC	1476	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:04 UTC	1369	IN	Data Raw: 31 63 32 35 0d 0a 7b 22 72 65 71 75 65 73 74 65 72 5f 69 64 22 3a 22 37 64 62 30 30 65 36 61 2d 31 36 39 38 2d 34 39 38 66 2d 62 61 30 30 2d 37 31 34 34 35 61 66 63 66 62 30 33 22 2c 22 73 69 67 6e 61 74 75 72 65 5f 69 64 22 3a 22 63 33 31 34 32 36 39 36 2d 30 66 62 66 2d 34 36 65 66 2d 61 32 34 35 2d 35 62 62 35 34 33 62 63 62 39 32 63 22 2c 22 73 74 61 74 75 73 22 3a 32 2c 22 69 6e 5f 70 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 72 73 22 3a 5b 7b 22 73 69 67 6e 65 72 5f 6e 61 6d 65 22 3a 22 61 6e 74 6f 6e 69 6f 2e 6e 61 76 61 72 72 6f 40 64 6c 69 6e 6b 2e 63 6f 6d 22 2c 22 73 69 67 6e 65 72 5f 65 6d 61 69 6c 22 3a 22 61 6e 74 6f 6e 69 6f 2e 6e 61 76 61 72 72 6f 40 64 6c 69 6e 6b 2e 63 6f 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 30 2c 22 Data Ascii: 1c25{"requester_id":"7db00e6a-1698-498f-ba00-71445afcfb03","signature_id":"c3142696-0fbf-46ef-a245-5bb543bcb92c","status":2,"in_person":false,"signers":[{"signer_name":"antonio.navarro@dlink.com","signer_email":"antonio.navarro@dlink.com","position":0,"
2024-04-24 12:32:04 UTC	1369	IN	Data Raw: 57 38 79 62 4f 38 53 51 57 6c 50 47 47 37 79 42 6b 34 6f 77 6d 7a 71 49 79 6a 48 4d 46 55 77 6a 6d 32 78 66 51 4d 46 7a 43 62 48 59 46 79 33 32 63 6f 6a 79 35 38 7a 58 38 59 45 6e 62 6e 53 6a 36 6b 6c 42 4d 42 73 6d 49 65 62 30 35 50 57 70 4a 44 6a 57 59 78 36 6e 47 41 51 38 41 42 4b 69 69 6c 6b 67 4f 47 69 6c 75 58 63 54 62 7a 36 4a 6a 53 6b 2b 4f 5a 62 56 74 59 77 79 6a 6b 55 6f 72 70 45 58 45 76 6a 36 2b 31 35 39 4f 47 50 54 7a 50 78 54 48 33 58 32 41 77 72 53 69 4c 56 4a 41 54 65 59 79 2b 4e 44 4e 65 2b 4d 50 73 70 34 77 79 74 72 4f 53 4e 57 77 31 6e 6c 38 73 68 6a 4f 61 58 4d 43 6e 6b 57 63 32 42 2f 6b 62 6a 34 76 48 72 35 66 79 64 78 64 50 54 32 4b 47 75 65 71 78 69 44 62 30 5a 43 69 46 2f 75 39 33 46 4c 71 79 58 58 74 2b 65 39 6c 43 66 2b 41 65 4c Data Ascii: W8ybO8SQWlPGG7yBk4owmzqIyjHMFUwjm2xfQMFzCbHYFy32cojy58zX8YEnbnSj6klBMBsmIeb05PWpJDjWYx6nGAQ8ABKiilkgOGiluXcTbz6JjSk+OZbVtYwyjkUorpEXEvj6+159OGPTzPxTH3X2AwrSiLVJATeYy+NDNe+MPsp4wytrOSNWw1nl8shjOaXMCnkWc2B/kbj4vHr5fydxdPT2KGueqxiDb0ZCiF/u93FLqyXXt+e9lCf+AeL
2024-04-24 12:32:04 UTC	1369	IN	Data Raw: 58 47 76 4d 75 72 53 6e 36 63 65 68 57 6b 4a 50 45 43 71 4a 6e 70 4a 38 59 30 30 52 79 33 61 6b 6c 37 30 32 75 38 6c 79 74 7a 59 50 33 56 42 35 6a 54 78 54 33 6a 51 6b 70 36 74 47 50 52 78 4e 2b 2b 58 63 7a 49 65 58 38 50 30 68 54 42 59 6d 42 65 63 38 6e 67 4b 30 73 34 52 49 68 37 61 50 30 39 36 77 32 33 45 43 50 4a 32 31 70 69 73 39 39 78 59 73 38 7a 55 72 6c 2f 48 49 70 34 67 79 75 43 71 30 56 68 79 50 2b 33 70 67 2b 44 47 59 6b 78 79 62 68 33 5a 59 48 4f 59 32 72 74 4e 52 4c 32 73 41 62 42 59 47 78 59 67 55 70 59 69 44 4c 76 4b 6f 4f 7a 2f 46 72 31 69 62 38 66 7a 55 66 38 44 59 4c 65 44 64 6d 42 2b 61 4e 6e 4d 6c 74 66 4a 35 69 50 68 33 4a 5a 77 44 6e 63 69 4a 35 72 75 54 4c 59 54 43 33 63 6b 62 4b 7a 77 2b 6c 42 52 64 34 55 47 2f 4f 4f 49 6f 4f 74 42 Data Ascii: XGvMurSn6cehWkJPECqJnpJ8Y00Ry3akl702u8lytzYP3VB5jTxT3jQkp6tGPRxN++XczIeX8P0hTBYmBec8ngK0s4RIh7aP096w23ECPJ21pis99xYs8zUrl/HIp4gyuCq0VhyP+3pg+DGYkxybh3ZYHOY2rtNRL2sAbBYGxYgUpYiDLvKoOz/Fr1ib8fzUf8DYLeDdmB+aNnMltfJ5iPh3JZwDnciJ5ruTLYTC3ckbKzw+lBRd4UG/OOIoOtB
2024-04-24 12:32:04 UTC	1369	IN	Data Raw: 46 4b 2b 67 32 66 78 75 6a 52 62 53 58 52 33 31 57 78 72 54 63 4a 7a 46 73 6b 66 6a 52 58 55 57 47 72 44 65 49 52 7a 32 59 37 61 46 43 73 4e 33 64 48 4a 31 43 6c 63 51 30 2f 69 7a 4e 45 75 62 43 6a 4b 50 54 53 4b 36 33 68 47 2f 4c 68 45 65 61 58 6b 6e 6e 31 6f 73 65 7a 51 61 38 4a 31 74 45 53 41 55 6e 54 59 63 68 7a 68 73 57 36 77 51 33 68 50 35 67 2f 2b 46 33 38 69 7a 74 44 76 79 6c 63 55 73 69 62 53 74 7a 42 48 78 4b 45 38 7a 67 37 48 35 64 59 4e 55 38 4c 48 44 50 66 33 48 75 63 70 78 76 47 43 6d 2b 5a 71 61 6b 36 74 64 42 5a 46 4e 6d 38 49 62 30 79 4e 43 70 34 72 68 56 73 75 64 72 74 6a 72 63 43 2b 72 54 68 2f 30 74 69 6d 5a 74 32 34 79 32 46 57 51 51 79 4b 71 32 73 46 49 52 2b 48 57 6e 6e 2b 6c 79 5a 67 2f 33 5a 41 65 2f 5a 67 2b 37 4b 53 66 61 76 39 Data Ascii: FK+g2fxujRbSXR31WxrTcJzFskfjRXUWGrDeIRz2Y7aFCsN3dHJ1ClcQ0/izNEubCjKPTSK63hG/LhEeaXknn1osezQa8J1tESAUnTYchzhsW6wQ3hP5g/+F38iztDvylcUsibStzBHxKE8zg7H5dYNU8LHDPf3HucpxvGCm+Zqak6tdBZFNm8Ib0yNCp4rhVsudrtjrcC+rTh/0timZt24y2FWQQyKq2sFIR+HWnn+lyZg/3ZAe/Zg+7KSfav9
2024-04-24 12:32:04 UTC	1369	IN	Data Raw: 6f 61 74 51 68 65 4a 47 76 5a 48 33 65 6c 49 69 63 4a 71 38 69 67 50 68 6c 66 77 6a 48 41 4f 30 6a 33 4f 37 4b 67 7a 38 77 55 42 55 62 4f 45 54 54 32 65 4f 32 51 37 45 54 64 39 52 36 36 31 53 37 67 70 72 42 45 64 52 46 77 76 63 62 68 33 58 53 41 4d 6c 41 77 46 76 4a 38 34 75 48 58 34 64 2b 74 69 42 6a 42 41 77 54 68 5a 78 62 4e 68 58 58 34 57 4c 54 68 66 34 5a 44 4b 4f 52 36 59 64 2f 74 77 6a 35 4c 48 37 64 4f 38 53 57 6c 41 77 61 70 70 53 67 46 64 75 53 4b 46 70 6e 34 68 4c 30 58 64 75 56 49 59 78 6d 4b 58 34 38 63 73 6d 33 4b 61 43 4c 67 39 34 58 42 6d 53 78 34 37 52 59 6f 7a 4a 63 48 32 68 41 47 38 4c 69 70 74 4e 65 66 79 52 73 7a 64 68 6d 78 52 58 4a 52 39 6d 33 6e 4d 54 52 77 6f 71 41 75 62 68 47 63 53 6d 55 6e 6d 44 76 37 71 78 30 77 57 38 43 71 72 Data Ascii: oatQheJGvZH3elIicJq8igPhlfwjHAO0j3O7Kgz8wUBUbOETT2eO2Q7ETd9R661S7gprBEdRFwvcbh3XSAMlAwFvJ84uHX4d+tiBjBAwThZxbNhXX4WLThf4ZDKOR6Yd/twj5LH7dO8SWlAwappSgFduSKFpn4hL0XduVIYxmKX48csm3KaCLg94XBmSx47RYozJcH2hAG8LiptNefyRszdhmxRXJR9m3nMTRwoqAubhGcSmUnmDv7qx0wW8Cqr
2024-04-24 12:32:04 UTC	368	IN	Data Raw: 5f 70 61 72 61 6c 6c 65 6c 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 61 64 76 61 6e 63 65 64 22 2c 22 73 65 6e 64 5f 73 69 67 6e 65 72 5f 64 6f 63 75 6d 65 6e 74 5f 63 6f 70 79 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 65 6e 64 5f 61 75 64 69 74 5f 74 72 61 69 6c 5f 63 6f 70 79 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 72 65 70 6c 79 5f 74 6f 22 3a 6e 75 6c 6c 2c 22 6e 65 77 5f 64 6f 63 75 6d 65 6e 74 5f 6e 61 76 69 67 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 5f 69 76 5f 73 69 67 6e 5f 73 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 5f 76 69 64 65 6f 5f 69 64 22 3a 74 72 75 65 2c 22 70 64 66 5f 76 69 65 77 65 72 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 72 65 63 69 70 69 65 6e 74 22 3a 7b 22 6e 75 6d Data Ascii: _parallel":true,"type":"advanced","send_signer_document_copy_enabled":true,"send_audit_trail_copy_enabled":false,"reply_to":null,"new_document_navigation":false,"show_iv_sign_section":false,"show_video_id":true,"pdf_viewer_enabled":false,"recipient":{"num
2024-04-24 12:32:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:04 UTC	630	OUT	GET /9763b81/assets/i18n/en.json HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:05 UTC	590	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 63496 Connection: close Date: Wed, 24 Apr 2024 12:32:05 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:35 GMT ETag: "4f45c8c515f61eb6c2f38811ff340d9f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 9c406bc1dfbf2975a1bbfa0fc9a1b178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: fICx9W_AeL6WGIiCPxzkH_06P80k5rSI6xtUdThtmiroVid9fS82Uw==
2024-04-24 12:32:05 UTC	15727	IN	Data Raw: 7b 0a 20 20 20 20 22 61 63 63 65 70 74 42 75 74 74 6f 6e 4b 65 79 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 22 61 70 70 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 34 30 34 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 74 74 6f 6e 22 3a 20 22 47 6f 20 62 61 63 6b 20 74 6f 20 74 68 65 20 6d 61 69 6e 20 70 61 67 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 41 73 6b 20 74 68 65 20 73 65 6e 64 65 72 20 74 6f 20 72 65 73 65 6e 64 20 69 74 20 74 6f 20 79 6f 75 20 73 6f 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 61 63 63 65 73 73 20 69 74 20 63 6f 72 72 65 63 74 6c 79 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 75 62 74 69 74 6c 65 22 3a 20 22 34 30 34 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 Data Ascii: { "acceptButtonKey": null, "app": { "404": { "button": "Go back to the main page", "message": "Ask the sender to resend it to you so that you can access it correctly.", "subtitle": "404", "ti
2024-04-24 12:32:05 UTC	16384	IN	Data Raw: 3a 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 65 63 6f 6e 64 5f 70 6f 69 6e 74 22 3a 20 22 59 6f 75 20 73 68 6f 75 6c 64 20 61 76 6f 69 64 20 72 65 66 6c 65 63 74 69 6f 6e 73 20 74 68 61 74 20 6d 61 79 20 61 66 66 65 63 74 20 6e 65 67 61 74 69 76 65 6c 79 20 74 68 65 20 69 6d 61 67 65 20 72 65 61 64 69 6e 67 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 68 69 72 64 5f 70 6f 69 6e 74 22 3a 20 22 49 74 20 73 68 6f 75 6c 64 20 68 61 76 65 20 61 20 67 6f 6f 64 20 63 6f 6e 74 72 61 73 74 2c 20 61 6c 6c 6f 77 69 6e 67 20 74 6f 20 72 65 61 64 20 74 68 65 20 69 6d 61 67 65 20 62 65 74 74 65 72 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 22 0a 20 20 20 20 20 20 20 20 7d Data Ascii: :", "second_point": "You should avoid reflections that may affect negatively the image reading.", "third_point": "It should have a good contrast, allowing to read the image better.", "title": "Recommendations" }
2024-04-24 12:32:05 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 22 6d 6f 62 69 6c 65 5f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 22 3a 20 22 53 69 67 6e 20 6f 6e 20 61 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 20 66 6f 72 20 61 20 73 6d 6f 6f 74 68 65 72 20 65 78 70 65 72 69 65 6e 63 65 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 6e 5f 68 6f 6c 64 5f 62 6f 64 79 22 3a 20 22 57 65 27 76 65 20 73 74 6f 70 70 65 64 20 74 68 69 73 20 73 69 67 6e 69 6e 67 20 70 72 6f 63 65 73 73 20 74 6f 20 65 6e 73 75 72 65 20 69 74 73 20 73 65 63 75 72 69 74 79 2e 20 57 65 20 68 61 76 65 20 63 6f 6d 6d 75 6e 69 63 61 74 65 64 20 74 68 69 73 20 69 73 73 75 65 20 74 6f 20 74 68 65 20 73 65 6e 64 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 70 72 6f 63 65 73 73 20 63 61 6e 20 62 65 20 72 65 61 63 74 69 76 61 74 Data Ascii: "mobile_recommendation": "Sign on a mobile device for a smoother experience.", "on_hold_body": "We've stopped this signing process to ensure its security. We have communicated this issue to the sender so that the process can be reactivat
2024-04-24 12:32:05 UTC	2048	IN	Data Raw: 2f 70 3e 5c 6e 3c 2f 74 64 3e 5c 6e 3c 2f 74 72 3e 5c 6e 3c 74 72 3e 5c 6e 3c 74 64 3e 5c 6e 3c 70 20 64 69 72 3d 5c 22 6c 74 72 5c 22 3e 3c 73 74 72 6f 6e 67 3e 44 65 6c 65 74 69 6f 6e 20 6f 72 20 65 72 61 73 75 72 65 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 5c 6e 3c 2f 74 64 3e 5c 6e 3c 74 64 3e 5c 6e 3c 70 20 64 69 72 3d 5c 22 6c 74 72 5c 22 3e 59 6f 75 20 6d 61 79 20 72 65 71 75 65 73 74 20 74 68 65 20 64 65 6c 65 74 69 6f 6e 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 77 69 74 68 6f 75 74 20 64 75 65 20 64 65 6c 61 79 20 77 68 65 6e 20 61 6e 79 20 6f 66 20 74 68 65 20 65 6c 61 62 6f 72 61 74 65 64 20 63 61 73 65 73 20 6f 63 63 75 72 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 6c 6c 69 63 69 74 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 Data Ascii: /p>\n</td>\n</tr>\n<tr>\n<td>\n<p dir=\"ltr\"><strong>Deletion or erasure</strong></p>\n</td>\n<td>\n<p dir=\"ltr\">You may request the deletion of personal data without due delay when any of the elaborated cases occurs. For example, illicit data processi
2024-04-24 12:32:05 UTC	12953	IN	Data Raw: 6e 67 20 61 6e 67 6c 65 2c 20 73 70 65 65 64 2c 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 2c 20 6c 65 74 74 65 72 20 66 6f 72 6d 61 74 69 6f 6e 2c 20 61 6e 64 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 73 69 67 6e 61 74 75 72 65 e2 80 99 73 20 73 74 72 6f 6b 65 73 29 2e 3c 2f 70 3e 5c 6e 3c 6f 6c 3e 5c 6e 3c 6c 69 20 73 74 79 6c 65 3d 5c 22 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 5c 22 3e 5c 6e 3c 6f 6c 3e 5c 6e 3c 6c 69 20 64 69 72 3d 5c 22 6c 74 72 5c 22 3e 53 49 47 4e 41 54 55 52 49 54 20 63 6f 6d 6d 69 74 73 20 74 6f 20 69 6e 66 6f 72 6d 69 6e 67 20 79 6f 75 20 6f 66 20 61 6e 79 20 73 69 74 75 61 74 69 6f 6e 20 74 68 61 74 20 6d 61 79 20 68 61 76 65 20 65 6e 64 61 6e 67 65 72 65 64 20 74 68 65 20 63 6f 6e Data Ascii: ng angle, speed, acceleration, letter formation, and the direction of the signatures strokes).</p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li dir=\"ltr\">SIGNATURIT commits to informing you of any situation that may have endangered the con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:04 UTC	645	OUT	GET /9763b81/assets/img/loaders/preloader-sign-app.gif HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:05 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 93413 Connection: close Date: Wed, 24 Apr 2024 12:32:05 GMT Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "67af1392231708a90af9e4a4b61f5448" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5b376d8d1148dc51c7bf7c79d8c4c91a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: 7sKNxnibtCkJElKDex1ynKGyLSsYddQUwIUMJ5HJ0NRrXfNi20iFjw==
2024-04-24 12:32:05 UTC	15878	IN	Data Raw: 47 49 46 38 39 61 fa 00 fa 00 e6 7f 00 43 97 b1 d4 e6 eb 69 a8 bc 41 94 af 88 ba c9 c3 dd e4 3b 92 ad 77 b4 c6 1b 49 57 31 8d a9 23 84 a2 96 ab b1 99 c4 d1 b8 d3 dc 28 86 a4 24 72 8c eb f2 f5 c5 d7 dd 56 9d b3 2c 89 a7 aa cb d6 09 39 49 a1 c7 d2 72 ab bd 00 21 33 70 8d 96 95 bd ca e3 eb ed 22 81 9f 32 8a a5 cd e1 e7 e5 ef f1 4a 9a b3 f5 f9 fa 5c a2 b7 46 98 b1 51 98 ae bc d8 e0 b3 ce d6 37 8f ab a2 c9 d6 44 68 74 f3 f7 f9 fb f6 f3 b8 c6 ca fe fb fa 2d 8b a8 63 a0 b3 39 8c a7 fe f8 f6 ff fd fb a2 c4 cf 3e 94 b0 aa ce d9 36 91 ad f1 f5 f7 dc eb f0 af d2 dd a6 cc d8 a9 ba bf fb fd fd e8 ed ef 2e 86 a2 f6 f3 f1 41 90 a9 1c 7f 9e 1f 81 a1 5b 7d 88 f8 fb fd 4a 96 ae df e8 eb a8 c7 d1 f1 ef ef ef f3 f5 f2 f1 ef f7 f5 f3 de e4 e6 ef ef ef f1 f1 f1 7e b1 c1 40 9d Data Ascii: GIF89aCiA;wIW1#($rV,9Ir!3p"2J\FQ7Dht-c9>6.A[}J~@
2024-04-24 12:32:05 UTC	16384	IN	Data Raw: 6d 15 70 c2 04 5d 9e a0 00 01 35 aa 85 03 08 0a 00 30 02 64 22 dc 98 d6 0d 02 28 40 43 97 0e 9c 20 19 5b 04 6c d9 a6 03 07 48 19 e6 09 1a dd a9 00 08 05 b0 85 83 08 7e 96 e9 00 01 8a a6 75 85 71 2e 74 49 c3 a3 2f ae 55 c2 08 0a 0c 60 e9 05 7a 9e 75 c3 01 0e 74 7a 67 a0 7a 64 8a 56 09 74 52 39 82 4d 20 c0 a7 96 0a 04 74 e0 80 a9 23 24 a0 80 08 44 a6 e5 41 9f 09 d8 09 80 0b 0e 10 1b 26 9d 5c de c9 ac 08 39 c4 69 96 1b 0c 40 16 ed 00 cc 4a 60 41 96 67 41 a0 87 b6 76 0e 20 ec 00 04 44 8a d6 07 e3 6e a9 ac 01 0e 24 20 82 0e e0 96 f5 01 03 74 ba 00 2c b7 a5 5e 90 83 70 66 a9 50 83 08 13 3c f7 6e c1 23 1c 50 c3 31 66 95 70 80 4d 09 0c 50 ae 01 05 d3 20 00 59 03 05 c8 1a 16 0e 28 88 20 ec 09 12 df 69 80 b0 09 80 70 31 04 17 8a e5 81 1e 12 90 4c 03 00 30 0f 70 82 Data Ascii: mp]50d"(@C [lH~uq.tI/U`zutzgzdVtR9M t#$DA&\9i@J`AgAv Dn$ t,^pfP<n#P1fpMP Y( ip1L0p
2024-04-24 12:32:05 UTC	16384	IN	Data Raw: 7e f3 65 40 77 6c f9 1b a3 e9 e9 85 8d 98 8d 28 b5 90 1f 3b a4 90 29 a3 97 1e 63 61 91 8b f8 11 29 3f 7e ec 41 45 94 98 fe b1 61 2f 08 ca aa 21 4c 7e f0 c0 42 06 8b ce 2a cb 90 7f 64 30 84 23 be f6 61 e8 47 5c ec 3a 19 29 41 e9 48 08 a7 8b a0 6a 08 0b ab 62 84 27 32 b5 fe 51 2d 6a 84 90 71 05 9b dc 2e 32 44 06 7f a8 a9 6a b8 8e e0 e7 24 ba 87 c8 f8 87 18 db a2 bb 6e 35 81 00 00 21 f9 04 05 03 00 7f 00 2c 12 00 17 00 ac 00 d4 00 00 07 ff 80 7f 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8c 36 8e 91 92 93 94 95 96 97 8a 0e 89 06 86 03 98 9f a0 a1 a2 a3 89 23 86 9c 83 33 82 46 7f 64 a4 af b0 b1 b2 a6 82 0a 7f 40 82 0c 7f 01 b2 bd be bf a2 9a 85 5a c0 c5 c6 c7 8b 1c 3e 83 1b 70 c8 cf d0 d1 11 c4 d1 d5 d6 b2 24 82 ce d7 dc dd 98 1c de e1 e2 8b 45 86 13 e0 7f ac e3 eb Data Ascii: ~e@wl(;)ca)?~AEa/!L~B*d0#aG\:)AHjb'2Q-jq.2Dj$n5!,6#3Fd@Z>p$E
2024-04-24 12:32:05 UTC	2048	IN	Data Raw: a7 88 0e 83 aa a8 ad ae af b0 95 55 3d b1 b5 b6 b7 b8 9b 97 36 b9 bd be bf 88 5b 82 22 82 0a 8a 27 ab 7f 06 82 45 c0 ce cf b7 04 95 0c 9d 7f 01 85 2d d0 da db bf 2a dc df e0 b0 cb 7f 03 24 e1 e7 e8 9a 40 c6 84 34 7f ec 82 1f e9 f3 f4 8b 32 f5 f8 f9 95 70 7f 24 f0 fa 00 03 12 aa d2 ef d0 3f 81 08 d1 51 58 64 24 a1 c3 74 23 04 0d 18 64 82 cb c3 8b db 42 19 f2 f1 a7 00 c6 8f ce b2 fc e1 78 c8 23 c8 93 be 9a a1 5c f9 2d 22 cb 97 30 63 ca 54 a4 66 a6 cd 9b 38 11 6a c8 c9 b3 d2 9d 9e 40 83 0a 7d 36 61 a8 d1 48 07 8f 2a 2d 04 29 c8 d2 a7 87 34 0e ea 00 b5 6a a1 6b 56 8f 26 cd 6a 75 0c d7 af 60 c3 8a 1d 4b b6 ac 59 68 5e cf aa 5d cb b6 ad db b7 70 ff 8f d2 4a 16 77 e5 bd 2f 84 e6 d6 dd cb b7 16 00 21 0b fb 7e cc 33 88 83 60 96 5f 48 40 3a fc 90 1a e3 93 01 7c 8c Data Ascii: U=6["'E-$@42p$?QXd$t#dBx#\-"0cTf8j@}6aH-)4jkV&ju`KYh^]pJw/!~3`_H@:\|
2024-04-24 12:32:05 UTC	16384	IN	Data Raw: 00 07 ff 80 7f 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8d 62 8e 91 92 93 94 95 96 97 98 99 96 1f 9a 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae 99 36 27 af b3 b4 b5 89 5b 85 0a 88 34 7f 36 83 1c 7f 06 b6 c3 c4 c5 88 06 09 7f 1c b2 82 0c 7f 47 7f 01 83 51 c6 d5 d6 ab 0e 1c c2 83 1e 7f 5b 90 d7 e1 e2 a5 06 5f 1c 40 24 04 33 82 e0 e3 ee ef 9d 03 be 83 33 46 b8 f0 f8 f9 95 00 83 e9 0d fa 00 03 36 1a c1 cb 41 91 3f 11 a8 09 5c c8 90 90 2c 18 7f 4c dc 6b 48 51 1f 3f 00 2e 14 90 d0 c0 a4 a2 47 7c 23 04 0d f8 22 c8 44 95 8f 28 dd f1 1b f0 c7 87 80 12 ed 52 ca b4 c6 ef 8f 80 08 33 73 0e 3b 48 28 e3 0b 9c 3a 83 da e2 27 4b c2 3f a1 48 6d 01 39 12 33 a9 53 54 00 42 fe 79 f2 e6 a9 55 56 12 80 5e dd 3a 8a df 04 1f 1a 64 70 1d 2b 8a 97 84 6e 64 d3 6a e2 97 c0 01 Data Ascii: b6'[46GQ[_@$33F6A?\,LkHQ?.G\|#"D(R3s;H(:'K?Hm93STByUV^:dp+ndj
2024-04-24 12:32:05 UTC	1514	IN	Data Raw: a0 2d 76 75 ad db 78 0c ab de 96 a2 f1 a7 80 5c 4f 09 ee ea dd 0b d3 06 df 47 29 ff 28 f8 0b c9 2f 61 48 63 ff dc 38 cc b8 b1 e3 c7 90 9d 5e 88 4c b9 d4 e0 ca 89 92 60 fe 73 f6 ec e6 cf a0 15 19 08 4d fa 0f 93 d2 a8 4b 4b 40 8d 14 f5 64 cc af 53 93 ce bb f9 35 5d d9 b8 2b 0f 20 93 fb 8f 8b 42 ad 7b df a5 0d e9 37 5f 20 91 5a 37 d0 eb 00 d2 84 bd c8 35 e5 d0 ab 35 35 17 cc 16 0c 19 81 c4 63 8a f1 cf 25 0a dd 0e fb c1 53 ca e6 c2 1f 03 28 e4 06 2d fa f4 f0 f5 9e 88 ff b8 88 ec d8 f4 f3 87 9d 1f 9a 7f 65 34 3a e8 07 19 47 02 1e f6 41 20 00 21 f9 04 05 03 00 7f 00 2c 7f 00 14 00 6b 00 68 00 00 07 ff 80 7f 82 5a 5a 5b 51 5b 3c 7e 6f 46 66 82 8e 8f 90 91 92 93 94 95 96 97 98 93 4d 4d 58 48 62 0b 7f 15 99 a3 a4 a5 a6 a6 4b 48 aa 62 11 7f 18 a7 b0 b1 b2 a5 9b 9b Data Ascii: -vux\OG)(/aHc8^L`sMKK@dS5]+ B{7_ Z7555c%S(-e4:GA !,khZZ[Q[<~oFfMMXHbKHb
2024-04-24 12:32:05 UTC	16384	IN	Data Raw: f9 04 05 03 00 7f 00 2c 6a 00 15 00 80 00 69 00 00 07 ff 80 7f 82 83 84 85 86 87 88 82 3c 57 89 8d 8e 8f 90 91 92 93 94 8d 4e 59 5a 51 5c 8c 95 9d 9e 9f a0 9e 4d a3 a4 97 7e 7e a1 a9 aa ab 9e 48 ae af 4d 2d 11 29 7f b4 ac b7 b8 b9 7f a4 a3 48 69 55 29 18 18 86 62 ba c6 c7 91 55 51 5a 4e 48 4d 70 48 08 18 08 c8 d5 d6 93 57 55 55 7e 54 82 c3 d7 e0 e1 89 7e 2c e2 e6 e7 86 9c e8 eb e6 32 ec ef e0 62 3c f0 f4 d5 6f f5 f8 ba 3b f9 fc aa ee 88 df fa 09 4c 24 a6 d8 c0 83 08 13 2a 5c c8 b0 a1 c3 87 08 11 54 80 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 49 87 06 4f aa 5c c9 b2 a5 cb 97 30 63 ca 1c 54 c1 ca cc 5c 15 30 a4 e8 73 93 d5 b4 9c 43 7a aa 8a 80 a1 82 44 0c 0b 84 a6 da 51 b4 42 ce 3d 4a 3f a1 e1 91 a1 a8 34 04 f3 a2 7a f2 13 cc 29 86 0c Data Ascii: ,ji<WNYZQ\M~~HM-)HiU)bUQZNHMpHWUU~T~,2b<o;L$*\TH3j CIIO\0cT\0sCzDQB=J?4z)
2024-04-24 12:32:05 UTC	8437	IN	Data Raw: 52 c4 b0 c0 a5 36 3f 0b 41 7a ac 60 c2 a6 b6 14 15 51 9e 34 e2 13 db 8d 3f 1f 3d a6 68 51 74 5a a6 3f 15 84 0e f1 d3 74 9b 47 2a 55 a5 91 11 84 b2 42 d6 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ad db b7 70 ff e3 ca 9d 4b b7 ae dd bb 78 f3 ea dd cb b7 af df bf 80 03 0b 1e 4c b8 b0 e1 c3 88 13 2b 5e cc b8 b1 e3 c7 90 23 4b 9e 4c b9 b2 e5 68 55 9c 34 61 ec a7 05 96 26 48 90 28 f6 53 40 4a 8c 26 a8 13 bb 11 e0 40 42 80 15 48 4c 25 16 62 40 c8 13 19 57 12 d7 a0 05 40 08 03 aa 8e 89 5d 1e 4e bc b8 db dc c6 93 2b 5f ce bc b9 f3 e7 d0 a3 4b 9f 4e bd ba f5 eb d5 a5 60 b7 7b 74 3b 5d e4 de c3 17 05 2e de 6c 02 00 00 15 17 b4 f1 00 92 62 34 0b a2 56 68 c0 58 83 ce 12 7f 54 24 96 61 1f a5 7b f5 20 21 40 1f 78 87 3d 20 df 7f 84 70 41 98 7c 08 08 17 58 15 10 46 Data Ascii: R6?Az`Q4?=hQtZ?tG*UB`Kh]pKxL+^#KLhU4a&H(S@J&@BHL%b@W@]N+_KN`{t;].lb4VhXT$a{ !@x= pA\|XF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:05 UTC	568	OUT	OPTIONS /app/validate/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-signer-token Origin: https://sign-app.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:06 UTC	625	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Origin Cache-Control: no-cache, private access-control-allow-credentials: true access-control-allow-methods: POST, PUT, PATCH, GET, DELETE access-control-allow-headers: x-signer-token access-control-max-age: 3600 access-control-allow-origin: https://sign-app.signaturit.com x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:06 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:06 UTC	1374	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:07 UTC	407	OUT	GET /app/sign-config/6248316d-8590-4dd2-9d39-fe90a1423256?t=1713961923 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:07 UTC	364	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:07 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: no-cache, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:07 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:07 UTC	1374	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:07 UTC	1369	IN	Data Raw: 31 63 32 35 0d 0a 7b 22 72 65 71 75 65 73 74 65 72 5f 69 64 22 3a 22 37 64 62 30 30 65 36 61 2d 31 36 39 38 2d 34 39 38 66 2d 62 61 30 30 2d 37 31 34 34 35 61 66 63 66 62 30 33 22 2c 22 73 69 67 6e 61 74 75 72 65 5f 69 64 22 3a 22 63 33 31 34 32 36 39 36 2d 30 66 62 66 2d 34 36 65 66 2d 61 32 34 35 2d 35 62 62 35 34 33 62 63 62 39 32 63 22 2c 22 73 74 61 74 75 73 22 3a 32 2c 22 69 6e 5f 70 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 72 73 22 3a 5b 7b 22 73 69 67 6e 65 72 5f 6e 61 6d 65 22 3a 22 61 6e 74 6f 6e 69 6f 2e 6e 61 76 61 72 72 6f 40 64 6c 69 6e 6b 2e 63 6f 6d 22 2c 22 73 69 67 6e 65 72 5f 65 6d 61 69 6c 22 3a 22 61 6e 74 6f 6e 69 6f 2e 6e 61 76 61 72 72 6f 40 64 6c 69 6e 6b 2e 63 6f 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 30 2c 22 Data Ascii: 1c25{"requester_id":"7db00e6a-1698-498f-ba00-71445afcfb03","signature_id":"c3142696-0fbf-46ef-a245-5bb543bcb92c","status":2,"in_person":false,"signers":[{"signer_name":"antonio.navarro@dlink.com","signer_email":"antonio.navarro@dlink.com","position":0,"
2024-04-24 12:32:07 UTC	1369	IN	Data Raw: 57 38 79 62 4f 38 53 51 57 6c 50 47 47 37 79 42 6b 34 6f 77 6d 7a 71 49 79 6a 48 4d 46 55 77 6a 6d 32 78 66 51 4d 46 7a 43 62 48 59 46 79 33 32 63 6f 6a 79 35 38 7a 58 38 59 45 6e 62 6e 53 6a 36 6b 6c 42 4d 42 73 6d 49 65 62 30 35 50 57 70 4a 44 6a 57 59 78 36 6e 47 41 51 38 41 42 4b 69 69 6c 6b 67 4f 47 69 6c 75 58 63 54 62 7a 36 4a 6a 53 6b 2b 4f 5a 62 56 74 59 77 79 6a 6b 55 6f 72 70 45 58 45 76 6a 36 2b 31 35 39 4f 47 50 54 7a 50 78 54 48 33 58 32 41 77 72 53 69 4c 56 4a 41 54 65 59 79 2b 4e 44 4e 65 2b 4d 50 73 70 34 77 79 74 72 4f 53 4e 57 77 31 6e 6c 38 73 68 6a 4f 61 58 4d 43 6e 6b 57 63 32 42 2f 6b 62 6a 34 76 48 72 35 66 79 64 78 64 50 54 32 4b 47 75 65 71 78 69 44 62 30 5a 43 69 46 2f 75 39 33 46 4c 71 79 58 58 74 2b 65 39 6c 43 66 2b 41 65 4c Data Ascii: W8ybO8SQWlPGG7yBk4owmzqIyjHMFUwjm2xfQMFzCbHYFy32cojy58zX8YEnbnSj6klBMBsmIeb05PWpJDjWYx6nGAQ8ABKiilkgOGiluXcTbz6JjSk+OZbVtYwyjkUorpEXEvj6+159OGPTzPxTH3X2AwrSiLVJATeYy+NDNe+MPsp4wytrOSNWw1nl8shjOaXMCnkWc2B/kbj4vHr5fydxdPT2KGueqxiDb0ZCiF/u93FLqyXXt+e9lCf+AeL
2024-04-24 12:32:07 UTC	1369	IN	Data Raw: 58 47 76 4d 75 72 53 6e 36 63 65 68 57 6b 4a 50 45 43 71 4a 6e 70 4a 38 59 30 30 52 79 33 61 6b 6c 37 30 32 75 38 6c 79 74 7a 59 50 33 56 42 35 6a 54 78 54 33 6a 51 6b 70 36 74 47 50 52 78 4e 2b 2b 58 63 7a 49 65 58 38 50 30 68 54 42 59 6d 42 65 63 38 6e 67 4b 30 73 34 52 49 68 37 61 50 30 39 36 77 32 33 45 43 50 4a 32 31 70 69 73 39 39 78 59 73 38 7a 55 72 6c 2f 48 49 70 34 67 79 75 43 71 30 56 68 79 50 2b 33 70 67 2b 44 47 59 6b 78 79 62 68 33 5a 59 48 4f 59 32 72 74 4e 52 4c 32 73 41 62 42 59 47 78 59 67 55 70 59 69 44 4c 76 4b 6f 4f 7a 2f 46 72 31 69 62 38 66 7a 55 66 38 44 59 4c 65 44 64 6d 42 2b 61 4e 6e 4d 6c 74 66 4a 35 69 50 68 33 4a 5a 77 44 6e 63 69 4a 35 72 75 54 4c 59 54 43 33 63 6b 62 4b 7a 77 2b 6c 42 52 64 34 55 47 2f 4f 4f 49 6f 4f 74 42 Data Ascii: XGvMurSn6cehWkJPECqJnpJ8Y00Ry3akl702u8lytzYP3VB5jTxT3jQkp6tGPRxN++XczIeX8P0hTBYmBec8ngK0s4RIh7aP096w23ECPJ21pis99xYs8zUrl/HIp4gyuCq0VhyP+3pg+DGYkxybh3ZYHOY2rtNRL2sAbBYGxYgUpYiDLvKoOz/Fr1ib8fzUf8DYLeDdmB+aNnMltfJ5iPh3JZwDnciJ5ruTLYTC3ckbKzw+lBRd4UG/OOIoOtB
2024-04-24 12:32:07 UTC	1369	IN	Data Raw: 46 4b 2b 67 32 66 78 75 6a 52 62 53 58 52 33 31 57 78 72 54 63 4a 7a 46 73 6b 66 6a 52 58 55 57 47 72 44 65 49 52 7a 32 59 37 61 46 43 73 4e 33 64 48 4a 31 43 6c 63 51 30 2f 69 7a 4e 45 75 62 43 6a 4b 50 54 53 4b 36 33 68 47 2f 4c 68 45 65 61 58 6b 6e 6e 31 6f 73 65 7a 51 61 38 4a 31 74 45 53 41 55 6e 54 59 63 68 7a 68 73 57 36 77 51 33 68 50 35 67 2f 2b 46 33 38 69 7a 74 44 76 79 6c 63 55 73 69 62 53 74 7a 42 48 78 4b 45 38 7a 67 37 48 35 64 59 4e 55 38 4c 48 44 50 66 33 48 75 63 70 78 76 47 43 6d 2b 5a 71 61 6b 36 74 64 42 5a 46 4e 6d 38 49 62 30 79 4e 43 70 34 72 68 56 73 75 64 72 74 6a 72 63 43 2b 72 54 68 2f 30 74 69 6d 5a 74 32 34 79 32 46 57 51 51 79 4b 71 32 73 46 49 52 2b 48 57 6e 6e 2b 6c 79 5a 67 2f 33 5a 41 65 2f 5a 67 2b 37 4b 53 66 61 76 39 Data Ascii: FK+g2fxujRbSXR31WxrTcJzFskfjRXUWGrDeIRz2Y7aFCsN3dHJ1ClcQ0/izNEubCjKPTSK63hG/LhEeaXknn1osezQa8J1tESAUnTYchzhsW6wQ3hP5g/+F38iztDvylcUsibStzBHxKE8zg7H5dYNU8LHDPf3HucpxvGCm+Zqak6tdBZFNm8Ib0yNCp4rhVsudrtjrcC+rTh/0timZt24y2FWQQyKq2sFIR+HWnn+lyZg/3ZAe/Zg+7KSfav9
2024-04-24 12:32:07 UTC	1369	IN	Data Raw: 6f 61 74 51 68 65 4a 47 76 5a 48 33 65 6c 49 69 63 4a 71 38 69 67 50 68 6c 66 77 6a 48 41 4f 30 6a 33 4f 37 4b 67 7a 38 77 55 42 55 62 4f 45 54 54 32 65 4f 32 51 37 45 54 64 39 52 36 36 31 53 37 67 70 72 42 45 64 52 46 77 76 63 62 68 33 58 53 41 4d 6c 41 77 46 76 4a 38 34 75 48 58 34 64 2b 74 69 42 6a 42 41 77 54 68 5a 78 62 4e 68 58 58 34 57 4c 54 68 66 34 5a 44 4b 4f 52 36 59 64 2f 74 77 6a 35 4c 48 37 64 4f 38 53 57 6c 41 77 61 70 70 53 67 46 64 75 53 4b 46 70 6e 34 68 4c 30 58 64 75 56 49 59 78 6d 4b 58 34 38 63 73 6d 33 4b 61 43 4c 67 39 34 58 42 6d 53 78 34 37 52 59 6f 7a 4a 63 48 32 68 41 47 38 4c 69 70 74 4e 65 66 79 52 73 7a 64 68 6d 78 52 58 4a 52 39 6d 33 6e 4d 54 52 77 6f 71 41 75 62 68 47 63 53 6d 55 6e 6d 44 76 37 71 78 30 77 57 38 43 71 72 Data Ascii: oatQheJGvZH3elIicJq8igPhlfwjHAO0j3O7Kgz8wUBUbOETT2eO2Q7ETd9R661S7gprBEdRFwvcbh3XSAMlAwFvJ84uHX4d+tiBjBAwThZxbNhXX4WLThf4ZDKOR6Yd/twj5LH7dO8SWlAwappSgFduSKFpn4hL0XduVIYxmKX48csm3KaCLg94XBmSx47RYozJcH2hAG8LiptNefyRszdhmxRXJR9m3nMTRwoqAubhGcSmUnmDv7qx0wW8Cqr
2024-04-24 12:32:07 UTC	368	IN	Data Raw: 5f 70 61 72 61 6c 6c 65 6c 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 61 64 76 61 6e 63 65 64 22 2c 22 73 65 6e 64 5f 73 69 67 6e 65 72 5f 64 6f 63 75 6d 65 6e 74 5f 63 6f 70 79 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 65 6e 64 5f 61 75 64 69 74 5f 74 72 61 69 6c 5f 63 6f 70 79 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 72 65 70 6c 79 5f 74 6f 22 3a 6e 75 6c 6c 2c 22 6e 65 77 5f 64 6f 63 75 6d 65 6e 74 5f 6e 61 76 69 67 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 5f 69 76 5f 73 69 67 6e 5f 73 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 5f 76 69 64 65 6f 5f 69 64 22 3a 74 72 75 65 2c 22 70 64 66 5f 76 69 65 77 65 72 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 72 65 63 69 70 69 65 6e 74 22 3a 7b 22 6e 75 6d Data Ascii: _parallel":true,"type":"advanced","send_signer_document_copy_enabled":true,"send_audit_trail_copy_enabled":false,"reply_to":null,"new_document_navigation":false,"show_iv_sign_section":false,"show_video_id":true,"pdf_viewer_enabled":false,"recipient":{"num
2024-04-24 12:32:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:07 UTC	380	OUT	GET /9763b81/assets/i18n/en.json HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:07 UTC	527	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 63496 Connection: close Date: Wed, 24 Apr 2024 06:50:56 GMT Last-Modified: Thu, 29 Feb 2024 08:07:35 GMT ETag: "4f45c8c515f61eb6c2f38811ff340d9f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 30ffaf80b49b4df5a4a387cee5516fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: nAGuBu7aLDssqVFWxACPvP3FTTu5-gP6wFjPSIknSzlw_A5RVCJbGA== Age: 20471
2024-04-24 12:32:07 UTC	16384	IN	Data Raw: 7b 0a 20 20 20 20 22 61 63 63 65 70 74 42 75 74 74 6f 6e 4b 65 79 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 22 61 70 70 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 34 30 34 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 74 74 6f 6e 22 3a 20 22 47 6f 20 62 61 63 6b 20 74 6f 20 74 68 65 20 6d 61 69 6e 20 70 61 67 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 41 73 6b 20 74 68 65 20 73 65 6e 64 65 72 20 74 6f 20 72 65 73 65 6e 64 20 69 74 20 74 6f 20 79 6f 75 20 73 6f 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 61 63 63 65 73 73 20 69 74 20 63 6f 72 72 65 63 74 6c 79 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 75 62 74 69 74 6c 65 22 3a 20 22 34 30 34 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 Data Ascii: { "acceptButtonKey": null, "app": { "404": { "button": "Go back to the main page", "message": "Ask the sender to resend it to you so that you can access it correctly.", "subtitle": "404", "ti
2024-04-24 12:32:07 UTC	16384	IN	Data Raw: 74 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 64 5f 61 72 74 69 63 6c 65 5f 66 69 72 73 74 5f 68 65 61 64 65 72 22 3a 20 22 31 2e 20 52 65 76 69 65 77 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 64 5f 6d 75 6c 74 69 5f 61 72 74 69 63 6c 65 5f 66 69 72 73 74 5f 68 65 61 64 65 72 22 3a 20 22 31 2e 20 52 65 76 69 65 77 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 64 5f 6d 75 6c 74 69 5f 73 65 63 6f 6e 64 5f 68 65 61 64 65 72 22 3a 20 22 32 2e 20 53 69 67 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 64 5f 6d 75 6c 74 69 5f 77 69 64 67 Data Ascii: t.", "advanced_article_first_header": "1. Review the document", "advanced_multi_article_first_header": "1. Review the documents", "advanced_multi_second_header": "2. Sign the documents", "advanced_multi_widg
2024-04-24 12:32:07 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 7a 69 70 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 72 72 6f 72 5f 66 6f 72 6d 61 74 22 3a 20 22 54 68 65 20 74 65 78 74 20 6d 75 73 74 20 66 6f 6c 6c 6f 77 20 74 68 65 20 30 38 30 30 31 20 66 6f 72 6d 61 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 72 72 6f 72 5f 66 6f 72 6d 61 74 22 3a 20 22 54 68 65 20 74 65 78 74 20 6d 75 73 74 20 66 6f 6c 6c 6f 77 20 74 68 65 20 2b 33 34 36 35 32 33 35 36 36 33 30 20 66 6f 72 6d 61 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: }, "zip": { "error_format": "The text must follow the 08001 format" }, "phone": { "error_format": "The text must follow the +34652356630 format" } },
2024-04-24 12:32:07 UTC	14344	IN	Data Raw: 72 6f 76 69 73 69 6f 6e 73 20 6f 66 20 41 72 74 69 63 6c 65 20 31 35 20 6f 66 20 74 68 65 20 47 44 50 52 20 72 65 67 61 72 64 69 6e 67 20 74 68 65 20 70 72 6f 76 69 73 69 6f 6e 73 20 6f 66 20 41 72 74 69 63 6c 65 20 31 33 20 6f 66 20 74 68 65 20 4c 4f 50 44 47 44 44 2c 20 74 68 65 20 75 73 65 72 20 6d 61 79 20 66 69 6c 65 20 61 20 63 6c 61 69 6d 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 65 78 65 72 63 69 73 65 20 6f 66 20 74 68 65 69 72 20 72 69 67 68 74 73 20 6f 66 20 61 63 63 65 73 73 2c 20 72 65 63 74 69 66 69 63 61 74 69 6f 6e 2c 20 64 65 6c 65 74 69 6f 6e 2c 20 61 6e 64 20 70 6f 72 74 61 62 69 6c 69 74 79 20 6f 66 20 74 68 65 69 72 20 64 61 74 61 2c 20 6c 69 6d 69 74 69 6e 67 20 61 6e 64 20 6f 70 70 6f 73 69 6e 67 20 69 74 73 20 70 72 6f 63 65 Data Ascii: rovisions of Article 15 of the GDPR regarding the provisions of Article 13 of the LOPDGDD, the user may file a claim related to the exercise of their rights of access, rectification, deletion, and portability of their data, limiting and opposing its proce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:07 UTC	402	OUT	GET /9763b81/assets/img/loaders/preloader-sign-app.gif HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:07 UTC	493	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 93413 Connection: close Date: Wed, 24 Apr 2024 12:32:05 GMT Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "67af1392231708a90af9e4a4b61f5448" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d3e84a8f73f8d6438930c5b709821f40.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: K0sgZGZwQD-gwlVDhuuKEawBhGcs6PODT9o75YWMNUHAx3X__ecIYg== Age: 2
2024-04-24 12:32:07 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 fa 00 fa 00 e6 7f 00 43 97 b1 d4 e6 eb 69 a8 bc 41 94 af 88 ba c9 c3 dd e4 3b 92 ad 77 b4 c6 1b 49 57 31 8d a9 23 84 a2 96 ab b1 99 c4 d1 b8 d3 dc 28 86 a4 24 72 8c eb f2 f5 c5 d7 dd 56 9d b3 2c 89 a7 aa cb d6 09 39 49 a1 c7 d2 72 ab bd 00 21 33 70 8d 96 95 bd ca e3 eb ed 22 81 9f 32 8a a5 cd e1 e7 e5 ef f1 4a 9a b3 f5 f9 fa 5c a2 b7 46 98 b1 51 98 ae bc d8 e0 b3 ce d6 37 8f ab a2 c9 d6 44 68 74 f3 f7 f9 fb f6 f3 b8 c6 ca fe fb fa 2d 8b a8 63 a0 b3 39 8c a7 fe f8 f6 ff fd fb a2 c4 cf 3e 94 b0 aa ce d9 36 91 ad f1 f5 f7 dc eb f0 af d2 dd a6 cc d8 a9 ba bf fb fd fd e8 ed ef 2e 86 a2 f6 f3 f1 41 90 a9 1c 7f 9e 1f 81 a1 5b 7d 88 f8 fb fd 4a 96 ae df e8 eb a8 c7 d1 f1 ef ef ef f3 f5 f2 f1 ef f7 f5 f3 de e4 e6 ef ef ef f1 f1 f1 7e b1 c1 40 9d Data Ascii: GIF89aCiA;wIW1#($rV,9Ir!3p"2J\FQ7Dht-c9>6.A[}J~@
2024-04-24 12:32:07 UTC	16384	IN	Data Raw: bc 45 0a 25 0d 0e 1a 56 ba 22 10 44 15 00 21 b9 64 a2 a2 c0 81 dc cd 27 3a 51 15 70 70 0c a5 80 a0 a7 7a e4 49 20 c8 81 04 73 48 45 c9 90 80 cd 05 8c 1e 51 4b 3d 11 82 d2 86 0f 0f 59 45 35 e0 a0 6a 00 87 1a 61 43 6d c8 73 e2 0f 4a a0 69 ff 41 91 12 f4 85 04 bf b8 a2 4e 74 30 82 57 d4 00 05 0d fa 0a 1e 4c b8 b0 e1 c3 88 13 2b 5e cc b8 b1 e3 c7 90 23 4b 9e 4c b9 b2 e5 cb 98 33 6b de cc b9 b3 e7 cf a0 43 8b 1e 4d ba b4 e9 d3 85 99 7a 36 83 ba b5 eb b4 1f 30 8b 11 91 00 80 03 06 99 6b 28 a0 21 44 52 e6 03 27 04 20 c9 4c e0 80 84 0b 04 02 5f 9e 70 62 40 db d7 d0 a3 4b 9f 4e bd ba f5 eb ef 90 b4 d9 5c 26 86 f7 2b 99 cb 68 10 10 c1 4f e6 1c 42 82 8c 48 88 99 80 03 1a 27 02 0c 7b 36 51 0f 51 03 f2 95 75 70 28 c9 c0 b1 65 04 61 37 98 08 83 a0 d0 50 2e f0 81 a5 cc Data Ascii: E%V"D!d':QppzI sHEQK=YE5jaCmsJiANt0WL+^#KL3kCMz60k(!DR' L_pb@KN\&+hOBH'{6QQup(ea7P.
2024-04-24 12:32:07 UTC	16384	IN	Data Raw: a6 50 d0 e5 97 60 43 97 34 20 f5 74 4c 37 ae 63 6a ae 9d 92 c7 ee e0 c3 d7 4b 2a be 7c ac df e6 13 7d 48 cf be fd b5 24 ee 15 15 c1 1a ff 10 a4 fa f8 29 35 ce cf 3f 59 ff 3f 21 fc 57 88 27 02 0a 32 00 27 0a 58 d0 df 45 50 4c d1 c1 7f 7b 20 e0 43 1e 08 ec c0 df 15 7b 54 a0 21 06 2c 2c a8 61 05 1c 7a f8 61 87 fc 65 b8 a1 85 fd 7d 88 01 8a f9 bd 81 c0 89 68 f0 77 c3 8b 20 2e d0 1f 17 34 62 40 45 7f 57 a4 80 01 88 19 f4 e7 87 8f 40 0a 39 c4 8f 18 0c d1 5a ff 7e 19 20 99 c2 15 fd 51 f1 63 05 08 f0 d0 df 02 53 22 40 5a 7e 2c 7c 58 01 6e f9 99 08 22 8b f8 91 91 e3 8e fc 0d 89 a4 92 fc a1 71 24 88 29 2c 89 9f 94 1a 22 e0 0a 7f 3b 4c 59 01 84 2a da c8 1f 0f 39 06 99 e6 9b 18 a4 10 23 7f 74 6a a8 1c 7f 2c 4c 19 22 7f 7c 9c 29 24 91 85 42 89 a8 9e 1b f4 d7 e8 89 96 Data Ascii: P`C4 tL7cjK\|}H$)5?Y?!W'2'XEPL{ C{T!,,azae}hw .4b@EW@9Z~ QcS"@Z~,\|Xn"q$),";LY9#tj,L"\|)$B
2024-04-24 12:32:07 UTC	10463	IN	Data Raw: 29 0a 91 46 ea 61 66 26 68 10 30 01 00 2e 6c b6 26 26 16 28 d0 a4 04 57 cc 79 49 03 13 f4 38 82 95 7a 52 e2 81 96 36 4e 17 a8 24 1f f4 38 40 02 ab 1d 3a 49 08 62 0e e0 40 0e 8e 52 22 42 91 0a d0 57 69 24 17 14 79 e4 a6 92 1c e0 02 00 13 1c 00 6a 24 04 30 19 e7 a9 8e 30 c0 64 02 52 b1 aa 08 0a 76 26 20 82 6c b2 2a a2 83 9d 4e c6 98 6b 22 52 0e 70 c2 14 6e fc 0a 6c 9f 27 80 50 ac b1 87 e4 80 2c 08 de 30 6b 08 9f c2 82 30 9a b4 85 50 9b ec b5 d8 0e e2 6c b5 d1 76 2b c8 b7 c9 9a 21 ee 20 35 30 79 82 04 44 9c 2b c8 ae 4d 8a e0 eb b9 0c d4 7a ab bb 7f 2c 09 00 ac f8 fe e1 26 9c a6 e2 2b 2a a9 04 e0 7a 2e 9a 0e a8 e9 2e 0f 12 8c a9 00 0a f8 26 31 82 01 92 52 ea 6e ff 00 34 50 dc 25 be 05 24 90 b1 01 86 76 9b 6e 93 d0 e2 ab af ad fd 0e ec 42 c0 e7 fa 21 82 c3 0a Data Ascii: )Faf&h0.l&&(WyI8zR6N$8@:Ib@R"BWi$yj$00dRv& lNk"Rpnl'P,0k0Plv+! 50yD+Mz,&+z..&1Rn4P%$vnB!
2024-04-24 12:32:07 UTC	12792	IN	Data Raw: 00 03 87 09 aa b6 b7 9c 47 1e 0a 0e 09 27 b8 c0 c1 9a 2b 62 39 02 22 7f 53 c2 cb cc 8a 7e 85 3c 6e cd d3 d4 b7 b3 86 28 46 62 d5 dc c1 06 7f 0e 27 22 47 7c dd e6 90 68 8d 34 09 0a 40 4f 05 e7 f1 9c 00 7f b1 df 3e 02 0d db f2 fc 8d 0e 7f 34 60 8d 18 30 c1 81 04 13 fd 12 26 6a 70 01 86 82 13 f4 ea b9 50 48 11 11 13 0d 24 38 b8 88 58 b1 a3 a1 2a 26 5e f8 98 c0 b1 50 09 8f 0a c5 9c 14 54 52 50 00 94 30 05 91 8a 59 91 d4 88 42 a4 22 d0 ec 78 13 dc 4e 94 34 04 ad fc 29 cf 07 d1 a3 48 93 2a 5d ca d4 d1 93 7f 4d a3 4a 9d 4a b5 ea 32 0a 89 64 58 ad f6 62 2b b3 92 59 bc e2 8a 82 88 44 12 b1 c0 84 a0 35 77 63 ad db 9f cf b4 de 56 33 25 b7 ae dd ba 17 0c cd bc bb 69 0c 5f 5b 61 0f 91 f9 ab 6a 1f e1 4e 1a 0e 67 4a 2c e8 9b e2 4c 79 0d 0d 7e 4c 99 1b 87 ca 98 85 c5 cd Data Ascii: G'+b9"S~<n(Fb'"G\|h4@O>4`0&jpPH$8X&^PTRP0YB"xN4)H]MJJ2dXb+YD5wcV3%i_[ajNgJ,Ly~L
2024-04-24 12:32:08 UTC	12792	IN	Data Raw: 61 8c f9 51 61 76 08 dc a0 99 3e d9 71 58 db 8b d9 ed 31 99 1f 1a d6 98 42 6d 01 d5 18 81 6e 19 6e f8 a3 66 41 96 e8 17 e5 63 68 f4 58 62 0a cf e1 85 23 06 2c 9c 31 19 8d 4f 46 29 97 8b 1b 0e 99 e2 86 43 10 89 d7 0d 25 92 b8 87 98 75 25 69 a3 66 1b 22 10 13 62 62 20 b0 21 48 1e 62 27 27 94 8c 65 66 27 76 4c 4c d6 86 9c 35 2e 80 a1 5c 68 64 f0 80 0f 77 6a f9 d6 0c 42 40 21 c2 03 18 f4 99 58 93 83 80 f0 07 8b b7 29 da e0 a6 9c fe 82 e6 5b 3a 76 2a aa 45 8b 8d 7a 55 10 a6 a6 aa 6a 28 a8 ae 8a 13 07 ae 56 55 02 7c 01 20 06 07 22 6f c4 aa eb 3a 03 08 f1 87 07 87 a5 b1 6b 55 56 e0 65 c4 b0 45 9d 10 1f 10 7f 68 ca 96 01 83 8c c7 16 1f f3 25 50 9f 63 6c bd b9 48 b1 6f c1 5a 88 0d 0a 0c f7 16 0c 8d 00 8b d8 00 82 f8 80 95 64 85 58 f0 5e 21 a5 ca 45 ae 20 de fa a7 Data Ascii: aQav>qX1BmnnfAchXb#,1OF)C%u%if"bb !Hb''ef'vLL5.\hdwjB@!X)[:v*EzUj(VU\| "o:kUVeEh%PclHoZdX^!E
2024-04-24 12:32:08 UTC	8214	IN	Data Raw: 12 7f 54 24 96 61 1f a5 7b f5 20 21 40 1f 78 87 3d 20 df 7f 84 70 41 98 7c 08 08 17 58 15 10 46 48 1a 54 28 5d 80 c8 02 e4 d9 85 da 86 a8 f9 b1 83 57 51 dd d0 87 20 04 ee 15 da 89 a1 55 61 c7 03 27 79 70 08 06 7f 2c d0 12 5e 1c 6e 88 45 19 61 ec 80 03 1a 85 30 91 02 02 19 6c 51 22 5d 59 14 69 64 16 5a 68 91 21 95 21 7e c8 20 85 1f 69 54 c1 97 1f e4 2d 49 c8 15 5b b4 90 05 16 b2 29 96 05 68 4d 64 c1 d8 16 60 22 31 64 61 5c 80 86 44 13 52 8e a6 d9 9a 4f 29 a6 05 98 4e 30 56 85 9a 6c 2e 76 c5 9a 70 2e e6 c7 97 6b 3a 61 65 61 77 86 96 a7 62 57 bc 19 26 63 73 f2 79 26 61 69 1a 6a 8c 9b 74 0e 4a d8 16 58 18 aa 20 a2 a8 ad 99 85 a5 82 fd 09 66 13 8f 0e 16 69 9f a3 01 8a 5a a9 82 15 8a 04 97 8c 29 6a e6 62 ae 62 11 27 62 7e 28 ba 19 ad 99 8a d6 98 66 82 05 02 00 Data Ascii: T$a{ !@x= pA\|XFHT(]WQ Ua'yp,^nEa0lQ"]YidZh!!~ iT-I[)hMd`"1da\DRO)N0Vl.vp.k:aeawbW&csy&aijtJX fiZ)jbb'b~(f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:07 UTC	694	OUT	GET /app/validate/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Signer-Token: e661178d-04b6-4b93-9ef4-a27462c9066e sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:08 UTC	534	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding set-cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69; expires=Sun, 28-Apr-2024 12:32:08 GMT; Max-Age=345600; path=/; secure; HttpOnly; SameSite=none Cache-Control: max-age=0, must-revalidate, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:08 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:08 UTC	1516	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:08 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-24 12:32:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:09 UTC	741	OUT	GET /app/signatures/c3142696-0fbf-46ef-a245-5bb543bcb92c/documents/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69
2024-04-24 12:32:09 UTC	382	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:09 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:09 UTC	1516	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:09 UTC	948	IN	Data Raw: 61 30 36 0d 0a 7b 22 62 72 61 6e 64 69 6e 67 22 3a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 74 65 78 74 73 22 3a 5b 5d 2c 22 68 69 64 65 5f 73 69 67 6e 61 74 75 72 69 74 5f 62 6f 78 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 5f 73 75 72 76 65 79 5f 70 61 67 65 22 3a 74 72 75 65 2c 22 73 69 64 65 5f 6d 65 6e 75 22 3a 74 72 75 65 2c 22 73 69 67 6e 61 74 75 72 65 5f 63 6f 6c 6f 72 22 3a 22 62 6c 75 65 22 2c 22 73 6b 69 70 5f 74 65 72 6d 73 5f 61 6e 64 5f 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 77 65 6c 63 6f 6d 65 5f 70 61 67 65 22 3a 74 72 75 65 7d 2c 22 64 61 74 61 5f 69 6e 66 6f 22 3a 5b 5d 2c 22 64 6f 63 75 6d 65 6e 74 73 22 3a 5b 7b 22 70 68 6f 74 6f 5f 69 64 5f 76 61 6c 69 64 61 74 69 6f 6e 22 3a 5b 5d 2c 22 64 6f 63 75 6d 65 6e 74 5f 6f Data Ascii: a06{"branding":{"application_texts":[],"hide_signaturit_box":false,"show_survey_page":true,"side_menu":true,"signature_color":"blue","skip_terms_and_conditions":false,"welcome_page":true},"data_info":[],"documents":[{"photo_id_validation":[],"document_o
2024-04-24 12:32:09 UTC	1369	IN	Data Raw: 34 61 61 22 2c 22 63 75 73 74 6f 6d 5f 69 64 22 3a 22 73 69 67 6e 61 74 75 72 65 5f 30 22 2c 22 77 69 64 67 65 74 5f 6e 61 6d 65 22 3a 22 46 69 72 6d 61 22 2c 22 74 79 70 65 22 3a 35 2c 22 68 65 69 67 68 74 22 3a 36 2e 39 32 35 32 30 37 37 35 36 32 33 32 37 2c 22 77 69 64 74 68 22 3a 32 36 2e 31 30 39 36 36 30 35 37 34 34 31 33 2c 22 70 61 67 65 22 3a 30 2c 22 70 61 72 74 22 3a 30 2c 22 70 6f 73 69 74 69 6f 6e 5f 78 22 3a 33 36 2e 30 33 31 33 33 31 35 39 32 36 38 39 2c 22 70 6f 73 69 74 69 6f 6e 5f 79 22 3a 34 38 2e 38 34 35 37 39 38 37 30 37 32 39 35 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 64 69 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 73 65 6c 65 63 74 5f 6f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 77 69 64 67 65 74 5f 69 6e 64 65 78 22 3a 30 Data Ascii: 4aa","custom_id":"signature_0","widget_name":"Firma","type":5,"height":6.9252077562327,"width":26.109660574413,"page":0,"part":0,"position_x":36.031331592689,"position_y":48.845798707295,"required":true,"editable":true,"select_options":[],"widget_index":0
2024-04-24 12:32:09 UTC	256	IN	Data Raw: 65 6d 61 69 6c 22 2c 22 6d 6f 64 65 22 3a 22 70 61 72 61 6c 6c 65 6c 22 2c 22 6d 75 6c 74 69 5f 64 6f 63 75 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 5f 78 22 3a 5b 5d 2c 22 70 6f 73 69 74 69 6f 6e 5f 79 22 3a 5b 5d 2c 22 73 6f 75 72 63 65 22 3a 22 64 61 73 68 62 6f 61 72 64 22 2c 22 74 79 70 65 22 3a 22 61 64 76 61 6e 63 65 64 22 2c 22 75 73 65 72 22 3a 7b 22 64 6f 77 6e 6c 6f 61 64 5f 6f 72 69 67 69 6e 61 6c 5f 63 65 72 74 69 66 69 63 61 74 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 6d 61 69 6c 22 3a 22 65 73 2d 66 69 6e 61 6e 63 65 40 64 6c 69 6e 6b 2e 63 6f 6d 22 2c 22 66 75 6c 6c 6e 61 6d 65 22 3a 22 44 2d 4c 69 6e 6b 20 49 62 65 72 69 61 20 2d 20 46 69 72 6d 61 20 65 6c 65 63 74 72 6f 6e 69 63 61 20 2d 22 7d 7d 0d Data Ascii: email","mode":"parallel","multi_document":false,"position_x":[],"position_y":[],"source":"dashboard","type":"advanced","user":{"download_original_certificate_enabled":false,"email":"es-finance@dlink.com","fullname":"D-Link Iberia - Firma electronica -"}}
2024-04-24 12:32:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49761	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:09 UTC	443	OUT	GET /app/validate/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69
2024-04-24 12:32:09 UTC	382	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:09 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:09 UTC	1414	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:09 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-04-24 12:32:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:10 UTC	588	OUT	GET /9763b81/317.js HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:11 UTC	597	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 397714 Connection: close Date: Wed, 24 Apr 2024 12:32:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:35 GMT ETag: "6ad40328569da94cb57a8a1e88a8f2e9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 dbb8846e318a67b0e0e38822350301ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: -32fgdVagG2DCkXZ942AHH16gBkEIhFogNjTqfxCTjYFPCCd40MibA==
2024-04-24 12:32:11 UTC	15719	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 37 5d 2c 7b 37 30 33 35 33 3a 28 70 2c 64 2c 61 29 3d 3e 7b 61 2e 64 28 64 2c 7b 6d 3a 28 29 3d 3e 62 7d 29 3b 76 61 72 20 5f 3d 61 28 38 34 33 35 37 29 2c 69 3d 61 28 33 31 33 30 38 29 2c 74 3d 61 28 39 34 36 35 30 29 2c 6c 3d 61 28 33 36 38 39 35 29 2c 63 3d 61 28 39 34 30 38 38 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 6f 2c 43 29 7b 69 66 28 31 26 6f 26 26 28 74 2e 5f 55 5a 28 30 2c 22 70 22 2c 39 29 2c 74 2e 41 4c 6f 28 31 2c 22 74 72 61 6e 73 6c 61 74 65 22 29 29 2c 32 26 6f 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 6f 78 Data Ascii: "use strict";(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[317],{70353:(p,d,a)=>{a.d(d,{m:()=>b});var _=a(84357),i=a(31308),t=a(94650),l=a(36895),c=a(94088);function g(o,C){if(1&o&&(t._UZ(0,"p",9),t.ALo(1,"translate")),2&o){const e=t.ox
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 6e 73 70 61 72 65 6e 74 7d 2e 6d 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 73 74 72 6f 6b 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 63 6f 6c 6f 72 3a 23 33 34 39 33 65 37 7d 2e 6d 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 Data Ascii: nsparent}.mat-button.mat-primary[_ngcontent-%COMP%], .mat-icon-button.mat-primary[_ngcontent-%COMP%], .mat-stroked-button.mat-primary[_ngcontent-%COMP%]{color:#3493e7}.mat-button.mat-accent[_ngcontent-%COMP%], .mat-icon-button.mat-accent[_ngcontent-%COMP%
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 63 64 6b 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 62 75 74 74 6f 6e 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 62 65 66 6f 72 65 2c 20 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 75 6e 65 6c 65 76 61 74 65 64 2d 62 75 74 74 6f 6e 2e 63 64 6b 2d 70 72 6f 67 72 61 6d 2d 66 6f 63 75 73 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 Data Ascii: content-%COMP%] .mat-mdc-raised-button.cdk-keyboard-focused[_ngcontent-%COMP%] .mat-mdc-button-persistent-ripple[_ngcontent-%COMP%]:before, .mat-datepicker-content[_ngcontent-%COMP%] .mat-mdc-unelevated-button.cdk-program-focused[_ngcontent-%COMP%]
2024-04-24 12:32:11 UTC	630	IN	Data Raw: 2d 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 64 69 73 61 62 6c 65 64 2c 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 74 79 70 65 2d 6d 61 74 2d 6e 61 74 69 76 65 2d 73 65 6c 65 63 74 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 64 69 73 61 62 6c 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 69 6e 66 69 78 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 36 31 7d 2e 6d 61 74 2d 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 33 34 39 33 65 37 7d 2e 6d 61 74 2d 69 Data Ascii: -input-element[_ngcontent-%COMP%]:disabled, .mat-form-field-type-mat-native-select.mat-form-field-disabled[_ngcontent-%COMP%] .mat-form-field-infix[_ngcontent-%COMP%]:after{color:#00000061}.mat-input-element[_ngcontent-%COMP%]{caret-color:#3493e7}.mat-i
2024-04-24 12:32:11 UTC	1418	IN	Data Raw: 7b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 61 62 61 62 61 62 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2e 6d 61 74 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 69 6e 76 61 6c 69 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 63 61 72 65 74 2d 63 6f 6c 6f 72 3a 23 66 34 34 33 33 36 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 74 79 70 65 2d 6d 61 74 2d 6e 61 74 69 76 65 2d 73 65 6c 65 63 74 2e 6d 61 74 2d 66 6f 72 Data Ascii: {caret-color:#ababab}.mat-form-field.mat-warn[_ngcontent-%COMP%] .mat-input-element[_ngcontent-%COMP%], .mat-form-field-invalid[_ngcontent-%COMP%] .mat-input-element[_ngcontent-%COMP%]{caret-color:#f44336}.mat-form-field-type-mat-native-select.mat-for
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 61 62 61 62 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2e 6d 61 74 2d 66 6f 63 75 73 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 72 69 70 70 6c 65 2e 6d 61 74 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 34 33 33 36 7d 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 74 79 70 65 2d 6d 61 74 2d 6e 61 74 69 76 65 2d 73 65 6c 65 63 74 2e 6d 61 74 2d 66 6f 63 75 73 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 6e 6f 74 28 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 69 6e 76 61 6c 69 64 29 20 20 20 2e 6d 61 74 2d 66 6f 72 6d 2d 66 69 Data Ascii: nd-color:#ababab}.mat-form-field.mat-focused[_ngcontent-%COMP%] .mat-form-field-ripple.mat-warn[_ngcontent-%COMP%]{background-color:#f44336}.mat-form-field-type-mat-native-select.mat-focused[_ngcontent-%COMP%]:not(.mat-form-field-invalid) .mat-form-fi
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 20 2e 6d 61 74 2d 63 68 69 70 2d 72 65 6d 6f 76 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 6d 61 74 2d 63 68 69 70 2e 6d 61 74 2d 73 74 61 6e 64 61 72 64 2d 63 68 69 70 2e 6d 61 74 2d 63 68 69 70 2d 73 65 6c 65 63 74 65 64 2e 6d 61 74 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 31 61 7d 2e 6d 61 74 2d 63 68 69 70 2e 6d 61 74 2d 73 74 61 6e 64 61 72 64 2d 63 68 69 70 2e 6d 61 74 2d 63 68 69 70 2d 73 65 6c 65 63 74 65 64 2e 6d 61 74 2d 61 63 63 65 Data Ascii: .mat-chip-remove[_ngcontent-%COMP%]{color:#fff;opacity:.4}.mat-chip.mat-standard-chip.mat-chip-selected.mat-warn[_ngcontent-%COMP%] .mat-ripple-element[_ngcontent-%COMP%]{background-color:#ffffff1a}.mat-chip.mat-standard-chip.mat-chip-selected.mat-acce
2024-04-24 12:32:11 UTC	8949	IN	Data Raw: 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 74 61 62 2d 6c 69 6e 6b 2e 63 64 6b 2d 70 72 6f 67 72 61 6d 2d 66 6f 63 75 73 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 32 64 66 66 38 34 64 7d 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 74 61 62 2d 6c 61 62 65 6c 2e 63 64 6b 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 2e 6d 61 74 2d 74 61 62 2d 64 69 73 61 62 6c 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 70 Data Ascii: .mat-primary[_ngcontent-%COMP%] .mat-tab-link.cdk-program-focused[_ngcontent-%COMP%]{background-color:#c2dff84d}.mat-tab-group.mat-primary[_ngcontent-%COMP%] .mat-tab-label.cdk-keyboard-focused.mat-tab-disabled[_ngcontent-%COMP%], .mat-tab-group.mat-p
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 74 61 62 2d 6c 69 6e 6b 2e 63 64 6b 2d 70 72 6f 67 72 61 6d 2d 66 6f 63 75 73 65 64 2e 6d 61 74 2d 74 61 62 2d 64 69 73 61 62 6c 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 31 61 7d 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 3e 20 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f Data Ascii: COMP%], .mat-tab-nav-bar.mat-background-primary[_ngcontent-%COMP%] .mat-tab-link.cdk-program-focused.mat-tab-disabled[_ngcontent-%COMP%]{background-color:#0000001a}.mat-tab-group.mat-background-primary[_ngcontent-%COMP%] > .mat-tab-header[_ngcontent-%CO
2024-04-24 12:32:11 UTC	11531	IN	Data Raw: 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 62 65 66 6f 72 65 2c 20 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 3e 20 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 Data Ascii: -focus-indicator[_ngcontent-%COMP%]:before, .mat-tab-nav-bar.mat-background-warn[_ngcontent-%COMP%] > .mat-tab-header[_ngcontent-%COMP%] .mat-focus-indicator[_ngcontent-%COMP%]:before{border-color:#fff}.mat-tab-group.mat-background-warn[_ngcontent-%COMP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49763	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:10 UTC	591	OUT	GET /9763b81/common.js HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:10 UTC	595	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3694 Connection: close Date: Wed, 24 Apr 2024 12:32:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "348781ff9702931175942eaebe45f2a7" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 a2f3f72865ff056225454005e6fdaae6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: NN4Yg819oJJVDnG5EZ3XYutf-kBNkezzLKVF6r7akLNA9wPCkocsmA==
2024-04-24 12:32:10 UTC	3694	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 32 5d 2c 7b 33 39 31 30 38 3a 28 76 2c 53 2c 73 29 3d 3e 7b 73 2e 64 28 53 2c 7b 6c 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6c 3d 73 28 34 33 31 36 29 3b 63 6c 61 73 73 20 63 20 65 78 74 65 6e 64 73 20 6c 2e 4a 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 75 2c 6f 2c 68 2c 65 29 7b 73 75 70 65 72 28 6f 29 2c 74 68 69 73 2e 73 69 67 6e 61 74 75 72 65 44 6f 63 75 6d 65 6e 74 3d 75 2c 74 68 69 73 2e 73 67 44 6f 63 75 6d 65 6e 74 53 65 72 76 69 63 65 3d 68 2c 74 68 69 73 2e 73 69 67 6e 61 74 75 72 65 53 65 72 76 69 63 65 3d 65 7d Data Ascii: "use strict";(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[592],{39108:(v,S,s)=>{s.d(S,{l:()=>c});var l=s(4316);class c extends l.J{constructor(u,o,h,e){super(o),this.signatureDocument=u,this.sgDocumentService=h,this.signatureService=e}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49766	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:10 UTC	492	OUT	GET /app/signatures/c3142696-0fbf-46ef-a245-5bb543bcb92c/documents/6248316d-8590-4dd2-9d39-fe90a1423256 HTTP/1.1 Host: app.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69
2024-04-24 12:32:10 UTC	382	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:32:10 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:32:10 UTC	1414	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:32:10 UTC	1369	IN	Data Raw: 61 30 36 0d 0a 7b 22 62 72 61 6e 64 69 6e 67 22 3a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 74 65 78 74 73 22 3a 5b 5d 2c 22 68 69 64 65 5f 73 69 67 6e 61 74 75 72 69 74 5f 62 6f 78 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 5f 73 75 72 76 65 79 5f 70 61 67 65 22 3a 74 72 75 65 2c 22 73 69 64 65 5f 6d 65 6e 75 22 3a 74 72 75 65 2c 22 73 69 67 6e 61 74 75 72 65 5f 63 6f 6c 6f 72 22 3a 22 62 6c 75 65 22 2c 22 73 6b 69 70 5f 74 65 72 6d 73 5f 61 6e 64 5f 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 77 65 6c 63 6f 6d 65 5f 70 61 67 65 22 3a 74 72 75 65 7d 2c 22 64 61 74 61 5f 69 6e 66 6f 22 3a 5b 5d 2c 22 64 6f 63 75 6d 65 6e 74 73 22 3a 5b 7b 22 70 68 6f 74 6f 5f 69 64 5f 76 61 6c 69 64 61 74 69 6f 6e 22 3a 5b 5d 2c 22 64 6f 63 75 6d 65 6e 74 5f 6f Data Ascii: a06{"branding":{"application_texts":[],"hide_signaturit_box":false,"show_survey_page":true,"side_menu":true,"signature_color":"blue","skip_terms_and_conditions":false,"welcome_page":true},"data_info":[],"documents":[{"photo_id_validation":[],"document_o
2024-04-24 12:32:10 UTC	1204	IN	Data Raw: 63 65 61 37 38 37 2d 61 64 66 63 2d 34 63 32 34 2d 62 39 39 33 2d 64 62 34 65 34 35 36 31 63 37 65 30 22 2c 22 6e 61 6d 65 22 3a 22 41 6e 65 78 6f 5f 44 65 70 61 75 5f 32 30 32 34 2e 70 64 66 22 2c 22 70 61 67 65 73 22 3a 31 2c 22 70 72 65 76 69 65 77 73 5f 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d 2c 22 68 61 73 5f 62 65 65 6e 5f 6f 70 65 6e 65 64 22 3a 66 61 6c 73 65 2c 22 68 61 73 5f 70 61 73 73 65 64 5f 73 6d 73 5f 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 69 64 22 3a 22 36 32 34 38 33 31 36 64 2d 38 35 39 30 2d 34 64 64 32 2d 39 64 33 39 2d 66 65 39 30 61 31 34 32 33 32 35 36 22 2c 22 6e 6f 6e 5f 63 75 73 74 6f 6d 65 72 5f 65 6e 74 65 72 70 72 69 73 65 5f 73 69 67 6e 65 72 22 3a 74 72 75 65 2c 22 70 61 72 74 22 3a 31 2c 22 70 6f 73 69 74 69 6f 6e 22 3a Data Ascii: cea787-adfc-4c24-b993-db4e4561c7e0","name":"Anexo_Depau_2024.pdf","pages":1,"previews_created":true},"has_been_opened":false,"has_passed_sms_code":false,"id":"6248316d-8590-4dd2-9d39-fe90a1423256","non_customer_enterprise_signer":true,"part":1,"position":
2024-04-24 12:32:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49765	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:10 UTC	588	OUT	GET /9763b81/868.js HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:11 UTC	597	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 401261 Connection: close Date: Wed, 24 Apr 2024 12:32:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:35 GMT ETag: "ac12346290935833706294454ec9eff8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 e8b8ac2bd1c41091f8a91957b9166c02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: UBUeHIg7Bcb2JjF10c8ujVJ8Hkrmmq4XE9EZDCeCvEI833KwjAjqIw==
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 69 67 6e 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 38 5d 2c 7b 37 34 38 36 38 3a 28 45 2c 5f 2c 65 29 3d 3e 7b 65 2e 72 28 5f 29 2c 65 2e 64 28 5f 2c 7b 53 67 49 6e 74 72 6f 64 75 63 74 69 6f 6e 4d 6f 64 75 6c 65 3a 28 29 3d 3e 54 7d 29 3b 76 61 72 20 69 3d 65 28 33 36 38 39 35 29 2c 4f 3d 65 28 32 34 30 30 36 29 2c 50 3d 65 28 36 30 32 30 32 29 2c 70 3d 65 28 34 34 38 34 29 2c 66 3d 65 28 38 32 38 30 34 29 2c 75 3d 65 28 35 30 36 35 29 2c 62 3d 65 28 39 34 30 38 38 29 2c 68 3d 65 28 32 34 35 38 37 29 2c 78 3d 65 28 33 35 39 38 37 29 2c 77 3d 65 28 38 34 33 35 37 29 2c Data Ascii: "use strict";(self.webpackChunksign_app=self.webpackChunksign_app\|\|[]).push([[868],{74868:(E,_,e)=>{e.r(_),e.d(_,{SgIntroductionModule:()=>T});var i=e(36895),O=e(24006),P=e(60202),p=e(4484),f=e(82804),u=e(5065),b=e(94088),h=e(24587),x=e(35987),w=e(84357),
2024-04-24 12:32:11 UTC	470	IN	Data Raw: 67 72 61 70 68 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 73 75 62 68 65 61 64 69 6e 67 2d 31 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 68 34 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 36 70 78 Data Ascii: graphy[_ngcontent-%COMP%] .mat-subheading-1[_ngcontent-%COMP%], .mat-typography[_ngcontent-%COMP%] h4[_ngcontent-%COMP%]{font-size:15px;font-weight:400;line-height:24px;font-family:Roboto,Helvetica Neue,sans-serif;letter-spacing:normal;margin:0 0 16px
2024-04-24 12:32:11 UTC	12792	IN	Data Raw: 30 20 30 20 31 32 70 78 7d 2e 6d 61 74 2d 68 36 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 68 36 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 68 36 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 66 6f 6e 74 3a 34 30 30 20 39 2e 33 38 70 78 2f 32 30 70 78 20 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 32 70 78 7d 2e 6d 61 74 2d 62 6f 64 79 2d 73 74 72 6f 6e 67 5b 5f 6e 67 63 6f 6e 74 Data Ascii: 0 0 12px}.mat-h6[_ngcontent-%COMP%], .mat-typography[_ngcontent-%COMP%] .mat-h6[_ngcontent-%COMP%], .mat-typography[_ngcontent-%COMP%] h6[_ngcontent-%COMP%]{font:400 9.38px/20px Roboto,Helvetica Neue,sans-serif;margin:0 0 12px}.mat-body-strong[_ngcont
2024-04-24 12:32:11 UTC	4616	IN	Data Raw: 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 75 6e 65 6c 65 76 61 74 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 62 61 62 61 62 3b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 7d 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 75 6e 65 6c 65 76 61 74 65 64 2d 62 75 74 74 6f 6e 2e 6d Data Ascii: epicker-content[_ngcontent-%COMP%] .mat-mdc-unelevated-button.mat-accent[_ngcontent-%COMP%]{--mdc-filled-button-container-color: #ababab;--mdc-filled-button-label-text-color: #000}.mat-datepicker-content[_ngcontent-%COMP%] .mat-mdc-unelevated-button.m
2024-04-24 12:32:11 UTC	12792	IN	Data Raw: 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 6f 75 74 6c 69 6e 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 2d 2d 6d 61 74 2d 6d 64 63 2d 62 75 74 74 6f 6e 2d 70 65 72 73 69 73 74 65 6e 74 2d 72 69 70 70 6c 65 2d 63 6f 6c 6f 72 3a 20 23 33 34 39 33 65 37 3b 2d 2d 6d 61 74 2d 6d 64 63 2d 62 75 74 74 6f 6e 2d 72 69 70 70 6c 65 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 35 32 2c 20 31 34 37 2c 20 32 33 31 Data Ascii: OMP%] .mat-mdc-button.mat-primary[_ngcontent-%COMP%], .mat-datepicker-content[_ngcontent-%COMP%] .mat-mdc-outlined-button.mat-primary[_ngcontent-%COMP%]{--mat-mdc-button-persistent-ripple-color: #3493e7;--mat-mdc-button-ripple-color: rgba(52, 147, 231
2024-04-24 12:32:11 UTC	4616	IN	Data Raw: 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 32 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 70 78 20 2d 32 70 78 20 23 30 30 30 33 2c 30 20 32 70 78 20 32 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 31 70 78 20 35 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 33 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 33 70 78 20 2d 32 70 78 20 23 30 30 30 33 2c 30 20 33 70 78 20 34 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 31 70 78 20 38 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 34 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 Data Ascii: 00001f}.mat-elevation-z2[_ngcontent-%COMP%]{box-shadow:0 3px 1px -2px #0003,0 2px 2px #00000024,0 1px 5px #0000001f}.mat-elevation-z3[_ngcontent-%COMP%]{box-shadow:0 3px 3px -2px #0003,0 3px 4px #00000024,0 1px 8px #0000001f}.mat-elevation-z4[_ngcontent-%
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 74 2d 61 63 63 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 63 69 72 63 6c 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 73 74 72 6f 6b 65 3a 23 61 62 61 62 61 62 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 73 70 69 6e 6e 65 72 2e 6d 61 74 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 63 69 72 63 6c 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 73 70 69 6e 6e 65 72 2e 6d 61 74 2d 77 61 72 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 63 69 72 63 6c 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 73 74 72 6f 6b 65 3a 23 66 34 34 33 33 36 7d 2e 6d 61 74 2d 74 6f 6f 6c 74 69 70 5b 5f 6e 67 63 6f 6e 74 65 Data Ascii: t-accent[_ngcontent-%COMP%] circle[_ngcontent-%COMP%]{stroke:#ababab}.mat-progress-spinner.mat-warn[_ngcontent-%COMP%] circle[_ngcontent-%COMP%], .mat-spinner.mat-warn[_ngcontent-%COMP%] circle[_ngcontent-%COMP%]{stroke:#f44336}.mat-tooltip[_ngconte
2024-04-24 12:32:11 UTC	1024	IN	Data Raw: 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 6e 6f 74 28 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 64 69 73 61 62 6c 65 64 29 2e 6d 61 74 2d 61 63 63 65 6e 74 20 20 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 61 63 74 69 76 65 3a 6e 6f 74 28 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 64 69 73 61 62 6c 65 64 29 2e 6d 61 74 2d 61 63 63 65 6e 74 20 20 20 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 61 62 61 62 61 62 7d 2e 6d 61 74 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 Data Ascii: gcontent-%COMP%]:not(.mat-checkbox-disabled).mat-accent .mat-ripple-element[_ngcontent-%COMP%], .mat-checkbox[_ngcontent-%COMP%]:active:not(.mat-checkbox-disabled).mat-accent .mat-ripple-element[_ngcontent-%COMP%]{background:#ababab}.mat-checkbox-chec
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 70 6c 65 74 65 2d 70 61 6e 65 6c 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6f 70 74 69 6f 6e 2e 6d 61 74 2d 73 65 6c 65 63 74 65 64 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 3a 6e 6f 74 28 2e 6d 61 74 2d 61 63 74 69 76 65 29 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 3a 6e 6f 74 28 2e 6d 61 74 2d 6f 70 74 69 6f 6e 2d 64 69 73 61 62 6c 65 64 29 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 64 65 7d 2e 6d 61 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 31 70 78 20 31 35 70 78 20 2d 37 70 78 20 23 30 30 30 33 2c 30 20 32 34 70 78 20 33 38 70 78 20 33 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 39 70 78 20 Data Ascii: plete-panel[_ngcontent-%COMP%] .mat-option.mat-selected[_ngcontent-%COMP%]:not(.mat-active):not(:hover):not(.mat-option-disabled){color:#000000de}.mat-dialog-container[_ngcontent-%COMP%]{box-shadow:0 11px 15px -7px #0003,0 24px 38px 3px #00000024,0 9px
2024-04-24 12:32:11 UTC	16384	IN	Data Raw: 62 2d 68 65 61 64 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2d 69 6e 76 65 72 74 65 64 2d 68 65 61 64 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 2c 20 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2d 69 6e 76 65 72 74 65 64 2d 68 65 61 64 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 72 64 65 72 2d 74 6f 70 3a Data Ascii: b-header[_ngcontent-%COMP%]{border-bottom:1px solid rgba(0,0,0,.12)}.mat-tab-group-inverted-header[_ngcontent-%COMP%] .mat-tab-nav-bar[_ngcontent-%COMP%], .mat-tab-group-inverted-header[_ngcontent-%COMP%] .mat-tab-header[_ngcontent-%COMP%]{border-top:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:10 UTC	609	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5uZ3 HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:11 UTC	387	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:11 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=-mRrFZl6_yTEJkZ6AAjf; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d51ac880ad9-LAS
2024-04-24 12:32:11 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 2d 6d 52 72 46 5a 6c 36 5f 79 54 45 4a 6b 5a 36 41 41 6a 66 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"-mRrFZl6_yTEJkZ6AAjf","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:11 UTC	603	OUT	GET /socket.io/?EIO=3&transport=websocket&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1 Host: sockets.signaturit.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://sign-app.signaturit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf Sec-WebSocket-Key: A/RzUHpOc9zPyUcumWUekw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:32:12 UTC	322	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:32:12 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d59b98c09f7-LAS
2024-04-24 12:32:12 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 12:32:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:11 UTC	729	OUT	POST /socket.io/?EIO=3&transport=polling&t=OyG5uwO&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive Content-Length: 147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf
2024-04-24 12:32:11 UTC	147	OUT	Data Raw: 31 34 33 3a 34 32 5b 22 73 67 2d 70 72 6f 64 22 2c 7b 22 61 63 74 69 6f 6e 22 3a 22 61 70 70 2e 63 6f 6e 6e 65 63 74 22 2c 22 64 6f 63 75 6d 65 6e 74 49 64 22 3a 22 36 32 34 38 33 31 36 64 2d 38 35 39 30 2d 34 64 64 32 2d 39 64 33 39 2d 66 65 39 30 61 31 34 32 33 32 35 36 22 2c 22 73 69 67 6e 61 74 75 72 65 49 64 22 3a 22 63 33 31 34 32 36 39 36 2d 30 66 62 66 2d 34 36 65 66 2d 61 32 34 35 2d 35 62 62 35 34 33 62 63 62 39 32 63 22 7d 5d Data Ascii: 143:42["sg-prod",{"action":"app.connect","documentId":"6248316d-8590-4dd2-9d39-fe90a1423256","signatureId":"c3142696-0fbf-46ef-a245-5bb543bcb92c"}]
2024-04-24 12:32:12 UTC	369	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:12 GMT Content-Type: text/html Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=-mRrFZl6_yTEJkZ6AAjf; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d59bb980a03-LAS
2024-04-24 12:32:12 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:11 UTC	667	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5uwQ&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf
2024-04-24 12:32:13 UTC	385	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 3 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=-mRrFZl6_yTEJkZ6AAjf; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d59cb480ad3-LAS
2024-04-24 12:32:13 UTC	3	IN	Data Raw: 31 3a 31 Data Ascii: 1:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:11 UTC	423	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5uZ3 HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf
2024-04-24 12:32:12 UTC	317	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Origin: * Set-Cookie: io=ZZbe42zsOmsVcIj9AAjx; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d5adf4f0acd-LAS
2024-04-24 12:32:12 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 5a 5a 62 65 34 32 7a 73 4f 6d 73 56 63 49 6a 39 41 41 6a 78 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"ZZbe42zsOmsVcIj9AAjx","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49777	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:12 UTC	448	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5uwO&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf
2024-04-24 12:32:13 UTC	198	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 24 Apr 2024 12:32:13 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d61db1069e6-LAS
2024-04-24 12:32:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49776	13.226.228.59	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:12 UTC	628	OUT	GET /9763b81/signaturit-sign-app.woff HTTP/1.1 Host: d2i8kkeqh9ciqw.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sign-app.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://d2i8kkeqh9ciqw.cloudfront.net/9763b81/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:13 UTC	576	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 9412 Connection: close Date: Wed, 24 Apr 2024 12:32:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 29 Feb 2024 08:07:36 GMT ETag: "b3ca0abc43c257354a8968f301e5b75f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 64e24cad8b52037c4c824ec57b5995be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: bg8_PVuRjKuY9s8xXOuhH04ZkMLm-xt4Tao0oJaU33UbGFx2QGSG8g==
2024-04-24 12:32:13 UTC	6396	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 24 c4 00 0b 00 00 00 00 38 60 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 03 10 00 00 21 35 00 00 32 b5 0a d3 a6 f5 46 46 54 4d 00 00 24 64 00 00 00 1a 00 00 00 1c 91 bb f0 17 47 44 45 46 00 00 24 48 00 00 00 1c 00 00 00 1e 00 27 00 31 4f 53 2f 32 00 00 01 5c 00 00 00 4c 00 00 00 60 51 c0 5e c0 63 6d 61 70 00 00 02 90 00 00 00 6e 00 00 01 52 eb 3c e8 3f 68 65 61 64 00 00 01 08 00 00 00 2d 00 00 00 36 1c ed eb 5c 68 68 65 61 00 00 01 38 00 00 00 1c 00 00 00 24 04 32 02 02 68 6d 74 78 00 00 24 80 00 00 00 42 00 00 00 5a 06 29 02 49 6d 61 78 70 00 00 01 54 00 00 00 06 00 00 00 06 00 2b 50 00 6e 61 6d 65 00 00 01 a8 00 00 00 e7 00 00 02 1c 8f 47 d0 72 70 6f 73 74 00 00 03 00 00 00 00 Data Ascii: wOFFOTTO$8`CFF !52FFTM$dGDEF$H'1OS/2\L`Q^cmapnR<?head-6\hhea8$2hmtx$BZ)ImaxpT+PnameGrpost
2024-04-24 12:32:13 UTC	3016	IN	Data Raw: 54 75 c1 b4 10 e0 31 db 24 9e 0c 2f c7 2a 9b 65 73 be 70 cc 2a 2d 20 ef 39 6f 99 ab 3d 52 5d a9 ae 8c f6 8f f6 27 0e e6 12 b9 09 71 42 ca 2a bc 02 6f 39 ad f3 10 88 12 e0 17 43 0b ee f4 40 29 31 60 2e b3 58 6c 38 8d 62 03 b9 ff d7 05 6a 0f 39 4f 21 1b 86 8a 12 cd ab f6 14 03 39 17 a8 22 ca c9 e4 46 92 0a 49 4e 36 84 aa 28 31 14 4b 04 77 67 90 fa 04 83 db 9b 8f 84 1d d7 0e 70 55 fd d0 71 6d 6f a9 58 1c 2f 18 4c 47 eb af 5b 6f e7 32 23 87 f3 a3 39 df 4c 82 2c 81 55 c9 7e 1f 98 89 14 3f 4d d2 c1 4a 40 fa 54 02 d4 13 60 a4 c9 c3 b2 98 d3 01 5f 4d 2b 47 27 6d 30 13 cf a7 07 6f 3d 74 6b cf 76 24 66 d3 a9 74 45 b0 c1 a3 0b 1a 98 49 f7 cd b4 52 ae 57 67 aa 35 bb 48 ec 84 9a 3f 63 ec 39 bb 01 ef 05 7b 11 6c f4 cc 27 ef 06 1b dd b5 67 c7 e0 c7 e4 7c c6 d0 c1 44 cb Data Ascii: Tu1$/esp- 9o=R]'qB*o9C@)1`.Xl8bj9O!9"FIN6(1KwgpUqmoX/LG[o2#9L,U~?MJ@T`_M+G'm0o=tkv$ftEIRWg5H?c9{l'g\|D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49779	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:14 UTC	448	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5uwQ&sid=-mRrFZl6_yTEJkZ6AAjf HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf
2024-04-24 12:32:14 UTC	252	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:32:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d69bac309fd-LAS
2024-04-24 12:32:14 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-24 12:32:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:14 UTC	642	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5vjN HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=-mRrFZl6_yTEJkZ6AAjf
2024-04-24 12:32:15 UTC	387	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=dMLwofBs2a63vpmXAAkl; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d6e0c3f09fd-LAS
2024-04-24 12:32:15 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 64 4d 4c 77 6f 66 42 73 32 61 36 33 76 70 6d 58 41 41 6b 6c 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"dMLwofBs2a63vpmXAAkl","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49781	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:15 UTC	603	OUT	GET /socket.io/?EIO=3&transport=websocket&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://sign-app.signaturit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=dMLwofBs2a63vpmXAAkl Sec-WebSocket-Key: jVIBlk9YWNb/uwO2jQS+rg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:32:16 UTC	322	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:32:16 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d7328c509ef-LAS
2024-04-24 12:32:16 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 12:32:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49782	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:15 UTC	667	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5vw8&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:41 UTC	385	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 3 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=dMLwofBs2a63vpmXAAkl; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d733c180ad1-LAS
2024-04-24 12:32:41 UTC	3	IN	Data Raw: 31 3a 33 Data Ascii: 1:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49783	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:15 UTC	423	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5vjN HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:16 UTC	317	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Origin: * Set-Cookie: io=oA3aBcYwEDRbz1kEAAlD; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961d733b5709f3-LAS
2024-04-24 12:32:16 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 6f 41 33 61 42 63 59 77 45 44 52 62 7a 31 6b 45 41 41 6c 44 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"oA3aBcYwEDRbz1kEAAlD","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49785	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:23 UTC	652	OUT	GET /en/legality HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:24 UTC	577	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 24 Apr 2024 12:32:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://www.signaturit.com/en/legality/ CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; path=/; expires=Wed, 24-Apr-24 13:02:24 GMT; domain=.www.signaturit.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87961da74b6e0ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:24 UTC	168	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
2024-04-24 12:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49784	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:24 UTC	820	OUT	GET /en/legality/ HTTP/1.1 Host: www.signaturit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:25 UTC	567	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 12:32:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding x-powered-by: WP Engine Expires: Wed, 11 Jan 1984 05:00:00 GMT Link: <https://www.signaturit.com/wp-json/>; rel="https://api.w.org/" X-Cacheable: non200 Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 2 X-Cache-Group: normal CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961dac7f6509f1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:25 UTC	802	IN	Data Raw: 37 64 37 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 7c 20 53 69 67 6e 61 74 75 72 69 74 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 73 69 67 6e 61 74 75 72 69 74 2f 69 6d 61 67 Data Ascii: 7d7c<!DOCTYPE html><html lang="en-US" ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width"><title>Page not found \| Signaturit</title><link rel="icon" href="https://www.signaturit.com/wp-content/themes/signaturit/imag
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 6e 20 76 32 32 2e 35 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 7c 20 53 69 67 6e 61 74 75 72 69 74 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 67 6e 61 74 75 72 69 74 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b Data Ascii: n v22.5 - https://yoast.com/wordpress/plugins/seo/ --><meta property="og:locale" content="en_US" /><meta property="og:title" content="Page not found \| Signaturit" /><meta property="og:site_name" content="Signaturit" /><script type="application/ld+
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 Data Ascii: : #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--c
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 34 2c 32 30 35 2c 31 36 35 29 20 30 25 2c 72 67 62 28 32 35 34 2c 34 35 2c 34 35 29 20 35 30 25 2c 72 67 62 28 31 30 37 2c 30 2c 36 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 30 33 2c 31 31 32 29 20 30 25 2c 72 67 62 28 31 39 39 2c 38 31 2c 31 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 Data Ascii: preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gr
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 6f 77 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 6f 77 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 6f 77 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 Data Ascii: dy .is-layout-flow > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-flow > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-flow > .aligncenter{margin-left: auto !important;marg
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c Data Ascii: s-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{col
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 Data Ascii: ound-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--pr
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: olor--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e Data Ascii: t--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradien
2024-04-24 12:32:25 UTC	1369	IN	Data Raw: 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 6d 6c 2d 62 6c 6f 63 6b 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 73 69 74 65 70 72 65 73 73 2d 6d 75 6c 74 69 6c 69 6e 67 75 61 6c 2d 63 6d 73 2f 64 69 73 74 2f Data Ascii: gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}.wp-block-pullquote{font-size: 1.5em;line-height: 1.6;}</style><link rel='stylesheet' id='wpml-blocks-css' href='https://www.signaturit.com/wp-content/plugins/sitepress-multilingual-cms/dist/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49786	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:25 UTC	797	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.10 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 18 Apr 2024 02:41:33 GMT ETag: W/"6620885d-e768" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db21e430ad3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	904	IN	Data Raw: 37 64 65 33 0d 0a 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 Data Ascii: 7de3html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-sub
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 20 6c 69 20 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 2b 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 7b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 2b 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 20 6c 69 7b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f Data Ascii: li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-width:inherit !important}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal li{width:inherit !important}.wpml-language-switcher-blo
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 2d 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 70 61 64 64 69 6e 67 3a 31 70 78 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 67 61 70 3a 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 20 6c 69 7b 64 69 73 70 6c 61 Data Ascii: -width:max-content;padding:1px}.wpml-language-switcher-block ul.horizontal-list{display:flex;flex-direction:row;align-items:center;justify-content:flex-start;margin:0 !important;gap:1em !important}.wpml-language-switcher-block ul.horizontal-list li{displa
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 6c 61 6e 67 75 61 67 65 2d 73 70 61 63 69 6e 67 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 68 61 73 53 70 61 63 69 6e 67 2e 69 73 56 65 72 74 69 63 61 6c 20 6c 69 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 6c 61 6e 67 75 61 67 65 2d 73 70 61 63 69 6e 67 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 68 61 73 53 70 61 63 69 6e 67 2e 69 73 56 65 72 74 69 63 61 6c 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e Data Ascii: -child){margin-right:var(--language-spacing) !important}.wpml-language-switcher-block ul.hasSpacing.isVertical li:not(:last-child){margin-bottom:var(--language-spacing) !important}.wpml-language-switcher-block ul.hasSpacing.isVertical .wp-block-navigation
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 77 70 6d 6c 2d 6c 73 2d 73 6c 69 64 65 72 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 65 72 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 73 2d 73 6c 69 64 65 72 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 38 35 38 45 39 7d 2e 77 70 6d 6c 2d 6c 73 2d 73 6c 69 64 65 72 20 2e 61 6e 74 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 62 6c 61 63 6b 7d 2e 77 70 6d 6c 2d 6c 73 2d 63 6f 6e 74 72 6f 6c 2d 62 6c 75 65 7b 63 6f 6c 6f 72 3a 23 33 38 35 38 45 39 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 73 2d 6e 75 6d 62 65 72 2d 77 69 74 68 2d 75 6e 69 74 2d 73 65 6c 65 63 74 20 73 65 6c Data Ascii: wpml-ls-slider-control-alert{margin-top:5px !important}.wpml-ls-slider .ant-slider-track{background-color:#3858E9}.wpml-ls-slider .ant-slider-handle{border:solid 1px black}.wpml-ls-control-blue{color:#3858E9 !important}.wpml-ls-number-with-unit-select sel
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 72 3a 62 6c 61 63 6b 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 64 72 6f 70 64 6f 77 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 34 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 34 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 34 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 73 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 6f 6c 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 44 44 44 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 6d 6c 2d 6c 73 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 6f 6c 2e 77 70 6d 6c 2d 6c 73 2d 77 69 74 68 2d 62 6f 74 74 6f 6d 2d 62 6f 72 64 65 72 7b 62 Data Ascii: r:black}.ant-select-dropdown{min-width:45px !important;max-width:45px !important;width:45px !important}.wpml-ls-color-control{border:1px solid #DDDDDD;border-bottom:0px;padding:10px;box-sizing:border-box}.wpml-ls-color-control.wpml-ls-with-bottom-border{b
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 77 70 6d 6c 2d 6c 73 2d 66 6f 6e 74 4c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 63 6f 6e 74 72 6f 6c 20 64 69 76 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 69 6e 70 75 74 2d 63 6f 6e 74 72 6f 6c 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 74 6f 70 3a 34 70 78 7d 5b 64 61 74 61 2d 77 70 6d 6c 3d 27 6c 61 6e 67 75 61 67 65 2d 69 74 65 6d 27 5d 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 73 2d 64 69 6d 65 6e 73 69 6f 6e 2d 70 61 6e 65 6c 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 5f 5f 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 61 6e 65 6c 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 Data Ascii: wpml-ls-fontLetterSpacing-control div.components-input-control__container{top:4px}[data-wpml='language-item']:first-of-type{margin-top:5px !important}.wpml-ls-dimension-panel .components-panel__arrow{display:none}.wpml-ls-typography-panel .components-pane
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 61 6c 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 5b 64 61 74 61 2d 74 79 70 65 3d 27 77 70 6d 6c 2f 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 27 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 3e 64 69 76 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 5b 64 61 74 61 2d 74 79 70 65 3d 27 77 70 6d 6c 2f 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 27 5d 20 2e Data Ascii: al-list,.wp-block-navigation.is-content-justification-space-between [data-type='wpml/navigation-language-switcher'] .wp-block-navigation-item>div,.wp-block-navigation.is-content-justification-space-between [data-type='wpml/navigation-language-switcher'] .
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 61 70 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 67 61 70 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 74 65 6d 73 2d 6a 75 73 74 69 66 69 65 64 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 62 6c 6f 63 6b 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 7b 66 6c 65 78 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f Data Ascii: ap);background-color:inherit;gap:inherit;margin:0;width:fit-content;max-width:fit-content}.wp-block-navigation.items-justified-space-between .wpml-language-switcher-navigation-block.wpml-ls-dropdown{flex:inherit;display:flex !important}.wp-block-navigatio
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 62 6c 6f 63 6b 20 75 6c 20 6c 69 20 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 62 6c 6f 63 6b 20 75 6c 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c Data Ascii: ne}.wp-block-navigation .wpml-language-switcher-navigation-block ul li a{display:flex;align-items:center}.wp-block-navigation .wpml-language-switcher-navigation-block ul.horizontal-list{display:flex;flex-direction:row;align-items:center;justify-content:fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49787	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:25 UTC	824	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	464	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 18 Apr 2024 02:41:33 GMT ETag: W/"6620885d-6b4" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db21f6e09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	905	IN	Data Raw: 36 62 34 0d 0a 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 7b 77 69 64 74 68 3a 31 35 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 3e 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d 6c 73 2d 63 75 72 72 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 66 6f 63 75 73 20 2e 77 70 6d 6c 2d 6c 73 2d 73 75 62 2d 6d 65 6e 75 2c 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e Data Ascii: 6b4.wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .
2024-04-24 12:32:26 UTC	818	IN	Data Raw: 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 2e 33 35 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 35 65 6d 20 73 6f 6c 69 64 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 30 70 78 3b 74 6f 70 3a 63 61 6c 63 28 35 30 25 20 2d 20 2e 31 37 35 65 6d 29 7d 2e 72 74 6c 20 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 3a 61 66 74 65 72 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 31 30 70 78 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d 6c 73 2d 63 75 72 72 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 68 6f 76 65 72 3e 61 2c 2e 77 Data Ascii: ine-block;border:.35em solid transparent;border-top:.5em solid;position:absolute;right:10px;top:calc(50% - .175em)}.rtl .wpml-ls-legacy-dropdown a.wpml-ls-item-toggle:after{right:auto;left:10px}.wpml-ls-legacy-dropdown .wpml-ls-current-language:hover>a,.w
2024-04-24 12:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49788	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:25 UTC	787	OUT	GET /wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	466	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 19 Apr 2024 02:41:38 GMT ETag: W/"6621d9e2-2d230" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db22f6509fd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	903	IN	Data Raw: 37 64 65 31 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 53 69 67 6e 61 74 75 72 69 74 0a 41 75 74 68 6f 72 3a 20 49 4e 53 49 44 45 45 52 53 20 28 6a 6f 72 64 69 40 69 6e 73 69 64 65 65 72 73 2e 63 6f 6d 29 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 0a 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 45 78 70 6f 73 65 22 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 66 6f 6e 74 73 2f 45 78 70 6f 73 65 2d 42 6f 6c 64 2e 65 6f 74 22 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 66 6f 6e 74 73 2f 45 78 70 6f 73 65 2d 42 6f 6c 64 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 Data Ascii: 7de1@charset "UTF-8";/Theme Name: SignaturitAuthor: INSIDEERS (jordi@insideers.com)Version: 1.0/@font-face { font-family: "Expose"; src: url("fonts/Expose-Bold.eot"); src: url("fonts/Expose-Bold.eot?#iefix") format("embedded-opentype"), ur
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 45 78 70 6f 73 65 22 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 66 6f 6e 74 73 2f 45 78 70 6f 73 65 2d 52 65 67 75 6c 61 72 2e 65 6f 74 22 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 66 6f 6e 74 73 2f 45 78 70 6f 73 65 2d 52 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 66 6f 6e 74 73 2f 45 78 70 6f 73 65 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 22 66 6f 6e 74 73 Data Ascii: t-style: normal; font-display: swap;}@font-face { font-family: "Expose"; src: url("fonts/Expose-Regular.eot"); src: url("fonts/Expose-Regular.eot?#iefix") format("embedded-opentype"), url("fonts/Expose-Regular.woff2") format("woff2"), url("fonts
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 68 69 74 65 3a 20 23 66 66 66 3b 0a 20 20 2d 2d 64 61 72 6b 2d 67 72 61 79 3a 20 23 34 34 34 3b 0a 20 20 2d 2d 67 72 61 79 2d 30 37 3a 20 23 34 42 34 42 35 32 3b 0a 20 20 2d 2d 67 72 61 79 2d 30 36 3a 20 23 37 31 37 31 37 41 3b 0a 20 20 2d 2d 67 72 61 79 2d 30 34 3a 20 23 42 43 42 43 43 43 3b 0a 20 20 2d 2d 67 72 61 79 2d 30 33 3a 20 23 45 30 45 30 46 34 3b 0a 20 20 2d 2d 67 72 61 79 2d 30 32 3a 20 23 66 35 66 35 66 66 3b 0a 20 20 2d 2d 67 72 61 79 2d 30 31 3a 20 23 66 61 66 61 66 66 3b 0a 20 20 2d 2d 62 6c 75 65 2d 31 30 30 30 3a 20 23 30 33 30 33 35 32 3b 0a 20 20 2d 2d 62 6c 75 65 2d 39 30 30 3a 20 23 30 35 30 35 37 41 3b 0a 20 20 2d 2d 62 6c 75 65 2d 38 30 30 3a 20 23 30 37 30 37 41 33 3b 0a 20 20 2d 2d 62 6c 75 65 2d 36 30 30 3a 20 23 30 41 30 41 46 Data Ascii: hite: #fff; --dark-gray: #444; --gray-07: #4B4B52; --gray-06: #71717A; --gray-04: #BCBCCC; --gray-03: #E0E0F4; --gray-02: #f5f5ff; --gray-01: #fafaff; --blue-1000: #030352; --blue-900: #05057A; --blue-800: #0707A3; --blue-600: #0A0AF
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 30 70 78 3b 0a 20 20 2d 2d 73 65 63 74 69 6f 6e 2d 73 70 61 63 69 6e 67 2d 72 65 67 75 6c 61 72 3a 20 37 30 70 78 3b 0a 20 20 2d 2d 6d 61 72 67 69 6e 2d 6c 61 72 67 65 3a 20 36 30 70 78 3b 0a 20 20 2d 2d 6d 61 72 67 69 6e 2d 6d 65 64 69 75 6d 3a 20 34 35 70 78 3b 0a 20 20 2d 2d 6d 61 72 67 69 6e 2d 72 65 67 75 6c 61 72 3a 20 33 30 70 78 3b 0a 20 20 2d 2d 6d 61 72 67 69 6e 2d 73 6d 61 6c 6c 3a 20 31 35 70 78 3b 0a 20 20 2d 2d 6d 61 72 67 69 6e 2d 65 78 74 72 61 73 6d 61 6c 6c 3a 20 35 70 78 3b 0a 20 20 2f 2a 20 4f 54 48 45 52 53 20 2a 2f 0a 20 20 2d 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 72 65 67 75 6c 61 72 3a 20 30 70 78 20 32 70 78 20 34 70 78 20 32 70 78 20 72 67 62 61 28 32 30 36 2c 20 32 30 36 2c 20 32 34 35 2c 20 30 2e 36 34 29 3b 0a 20 20 2d 2d 62 6f Data Ascii: 0px; --section-spacing-regular: 70px; --margin-large: 60px; --margin-medium: 45px; --margin-regular: 30px; --margin-small: 15px; --margin-extrasmall: 5px; /* OTHERS */ --box-shadow-regular: 0px 2px 4px 2px rgba(206, 206, 245, 0.64); --bo
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6e 74 2c 20 66 6f 6f 74 65 72 2c 20 66 6f 72 6d 2c 20 66 72 61 6d 65 73 65 74 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 68 74 6d 6c 2c 20 69 2c 20 69 66 72 61 6d 65 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 6c 61 62 65 6c 2c 20 6c 65 67 65 6e 64 2c 20 6c 69 2c 20 6d 61 72 6b 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 6f 62 6a 65 63 74 2c 20 6f 6c 2c 20 70 2c 20 70 72 65 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 20 73 65 63 74 69 6f 6e 2c 20 73 6d 61 6c 6c 2c 20 73 70 61 6e 2c 20 73 74 72 69 6b 65 2c 20 73 74 72 6f 6e 67 2c 20 73 75 62 2c 20 73 75 6d 6d 61 72 79 2c 20 73 75 70 2c 20 74 61 62 6c 65 2c 20 74 Data Ascii: figcaption, figure, font, footer, form, frameset, h1, h2, h3, h4, h5, h6, header, hgroup, html, i, iframe, img, ins, kbd, label, legend, li, mark, menu, nav, object, ol, p, pre, q, s, samp, section, small, span, strike, strong, sub, summary, sup, table, t
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 69 6e 70 75 74 3a 66 6f 63 75 73 2c 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 6c 61 62 65 6c 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b Data Ascii: low: auto;}input:focus, select:focus { outline: 0;}input::-moz-focus-inner { border: 0; padding: 0;}label { vertical-align: middle;}button, input { width: auto; overflow: visible;}button::-moz-focus-inner { padding: 0; border: 0;
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 6f 6c 20 6c 69 2c 20 75 6c 20 6c 69 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 73 69 64 65 3b 0a 7d 0a 75 6c 20 3e 20 6c 69 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 64 69 73 63 3b 0a 7d 0a 64 6c 20 64 74 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 63 6c 65 61 72 3a 20 6c 65 66 74 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6d 65 64 69 75 6d 29 3b 0a 7d 0a 6c 69 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 72 65 67 75 6c 61 72 2d 73 69 7a 65 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 Data Ascii: margin: 0;}ol li, ul li { list-style-position: inside;}ul > li { list-style-type: disc;}dl dt { float: left; clear: left; padding-right: 4px; font-weight: var(--medium);}li, p { font-size: var(--text-regular-size); line-height:
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 47 45 4e 45 52 49 43 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 72 65 67 75 6c 61 72 2d 73 69 7a 65 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 72 65 67 75 6c 61 72 2d 6c 69 6e 65 68 65 69 67 68 74 29 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 6c 75 65 2d 31 30 30 30 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 67 72 61 79 2d 30 32 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 Data Ascii: ******* GENERIC *********************/body { font-size: var(--text-regular-size); line-height: var(--text-regular-lineheight); font-family: var(--primary-font-family); color: var(--blue-1000); background: var(--gray-02); font-weight: var(
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6d 65 6e 75 20 3e 20 6c 69 3a 6e 6f 74 28 2e 6d 65 6e 75 2d 62 75 74 74 6f 6e 29 20 2e 69 74 65 6d 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 6d 65 6e 75 20 3e 20 6c 69 3a 6e 6f 74 28 2e 6d 65 6e 75 2d 62 75 74 74 6f 6e 29 20 2e 69 74 65 6d 20 2e 69 74 65 6d 5f 5f 74 69 74 6c 65 20 7b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: { list-style: none; margin: 0;}.menu > li:not(.menu-button) .item { display: block; margin: 0; cursor: pointer; max-width: max-content; position: relative;}.menu > li:not(.menu-button) .item .item__title { transition: var(--transition
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 65 68 65 69 67 68 74 29 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6d 65 64 69 75 6d 29 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 6d 61 72 67 69 6e 2d 6c 61 72 67 65 29 3b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 76 61 72 28 2d 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 72 65 67 75 6c 61 72 29 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 3b 0a 7d 0a 2e 73 65 63 74 69 6f 6e 2d 73 75 62 74 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 6c 61 72 67 65 2d 73 69 7a 65 29 3b 0a 20 20 6c 69 Data Ascii: eheight); font-family: var(--secondary-font-family); font-weight: var(--medium); margin-bottom: var(--margin-large); letter-spacing: var(--letter-spacing-regular); max-width: 480px;}.section-subtitle { font-size: var(--text-large-size); li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49789	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:25 UTC	769	OUT	GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	464	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 17 Apr 2024 02:50:23 GMT ETag: W/"661f38ef-644" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db22f5c0a01-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	905	IN	Data Raw: 36 34 34 0d 0a 2e 61 64 64 74 6f 61 6e 79 5f 63 6f 6e 74 65 6e 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 72 67 69 6e 3a 31 36 70 78 20 61 75 74 6f 7d 2e 61 64 64 74 6f 61 6e 79 5f 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 36 70 78 7d 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 61 32 61 5f 6b 69 74 20 61 3a 65 6d 70 74 79 2c 2e 61 32 61 5f 6b 69 74 20 61 5b 63 6c 61 73 73 5e 3d 22 61 32 61 5f 62 75 74 74 6f 6e 5f 22 5d 3a 68 61 73 28 2e 61 32 61 5f 73 5f 75 6e 64 65 66 69 6e 65 64 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 2c 2e 77 69 64 67 65 74 20 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 Data Ascii: 644.addtoany_content{clear:both;margin:16px auto}.addtoany_header{margin:0 0 16px}.addtoany_list{display:inline;line-height:16px}.a2a_kit a:empty,.a2a_kit a[class^="a2a_button_"]:has(.a2a_s_undefined){display:none}.addtoany_list a,.widget .addtoany_list
2024-04-24 12:32:26 UTC	706	IN	Data Raw: 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 3a 68 6f 76 65 72 20 69 6d 67 2c 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 3a 68 6f 76 65 72 20 73 70 61 6e 7b 6f 70 61 63 69 74 79 3a 2e 37 7d 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 2e 61 64 64 74 6f 61 6e 79 5f 73 70 65 63 69 61 6c 5f 73 65 72 76 69 63 65 3a 68 6f 76 65 72 20 69 6d 67 2c 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 2e 61 64 64 74 6f 61 6e 79 5f 73 70 65 63 69 61 6c 5f 73 65 72 76 69 63 65 3a 68 6f 76 65 72 20 73 70 61 6e 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 61 64 64 74 6f 61 6e 79 5f 73 70 65 Data Ascii: dtoany_list a:hover{background:none;border:0;box-shadow:none}.addtoany_list a:hover img,.addtoany_list a:hover span{opacity:.7}.addtoany_list a.addtoany_special_service:hover img,.addtoany_list a.addtoany_special_service:hover span{opacity:1}.addtoany_spe
2024-04-24 12:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49790	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:25 UTC	810	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	478	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 18 Apr 2024 02:41:33 GMT ETag: W/"6620885d-199" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db22a6909f5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	416	IN	Data Raw: 31 39 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 Data Ascii: 199"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-t
2024-04-24 12:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49793	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:26 UTC	812	OUT	GET /wp-content/uploads/2023/10/logo-signaturit-group.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:26 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:59 GMT ETag: W/"65845b5f-235c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db6b94c09fd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	899	IN	Data Raw: 32 33 35 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 39 22 20 68 65 69 67 68 74 3d 22 31 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 39 20 31 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 39 2e 34 36 37 20 31 30 30 2e 37 34 32 43 31 35 38 2e 36 32 37 20 31 30 30 2e 37 34 32 20 31 36 34 2e 36 31 34 20 39 35 2e 35 32 32 34 20 31 36 34 2e 36 31 34 20 38 37 2e 34 33 37 31 56 38 30 2e 36 38 32 33 48 31 35 32 2e 35 4c 31 34 39 2e 34 31 36 20 38 37 2e 30 37 38 39 48 31 35 37 2e Data Ascii: 235c<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="299" height="113" viewBox="0 0 299 113" fill="none"> <path d="M149.467 100.742C158.627 100.742 164.614 95.5224 164.614 87.4371V80.6823H152.5L149.416 87.0789H157.
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 34 20 31 30 30 2e 37 34 32 20 31 39 39 2e 34 33 32 20 31 30 30 2e 37 34 32 43 32 30 36 2e 32 38 39 20 31 30 30 2e 37 34 32 20 32 31 31 2e 32 30 31 20 39 36 2e 32 39 20 32 31 31 2e 32 30 31 20 38 39 2e 33 33 30 35 56 38 34 2e 33 31 35 36 43 32 31 31 2e 32 30 31 20 37 37 2e 33 35 36 31 20 32 30 36 2e 32 38 39 20 37 32 2e 39 30 34 31 20 31 39 39 2e 34 33 32 20 37 32 2e 39 30 34 31 43 31 39 32 2e 35 37 34 20 37 32 2e 39 30 34 31 20 31 38 37 2e 36 31 31 20 37 37 2e 33 35 36 31 20 31 38 37 2e 36 31 31 20 38 34 2e 33 31 35 36 5a 4d 31 39 34 2e 30 30 37 20 38 39 2e 33 33 30 35 56 38 34 2e 33 31 35 36 43 31 39 34 2e 30 30 37 20 38 31 2e 30 39 31 37 20 31 39 35 2e 39 30 31 20 37 39 2e 30 34 34 38 20 31 39 39 2e 34 33 32 20 37 39 2e 30 34 34 38 43 32 30 32 2e 39 36 Data Ascii: 4 100.742 199.432 100.742C206.289 100.742 211.201 96.29 211.201 89.3305V84.3156C211.201 77.3561 206.289 72.9041 199.432 72.9041C192.574 72.9041 187.611 77.3561 187.611 84.3156ZM194.007 89.3305V84.3156C194.007 81.0917 195.901 79.0448 199.432 79.0448C202.96
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 32 35 31 2e 39 37 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 31 2e 36 37 37 31 20 31 36 2e 36 38 37 38 43 38 30 2e 37 33 31 36 20 31 35 2e 36 39 32 36 20 37 39 2e 36 34 35 36 20 31 34 2e 38 39 30 36 20 37 38 2e 34 32 32 20 31 34 2e 32 37 38 39 43 37 36 2e 34 32 32 37 20 31 33 2e 32 37 37 39 20 37 34 2e 30 36 30 33 20 31 32 2e 37 38 33 32 20 37 31 2e 33 34 36 37 20 31 32 2e 37 38 33 32 43 37 31 2e 31 33 36 20 31 32 2e 37 38 33 32 20 37 30 2e 39 32 35 32 20 31 32 2e 37 38 36 31 20 37 30 2e 37 31 37 34 20 31 32 2e 37 39 34 39 43 37 30 2e 37 30 32 37 20 31 32 2e 37 39 32 20 37 30 2e 36 38 38 31 20 31 32 2e 37 39 32 20 37 30 2e 36 37 33 35 20 31 32 2e 37 39 34 39 43 37 30 2e 34 36 35 36 Data Ascii: 251.97Z" fill="#030352"></path> <path d="M81.6771 16.6878C80.7316 15.6926 79.6456 14.8906 78.422 14.2789C76.4227 13.2779 74.0603 12.7832 71.3467 12.7832C71.136 12.7832 70.9252 12.7861 70.7174 12.7949C70.7027 12.792 70.6881 12.792 70.6735 12.7949C70.4656
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 33 35 2e 38 35 33 38 43 37 38 2e 33 30 32 20 33 35 2e 39 31 32 33 20 37 38 2e 32 39 33 32 20 33 35 2e 39 36 37 39 20 37 38 2e 32 38 31 35 20 33 36 2e 30 32 33 35 43 37 38 2e 30 32 31 20 33 37 2e 37 35 33 34 20 37 37 2e 33 38 38 37 20 33 39 2e 30 39 36 39 20 37 36 2e 33 39 33 34 20 34 30 2e 30 37 34 35 43 37 35 2e 32 37 32 32 20 34 31 2e 31 35 34 36 20 37 33 2e 37 38 35 32 20 34 31 2e 37 37 35 31 20 37 31 2e 39 34 31 20 34 31 2e 39 36 35 33 43 37 31 2e 38 30 39 33 20 34 31 2e 39 38 32 39 20 37 31 2e 36 37 37 35 20 34 31 2e 39 39 34 36 20 37 31 2e 35 34 32 39 20 34 32 2e 30 30 30 35 43 37 31 2e 32 35 36 20 34 32 2e 30 32 33 39 20 37 30 2e 39 36 30 33 20 34 32 2e 30 33 35 36 20 37 30 2e 36 35 38 38 20 34 32 2e 30 33 35 36 43 37 30 2e 33 38 30 37 20 34 32 2e Data Ascii: 35.8538C78.302 35.9123 78.2932 35.9679 78.2815 36.0235C78.021 37.7534 77.3887 39.0969 76.3934 40.0745C75.2722 41.1546 73.7852 41.7751 71.941 41.9653C71.8093 41.9829 71.6775 41.9946 71.5429 42.0005C71.256 42.0239 70.9603 42.0356 70.6588 42.0356C70.3807 42.
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 2e 34 32 30 31 56 34 38 2e 30 39 32 36 48 31 31 34 2e 33 33 39 56 32 36 2e 39 35 36 38 43 31 31 34 2e 33 32 32 20 32 34 2e 36 33 38 36 20 31 31 33 2e 37 32 38 20 32 32 2e 38 31 38 20 31 31 32 2e 35 31 20 32 31 2e 34 36 38 37 43 31 31 31 2e 32 37 32 20 32 30 2e 31 30 37 36 20 31 30 39 2e 34 32 37 20 31 39 2e 34 34 33 32 20 31 30 36 2e 39 31 39 20 31 39 2e 34 34 33 32 43 31 30 34 2e 36 39 34 20 31 39 2e 34 34 33 32 20 31 30 32 2e 38 38 38 20 32 30 2e 30 39 35 39 20 31 30 31 2e 34 39 32 20 32 31 2e 34 30 34 33 43 31 30 30 2e 30 38 39 20 32 32 2e 37 30 33 38 20 39 39 2e 33 39 38 35 20 32 34 2e 35 36 32 35 20 39 39 2e 33 39 38 35 20 32 36 2e 39 35 36 38 56 34 38 2e 30 39 32 36 48 39 32 2e 33 37 33 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 Data Ascii: .4201V48.0926H114.339V26.9568C114.322 24.6386 113.728 22.818 112.51 21.4687C111.272 20.1076 109.427 19.4432 106.919 19.4432C104.694 19.4432 102.888 20.0959 101.492 21.4043C100.089 22.7038 99.3985 24.5625 99.3985 26.9568V48.0926H92.373Z" fill="#030352"></p
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 38 56 33 34 2e 36 34 34 35 43 31 39 37 2e 33 34 33 20 33 39 2e 36 33 35 20 31 39 39 2e 37 39 20 34 32 2e 31 35 38 31 20 32 30 34 2e 36 35 35 20 34 32 2e 31 35 38 31 43 32 30 39 2e 35 31 35 20 34 32 2e 31 35 32 32 20 32 31 31 2e 39 35 33 20 33 39 2e 36 35 32 36 20 32 31 31 2e 39 35 33 20 33 34 2e 36 34 34 35 56 31 33 2e 33 37 37 48 32 31 38 2e 39 37 38 56 33 35 2e 37 38 39 43 32 31 38 2e 39 36 37 20 33 39 2e 37 33 37 35 20 32 31 37 2e 37 32 20 34 32 2e 38 39 35 37 20 32 31 35 2e 32 30 32 20 34 35 2e 32 31 36 38 43 32 31 32 2e 36 37 33 20 34 37 2e 35 32 33 33 20 32 30 39 2e 31 36 39 20 34 38 2e 36 39 37 20 32 30 34 2e 36 35 35 20 34 38 2e 36 39 37 43 32 30 30 2e 31 33 33 20 34 38 2e 36 38 38 32 20 31 39 36 2e 36 32 33 20 34 37 2e 35 33 37 39 20 31 39 34 2e Data Ascii: 8V34.6445C197.343 39.635 199.79 42.1581 204.655 42.1581C209.515 42.1522 211.953 39.6526 211.953 34.6445V13.377H218.978V35.789C218.967 39.7375 217.72 42.8957 215.202 45.2168C212.673 47.5233 209.169 48.697 204.655 48.697C200.133 48.6882 196.623 47.5379 194.
2024-04-24 12:32:26 UTC	1316	IN	Data Raw: 32 32 35 20 32 36 2e 30 37 33 34 20 33 30 2e 34 30 33 39 43 32 34 2e 39 38 34 34 20 32 39 2e 33 37 30 37 20 32 33 2e 33 35 31 20 32 38 2e 36 31 32 36 20 32 31 2e 31 33 35 20 32 38 2e 30 39 31 36 4c 31 33 2e 39 31 33 34 20 32 36 2e 33 36 31 37 43 31 30 2e 30 36 31 31 20 32 35 2e 34 30 34 36 20 37 2e 31 31 36 32 34 20 32 33 2e 39 31 34 38 20 35 2e 30 37 30 30 36 20 32 31 2e 38 38 33 34 43 33 2e 30 31 35 31 31 20 31 39 2e 38 34 30 34 20 32 2e 30 30 32 32 36 20 31 37 2e 31 30 33 36 20 32 2e 30 30 32 32 36 20 31 33 2e 36 32 39 33 43 31 2e 39 38 34 37 20 39 2e 36 36 36 31 35 20 33 2e 34 34 35 34 32 20 36 2e 34 35 35 32 34 20 36 2e 33 33 34 36 35 20 33 2e 39 37 36 30 37 43 39 2e 31 39 34 36 31 20 31 2e 34 39 33 39 38 20 31 33 2e 31 30 35 35 20 30 2e 32 36 37 35 Data Ascii: 225 26.0734 30.4039C24.9844 29.3707 23.351 28.6126 21.135 28.0916L13.9134 26.3617C10.0611 25.4046 7.11624 23.9148 5.07006 21.8834C3.01511 19.8404 2.00226 17.1036 2.00226 13.6293C1.9847 9.66615 3.44542 6.45524 6.33465 3.97607C9.19461 1.49398 13.1055 0.2675
2024-04-24 12:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:26 UTC	818	OUT	GET /wp-content/uploads/2023/11/simple-electronic-signature.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:26 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:26 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-e14" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961db6b9a6a982-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:26 UTC	900	IN	Data Raw: 65 31 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 32 31 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: e14<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7211" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:26 UTC	1369	IN	Data Raw: 36 37 20 31 37 2e 37 38 33 33 20 31 35 2e 31 34 31 37 20 31 37 2e 32 35 20 31 34 2e 38 32 35 4c 31 35 2e 37 37 35 20 31 36 2e 33 43 31 36 2e 31 35 38 33 20 31 36 2e 34 36 36 37 20 31 36 2e 34 35 38 33 20 31 36 2e 36 35 20 31 36 2e 36 37 35 20 31 36 2e 38 35 43 31 36 2e 38 39 31 37 20 31 37 2e 30 35 20 31 37 20 31 37 2e 32 36 36 37 20 31 37 20 31 37 2e 35 43 31 37 20 31 37 2e 38 38 33 33 20 31 36 2e 36 39 35 38 20 31 38 2e 32 32 39 32 20 31 36 2e 30 38 37 35 20 31 38 2e 35 33 37 35 43 31 35 2e 34 37 39 32 20 31 38 2e 38 34 35 38 20 31 34 2e 37 38 33 33 20 31 39 20 31 34 20 31 39 43 31 33 2e 37 31 36 37 20 31 39 20 31 33 2e 34 37 39 32 20 31 39 2e 30 39 35 38 20 31 33 2e 32 38 37 35 20 31 39 2e 32 38 37 35 43 31 33 2e 30 39 35 38 20 31 39 2e 34 37 39 32 20 Data Ascii: 67 17.7833 15.1417 17.25 14.825L15.775 16.3C16.1583 16.4667 16.4583 16.65 16.675 16.85C16.8917 17.05 17 17.2667 17 17.5C17 17.8833 16.6958 18.2292 16.0875 18.5375C15.4792 18.8458 14.7833 19 14 19C13.7167 19 13.4792 19.0958 13.2875 19.2875C13.0958 19.4792
2024-04-24 12:32:26 UTC	1342	IN	Data Raw: 39 20 31 36 2e 39 20 31 38 2e 38 34 31 37 20 31 36 2e 33 38 33 33 20 31 38 2e 35 32 35 20 31 35 2e 39 35 43 31 38 2e 32 30 38 33 20 31 35 2e 35 31 36 37 20 31 37 2e 37 38 33 33 20 31 35 2e 31 34 31 37 20 31 37 2e 32 35 20 31 34 2e 38 32 35 4c 31 35 2e 37 37 35 20 31 36 2e 33 43 31 36 2e 31 35 38 33 20 31 36 2e 34 36 36 37 20 31 36 2e 34 35 38 33 20 31 36 2e 36 35 20 31 36 2e 36 37 35 20 31 36 2e 38 35 43 31 36 2e 38 39 31 37 20 31 37 2e 30 35 20 31 37 20 31 37 2e 32 36 36 37 20 31 37 20 31 37 2e 35 43 31 37 20 31 37 2e 38 38 33 33 20 31 36 2e 36 39 35 38 20 31 38 2e 32 32 39 32 20 31 36 2e 30 38 37 35 20 31 38 2e 35 33 37 35 43 31 35 2e 34 37 39 32 20 31 38 2e 38 34 35 38 20 31 34 2e 37 38 33 33 20 31 39 20 31 34 20 31 39 43 31 33 2e 37 31 36 37 20 31 39 Data Ascii: 9 16.9 18.8417 16.3833 18.525 15.95C18.2083 15.5167 17.7833 15.1417 17.25 14.825L15.775 16.3C16.1583 16.4667 16.4583 16.65 16.675 16.85C16.8917 17.05 17 17.2667 17 17.5C17 17.8833 16.6958 18.2292 16.0875 18.5375C15.4792 18.8458 14.7833 19 14 19C13.7167 19
2024-04-24 12:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49795	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	844	OUT	GET /wp-content/themes/signaturit/fonts/Expose-Bold.woff2 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	413	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: font/woff2 Content-Length: 20568 Connection: close Last-Modified: Thu, 21 Dec 2023 15:36:44 GMT ETag: "65845b8c-5058" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961dbacd8f09ff-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	956	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 50 58 00 0f 00 00 00 00 e4 00 00 00 4f f5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 0a 1b d6 04 1c 86 78 06 60 00 87 26 11 08 0a 82 a8 64 81 e8 79 0b 86 30 00 01 36 02 24 03 8c 5c 04 20 05 90 58 07 92 0b 1b e1 bf 17 70 67 2f c3 70 3b c0 a2 ff dc f6 c1 82 e9 e6 e0 e5 76 22 85 7f dc cc c8 40 8c 71 00 78 b3 dc 66 ff ff 9f 92 54 e4 30 0d d2 ac d8 06 7e 2e 21 89 2d b8 45 bb 42 db 61 1c 46 6b 55 c8 78 da a1 87 e1 79 a2 4d e1 b4 d7 b2 16 4b cb 3b 74 05 63 9a ed e3 82 15 66 e1 7e 6a d6 b5 eb 20 89 3c 88 b2 06 b1 ef 0a 89 51 34 49 cf 98 e1 7d b5 62 99 8a 7f f8 61 d7 3f 3c fc fb fe 2c b7 a7 4f b8 c3 e5 d6 4d 12 c5 d4 92 e5 06 4c ef 70 32 a1 31 e5 56 fe bd b4 8b 3b 08 a5 c5 87 ba 46 Data Ascii: wOF2PXO?FFTMx`&dy06$\ Xpg/p;v"@qxfT0~.!-EBaFkUxyMK;tcf~j <Q4I}ba?<,OMLp21V;F
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 56 92 3a a3 86 07 da f4 47 2e ea ac 02 93 21 a0 d8 32 e4 e0 61 98 14 6a 27 d9 ac 86 6f f7 b4 9c 79 0d 4b 02 94 22 51 88 e8 f6 ed 7f 90 00 01 b8 f5 5d 27 06 c0 a3 cf 3d 9f 00 4f 7f d0 39 01 dc c0 70 a0 24 63 88 26 c4 88 61 88 d5 9e d0 41 07 86 8e ba 11 ba eb ce d0 43 6f 42 1f 7d 18 fa ea 4f 18 60 00 c3 40 83 09 43 0c a3 0c cf 8d 48 20 1f 46 6a 95 4f 64 64 7c 2a a3 ab 60 64 56 95 44 66 57 c5 60 01 0a 08 e0 a2 b6 ae 4c cc db ac 0b c9 ff aa a8 06 59 ff 61 c3 a1 30 0b e0 ff 1d 20 8f 45 bd b4 ca fb 2c c2 fb 7b 61 ee e6 83 cd da e1 43 71 f0 fc ad 0a 90 fc 40 2b cd 34 38 f1 4a 5d a6 22 a4 75 1f b8 37 c5 89 da 06 be bc 27 94 51 90 88 cf c7 8d 85 0b af 94 d2 13 ed 76 0e 11 ab fc 19 27 72 eb df 9a ba 6c b9 1a fa 7a 17 96 a0 ba fa 04 23 55 f2 a9 9c 01 3c 40 72 90 96 Data Ascii: V:G.!2aj'oyK"Q]'=O9p$c&aACoB}O`@CH FjOdd\|*`dVDfW`LYa0 E,{aCq@+48J]"u7'Qv'rlz#U<@r
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: a2 28 8a 0a 04 82 85 20 88 98 b4 2b 03 56 72 40 52 88 92 8a 9a 86 36 fa 3a c6 bc db 1c 7e 56 af b3 b3 73 aa 0b eb 0a 09 19 06 a2 64 04 e5 a6 17 f4 55 9d 57 db 8a 9e c4 f6 de c5 41 82 41 11 d0 fc 69 8c 46 0a 4c 9b 05 08 69 13 b0 34 08 d9 c4 61 01 28 94 ef d0 be 93 15 b7 f9 3b 24 94 bf d0 fe c2 88 05 77 58 26 a9 c8 21 72 ef b6 82 31 4a c2 d6 c2 5f 42 54 54 23 9e 21 05 17 14 a8 50 98 c6 d7 df 14 92 4f 62 2d 28 8b 49 aa 86 b6 18 46 9a 94 3c 69 86 8c 69 58 19 0a 21 29 9a 45 c0 1c 54 2d 1f 53 80 e1 63 0a 31 45 98 62 cc 2c 66 1e b3 88 35 bc ba d1 d5 6d 5e 9c 70 75 5d 85 52 a0 98 e8 62 81 20 bc 78 d3 b7 79 20 48 5c 1c 03 e4 23 88 59 88 78 97 62 45 b1 81 f2 cf 14 04 5f a1 22 c5 69 59 9b 35 df 5b 6c 85 88 c2 40 34 e3 54 49 18 15 ce a5 be aa 99 36 e9 ef 2c 0f 45 0a Data Ascii: ( +Vr@R6:~VsdUWAAiFLi4a(;$wX&!r1J_BTT#!POb-(IF<iiX!)ET-Sc1Eb,f5m^pu]Rb xy H\#YxbE_"iY5[l@4TI6,E
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: d0 9b f8 0c e6 9b 37 ef 0d 02 25 d3 cd 70 b6 ec 73 7a 85 f0 76 44 0d 89 01 06 6a 4c 5e e5 86 74 b0 f7 18 3d 43 08 21 04 00 00 00 20 b7 86 84 10 42 08 21 84 10 02 00 00 24 24 e4 3c 12 40 f6 53 86 3b 8d 08 39 a8 77 1c 69 f4 9e eb 14 0c bb db 23 b0 50 bc 04 a3 19 db 34 f4 60 8d 78 f3 57 43 7a f0 a3 52 c1 08 13 63 1e c6 43 0a 69 85 cf 3c bb 54 a3 e4 5c 68 4a 5c a8 b2 c7 c3 c9 52 6c a9 e9 4d 5a 0e 49 96 f9 af f7 ec 86 56 08 70 b2 89 90 4d 0c 21 4a 1a 85 a6 bf 31 fc 26 b4 36 83 df 9c 56 70 94 e4 0a 4d 6e 63 72 9b 10 6d 46 6e 73 a2 d4 33 95 67 e1 1d 12 97 15 60 23 c1 21 05 98 c0 25 b5 48 9c 4b ae 91 38 4d 93 66 48 af 93 d3 41 a6 b4 de 45 e8 67 ec a9 7a 17 26 c4 f4 38 28 61 a2 a4 a4 14 19 35 c2 ad d4 35 d2 44 4b 5b 27 fd 6a 58 eb 39 34 3d 8f 4a 0d 39 72 0c 5f ee Data Ascii: 7%pszvDjL^t=C! B!$$<@S;9wi#P4`xWCzRcCi<T\hJ\RlMZIVpM!J1&6VpMncrmFns3g`#!%HK8MfHAEgz&8(a55DK['jX94=J9r_
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: b5 68 41 0d 0c 5c 45 3e 15 c6 fe 5f b6 1f 00 a6 0f 49 30 2c 1e 11 50 58 dd 0f db be 2a e4 e0 77 d2 27 92 b6 6e 6a 06 de 56 6a 30 d6 0f 04 c0 74 99 96 19 66 8a a9 a6 2d e3 c0 4d da 65 e6 bf 7d aa e1 a4 96 59 6e 85 95 52 51 40 4d 0d b5 d4 fe 67 d8 d0 a5 76 a6 4e 87 77 6b dc d9 6b 76 40 a5 70 cc e0 e3 a4 33 33 21 43 3f 1f 3e 9e 95 9a fc f9 ad a6 14 95 32 95 06 ea a5 77 4e 77 aa 13 15 57 96 53 ce 9c fe d4 54 5a 51 67 3a d6 f1 4a 2a ec 64 e5 84 94 5c a4 90 52 2a 31 3a e8 ae 8f 01 51 4a 39 d5 d4 a2 46 cb 3d 8f e8 79 e6 95 77 3e 14 0f 56 29 a0 c3 4d 53 0f 4e b9 31 ed 60 5a 48 a5 cf 47 08 50 5c 14 63 e1 22 a9 b4 b2 1a ca 48 27 29 dd 10 c9 d8 90 4f 3f 35 0c 91 6c b6 62 c7 c3 b0 40 6a d8 aa 82 92 42 aa 0f 88 90 96 90 14 08 60 0f 2e cd 21 96 be 31 c9 65 40 fc 25 7d Data Ascii: hA\E>_I0,PXw'njVj0tf-Me}YnRQ@MgvNwkkv@p33!C?>2wNwWSTZQg:Jd\R*1:QJ9F=yw>V)MSN1`ZHGP\c"H')O?5lb@jB`.!1e@%}
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: f5 75 d4 24 a2 21 7d da 0c d4 81 2b d6 e5 22 ca 2b b9 9a d1 ce 5b ef 40 9a 3d d6 a6 c0 0c 94 9f 85 08 3e 9c 8f f4 f1 ed 18 66 b3 e0 0d 08 61 a2 2e c5 33 4e 0e 0e 1e 8b 2f 7e a4 59 60 4d 94 0b 01 e1 af 59 c5 fb 50 fe 97 65 c1 35 68 5b c1 42 29 60 2d 3f 16 ed 69 3a 10 ff 43 2c b3 d4 51 5a d1 a4 d3 b8 34 40 16 d0 61 d6 1c 06 ba 84 06 5e f4 fc 33 f3 6e 93 a9 e0 63 79 8e 11 19 25 33 25 73 dd 7c 6b 96 41 ea a4 d4 26 b7 af 0b 9c 4b b3 16 6d 16 05 22 b7 c3 82 35 49 1d 2d 2b 62 6e 87 39 a5 83 34 db 2d 66 3b ec af 37 b2 7c 21 96 56 e6 da f1 7a 09 ed 35 93 e7 18 af 0f 08 69 a7 5f 18 b5 25 b3 41 9a 7d b1 c0 17 fd f1 f6 b3 9b 29 e7 2c f5 44 68 8f 8f 33 ea 09 f7 50 48 33 00 04 f5 cc c5 a9 cb 48 5d 00 9f 4d 1e a6 4d b6 50 68 b4 51 01 6b 19 25 c5 aa 5a 5a 4e b8 67 88 49 Data Ascii: u$!}+"+[@=>fa.3N/~Y`MYPe5h[B)`-?i:C,QZ4@a^3ncy%3%s\|kA&Km"5I-+bn94-f;7\|!Vz5i_%A}),Dh3PH3H]MMPhQk%ZZNgI
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: d5 bc f2 80 0f 55 98 5b 2d 67 d0 5d 5d cb 13 ef 7c 5c e4 fc 1e 6f 73 90 7e bf b6 b7 f2 c6 af 07 19 9d fc cc 1d 77 7d 4e f6 5f 3c dc 3a 78 61 ef a5 11 77 8e f7 9c 5a f3 d0 2c db 6f 1b 10 07 65 bd c0 ae 3c a9 db 36 41 d1 97 3f 7d 42 d1 ee bb 91 de 73 0b 8c ac 41 35 9c 56 cd 96 0c be 36 d9 46 89 7b 55 e5 42 bd 1d 26 56 c5 4f a8 45 db 94 d0 e9 dd c7 11 8f 51 01 0b 55 1c 09 e2 5d 7b 39 e2 84 5d 4f 43 c8 31 3b e2 06 a9 5b 69 07 34 7e 46 fe ea 12 60 27 80 02 92 fe ed 1f bd 9b 84 6f e1 c4 c8 d0 c1 4e ba 7f 97 6e cf 8c 54 a7 cf 2d 86 ef 75 4e 06 ab f4 94 c6 23 fc 56 76 42 2d 7b 7e 33 f7 5b 8d 00 de ce 8f 7c ce 30 f9 12 63 ef b1 6c 8c fa 52 db 6d 51 e9 d4 3c 9a f1 3b ea d5 a0 6a 7b 3a 68 9b e6 57 a7 26 96 1a fb 50 e4 38 fc 61 b3 42 20 18 ef ad 4e 02 f3 e4 25 65 73 Data Ascii: U[-g]]\|\os~w}N_<:xawZ,oe<6A?}BsA5V6F{UB&VOEQU]{9]OC1;[i4~F`'oNnT-uN#VvB-{~3[\|0clRmQ<;j{:hW&P8aB N%es
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: d5 b2 2e 0c 55 04 86 8b b2 aa 3c eb 4b 01 f8 32 49 43 99 cb b3 87 c7 11 c8 ad 1f 12 68 94 cf 48 21 d0 02 b1 89 a3 5e 26 56 8d e4 96 9a 14 6a 92 e9 41 bc d6 da 7b 12 fc 24 e5 3d f5 bc 52 a4 a8 b7 a6 5f 14 67 5a 86 a8 5c 7f ed 71 05 dd 06 d5 59 f4 b7 e2 23 1a ec 12 46 9c 2b e7 96 2b ea d6 22 78 1e b5 76 ce 31 2d 9b e8 1e c4 4c 1c f8 b4 09 a9 61 41 9c c4 41 4f c8 a6 90 3c c4 6b ad 8a 0d 88 79 81 e6 7e 90 0c 13 f0 b3 0c 97 82 19 6e ac e6 f0 c6 42 6f 0e ed 5c b8 f9 6d 64 5f 85 9a ba 76 0f ed 50 7b b2 2c a3 c7 0f 65 f5 5d 8f 7d f2 45 85 e0 69 e7 59 50 51 b2 23 78 46 e6 90 67 5e 6e d9 15 a8 31 d7 b2 9c 6e 18 6b a8 f0 1c 97 0e 93 6f d4 17 2e 5f ef cc 1e 9a 9b 6f 28 e3 a4 8e 5e 0d a6 02 fb 92 d2 01 66 4a a3 29 94 f6 b4 92 c9 99 49 03 95 d4 af a9 d6 37 d1 34 e3 d3 Data Ascii: .U<K2IChH!^&VjA{$=R_gZ\qY#F++"xv1-LaAAO<ky~nBo\md_vP{,e]}EiYPQ#xFg^n1nko._o(^fJ)I74
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 86 d2 bc e9 41 e1 4f 70 8a ef 2b e4 bb c4 62 67 96 c7 07 32 22 7a 73 35 4f 28 a4 0d d4 2d ff 5e fb b0 b5 a6 af f3 7d 51 af e2 68 04 0b 74 c8 a9 d2 07 5d 25 03 95 4a 56 7b 92 bb 3e 75 05 ff 6f b4 09 6d ca 37 80 90 e6 bf 11 fa f2 06 43 8a c1 06 8d dd 5d 5e fb 04 fd 2a 35 7b c5 d4 ec eb 15 bd 82 e2 c4 e0 c3 17 87 99 d5 9a f5 fe c0 2e 74 73 e7 87 e4 a6 6f 91 d2 51 26 eb 84 c9 bb d6 db 24 d5 c2 d5 17 91 5d 07 ee ab eb 7c a9 51 8b 6b 3a 5e 05 bb 70 dc 68 ff d5 7f 36 4f 44 24 cb d5 98 d2 df eb b2 02 d3 0e 25 31 a2 03 83 83 88 40 60 94 9f b9 29 7b 3e f7 04 bb 46 f5 98 9e e2 9d 47 32 f9 2e 34 40 49 2c 5d 00 8f 3e ed 55 c4 1f ba 98 a9 cf 33 8a ab cf 1c 7d bf f4 e2 f9 ab d1 b3 71 59 75 3c ed 0a c7 c4 73 e2 89 75 54 55 27 0f 27 bf 20 67 96 57 b0 2b 55 51 ef c4 07 89 Data Ascii: AOp+bg2"zs5O(-^}Qht]%JV{>uom7C]^*5{.tsoQ&$]\|Qk:^ph6OD$%1@`){>FG2.4@I,]>U3}qYu<suTU'' gW+UQ
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 44 62 6b eb 3b 5b b4 88 6a 61 22 a3 82 54 3a cd d6 ef e0 9c 8e e6 ea 8c c5 ca dc 5c f5 d9 df bf 05 58 e5 2d a4 18 4f c7 62 73 dd 70 9c df a3 7a 41 57 40 71 05 3a d8 45 01 73 00 eb c3 c9 7d 39 45 2f 9e 3b 2b 86 52 78 a2 0c 5d 8d 0e ac 9b 3b ef 51 e6 e7 bb df 28 d0 07 05 48 32 e2 1f e4 de b4 f2 55 cd b6 72 64 83 c2 83 ab 86 72 34 4a 98 e6 ee f1 69 38 f3 fb a5 c6 73 9f 6f c3 81 2d 06 b5 23 bf 7c 38 ca e8 0a 4e 0e c0 9e fd 17 71 2a eb ec 8d 7e a8 3a 21 07 77 8c 62 62 15 19 e5 a6 18 a1 4e 8e 0d ac 04 24 11 99 e7 8a 9f 9f ae ee 7e 0d 32 88 04 74 74 90 11 c5 57 ce e5 74 ab 89 f5 f2 90 db cb e3 97 6c e3 4a 74 16 d6 bf 86 d0 23 20 e9 7e 87 9d 23 00 32 62 29 a7 a9 b1 a6 84 29 81 df 48 81 41 8d 4f 5a 1f da de dc 76 57 a5 9e 79 50 05 10 33 20 28 3b 26 5d ca d6 9a 6e Data Ascii: Dbk;[ja"T:\X-ObspzAW@q:Es}9E/;+Rx];Q(H2Urdr4Ji8so-#\|8Nq*~:!wbbN$~2ttWtlJt# ~#2b))HAOZvWyP3 (;&]n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49794	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	841	OUT	GET /wp-content/themes/signaturit/fonts/N27-Bold.woff2 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	413	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: font/woff2 Content-Length: 16920 Connection: close Last-Modified: Thu, 21 Dec 2023 15:36:44 GMT ETag: "65845b8c-4218" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961dbacb3909ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	956	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 42 18 00 0f 00 00 00 00 ce 48 00 00 41 b7 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 36 1b d0 32 1c 89 44 06 60 00 86 5e 11 08 0a 82 8c 08 81 c8 41 0b 86 24 00 01 36 02 24 03 8c 44 04 20 05 86 5d 07 91 6b 1b 54 a8 37 d8 36 8d b9 61 dd 09 24 b5 d2 b7 3a b9 a3 03 ad db a1 44 cd 7b 6e 3e 2a ea e6 66 15 48 f6 ff ff 9f 90 54 8e fd c3 76 47 54 65 44 92 50 98 04 7a 44 76 8b 41 d7 dd 74 72 2b e5 3a 45 a3 f5 69 57 18 ad 67 80 6d 32 79 a5 1d 94 12 a2 0e 12 14 c3 d2 cd 6e c4 b7 09 85 f8 bc e7 76 d9 dc 9e b0 8b 63 7c d3 65 73 bf 4d 74 3d bf d6 ce a2 07 cf ea 09 3f 56 fb 58 9c 2c 79 e9 fb 3d 61 36 7c e0 60 b3 7f 85 60 e9 8b 8e d1 44 fa 9b 46 53 85 0d be 37 cb 76 b5 55 65 0d 38 96 ca 12 26 Data Ascii: wOF2BHA?FFTM62D`^A$6$D ]kT76a$:D{n>*fHTvGTeDPzDvAtr+:EiWgm2ynvc\|esMt=?VX,y=a6\|``DFS7vUe8&
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 0f 4e 87 b5 2b 61 81 b6 3e fe 76 ed 13 90 62 57 0b eb 53 b1 ff 44 69 d2 63 86 19 f1 54 d2 4c 2f d7 bc 21 48 67 0f 42 e2 44 28 d2 c5 1d e4 b3 01 41 39 01 9d 2c 70 26 70 16 70 36 70 ee 99 cd 1b b8 1c 78 2b f0 36 e0 ed c0 3b 80 77 02 ef 03 3e 00 7c 10 f8 10 f0 61 e0 23 c0 c7 80 cf 01 5f 00 be 04 7c 05 f8 1a f0 0d e0 5b c0 77 80 ef 01 3f 00 7e 04 fc 04 f8 19 f0 0b e0 57 a0 f5 00 da 00 a0 8d 00 da 04 74 2a e8 74 d0 f5 a0 a7 82 9e 06 7a 3a e8 19 a0 67 82 9e 05 7a 36 e8 39 a0 e7 82 9e 07 7a 3e 30 59 81 54 03 39 93 44 05 4a 0c 42 78 41 08 e9 88 00 91 65 4e 6c 01 e2 99 48 7b 8a 5c 9f 74 0b 32 11 04 a9 0d 2c 87 6c 8e d9 38 d9 9c db 40 08 c3 11 24 44 84 18 12 32 09 92 64 a9 5c 42 d0 f1 86 61 81 9b a5 c0 12 04 4b e4 fa b4 05 36 13 d8 4d 3d b5 08 36 8b 28 2c c9 c5 d3 Data Ascii: N+a>vbWSDicTL/!HgBD(A9,p&pp6px+6;w>\|a#_\|[w?~Wt*tz:gz69z>0YT9DJBxAeNlH{\t2,l8@$D2d\BaK6M=6(,
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: f1 94 c7 58 4e 79 d9 e1 6c e0 46 fc 3b 41 dd 7e 7d 54 1b 8d 70 e1 e0 a6 cd 73 0b 2b ff 1e c0 1a f0 70 04 10 10 09 12 22 4c 84 a8 dd 65 23 11 36 12 aa 12 9f 4a 00 bf db 3f 97 08 fe 0f 24 09 6c 09 6c 85 4a 86 2c 39 db e1 35 2e b6 ad f1 f4 20 58 83 e0 4b 8b 02 db 13 db 90 72 3d 70 2b 01 ba 10 3c b0 2d 4a 3f 06 1b 3d 15 0e 65 24 f1 54 60 73 59 09 dc 08 9b 57 8d 97 bf 42 42 82 45 ee 40 36 af 00 83 de 4d 4b 6b 4f 63 b6 7c 7a 41 f0 e8 f5 51 89 92 7d 22 d8 ae da 68 a1 51 29 64 59 ce 0f 13 d3 ea 8a 2d 79 3b bc d9 cd 25 84 48 45 d8 fe da 36 14 29 d9 6a e3 6a 8b aa 19 87 6d 54 55 cd b7 53 c4 ef e1 d0 e0 ed 74 2b 6d d0 ae 51 a7 2b 04 ca 04 c8 a6 10 99 63 2a a8 da 69 54 e9 ad a9 b5 95 b4 ed 6f 71 33 8c 98 6d c1 83 20 98 19 1e 2f c2 8d c4 eb 95 19 73 80 07 c1 3a 84 0e Data Ascii: XNylF;A~}Tps+p"Le#6J?$llJ,95. XKr=p+<-J?=e$T`sYWBBE@6MKkOc\|zAQ}"hQ)dY-y;%HE6)jjmTUSt+mQ+c*iToq3m /s:
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 56 ec 68 70 14 b9 b2 e3 a6 36 41 b7 00 4d 64 36 e9 71 ee 37 6f 5a d7 cf d6 a2 a9 c2 43 6f 80 91 03 9d 3e 73 48 c6 15 0c 89 b5 62 64 04 c2 e0 c9 6d a4 e3 42 5f b9 26 0d 8f 70 1e 99 3c 00 a4 c3 c9 50 e7 21 1a e7 ed ae 16 a9 18 10 84 a1 ef cc d4 bf 4f e4 06 62 bd dd 99 b0 61 c4 28 6d a0 ff 38 a5 7d 1c a5 f0 2e 3c d0 fc ff 27 6d fa b0 0c 19 11 c4 60 46 98 39 73 e2 2c 59 21 61 63 93 e0 c0 01 05 07 87 24 67 2e a4 b8 f3 40 e5 c5 9b 2c 3f 81 e4 05 0b 46 13 2a 8c b2 22 fb a9 3a a8 81 b9 66 a7 d9 38 a3 87 a7 3e 97 f9 bb e2 a1 50 8f 3c 92 e4 89 25 c9 be 5b b1 d7 cf 9c d4 c6 b7 20 0b 09 29 dc c7 14 57 e5 eb 3b b3 9b 05 d6 75 33 9e 9f 2d d8 a4 49 8b a3 f0 4b cd 9e cf 1c a4 9d 9f 91 e8 a7 ce 23 17 e1 03 cc dd 18 cc dd 33 82 75 c5 dd 75 a1 5b 6e 49 ca 02 f6 eb 98 e4 34 Data Ascii: Vhp6AMd6q7oZCo>sHbdmB_&p<P!Oba(m8}.<'m`F9s,Y!ac$g.@,?F*":f8>P<%[ )W;u3-IK#3uu[nI4
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: bf d4 10 48 b0 74 1a 4a 69 8f bd fa 2a 7a cf 49 79 8e f9 76 80 dd 61 95 a7 c0 cb 01 69 e5 85 1c c9 22 72 14 96 0b 18 c6 94 48 b0 0b e0 12 8b 2e 4c 11 11 62 40 64 88 2d 44 ec b7 57 82 3c fc 0a 82 28 c0 4a 96 92 1b 85 fc 26 8b a0 65 42 93 94 1c 56 24 8d 47 07 4b 37 17 ac fd 29 6f 32 36 d2 8a ce 4a 9f 22 19 c6 08 d3 04 89 35 0d 88 5f 35 7c 1e b2 a0 cb 7d 22 b1 c2 8a a4 c3 91 e0 82 28 0e 39 14 6b 7f 1b ae 16 16 5a 63 81 35 17 74 ef 62 ce 74 a1 94 99 84 09 92 ea c4 93 00 31 b2 13 69 67 3b 2e a9 9d 2f 5d 3b 2c 05 3f 53 14 87 1c e9 be 86 26 41 b1 6f e4 fa 7a c4 e2 0a 8d 89 1d 8d 36 18 a5 81 07 01 0c 32 4b 9f 31 44 fe 92 63 e8 40 88 1c b4 49 d5 27 8e 95 99 69 ab 54 12 0c e3 2a 34 16 a6 65 6e 78 e1 c6 17 ff fe ed 7a d6 e7 c8 1e 3e f7 56 9b a3 c2 bd 56 ad 45 75 7f Data Ascii: HtJizIyvai"rH.Lb@d-DW<(J&eBV$GK7)o26J"5_5\|}"(9kZc5tbt1ig;./];,?S&Aoz62K1Dc@I'iT4enxz>VVEu
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: cc d4 dd 59 f7 70 41 49 79 90 c1 9c 04 32 37 79 7b da 35 d8 ab f2 7d 0f df 3d aa 6e 2e 4f 47 07 d7 7e 87 e3 ab b3 b1 e1 55 5f 7b 24 88 90 40 72 b4 c5 07 e9 da 64 3f 82 a4 b7 1e 99 28 37 a7 53 24 aa c1 bf 2b 00 e3 c6 91 02 85 9f 9b 0b 72 ca be 15 5f b7 1e 27 7a c7 fd 81 4e b5 fc 21 fb f6 f3 4b 04 00 5e 71 db 91 24 d4 63 73 49 e9 19 95 a8 14 f0 6c 3d e7 c7 59 1e 0d fc 4f b6 04 26 2f cd 1a 77 ea 8f 3f 27 b3 4b f3 ab 1d c5 58 57 f6 2e cc 1c 6d b7 a9 0b ee 39 56 dc 78 09 46 32 1d d0 d3 21 bd 08 4d 2d 5f 50 b6 d9 1e ca 91 01 55 29 cf 6b 0b c9 22 2f 55 3a 2b eb 73 89 25 d5 37 71 d4 ee a3 e3 d6 df fb 37 ea 3b d0 4b 5a a6 3e f0 c6 9d b0 7a 34 e4 64 f5 6b b6 b0 ec a9 ac 51 bf 22 d5 ae 70 97 03 02 05 0a 53 0a 63 4d 9a 57 18 d5 9d c7 20 d7 16 32 cb 84 9a 78 e6 b2 f9 Data Ascii: YpAIy27y{5}=n.OG~U_{$@rd?(7S$+r_'zN!K^q$csIl=YO&/w?'KXW.m9VxF2!M-_PU)k"/U:+s%7q7;KZ>z4dkQ"pScMW 2x
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: b3 03 f0 7f eb e3 d4 53 15 c3 e6 84 ef 64 aa 9e fa 7a ee e8 f8 52 98 00 64 1c b9 6b e1 e6 63 69 f3 f2 74 e4 99 cb 8d b1 df 4d 32 02 3f 41 27 6a 26 6c 22 9e 79 9d d5 6b 10 0a 77 d6 a4 e5 29 bc d1 f8 b7 47 2f bc c3 cc c0 99 88 c1 31 dc a0 a3 46 1c f5 fc 2d 70 bf 53 f6 42 1a fd d6 96 ab 25 65 ec b5 8e 81 23 76 4f 7b ba 50 2b 64 3c 35 85 77 d5 02 af 54 a0 07 0f 96 84 96 5d 5d 68 96 7f f7 31 07 07 b2 77 9a ed 82 d9 de 43 7f 70 31 1d 0d e5 4e 82 70 d3 8e 1e ea 8e bc 5c 65 17 a8 08 7e 99 09 69 8b fe 61 da 0b 1b 18 77 3e d0 fe 4d 55 77 44 bc 89 cd 58 09 c9 f8 90 05 61 3b d6 73 d9 45 ba 90 d2 58 c9 d8 97 d9 6a 60 cf da 3e a9 27 2c ad a5 09 2f 15 96 ce 6e 6c 60 87 ba b0 ce b9 27 0a 0d 28 c1 21 af 75 39 50 e1 aa 5e 0f b6 f0 d1 3e 79 09 ae 08 28 73 d3 9a 1f df 78 e3 Data Ascii: SdzRdkcitM2?A'j&l"ykw)G/1F-pSB%e#vO{P+d<5wT]]h1wCp1Np\e~iaw>MUwDXa;sEXj`>',/nl`'(!u9P^>y(sx
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: ff 57 ca f8 9b 52 ca 5d 9d 8b 31 15 75 ee 53 55 a5 17 87 e4 1c 0f 3e 6c 27 45 f6 1d 8f 99 2e 31 b2 d7 aa 65 7a a8 96 a9 3b 9b 45 4b 06 1a 32 9d d5 52 1d 9b 1a ba bb 0f 65 bb 9a 68 8d 49 ea 68 2b b0 fc 63 9a be 7e c2 cd 0e 94 e6 da 75 95 46 75 e9 64 5e 99 34 7a 6b cf 36 65 5a db 9b da 37 59 3a d9 e4 38 da 58 02 39 c0 89 11 e0 24 43 55 af a7 4a 8f d5 33 66 7d 3b 44 8c c9 d0 0e b8 fa 8a d3 13 6f 7b 82 2c f7 59 1c e3 8d 3f 59 78 39 9a 85 f1 be da e1 19 ed 17 ea 0d fa a7 ba 6d bc 02 82 f5 e1 0c 49 c2 99 45 5b a5 39 b3 24 ce 09 17 d7 ff c6 76 51 70 3b 8f ef 6b 6c 3d 7e a6 6b f5 e4 89 fe 96 43 27 aa 09 db 29 42 6b 1c 2a d4 62 1a af f7 0f b5 0f 5d ef 6f 7c 5d 2b 81 01 5c fd 57 25 1f 7f b5 76 35 1f 7f a5 d2 b6 73 1d ba cd 53 d7 52 79 dd f0 f7 c5 c2 52 7f a7 b2 4b Data Ascii: WR]1uSU>l'E.1ez;EK2RehIh+c~uFud^4zk6eZ7Y:8X9$CUJ3f};Do{,Y?Yx9mIE[9$vQp;kl=~kC')Bk*b]o\|]+\W%v5sSRyRK
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: c5 9f 79 2a 37 d4 7d 4c e1 d6 fc b9 c9 73 b7 16 b6 a5 3a de b4 1f 95 eb 1f 21 1c 9d 38 e0 2e 70 7e f7 20 b4 5e 1a 69 91 3b 05 3a eb ad c1 ed 6f db 2f b0 68 c5 4e 99 89 fe 4d c6 91 e1 f5 0c ae bf 43 a6 62 ae 08 a0 21 91 09 91 b1 71 19 e1 17 5a 35 17 b7 05 77 ae c3 ef 43 a7 4f 37 36 d2 c3 b3 32 4c 63 8f 1c 1d cb b4 b5 45 18 27 70 c3 74 9b 9a 7e 2a 1c 3a 68 9d 98 93 6b 11 5d b7 ff a7 f6 e1 08 83 f8 b4 08 13 e9 a2 48 7e 5a 4b 42 7a 44 18 6f a5 85 9f 0a b5 7b e7 4b ff 6a c8 21 d6 55 28 9d e7 57 f0 e7 f8 9b 28 9b cc 5e af 00 41 96 e9 e4 fb 49 d1 fd de 6f de bf 01 64 e5 0b 7b 8b ad 89 b1 dc f3 81 0f 55 2e 01 1c b7 aa a0 dc b4 c2 6e 37 6e f6 89 a9 f3 bd ea 5f 58 29 2f 71 fd e1 cb 03 9b 5c 63 b7 6e 55 2c 36 98 ba fb b5 bb 01 a2 fc 45 0f 96 23 fd 65 9b f2 a5 f5 3f Data Ascii: y7}Ls:!8.p~ ^i;:o/hNMCb!qZ5wCO762LcE'pt~:hk]H~ZKBzDo{Kj!U(W(^AIod{U.n7n_X)/q\cnU,6E#e?
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 55 31 8e c1 ba c6 aa 74 55 63 dd 60 47 12 97 46 8d d2 2e 7c 6a 87 04 ae 15 5e ce 2e 43 de 7e 06 63 a1 14 1e 52 8d d7 b5 8d c7 59 e9 b1 b7 fd 96 d2 37 2f 42 db c0 a3 a3 32 01 61 04 57 6e a2 93 4b 6c 82 9b 35 74 c3 42 30 bc 0f f1 cc 11 6c 9c a5 11 af 09 58 01 dd 34 df 29 05 71 96 7c 4c 96 57 5e 2b 45 12 0a 0b b4 f5 c9 76 a5 16 39 a8 91 18 55 05 6f 06 30 24 2b 09 ef 13 98 23 7f a2 62 ec 7b e6 08 1f 15 c9 8f 8e 4c 31 fe aa 5b 96 2b 3a aa de 39 52 a4 bb eb 2b 8f 6a 47 ff 7c bb b7 8b 6b a6 db e0 92 e1 67 50 70 a3 d2 04 73 3d 70 27 ef 73 d4 4d 5b d9 c1 52 9f c9 e0 77 15 01 08 5b 5e 87 22 d4 31 22 f6 ee 48 df bc 91 8a e3 93 33 9f a5 66 c6 db 58 71 3c fb 8b 68 b6 06 17 f6 32 61 9b 98 67 7d 21 79 62 0d 45 8b 61 ca 00 c2 a9 88 70 41 44 0a 97 c2 b3 44 8a 10 90 e3 44 Data Ascii: U1tUc`GF.\|j^.C~cRY7/B2aWnKl5tB0lX4)q\|LW^+Ev9Uo0$+#b{L1[+:9R+jG\|kgPps=p'sM[Rw[^"1"H3fXq<h2ag}!ybEapADDD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49796	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	843	OUT	GET /wp-content/themes/signaturit/fonts/N27-Medium.woff2 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	413	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: font/woff2 Content-Length: 16988 Connection: close Last-Modified: Thu, 21 Dec 2023 15:36:45 GMT ETag: "65845b8d-425c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961dbac8fa0ad1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	956	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 42 5c 00 0f 00 00 00 00 cb 44 00 00 41 fa 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 36 1b d0 32 1c 89 44 06 60 00 86 5e 11 08 0a 82 85 50 81 c8 25 0b 86 24 00 01 36 02 24 03 8c 44 04 20 05 87 13 07 91 6b 1b 6e a8 37 64 9b 2e 12 3a d7 9d 00 d5 aa ef b3 3b bd 51 88 c7 81 30 b3 4e 23 03 c1 c6 01 20 a1 bd 44 f6 ff ff 9f 98 54 c6 d8 77 64 fb 01 15 2b ad aa 5c 2a 02 83 69 21 68 3d d3 12 d2 22 2c 1c 89 61 c3 28 63 ae da f6 75 eb 48 1b 0d 3a 91 f5 ee 90 c4 dc a6 27 bf d5 73 4c 59 10 5a 10 6e 82 b6 f8 54 f1 d1 dd bb f8 38 d5 20 ab bb d6 e1 9d f1 94 bd 06 64 75 71 19 59 f4 a4 e8 bc 59 22 e2 87 26 63 e9 05 1d 4f 97 ac f6 5b 7a 18 5f bf 75 4b 47 84 28 99 04 21 87 d1 b6 b2 b1 5b 27 b4 79 Data Ascii: wOF2B\DA?FFTM62D`^P%$6$D kn7d.:;Q0N# DTwd+\*i!h=",a(cuH:'sLYZnT8 duqYY"&cO[z_uKG(!['y
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 3f 8c b9 fe 3f d5 5f 2d df 5a 9d a9 20 e0 4a 12 64 c8 d4 ee 77 00 00 04 00 6e ff e4 ce 00 00 f8 f9 cb c7 00 00 bf fe 42 8e 03 02 c0 06 e0 0b 00 43 83 ab 85 d4 69 80 69 6c 01 14 55 0a bc d4 fa 21 04 00 0c 00 02 c0 a2 d4 06 7b f8 d1 e4 54 e0 bc f7 72 85 06 6c 11 00 60 fa 3f 0a 00 24 08 e3 81 67 66 93 10 f4 11 93 7a 30 a0 f2 67 cc e2 fc 35 2f 39 7f cf 9b 33 7d 35 f2 8b 4a ba b9 f1 14 7b f7 f5 32 0d 70 7e cd 6b 30 1f f9 7e 0c 06 47 60 31 65 cf 0d 86 01 e3 92 91 c7 c3 92 9e 3b 39 ec d1 0d 77 9f 1e ff 06 94 b2 ac d9 9c fa 7f a2 3c f8 0a 11 19 6e 4e 79 e4 5b 72 14 84 57 2b c8 cc ca 61 78 73 8e 5f 02 62 5a 99 20 d6 00 a4 00 e2 01 c8 00 24 ee 4a 14 80 54 68 d2 90 81 2c e4 20 0f 15 a8 41 1d 1a d0 84 16 74 20 81 29 cc 61 09 6b d8 c2 1e 8e 70 86 2b dc e1 09 6f f8 c2 Data Ascii: ??_-Z JdwnBCiilU!{Trl`?$gfz0g5/93}5J{2p~k0~G`1e;9w<nNy[rW+axs_bZ $JTh, At )akp+o
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: c0 b6 c6 c0 94 6d 4c a8 d6 48 57 9c 0b 53 63 36 27 be 87 a8 92 07 6c 50 46 d1 44 84 e5 ae 64 7b 4b 95 4b aa 43 5f f6 94 51 4a 87 c2 fb 89 bd 71 f2 bf bb 02 df 25 ab b5 7d 42 d3 11 85 e4 b8 14 38 5b 2b a7 e7 1f 15 a1 84 ca 79 47 b2 cf 52 e0 e8 4b 6a 35 91 a9 6a a4 ee a4 01 bc a0 e0 97 93 71 10 56 2a 18 42 ca 00 4e d4 f8 38 87 16 d3 52 71 9f 25 a6 f3 a9 f3 21 ce 91 be 9d 7c a9 cc 31 e7 4e c8 77 9d 4d d2 8c 5f 1a 3d 69 ff b2 68 89 5a 85 43 e9 ba dc 46 f8 60 e5 cb 07 40 67 d0 99 2c 36 87 cb e3 0b 28 4e e8 42 35 35 28 d2 53 c0 ff f6 47 d2 ea 7f 81 72 50 80 52 a5 d6 68 5d 4e ac bf 99 a3 9f f8 40 e7 bc e5 00 74 42 ff 4c 00 4b 91 a1 98 6a aa 91 d5 eb 42 f8 ea 74 19 9f be 3a c8 94 33 05 5a b0 b1 cb 29 bd a8 62 9a 5a 93 60 11 9b f1 19 c1 81 9e a6 e5 ac 65 5d 28 5e Data Ascii: mLHWSc6'lPFDd{KKC_QJq%}B8[+yGRKj5jqV*BN8Rq%!\|1NwM_=ihZCF`@g,6(NB55(SGrPRh]N@tBLKjBt:3Z)bZ`e](^
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: ec 20 65 6d c1 35 71 21 e7 26 0b 4d 9f 98 9e 35 6d 60 4e 81 90 16 10 89 86 31 bf cd 79 f3 c0 3e 65 eb 49 a7 21 3a 64 03 cc 1c 48 fa 86 6b 3a af 60 4a 4c 16 d4 19 08 93 a7 69 d4 c4 85 5c 99 92 c8 33 9c 67 26 4f 00 4d 38 9d ea 3c 45 63 c5 4f b5 60 60 d0 11 76 bc 1b d6 fe 19 d9 09 88 16 3f 99 50 30 72 54 19 ff a6 45 39 81 b1 fb 17 7e c8 e3 ff 27 4f 7e 08 42 01 58 66 09 c1 16 26 0c 57 04 31 1e 09 89 99 a4 a4 4c c9 c8 98 49 94 c4 dc 5c f3 58 5a 80 62 2d 4d 06 5b 8b 2d 46 92 5b c2 51 93 41 ce d6 d9 24 cc 90 7d a2 1d 30 66 be 71 47 a4 3b ea 32 b9 2b ae 28 74 cd 33 81 5e d8 91 e1 6d 12 ac 29 b5 45 9e e4 9c c2 df c5 d4 eb e9 3f b3 bf 04 c0 72 ba bb 3f 16 9c ed 31 dd 3a 81 a1 7f d4 2c 3f 1c 9c 9e 38 96 9c e1 75 be 4a 47 2a c4 4c fb 41 70 7d 2c 84 21 f9 d3 ae b9 d1 Data Ascii: em5q!&M5m`N1y>eI!:dHk:`JLi\3g&OM8<EcO``v?P0rTE9~'O~BXf&W1LI\XZb-M[-F[QA$}0fqG;2+(t3^m)E?r?1:,?8uJG*LAp},!
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 79 1b ca 5f ac 33 bc 16 83 11 e8 ea 71 ef 3a e7 6d 69 02 19 91 5f a7 d4 f6 2b 3e 6d 52 5d a5 5c 6e b8 dd 0e 78 7d 59 f5 02 7c 13 e0 e1 37 c6 c9 61 61 28 c5 b1 16 02 27 aa 92 60 4d 66 ec c2 aa e9 0c 4b 8a 97 c9 86 86 a6 c1 52 4f bf 1d c5 02 3a 50 1d 2e 95 e1 82 cc 11 b2 83 e1 e7 9c 3b 4c 88 3c 1a 15 91 3f 77 41 f6 52 7d 68 68 12 ab 9e 0f ca bf 82 34 c8 c3 98 cf c8 90 80 35 c9 5d 33 c4 10 e4 10 19 ea 40 11 d4 b8 d0 09 11 6d eb ae ce 31 a4 0e 59 9b 2e a7 69 a4 9b 16 ee 58 bc 53 cf 94 c2 4e a5 ee 55 8e 33 b2 b7 73 cb 35 78 98 7a 71 72 ee ce 45 ed 6d b5 b1 17 4b 38 66 8b ce c9 23 0d f8 c0 f0 98 8a 35 c4 18 81 10 4b 2c ae 33 99 59 19 8c c3 01 1d 00 42 6a b0 b6 82 89 f2 11 8a a2 b5 c6 d5 83 9a 72 35 00 a6 40 f3 c2 ab 76 65 4c 22 90 6f 80 41 31 cf f0 05 9f f0 85 Data Ascii: y_3q:mi_+>mR]\nx}Y\|7aa('`MfKRO:P.;L<?wAR}hh45]3@m1Y.iXSNU3s5xzqrEmK8f#5K,3YBjr5@veL"oA1
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: e2 82 59 37 23 94 21 81 70 44 b7 9e 38 17 19 88 08 7f f0 64 25 8e 5f 9e c7 06 af 87 23 95 29 f9 bd 23 4c cd 02 02 49 b5 8d 3d 6f eb 78 a7 a5 b5 a4 7a cf f6 91 a3 0c 70 5f ad a7 4e 87 04 34 f0 7f ad f7 50 3c e7 f3 f8 c5 a9 25 78 27 fb 98 ea ca c1 ad a1 88 3d 43 6b d4 2d a5 a1 b5 58 34 a9 e0 2f c0 e2 41 82 46 a8 f9 66 a1 c3 79 af 39 96 13 03 54 52 70 5a 67 09 c7 ed aa dd b0 b9 de 59 d6 77 3b 9c 34 87 99 d7 8d 47 54 14 06 1c 02 34 ea c8 aa c9 58 bb e5 2f 83 85 d5 81 8b 2a f4 53 a3 e6 b0 c4 2d 1d 31 10 10 f6 75 7c 97 d2 c3 e2 a4 f3 12 02 b3 bb 78 2e 52 c8 2d 3e 13 f6 4a 99 41 1a 97 c1 74 1f a7 c7 4c b2 30 6e fb 6d 73 8b fe 7c 7e d6 e1 3c d6 d1 fe 6d 32 5b e8 2a c3 73 37 90 c6 a1 e6 f0 52 28 d1 f8 4f b5 03 04 ed 22 d4 15 60 7f 71 43 75 9b 72 9b c8 00 a6 ce fd Data Ascii: Y7#!pD8d%_#)#LI=oxzp_N4P<%x'=Ck-X4/AFfy9TRpZgYw;4GT4X/S-1u\|x.R->JAtL0nms\|~<m2[s7R(O"`qCur
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 16 24 83 13 24 bf 33 20 78 47 1f 8d 53 44 14 bb b7 4b 47 37 c6 24 5e 8f 32 58 1c 8c 81 fc ad dc 4a 9f 61 0b 43 8e c5 40 51 44 ef f5 01 43 ec bc fc 30 a9 f2 ee 66 e9 c9 6b 35 c1 d5 8c 0b b0 81 8b 2e f2 ad 64 19 e9 77 b4 55 e0 12 d7 c1 a0 3e a3 66 9f 8c 07 83 82 a4 5f 1e 8a 8b 14 78 8d 81 cd 2d 92 d4 56 4c 97 cb a2 48 c7 7a a5 ab 23 8a 97 d5 6a b4 96 8f 0f 99 9f e1 be 48 1a 02 dd 46 bf 7b fc f1 c8 60 07 86 55 29 fe 49 17 a7 41 84 1b f1 c8 23 05 6c 38 12 63 39 c2 54 98 e8 91 1a 0f cb 26 37 c2 e8 a9 57 4e c6 05 85 3a 24 e6 e6 50 75 76 37 cf 26 91 8d 27 2b fe c4 06 33 8a b2 38 29 ce dc 71 88 86 89 37 71 f5 d7 86 5d 64 5c 32 1e 40 ea eb da 79 4f a8 bd 42 e3 d9 32 28 ab 21 b1 e1 e5 04 89 2a 7e 31 01 7e c9 1e 87 de 9b 94 84 1f 28 80 2d 2d bd f8 e0 23 bc 0b e3 7d Data Ascii: $$3 xGSDKG7$^2XJaC@QDC0fk5.dwU>f_x-VLHz#jHF{`U)IA#l8c9T&7WN:$Puv7&'+38)q7q]d\2@yOB2(!*~1~(--#}
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 92 50 7a 83 44 9f 0e b1 89 18 e7 90 54 40 2b 80 d2 5d 5e 4d cd bd 6e 8b 74 b7 92 f7 aa 88 1e fe 75 6a 22 fa 73 16 91 8c 1b a9 f4 0d f6 60 89 d9 67 6d fd 7d f0 3a e0 35 0c 76 5b 4f 66 57 e6 b6 1e 0c 0a b7 3e bd ff fd d4 a3 17 95 35 5e 29 bb 1d af 46 9b 18 2f 4b 4f a5 7f ff 6b 43 15 06 72 a6 5a 3b 39 43 8c a1 4e 4e eb ce f7 e5 29 00 a5 7f 95 36 b0 95 63 b8 1b d8 4a 37 75 01 f4 89 06 6a 08 ab ac ba 81 fd 27 2a 2d 71 20 5e 8f 1b 31 f3 cc c6 f7 d3 69 af 4a 18 c9 d3 39 d9 ab ae be fa 1d 3f 66 22 71 9a a5 12 06 a4 48 54 d2 77 80 d2 bf 5b 52 2d 97 01 4a 07 54 b6 fb ba 1c 5b c4 16 ac 5f 63 83 24 2c fd 67 9f a4 4f 99 b3 e1 85 d4 a8 98 47 59 04 6e c8 c4 4f f6 27 09 08 a8 e0 59 59 5d 01 50 fa 0a 8b eb a3 ca 7f 5b 30 98 85 56 12 75 fb 62 d8 d0 2e 88 c5 01 1a 6e ee 3c Data Ascii: PzDT@+]^Mntuj"s`gm}:5v[OfW>5^)F/KOkCrZ;9CNN)6cJ7uj'*-q ^1iJ9?f"qHTw[R-JT[_c$,gOGYnO'YY]P[0Vub.n<
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: bb 16 14 ee c0 8d e1 e4 93 f7 43 2f ef 95 cf 01 39 be b5 88 d1 c1 f8 6a 77 ab 40 1d 51 8b 0a 0a 78 6e 8e a3 c0 73 01 cd 41 9e 01 91 41 21 04 2a fe eb 11 f9 f6 35 45 2f c7 c1 3f 95 b9 39 85 25 48 1c 25 5a 1f 5f 54 9a 9b 5b fa c4 57 67 29 0b 51 b8 31 27 37 e7 91 59 48 4c ac b1 5f 46 6e 4e 4e 4e be b7 26 39 1c af 7f 92 44 a4 a5 60 b0 b4 d4 6f b4 07 58 0c 2d 05 d4 64 f4 55 cb 1a 2b a1 87 fb b2 31 a3 cf 97 ea db bb f4 ee ca 7c bf 5e 35 15 18 25 a8 ff 7d e2 6f 7e 61 ea db 89 6f 40 72 a7 4f d2 c2 01 8d 34 bf 67 46 33 b8 87 b2 ce 76 8c 21 12 3f 16 2a de d7 2a bd db fc ea 4c 9f 14 40 66 bc e1 f3 22 09 a4 b9 7a 02 18 97 6b 2f 19 c6 42 88 91 88 39 d7 40 10 37 02 92 b2 eb ab 5d 53 cb d5 3f 56 01 2a 56 90 4c 0c e6 d2 50 71 69 14 d9 64 52 b0 26 4e d3 c2 fe 19 8f 6b fb Data Ascii: C/9jw@QxnsAA!5E/?9%H%Z_T[Wg)Q1'7YHL_FnNNN&9D`oX-dU+1\|^5%}o~ao@rO4gF3v!?L@f"zk/B9@7]S?VVLPqidR&Nk
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 47 70 b5 9b 9a bf d1 06 b5 0d 45 7b cc cf a3 ed 26 d9 29 e5 47 27 33 c4 15 73 2b fd c2 7e 50 b2 f1 c6 d8 db f4 c7 c9 5c 69 62 bb f5 7c df 24 01 29 3e 60 29 ee 5f 60 4f 5a 63 b7 57 22 23 4f de 7a 4f 60 ff 2d 28 13 b3 c7 a9 cb fc f9 47 a7 3c ee 46 2c 5b 8d 78 83 1e cf 54 7c e2 8e 40 d6 05 a3 8f 3b 14 4c 07 49 12 2a 29 96 b5 1d 61 9d a6 34 9b bf fa c7 6a 6f 06 7c 5c 3f 54 4d 37 90 e3 b8 0b 35 3f 63 e3 11 ad bf ad 33 a1 6f bb 21 9d d2 52 90 76 5e 13 ad 58 4b 39 53 3c 0f e6 1a 60 dd ef a2 b0 fe 97 6b e3 d9 ac cd 7f 06 52 b0 b7 ff 92 97 7e d6 dc 93 8a ae cd d0 df ea be 94 ae f9 5e 50 e7 2c 6f a1 ed 66 aa 53 bd be 7a ec 70 b5 a9 23 68 6a 4d a6 52 22 77 55 14 25 e4 ea e6 79 34 2d a8 65 e4 6a da 79 30 66 71 e7 12 81 73 c8 78 ba 26 60 82 9a 13 8d a7 f4 ce d4 7c b9 Data Ascii: GpE{&)G'3s+~P\ib\|$)>`)_`OZcW"#OzO`-(G<F,[xT\|@;LI*)a4jo\|\?TM75?c3o!Rv^XK9S<`kR~^P,ofSzp#hjMR"wU%y4-ejy0fqsx&`\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49797	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	847	OUT	GET /wp-content/themes/signaturit/fonts/Expose-Regular.woff2 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	413	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: font/woff2 Content-Length: 20452 Connection: close Last-Modified: Thu, 21 Dec 2023 15:36:44 GMT ETag: "65845b8c-4fe4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961dbacc570acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	956	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4f e4 00 0f 00 00 00 00 e2 d4 00 00 4f 81 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 0a 1b d0 68 1c 86 78 06 60 00 87 26 11 08 0a 82 ab 30 81 f0 3b 0b 86 30 00 01 36 02 24 03 8c 5c 04 20 05 90 7c 07 92 0b 1b 2b c1 07 f0 66 c7 b4 72 3b e0 4d b8 3a 5f bf 02 e5 d8 8e 72 b7 74 80 53 a1 6f 76 a0 86 8d 03 01 8d fd 28 b3 ff ff af c9 89 8c 31 32 60 9f bf 25 97 60 09 4a da 21 c9 2a e9 56 cf 60 7a 49 22 4b c6 d4 20 37 a6 11 f9 2a 89 4a 4c db 86 98 54 5d 6f 93 ad 56 dd 73 10 95 5e f0 dd 7e 66 21 c4 7e 42 92 7b 48 b2 57 31 e6 a1 c6 73 7e 98 53 44 cf 07 c3 74 e5 7f 43 f5 e6 67 e8 fa c2 97 76 d9 4c 38 4c ce 97 38 f4 95 44 f4 1a ae 82 3e 97 98 3e 36 fe 65 bf 25 d8 50 31 9a e9 98 8a 9e 70 Data Ascii: wOF2OO?FFTMhx`&0;06$\ \|+fr;M:_rtSov(12`%`J!V`zI"K 7JLT]oVs^~f!~B{HW1s~SDtCgvL8L8D>>6e%P1p
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: a0 2b 73 37 3e 1e 99 d2 ff 41 02 40 00 70 f9 eb e9 03 00 b7 9f ad bf 03 70 ef 47 b6 44 00 c4 00 1a 01 0c 26 38 7c 11 fc f8 e1 f0 97 87 90 2f 1f c7 20 85 08 45 8a 70 14 2b 43 d0 d2 e2 28 57 89 50 a5 0a 47 b5 5a 84 3a 0d 18 1a a3 45 14 4c 15 a7 28 4d 11 35 e3 c6 a8 55 53 9c a6 68 8e 68 aa 96 38 04 00 0c 00 01 10 21 5a 01 ee f7 5d 51 90 fd f6 aa 86 2e 0f 16 0c b8 11 00 e0 ef 1a 00 f4 aa a2 14 0b fb 59 11 48 7f 6e d7 d7 5c 67 38 cb ff f3 06 24 97 ca 0d b2 95 3d 51 24 87 3e a4 2c e2 04 08 56 cb 3b be 0c 83 3e 98 4e f5 7b 5b 84 3e 5c 10 fc 88 21 40 04 29 33 36 88 c5 1f 6d c4 6f ee 06 a2 86 c1 77 f7 88 65 14 ee 46 29 52 7c e4 56 14 46 65 52 bc 45 02 40 76 74 2b 84 f8 cd 8b 10 fd aa 41 08 c5 4f 49 be fa 61 1f e7 f7 88 e1 11 6d 86 81 fa b0 0e 14 10 28 94 4a 7c a0 Data Ascii: +s7>A@ppGD&8\|/ Ep+C(WPGZ:EL(M5UShh8!Z]Q.YHn\g8$=Q$>,V;>N{[>\!@)36moweF)R\|VFeRE@vt+AOIam(J\|
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 65 14 11 f0 63 f2 6f 2d 99 6c 01 48 4b f4 20 29 1b 4b 40 7c d4 c1 0a 7b 5c 68 b7 71 c9 36 2e 93 fa 92 e9 72 22 f1 ba 28 18 b6 48 30 a3 c2 a3 02 e4 f8 aa 4b 67 bc 39 d8 bc d0 ce 80 a9 d7 26 56 b2 04 43 5d 57 35 b4 88 c8 d2 55 09 76 27 25 15 8e 71 95 a6 0c e5 36 6c 0d 3b 97 3a fa 72 a7 74 d1 45 e7 fe c7 05 a0 10 26 8b 99 16 63 53 6d e7 67 6a f2 e5 a4 b3 93 ce 1d dd 54 30 cb d8 02 95 48 1c 5c a5 ca 94 a7 77 6c c3 d6 b0 b3 11 c3 63 c1 8f 73 a2 02 56 ca f0 6d 9e 25 d6 d9 af 7c 1d c2 34 11 f3 44 29 ef f8 87 c8 e0 4e 32 67 24 4c ce fa ea cc c7 42 39 68 c7 9a c3 e6 c2 ce a4 76 d2 ec da 2a 83 8a 51 62 a2 26 ad 90 97 42 e9 86 1a b4 2f 3b 20 47 ce 69 14 67 c5 45 63 57 89 0e dc 79 60 60 f2 e4 15 ef 7e 7c cc 97 df 6b 7f 43 80 0c d7 8a dd 4b 4c 1c e3 2a 55 a6 bc 56 0a Data Ascii: eco-lHK )K@\|{\hq6.r"(H0Kg9&VC]W5Uv'%q6l;:rtE&cSmgjT0H\wlcsVm%\|4D)N2g$LB9hvQb&B/; GigEcWy``~\|kCKLUV
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 55 1f 96 54 c3 92 d9 d4 d8 e4 d4 b8 14 fe 72 e3 3b 83 d0 84 0c 58 34 2d 1b 03 5b 98 1d ff 16 45 a1 6c 69 0c 09 2d cf 5f 4a 6b 8b de 54 5b 99 e5 db 88 19 09 f8 03 f4 fe 7d 85 d1 3f 99 ba 04 e9 51 cc f4 cf af 89 f9 b8 75 d5 2b ea 34 a1 7e a2 fb 3c 86 88 3d 81 57 e6 d8 b7 44 0a 72 ab a9 c5 6d 68 0e fb 64 73 dd 23 8e 68 4e 43 30 fa 71 46 9f c2 dc ef a1 15 85 98 ab 5c c4 92 f8 e7 c6 6c 28 a3 f6 ba eb 8d ed 6d c1 a4 e3 08 18 8d bb a7 1a 10 e9 2f 65 18 c3 7e fb 21 4f d8 65 ff a1 6d 70 f9 dd 1c ee e5 ac 08 f0 90 bd 46 e7 3a 9e 4f 7e 27 f4 f7 f1 87 a6 bd a4 4d b7 35 21 61 fd 6d 72 c6 c0 f8 c7 60 4f c5 da 00 60 d0 ae f5 06 08 70 cc aa b6 3f d4 d1 35 ae 0c 3a 33 38 17 ee d1 ec 06 fd cb bc 21 e3 70 1d 1b 3f bd 80 7d 32 ae 03 66 b0 67 68 cf 21 b0 1b 9d 3d b6 f5 6e 6b Data Ascii: UTr;X4-[Eli-_JkT[}?Qu+4~<=WDrmhds#hNC0qF\l(m/e~!OempF:O~'M5!amr`O`p?5:38!p?}2fgh!=nk
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 35 d9 c2 3e 46 3f 47 1f bf 5f db 2e c0 34 1f 60 d2 e7 2c dc a6 93 a4 40 72 92 df cb 06 a9 34 5b f5 5b 6c 08 54 ff a9 ad 36 80 0e 6c 18 a1 36 3d 51 d5 9a 68 41 c0 e9 a9 f5 96 f6 85 fd 72 e1 7a ea f0 40 aa c8 27 c8 e0 03 02 08 02 a4 a1 0a 3d 68 81 2b 0c 96 41 46 60 92 28 c3 1b 9f f8 46 27 fa 90 60 0c 47 18 c4 34 fe fa 57 bf 87 fe 4f 0f 8a cd 9f ca cc a6 c1 a3 bf f1 6c 69 9f d9 47 e4 da d7 a4 92 7c 84 1d 78 20 00 d0 3d f9 0a f9 6a f4 82 54 c2 7f b6 f5 df 4f c3 3e ee dd de ec f1 ee ee ce ce 3d f5 87 f3 27 f5 3b f1 5b e3 83 07 2f 0e 5e c4 1c 3b 1e 53 8f 29 c7 e4 63 bb 63 d3 63 8f 63 f9 f3 03 cf 17 9e 07 3c 77 7d ee f4 9c f4 2c f9 59 e2 b3 c8 67 11 cf c2 9e 05 3f 0b 7c e6 fe cc f8 59 c7 67 36 3f 6e 13 e2 c0 4a 5a d6 36 79 69 74 40 b4 4f aa bd 6f db e6 29 e8 02 Data Ascii: 5>F?G_.4`,@r4[[lT6l6=QhArz@'=h+AF`(F'`G4WOliG\|x =jTO>=';[/^;S)cccc<w},Yg?\|Yg6?nJZ6yit@Oo)
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 28 5d 29 05 32 1e 06 b2 2f 78 53 02 e3 0c f5 8f 4f e9 07 94 1b 93 92 28 63 50 9f 70 ec 56 7f df d1 21 04 6d 42 0d c2 d1 e7 41 4e 55 79 e5 1c ab c5 40 f9 20 97 6c 3c 16 71 85 98 a0 8e e8 ae c2 c3 2b 42 08 3c 22 32 13 50 ef 94 7d a6 5e 99 92 36 f1 a0 ec 68 6e 44 a9 7b 5a 76 fa 97 a3 08 0f 54 1f 01 08 f4 ef 88 e5 b6 31 34 b0 ca 75 4d 7a a7 79 a6 e9 e3 4e ff a9 7d 35 24 70 9d ad b7 06 13 23 56 6d d5 da c6 9a ae 0f ed f9 59 ca 85 0e 71 d9 f6 62 88 46 f2 f3 03 25 f8 dc 71 e2 79 c7 b8 fb 4a 7c 4c 38 f1 c1 2f f6 7c 97 61 2a f7 08 50 a3 7d 94 03 eb 81 1c d4 48 28 28 86 06 aa ed 28 27 94 ac d9 23 d3 b9 a5 e5 cd 0f c9 c0 cd 8e e3 9b 08 fa 3c c3 d0 63 55 ce 6e 4a 7f 83 4e 54 6a 24 88 28 fc 65 a7 f6 4b 77 23 e5 0c 70 b3 ea 29 ee b1 cc 61 e5 13 d4 fc a7 f5 1c f4 f3 e6 Data Ascii: (])2/xSO(cPpV!mBANUy@ l<q+B<"2P}^6hnD{ZvT14uMzyN}5$p#VmYqbF%qyJ\|L8/\|a*P}H((('#<cUnJNTj$(eKw#p)a
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 9b f2 22 7c 90 c0 11 c5 45 69 7a 9a 14 ad 71 1e 7c 53 6a 1c 28 b1 c2 12 e2 b9 f7 87 94 fd cf 71 45 a3 22 28 d0 1f 3b b5 31 01 07 0c 94 0c ec 9c 78 58 14 d0 c3 4e 73 fd 10 1e c2 6a 38 b0 e0 24 74 e5 a0 3a 29 42 c8 3c 57 52 f9 00 f6 fb ba 3b 9f f0 e1 3b dd a7 b6 72 fc 69 56 69 64 9b 22 a0 5e 68 ce 9b 0c 11 46 9e 17 e6 f1 c0 4f 74 d0 5d bd 7b 27 9d 41 cd cf 6c e8 c9 75 6c 2b 2b 53 dc 18 02 e3 21 ae dc a7 c9 a3 f7 ab ee 46 ee 55 c7 9a 3f 08 72 67 5f 82 22 31 7f 5e 7d 24 e3 d5 81 c6 5e 31 a9 1e 2b c9 f8 83 46 e3 61 13 0a 64 71 cf 89 12 4e 96 5e 4d ff 97 f3 3e 30 65 be 3f 1e 30 64 34 9a 1a 12 59 dd 7f 88 8c ac cf 2f 13 31 21 c7 ba 1d c6 d9 3a f4 3b 9d d2 36 a8 89 d1 10 47 6a 63 e8 4a 7c 19 b4 35 3a d3 db 14 0b 64 17 58 40 88 10 7d ff 5b 69 19 34 35 8d a4 a7 b2 Data Ascii: "\|Eizq\|Sj(qE"(;1xXNsj8$t:)B<WR;;riVid"^hFOt]{'Alul++S!FU?rg_"1^}$^1+FadqN^M>0e?0d4Y/1!:;6GjcJ\|5:dX@}[i45
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: a1 fc 70 5f d4 98 d8 17 87 d6 62 41 09 50 39 22 90 9e 3e e7 96 7f fb 59 a3 20 8d b0 75 b1 27 97 60 2c c2 da 81 02 86 bc 86 99 87 27 4b 83 70 b8 6b 54 b8 f3 ae ee 84 e2 70 bd 5d 06 df cd a6 71 8e 87 53 47 52 8b a4 ba 3d 8f 5e 35 48 9c ca b8 1c a5 16 7e 25 e0 81 3c b0 12 46 04 95 e4 c2 6e 3e 81 13 b8 cb 88 c8 a9 4d f7 d4 d2 37 fe f2 b3 a5 c0 6f 16 52 f1 d5 87 6a e0 6d 60 30 ea 9d d2 6b 28 63 71 5e b8 b6 da ed 0f b5 b6 36 56 f7 ec 57 50 b4 e0 a6 e1 f1 fc a3 14 95 ff df f3 8a b7 68 31 67 45 97 af d2 19 3b d1 6f 24 f9 87 95 54 a0 e8 be 44 85 10 0b c4 61 00 9e 51 2d be fd b2 47 7f 96 e3 c5 24 8b 1c 54 14 03 49 23 93 43 b9 34 77 a3 fc ac d1 34 16 25 77 d6 2b 06 57 e3 e9 27 9f e3 d2 b9 ad fc 8a 0b 84 19 90 8b b6 e5 ec bc 15 51 3c 43 73 11 65 02 59 31 f1 b5 d1 51 Data Ascii: p_bAP9">Y u'`,'KpkTp]qSGR=^5H~%<Fn>M7oRjm`0k(cq^6VWPh1gE;o$TDaQ-G$TI#C4w4%w+W'Q<CseY1Q
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 3d 3b 49 e2 bb 5e 35 41 b9 19 25 99 16 80 8f c4 25 b7 e3 53 a6 65 ed 19 7d 4b 55 59 93 78 83 e6 72 60 49 0f 99 fd bc f3 f4 d9 2f 9b 6b 7c 12 c9 be ee 66 f6 2e 2a 11 16 ae fa 25 a1 e1 bc f3 71 8f f6 97 2e 66 56 77 c7 6b d2 94 22 29 56 64 65 1f 61 ef 7f 6f 5e 49 d5 0f 0a f2 dc 78 13 95 1a 1c ac 12 bb 55 7a 66 0e f2 ca a0 90 1b 98 4a 10 b3 b1 ca 7d 5f ab f8 ad bc d6 8c cd 05 a6 25 e3 f9 b5 dc 7d 59 6f 96 bf e3 83 42 a4 b8 a7 85 21 6f 07 ab 9c b3 60 fe 2f cb 1a 87 0c 13 fb ce c2 f8 fa bf d6 ca 56 c6 c1 f5 fb ba 97 c2 ee da 4a 3b a1 7c 00 ba 31 1f 31 86 38 4c 4e 03 fc ea c2 fe 0f a3 9d 33 7f 8c 00 1d 5a 57 18 c4 f6 b0 d1 53 27 19 bb 7b bb a4 81 8c 17 8a 98 ee 75 c2 d5 db d7 3a fb 2c e4 43 4d a8 2e 26 cc 73 63 22 69 01 22 02 13 ad 42 3d 72 07 99 fc 97 cf e0 2f Data Ascii: =;I^5A%%Se}KUYxr`I/k\|f.*%q.fVwk")Vdeao^IxUzfJ}_%}YoB!o`/VJ;\|118LN3ZWS'{u:,CM.&sc"i"B=r/
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 4c 98 07 3e df 4a 1c b7 53 da 06 5c 53 0f af 3c f8 b1 39 0e 44 8b 17 9c f7 0e 39 43 e7 0e eb 6b 34 84 28 5c 54 08 2e 9d b4 0e a9 56 bd 76 99 98 16 5e 09 6d 9d 72 45 86 13 9d e8 8a 40 78 f3 79 56 69 7e 61 78 20 5a b2 36 5c 2c 2e 85 72 f5 bf 8e 5f 05 d7 f3 3a bb 2e 02 c5 eb cb cf 8d f9 54 ac 55 e2 43 12 f7 ad fe 5b 3a 3b bb 11 cf 94 72 86 37 3d c1 05 31 52 97 0e 66 37 14 b0 5a 8e 0e b2 18 a5 4d ee c5 57 28 13 69 69 c8 a6 0f a0 ba fe 7d fd 80 a3 a1 82 e6 7f 74 33 9b 15 9e c4 66 85 7d 0e 0e 4b 3a 75 f6 37 49 e3 ff a2 f7 57 00 d9 de bd c2 ba ca 1c 0a 86 96 7f eb 2e 2f 1c 09 56 5b 06 d0 8d 9d 58 85 f5 f2 ae b4 8e d6 46 00 7d f5 27 86 42 79 7d d1 ea 5d cb 52 cb fd 2b d9 33 52 7a 71 50 27 16 25 d9 61 07 cf d7 b3 f5 03 10 c9 37 1b df c6 f8 c8 70 1f 83 35 de 33 df Data Ascii: L>JS\S<9D9Ck4(\T.Vv^mrE@xyVi~ax Z6\,.r_:.TUC[:;r7=1Rf7ZMW(ii}t3f}K:u7IW./V[XF}'By}]R+3RzqP'%a7p53

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49798	104.22.71.197	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	533	OUT	GET /menu/page.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:27 UTC	940	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=86400, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"e346c2841e4abbb66ee259e9540abb61" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ulrmNsy5SJaHltGKpsAmvVkRFPcqn%2FEfyDkg4oLq24qTd06a8NoUpQtIpKxObCOgzggpZcYH%2BjEnzqA8hv%2BY0%2Fs1%2FkSDIv1e40Y5wBYajI5xoEma2E7pSG8deo7DponBhZvNcHhJZnPN%2FWXAU21zu8IS"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 19082 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961dbacb9c0ad7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	429	IN	Data Raw: 62 62 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 76 61 72 20 6e 2c 64 2c 73 2c 6c 2c 63 2c 75 2c 66 2c 6d 2c 65 2c 61 2c 74 2c 70 2c 79 2c 76 2c 68 3d 22 2e 42 52 51 6e 7a 4f 38 76 22 2c 5f 3d 6f 2e 68 65 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 5b 5d 2e 69 6e 64 65 78 4f 66 26 26 5f 26 26 28 69 2e 61 32 61 3d 69 2e 61 32 61 7c 7c 7b 7d 2c 6e 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 2c 65 3d 28 64 3d 6f 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 26 26 64 2e 73 72 63 3f 64 2e 73 72 63 3a 22 22 2c 4e 6f 64 65 4c 69 73 74 26 26 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 28 69 2e 61 32 61 2e 69 Data Ascii: bbb!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".BRQnzO8v",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.i
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 64 22 29 3b 65 2e 61 32 61 5f 69 6e 64 65 78 7c 7c 6e 75 6c 6c 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 32 61 2d 75 72 6c 22 29 7c 7c 65 2e 6d 61 74 63 68 65 73 28 22 2e 61 32 61 5f 6b 69 74 20 2e 61 32 61 5f 64 64 22 29 7c 7c 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 55 72 6c 3d 61 2e 6c 69 6e 6b 75 72 6c 7c 7c 22 22 2c 61 2e 6c 69 6e 6b 6e 61 6d 65 26 26 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 54 69 74 6c 65 3d 61 2e 6c 69 6e 6b 6e 61 6d 65 29 29 7d 29 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 75 72 6c 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 6e 61 6d 65 7d 2c 69 2e 61 32 61 5f 69 6e 69 74 3d 69 2e 61 32 61 2e 69 6e 69 74 2c 21 64 7c 7c 64 2e 61 73 79 6e 63 7c 7c 64 2e 64 65 66 65 72 7c 7c 69 2e 61 32 61 2e 69 6e 69 Data Ascii: d");e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.ini
2024-04-24 12:32:27 UTC	1212	IN	Data Raw: 5f 73 65 72 76 69 63 65 73 2c 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 7d 29 2c 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 61 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 3d 65 2e 73 74 79 6c 65 2c 6e 3d 61 2e 73 74 79 6c 65 2c 65 2e 69 64 3d 66 2c 74 2e 77 69 64 74 68 3d 74 2e 68 65 69 67 68 74 3d 6e 2e 77 69 64 74 68 3d 6e 2e 68 65 69 67 68 74 3d 22 31 70 78 22 2c 74 2e 74 6f 70 3d 74 2e 6c 65 66 74 3d 74 2e 62 6f 72 64 65 72 3d 22 30 22 2c 74 2e 70 6f 73 69 74 69 6f 6e 3d 6e 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 2e 7a 49 6e 64 65 78 3d 6e 2e 7a 49 6e 64 65 78 3d 22 31 30 30 Data Ascii: _services,o.getElementById(f).style.display="none")}),e=o.createElement("iframe"),a=o.createElement("div"),t=e.style,n=a.style,e.id=f,t.width=t.height=n.width=n.height="1px",t.top=t.left=t.border="0",t.position=n.position="absolute",t.zIndex=n.zIndex="100
2024-04-24 12:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49799	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	873	OUT	GET /wp-content/themes/signaturit/images/chevron-down.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	422	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:36:43 GMT ETag: W/"65845b8b-f0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dbb1bae0ad7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	246	IN	Data Raw: 66 30 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 2e 33 31 32 31 20 30 2e 33 39 39 39 39 34 4c 36 2e 39 30 32 31 20 34 2e 39 37 39 39 39 4c 31 31 2e 34 39 32 31 20 30 2e 33 39 39 39 39 34 4c 31 32 2e 39 30 32 31 20 31 2e 38 30 39 39 39 4c 36 2e 39 30 32 31 20 37 2e 38 30 39 39 39 4c 30 2e 39 30 32 31 20 31 2e 38 30 39 39 39 4c 32 2e 33 31 32 31 20 30 2e 33 39 39 39 39 34 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: f0<svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M2.3121 0.399994L6.9021 4.97999L11.4921 0.399994L12.9021 1.80999L6.9021 7.80999L0.9021 1.80999L2.3121 0.399994Z" fill="#030352"/></svg>
2024-04-24 12:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49800	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	820	OUT	GET /wp-content/uploads/2023/11/advanced-electronic-signature.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:46 GMT ETag: W/"65845b52-c77" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dbb6c150ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	900	IN	Data Raw: 63 37 37 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 32 31 39 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: c77<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7219" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 20 64 3d 22 4d 34 20 31 36 2e 37 35 56 32 31 48 38 2e 32 35 4c 31 32 2e 30 35 34 34 20 31 37 2e 31 38 38 33 43 31 32 2e 34 31 34 32 20 31 34 2e 35 32 37 37 20 31 34 2e 35 31 38 20 31 32 2e 34 32 30 37 20 31 37 2e 31 37 37 31 20 31 32 2e 30 35 36 4c 32 31 2e 34 20 37 2e 38 32 35 43 32 31 2e 36 20 37 2e 36 32 35 20 32 31 2e 37 35 20 37 2e 34 20 32 31 2e 38 35 20 37 2e 31 35 43 32 31 2e 39 35 20 36 2e 39 20 32 32 20 36 2e 36 35 20 32 32 20 36 2e 34 43 32 32 20 36 2e 31 33 33 33 33 20 32 31 2e 39 35 20 35 2e 38 37 39 31 37 20 32 31 2e 38 35 20 35 2e 36 33 37 35 43 32 31 2e 37 35 20 35 2e 33 39 35 38 33 20 32 31 2e 36 20 35 2e 31 38 33 33 33 20 32 31 2e 34 20 35 4c 32 30 20 33 2e 36 43 31 39 2e 38 31 36 37 20 33 2e 34 20 31 39 2e 36 30 34 32 20 33 2e 32 35 20 Data Ascii: d="M4 16.75V21H8.25L12.0544 17.1883C12.4142 14.5277 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625 21.75 7.4 21.85 7.15C21.95 6.9 22 6.65 22 6.4C22 6.13333 21.95 5.87917 21.85 5.6375C21.75 5.39583 21.6 5.18333 21.4 5L20 3.6C19.8167 3.4 19.6042 3.25
2024-04-24 12:32:27 UTC	929	IN	Data Raw: 37 35 20 31 31 2e 38 35 43 35 2e 37 34 31 36 37 20 31 31 2e 37 31 36 37 20 35 2e 34 37 39 31 37 20 31 31 2e 35 37 39 32 20 35 2e 32 38 37 35 20 31 31 2e 34 33 37 35 43 35 2e 30 39 35 38 33 20 31 31 2e 32 39 35 38 20 35 20 31 31 2e 31 35 20 35 20 31 31 43 35 20 31 30 2e 38 20 35 2e 31 35 20 31 30 2e 36 20 35 2e 34 35 20 31 30 2e 34 43 35 2e 37 35 20 31 30 2e 32 20 36 2e 33 38 33 33 33 20 39 2e 38 39 31 36 37 20 37 2e 33 35 20 39 2e 34 37 35 43 38 2e 38 31 36 36 37 20 38 2e 38 34 31 36 37 20 39 2e 37 39 31 36 37 20 38 2e 32 36 36 36 37 20 31 30 2e 32 37 35 20 37 2e 37 35 43 31 30 2e 37 35 38 33 20 37 2e 32 33 33 33 33 20 31 31 20 36 2e 36 35 20 31 31 20 36 43 31 31 20 35 2e 30 38 33 33 33 20 31 30 2e 36 33 33 33 20 34 2e 33 35 34 31 37 20 39 2e 39 20 33 2e Data Ascii: 75 11.85C5.74167 11.7167 5.47917 11.5792 5.2875 11.4375C5.09583 11.2958 5 11.15 5 11C5 10.8 5.15 10.6 5.45 10.4C5.75 10.2 6.38333 9.89167 7.35 9.475C8.81667 8.84167 9.79167 8.26667 10.275 7.75C10.7583 7.23333 11 6.65 11 6C11 5.08333 10.6333 4.35417 9.9 3.
2024-04-24 12:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49801	104.18.142.119	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	527	OUT	GET /forms/v2.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:27 UTC	1334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 03 Apr 2024 11:15:05 UTC ETag: W/"b0047a8901d8ed9f81db3dcb5982114e" x-amz-server-side-encryption: AES256 x-amz-version-id: 4lHA5dnNobe4YqKec9CE2kPtPUzRSBNR Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f57a09c5455a80253c61001d750462e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: sgu3WjY_zF9eZXqQ4rIZ7P8FGdaYEirCG0cK2hpnyRpHNNaFV59Sbw== Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.5064/bundles/project-v2.js&cfRay=86e8c2275eae0fe9-LAX Cache-Control: s-maxage=600, max-age=300 X-HS-Target-Asset: forms-embed/static-1.5064/bundles/project-v2.js X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 1d515537-3fa8-4a4e-b750-29c52eb7d99d x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-68b7f7fbff-72bsp x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-04-24 12:32:27 UTC	898	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 64 35 31 35 35 33 37 2d 33 66 61 38 2d 34 61 34 65 2d 62 37 35 30 2d 32 39 63 35 32 65 62 37 64 39 39 64 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 32 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 33 37 37 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 70 5f 69 79 31 78 65 59 42 38 4e 78 4d 59 6c 43 6e 77 6f 6c 62 63 46 69 7a 31 66 42 42 49 76 52 65 4c 54 61 6a 34 69 73 52 61 51 2d 31 37 31 33 39 36 31 39 34 37 2d 31 2e 30 2e 31 2e 31 2d 4d 35 6d 61 50 5a 72 32 79 63 46 35 4b 4c 39 4e 72 35 77 68 70 73 32 Data Ascii: x-request-id: 1d515537-3fa8-4a4e-b750-29c52eb7d99dcache-tag: staticjsapp-forms-embed-v2-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 377Set-Cookie: __cf_bm=p_iy1xeYB8NxMYlCnwolbcFiz1fBBIvReLTaj4isRaQ-1713961947-1.0.1.1-M5maPZr2ycF5KL9Nr5whps2
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ffa!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 65 5b 69 5d 2c 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 6e 2c 61 29 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 2b 78 4e 67 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 69 6a 48 70 22 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 25 34 3d 3d 30 26 26 74 25 31 30 30 7c 7c 74 25 34 30 30 3d 3d 30 3f 32 39 3a 32 38 3b 63 61 73 65 20 38 3a 63 61 73 65 20 33 3a 63 61 73 65 20 35 3a 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 20 33 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 Data Ascii: ty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(e[i],o.join("."),n,a)}};t.a=r},"+xNg":function(e,t,n){"use strict";var r=n("ijHp");var a=function(e,t){switch(e){case 1:return t%4==0&&t%100\|\|t%400==0?29:28;case 8:case 3:case 5:case 10:return 30;default:ret
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 3b 74 2e 61 3d 69 7d 2c 22 30 57 4b 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 72 3d 6e 28 22 69 6a 48 70 22 29 2c 61 3d 6e 28 22 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 69 3d 2f 5e 2d 3f 5b 30 2d 39 5d 2a 5b 2e 5d 3f 5b 30 2d 39 5d 7b 30 2c 32 7d 24 2f 2c 6f 3d 65 3d 3e 4f 62 6a 65 63 74 28 72 2e 66 29 28 65 29 7c 7c 4f 62 6a 65 63 74 28 72 2e 68 29 28 65 29 7c 7c 4f 62 6a 65 63 74 28 72 2e 6c 29 28 65 29 7c 7c 69 2e 74 65 73 74 28 65 29 3f 6e 75 6c 6c 3a 5b 61 2e 49 4e 56 41 4c 49 44 5f 4e 55 4d 42 45 52 5d 7d 2c 22 30 64 30 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 Data Ascii: ;t.a=i},"0WKS":function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var r=n("ijHp"),a=n("6Nfw");const i=/^-?[0-9]*[.]?[0-9]{0,2}$/,o=e=>Object(r.f)(e)\|\|Object(r.h)(e)\|\|Object(r.l)(e)\|\|i.test(e)?null:[a.INVALID_NUMBER]},"0d07":function(e,t,n){"us
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 49 4e 2c 7b 64 6f 6d 61 69 6e 3a 69 7d 5d 29 3b 73 7c 7c 72 2e 70 75 73 68 28 5b 63 2e 49 4e 56 41 4c 49 44 5f 45 4d 41 49 4c 5d 29 3b 72 65 74 75 72 6e 7b 65 72 72 6f 72 73 3a 72 2c 69 6e 66 6f 73 3a 61 7d 7d 2c 70 3d 6e 28 22 49 35 30 2f 22 29 2c 62 3d 6e 28 22 36 51 7a 4e 22 29 3b 76 61 72 20 68 3d 65 3d 3e 4f 62 6a 65 63 74 28 62 2e 61 29 28 65 29 3f 65 2e 74 72 69 6d 28 29 3a 65 2c 67 3d 6e 28 22 72 34 36 49 22 29 2c 79 3d 6e 28 22 42 4c 42 4c 22 29 2c 76 3d 6e 28 22 73 42 6b 66 22 29 2c 45 3d 6e 28 22 41 39 71 67 22 29 2c 4f 3d 6e 28 22 69 37 53 46 22 29 2c 53 3d 6e 28 22 69 6a 48 70 22 29 2c 49 3d 6e 28 22 37 79 30 4f 22 29 2c 5f 3d 6e 28 22 32 67 32 76 22 29 2c 6a 3d 6e 2e 6e 28 5f 29 3b 63 6f 6e 73 74 20 6b 3d 28 7b 75 72 6c 3a 65 2c 70 6f 72 74 Data Ascii: IN,{domain:i}]);s\|\|r.push([c.INVALID_EMAIL]);return{errors:r,infos:a}},p=n("I50/"),b=n("6QzN");var h=e=>Object(b.a)(e)?e.trim():e,g=n("r46I"),y=n("BLBL"),v=n("sBkf"),E=n("A9qg"),O=n("i7SF"),S=n("ijHp"),I=n("7y0O"),_=n("2g2v"),j=n.n(_);const k=({url:e,port
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 28 6f 2e 77 29 28 61 29 2c 64 2e 72 65 73 75 62 73 63 72 69 62 65 64 29 3b 53 2e 73 6f 6d 65 28 65 3d 3e 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 2e 52 45 53 55 42 53 43 52 49 42 45 5f 4d 45 53 53 41 47 45 29 29 26 26 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 65 29 29 3b 6e 28 4f 62 6a 65 63 74 28 67 2e 63 29 28 5b 65 2c 4f 5d 29 29 3b 6e 28 4f 62 6a 65 63 74 28 67 2e 64 29 28 5b 65 2c 53 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 65 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 6f 6e 73 74 20 78 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 69 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 6c 3d 4f Data Ascii: (o.w)(a),d.resubscribed);S.some(e=>-1!==e.indexOf(c.RESUBSCRIBE_MESSAGE))&&n(Object(v.c)(E.e));n(Object(g.c)([e,O]));n(Object(g.d)([e,S]))};function R(e){return{type:r.e,payload:e}}const x=([e,t])=>(n,r)=>{const a=r(),i=Object(o.y)(a),s=Object(o.k)(a),l=O
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 7b 7d 2c 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 22 22 7d 2c 73 3d 28 65 2c 74 29 3d 3e 7b 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 73 75 62 6d 69 73 73 69 6f 6e 53 74 61 72 74 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6f 2c 7b 69 73 53 75 62 6d 69 74 74 69 6e 67 3a 21 30 2c 73 75 62 6d 69 73 73 69 6f 6e 41 74 74 65 6d 70 74 73 3a 65 2e 73 75 62 6d 69 73 73 69 6f 6e 41 74 74 65 6d 70 74 73 2b 31 2c 6c 61 73 74 53 75 62 6d 69 73 73 69 6f 6e 53 74 61 72 74 4d 73 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 29 3b 63 61 73 65 22 73 75 62 6d 69 73 73 69 6f 6e 53 75 63 63 65 73 73 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 Data Ascii: SubmissionError:{},formSubmissionWarning:""},s=(e,t)=>{switch(t.type){case"submissionStart":return Object.assign({},o,{isSubmitting:!0,submissionAttempts:e.submissionAttempts+1,lastSubmissionStartMs:Date.now()});case"submissionSuccess":return Object.assig
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 6f 72 43 6c 61 73 73 3a 4f 62 6a 65 63 74 28 75 2e 68 29 28 65 29 2c 69 73 45 72 72 6f 72 56 69 73 69 62 6c 65 3a 4f 62 6a 65 63 74 28 61 2e 63 29 28 65 2c 74 2c 6e 29 2c 69 73 4d 6f 62 69 6c 65 52 65 73 70 6f 6e 73 69 76 65 3a 4f 62 6a 65 63 74 28 75 2e 73 29 28 65 29 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 43 6c 61 73 73 3a 4f 62 6a 65 63 74 28 75 2e 69 29 28 65 29 2c 6c 61 62 65 6c 3a 4f 62 6a 65 63 74 28 6c 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c Data Ascii: orClass:Object(u.h)(e),isErrorVisible:Object(a.c)(e,t,n),isMobileResponsive:Object(u.s)(e),errorMessageClass:Object(u.i)(e),label:Object(l.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 6e 2d 6e 61 6d 65 22 3b 63 61 73 65 22 6a 6f 62 74 69 74 6c 65 22 3a 72 65 74 75 72 6e 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 74 69 74 6c 65 22 3b 63 61 73 65 22 6c 61 73 74 6e 61 6d 65 22 3a 72 65 74 75 72 6e 22 66 61 6d 69 6c 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 73 61 6c 75 74 61 74 69 6f 6e 22 3a 72 65 74 75 72 6e 22 68 6f 6e 6f 72 69 66 69 63 2d 70 72 65 66 69 78 22 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f Data Ascii: n-name";case"jobtitle":return"organization-title";case"lastname":return"family-name";case"salutation":return"honorific-prefix";case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"co
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 75 34 48 6f 22 29 3b 63 6f 6e 73 74 20 61 3d 5b 2f 74 69 6d 65 6f 75 74 20 65 78 63 65 65 64 65 64 2f 2c 2f 52 65 71 75 65 73 74 20 61 62 6f 72 74 65 64 2f 2c 2f 4e 65 74 77 6f 72 6b 20 45 72 72 6f 72 2f 2c 2f 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 73 65 6e 64 27 20 6f 6e 20 27 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 27 2f 2c 2f 55 6e 65 78 70 65 63 74 65 64 20 65 6e 64 20 6f 66 20 4a 53 4f 4e 20 69 6e 70 75 74 2f 2c 2f 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 2f 2c 2f 49 50 5f 41 44 44 52 45 53 53 5f 49 53 5f 50 52 4f 42 41 42 4c 59 5f 41 5f 42 4f 54 2f 2c 2f 53 55 42 4d 49 53 53 49 4f 4e 5f 50 45 52 49 4f 44 5f 45 4e 44 45 44 2f 2c 2f 52 41 54 45 5f 4c Data Ascii: n){"use strict";var r=n("u4Ho");const a=[/timeout exceeded/,/Request aborted/,/Network Error/,/Failed to execute 'send' on 'XMLHttpRequest'/,/Unexpected end of JSON input/,/Unexpected token/,/IP_ADDRESS_IS_PROBABLY_A_BOT/,/SUBMISSION_PERIOD_ENDED/,/RATE_L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	561	OUT	GET /wp-content/uploads/2023/10/logo-signaturit-group.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	478	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:59 GMT ETag: W/"65845b5f-235c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dbc3ab609ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	891	IN	Data Raw: 32 33 35 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 39 22 20 68 65 69 67 68 74 3d 22 31 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 39 20 31 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 39 2e 34 36 37 20 31 30 30 2e 37 34 32 43 31 35 38 2e 36 32 37 20 31 30 30 2e 37 34 32 20 31 36 34 2e 36 31 34 20 39 35 2e 35 32 32 34 20 31 36 34 2e 36 31 34 20 38 37 2e 34 33 37 31 56 38 30 2e 36 38 32 33 48 31 35 32 2e 35 4c 31 34 39 2e 34 31 36 20 38 37 2e 30 37 38 39 48 31 35 37 2e Data Ascii: 235c<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="299" height="113" viewBox="0 0 299 113" fill="none"> <path d="M149.467 100.742C158.627 100.742 164.614 95.5224 164.614 87.4371V80.6823H152.5L149.416 87.0789H157.
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 39 20 31 39 32 2e 35 37 34 20 31 30 30 2e 37 34 32 20 31 39 39 2e 34 33 32 20 31 30 30 2e 37 34 32 43 32 30 36 2e 32 38 39 20 31 30 30 2e 37 34 32 20 32 31 31 2e 32 30 31 20 39 36 2e 32 39 20 32 31 31 2e 32 30 31 20 38 39 2e 33 33 30 35 56 38 34 2e 33 31 35 36 43 32 31 31 2e 32 30 31 20 37 37 2e 33 35 36 31 20 32 30 36 2e 32 38 39 20 37 32 2e 39 30 34 31 20 31 39 39 2e 34 33 32 20 37 32 2e 39 30 34 31 43 31 39 32 2e 35 37 34 20 37 32 2e 39 30 34 31 20 31 38 37 2e 36 31 31 20 37 37 2e 33 35 36 31 20 31 38 37 2e 36 31 31 20 38 34 2e 33 31 35 36 5a 4d 31 39 34 2e 30 30 37 20 38 39 2e 33 33 30 35 56 38 34 2e 33 31 35 36 43 31 39 34 2e 30 30 37 20 38 31 2e 30 39 31 37 20 31 39 35 2e 39 30 31 20 37 39 2e 30 34 34 38 20 31 39 39 2e 34 33 32 20 37 39 2e 30 34 34 Data Ascii: 9 192.574 100.742 199.432 100.742C206.289 100.742 211.201 96.29 211.201 89.3305V84.3156C211.201 77.3561 206.289 72.9041 199.432 72.9041C192.574 72.9041 187.611 77.3561 187.611 84.3156ZM194.007 89.3305V84.3156C194.007 81.0917 195.901 79.0448 199.432 79.044
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 31 33 2e 33 37 34 35 48 32 35 31 2e 39 37 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 31 2e 36 37 37 31 20 31 36 2e 36 38 37 38 43 38 30 2e 37 33 31 36 20 31 35 2e 36 39 32 36 20 37 39 2e 36 34 35 36 20 31 34 2e 38 39 30 36 20 37 38 2e 34 32 32 20 31 34 2e 32 37 38 39 43 37 36 2e 34 32 32 37 20 31 33 2e 32 37 37 39 20 37 34 2e 30 36 30 33 20 31 32 2e 37 38 33 32 20 37 31 2e 33 34 36 37 20 31 32 2e 37 38 33 32 43 37 31 2e 31 33 36 20 31 32 2e 37 38 33 32 20 37 30 2e 39 32 35 32 20 31 32 2e 37 38 36 31 20 37 30 2e 37 31 37 34 20 31 32 2e 37 39 34 39 43 37 30 2e 37 30 32 37 20 31 32 2e 37 39 32 20 37 30 2e 36 38 38 31 20 31 32 2e 37 39 32 20 37 30 2e 36 37 33 35 20 31 32 2e 37 39 34 39 Data Ascii: 13.3745H251.97Z" fill="#030352"></path> <path d="M81.6771 16.6878C80.7316 15.6926 79.6456 14.8906 78.422 14.2789C76.4227 13.2779 74.0603 12.7832 71.3467 12.7832C71.136 12.7832 70.9252 12.7861 70.7174 12.7949C70.7027 12.792 70.6881 12.792 70.6735 12.7949
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 37 38 2e 33 30 34 39 20 33 35 2e 38 35 33 38 43 37 38 2e 33 30 32 20 33 35 2e 39 31 32 33 20 37 38 2e 32 39 33 32 20 33 35 2e 39 36 37 39 20 37 38 2e 32 38 31 35 20 33 36 2e 30 32 33 35 43 37 38 2e 30 32 31 20 33 37 2e 37 35 33 34 20 37 37 2e 33 38 38 37 20 33 39 2e 30 39 36 39 20 37 36 2e 33 39 33 34 20 34 30 2e 30 37 34 35 43 37 35 2e 32 37 32 32 20 34 31 2e 31 35 34 36 20 37 33 2e 37 38 35 32 20 34 31 2e 37 37 35 31 20 37 31 2e 39 34 31 20 34 31 2e 39 36 35 33 43 37 31 2e 38 30 39 33 20 34 31 2e 39 38 32 39 20 37 31 2e 36 37 37 35 20 34 31 2e 39 39 34 36 20 37 31 2e 35 34 32 39 20 34 32 2e 30 30 30 35 43 37 31 2e 32 35 36 20 34 32 2e 30 32 33 39 20 37 30 2e 39 36 30 33 20 34 32 2e 30 33 35 36 20 37 30 2e 36 35 38 38 20 34 32 2e 30 33 35 36 43 37 30 2e Data Ascii: 78.3049 35.8538C78.302 35.9123 78.2932 35.9679 78.2815 36.0235C78.021 37.7534 77.3887 39.0969 76.3934 40.0745C75.2722 41.1546 73.7852 41.7751 71.941 41.9653C71.8093 41.9829 71.6775 41.9946 71.5429 42.0005C71.256 42.0239 70.9603 42.0356 70.6588 42.0356C70.
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 31 2e 33 36 35 20 32 35 2e 34 32 30 31 56 34 38 2e 30 39 32 36 48 31 31 34 2e 33 33 39 56 32 36 2e 39 35 36 38 43 31 31 34 2e 33 32 32 20 32 34 2e 36 33 38 36 20 31 31 33 2e 37 32 38 20 32 32 2e 38 31 38 20 31 31 32 2e 35 31 20 32 31 2e 34 36 38 37 43 31 31 31 2e 32 37 32 20 32 30 2e 31 30 37 36 20 31 30 39 2e 34 32 37 20 31 39 2e 34 34 33 32 20 31 30 36 2e 39 31 39 20 31 39 2e 34 34 33 32 43 31 30 34 2e 36 39 34 20 31 39 2e 34 34 33 32 20 31 30 32 2e 38 38 38 20 32 30 2e 30 39 35 39 20 31 30 31 2e 34 39 32 20 32 31 2e 34 30 34 33 43 31 30 30 2e 30 38 39 20 32 32 2e 37 30 33 38 20 39 39 2e 33 39 38 35 20 32 34 2e 35 36 32 35 20 39 39 2e 33 39 38 35 20 32 36 2e 39 35 36 38 56 34 38 2e 30 39 32 36 48 39 32 2e 33 37 33 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 Data Ascii: 1.365 25.4201V48.0926H114.339V26.9568C114.322 24.6386 113.728 22.818 112.51 21.4687C111.272 20.1076 109.427 19.4432 106.919 19.4432C104.694 19.4432 102.888 20.0959 101.492 21.4043C100.089 22.7038 99.3985 24.5625 99.3985 26.9568V48.0926H92.373Z" fill="#030
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 37 48 31 39 37 2e 33 35 38 56 33 34 2e 36 34 34 35 43 31 39 37 2e 33 34 33 20 33 39 2e 36 33 35 20 31 39 39 2e 37 39 20 34 32 2e 31 35 38 31 20 32 30 34 2e 36 35 35 20 34 32 2e 31 35 38 31 43 32 30 39 2e 35 31 35 20 34 32 2e 31 35 32 32 20 32 31 31 2e 39 35 33 20 33 39 2e 36 35 32 36 20 32 31 31 2e 39 35 33 20 33 34 2e 36 34 34 35 56 31 33 2e 33 37 37 48 32 31 38 2e 39 37 38 56 33 35 2e 37 38 39 43 32 31 38 2e 39 36 37 20 33 39 2e 37 33 37 35 20 32 31 37 2e 37 32 20 34 32 2e 38 39 35 37 20 32 31 35 2e 32 30 32 20 34 35 2e 32 31 36 38 43 32 31 32 2e 36 37 33 20 34 37 2e 35 32 33 33 20 32 30 39 2e 31 36 39 20 34 38 2e 36 39 37 20 32 30 34 2e 36 35 35 20 34 38 2e 36 39 37 43 32 30 30 2e 31 33 33 20 34 38 2e 36 38 38 32 20 31 39 36 2e 36 32 33 20 34 37 2e 35 Data Ascii: 7H197.358V34.6445C197.343 39.635 199.79 42.1581 204.655 42.1581C209.515 42.1522 211.953 39.6526 211.953 34.6445V13.377H218.978V35.789C218.967 39.7375 217.72 42.8957 215.202 45.2168C212.673 47.5233 209.169 48.697 204.655 48.697C200.133 48.6882 196.623 47.5
2024-04-24 12:32:27 UTC	1324	IN	Data Raw: 34 37 37 20 33 31 2e 34 32 32 35 20 32 36 2e 30 37 33 34 20 33 30 2e 34 30 33 39 43 32 34 2e 39 38 34 34 20 32 39 2e 33 37 30 37 20 32 33 2e 33 35 31 20 32 38 2e 36 31 32 36 20 32 31 2e 31 33 35 20 32 38 2e 30 39 31 36 4c 31 33 2e 39 31 33 34 20 32 36 2e 33 36 31 37 43 31 30 2e 30 36 31 31 20 32 35 2e 34 30 34 36 20 37 2e 31 31 36 32 34 20 32 33 2e 39 31 34 38 20 35 2e 30 37 30 30 36 20 32 31 2e 38 38 33 34 43 33 2e 30 31 35 31 31 20 31 39 2e 38 34 30 34 20 32 2e 30 30 32 32 36 20 31 37 2e 31 30 33 36 20 32 2e 30 30 32 32 36 20 31 33 2e 36 32 39 33 43 31 2e 39 38 34 37 20 39 2e 36 36 36 31 35 20 33 2e 34 34 35 34 32 20 36 2e 34 35 35 32 34 20 36 2e 33 33 34 36 35 20 33 2e 39 37 36 30 37 43 39 2e 31 39 34 36 31 20 31 2e 34 39 33 39 38 20 31 33 2e 31 30 35 Data Ascii: 477 31.4225 26.0734 30.4039C24.9844 29.3707 23.351 28.6126 21.135 28.0916L13.9134 26.3617C10.0611 25.4046 7.11624 23.9148 5.07006 21.8834C3.01511 19.8404 2.00226 17.1036 2.00226 13.6293C1.9847 9.66615 3.44542 6.45524 6.33465 3.97607C9.19461 1.49398 13.105
2024-04-24 12:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49802	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	567	OUT	GET /wp-content/uploads/2023/11/simple-electronic-signature.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:27 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:27 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-e14" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dbc39d80ad3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:27 UTC	892	IN	Data Raw: 65 31 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 32 31 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: e14<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7211" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:27 UTC	1369	IN	Data Raw: 38 33 20 31 35 2e 35 31 36 37 20 31 37 2e 37 38 33 33 20 31 35 2e 31 34 31 37 20 31 37 2e 32 35 20 31 34 2e 38 32 35 4c 31 35 2e 37 37 35 20 31 36 2e 33 43 31 36 2e 31 35 38 33 20 31 36 2e 34 36 36 37 20 31 36 2e 34 35 38 33 20 31 36 2e 36 35 20 31 36 2e 36 37 35 20 31 36 2e 38 35 43 31 36 2e 38 39 31 37 20 31 37 2e 30 35 20 31 37 20 31 37 2e 32 36 36 37 20 31 37 20 31 37 2e 35 43 31 37 20 31 37 2e 38 38 33 33 20 31 36 2e 36 39 35 38 20 31 38 2e 32 32 39 32 20 31 36 2e 30 38 37 35 20 31 38 2e 35 33 37 35 43 31 35 2e 34 37 39 32 20 31 38 2e 38 34 35 38 20 31 34 2e 37 38 33 33 20 31 39 20 31 34 20 31 39 43 31 33 2e 37 31 36 37 20 31 39 20 31 33 2e 34 37 39 32 20 31 39 2e 30 39 35 38 20 31 33 2e 32 38 37 35 20 31 39 2e 32 38 37 35 43 31 33 2e 30 39 35 38 20 Data Ascii: 83 15.5167 17.7833 15.1417 17.25 14.825L15.775 16.3C16.1583 16.4667 16.4583 16.65 16.675 16.85C16.8917 17.05 17 17.2667 17 17.5C17 17.8833 16.6958 18.2292 16.0875 18.5375C15.4792 18.8458 14.7833 19 14 19C13.7167 19 13.4792 19.0958 13.2875 19.2875C13.0958
2024-04-24 12:32:27 UTC	1350	IN	Data Raw: 39 20 31 37 2e 35 43 31 39 20 31 36 2e 39 20 31 38 2e 38 34 31 37 20 31 36 2e 33 38 33 33 20 31 38 2e 35 32 35 20 31 35 2e 39 35 43 31 38 2e 32 30 38 33 20 31 35 2e 35 31 36 37 20 31 37 2e 37 38 33 33 20 31 35 2e 31 34 31 37 20 31 37 2e 32 35 20 31 34 2e 38 32 35 4c 31 35 2e 37 37 35 20 31 36 2e 33 43 31 36 2e 31 35 38 33 20 31 36 2e 34 36 36 37 20 31 36 2e 34 35 38 33 20 31 36 2e 36 35 20 31 36 2e 36 37 35 20 31 36 2e 38 35 43 31 36 2e 38 39 31 37 20 31 37 2e 30 35 20 31 37 20 31 37 2e 32 36 36 37 20 31 37 20 31 37 2e 35 43 31 37 20 31 37 2e 38 38 33 33 20 31 36 2e 36 39 35 38 20 31 38 2e 32 32 39 32 20 31 36 2e 30 38 37 35 20 31 38 2e 35 33 37 35 43 31 35 2e 34 37 39 32 20 31 38 2e 38 34 35 38 20 31 34 2e 37 38 33 33 20 31 39 20 31 34 20 31 39 43 31 33 Data Ascii: 9 17.5C19 16.9 18.8417 16.3833 18.525 15.95C18.2083 15.5167 17.7833 15.1417 17.25 14.825L15.775 16.3C16.1583 16.4667 16.4583 16.65 16.675 16.85C16.8917 17.05 17 17.2667 17 17.5C17 17.8833 16.6958 18.2292 16.0875 18.5375C15.4792 18.8458 14.7833 19 14 19C13
2024-04-24 12:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49806	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	821	OUT	GET /wp-content/uploads/2023/11/qualified-electronic-signature.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-c3d" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dbf2b9609fb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	900	IN	Data Raw: 63 33 64 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 32 33 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: c3d<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7232" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 38 20 31 32 2e 34 32 30 37 20 31 37 2e 31 37 37 31 20 31 32 2e 30 35 36 4c 32 31 2e 34 20 37 2e 38 32 35 43 32 31 2e 36 20 37 2e 36 32 35 20 32 31 2e 37 35 20 37 2e 34 20 32 31 2e 38 35 20 37 2e 31 35 43 32 31 2e 39 35 20 36 2e 39 20 32 32 20 36 2e 36 35 20 32 32 20 36 2e 34 43 32 32 20 36 2e 31 33 33 33 33 20 32 31 2e 39 35 20 35 2e 38 37 39 31 37 20 32 31 2e 38 35 20 35 2e 36 33 37 35 43 32 31 2e 37 35 20 35 2e 33 39 35 38 33 20 32 31 2e 36 20 35 2e 31 38 33 33 33 20 32 31 2e 34 20 35 4c 32 30 20 33 2e 36 43 31 39 2e 38 31 36 37 20 33 2e 34 20 31 39 2e 36 30 34 32 20 33 2e 32 35 20 31 39 2e 33 36 32 35 20 33 2e 31 35 43 31 39 2e 31 32 30 38 20 33 2e 30 35 20 31 38 2e 38 36 36 37 20 33 20 31 38 2e 36 20 33 43 31 38 2e 33 35 20 33 20 31 38 2e 31 20 33 2e Data Ascii: 8 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625 21.75 7.4 21.85 7.15C21.95 6.9 22 6.65 22 6.4C22 6.13333 21.95 5.87917 21.85 5.6375C21.75 5.39583 21.6 5.18333 21.4 5L20 3.6C19.8167 3.4 19.6042 3.25 19.3625 3.15C19.1208 3.05 18.8667 3 18.6 3C18.35 3 18.1 3.
2024-04-24 12:32:28 UTC	871	IN	Data Raw: 30 39 35 38 33 20 31 31 2e 32 39 35 38 20 35 20 31 31 2e 31 35 20 35 20 31 31 43 35 20 31 30 2e 38 20 35 2e 31 35 20 31 30 2e 36 20 35 2e 34 35 20 31 30 2e 34 43 35 2e 37 35 20 31 30 2e 32 20 36 2e 33 38 33 33 33 20 39 2e 38 39 31 36 37 20 37 2e 33 35 20 39 2e 34 37 35 43 38 2e 38 31 36 36 37 20 38 2e 38 34 31 36 37 20 39 2e 37 39 31 36 37 20 38 2e 32 36 36 36 37 20 31 30 2e 32 37 35 20 37 2e 37 35 43 31 30 2e 37 35 38 33 20 37 2e 32 33 33 33 33 20 31 31 20 36 2e 36 35 20 31 31 20 36 43 31 31 20 35 2e 30 38 33 33 33 20 31 30 2e 36 33 33 33 20 34 2e 33 35 34 31 37 20 39 2e 39 20 33 2e 38 31 32 35 43 39 2e 31 36 36 36 37 20 33 2e 32 37 30 38 33 20 38 2e 32 20 33 20 37 20 33 43 36 2e 32 35 20 33 20 35 2e 35 37 39 31 37 20 33 2e 31 33 33 33 33 20 34 2e 39 38 Data Ascii: 09583 11.2958 5 11.15 5 11C5 10.8 5.15 10.6 5.45 10.4C5.75 10.2 6.38333 9.89167 7.35 9.475C8.81667 8.84167 9.79167 8.26667 10.275 7.75C10.7583 7.23333 11 6.65 11 6C11 5.08333 10.6333 4.35417 9.9 3.8125C9.16667 3.27083 8.2 3 7 3C6.25 3 5.57917 3.13333 4.98
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49805	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	801	OUT	GET /wp-content/uploads/2023/11/signaturit.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-3ae" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dbf2ce409ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	900	IN	Data Raw: 33 61 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 36 37 39 37 20 37 2e 31 36 39 39 38 48 31 36 2e 36 39 35 37 56 31 36 2e 38 33 48 31 34 2e 36 37 39 37 56 37 2e 31 36 Data Ascii: 3ae<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M14.6797 7.16998H16.6957V16.83H14.6797V7.16
2024-04-24 12:32:28 UTC	49	IN	Data Raw: 20 37 2e 33 30 32 37 33 20 31 36 2e 36 39 5a 22 20 66 69 6c 6c 3d 22 23 46 41 46 41 46 46 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 7.30273 16.69Z" fill="#FAFAFF"></path></svg>
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49804	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	758	OUT	GET /wp-content/themes/signaturit/js/theme.js?v=fix-anchor-0404 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	480	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 04 Apr 2024 11:27:26 GMT ETag: W/"660e8e9e-490cb" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dbf2b2209f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	889	IN	Data Raw: 37 64 64 33 0d 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 47 45 4e 45 52 49 43 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 09 2f 2a 20 50 4f 50 55 50 53 20 2a 2f 0a 09 24 28 27 61 5b 68 72 65 66 5e 3d 22 23 22 5d 3a 6e 6f 74 28 5b 68 72 65 66 3d 22 23 22 5d 29 27 29 2e 6e 6f 74 28 24 28 22 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 3e 61 22 29 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 74 65 78 74 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 68 72 65 66 27 29 3b 0a 09 09 69 66 28 20 24 28 74 65 78 74 2b 27 2e 70 6f 70 75 Data Ascii: 7dd3$(function() {/****************************** GENERIC *****************************// POPUPS */$('a[href^="#"]:not([href="#"])').not($(".menu-item-has-children>a")).each(function(){var text = $(this).attr('href');if( $(text+'.popu
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 70 29 2e 61 64 64 43 6c 61 73 73 28 27 6f 70 65 6e 65 64 27 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 29 3b 0a 09 09 09 09 0a 09 09 09 7d 29 3b 0a 09 09 7d 0a 09 09 69 66 28 20 24 28 27 2e 70 6f 70 75 70 5b 65 78 69 74 5d 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 7b 0a 09 09 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6d 6f 75 73 65 6c 65 61 76 65 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 24 28 27 2e 70 6f 70 75 70 5b 65 78 69 74 5d 3a 6e 6f 74 28 2e 6f 70 65 6e 65 64 29 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 09 6c 65 74 20 70 6f 70 75 70 20 3d 20 24 28 74 68 69 73 29 3b 0a 09 09 09 09 09 24 2e 66 61 6e 63 79 62 6f 78 2e 6f 70 65 6e 28 7b 0a 09 09 09 09 09 09 73 72 63 3a 20 70 6f 70 75 70 2c 0a 09 09 09 09 09 Data Ascii: p).addClass('opened');}});});}if( $('.popup[exit]').length > 0 ){$(document).mouseleave(function() {$('.popup[exit]:not(.opened)').each(function(){let popup = $(this);$.fancybox.open({src: popup,
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 6f 6d 4f 66 66 73 65 74 29 7b 0a 09 09 09 24 28 27 2e 6d 61 69 6e 2d 68 65 61 64 65 72 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 61 69 6e 2d 68 65 61 64 65 72 2d 2d 66 69 78 65 64 27 29 3b 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 0a 09 09 09 09 24 28 27 2e 6d 61 69 6e 2d 68 65 61 64 65 72 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 61 69 6e 2d 68 65 61 64 65 72 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6f 6e 27 29 3b 0a 09 09 09 7d 2c 20 32 30 30 29 3b 0a 09 09 7d 0a 09 09 65 6c 73 65 20 69 66 28 24 28 27 2e 6d 61 69 6e 2d 68 65 61 64 65 72 27 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 61 69 6e 2d 68 65 61 64 65 72 2d 2d 66 69 78 65 64 27 29 20 7c 7c 20 24 28 27 2e 6d 61 69 6e 2d 68 65 61 64 65 72 27 29 2e 68 61 73 43 6c 61 Data Ascii: omOffset){$('.main-header').addClass('main-header--fixed');setTimeout(function(){ $('.main-header').addClass('main-header--transition-on');}, 200);}else if($('.main-header').hasClass('main-header--fixed') \|\| $('.main-header').hasCla
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 20 3d 20 77 69 6e 64 6f 77 57 69 64 74 68 20 2b 20 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3b 0a 09 09 69 66 20 28 61 64 6a 75 73 74 65 64 57 69 64 74 68 20 20 3e 20 6d 65 6e 75 52 65 73 70 6f 6e 73 69 76 65 29 20 7b 0a 09 09 09 24 28 27 2e 6d 61 69 6e 2d 6d 65 6e 75 3e 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 27 29 2e 68 6f 76 65 72 28 0a 09 09 09 20 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 27 73 75 62 2d 6d 65 6e 75 2d 2d 6f 70 65 6e 27 29 3b 0a 09 09 09 20 20 09 76 61 72 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 73 75 62 2d 6d 65 6e 75 27 29 3b 0a 09 09 09 20 20 09 65 6c 65 6d 65 6e 74 2e 73 68 6f 77 28 29 3b 0a 09 09 09 09 Data Ascii: = windowWidth + scrollbarWidth;if (adjustedWidth > menuResponsive) {$('.main-menu>.menu-item-has-children').hover( function() {$(this).addClass('sub-menu--open'); var element = $(this).find('.sub-menu'); element.show();
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 4f 4f 54 45 52 20 52 45 53 50 4f 4e 53 49 56 45 20 2a 2f 0a 09 24 28 20 77 69 6e 64 6f 77 20 29 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 69 66 28 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 20 3e 20 66 6f 6f 74 65 72 52 65 73 70 6f 6e 73 69 76 65 29 7b 0a 09 09 09 24 28 27 2e 66 6f 6f 74 65 72 2d 6d 65 6e 75 20 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 2e 73 75 62 2d 6d 65 6e 75 27 29 2e 73 68 6f 77 28 29 3b 0a 09 09 09 24 28 27 2e 66 6f 6f 74 65 72 2d 6d 65 6e 75 20 2e 73 65 63 74 69 6f 6e 2d 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 27 29 2e 73 68 6f 77 28 29 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 09 24 28 27 2e 66 6f 6f 74 65 72 2d 6d 65 6e 75 20 6c 69 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 Data Ascii: OOTER RESPONSIVE */$( window ).resize(function() {if($(window).width() > footerResponsive){$('.footer-menu .menu-item-has-children .sub-menu').show();$('.footer-menu .section-menu .sub-menu').show();}});$('.footer-menu li.menu-item-has
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 3d 30 5d 27 29 2e 68 69 64 65 28 29 3b 0a 09 09 09 24 28 27 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 6d 61 67 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6e 6f 74 2d 6c 6f 61 64 65 64 27 29 3b 0a 09 09 09 69 74 65 6d 73 49 6d 61 67 65 73 42 65 68 61 76 69 6f 75 72 28 29 3b 0a 09 09 09 24 28 27 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 20 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 74 65 6d 3a 66 69 72 73 74 27 29 2e 63 6c 69 63 6b 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 09 09 24 28 27 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 74 65 6d 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 69 66 28 21 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 29 7b 0a 09 09 09 09 24 28 74 68 Data Ascii: =0]').hide();$('.toggle-items__image').removeClass('not-loaded');itemsImagesBehaviour();$('.toggle-items .toggle-items__item:first').click(); });$('.toggle-items__item').click(function(){if(!$(this).hasClass('active')){$(th
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 6d 61 67 65 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 6c 65 74 20 69 6e 64 65 78 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 6e 64 65 78 27 29 3b 0a 09 09 09 09 6c 65 74 20 65 6c 65 6d 20 3d 20 24 28 74 68 69 73 29 3b 0a 09 09 09 09 6c 65 74 20 64 65 73 6b 74 6f 70 43 6f 6e 74 61 69 6e 65 72 20 3d 20 24 28 27 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 6d 61 67 65 73 27 29 3b 0a 09 09 09 09 6c 65 74 20 6d 6f 62 69 6c 65 43 6f 6e 74 61 69 6e 65 72 20 3d 20 24 28 27 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 74 65 6d 5b 69 6e 64 65 78 3d 27 2b 69 6e 64 65 78 2b 27 5d 27 29 2e 66 69 6e 64 28 27 2e 74 6f 67 67 6c 65 2d 69 74 65 6d 73 5f 5f 69 6d 61 67 65 2d 72 65 73 70 6f Data Ascii: ggle-items__image').each(function(){let index = $(this).attr('index');let elem = $(this);let desktopContainer = $('.toggle-items__images');let mobileContainer = $('.toggle-items__item[index='+index+']').find('.toggle-items__image-respo
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 73 5f 5f 71 75 65 73 74 69 6f 6e 2d 74 65 78 74 27 29 2e 73 6c 69 64 65 54 6f 67 67 6c 65 28 29 3b 0a 09 09 09 24 28 27 2e 66 61 71 73 5f 5f 71 75 65 73 74 69 6f 6e 2d 74 69 74 6c 65 27 29 2e 6e 6f 74 28 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 66 61 71 73 5f 5f 71 75 65 73 74 69 6f 6e 2d 74 65 78 74 27 29 2e 73 6c 69 64 65 55 70 28 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 0a 09 2f 2a 20 49 4e 46 4f 20 54 41 42 53 20 2a 2f 0a 09 69 66 28 20 24 28 27 2e 69 6e 66 6f 2d 74 61 62 73 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 7b 0a 09 09 24 28 27 2e 69 6e 66 6f 2d 74 61 62 73 5f 5f 74 61 62 2d 73 65 6c 65 63 74 6f 72 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 69 66 28 21 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 Data Ascii: s__question-text').slideToggle();$('.faqs__question-title').not(this).siblings('.faqs__question-text').slideUp();});}/* INFO TABS */if( $('.info-tabs').length > 0 ){$('.info-tabs__tab-selector').click(function(){if(!$(this).hasClass('
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 2e 31 35 73 20 6c 69 6e 65 61 72 27 29 3b 0a 09 09 09 20 20 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 0a 09 09 09 09 09 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 27 73 75 62 2d 6d 65 6e 75 2d 2d 61 63 74 69 76 65 27 29 3b 0a 09 09 09 09 7d 2c 20 31 30 30 29 3b 0a 09 09 09 7d 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 73 75 62 2d 6d 65 6e 75 2d 2d 6f 70 65 6e 27 29 3b 0a 09 09 09 09 76 61 72 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 63 61 72 64 73 2d 6c 69 73 74 5f 5f 66 69 6c 74 65 72 2d 73 65 6c 65 63 74 2d 6d 65 6e 75 27 29 3b 0a 09 09 09 09 65 6c 65 6d 65 6e 74 2e 68 69 64 65 28 29 3b 0a 09 09 09 09 73 Data Ascii: .15s linear'); setTimeout(function(){ element.addClass('sub-menu--active');}, 100);}, function() {$(this).removeClass('sub-menu--open');var element = $(this).find('.cards-list__filter-select-menu');element.hide();s
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 70 72 65 76 48 32 4c 69 73 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 69 6e 64 65 78 20 3d 20 30 3b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 24 28 22 2e 70 6f 73 74 2d 63 6f 6e 74 65 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 68 32 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 61 6e 63 68 6f 72 20 3d 20 22 3c 61 20 61 6e 63 68 6f 72 3d 27 22 20 2b 20 69 6e 64 65 78 20 2b 20 22 27 3e 3c 2f 61 3e 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 62 65 66 6f 72 65 28 61 6e 63 68 6f 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 6c 69 20 3d 20 22 3c 61 20 63 6c 61 73 73 3d 27 70 6f 73 74 2d Data Ascii: null; let prevH2List = null; let index = 0; $(".post-content__content h2").each(function() { let anchor = "<a anchor='" + index + "'></a>"; $(this).before(anchor); let li = "<a class='post-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49807	104.22.71.197	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	583	OUT	GET /menu/modules/core.BRQnzO8v.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:28 UTC	871	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: application/javascript Content-Length: 71454 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable ETag: "25da5432b1057724b8210f17e9b9db05" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y4v6vAPpTnBAOtZJ8qKyW0rb9OLj%2Bi0d2K8mSj61AtOXtHhBpss5U8S5WOU5CHt6h%2Br%2FuVlnkES30ynvurorQmlFBQ%2BeFn5v0PiEIsI%2FJA5Fg2C3SMb%2Bswnfza6rLXThD2s%2Fcmch"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961dbfcb7509f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	498	IN	Data Raw: 63 6f 6e 73 74 20 74 3d 22 2e 42 52 51 6e 7a 4f 38 76 22 2c 4a 3d 77 69 6e 64 6f 77 2c 4b 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 58 3d 76 6f 69 64 20 30 3b 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 3b 76 61 72 20 65 3d 7b 6c 6f 63 61 6c 69 7a 65 3a 4a 2e 61 32 61 5f 6c 6f 63 61 6c 69 7a 65 7c 7c 7b 7d 2c 73 74 61 74 69 63 5f 73 65 72 76 65 72 3a 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 2e 73 74 61 74 69 63 5f 73 65 72 76 65 72 7c 7c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 61 64 64 74 6f 61 6e 79 2e 63 6f 6d 2f 6d 65 6e 75 22 2c 74 65 6d 70 6c 61 74 65 73 3a 7b 7d 2c 6e 61 74 69 76 65 3a 58 2c 6f 6e 63 6c 69 63 6b 3a 32 2c 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 58 2c 74 72 61 Data Ascii: const t=".BRQnzO8v",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,tra
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 3a 38 2c 70 72 69 6f 72 69 74 69 7a 65 3a 58 2c 65 78 63 6c 75 64 65 5f 73 65 72 76 69 63 65 73 3a 58 2c 63 75 73 74 6f 6d 5f 73 65 72 76 69 63 65 73 3a 58 2c 64 65 6c 61 79 3a 30 2c 73 68 6f 77 5f 6d 65 6e 75 3a 58 2c 62 6f 6f 6b 6d 61 72 6b 6c 65 74 3a 58 7d 2c 6d 3d 7b 6c 69 6e 6b 6d 65 64 69 61 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 3a 58 2c 6c 69 6e 6b 75 72 6c 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 5f 65 73 63 61 70 65 3a 58 2c 6d 65 6e 75 5f 74 79 70 65 3a 58 2c 74 61 72 67 65 74 3a 58 7d 2c 5a 3d 7b 2e 2e 2e 65 2c 2e 2e 2e 4c 2c 2e 2e 2e 6d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 29 5a 5b 65 5d 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 5b 65 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f Data Ascii: :8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},v=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=functio
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 30 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 75 72 6c 3a 22 6d 61 69 6c 74 6f 3a 3f 73 75 62 6a 65 63 74 3d 24 7b 74 69 74 6c 65 7d 26 62 6f 64 79 3d 24 7b 6c 69 6e 6b 7d 22 7d 5d 2c 5b 22 50 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 65 36 30 30 32 33 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 6a 73 2f 70 69 6e 6d 61 72 6b 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d 5d 2c 5b 22 54 65 6c 65 67 72 61 6d 22 2c 22 74 65 6c 65 67 72 61 6d 22 2c 22 74 65 6c 65 67 72 61 6d 22 Data Ascii: 0A",{pu:1,na:1}],["Email","email","email","888990",{url:"mailto:?subject=${title}&body=${link}"}],["Pinterest","pinterest","pinterest","e60023",{type:"js",src:"https://assets.pinterest.com/js/pinmarklet.js",media:1,pu:1}],["Telegram","telegram","telegram"
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 7d 27 29 22 7d 5d 2c 5b 22 44 69 61 72 79 2e 52 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 39 31 32 44 33 31 22 5d 2c 5b 22 44 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 32 45 33 34 33 36 22 5d 2c 5b 22 44 69 67 67 22 2c 22 64 69 67 67 22 2c 22 64 69 67 67 22 2c 22 31 41 31 41 31 41 22 5d 2c 5b 22 44 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 34 41 38 42 43 41 22 5d 2c 5b 22 44 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 30 37 31 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 44 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 6d 22 2c 22 46 36 30 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 45 Data Ascii: }')"}],["Diary.Ru","diary_ru","diary_ru","912D31"],["Diaspora","diaspora","diaspora","2E3436"],["Digg","digg","digg","1A1A1A"],["Diigo","diigo","diigo","4A8BCA"],["Douban","douban","douban","071",{pu:1}],["Draugiem","draugiem","draugiem","F60",{pu:1}],["E
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 79 22 2c 22 70 61 70 61 6c 79 22 2c 22 33 41 43 30 46 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 69 6e 62 6f 61 72 64 22 2c 22 70 69 6e 62 6f 61 72 64 22 2c 22 70 69 6e 62 6f 61 72 64 22 2c 22 31 33 34 31 44 45 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 43 46 36 38 32 46 22 5d 2c 5b 22 50 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 6a 61 76 61 73 63 72 69 70 74 3a 70 72 69 6e 74 28 29 22 7d 5d 2c 5b 22 50 72 69 6e 74 46 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 36 44 39 46 30 30 22 5d 2c 5b 22 50 75 73 68 61 22 2c Data Ascii: y","papaly","3AC0F6",{pu:1}],["Pinboard","pinboard","pinboard","1341DE",{pu:1}],["Plurk","plurk","plurk","CF682F"],["Print","print","print","888990",{type:"js",src:"javascript:print()"}],["PrintFriendly","printfriendly","printfriendly","6D9F00"],["Pusha",
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 41 39 22 5d 2c 5b 22 58 22 2c 22 78 22 2c 22 78 22 2c 22 31 41 31 41 31 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 58 49 4e 47 22 2c 22 78 69 6e 67 22 2c 22 78 69 6e 67 22 2c 22 31 36 35 42 36 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 59 61 68 6f 6f 20 4d 61 69 6c 22 2c 22 79 61 68 6f 6f 5f 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 34 30 30 30 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 59 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 45 31 36 31 32 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 75 6d 6d 6c 79 2e 63 6f 6d 2f 6a 73 2f 79 75 6d 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d 5d 5d 2c 65 6d 61 69 6c 3a 5b 5b 22 45 Data Ascii: A9"],["X","x","x","1A1A1A",{pu:1,na:1}],["XING","xing","xing","165B66",{pu:1}],["Yahoo Mail","yahoo_mail","yahoo","400090",{type:"email"}],["Yummly","yummly","yummly","E16120",{type:"js",src:"https://www.yummly.com/js/yumlet.js",media:1,pu:1}]],email:[["E
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 42 32 33 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 5d 7d 7d 2c 65 65 3d 28 28 63 65 3d 52 2e 70 61 67 65 2e 6d 6f 73 74 2e 63 6f 6e 63 61 74 28 52 2e 66 65 65 64 2e 6d 6f 73 74 29 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 69 2e 70 75 73 68 28 65 5b 32 5d 29 29 2c 7b 61 70 70 6c 65 5f 6d 75 73 69 63 3a 7b 6e 61 6d 65 3a 22 41 70 70 6c 65 20 4d 75 73 69 63 22 2c 69 63 6f 6e 3a 22 61 70 70 6c 65 5f 6d 75 73 69 63 22 2c 63 6f 6c 6f 72 3a 22 66 61 32 33 33 62 22 7d 2c 62 65 68 61 6e 63 65 3a 7b 6e 61 6d 65 3a 22 42 65 68 61 6e 63 65 22 2c 69 63 6f 6e 3a 22 62 65 68 61 6e 63 65 22 2c 63 6f 6c 6f 72 3a 22 30 30 37 45 46 46 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 68 61 6e 63 65 2e 6e 65 74 2f 24 7b 69 64 7d 22 7d 2c 62 6c 75 65 73 6b Data Ascii: B23",{type:"email"}]]}},ee=((ce=R.page.most.concat(R.feed.most)).forEach(e=>i.push(e[2])),{apple_music:{name:"Apple Music",icon:"apple_music",color:"fa233b"},behance:{name:"Behance",icon:"behance",color:"007EFF",url:"https://www.behance.net/${id}"},bluesk
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 6d 2f 24 7b 69 64 7d 22 7d 2c 73 6e 61 70 63 68 61 74 3a 7b 6e 61 6d 65 3a 22 53 6e 61 70 63 68 61 74 22 2c 69 63 6f 6e 3a 22 73 6e 61 70 63 68 61 74 22 2c 63 6f 6c 6f 72 3a 22 32 41 32 41 32 41 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6e 61 70 63 68 61 74 2e 63 6f 6d 2f 61 64 64 2f 24 7b 69 64 7d 22 7d 2c 73 6f 75 6e 64 63 6c 6f 75 64 3a 7b 6e 61 6d 65 3a 22 53 6f 75 6e 64 43 6c 6f 75 64 22 2c 69 63 6f 6e 3a 22 73 6f 75 6e 64 63 6c 6f 75 64 22 2c 63 6f 6c 6f 72 3a 22 66 66 35 35 30 30 22 7d 2c 73 70 6f 74 69 66 79 3a 7b 6e 61 6d 65 3a 22 53 70 6f 74 69 66 79 22 2c 69 63 6f 6e 3a 22 73 70 6f 74 69 66 79 22 2c 63 6f 6c 6f 72 3a 22 31 65 64 37 36 30 22 7d 2c 74 68 72 65 61 64 73 3a 7b 6e 61 6d 65 3a 22 54 68 72 65 61 64 73 22 2c 69 63 6f Data Ascii: m/${id}"},snapchat:{name:"Snapchat",icon:"snapchat",color:"2A2A2A",url:"https://www.snapchat.com/add/${id}"},soundcloud:{name:"SoundCloud",icon:"soundcloud",color:"ff5500"},spotify:{name:"Spotify",icon:"spotify",color:"1ed760"},threads:{name:"Threads",ico
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 4a 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 2c 61 3d 7b 7d 29 7b 76 28 29 3b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 72 2c 6c 2c 73 3d 5a 2c 63 3d 7b 7d 2c 64 3d 6e 75 6c 6c 2c 70 3d 7b 7d 2c 75 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 66 6f 72 28 74 20 69 6e 20 72 61 28 65 29 2c 61 29 73 5b 74 5d 3d 61 5b 74 5d 3b 66 6f 72 28 74 20 69 6e 20 73 29 63 5b 74 5d 3d 73 5b 74 5d 3b 69 66 28 6e 3d 73 2e 74 61 72 67 65 74 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e Data Ascii: EventListener&&(K.addEventListener("DOMContentLoaded",t,!1),J.addEventListener("load",t,!1))}};function ae(e,a={}){v();var t,n,o,i,r,l,s=Z,c={},d=null,p={},u=location.href;for(t in ra(e),a)s[t]=a[t];for(t in s)c[t]=s[t];if(n=s.target)if("string"==typeof n
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 6d 70 6c 69 63 69 74 3d 21 31 29 2c 6c 26 26 28 6e 2e 6c 69 6e 6b 75 72 6c 5f 69 6d 70 6c 69 63 69 74 3d 21 31 29 2c 22 74 65 78 74 43 6f 6e 74 65 6e 74 22 69 6e 20 4b 3f 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 3a 70 2e 69 6e 6e 65 72 54 65 78 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 2c 28 69 3d 70 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 3d 69 2e 6e 6f 64 65 56 61 6c 75 65 29 2c 64 2e 61 32 61 5f 6b 69 74 3f 71 28 6e 2c 6f 29 3a 57 28 6e 29 29 3a 75 2e 73 68 6f 77 5f 6d 65 6e 75 7c 7c 6a 2d 2d 2c 59 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 50 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3c 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 61 32 61 5f 66 6f 6c 6c Data Ascii: mplicit=!1),l&&(n.linkurl_implicit=!1),"textContent"in K?p.textContent=n.linkname:p.innerText=n.linkname,(i=p.childNodes[0])&&(n.linkname=i.nodeValue),d.a2a_kit?q(n,o):W(n)):u.show_menu\|\|j--,Y()}function r(a){P(function(e){0<=e.className.indexOf("a2a_foll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49808	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	561	OUT	GET /wp-content/themes/signaturit/images/chevron-down.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	430	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:36:43 GMT ETag: W/"65845b8b-f0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dc05e690acd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	246	IN	Data Raw: 66 30 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 2e 33 31 32 31 20 30 2e 33 39 39 39 39 34 4c 36 2e 39 30 32 31 20 34 2e 39 37 39 39 39 4c 31 31 2e 34 39 32 31 20 30 2e 33 39 39 39 39 34 4c 31 32 2e 39 30 32 31 20 31 2e 38 30 39 39 39 4c 36 2e 39 30 32 31 20 37 2e 38 30 39 39 39 4c 30 2e 39 30 32 31 20 31 2e 38 30 39 39 39 4c 32 2e 33 31 32 31 20 30 2e 33 39 39 39 39 34 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: f0<svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M2.3121 0.399994L6.9021 4.97999L11.4921 0.399994L12.9021 1.80999L6.9021 7.80999L0.9021 1.80999L2.3121 0.399994Z" fill="#030352"/></svg>
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49809	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:27 UTC	569	OUT	GET /wp-content/uploads/2023/11/advanced-electronic-signature.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:46 GMT ETag: W/"65845b52-c77" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dc06b8b0add-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	892	IN	Data Raw: 63 37 37 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 32 31 39 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: c77<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7219" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:28 UTC	1369	IN	Data Raw: 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 20 31 36 2e 37 35 56 32 31 48 38 2e 32 35 4c 31 32 2e 30 35 34 34 20 31 37 2e 31 38 38 33 43 31 32 2e 34 31 34 32 20 31 34 2e 35 32 37 37 20 31 34 2e 35 31 38 20 31 32 2e 34 32 30 37 20 31 37 2e 31 37 37 31 20 31 32 2e 30 35 36 4c 32 31 2e 34 20 37 2e 38 32 35 43 32 31 2e 36 20 37 2e 36 32 35 20 32 31 2e 37 35 20 37 2e 34 20 32 31 2e 38 35 20 37 2e 31 35 43 32 31 2e 39 35 20 36 2e 39 20 32 32 20 36 2e 36 35 20 32 32 20 36 2e 34 43 32 32 20 36 2e 31 33 33 33 33 20 32 31 2e 39 35 20 35 2e 38 37 39 31 37 20 32 31 2e 38 35 20 35 2e 36 33 37 35 43 32 31 2e 37 35 20 35 2e 33 39 35 38 33 20 32 31 2e 36 20 35 2e 31 38 33 33 33 20 32 31 2e 34 20 35 4c 32 30 20 33 2e 36 43 31 39 2e 38 31 36 37 20 33 2e 34 20 31 39 2e 36 30 Data Ascii: evenodd" d="M4 16.75V21H8.25L12.0544 17.1883C12.4142 14.5277 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625 21.75 7.4 21.85 7.15C21.95 6.9 22 6.65 22 6.4C22 6.13333 21.95 5.87917 21.85 5.6375C21.75 5.39583 21.6 5.18333 21.4 5L20 3.6C19.8167 3.4 19.60
2024-04-24 12:32:28 UTC	937	IN	Data Raw: 33 2e 33 35 4c 36 2e 30 37 35 20 31 31 2e 38 35 43 35 2e 37 34 31 36 37 20 31 31 2e 37 31 36 37 20 35 2e 34 37 39 31 37 20 31 31 2e 35 37 39 32 20 35 2e 32 38 37 35 20 31 31 2e 34 33 37 35 43 35 2e 30 39 35 38 33 20 31 31 2e 32 39 35 38 20 35 20 31 31 2e 31 35 20 35 20 31 31 43 35 20 31 30 2e 38 20 35 2e 31 35 20 31 30 2e 36 20 35 2e 34 35 20 31 30 2e 34 43 35 2e 37 35 20 31 30 2e 32 20 36 2e 33 38 33 33 33 20 39 2e 38 39 31 36 37 20 37 2e 33 35 20 39 2e 34 37 35 43 38 2e 38 31 36 36 37 20 38 2e 38 34 31 36 37 20 39 2e 37 39 31 36 37 20 38 2e 32 36 36 36 37 20 31 30 2e 32 37 35 20 37 2e 37 35 43 31 30 2e 37 35 38 33 20 37 2e 32 33 33 33 33 20 31 31 20 36 2e 36 35 20 31 31 20 36 43 31 31 20 35 2e 30 38 33 33 33 20 31 30 2e 36 33 33 33 20 34 2e 33 35 34 31 Data Ascii: 3.35L6.075 11.85C5.74167 11.7167 5.47917 11.5792 5.2875 11.4375C5.09583 11.2958 5 11.15 5 11C5 10.8 5.15 10.6 5.45 10.4C5.75 10.2 6.38333 9.89167 7.35 9.475C8.81667 8.84167 9.79167 8.26667 10.275 7.75C10.7583 7.23333 11 6.65 11 6C11 5.08333 10.6333 4.3541
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49810	104.22.70.197	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:28 UTC	699	OUT	GET /menu/sm.25.html HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:28 UTC	856	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oq4x2N4ebdrMOgLHmBE4XRllzl8HDzyyjW7b2cXVVrgx6JK0DSxt20HITTAIiPdCBx5z%2FC%2FWORGtmXPxpUyqgPkfwoBnAL9tT%2B3nLxRGD2jsdsnJInXL9wUfdiWWQ9WtaAQbzyNUq5oi52iexWQ5Gqiy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 26137 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961dc0fd2909ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	513	IN	Data Raw: 32 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 32 41 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 74 3d 30 3c 6f 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 2c 61 3d 7b 66 65 65 64 3a 5b 5d 2c 70 61 67 65 3a 5b 5d 7d 3b 74 26 26 5b 22 66 65 65 64 22 2c 22 70 61 67 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2b 22 5f 73 65 72 76 69 63 65 73 22 2c 6e 3d 6f 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 3b 2d 31 21 3d 6e 26 Data Ascii: 2cc<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&
2024-04-24 12:32:28 UTC	210	IN	Data Raw: 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 3a 22 22 2c 74 3d 2f 5e 68 74 74 70 5c 2f 31 2f 2e 74 65 73 74 28 6e 29 29 2c 74 29 2c 75 73 65 72 5f 73 65 72 76 69 63 65 73 3a 7b 66 65 65 64 3a 61 2e 66 65 65 64 2c 70 61 67 65 3a 61 2e 70 61 67 65 7d 7d 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 65 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 2c 22 2a 22 29 7d 28 77 69 6e 64 6f 77 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: xtHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49811	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:28 UTC	790	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.10 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	478	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 18 Apr 2024 02:41:33 GMT ETag: W/"6620885d-10f" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dc448340ad7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	278	IN	Data Raw: 31 30 66 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 66 6f 72 28 76 61 72 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 69 6e 20 77 70 6d 6c 5f 63 6f 6f 6b 69 65 73 29 20 7b 0a 09 09 76 61 72 20 63 6f 6f 6b 69 65 44 61 74 61 20 3d 20 77 70 6d 6c 5f 63 6f 6f 6b 69 65 73 5b 63 6f 6f 6b 69 65 4e 61 6d 65 5d 3b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 27 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 61 74 61 2e 76 61 6c 75 65 20 2b 20 27 3b 65 78 70 69 72 65 73 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 61 74 61 2e 65 78 70 69 72 65 73 20 2b 20 27 3b 20 70 61 74 68 3d 27 20 2b 20 63 6f Data Ascii: 10fdocument.addEventListener('DOMContentLoaded', function() {for(var cookieName in wpml_cookies) {var cookieData = wpml_cookies[cookieName];document.cookie = cookieName + '=' + cookieData.value + ';expires=' + cookieData.expires + '; path=' + co
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49812	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:28 UTC	753	OUT	GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	431	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 17 Apr 2024 02:50:23 GMT ETag: W/"661f38ef-81" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dc448cfa982-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	135	IN	Data Raw: 38 31 0d 0a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 22 62 6f 64 79 22 29 2e 6f 6e 28 22 70 6f 73 74 2d 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 61 32 61 26 26 61 32 61 2e 69 6e 69 74 5f 61 6c 6c 28 29 7d 29 7d 29 3b 0d 0a Data Ascii: 81"function"==typeof jQuery&&jQuery(document).ready(function(a){a("body").on("post-load",function(){window.a2a&&a2a.init_all()})});
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49813	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:28 UTC	798	OUT	GET /wp-content/uploads/2023/11/ivnosis.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:28 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-11e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dc44ff40ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:28 UTC	293	IN	Data Raw: 31 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 39 32 32 20 37 2e 31 36 39 39 38 48 31 33 2e 30 30 38 32 56 31 36 2e 38 33 48 31 30 2e 39 39 32 32 56 37 2e 31 36 Data Ascii: 11e<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M10.9922 7.16998H13.0082V16.83H10.9922V7.16
2024-04-24 12:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49815	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:29 UTC	846	OUT	GET /wp-content/themes/signaturit/fonts/Expose-Medium.woff2 HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signaturit.com/wp-content/themes/signaturit/style.css?v=popups-0201q1111281111&ver=6.4.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:30 UTC	413	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:29 GMT Content-Type: font/woff2 Content-Length: 20544 Connection: close Last-Modified: Thu, 21 Dec 2023 15:36:44 GMT ETag: "65845b8c-5040" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961dcac97a09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	956	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 50 40 00 0f 00 00 00 00 e2 c0 00 00 4f de 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 0a 1b d6 04 1c 86 78 06 60 00 87 26 11 08 0a 82 a5 18 81 e9 2e 0b 86 30 00 01 36 02 24 03 8c 5c 04 20 05 91 62 07 92 0b 1b a0 c0 35 78 6e 84 77 b7 03 6c f6 77 fd 1a 39 1b 51 bb 5b dd b9 a0 40 e6 91 08 bb 41 5a 85 23 fb ff 3f 27 37 c6 90 1b d2 ae eb a3 a2 6d d6 91 50 45 79 84 44 7f 72 26 2a 4b 52 5c c3 9d bc 5a d8 53 a1 58 c6 4e 32 6c 53 dd e6 35 ab 73 d8 28 b8 c2 a8 c4 22 b6 4c e4 b1 48 c7 9a a1 f0 16 f5 79 84 8a 1e 74 23 99 3e 33 b7 cf 73 b7 2e 6a 08 b3 8c c4 a1 a7 45 bf 8b bf f8 87 29 2e e8 b2 74 75 b6 7c 36 9b d4 58 6c 37 3f 03 db 46 fe 24 27 2f 3c d1 73 fa 7f 66 76 03 36 50 d3 5e 89 fc Data Ascii: wOF2P@O?FFTMx`&.06$\ b5xnwlw9Q[@AZ#?'7mPEyDr&*KR\ZSXN2lS5s("LHyt#>3s.jE).tu\|6Xl7?F$'/<sfv6P^
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: b9 1c 10 c9 8d 0e 2a 79 55 83 49 4d 35 20 52 5b 2d 18 16 50 40 00 2f ed 45 81 d5 ff 2d 28 70 7f 7b 55 80 f8 0f 0b 16 54 59 80 ff ff 67 80 9c 2e 0d d1 16 7f 0b 22 f4 b9 5e 0e 6b bd 13 75 d8 bf b7 80 7c 54 65 e0 1e e5 33 4d 36 b8 09 49 a5 19 15 d2 fd fb 4f 04 c5 8d 3a 52 3f ff 40 a8 aa 24 a1 3e 36 2c 5e 42 12 b2 89 fa 9f 44 10 cb cc 70 03 44 2e ef 87 4f 1e 81 82 de b0 b4 c6 1c 50 41 30 42 8c 54 15 18 10 04 62 20 4d 68 bf 69 20 b4 ff 05 dd fc 57 9a 9e 87 39 98 79 85 8d b2 a3 9c 26 a4 6a c6 80 34 04 a4 79 a4 a8 80 f4 cc 1f 90 a1 80 8c 2e a1 54 40 e6 02 00 b2 18 90 95 55 03 b2 b5 26 40 0e d6 03 c8 d9 c6 01 b9 d9 1c 20 4f e7 fe 3c 9c e7 b3 0d c8 17 00 c8 77 4f f8 a5 fc 97 c7 11 72 fe f5 ea 87 a2 a0 29 68 ce 91 1c 79 68 e9 d1 82 56 87 d6 05 b4 31 00 da 12 d0 f6 Data Ascii: *yUIM5 R[-P@/E-(p{UTYg."^ku\|Te3M6IO:R?@$>6,^BDpD.OPA0BTb Mhi W9y&j4y.T@U&@ O<wOr)hyhV1
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 27 ce e1 93 19 19 bf 68 65 1a 13 0c 16 c4 62 d2 28 39 60 52 7e f9 78 bc fd 9e 7c fc 71 6c e0 54 82 4b 06 4a 09 b4 5d b8 8d e2 11 c1 88 f1 d2 08 84 20 68 9a 14 55 94 8c 1c aa 5c 2a 3a 55 1e 55 3e 55 01 d5 2c d5 3c d5 22 b5 85 4c 4b 99 64 25 29 32 79 15 aa 40 30 c6 79 01 6c c7 8a 15 ec ce 02 a5 87 72 e3 e2 4f ca 24 1d 3e e6 48 5f 9a 21 29 67 48 2e d0 e5 c9 57 90 a6 b8 59 f3 dd e2 28 82 1f 09 74 3f 05 cb 90 e5 d2 e3 62 61 7c 44 64 56 f3 6d 06 7a 21 18 c4 c6 4d 1f 8f 10 05 5c 28 30 60 65 ee 24 8c bd cd f5 c4 69 35 2e e6 ac 5e b4 96 94 47 64 f8 14 a4 af 2c a2 01 e1 a6 da 16 e0 51 16 dc 2c 31 56 60 3d 25 08 d8 c8 b3 e5 10 d3 b1 a3 be bd 90 23 1b 29 64 ac 2d 2d e3 e4 39 73 69 54 82 eb ab b9 71 b8 a3 79 d0 79 a2 79 31 45 a5 5a 8e 47 72 05 5d 9e 7c 05 fd 22 be 1a Data Ascii: 'heb(9`R~x\|qlTKJ] hU\*:UU>U,<"LKd%)2y@0ylrO$>H_!)gH.WY(t?ba\|DdVmz!M\(0`e$i5.^Gd,Q,1V`=%#)d--9siTqyyy1EZGr]\|"
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: d3 ca 7f 59 23 be 7e 72 5e 0f 76 cb 1d 1c 12 3b 85 d0 5c 02 11 92 48 3f 63 29 93 6c f3 a9 f0 84 4a fb 7e ae e6 51 7f 16 0d 94 d1 60 17 7b 17 a1 c3 aa fa d8 d9 8e 15 f7 c3 f5 3d 47 88 05 23 b1 58 89 c5 8e 33 93 84 f2 49 61 ab 64 b6 4e 6e db 64 b6 4b 2e 46 26 b1 f1 89 ad 55 6c ad 63 6c 1b 5b bb 18 49 2e 29 17 eb 60 f4 7c a2 cf 63 18 2e 76 93 e3 2e cf 53 4e 53 d3 1f 88 cd 60 46 4d d7 8c 9c b7 1b 3a 48 85 dc 22 b1 7e 20 8c c0 22 19 bd 3c c5 2b 2d 5f c6 68 59 b9 72 3e bd 18 16 17 1e 04 22 29 b3 d4 5a ae df a0 e8 f9 b1 d4 60 c3 06 fb c7 72 b4 3c 44 c7 45 59 32 bf 7d 97 3e 93 a1 e6 a5 73 a2 62 27 37 69 f6 36 b6 52 47 ca 9c 29 27 c5 32 e3 89 99 85 6d 41 69 89 4e 39 0e da aa db 9e c5 f3 cb 81 51 8c b0 b1 a2 d8 09 25 11 13 ab 27 68 99 d3 f6 49 48 5b ca 2c 38 42 ff Data Ascii: Y#~r^v;\H?c)lJ~Q`{=G#X3IadNndK.F&Ulcl[I.)`\|c.v.SNS`FM:H"~ "<+-_hYr>")Z`r<DEY2}>sb'7i6RG)'2mAiN9Q%'hIH[,8B
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 6e 85 95 56 59 6d 04 24 6e 7c 85 3c b7 77 ed dd f3 ee c3 f6 37 72 dc f4 19 46 40 45 35 8a 37 26 11 60 f4 4a e6 b0 b6 08 83 5b fa ba 0e 50 ca 4a 4c 8d 54 f1 12 a6 a2 f2 4a 2b e8 6c f8 2c 38 fd 30 15 97 5f 65 85 95 54 54 5e 65 55 81 90 e0 25 2e 21 a9 be 50 31 12 a5 8c 50 c2 89 25 1e 21 9b 6c 23 66 97 7d 0e 39 46 02 25 88 4d 95 a2 23 17 b6 75 ef 88 1f 53 4e 9a 96 4c a6 d7 08 4d 41 f1 52 9e c5 4b 44 5a 5e b3 c1 24 1c a6 0f 13 e5 ac 61 89 17 c2 44 a7 2b 4e 82 cc f1 b8 73 8a 62 ef 16 97 64 10 d2 84 08 10 c0 69 63 05 34 00 65 4c 2b b6 30 dd 58 4e bb b8 90 2a 60 5b 25 5c 01 bb 29 90 9c d5 00 39 f4 2f 89 a6 48 8d f4 ce a0 71 b1 93 e9 09 28 f0 8b fc 42 07 a5 f5 e4 82 d2 02 a4 d2 63 f2 0a 32 42 33 91 0a 32 40 11 ff f9 0c e6 d9 9c 80 83 a3 dc b9 0b b0 b5 7f 61 7d 21 Data Ascii: nVYm$n\|<w7rF@E57&`J[PJLTJ+l,80_eTT^eU%.!P1P%!l#f}9F%M#uSNLMARKDZ^$aD+Nsbdic4eL+0XN*`[%\)9/Hq(Bc2B32@a}!
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 24 e7 9b 66 74 b0 14 f1 66 39 16 b3 6b 38 e4 71 e6 a6 39 a4 76 52 18 de c0 35 a9 8e 18 8f d0 c4 1b 62 61 0e 32 61 14 f0 34 5c d0 e0 b7 94 ab e8 1b 45 c1 c6 4b a4 64 ae 64 a1 1b 3c 8f 6f 94 52 d3 65 f2 2f 47 d6 42 9a af 64 b1 a9 5e 76 cf 3b 93 39 fe fa 02 3e cb 31 9a 43 8c 93 49 38 2a 5d cf cf bf 33 40 05 59 9e 1a 79 ca 63 83 f5 d4 be a2 60 3f cc d3 5e 71 a4 46 72 2b 1f 6a af 72 ec e5 e4 dc a4 7f 5d b5 d6 a0 cf 5b 45 f4 5c 4d 6a 73 d3 a2 d4 08 aa fe 2c 0b d3 99 d4 2e 25 f5 59 87 62 11 54 fd 85 f2 6b dd 22 4d 2a e2 4d 52 52 49 2d 4d e0 a1 1f 30 e1 73 4f 34 b5 a3 8f dc c1 c4 d2 46 2c 84 41 96 b3 89 76 a0 d6 78 9f 6f ec 7a a3 1d 5c df 3b 91 15 25 a1 bc e8 c0 bb c4 f8 09 56 97 b5 71 ef 70 00 d9 7e c3 02 14 f8 99 a3 a5 7b 90 71 22 4f 04 b4 66 54 0e 1d d8 75 98 Data Ascii: $ftf9k8q9vR5ba2a4\EKdd<oRe/GBd^v;9>1CI8]3@Yyc`?^qFr+jr][E\Mjs,.%YbTk"MMRRI-M0sO4F,Avxoz\;%Vqp~{q"OfTu
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 71 96 3d 35 da 0c f5 7e e1 f2 a1 93 d2 b7 33 fd 2e 93 0f 3c d1 08 21 bd d6 54 a3 29 a3 af 63 b4 ea 1e fa 35 7e 22 ee 7c 6c a7 29 ad 47 36 71 00 d9 d7 a8 c5 14 08 1b 22 e7 ba 4a d9 b2 5e b0 ec 9d a6 43 fe 11 9c 4b 53 5c 07 4c 4b 73 f5 ef e4 2d 77 80 90 86 19 83 6e bf 9d 65 8f 8d fe 2b ce 10 19 9f be 3d cb 48 1a c9 75 34 bd 6d 96 54 fb 77 28 5a ab 1e e7 1b 39 1c c3 2a a3 e0 e1 22 61 81 66 61 88 50 1a b4 1e fb 67 7f 20 2e 2f e6 8f 9e d2 1b f6 05 9c 18 3e 83 65 a9 79 c1 8e 4b 03 b7 bf e5 10 32 6d 59 47 b3 d4 f8 6a 89 8a d8 c5 37 15 59 c0 b2 cb af fe 64 24 3c 0e ea 0b dd 34 ee 08 6b cf 0a a2 e4 dd 5f 00 1e 55 46 60 d5 12 e6 20 2b de 78 06 d3 e8 91 ec fe 48 e2 27 e2 39 e5 ef 51 cc 1c a0 fa 8b 37 60 4f 76 a4 96 fb 90 7d 3e fd b6 7a f4 ba e6 bb bf a8 76 70 f2 1b Data Ascii: q=5~3.<!T)c5~"\|l)G6q"J^CKS\LKs-wne+=Hu4mTw(Z9*"afaPg ./>eyK2mYGj7Yd$<4k_UF` +xH'9Q7`Ov}>zvp
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 10 32 68 31 1e d5 58 1d 37 17 88 1f 44 36 30 23 01 0b ff 98 ec f6 92 e8 b7 99 02 1c 49 e4 a8 a9 c1 30 71 23 e4 ae 18 cf 5a 0e d2 58 ed 7a a6 39 b9 d8 6b 42 f5 d8 9e 69 3e 3b 4f 5d 16 49 14 87 a5 73 7c bc 85 71 04 aa bd d6 c3 ba d9 60 ad 34 23 33 89 5b 0b 92 e4 0d 3c 3d f3 40 48 82 1f 7f 01 b2 e9 93 7c fa d5 94 55 56 0e d4 bf 66 43 08 42 5a ea 9e 01 3f 86 c9 60 dd d2 d1 25 39 70 0c c1 90 31 8d c1 76 72 68 9a eb 83 d2 a8 e9 58 0b 8d 4a 34 83 3e 0b 8f ad 28 c0 57 b5 ea 40 eb 02 b8 8c b2 f2 c2 0b 3f 2c 62 ad 22 67 b4 dd ef a2 8b 6c 7d f2 9b 7f 10 29 c6 ba 04 a3 49 07 aa 6d 78 68 8c a5 d0 6e 1f 52 fd 2d 13 e5 e0 d6 b7 72 ae a2 df 6a 6b 29 6a 6a ea a7 b1 ad db 82 49 7a e8 55 ce a5 cb 9b e8 7f 16 70 5c 47 1c 0d b4 a0 41 6c 91 37 cc b2 4f 5a d5 9a 6b 17 01 de 0c Data Ascii: 2h1X7D60#I0q#ZXz9kBi>;O]Is\|q`4#3[<=@H\|UVfCBZ?`%9p1vrhXJ4>(W@?,b"gl})ImxhnR-rjk)jjIzUp\GAl7OZk
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 03 0c 07 9e 6d bf e1 5a 27 67 08 25 3b d9 97 a9 1e 36 df d1 14 4e 5f 7f 16 d0 1c 3b 25 2e bd 52 2c 9e d0 5d 3d 04 5d 2d d4 4a bd be f6 a0 da db 9f bb 5a c2 3d 71 43 76 05 9b e9 1a 13 12 1b aa 0e 20 f1 74 af 51 5e f4 39 7e 53 e7 f3 07 85 6a 2c ac 26 77 b0 b1 31 61 c0 e8 56 fc b5 5f 6b bb 87 1f 97 66 a3 d2 a6 8a 75 c3 35 ce 34 26 f5 bc 5a 7d fa fc d9 78 47 34 fd 5c b0 22 45 26 8c 6c e0 c7 13 08 1b 2d f2 95 27 39 db 0f ae 78 85 38 39 8b e1 2b c8 1f 3b 98 22 72 bc 23 3e cc 2a f1 5a fd 3d 6c cb 36 11 0e d1 a4 25 02 83 75 64 c1 4a e3 96 a9 19 86 de ed fc b8 0a cd 0d 5c 99 6e b1 85 73 e0 8a 3b e9 5d 00 ab 32 3f 45 a5 66 bb 5a 04 77 91 85 6e 15 d8 50 90 26 66 cd 90 ee 12 d4 8e ee f8 a3 7e c4 7f 93 82 c1 27 c4 0f 00 6e 36 2b b1 29 71 ab 09 02 72 3b f1 cd ce 7a 72 Data Ascii: mZ'g%;6N_;%.R,]=]-JZ=qCv tQ^9~Sj,&w1aV_kfu54&Z}xG4\"E&l-'9x89+;"r#>*Z=l6%udJ\ns;]2?EfZwnP&f~'n6+)qr;zr
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 59 d1 1b d8 85 a4 44 9d c5 b7 58 00 7f b1 0c 09 6e cc ee b9 d1 0a 3e 8a 95 48 d5 e3 b5 4e e9 66 69 05 9d 8a 54 74 8a a6 75 00 1b 18 d7 03 b1 77 4f e6 9e ef f9 71 06 03 0f 74 94 16 d1 4b 98 98 db a5 a9 d1 3b 8e 9f 29 1c 36 0a 2c 96 9d be 86 0a 73 3f c3 50 58 54 46 8c 03 ac 92 2f 52 2a 4b 8a ce b8 70 09 5f 8d 63 c5 68 56 99 34 1e 8d 1d 05 bd 0b a8 9b 68 04 98 69 af f8 a8 38 de 4a 15 0b 85 88 88 88 fb 66 3f 46 d7 af ad c5 d9 0b 38 b1 f7 3d c5 72 e9 04 e8 f6 ad 8d af a3 36 c4 cd 74 f5 4c 56 60 14 48 96 08 cd 04 17 e3 d0 cd 7b 99 ed dd a3 5c b9 61 f4 fc 5c 98 b3 b7 3f cd f9 74 58 84 93 57 d8 6f 63 3b 75 1a f4 0f 73 88 38 cd 3a 51 3f 53 12 0a ee 1c 3e ab cc 08 af 75 c2 be 07 f0 f9 77 58 fe a1 d8 8b 69 97 1a 1a 01 3c f7 67 12 89 9c 44 76 87 9f 94 a4 9b f7 5e e4 Data Ascii: YDXn>HNfiTtuwOqtK;)6,s?PXTF/R*Kp_chV4hi8Jf?F8=r6tLV`H{\a\?tXWoc;us8:Q?S>uwXi<gDv^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49816	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:29 UTC	794	OUT	GET /wp-content/uploads/2023/11/api.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA
2024-04-24 12:32:30 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:29 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:46 GMT ETag: W/"65845b52-433" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dcb1c0409f5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	900	IN	Data Raw: 34 33 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 35 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 433<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8653" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:30 UTC	182	IN	Data Raw: 35 4c 31 35 2e 38 37 35 20 31 34 2e 31 32 35 4c 31 38 20 31 32 4c 31 35 2e 38 37 35 20 39 2e 38 37 35 4c 31 38 2e 33 37 35 20 37 2e 33 37 35 4c 32 33 20 31 32 4c 31 38 2e 33 37 35 20 31 36 2e 36 32 35 5a 4d 31 32 20 32 33 4c 37 2e 33 37 35 20 31 38 2e 33 37 35 4c 39 2e 38 37 35 20 31 35 2e 38 37 35 4c 31 32 20 31 38 4c 31 34 2e 31 32 35 20 31 35 2e 38 37 35 4c 31 36 2e 36 32 35 20 31 38 2e 33 37 35 4c 31 32 20 32 33 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 5L15.875 14.125L18 12L15.875 9.875L18.375 7.375L23 12L18.375 16.625ZM12 23L7.375 18.375L9.875 15.875L12 18L14.125 15.875L16.625 18.375L12 23Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49817	104.19.175.188	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:29 UTC	746	OUT	GET /embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:30 UTC	1139	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 24 Apr 2024 12:32:30 GMT Transfer-Encoding: chunked Connection: close Location: https://forms-eu1.hsforms.com/embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 X-Origin-Hublet: na1 Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: OPTIONS, GET Access-Control-Allow-Headers: * Access-Control-Allow-Credentials: false Access-Control-Max-Age: 180 Vary: origin X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none x-envoy-upstream-service-time: 12 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 8fd98c6c-d38f-49f8-a689-a843bb787d55 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-xf2pv x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 8fd98c6c-d38f-49f8-a689-a843bb787d55 CF-Cache-Status: DYNAMIC
2024-04-24 12:32:30 UTC	584	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 2e 69 62 7a 7a 5a 72 37 66 74 75 79 71 4e 4f 51 7a 31 63 4e 6c 48 43 6b 59 59 78 45 51 38 31 5f 66 37 4a 37 48 5a 68 54 73 4c 67 2d 31 37 31 33 39 36 31 39 35 30 2d 31 2e 30 2e 31 2e 31 2d 6e 30 62 49 44 4b 44 76 6d 6b 59 35 61 65 71 64 48 51 44 47 64 6b 4f 37 4a 34 48 69 6c 58 73 77 6a 31 38 79 66 72 47 44 50 64 43 2e 77 50 58 76 74 47 79 31 51 6b 5f 41 6c 58 4b 38 64 56 7a 6f 76 39 53 71 66 4d 6a 54 4b 44 61 75 69 41 5a 4c 68 74 56 47 44 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 41 70 72 2d 32 34 20 31 33 3a 30 32 3a 33 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=.ibzzZr7ftuyqNOQz1cNlHCkYYxEQ81_f7J7HZhTsLg-1713961950-1.0.1.1-n0bIDKDvmkY5aeqdHQDGdkO7J4HilXswj18yfrGDPdC.wPXvtGy1Qk_AlXK8dVzov9SqfMjTKDauiAZLhtVGDg; path=/; expires=Wed, 24-Apr-24 13:02:30 GMT; domain=.hsforms.com; HttpOnly; Secure;
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49818	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	830	OUT	GET /wp-content/uploads/2023/11/salesforce.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en
2024-04-24 12:32:30 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-4ef" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dce5fa609f3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	900	IN	Data Raw: 34 65 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 39 31 34 20 31 36 2e 30 33 32 56 31 36 2e 38 33 48 31 31 2e 38 35 39 34 56 31 36 2e 33 31 32 43 31 31 2e 38 35 39 Data Ascii: 4ef<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M13.7914 16.032V16.83H11.8594V16.312C11.859
2024-04-24 12:32:30 UTC	370	IN	Data Raw: 31 30 2e 35 30 32 37 20 37 2e 31 39 38 30 31 20 31 30 2e 39 33 36 37 20 37 2e 32 38 32 30 31 4c 31 30 2e 35 35 38 37 20 38 2e 39 32 30 30 31 43 39 2e 39 38 34 36 37 20 38 2e 38 32 32 30 31 20 39 2e 30 34 36 36 37 20 38 2e 36 36 38 30 31 20 38 2e 32 36 32 36 37 20 38 2e 36 36 38 30 31 43 37 2e 32 39 36 36 37 20 38 2e 36 36 38 30 31 20 36 2e 39 37 34 36 37 20 39 2e 31 30 32 30 31 20 36 2e 39 37 34 36 37 20 39 2e 38 33 30 30 31 43 36 2e 39 37 34 36 37 20 31 30 2e 34 38 38 20 37 2e 31 38 34 36 37 20 31 30 2e 36 37 20 37 2e 38 38 34 36 37 20 31 30 2e 38 31 4c 38 2e 38 39 32 36 37 20 31 30 2e 39 37 38 43 31 30 2e 36 30 30 37 20 31 31 2e 32 38 36 20 31 31 2e 32 33 30 37 20 31 32 2e 30 34 32 20 31 31 2e 32 33 30 37 20 31 33 2e 37 39 32 43 31 31 2e 32 33 30 37 20 Data Ascii: 10.5027 7.19801 10.9367 7.28201L10.5587 8.92001C9.98467 8.82201 9.04667 8.66801 8.26267 8.66801C7.29667 8.66801 6.97467 9.10201 6.97467 9.83001C6.97467 10.488 7.18467 10.67 7.88467 10.81L8.89267 10.978C10.6007 11.286 11.2307 12.042 11.2307 13.792C11.2307
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49820	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	870	OUT	GET /wp-content/uploads/2023/11/certified-email.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:30 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-2ed" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dcf4cc90acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	756	IN	Data Raw: 32 65 64 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 36 35 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 2ed<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8665" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49819	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	868	OUT	GET /wp-content/uploads/2023/11/certified-SMS.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:30 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-9cc" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dcf4e8e09ff-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	900	IN	Data Raw: 39 63 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 36 38 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 9cc<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8668" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:30 UTC	1369	IN	Data Raw: 38 33 33 20 31 31 2e 30 39 35 38 20 31 30 2e 35 32 30 38 20 31 31 2e 32 38 37 35 20 31 30 2e 37 31 32 35 43 31 31 2e 34 37 39 32 20 31 30 2e 39 30 34 32 20 31 31 2e 37 31 36 37 20 31 31 20 31 32 20 31 31 5a 4d 31 36 20 31 31 43 31 36 2e 32 38 33 33 20 31 31 20 31 36 2e 35 32 30 38 20 31 30 2e 39 30 34 32 20 31 36 2e 37 31 32 35 20 31 30 2e 37 31 32 35 43 31 36 2e 39 30 34 32 20 31 30 2e 35 32 30 38 20 31 37 20 31 30 2e 32 38 33 33 20 31 37 20 31 30 43 31 37 20 39 2e 37 31 36 36 37 20 31 36 2e 39 30 34 32 20 39 2e 34 37 39 31 37 20 31 36 2e 37 31 32 35 20 39 2e 32 38 37 35 43 31 36 2e 35 32 30 38 20 39 2e 30 39 35 38 33 20 31 36 2e 32 38 33 33 20 39 20 31 36 20 39 43 31 35 2e 37 31 36 37 20 39 20 31 35 2e 34 37 39 32 20 39 2e 30 39 35 38 33 20 31 35 2e 32 Data Ascii: 833 11.0958 10.5208 11.2875 10.7125C11.4792 10.9042 11.7167 11 12 11ZM16 11C16.2833 11 16.5208 10.9042 16.7125 10.7125C16.9042 10.5208 17 10.2833 17 10C17 9.71667 16.9042 9.47917 16.7125 9.2875C16.5208 9.09583 16.2833 9 16 9C15.7167 9 15.4792 9.09583 15.2
2024-04-24 12:32:30 UTC	246	IN	Data Raw: 20 39 2e 34 37 39 31 37 20 31 36 2e 37 31 32 35 20 39 2e 32 38 37 35 43 31 36 2e 35 32 30 38 20 39 2e 30 39 35 38 33 20 31 36 2e 32 38 33 33 20 39 20 31 36 20 39 43 31 35 2e 37 31 36 37 20 39 20 31 35 2e 34 37 39 32 20 39 2e 30 39 35 38 33 20 31 35 2e 32 38 37 35 20 39 2e 32 38 37 35 43 31 35 2e 30 39 35 38 20 39 2e 34 37 39 31 37 20 31 35 20 39 2e 37 31 36 36 37 20 31 35 20 31 30 43 31 35 20 31 30 2e 32 38 33 33 20 31 35 2e 30 39 35 38 20 31 30 2e 35 32 30 38 20 31 35 2e 32 38 37 35 20 31 30 2e 37 31 32 35 43 31 35 2e 34 37 39 32 20 31 30 2e 39 30 34 32 20 31 35 2e 37 31 36 37 20 31 31 20 31 36 20 31 31 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 9.47917 16.7125 9.2875C16.5208 9.09583 16.2833 9 16 9C15.7167 9 15.4792 9.09583 15.2875 9.2875C15.0958 9.47917 15 9.71667 15 10C15 10.2833 15.0958 10.5208 15.2875 10.7125C15.4792 10.9042 15.7167 11 16 11Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49821	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	872	OUT	GET /wp-content/uploads/2023/11/certified-manager.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:30 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-6ea" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dcf4ccb0acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	900	IN	Data Raw: 36 65 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 37 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 6ea<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8672" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:30 UTC	877	IN	Data Raw: 35 43 31 33 2e 33 31 36 37 20 31 33 2e 36 34 35 38 20 31 34 2e 33 36 36 37 20 31 34 2e 30 33 33 33 20 31 35 2e 34 20 31 34 2e 35 35 43 31 35 2e 38 38 33 33 20 31 34 2e 38 20 31 36 2e 32 37 30 38 20 31 35 2e 31 36 32 35 20 31 36 2e 35 36 32 35 20 31 35 2e 36 33 37 35 43 31 36 2e 38 35 34 32 20 31 36 2e 31 31 32 35 20 31 37 20 31 36 2e 36 33 33 33 20 31 37 20 31 37 2e 32 56 32 30 48 31 5a 4d 33 20 31 38 48 31 35 56 31 37 2e 32 43 31 35 20 31 37 2e 30 31 36 37 20 31 34 2e 39 35 34 32 20 31 36 2e 38 35 20 31 34 2e 38 36 32 35 20 31 36 2e 37 43 31 34 2e 37 37 30 38 20 31 36 2e 35 35 20 31 34 2e 36 35 20 31 36 2e 34 33 33 33 20 31 34 2e 35 20 31 36 2e 33 35 43 31 33 2e 36 20 31 35 2e 39 20 31 32 2e 36 39 31 37 20 31 35 2e 35 36 32 35 20 31 31 2e 37 37 35 20 31 Data Ascii: 5C13.3167 13.6458 14.3667 14.0333 15.4 14.55C15.8833 14.8 16.2708 15.1625 16.5625 15.6375C16.8542 16.1125 17 16.6333 17 17.2V20H1ZM3 18H15V17.2C15 17.0167 14.9542 16.85 14.8625 16.7C14.7708 16.55 14.65 16.4333 14.5 16.35C13.6 15.9 12.6917 15.5625 11.775 1
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49822	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	886	OUT	GET /wp-content/uploads/2023/11/external-registration-authority.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:30 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-3f0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dcf690709fb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:30 UTC	900	IN	Data Raw: 33 66 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 37 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 3f0<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8676" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:30 UTC	115	IN	Data Raw: 31 32 2e 31 37 35 4c 31 33 2e 31 32 35 20 31 30 2e 37 35 4c 31 31 2e 37 32 35 20 31 32 2e 31 37 35 4c 31 34 2e 35 35 20 31 35 5a 4d 35 20 31 33 48 31 30 56 31 31 48 35 56 31 33 5a 4d 35 20 39 48 31 30 56 37 48 35 56 39 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 12.175L13.125 10.75L11.725 12.175L14.55 15ZM5 13H10V11H5V13ZM5 9H10V7H5V9Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49824	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	614	OUT	GET /wp-content/uploads/2023/11/signaturit.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-3ae" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2 Server: cloudflare CF-RAY: 87961dd17d480a03-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 33 61 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 36 37 39 37 20 37 2e 31 36 39 39 38 48 31 36 2e 36 39 35 37 56 31 36 2e 38 33 48 31 34 2e 36 37 39 37 56 37 2e 31 36 Data Ascii: 3ae<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M14.6797 7.16998H16.6957V16.83H14.6797V7.16
2024-04-24 12:32:31 UTC	57	IN	Data Raw: 33 20 31 36 2e 38 37 32 20 37 2e 33 30 32 37 33 20 31 36 2e 36 39 5a 22 20 66 69 6c 6c 3d 22 23 46 41 46 41 46 46 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 3 16.872 7.30273 16.69Z" fill="#FAFAFF"></path></svg>
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49823	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	634	OUT	GET /wp-content/uploads/2023/11/qualified-electronic-signature.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-c3d" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2 Server: cloudflare CF-RAY: 87961dd17cf309ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 63 33 64 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 32 33 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: c3d<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7232" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 37 37 20 31 34 2e 35 31 38 20 31 32 2e 34 32 30 37 20 31 37 2e 31 37 37 31 20 31 32 2e 30 35 36 4c 32 31 2e 34 20 37 2e 38 32 35 43 32 31 2e 36 20 37 2e 36 32 35 20 32 31 2e 37 35 20 37 2e 34 20 32 31 2e 38 35 20 37 2e 31 35 43 32 31 2e 39 35 20 36 2e 39 20 32 32 20 36 2e 36 35 20 32 32 20 36 2e 34 43 32 32 20 36 2e 31 33 33 33 33 20 32 31 2e 39 35 20 35 2e 38 37 39 31 37 20 32 31 2e 38 35 20 35 2e 36 33 37 35 43 32 31 2e 37 35 20 35 2e 33 39 35 38 33 20 32 31 2e 36 20 35 2e 31 38 33 33 33 20 32 31 2e 34 20 35 4c 32 30 20 33 2e 36 43 31 39 2e 38 31 36 37 20 33 2e 34 20 31 39 2e 36 30 34 32 20 33 2e 32 35 20 31 39 2e 33 36 32 35 20 33 2e 31 35 43 31 39 2e 31 32 30 38 20 33 2e 30 35 20 31 38 2e 38 36 36 37 20 33 20 31 38 2e 36 20 33 43 31 38 2e 33 35 20 33 Data Ascii: 77 14.518 12.4207 17.1771 12.056L21.4 7.825C21.6 7.625 21.75 7.4 21.85 7.15C21.95 6.9 22 6.65 22 6.4C22 6.13333 21.95 5.87917 21.85 5.6375C21.75 5.39583 21.6 5.18333 21.4 5L20 3.6C19.8167 3.4 19.6042 3.25 19.3625 3.15C19.1208 3.05 18.8667 3 18.6 3C18.35 3
2024-04-24 12:32:31 UTC	879	IN	Data Raw: 2e 34 33 37 35 43 35 2e 30 39 35 38 33 20 31 31 2e 32 39 35 38 20 35 20 31 31 2e 31 35 20 35 20 31 31 43 35 20 31 30 2e 38 20 35 2e 31 35 20 31 30 2e 36 20 35 2e 34 35 20 31 30 2e 34 43 35 2e 37 35 20 31 30 2e 32 20 36 2e 33 38 33 33 33 20 39 2e 38 39 31 36 37 20 37 2e 33 35 20 39 2e 34 37 35 43 38 2e 38 31 36 36 37 20 38 2e 38 34 31 36 37 20 39 2e 37 39 31 36 37 20 38 2e 32 36 36 36 37 20 31 30 2e 32 37 35 20 37 2e 37 35 43 31 30 2e 37 35 38 33 20 37 2e 32 33 33 33 33 20 31 31 20 36 2e 36 35 20 31 31 20 36 43 31 31 20 35 2e 30 38 33 33 33 20 31 30 2e 36 33 33 33 20 34 2e 33 35 34 31 37 20 39 2e 39 20 33 2e 38 31 32 35 43 39 2e 31 36 36 36 37 20 33 2e 32 37 30 38 33 20 38 2e 32 20 33 20 37 20 33 43 36 2e 32 35 20 33 20 35 2e 35 37 39 31 37 20 33 2e 31 33 Data Ascii: .4375C5.09583 11.2958 5 11.15 5 11C5 10.8 5.15 10.6 5.45 10.4C5.75 10.2 6.38333 9.89167 7.35 9.475C8.81667 8.84167 9.79167 8.26667 10.275 7.75C10.7583 7.23333 11 6.65 11 6C11 5.08333 10.6333 4.35417 9.9 3.8125C9.16667 3.27083 8.2 3 7 3C6.25 3 5.57917 3.13
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49826	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	611	OUT	GET /wp-content/uploads/2023/11/ivnosis.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-11e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2 Server: cloudflare CF-RAY: 87961dd18dc60adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	293	IN	Data Raw: 31 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 39 32 32 20 37 2e 31 36 39 39 38 48 31 33 2e 30 30 38 32 56 31 36 2e 38 33 48 31 30 2e 39 39 32 32 56 37 2e 31 36 Data Ascii: 11e<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M10.9922 7.16998H13.0082V16.83H10.9922V7.16
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49825	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	607	OUT	GET /wp-content/uploads/2023/11/api.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:46 GMT ETag: W/"65845b52-433" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd18dc40adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 34 33 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 35 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 433<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8653" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	190	IN	Data Raw: 37 35 20 31 36 2e 36 32 35 4c 31 35 2e 38 37 35 20 31 34 2e 31 32 35 4c 31 38 20 31 32 4c 31 35 2e 38 37 35 20 39 2e 38 37 35 4c 31 38 2e 33 37 35 20 37 2e 33 37 35 4c 32 33 20 31 32 4c 31 38 2e 33 37 35 20 31 36 2e 36 32 35 5a 4d 31 32 20 32 33 4c 37 2e 33 37 35 20 31 38 2e 33 37 35 4c 39 2e 38 37 35 20 31 35 2e 38 37 35 4c 31 32 20 31 38 4c 31 34 2e 31 32 35 20 31 35 2e 38 37 35 4c 31 36 2e 36 32 35 20 31 38 2e 33 37 35 4c 31 32 20 32 33 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 75 16.625L15.875 14.125L18 12L15.875 9.875L18.375 7.375L23 12L18.375 16.625ZM12 23L7.375 18.375L9.875 15.875L12 18L14.125 15.875L16.625 18.375L12 23Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	877	OUT	GET /wp-content/uploads/2023/11/qualified-certificates.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-9f0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd2fc9469e3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	900	IN	Data Raw: 39 66 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 38 30 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 9f0<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8680" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 2e 35 32 37 38 20 31 37 2e 39 32 37 31 20 31 31 2e 33 33 33 33 20 31 38 2e 35 20 31 31 2e 33 33 33 33 43 31 39 2e 30 37 32 39 20 31 31 2e 33 33 33 33 20 31 39 2e 35 35 39 39 20 31 31 2e 35 32 37 38 20 31 39 2e 39 36 30 39 20 31 31 2e 39 31 36 37 43 32 30 2e 33 36 32 20 31 32 2e 33 30 35 36 20 32 30 2e 35 36 32 35 20 31 32 2e 37 37 37 38 20 32 30 2e 35 36 32 35 20 31 33 2e 33 33 33 33 43 32 30 2e 35 36 32 35 20 31 33 2e 38 38 38 39 20 32 30 2e 33 36 32 20 31 34 2e 33 36 31 31 20 31 39 2e 39 36 30 39 20 31 34 2e 37 35 43 31 39 2e 35 35 39 39 20 31 35 2e 31 33 38 39 20 31 39 2e 30 37 32 39 20 31 35 2e 33 33 33 33 20 31 38 2e 35 20 31 35 2e 33 33 33 33 5a 4d 31 34 2e 33 37 35 20 32 32 56 31 36 2e 38 35 43 31 33 2e 39 33 39 36 20 31 36 2e 33 38 33 33 20 31 33 Data Ascii: .5278 17.9271 11.3333 18.5 11.3333C19.0729 11.3333 19.5599 11.5278 19.9609 11.9167C20.362 12.3056 20.5625 12.7778 20.5625 13.3333C20.5625 13.8889 20.362 14.3611 19.9609 14.75C19.5599 15.1389 19.0729 15.3333 18.5 15.3333ZM14.375 22V16.85C13.9396 16.3833 13
2024-04-24 12:32:31 UTC	282	IN	Data Raw: 39 31 20 31 31 2e 39 31 36 37 43 31 37 2e 34 34 30 31 20 31 31 2e 35 32 37 38 20 31 37 2e 39 32 37 31 20 31 31 2e 33 33 33 34 20 31 38 2e 35 20 31 31 2e 33 33 33 34 43 31 39 2e 30 37 32 39 20 31 31 2e 33 33 33 34 20 31 39 2e 35 35 39 39 20 31 31 2e 35 32 37 38 20 31 39 2e 39 36 30 39 20 31 31 2e 39 31 36 37 43 32 30 2e 33 36 32 20 31 32 2e 33 30 35 36 20 32 30 2e 35 36 32 35 20 31 32 2e 37 37 37 38 20 32 30 2e 35 36 32 35 20 31 33 2e 33 33 33 34 43 32 30 2e 35 36 32 35 20 31 33 2e 38 38 38 39 20 32 30 2e 33 36 32 20 31 34 2e 33 36 31 32 20 31 39 2e 39 36 30 39 20 31 34 2e 37 35 43 31 39 2e 35 35 39 39 20 31 35 2e 31 33 38 39 20 31 39 2e 30 37 32 39 20 31 35 2e 33 33 33 34 20 31 38 2e 35 20 31 35 2e 33 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 Data Ascii: 91 11.9167C17.4401 11.5278 17.9271 11.3334 18.5 11.3334C19.0729 11.3334 19.5599 11.5278 19.9609 11.9167C20.362 12.3056 20.5625 12.7778 20.5625 13.3334C20.5625 13.8889 20.362 14.3612 19.9609 14.75C19.5599 15.1389 19.0729 15.3334 18.5 15.3334Z" fill="#0A0AF
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49829	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:30 UTC	614	OUT	GET /wp-content/uploads/2023/11/salesforce.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-4ef" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd31acc09f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 34 65 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 39 31 34 20 31 36 2e 30 33 32 56 31 36 2e 38 33 48 31 31 2e 38 35 39 34 56 31 36 2e 33 31 32 43 31 31 2e 38 35 39 Data Ascii: 4ef<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M13.7914 16.032V16.83H11.8594V16.312C11.859
2024-04-24 12:32:31 UTC	378	IN	Data Raw: 37 2e 30 30 32 30 31 20 31 30 2e 35 30 32 37 20 37 2e 31 39 38 30 31 20 31 30 2e 39 33 36 37 20 37 2e 32 38 32 30 31 4c 31 30 2e 35 35 38 37 20 38 2e 39 32 30 30 31 43 39 2e 39 38 34 36 37 20 38 2e 38 32 32 30 31 20 39 2e 30 34 36 36 37 20 38 2e 36 36 38 30 31 20 38 2e 32 36 32 36 37 20 38 2e 36 36 38 30 31 43 37 2e 32 39 36 36 37 20 38 2e 36 36 38 30 31 20 36 2e 39 37 34 36 37 20 39 2e 31 30 32 30 31 20 36 2e 39 37 34 36 37 20 39 2e 38 33 30 30 31 43 36 2e 39 37 34 36 37 20 31 30 2e 34 38 38 20 37 2e 31 38 34 36 37 20 31 30 2e 36 37 20 37 2e 38 38 34 36 37 20 31 30 2e 38 31 4c 38 2e 38 39 32 36 37 20 31 30 2e 39 37 38 43 31 30 2e 36 30 30 37 20 31 31 2e 32 38 36 20 31 31 2e 32 33 30 37 20 31 32 2e 30 34 32 20 31 31 2e 32 33 30 37 20 31 33 2e 37 39 32 43 Data Ascii: 7.00201 10.5027 7.19801 10.9367 7.28201L10.5587 8.92001C9.98467 8.82201 9.04667 8.66801 8.26267 8.66801C7.29667 8.66801 6.97467 9.10201 6.97467 9.83001C6.97467 10.488 7.18467 10.67 7.88467 10.81L8.89267 10.978C10.6007 11.286 11.2307 12.042 11.2307 13.792C
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49830	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	875	OUT	GET /wp-content/uploads/2023/11/qualified-time-stamp.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-486" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd3aecc09f1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	900	IN	Data Raw: 34 38 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 38 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 486<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8686" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	265	IN	Data Raw: 38 33 33 20 37 20 31 32 43 37 20 31 30 2e 36 31 36 37 20 37 2e 34 38 37 35 20 39 2e 34 33 37 35 20 38 2e 34 36 32 35 20 38 2e 34 36 32 35 43 39 2e 34 33 37 35 20 37 2e 34 38 37 35 20 31 30 2e 36 31 36 37 20 37 20 31 32 20 37 43 31 33 2e 33 38 33 33 20 37 20 31 34 2e 35 36 32 35 20 37 2e 34 38 37 35 20 31 35 2e 35 33 37 35 20 38 2e 34 36 32 35 43 31 36 2e 35 31 32 35 20 39 2e 34 33 37 35 20 31 37 20 31 30 2e 36 31 36 37 20 31 37 20 31 32 43 31 37 20 31 33 2e 33 38 33 33 20 31 36 2e 35 31 32 35 20 31 34 2e 35 36 32 35 20 31 35 2e 35 33 37 35 20 31 35 2e 35 33 37 35 43 31 34 2e 35 36 32 35 20 31 36 2e 35 31 32 35 20 31 33 2e 33 38 33 33 20 31 37 20 31 32 20 31 37 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e Data Ascii: 833 7 12C7 10.6167 7.4875 9.4375 8.4625 8.4625C9.4375 7.4875 10.6167 7 12 7C13.3833 7 14.5625 7.4875 15.5375 8.4625C16.5125 9.4375 17 10.6167 17 12C17 13.3833 16.5125 14.5625 15.5375 15.5375C14.5625 16.5125 13.3833 17 12 17Z" fill="#0A0AF4"></path> </g>
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49833	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	883	OUT	GET /wp-content/uploads/2023/11/qualified-certificates-seals.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-719" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd3fe5f0ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	900	IN	Data Raw: 37 31 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 39 30 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 719<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8690" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	924	IN	Data Raw: 34 37 35 20 31 32 2e 38 37 35 43 31 39 2e 31 32 35 20 31 33 2e 37 37 35 20 31 38 2e 36 33 33 33 20 31 34 2e 35 37 35 20 31 38 20 31 35 2e 32 37 35 56 32 33 4c 31 32 20 32 31 4c 36 20 32 33 5a 4d 31 32 20 31 36 43 31 33 2e 36 36 36 37 20 31 36 20 31 35 2e 30 38 33 33 20 31 35 2e 34 31 36 37 20 31 36 2e 32 35 20 31 34 2e 32 35 43 31 37 2e 34 31 36 37 20 31 33 2e 30 38 33 33 20 31 38 20 31 31 2e 36 36 36 37 20 31 38 20 31 30 43 31 38 20 38 2e 33 33 33 33 33 20 31 37 2e 34 31 36 37 20 36 2e 39 31 36 36 37 20 31 36 2e 32 35 20 35 2e 37 35 43 31 35 2e 30 38 33 33 20 34 2e 35 38 33 33 33 20 31 33 2e 36 36 36 37 20 34 20 31 32 20 34 43 31 30 2e 33 33 33 33 20 34 20 38 2e 39 31 36 36 37 20 34 2e 35 38 33 33 33 20 37 2e 37 35 20 35 2e 37 35 43 36 2e 35 38 33 33 33 Data Ascii: 475 12.875C19.125 13.775 18.6333 14.575 18 15.275V23L12 21L6 23ZM12 16C13.6667 16 15.0833 15.4167 16.25 14.25C17.4167 13.0833 18 11.6667 18 10C18 8.33333 17.4167 6.91667 16.25 5.75C15.0833 4.58333 13.6667 4 12 4C10.3333 4 8.91667 4.58333 7.75 5.75C6.58333
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49832	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	889	OUT	GET /wp-content/uploads/2023/11/public-administration-notification.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-5e8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd3f89009ff-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	900	IN	Data Raw: 35 65 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 39 34 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 5e8<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8694" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	619	IN	Data Raw: 2e 31 32 35 43 31 36 2e 32 39 31 37 20 36 2e 35 34 31 36 37 20 31 36 20 35 2e 38 33 33 33 33 20 31 36 20 35 43 31 36 20 34 2e 31 36 36 36 37 20 31 36 2e 32 39 31 37 20 33 2e 34 35 38 33 33 20 31 36 2e 38 37 35 20 32 2e 38 37 35 43 31 37 2e 34 35 38 33 20 32 2e 32 39 31 36 37 20 31 38 2e 31 36 36 37 20 32 20 31 39 20 32 43 31 39 2e 38 33 33 33 20 32 20 32 30 2e 35 34 31 37 20 32 2e 32 39 31 36 37 20 32 31 2e 31 32 35 20 32 2e 38 37 35 43 32 31 2e 37 30 38 33 20 33 2e 34 35 38 33 33 20 32 32 20 34 2e 31 36 36 36 37 20 32 32 20 35 43 32 32 20 35 2e 38 33 33 33 33 20 32 31 2e 37 30 38 33 20 36 2e 35 34 31 36 37 20 32 31 2e 31 32 35 20 37 2e 31 32 35 43 32 30 2e 35 34 31 37 20 37 2e 37 30 38 33 33 20 31 39 2e 38 33 33 33 20 38 20 31 39 20 38 5a 22 20 66 69 6c Data Ascii: .125C16.2917 6.54167 16 5.83333 16 5C16 4.16667 16.2917 3.45833 16.875 2.875C17.4583 2.29167 18.1667 2 19 2C19.8333 2 20.5417 2.29167 21.125 2.875C21.7083 3.45833 22 4.16667 22 5C22 5.83333 21.7083 6.54167 21.125 7.125C20.5417 7.70833 19.8333 8 19 8Z" fil
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49831	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	863	OUT	GET /wp-content/uploads/2023/11/video-id.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-b7e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd3f81ca984-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	900	IN	Data Raw: 62 37 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 30 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: b7e<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8701" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 2e 35 32 30 38 33 20 31 31 2e 32 38 37 35 20 39 2e 37 31 32 35 43 31 31 2e 34 37 39 32 20 39 2e 39 30 34 31 37 20 31 31 2e 37 31 36 37 20 31 30 20 31 32 20 31 30 5a 4d 36 20 31 38 56 31 36 2e 31 43 36 20 31 35 2e 37 35 20 36 2e 30 38 37 35 20 31 35 2e 34 32 30 38 20 36 2e 32 36 32 35 20 31 35 2e 31 31 32 35 43 36 2e 34 33 37 35 20 31 34 2e 38 30 34 32 20 36 2e 36 37 35 20 31 34 2e 35 35 38 33 20 36 2e 39 37 35 20 31 34 2e 33 37 35 43 37 2e 37 34 31 36 37 20 31 33 2e 39 32 35 20 38 2e 35 34 35 38 33 20 31 33 2e 35 38 33 33 20 39 2e 33 38 37 35 20 31 33 2e 33 35 43 31 30 2e 32 32 39 32 20 31 33 2e 31 31 36 37 20 31 31 2e 31 20 31 33 20 31 32 20 31 33 43 31 32 2e 39 20 31 33 20 31 33 2e 37 37 30 38 20 31 33 2e 31 31 36 37 20 31 34 2e 36 31 32 35 20 31 33 2e Data Ascii: .52083 11.2875 9.7125C11.4792 9.90417 11.7167 10 12 10ZM6 18V16.1C6 15.75 6.0875 15.4208 6.2625 15.1125C6.4375 14.8042 6.675 14.5583 6.975 14.375C7.74167 13.925 8.54583 13.5833 9.3875 13.35C10.2292 13.1167 11.1 13 12 13C12.9 13 13.7708 13.1167 14.6125 13.
2024-04-24 12:32:31 UTC	680	IN	Data Raw: 32 20 38 43 31 31 2e 37 31 36 37 20 38 20 31 31 2e 34 37 39 32 20 38 2e 30 39 35 38 33 20 31 31 2e 32 38 37 35 20 38 2e 32 38 37 35 43 31 31 2e 30 39 35 38 20 38 2e 34 37 39 31 37 20 31 31 20 38 2e 37 31 36 36 37 20 31 31 20 39 43 31 31 20 39 2e 32 38 33 33 33 20 31 31 2e 30 39 35 38 20 39 2e 35 32 30 38 33 20 31 31 2e 32 38 37 35 20 39 2e 37 31 32 35 43 31 31 2e 34 37 39 32 20 39 2e 39 30 34 31 37 20 31 31 2e 37 31 36 37 20 31 30 20 31 32 20 31 30 5a 4d 36 20 31 38 56 31 36 2e 31 43 36 20 31 35 2e 37 35 20 36 2e 30 38 37 35 20 31 35 2e 34 32 30 38 20 36 2e 32 36 32 35 20 31 35 2e 31 31 32 35 43 36 2e 34 33 37 35 20 31 34 2e 38 30 34 32 20 36 2e 36 37 35 20 31 34 2e 35 35 38 33 20 36 2e 39 37 35 20 31 34 2e 33 37 35 43 37 2e 37 34 31 36 37 20 31 33 2e 39 Data Ascii: 2 8C11.7167 8 11.4792 8.09583 11.2875 8.2875C11.0958 8.47917 11 8.71667 11 9C11 9.28333 11.0958 9.52083 11.2875 9.7125C11.4792 9.90417 11.7167 10 12 10ZM6 18V16.1C6 15.75 6.0875 15.4208 6.2625 15.1125C6.4375 14.8042 6.675 14.5583 6.975 14.375C7.74167 13.9
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49834	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	621	OUT	GET /wp-content/uploads/2023/11/certified-manager.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-6ea" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd47b420add-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 36 65 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 37 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 6ea<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8672" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	885	IN	Data Raw: 35 20 31 33 2e 33 38 37 35 43 31 33 2e 33 31 36 37 20 31 33 2e 36 34 35 38 20 31 34 2e 33 36 36 37 20 31 34 2e 30 33 33 33 20 31 35 2e 34 20 31 34 2e 35 35 43 31 35 2e 38 38 33 33 20 31 34 2e 38 20 31 36 2e 32 37 30 38 20 31 35 2e 31 36 32 35 20 31 36 2e 35 36 32 35 20 31 35 2e 36 33 37 35 43 31 36 2e 38 35 34 32 20 31 36 2e 31 31 32 35 20 31 37 20 31 36 2e 36 33 33 33 20 31 37 20 31 37 2e 32 56 32 30 48 31 5a 4d 33 20 31 38 48 31 35 56 31 37 2e 32 43 31 35 20 31 37 2e 30 31 36 37 20 31 34 2e 39 35 34 32 20 31 36 2e 38 35 20 31 34 2e 38 36 32 35 20 31 36 2e 37 43 31 34 2e 37 37 30 38 20 31 36 2e 35 35 20 31 34 2e 36 35 20 31 36 2e 34 33 33 33 20 31 34 2e 35 20 31 36 2e 33 35 43 31 33 2e 36 20 31 35 2e 39 20 31 32 2e 36 39 31 37 20 31 35 2e 35 36 32 35 20 Data Ascii: 5 13.3875C13.3167 13.6458 14.3667 14.0333 15.4 14.55C15.8833 14.8 16.2708 15.1625 16.5625 15.6375C16.8542 16.1125 17 16.6333 17 17.2V20H1ZM3 18H15V17.2C15 17.0167 14.9542 16.85 14.8625 16.7C14.7708 16.55 14.65 16.4333 14.5 16.35C13.6 15.9 12.6917 15.5625
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49827	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	728	OUT	GET /embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 HTTP/1.1 Host: forms-eu1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:31 UTC	1286	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close X-Origin-Hublet: eu1 Vary: origin Access-Control-Allow-Origin: null Access-Control-Allow-Methods: OPTIONS, GET Access-Control-Allow-Headers: * Access-Control-Allow-Credentials: false Access-Control-Max-Age: 180 X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none x-envoy-upstream-service-time: 10 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 664aa757-b928-4be4-aef9-b1c23987b849 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-7kkzx x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 664aa757-b928-4be4-aef9-b1c23987b849 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=IEIW4B.20SJFZkwwADlC1X6wzQNmZ8WTdbXx9PYHDrg-1713961951-1.0.1.1-wJLJO5_LaqVHY0BfEmoWrxbggNU024qoDD45ERl9GG.6aOXpAb2IU1fqhAor_5uLaRcNEke9ExidppTOyrfi9w; path=/; expires=Wed, 24-Apr-24 13:02:31 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 12:32:31 UTC	241	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 33 71 74 55 6a 4e 4a 31 66 58 74 51 63 4c 61 6b 35 6c 36 52 54 6e 6f 44 4b 4d 41 79 63 72 5a 6b 5a 41 71 7a 4d 64 43 61 6a 65 30 2d 31 37 31 33 39 36 31 39 35 31 35 33 36 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 36 31 64 64 34 64 62 33 66 30 31 39 38 2d 43 44 47 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=3qtUjNJ1fXtQcLak5l6RTnoDKMAycrZkZAqzMdCaje0-1713961951536-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 87961dd4db3f0198-CDGalt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 34 63 33 34 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 31 34 33 34 35 36 37 37 34 2c 22 67 75 69 64 22 3a 22 38 38 64 33 35 64 66 30 2d 64 33 63 38 2d 34 38 34 37 2d 61 30 35 36 2d 62 37 31 35 65 62 35 33 38 36 63 33 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 3c 70 20 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 22 3e c2 a1 47 72 61 63 69 61 73 20 70 6f 72 20 65 6c 20 69 6e 74 65 72 c3 a9 73 21 3c 2f 70 3e 5c 6e 3c 70 20 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 22 3e 54 65 20 68 61 73 20 72 65 67 69 73 74 72 61 64 6f 20 65 6e 20 6e 75 65 73 74 72 61 20 Data Ascii: 4c34{"form":{"portalId":143456774,"guid":"88d35df0-d3c8-4847-a056-b715eb5386c3","cssClass":"hs-form stacked","inlineMessage":"<p style=\"text-align: center;\">Gracias por el inters!</p>\n<p style=\"text-align: center;\">Te has registrado en nuestra
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 63 68 65 63 6b 62 6f 78 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 67 72 6f 75 70 4e 61 6d 65 22 3a 22 65 73 5f 63 6f 6e 74 61 63 74 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 59 65 73 22 2c 22 76 61 6c 75 65 22 Data Ascii: checkbox","description":"","groupName":"es_contact","displayOrder":-1,"required":true,"selectedOptions":[],"options":[{"label":"No","value":"false","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Yes","value"
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 64 22 3a 22 30 2d 31 22 7d 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 73 53 6d 61 72 74 47 72 6f 75 70 22 3a 66 61 6c 73 65 2c 22 72 69 63 68 54 65 78 74 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 54 45 58 54 22 7d 2c 22 69 73 50 61 67 65 42 72 65 61 6b 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 69 65 6c 64 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 61 63 71 75 69 73 69 74 69 6f 6e 5f 66 6f 72 6d 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 4c 61 73 74 20 41 63 71 75 69 73 69 74 69 6f 6e 20 46 6f 72 6d 22 2c 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 66 69 65 6c 64 54 79 70 65 22 3a 22 74 65 78 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 67 72 6f 75 70 4e 61 6d 65 22 3a 22 65 73 5f 63 6f 6e 74 61 63 Data Ascii: d":"0-1"}],"default":true,"isSmartGroup":false,"richText":{"content":"","type":"TEXT"},"isPageBreak":false},{"fields":[{"name":"acquisition_form__c","label":"Last Acquisition Form","type":"string","fieldType":"text","description":"","groupName":"es_contac
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 45 78 74 65 72 6e 61 6c 20 43 6f 6e 73 75 6c 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 45 78 74 65 72 6e 61 6c 20 43 6f 6e 73 75 6c 74 61 6e 74 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 49 6e 62 6f 75 6e 64 20 43 6f 72 70 6f 72 61 74 65 22 2c 22 76 61 6c 75 65 22 3a 22 49 6e 62 6f 75 6e 64 5f 43 6f 72 70 6f 72 61 74 65 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 Data Ascii: ly":false},{"label":"External Consultant","value":"External Consultant","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Inbound Corporate","value":"Inbound_Corporate","displayOrder":-1,"doubleData":0.0,"hidde
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 49 6e 62 6f 75 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 49 6e 62 6f 75 6e 64 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 31 33 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 5d 2c 22 76 61 6c 69 64 61 74 69 6f 6e 22 3a 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 64 61 74 61 22 3a 22 22 2c 22 75 73 65 44 65 66 61 75 6c 74 42 6c 6f 63 6b 4c 69 73 74 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 65 64 45 6d 61 69 6c 41 64 64 72 65 73 73 65 73 22 3a 5b 5d 2c 22 63 68 65 63 6b 50 68 6f 6e 65 46 6f 72 6d 61 74 22 3a 66 61 6c 73 65 7d 2c 22 65 Data Ascii: },{"label":"Inbound","value":"Inbound","displayOrder":13,"doubleData":0.0,"hidden":false,"description":"","readOnly":false}],"validation":{"name":"","message":"","data":"","useDefaultBlockList":false,"blockedEmailAddresses":[],"checkPhoneFormat":false},"e
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 64 69 72 65 63 74 20 74 72 61 66 66 69 63 22 2c 22 76 61 6c 75 65 22 3a 22 64 69 72 65 63 74 20 74 72 61 66 66 69 63 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e Data Ascii: se,"description":"","readOnly":false},{"label":"facebook","value":"facebook","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"direct traffic","value":"direct traffic","displayOrder":-1,"doubleData":0.0,"hidden
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 45 6d 61 69 6c 22 2c 22 76 61 6c 75 65 22 3a 22 45 6d 61 69 6c 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 79 61 68 6f 6f 22 2c 22 76 61 6c 75 65 22 3a 22 79 61 68 6f 6f 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 Data Ascii: bleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Email","value":"Email","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"yahoo","value":"yahoo","displayOrder":-1,"doubleData":0.0,"hidde
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 41 70 70 76 69 7a 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 41 70 70 76 69 7a 65 72 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 66 69 6e 61 6e 63 65 69 6e 6e 6f 76 61 74 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 46 69 6e 61 6e 63 65 20 49 6e 6e 6f 76 61 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c Data Ascii: ion":"","readOnly":false},{"label":"Appvizer","value":"Appvizer","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"financeinnovation","value":"Finance Innovation","displayOrder":-1,"doubleData":0.0,"hidden":fal
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 50 61 69 64 20 53 65 61 72 63 68 22 2c 22 76 61 6c 75 65 22 3a 22 50 61 69 64 20 53 65 61 72 63 68 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 50 61 69 64 20 53 6f 63 69 61 6c 22 2c 22 76 61 6c 75 65 22 3a 22 50 61 69 64 20 53 6f 63 69 61 6c 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 Data Ascii: Paid Search","value":"Paid Search","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Paid Social","value":"Paid Social","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49836	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	619	OUT	GET /wp-content/uploads/2023/11/certified-email.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-2ed" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd5be4a09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	756	IN	Data Raw: 32 65 64 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 36 35 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 2ed<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8665" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49835	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	635	OUT	GET /wp-content/uploads/2023/11/external-registration-authority.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-3f0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd5bbe00add-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 33 66 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 37 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 3f0<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8676" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	123	IN	Data Raw: 35 4c 31 34 2e 35 35 20 31 32 2e 31 37 35 4c 31 33 2e 31 32 35 20 31 30 2e 37 35 4c 31 31 2e 37 32 35 20 31 32 2e 31 37 35 4c 31 34 2e 35 35 20 31 35 5a 4d 35 20 31 33 48 31 30 56 31 31 48 35 56 31 33 5a 4d 35 20 39 48 31 30 56 37 48 35 56 39 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 5L14.55 12.175L13.125 10.75L11.725 12.175L14.55 15ZM5 13H10V11H5V13ZM5 9H10V7H5V9Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49837	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	617	OUT	GET /wp-content/uploads/2023/11/certified-SMS.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-9cc" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd5c8dfa984-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	892	IN	Data Raw: 39 63 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 36 38 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 9cc<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8668" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:31 UTC	1369	IN	Data Raw: 43 31 31 20 31 30 2e 32 38 33 33 20 31 31 2e 30 39 35 38 20 31 30 2e 35 32 30 38 20 31 31 2e 32 38 37 35 20 31 30 2e 37 31 32 35 43 31 31 2e 34 37 39 32 20 31 30 2e 39 30 34 32 20 31 31 2e 37 31 36 37 20 31 31 20 31 32 20 31 31 5a 4d 31 36 20 31 31 43 31 36 2e 32 38 33 33 20 31 31 20 31 36 2e 35 32 30 38 20 31 30 2e 39 30 34 32 20 31 36 2e 37 31 32 35 20 31 30 2e 37 31 32 35 43 31 36 2e 39 30 34 32 20 31 30 2e 35 32 30 38 20 31 37 20 31 30 2e 32 38 33 33 20 31 37 20 31 30 43 31 37 20 39 2e 37 31 36 36 37 20 31 36 2e 39 30 34 32 20 39 2e 34 37 39 31 37 20 31 36 2e 37 31 32 35 20 39 2e 32 38 37 35 43 31 36 2e 35 32 30 38 20 39 2e 30 39 35 38 33 20 31 36 2e 32 38 33 33 20 39 20 31 36 20 39 43 31 35 2e 37 31 36 37 20 39 20 31 35 2e 34 37 39 32 20 39 2e 30 39 Data Ascii: C11 10.2833 11.0958 10.5208 11.2875 10.7125C11.4792 10.9042 11.7167 11 12 11ZM16 11C16.2833 11 16.5208 10.9042 16.7125 10.7125C16.9042 10.5208 17 10.2833 17 10C17 9.71667 16.9042 9.47917 16.7125 9.2875C16.5208 9.09583 16.2833 9 16 9C15.7167 9 15.4792 9.09
2024-04-24 12:32:31 UTC	254	IN	Data Raw: 20 31 36 2e 39 30 34 32 20 39 2e 34 37 39 31 37 20 31 36 2e 37 31 32 35 20 39 2e 32 38 37 35 43 31 36 2e 35 32 30 38 20 39 2e 30 39 35 38 33 20 31 36 2e 32 38 33 33 20 39 20 31 36 20 39 43 31 35 2e 37 31 36 37 20 39 20 31 35 2e 34 37 39 32 20 39 2e 30 39 35 38 33 20 31 35 2e 32 38 37 35 20 39 2e 32 38 37 35 43 31 35 2e 30 39 35 38 20 39 2e 34 37 39 31 37 20 31 35 20 39 2e 37 31 36 36 37 20 31 35 20 31 30 43 31 35 20 31 30 2e 32 38 33 33 20 31 35 2e 30 39 35 38 20 31 30 2e 35 32 30 38 20 31 35 2e 32 38 37 35 20 31 30 2e 37 31 32 35 43 31 35 2e 34 37 39 32 20 31 30 2e 39 30 34 32 20 31 35 2e 37 31 36 37 20 31 31 20 31 36 20 31 31 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 16.9042 9.47917 16.7125 9.2875C16.5208 9.09583 16.2833 9 16 9C15.7167 9 15.4792 9.09583 15.2875 9.2875C15.0958 9.47917 15 9.71667 15 10C15 10.2833 15.0958 10.5208 15.2875 10.7125C15.4792 10.9042 15.7167 11 16 11Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49838	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	865	OUT	GET /wp-content/uploads/2023/11/universign.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-1ec" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd75fac09fd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:31 UTC	499	IN	Data Raw: 31 65 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 37 39 38 20 31 36 2e 39 32 31 31 43 39 2e 33 36 31 38 31 20 31 36 2e 39 32 31 31 20 38 2e 35 30 37 38 31 20 31 35 Data Ascii: 1ec<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M11.9798 16.9211C9.36181 16.9211 8.50781 15
2024-04-24 12:32:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49839	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	626	OUT	GET /wp-content/uploads/2023/11/qualified-certificates.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-9f0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 0 Server: cloudflare CF-RAY: 87961dd768620acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	892	IN	Data Raw: 39 66 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 38 30 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 9f0<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8680" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 2e 34 34 30 31 20 31 31 2e 35 32 37 38 20 31 37 2e 39 32 37 31 20 31 31 2e 33 33 33 33 20 31 38 2e 35 20 31 31 2e 33 33 33 33 43 31 39 2e 30 37 32 39 20 31 31 2e 33 33 33 33 20 31 39 2e 35 35 39 39 20 31 31 2e 35 32 37 38 20 31 39 2e 39 36 30 39 20 31 31 2e 39 31 36 37 43 32 30 2e 33 36 32 20 31 32 2e 33 30 35 36 20 32 30 2e 35 36 32 35 20 31 32 2e 37 37 37 38 20 32 30 2e 35 36 32 35 20 31 33 2e 33 33 33 33 43 32 30 2e 35 36 32 35 20 31 33 2e 38 38 38 39 20 32 30 2e 33 36 32 20 31 34 2e 33 36 31 31 20 31 39 2e 39 36 30 39 20 31 34 2e 37 35 43 31 39 2e 35 35 39 39 20 31 35 2e 31 33 38 39 20 31 39 2e 30 37 32 39 20 31 35 2e 33 33 33 33 20 31 38 2e 35 20 31 35 2e 33 33 33 33 5a 4d 31 34 2e 33 37 35 20 32 32 56 31 36 2e 38 35 43 31 33 2e 39 33 39 36 20 31 36 Data Ascii: .4401 11.5278 17.9271 11.3333 18.5 11.3333C19.0729 11.3333 19.5599 11.5278 19.9609 11.9167C20.362 12.3056 20.5625 12.7778 20.5625 13.3333C20.5625 13.8889 20.362 14.3611 19.9609 14.75C19.5599 15.1389 19.0729 15.3333 18.5 15.3333ZM14.375 22V16.85C13.9396 16
2024-04-24 12:32:32 UTC	290	IN	Data Raw: 35 36 20 31 37 2e 30 33 39 31 20 31 31 2e 39 31 36 37 43 31 37 2e 34 34 30 31 20 31 31 2e 35 32 37 38 20 31 37 2e 39 32 37 31 20 31 31 2e 33 33 33 34 20 31 38 2e 35 20 31 31 2e 33 33 33 34 43 31 39 2e 30 37 32 39 20 31 31 2e 33 33 33 34 20 31 39 2e 35 35 39 39 20 31 31 2e 35 32 37 38 20 31 39 2e 39 36 30 39 20 31 31 2e 39 31 36 37 43 32 30 2e 33 36 32 20 31 32 2e 33 30 35 36 20 32 30 2e 35 36 32 35 20 31 32 2e 37 37 37 38 20 32 30 2e 35 36 32 35 20 31 33 2e 33 33 33 34 43 32 30 2e 35 36 32 35 20 31 33 2e 38 38 38 39 20 32 30 2e 33 36 32 20 31 34 2e 33 36 31 32 20 31 39 2e 39 36 30 39 20 31 34 2e 37 35 43 31 39 2e 35 35 39 39 20 31 35 2e 31 33 38 39 20 31 39 2e 30 37 32 39 20 31 35 2e 33 33 33 34 20 31 38 2e 35 20 31 35 2e 33 33 33 34 5a 22 20 66 69 6c 6c Data Ascii: 56 17.0391 11.9167C17.4401 11.5278 17.9271 11.3334 18.5 11.3334C19.0729 11.3334 19.5599 11.5278 19.9609 11.9167C20.362 12.3056 20.5625 12.7778 20.5625 13.3334C20.5625 13.8889 20.362 14.3612 19.9609 14.75C19.5599 15.1389 19.0729 15.3334 18.5 15.3334Z" fill
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49840	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	890	OUT	GET /wp-content/uploads/2023/12/qualified-certificates-seals-1_icon.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:34:13 GMT ETag: W/"65845af5-77c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd83f5d09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	900	IN	Data Raw: 37 37 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 39 36 22 20 68 65 69 67 68 74 3d 22 39 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 36 20 39 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 34 34 37 5f 31 34 38 33 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 34 34 37 5f 31 34 38 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 Data Ascii: 77c<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="96" height="96" viewBox="0 0 96 96" fill="none"> <g clip-path="url(#clip0_2447_1483)"> <mask id="mask0_2447_1483" style="mask-type:alpha" maskUnits="userSpace
2024-04-24 12:32:32 UTC	1023	IN	Data Raw: 20 37 39 2e 33 20 34 37 2e 39 20 37 37 2e 39 20 35 31 2e 35 43 37 36 2e 35 20 35 35 2e 31 20 37 34 2e 35 33 33 32 20 35 38 2e 33 20 37 32 20 36 31 2e 31 56 39 32 4c 34 38 20 38 34 4c 32 34 20 39 32 5a 4d 34 38 20 36 34 43 35 34 2e 36 36 36 38 20 36 34 20 36 30 2e 33 33 33 32 20 36 31 2e 36 36 36 38 20 36 35 20 35 37 43 36 39 2e 36 36 36 38 20 35 32 2e 33 33 33 32 20 37 32 20 34 36 2e 36 36 36 38 20 37 32 20 34 30 43 37 32 20 33 33 2e 33 33 33 33 20 36 39 2e 36 36 36 38 20 32 37 2e 36 36 36 37 20 36 35 20 32 33 43 36 30 2e 33 33 33 32 20 31 38 2e 33 33 33 33 20 35 34 2e 36 36 36 38 20 31 36 20 34 38 20 31 36 43 34 31 2e 33 33 33 32 20 31 36 20 33 35 2e 36 36 36 37 20 31 38 2e 33 33 33 33 20 33 31 20 32 33 43 32 36 2e 33 33 33 33 20 32 37 2e 36 36 36 37 20 Data Ascii: 79.3 47.9 77.9 51.5C76.5 55.1 74.5332 58.3 72 61.1V92L48 84L24 92ZM48 64C54.6668 64 60.3332 61.6668 65 57C69.6668 52.3332 72 46.6668 72 40C72 33.3333 69.6668 27.6667 65 23C60.3332 18.3333 54.6668 16 48 16C41.3332 16 35.6667 18.3333 31 23C26.3333 27.6667
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49841	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	624	OUT	GET /wp-content/uploads/2023/11/qualified-time-stamp.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-486" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd849f0a982-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	892	IN	Data Raw: 34 38 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 38 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 486<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8686" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	273	IN	Data Raw: 35 20 37 20 31 33 2e 33 38 33 33 20 37 20 31 32 43 37 20 31 30 2e 36 31 36 37 20 37 2e 34 38 37 35 20 39 2e 34 33 37 35 20 38 2e 34 36 32 35 20 38 2e 34 36 32 35 43 39 2e 34 33 37 35 20 37 2e 34 38 37 35 20 31 30 2e 36 31 36 37 20 37 20 31 32 20 37 43 31 33 2e 33 38 33 33 20 37 20 31 34 2e 35 36 32 35 20 37 2e 34 38 37 35 20 31 35 2e 35 33 37 35 20 38 2e 34 36 32 35 43 31 36 2e 35 31 32 35 20 39 2e 34 33 37 35 20 31 37 20 31 30 2e 36 31 36 37 20 31 37 20 31 32 43 31 37 20 31 33 2e 33 38 33 33 20 31 36 2e 35 31 32 35 20 31 34 2e 35 36 32 35 20 31 35 2e 35 33 37 35 20 31 35 2e 35 33 37 35 43 31 34 2e 35 36 32 35 20 31 36 2e 35 31 32 35 20 31 33 2e 33 38 33 33 20 31 37 20 31 32 20 31 37 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 Data Ascii: 5 7 13.3833 7 12C7 10.6167 7.4875 9.4375 8.4625 8.4625C9.4375 7.4875 10.6167 7 12 7C13.3833 7 14.5625 7.4875 15.5375 8.4625C16.5125 9.4375 17 10.6167 17 12C17 13.3833 16.5125 14.5625 15.5375 15.5375C14.5625 16.5125 13.3833 17 12 17Z" fill="#0A0AF4"></path
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49843	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	860	OUT	GET /wp-content/uploads/2023/11/group.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:49 GMT ETag: W/"65845b55-12f5" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd86c1d09fb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	899	IN	Data Raw: 31 32 66 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 37 38 37 38 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 38 37 38 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 Data Ascii: 12f5<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_7878)"> <mask id="mask0_2056_7878" style="mask-type:alpha" maskUnits="userSpac
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 43 31 30 2e 36 32 31 32 20 31 32 2e 38 33 37 35 20 31 31 2e 32 38 34 36 20 31 32 2e 37 36 38 38 20 31 31 2e 39 39 39 36 20 31 32 2e 37 36 38 38 43 31 32 2e 37 32 38 34 20 31 32 2e 37 36 38 38 20 31 33 2e 33 39 38 37 20 31 32 2e 38 33 37 35 20 31 34 2e 30 31 30 35 20 31 32 2e 39 37 35 43 31 34 2e 36 32 32 34 20 31 33 2e 31 31 32 35 20 31 35 2e 31 34 38 34 20 31 33 2e 33 31 38 38 20 31 35 2e 35 38 38 34 20 31 33 2e 35 39 33 38 43 31 36 2e 30 32 38 34 20 31 33 2e 38 36 38 38 20 31 36 2e 33 36 35 32 20 31 34 2e 31 38 38 34 20 31 36 2e 35 39 39 20 31 34 2e 35 35 32 38 43 31 36 2e 38 33 32 37 20 31 34 2e 39 31 37 32 20 31 36 2e 39 34 39 36 20 31 35 2e 33 31 39 34 20 31 36 2e 39 34 39 36 20 31 35 2e 37 35 39 34 56 31 37 2e 31 48 37 2e 30 34 39 36 31 5a 4d 31 38 Data Ascii: C10.6212 12.8375 11.2846 12.7688 11.9996 12.7688C12.7284 12.7688 13.3987 12.8375 14.0105 12.975C14.6224 13.1125 15.1484 13.3188 15.5884 13.5938C16.0284 13.8688 16.3652 14.1884 16.599 14.5528C16.8327 14.9172 16.9496 15.3194 16.9496 15.7594V17.1H7.04961ZM18
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 31 43 31 39 2e 30 36 37 31 20 39 2e 36 37 35 30 31 20 31 39 2e 34 35 39 20 39 2e 38 33 33 31 34 20 31 39 2e 37 37 35 32 20 31 30 2e 31 34 39 34 43 32 30 2e 30 39 31 35 20 31 30 2e 34 36 35 36 20 32 30 2e 32 34 39 36 20 31 30 2e 38 35 37 35 20 32 30 2e 32 34 39 36 20 31 31 2e 33 32 35 43 32 30 2e 32 34 39 36 20 31 31 2e 37 37 38 38 20 32 30 2e 30 39 31 35 20 31 32 2e 31 36 37 32 20 31 39 2e 37 37 35 32 20 31 32 2e 34 39 30 33 43 31 39 2e 34 35 39 20 31 32 2e 38 31 33 34 20 31 39 2e 30 36 37 31 20 31 32 2e 39 37 35 20 31 38 2e 35 39 39 36 20 31 32 2e 39 37 35 5a 4d 31 31 2e 39 39 39 36 20 31 32 2e 31 35 43 31 31 2e 33 31 32 31 20 31 32 2e 31 35 20 31 30 2e 37 32 37 37 20 31 31 2e 39 30 39 34 20 31 30 2e 32 34 36 35 20 31 31 2e 34 32 38 31 43 39 2e 37 36 35 Data Ascii: 1C19.0671 9.67501 19.459 9.83314 19.7752 10.1494C20.0915 10.4656 20.2496 10.8575 20.2496 11.325C20.2496 11.7788 20.0915 12.1672 19.7752 12.4903C19.459 12.8134 19.0671 12.975 18.5996 12.975ZM11.9996 12.15C11.3121 12.15 10.7277 11.9094 10.2465 11.4281C9.765
2024-04-24 12:32:32 UTC	1224	IN	Data Raw: 36 35 20 31 38 2e 30 35 33 20 31 34 2e 37 34 38 37 43 31 37 2e 39 36 33 37 20 31 34 2e 34 33 32 35 20 31 37 2e 38 32 39 36 20 31 34 2e 31 33 36 39 20 31 37 2e 36 35 30 39 20 31 33 2e 38 36 31 39 43 31 37 2e 38 30 32 31 20 31 33 2e 38 33 34 34 20 31 37 2e 39 35 36 38 20 31 33 2e 38 31 37 32 20 31 38 2e 31 31 34 39 20 31 33 2e 38 31 30 33 43 31 38 2e 32 37 33 20 31 33 2e 38 30 33 34 20 31 38 2e 34 33 34 36 20 31 33 2e 38 20 31 38 2e 35 39 39 36 20 31 33 2e 38 43 31 39 2e 35 38 39 36 20 31 33 2e 38 20 32 30 2e 33 38 37 31 20 31 33 2e 39 38 32 32 20 32 30 2e 39 39 32 31 20 31 34 2e 33 34 36 36 43 32 31 2e 35 39 37 31 20 31 34 2e 37 31 30 39 20 32 31 2e 38 39 39 36 20 31 35 2e 31 39 35 36 20 32 31 2e 38 39 39 36 20 31 35 2e 38 30 30 36 56 31 37 2e 31 48 31 38 Data Ascii: 65 18.053 14.7487C17.9637 14.4325 17.8296 14.1369 17.6509 13.8619C17.8021 13.8344 17.9568 13.8172 18.1149 13.8103C18.273 13.8034 18.4346 13.8 18.5996 13.8C19.5896 13.8 20.3871 13.9822 20.9921 14.3466C21.5971 14.7109 21.8996 15.1956 21.8996 15.8006V17.1H18
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49842	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	869	OUT	GET /wp-content/uploads/2023/11/accreditations.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:45 GMT ETag: W/"65845b51-343" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd859fba982-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	842	IN	Data Raw: 33 34 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 30 30 38 20 32 32 2e 31 30 31 43 39 2e 35 38 34 30 31 20 32 31 2e 35 31 37 36 20 37 2e 36 37 31 34 31 20 32 30 2e 31 38 38 34 20 36 2e 31 36 33 20 31 38 2e 31 31 33 33 43 34 2e 36 35 34 35 39 20 31 36 2e 30 33 38 32 20 33 2e 39 30 30 33 39 20 31 33 2e 37 33 33 39 20 33 2e 39 30 30 33 39 20 31 31 Data Ascii: 343<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path d="M11.9008 22.101C9.58401 21.5176 7.67141 20.1884 6.163 18.1133C4.65459 16.0382 3.90039 13.7339 3.90039 11
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49844	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	878	OUT	GET /wp-content/uploads/2023/11/customer-first-approach.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-189c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd87ecc69e3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	899	IN	Data Raw: 31 38 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 38 37 32 33 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 32 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 Data Ascii: 189c<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_8723)"> <mask id="mask0_2056_8723" style="mask-type:alpha" maskUnits="userSpac
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 30 37 35 32 20 34 2e 38 35 4c 31 34 2e 39 32 35 32 20 36 2e 37 32 35 43 31 35 2e 31 37 35 32 20 36 2e 39 35 38 33 33 20 31 35 2e 33 35 38 36 20 37 2e 32 32 35 20 31 35 2e 34 37 35 32 20 37 2e 35 32 35 43 31 35 2e 35 39 31 39 20 37 2e 38 32 35 20 31 35 2e 36 35 30 32 20 38 2e 31 34 31 36 37 20 31 35 2e 36 35 30 32 20 38 2e 34 37 35 43 31 35 2e 36 35 30 32 20 39 2e 31 37 35 20 31 35 2e 34 31 32 37 20 39 2e 37 36 32 35 20 31 34 2e 39 33 37 37 20 31 30 2e 32 33 37 35 43 31 34 2e 34 36 32 37 20 31 30 2e 37 31 32 35 20 31 33 2e 38 37 35 32 20 31 30 2e 39 35 20 31 33 2e 31 37 35 32 20 31 30 2e 39 35 43 31 32 2e 38 34 31 39 20 31 30 2e 39 35 20 31 32 2e 35 32 31 31 20 31 30 2e 38 39 31 37 20 31 32 2e 32 31 32 37 20 31 30 2e 37 37 35 43 31 31 2e 39 30 34 34 20 31 Data Ascii: 0752 4.85L14.9252 6.725C15.1752 6.95833 15.3586 7.225 15.4752 7.525C15.5919 7.825 15.6502 8.14167 15.6502 8.475C15.6502 9.175 15.4127 9.7625 14.9377 10.2375C14.4627 10.7125 13.8752 10.95 13.1752 10.95C12.8419 10.95 12.5211 10.8917 12.2127 10.775C11.9044 1
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 31 31 2e 35 31 32 37 20 31 39 2e 38 35 43 31 31 2e 36 32 31 31 20 31 39 2e 39 35 20 31 31 2e 37 34 31 39 20 32 30 20 31 31 2e 38 37 35 32 20 32 30 5a 4d 31 31 2e 38 35 30 32 20 32 32 43 31 31 2e 32 33 33 36 20 32 32 20 31 30 2e 36 38 37 37 20 32 31 2e 37 39 35 38 20 31 30 2e 32 31 32 37 20 32 31 2e 33 38 37 35 43 39 2e 37 33 37 37 33 20 32 30 2e 39 37 39 32 20 39 2e 34 35 38 35 37 20 32 30 2e 34 36 36 37 20 39 2e 33 37 35 32 33 20 31 39 2e 38 35 43 38 2e 38 30 38 35 37 20 31 39 2e 37 36 36 37 20 38 2e 33 33 33 35 37 20 31 39 2e 35 33 33 33 20 37 2e 39 35 30 32 33 20 31 39 2e 31 35 43 37 2e 35 36 36 39 20 31 38 2e 37 36 36 37 20 37 2e 33 33 33 35 37 20 31 38 2e 32 39 31 37 20 37 2e 32 35 30 32 33 20 31 37 2e 37 32 35 43 36 2e 36 38 33 35 37 20 31 37 2e 36 Data Ascii: 11.5127 19.85C11.6211 19.95 11.7419 20 11.8752 20ZM11.8502 22C11.2336 22 10.6877 21.7958 10.2127 21.3875C9.73773 20.9792 9.45857 20.4667 9.37523 19.85C8.80857 19.7667 8.33357 19.5333 7.95023 19.15C7.5669 18.7667 7.33357 18.2917 7.25023 17.725C6.68357 17.6
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 2e 37 39 31 36 37 20 36 2e 35 34 36 30 37 20 32 2e 35 20 37 2e 30 33 37 37 33 20 32 2e 33 43 37 2e 35 32 39 34 20 32 2e 31 20 38 2e 30 33 33 35 37 20 32 20 38 2e 35 35 30 32 33 20 32 43 39 2e 30 36 36 39 20 32 20 39 2e 35 37 31 30 37 20 32 2e 31 20 31 30 2e 30 36 32 37 20 32 2e 33 43 31 30 2e 35 35 34 34 20 32 2e 35 20 31 30 2e 39 39 31 39 20 32 2e 37 39 31 36 37 20 31 31 2e 33 37 35 32 20 33 2e 31 37 35 4c 31 31 2e 36 35 30 32 20 33 2e 34 35 4c 31 31 2e 39 32 35 32 20 33 2e 31 37 35 43 31 32 2e 33 32 35 32 20 32 2e 37 39 31 36 37 20 31 32 2e 37 37 31 31 20 32 2e 35 20 31 33 2e 32 36 32 37 20 32 2e 33 43 31 33 2e 37 35 34 34 20 32 2e 31 20 31 34 2e 32 35 38 36 20 32 20 31 34 2e 37 37 35 32 20 32 43 31 35 2e 32 39 31 39 20 32 20 31 35 2e 37 39 36 31 20 32 Data Ascii: .79167 6.54607 2.5 7.03773 2.3C7.5294 2.1 8.03357 2 8.55023 2C9.0669 2 9.57107 2.1 10.0627 2.3C10.5544 2.5 10.9919 2.79167 11.3752 3.175L11.6502 3.45L11.9252 3.175C12.3252 2.79167 12.7711 2.5 13.2627 2.3C13.7544 2.1 14.2586 2 14.7752 2C15.2919 2 15.7961 2
2024-04-24 12:32:32 UTC	1302	IN	Data Raw: 2e 31 30 30 32 33 20 32 2e 37 39 31 39 31 20 35 2e 37 30 30 32 33 20 33 2e 31 37 35 32 34 4c 32 2e 31 37 35 32 33 20 36 2e 37 30 30 32 34 43 31 2e 38 32 35 32 33 20 37 2e 30 35 30 32 34 20 31 2e 35 35 30 32 33 20 37 2e 34 34 36 30 38 20 31 2e 33 35 30 32 33 20 37 2e 38 38 37 37 34 43 31 2e 33 32 35 32 33 20 37 2e 39 34 32 39 35 20 31 2e 33 30 31 35 34 20 37 2e 39 39 38 33 36 20 31 2e 32 37 39 31 34 20 38 2e 30 35 33 39 36 43 31 2e 31 32 32 33 37 20 38 2e 34 34 33 31 35 20 31 2e 30 32 39 34 20 38 2e 38 34 31 39 31 20 31 2e 30 30 30 32 33 20 39 2e 32 35 30 32 34 43 30 2e 39 36 36 39 30 31 20 39 2e 37 31 36 39 31 20 31 2e 30 31 36 39 20 31 30 2e 31 37 39 34 20 31 2e 31 35 30 32 33 20 31 30 2e 36 33 37 37 43 31 2e 32 38 33 35 37 20 31 31 2e 30 39 36 31 20 31 Data Ascii: .10023 2.79191 5.70023 3.17524L2.17523 6.70024C1.82523 7.05024 1.55023 7.44608 1.35023 7.88774C1.32523 7.94295 1.30154 7.99836 1.27914 8.05396C1.12237 8.44315 1.0294 8.84191 1.00023 9.25024C0.966901 9.71691 1.0169 10.1794 1.15023 10.6377C1.28357 11.0961 1
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49845	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:31 UTC	632	OUT	GET /wp-content/uploads/2023/11/qualified-certificates-seals.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-719" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dd8cc8609f7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	892	IN	Data Raw: 37 31 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 39 30 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 719<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8690" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	932	IN	Data Raw: 2e 39 37 35 20 31 39 2e 34 37 35 20 31 32 2e 38 37 35 43 31 39 2e 31 32 35 20 31 33 2e 37 37 35 20 31 38 2e 36 33 33 33 20 31 34 2e 35 37 35 20 31 38 20 31 35 2e 32 37 35 56 32 33 4c 31 32 20 32 31 4c 36 20 32 33 5a 4d 31 32 20 31 36 43 31 33 2e 36 36 36 37 20 31 36 20 31 35 2e 30 38 33 33 20 31 35 2e 34 31 36 37 20 31 36 2e 32 35 20 31 34 2e 32 35 43 31 37 2e 34 31 36 37 20 31 33 2e 30 38 33 33 20 31 38 20 31 31 2e 36 36 36 37 20 31 38 20 31 30 43 31 38 20 38 2e 33 33 33 33 33 20 31 37 2e 34 31 36 37 20 36 2e 39 31 36 36 37 20 31 36 2e 32 35 20 35 2e 37 35 43 31 35 2e 30 38 33 33 20 34 2e 35 38 33 33 33 20 31 33 2e 36 36 36 37 20 34 20 31 32 20 34 43 31 30 2e 33 33 33 33 20 34 20 38 2e 39 31 36 36 37 20 34 2e 35 38 33 33 33 20 37 2e 37 35 20 35 2e 37 35 Data Ascii: .975 19.475 12.875C19.125 13.775 18.6333 14.575 18 15.275V23L12 21L6 23ZM12 16C13.6667 16 15.0833 15.4167 16.25 14.25C17.4167 13.0833 18 11.6667 18 10C18 8.33333 17.4167 6.91667 16.25 5.75C15.0833 4.58333 13.6667 4 12 4C10.3333 4 8.91667 4.58333 7.75 5.75
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49846	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	871	OUT	GET /wp-content/uploads/2023/11/customer-reviews.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-3c8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961dd9ef7d0acd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	900	IN	Data Raw: 33 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 31 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 3c8<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7913" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	75	IN	Data Raw: 33 33 20 36 2e 30 39 35 38 33 20 31 37 2e 35 32 30 38 20 36 2e 32 38 37 35 20 31 37 2e 37 31 32 35 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 33 6.09583 17.5208 6.2875 17.7125Z" fill="#030352"></path> </g></svg>
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49847	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	612	OUT	GET /wp-content/uploads/2023/11/video-id.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-b7e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dda0acd09f5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	892	IN	Data Raw: 62 37 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 30 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: b7e<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8701" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 31 2e 30 39 35 38 20 39 2e 35 32 30 38 33 20 31 31 2e 32 38 37 35 20 39 2e 37 31 32 35 43 31 31 2e 34 37 39 32 20 39 2e 39 30 34 31 37 20 31 31 2e 37 31 36 37 20 31 30 20 31 32 20 31 30 5a 4d 36 20 31 38 56 31 36 2e 31 43 36 20 31 35 2e 37 35 20 36 2e 30 38 37 35 20 31 35 2e 34 32 30 38 20 36 2e 32 36 32 35 20 31 35 2e 31 31 32 35 43 36 2e 34 33 37 35 20 31 34 2e 38 30 34 32 20 36 2e 36 37 35 20 31 34 2e 35 35 38 33 20 36 2e 39 37 35 20 31 34 2e 33 37 35 43 37 2e 37 34 31 36 37 20 31 33 2e 39 32 35 20 38 2e 35 34 35 38 33 20 31 33 2e 35 38 33 33 20 39 2e 33 38 37 35 20 31 33 2e 33 35 43 31 30 2e 32 32 39 32 20 31 33 2e 31 31 36 37 20 31 31 2e 31 20 31 33 20 31 32 20 31 33 43 31 32 2e 39 20 31 33 20 31 33 2e 37 37 30 38 20 31 33 2e 31 31 36 37 20 31 34 2e Data Ascii: 1.0958 9.52083 11.2875 9.7125C11.4792 9.90417 11.7167 10 12 10ZM6 18V16.1C6 15.75 6.0875 15.4208 6.2625 15.1125C6.4375 14.8042 6.675 14.5583 6.975 14.375C7.74167 13.925 8.54583 13.5833 9.3875 13.35C10.2292 13.1167 11.1 13 12 13C12.9 13 13.7708 13.1167 14.
2024-04-24 12:32:32 UTC	688	IN	Data Raw: 32 38 33 33 20 38 20 31 32 20 38 43 31 31 2e 37 31 36 37 20 38 20 31 31 2e 34 37 39 32 20 38 2e 30 39 35 38 33 20 31 31 2e 32 38 37 35 20 38 2e 32 38 37 35 43 31 31 2e 30 39 35 38 20 38 2e 34 37 39 31 37 20 31 31 20 38 2e 37 31 36 36 37 20 31 31 20 39 43 31 31 20 39 2e 32 38 33 33 33 20 31 31 2e 30 39 35 38 20 39 2e 35 32 30 38 33 20 31 31 2e 32 38 37 35 20 39 2e 37 31 32 35 43 31 31 2e 34 37 39 32 20 39 2e 39 30 34 31 37 20 31 31 2e 37 31 36 37 20 31 30 20 31 32 20 31 30 5a 4d 36 20 31 38 56 31 36 2e 31 43 36 20 31 35 2e 37 35 20 36 2e 30 38 37 35 20 31 35 2e 34 32 30 38 20 36 2e 32 36 32 35 20 31 35 2e 31 31 32 35 43 36 2e 34 33 37 35 20 31 34 2e 38 30 34 32 20 36 2e 36 37 35 20 31 34 2e 35 35 38 33 20 36 2e 39 37 35 20 31 34 2e 33 37 35 43 37 2e 37 34 Data Ascii: 2833 8 12 8C11.7167 8 11.4792 8.09583 11.2875 8.2875C11.0958 8.47917 11 8.71667 11 9C11 9.28333 11.0958 9.52083 11.2875 9.7125C11.4792 9.90417 11.7167 10 12 10ZM6 18V16.1C6 15.75 6.0875 15.4208 6.2625 15.1125C6.4375 14.8042 6.675 14.5583 6.975 14.375C7.74
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49848	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	638	OUT	GET /wp-content/uploads/2023/11/public-administration-notification.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-5e8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961dda182509ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	892	IN	Data Raw: 35 65 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 36 39 34 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 5e8<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8694" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	627	IN	Data Raw: 31 36 2e 38 37 35 20 37 2e 31 32 35 43 31 36 2e 32 39 31 37 20 36 2e 35 34 31 36 37 20 31 36 20 35 2e 38 33 33 33 33 20 31 36 20 35 43 31 36 20 34 2e 31 36 36 36 37 20 31 36 2e 32 39 31 37 20 33 2e 34 35 38 33 33 20 31 36 2e 38 37 35 20 32 2e 38 37 35 43 31 37 2e 34 35 38 33 20 32 2e 32 39 31 36 37 20 31 38 2e 31 36 36 37 20 32 20 31 39 20 32 43 31 39 2e 38 33 33 33 20 32 20 32 30 2e 35 34 31 37 20 32 2e 32 39 31 36 37 20 32 31 2e 31 32 35 20 32 2e 38 37 35 43 32 31 2e 37 30 38 33 20 33 2e 34 35 38 33 33 20 32 32 20 34 2e 31 36 36 36 37 20 32 32 20 35 43 32 32 20 35 2e 38 33 33 33 33 20 32 31 2e 37 30 38 33 20 36 2e 35 34 31 36 37 20 32 31 2e 31 32 35 20 37 2e 31 32 35 43 32 30 2e 35 34 31 37 20 37 2e 37 30 38 33 33 20 31 39 2e 38 33 33 33 20 38 20 31 39 Data Ascii: 16.875 7.125C16.2917 6.54167 16 5.83333 16 5C16 4.16667 16.2917 3.45833 16.875 2.875C17.4583 2.29167 18.1667 2 19 2C19.8333 2 20.5417 2.29167 21.125 2.875C21.7083 3.45833 22 4.16667 22 5C22 5.83333 21.7083 6.54167 21.125 7.125C20.5417 7.70833 19.8333 8 19
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49851	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	1162	OUT	GET /wp-content/uploads/2023/11/success-stories.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-4e3" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961ddc39f109fd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	900	IN	Data Raw: 34 65 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 38 37 31 32 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 31 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 Data Ascii: 4e3<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_8712)"> <mask id="mask0_2056_8712" style="mask-type:alpha" maskUnits="userSpace
2024-04-24 12:32:32 UTC	358	IN	Data Raw: 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 37 2e 35 39 39 38 4c 31 39 2e 32 20 31 39 2e 39 39 39 38 4c 32 30 2e 34 20 31 38 2e 33 39 39 38 4c 31 37 2e 32 20 31 35 2e 39 39 39 38 4c 31 36 20 31 37 2e 35 39 39 38 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 36 2e 33 39 39 37 36 4c 31 37 2e 32 20 37 2e 39 39 39 37 36 4c 32 30 2e 34 20 35 2e 35 39 39 37 36 4c 31 39 2e 32 20 33 2e 39 39 39 37 36 4c 31 36 20 36 2e 33 39 39 37 36 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 30 5f Data Ascii: > <path d="M16 17.5998L19.2 19.9998L20.4 18.3998L17.2 15.9998L16 17.5998Z" fill="#0A0AF4"></path> <path d="M16 6.39976L17.2 7.99976L20.4 5.59976L19.2 3.99976L16 6.39976Z" fill="#0A0AF4"></path> </g> </g> <defs> <clipPath id="clip0_
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49855	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	906	OUT	GET /wp-content/uploads/2023/11/universign.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-1ec" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961ddd09de09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	499	IN	Data Raw: 31 65 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 72 78 3d 22 32 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 37 39 38 20 31 36 2e 39 32 31 31 43 39 2e 33 36 31 38 31 20 31 36 2e 39 32 31 31 20 38 2e 35 30 37 38 31 20 31 35 Data Ascii: 1ec<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <rect width="24" height="24" rx="2" fill="#0A0AF4"></rect> <path d="M11.9798 16.9211C9.36181 16.9211 8.50781 15
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49856	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	931	OUT	GET /wp-content/uploads/2023/12/qualified-certificates-seals-1_icon.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:34:13 GMT ETag: W/"65845af5-77c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 0 Server: cloudflare CF-RAY: 87961ddd1a6e0ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	892	IN	Data Raw: 37 37 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 39 36 22 20 68 65 69 67 68 74 3d 22 39 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 36 20 39 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 34 34 37 5f 31 34 38 33 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 34 34 37 5f 31 34 38 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 Data Ascii: 77c<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="96" height="96" viewBox="0 0 96 96" fill="none"> <g clip-path="url(#clip0_2447_1483)"> <mask id="mask0_2447_1483" style="mask-type:alpha" maskUnits="userSpace
2024-04-24 12:32:32 UTC	1031	IN	Data Raw: 20 34 34 2e 30 36 36 38 20 37 39 2e 33 20 34 37 2e 39 20 37 37 2e 39 20 35 31 2e 35 43 37 36 2e 35 20 35 35 2e 31 20 37 34 2e 35 33 33 32 20 35 38 2e 33 20 37 32 20 36 31 2e 31 56 39 32 4c 34 38 20 38 34 4c 32 34 20 39 32 5a 4d 34 38 20 36 34 43 35 34 2e 36 36 36 38 20 36 34 20 36 30 2e 33 33 33 32 20 36 31 2e 36 36 36 38 20 36 35 20 35 37 43 36 39 2e 36 36 36 38 20 35 32 2e 33 33 33 32 20 37 32 20 34 36 2e 36 36 36 38 20 37 32 20 34 30 43 37 32 20 33 33 2e 33 33 33 33 20 36 39 2e 36 36 36 38 20 32 37 2e 36 36 36 37 20 36 35 20 32 33 43 36 30 2e 33 33 33 32 20 31 38 2e 33 33 33 33 20 35 34 2e 36 36 36 38 20 31 36 20 34 38 20 31 36 43 34 31 2e 33 33 33 32 20 31 36 20 33 35 2e 36 36 36 37 20 31 38 2e 33 33 33 33 20 33 31 20 32 33 43 32 36 2e 33 33 33 33 20 Data Ascii: 44.0668 79.3 47.9 77.9 51.5C76.5 55.1 74.5332 58.3 72 61.1V92L48 84L24 92ZM48 64C54.6668 64 60.3332 61.6668 65 57C69.6668 52.3332 72 46.6668 72 40C72 33.3333 69.6668 27.6667 65 23C60.3332 18.3333 54.6668 16 48 16C41.3332 16 35.6667 18.3333 31 23C26.3333
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49853	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	1154	OUT	GET /wp-content/uploads/2023/11/support.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-1197" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961ddcc8dc09ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	899	IN	Data Raw: 31 31 39 37 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 38 37 31 37 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 31 37 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 Data Ascii: 1197<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_8717)"> <mask id="mask0_2056_8717" style="mask-type:alpha" maskUnits="userSpac
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 33 2e 30 37 35 20 31 30 2e 39 35 43 33 2e 32 32 35 20 39 2e 37 33 33 33 33 20 33 2e 35 37 30 38 33 20 38 2e 36 33 33 33 33 20 34 2e 31 31 32 35 20 37 2e 36 35 43 34 2e 36 35 34 31 37 20 36 2e 36 36 36 36 37 20 35 2e 33 32 39 31 37 20 35 2e 38 33 33 33 33 20 36 2e 31 33 37 35 20 35 2e 31 35 43 36 2e 39 34 35 38 33 20 34 2e 34 36 36 36 37 20 37 2e 38 35 34 31 37 20 33 2e 39 33 37 35 20 38 2e 38 36 32 35 20 33 2e 35 36 32 35 43 39 2e 38 37 30 38 33 20 33 2e 31 38 37 35 20 31 30 2e 39 31 36 37 20 33 20 31 32 20 33 43 31 33 2e 31 20 33 20 31 34 2e 31 35 34 32 20 33 2e 31 38 37 35 20 31 35 2e 31 36 32 35 20 33 2e 35 36 32 35 43 31 36 2e 31 37 30 38 20 33 2e 39 33 37 35 20 31 37 2e 30 37 35 20 34 2e 34 37 30 38 33 20 31 37 2e 38 37 35 20 35 2e 31 36 32 35 43 31 Data Ascii: 3.075 10.95C3.225 9.73333 3.57083 8.63333 4.1125 7.65C4.65417 6.66667 5.32917 5.83333 6.1375 5.15C6.94583 4.46667 7.85417 3.9375 8.8625 3.5625C9.87083 3.1875 10.9167 3 12 3C13.1 3 14.1542 3.1875 15.1625 3.5625C16.1708 3.9375 17.075 4.47083 17.875 5.1625C1
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 20 36 20 31 34 2e 38 37 39 32 20 36 2e 34 37 39 31 37 20 31 35 2e 39 38 37 35 20 37 2e 34 33 37 35 43 31 37 2e 30 39 35 38 20 38 2e 33 39 35 38 33 20 31 37 2e 37 36 36 37 20 39 2e 35 39 31 36 37 20 31 38 20 31 31 2e 30 32 35 43 31 36 2e 34 33 33 33 20 31 31 2e 30 30 38 33 20 31 35 2e 30 31 36 37 20 31 30 2e 35 38 37 35 20 31 33 2e 37 35 20 39 2e 37 36 32 35 43 31 32 2e 34 38 33 33 20 38 2e 39 33 37 35 20 31 31 2e 35 32 35 20 37 2e 38 36 36 36 37 20 31 30 2e 38 37 35 20 36 2e 35 35 43 31 30 2e 36 30 38 33 20 37 2e 39 20 31 30 2e 30 34 35 38 20 39 2e 30 39 35 38 33 20 39 2e 31 38 37 35 20 31 30 2e 31 33 37 35 43 38 2e 33 32 39 31 37 20 31 31 2e 31 37 39 32 20 37 2e 32 37 35 20 31 31 2e 39 35 20 36 2e 30 32 35 20 31 32 2e 34 35 5a 22 20 66 69 6c 6c 3d 22 23 Data Ascii: 6 14.8792 6.47917 15.9875 7.4375C17.0958 8.39583 17.7667 9.59167 18 11.025C16.4333 11.0083 15.0167 10.5875 13.75 9.7625C12.4833 8.9375 11.525 7.86667 10.875 6.55C10.6083 7.9 10.0458 9.09583 9.1875 10.1375C8.32917 11.1792 7.275 11.95 6.025 12.45Z" fill="#
2024-04-24 12:32:32 UTC	874	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 32 38 37 35 20 31 33 2e 37 31 32 35 43 38 2e 34 37 39 31 37 20 31 33 2e 39 30 34 32 20 38 2e 37 31 36 36 37 20 31 34 20 39 20 31 34 43 39 2e 32 38 33 33 33 20 31 34 20 39 2e 35 32 30 38 33 20 31 33 2e 39 30 34 32 20 39 2e 37 31 32 35 20 31 33 2e 37 31 32 35 43 39 2e 39 30 34 31 37 20 31 33 2e 35 32 30 38 20 31 30 20 31 33 2e 32 38 33 33 20 31 30 20 31 33 43 31 30 20 31 32 2e 37 31 36 37 20 39 2e 39 30 34 31 37 20 31 32 2e 34 37 39 32 20 39 2e 37 31 32 35 20 31 32 2e 32 38 37 35 43 39 2e 35 32 30 38 33 20 31 32 2e 30 39 35 38 20 39 2e 32 38 33 33 33 20 31 32 20 39 20 31 32 43 38 2e 37 31 36 36 37 20 31 32 20 38 2e 34 37 39 31 37 20 31 32 2e 30 39 35 38 20 38 2e 32 38 37 35 Data Ascii: "></path> <path d="M8.2875 13.7125C8.47917 13.9042 8.71667 14 9 14C9.28333 14 9.52083 13.9042 9.7125 13.7125C9.90417 13.5208 10 13.2833 10 13C10 12.7167 9.90417 12.4792 9.7125 12.2875C9.52083 12.0958 9.28333 12 9 12C8.71667 12 8.47917 12.0958 8.2875
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49852	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	1165	OUT	GET /wp-content/uploads/2023/11/financial-services.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-681" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961ddcb9bd09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	900	IN	Data Raw: 36 38 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 34 37 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 681<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7947" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	772	IN	Data Raw: 2e 37 20 32 20 31 36 2e 35 20 32 43 31 36 2e 39 31 36 37 20 32 20 31 37 2e 32 37 30 38 20 32 2e 31 34 35 38 33 20 31 37 2e 35 36 32 35 20 32 2e 34 33 37 35 43 31 37 2e 38 35 34 32 20 32 2e 37 32 39 31 37 20 31 38 20 33 2e 30 38 33 33 33 20 31 38 20 33 2e 35 43 31 38 20 33 2e 36 20 31 37 2e 39 38 37 35 20 33 2e 37 20 31 37 2e 39 36 32 35 20 33 2e 38 43 31 37 2e 39 33 37 35 20 33 2e 39 20 31 37 2e 39 30 38 33 20 33 2e 39 39 31 36 37 20 31 37 2e 38 37 35 20 34 2e 30 37 35 43 31 37 2e 38 30 38 33 20 34 2e 32 35 38 33 33 20 31 37 2e 37 34 35 38 20 34 2e 34 34 35 38 33 20 31 37 2e 36 38 37 35 20 34 2e 36 33 37 35 43 31 37 2e 36 32 39 32 20 34 2e 38 32 39 31 37 20 31 37 2e 35 38 33 33 20 35 2e 30 32 35 20 31 37 2e 35 35 20 35 2e 32 32 35 4c 31 39 2e 38 32 35 20 Data Ascii: .7 2 16.5 2C16.9167 2 17.2708 2.14583 17.5625 2.4375C17.8542 2.72917 18 3.08333 18 3.5C18 3.6 17.9875 3.7 17.9625 3.8C17.9375 3.9 17.9083 3.99167 17.875 4.075C17.8083 4.25833 17.7458 4.44583 17.6875 4.6375C17.6292 4.82917 17.5833 5.025 17.55 5.225L19.825
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49857	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	901	OUT	GET /wp-content/uploads/2023/11/group.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	478	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:49 GMT ETag: W/"65845b55-12f5" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 0 Server: cloudflare CF-RAY: 87961ddd1ed809f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	891	IN	Data Raw: 31 32 66 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 37 38 37 38 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 38 37 38 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 Data Ascii: 12f5<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_7878)"> <mask id="mask0_2056_7878" style="mask-type:alpha" maskUnits="userSpac
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 33 20 31 32 2e 39 37 35 43 31 30 2e 36 32 31 32 20 31 32 2e 38 33 37 35 20 31 31 2e 32 38 34 36 20 31 32 2e 37 36 38 38 20 31 31 2e 39 39 39 36 20 31 32 2e 37 36 38 38 43 31 32 2e 37 32 38 34 20 31 32 2e 37 36 38 38 20 31 33 2e 33 39 38 37 20 31 32 2e 38 33 37 35 20 31 34 2e 30 31 30 35 20 31 32 2e 39 37 35 43 31 34 2e 36 32 32 34 20 31 33 2e 31 31 32 35 20 31 35 2e 31 34 38 34 20 31 33 2e 33 31 38 38 20 31 35 2e 35 38 38 34 20 31 33 2e 35 39 33 38 43 31 36 2e 30 32 38 34 20 31 33 2e 38 36 38 38 20 31 36 2e 33 36 35 32 20 31 34 2e 31 38 38 34 20 31 36 2e 35 39 39 20 31 34 2e 35 35 32 38 43 31 36 2e 38 33 32 37 20 31 34 2e 39 31 37 32 20 31 36 2e 39 34 39 36 20 31 35 2e 33 31 39 34 20 31 36 2e 39 34 39 36 20 31 35 2e 37 35 39 34 56 31 37 2e 31 48 37 2e 30 Data Ascii: 3 12.975C10.6212 12.8375 11.2846 12.7688 11.9996 12.7688C12.7284 12.7688 13.3987 12.8375 14.0105 12.975C14.6224 13.1125 15.1484 13.3188 15.5884 13.5938C16.0284 13.8688 16.3652 14.1884 16.599 14.5528C16.8327 14.9172 16.9496 15.3194 16.9496 15.7594V17.1H7.0
2024-04-24 12:32:32 UTC	1369	IN	Data Raw: 36 20 39 2e 36 37 35 30 31 43 31 39 2e 30 36 37 31 20 39 2e 36 37 35 30 31 20 31 39 2e 34 35 39 20 39 2e 38 33 33 31 34 20 31 39 2e 37 37 35 32 20 31 30 2e 31 34 39 34 43 32 30 2e 30 39 31 35 20 31 30 2e 34 36 35 36 20 32 30 2e 32 34 39 36 20 31 30 2e 38 35 37 35 20 32 30 2e 32 34 39 36 20 31 31 2e 33 32 35 43 32 30 2e 32 34 39 36 20 31 31 2e 37 37 38 38 20 32 30 2e 30 39 31 35 20 31 32 2e 31 36 37 32 20 31 39 2e 37 37 35 32 20 31 32 2e 34 39 30 33 43 31 39 2e 34 35 39 20 31 32 2e 38 31 33 34 20 31 39 2e 30 36 37 31 20 31 32 2e 39 37 35 20 31 38 2e 35 39 39 36 20 31 32 2e 39 37 35 5a 4d 31 31 2e 39 39 39 36 20 31 32 2e 31 35 43 31 31 2e 33 31 32 31 20 31 32 2e 31 35 20 31 30 2e 37 32 37 37 20 31 31 2e 39 30 39 34 20 31 30 2e 32 34 36 35 20 31 31 2e 34 32 Data Ascii: 6 9.67501C19.0671 9.67501 19.459 9.83314 19.7752 10.1494C20.0915 10.4656 20.2496 10.8575 20.2496 11.325C20.2496 11.7788 20.0915 12.1672 19.7752 12.4903C19.459 12.8134 19.0671 12.975 18.5996 12.975ZM11.9996 12.15C11.3121 12.15 10.7277 11.9094 10.2465 11.42
2024-04-24 12:32:32 UTC	1232	IN	Data Raw: 34 32 34 20 31 35 2e 30 36 35 20 31 38 2e 30 35 33 20 31 34 2e 37 34 38 37 43 31 37 2e 39 36 33 37 20 31 34 2e 34 33 32 35 20 31 37 2e 38 32 39 36 20 31 34 2e 31 33 36 39 20 31 37 2e 36 35 30 39 20 31 33 2e 38 36 31 39 43 31 37 2e 38 30 32 31 20 31 33 2e 38 33 34 34 20 31 37 2e 39 35 36 38 20 31 33 2e 38 31 37 32 20 31 38 2e 31 31 34 39 20 31 33 2e 38 31 30 33 43 31 38 2e 32 37 33 20 31 33 2e 38 30 33 34 20 31 38 2e 34 33 34 36 20 31 33 2e 38 20 31 38 2e 35 39 39 36 20 31 33 2e 38 43 31 39 2e 35 38 39 36 20 31 33 2e 38 20 32 30 2e 33 38 37 31 20 31 33 2e 39 38 32 32 20 32 30 2e 39 39 32 31 20 31 34 2e 33 34 36 36 43 32 31 2e 35 39 37 31 20 31 34 2e 37 31 30 39 20 32 31 2e 38 39 39 36 20 31 35 2e 31 39 35 36 20 32 31 2e 38 39 39 36 20 31 35 2e 38 30 30 36 Data Ascii: 424 15.065 18.053 14.7487C17.9637 14.4325 17.8296 14.1369 17.6509 13.8619C17.8021 13.8344 17.9568 13.8172 18.1149 13.8103C18.273 13.8034 18.4346 13.8 18.5996 13.8C19.5896 13.8 20.3871 13.9822 20.9921 14.3466C21.5971 14.7109 21.8996 15.1956 21.8996 15.8006
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49854	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	1156	OUT	GET /wp-content/uploads/2023/11/insurance.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-3b0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961ddcfe7609f7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	900	IN	Data Raw: 33 62 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 35 35 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 3b0<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7955" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	51	IN	Data Raw: 32 48 31 32 56 31 39 2e 39 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 2H12V19.9Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49858	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	910	OUT	GET /wp-content/uploads/2023/11/accreditations.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:45 GMT ETag: W/"65845b51-343" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 0 Server: cloudflare CF-RAY: 87961ddd6f100ad9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	842	IN	Data Raw: 33 34 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 30 30 38 20 32 32 2e 31 30 31 43 39 2e 35 38 34 30 31 20 32 31 2e 35 31 37 36 20 37 2e 36 37 31 34 31 20 32 30 2e 31 38 38 34 20 36 2e 31 36 33 20 31 38 2e 31 31 33 33 43 34 2e 36 35 34 35 39 20 31 36 2e 30 33 38 32 20 33 2e 39 30 30 33 39 20 31 33 2e 37 33 33 39 20 33 2e 39 30 30 33 39 20 31 31 Data Ascii: 343<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path d="M11.9008 22.101C9.58401 21.5176 7.67141 20.1884 6.163 18.1133C4.65459 16.0382 3.90039 13.7339 3.90039 11
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49859	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	1156	OUT	GET /wp-content/uploads/2023/11/education.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-271" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961ddd8c6ba984-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:32 UTC	632	IN	Data Raw: 32 37 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 36 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 271<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7963" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49862	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	919	OUT	GET /wp-content/uploads/2023/11/customer-first-approach.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	478	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-189c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961ddf4c670adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	891	IN	Data Raw: 31 38 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 38 37 32 33 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 32 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 Data Ascii: 189c<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_8723)"> <mask id="mask0_2056_8723" style="mask-type:alpha" maskUnits="userSpac
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 2e 35 37 35 4c 31 33 2e 30 37 35 32 20 34 2e 38 35 4c 31 34 2e 39 32 35 32 20 36 2e 37 32 35 43 31 35 2e 31 37 35 32 20 36 2e 39 35 38 33 33 20 31 35 2e 33 35 38 36 20 37 2e 32 32 35 20 31 35 2e 34 37 35 32 20 37 2e 35 32 35 43 31 35 2e 35 39 31 39 20 37 2e 38 32 35 20 31 35 2e 36 35 30 32 20 38 2e 31 34 31 36 37 20 31 35 2e 36 35 30 32 20 38 2e 34 37 35 43 31 35 2e 36 35 30 32 20 39 2e 31 37 35 20 31 35 2e 34 31 32 37 20 39 2e 37 36 32 35 20 31 34 2e 39 33 37 37 20 31 30 2e 32 33 37 35 43 31 34 2e 34 36 32 37 20 31 30 2e 37 31 32 35 20 31 33 2e 38 37 35 32 20 31 30 2e 39 35 20 31 33 2e 31 37 35 32 20 31 30 2e 39 35 43 31 32 2e 38 34 31 39 20 31 30 2e 39 35 20 31 32 2e 35 32 31 31 20 31 30 2e 38 39 31 37 20 31 32 2e 32 31 32 37 20 31 30 2e 37 37 35 43 31 Data Ascii: .575L13.0752 4.85L14.9252 6.725C15.1752 6.95833 15.3586 7.225 15.4752 7.525C15.5919 7.825 15.6502 8.14167 15.6502 8.475C15.6502 9.175 15.4127 9.7625 14.9377 10.2375C14.4627 10.7125 13.8752 10.95 13.1752 10.95C12.8419 10.95 12.5211 10.8917 12.2127 10.775C1
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 34 20 31 39 2e 37 35 20 31 31 2e 35 31 32 37 20 31 39 2e 38 35 43 31 31 2e 36 32 31 31 20 31 39 2e 39 35 20 31 31 2e 37 34 31 39 20 32 30 20 31 31 2e 38 37 35 32 20 32 30 5a 4d 31 31 2e 38 35 30 32 20 32 32 43 31 31 2e 32 33 33 36 20 32 32 20 31 30 2e 36 38 37 37 20 32 31 2e 37 39 35 38 20 31 30 2e 32 31 32 37 20 32 31 2e 33 38 37 35 43 39 2e 37 33 37 37 33 20 32 30 2e 39 37 39 32 20 39 2e 34 35 38 35 37 20 32 30 2e 34 36 36 37 20 39 2e 33 37 35 32 33 20 31 39 2e 38 35 43 38 2e 38 30 38 35 37 20 31 39 2e 37 36 36 37 20 38 2e 33 33 33 35 37 20 31 39 2e 35 33 33 33 20 37 2e 39 35 30 32 33 20 31 39 2e 31 35 43 37 2e 35 36 36 39 20 31 38 2e 37 36 36 37 20 37 2e 33 33 33 35 37 20 31 38 2e 32 39 31 37 20 37 2e 32 35 30 32 33 20 31 37 2e 37 32 35 43 36 2e 36 38 Data Ascii: 4 19.75 11.5127 19.85C11.6211 19.95 11.7419 20 11.8752 20ZM11.8502 22C11.2336 22 10.6877 21.7958 10.2127 21.3875C9.73773 20.9792 9.45857 20.4667 9.37523 19.85C8.80857 19.7667 8.33357 19.5333 7.95023 19.15C7.5669 18.7667 7.33357 18.2917 7.25023 17.725C6.68
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 2e 31 30 30 32 33 20 32 2e 37 39 31 36 37 20 36 2e 35 34 36 30 37 20 32 2e 35 20 37 2e 30 33 37 37 33 20 32 2e 33 43 37 2e 35 32 39 34 20 32 2e 31 20 38 2e 30 33 33 35 37 20 32 20 38 2e 35 35 30 32 33 20 32 43 39 2e 30 36 36 39 20 32 20 39 2e 35 37 31 30 37 20 32 2e 31 20 31 30 2e 30 36 32 37 20 32 2e 33 43 31 30 2e 35 35 34 34 20 32 2e 35 20 31 30 2e 39 39 31 39 20 32 2e 37 39 31 36 37 20 31 31 2e 33 37 35 32 20 33 2e 31 37 35 4c 31 31 2e 36 35 30 32 20 33 2e 34 35 4c 31 31 2e 39 32 35 32 20 33 2e 31 37 35 43 31 32 2e 33 32 35 32 20 32 2e 37 39 31 36 37 20 31 32 2e 37 37 31 31 20 32 2e 35 20 31 33 2e 32 36 32 37 20 32 2e 33 43 31 33 2e 37 35 34 34 20 32 2e 31 20 31 34 2e 32 35 38 36 20 32 20 31 34 2e 37 37 35 32 20 32 43 31 35 2e 32 39 31 39 20 32 20 31 Data Ascii: .10023 2.79167 6.54607 2.5 7.03773 2.3C7.5294 2.1 8.03357 2 8.55023 2C9.0669 2 9.57107 2.1 10.0627 2.3C10.5544 2.5 10.9919 2.79167 11.3752 3.175L11.6502 3.45L11.9252 3.175C12.3252 2.79167 12.7711 2.5 13.2627 2.3C13.7544 2.1 14.2586 2 14.7752 2C15.2919 2 1
2024-04-24 12:32:33 UTC	1310	IN	Data Raw: 2e 35 30 30 32 34 20 36 2e 31 30 30 32 33 20 32 2e 37 39 31 39 31 20 35 2e 37 30 30 32 33 20 33 2e 31 37 35 32 34 4c 32 2e 31 37 35 32 33 20 36 2e 37 30 30 32 34 43 31 2e 38 32 35 32 33 20 37 2e 30 35 30 32 34 20 31 2e 35 35 30 32 33 20 37 2e 34 34 36 30 38 20 31 2e 33 35 30 32 33 20 37 2e 38 38 37 37 34 43 31 2e 33 32 35 32 33 20 37 2e 39 34 32 39 35 20 31 2e 33 30 31 35 34 20 37 2e 39 39 38 33 36 20 31 2e 32 37 39 31 34 20 38 2e 30 35 33 39 36 43 31 2e 31 32 32 33 37 20 38 2e 34 34 33 31 35 20 31 2e 30 32 39 34 20 38 2e 38 34 31 39 31 20 31 2e 30 30 30 32 33 20 39 2e 32 35 30 32 34 43 30 2e 39 36 36 39 30 31 20 39 2e 37 31 36 39 31 20 31 2e 30 31 36 39 20 31 30 2e 31 37 39 34 20 31 2e 31 35 30 32 33 20 31 30 2e 36 33 37 37 43 31 2e 32 38 33 35 37 20 31 Data Ascii: .50024 6.10023 2.79191 5.70023 3.17524L2.17523 6.70024C1.82523 7.05024 1.55023 7.44608 1.35023 7.88774C1.32523 7.94295 1.30154 7.99836 1.27914 8.05396C1.12237 8.44315 1.0294 8.84191 1.00023 9.25024C0.966901 9.71691 1.0169 10.1794 1.15023 10.6377C1.28357 1
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49863	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:32 UTC	1157	OUT	GET /wp-content/uploads/2023/11/facilities.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-2a3" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961ddf5ff80ad1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	682	IN	Data Raw: 32 61 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 37 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 2a3<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7971" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49864	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1158	OUT	GET /wp-content/uploads/2023/11/real_estate.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-5c8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de0ca300acd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	900	IN	Data Raw: 35 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 37 39 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 5c8<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7979" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	587	IN	Data Raw: 37 56 31 38 2e 35 5a 4d 31 20 32 32 56 31 31 48 38 2e 36 43 38 2e 37 31 36 36 37 20 31 31 20 38 2e 38 33 33 33 33 20 31 31 2e 30 31 32 35 20 38 2e 39 35 20 31 31 2e 30 33 37 35 43 39 2e 30 36 36 36 37 20 31 31 2e 30 36 32 35 20 39 2e 31 37 35 20 31 31 2e 30 39 31 37 20 39 2e 32 37 35 20 31 31 2e 31 32 35 4c 31 35 2e 31 35 20 31 33 2e 33 43 31 35 2e 37 20 31 33 2e 35 20 31 36 2e 31 34 35 38 20 31 33 2e 38 35 20 31 36 2e 34 38 37 35 20 31 34 2e 33 35 43 31 36 2e 38 32 39 32 20 31 34 2e 38 35 20 31 37 20 31 35 2e 34 20 31 37 20 31 36 48 31 39 43 31 39 2e 38 33 33 33 20 31 36 20 32 30 2e 35 34 31 37 20 31 36 2e 32 37 35 20 32 31 2e 31 32 35 20 31 36 2e 38 32 35 43 32 31 2e 37 30 38 33 20 31 37 2e 33 37 35 20 32 32 20 31 38 2e 31 20 32 32 20 31 39 56 32 30 4c Data Ascii: 7V18.5ZM1 22V11H8.6C8.71667 11 8.83333 11.0125 8.95 11.0375C9.06667 11.0625 9.175 11.0917 9.275 11.125L15.15 13.3C15.7 13.5 16.1458 13.85 16.4875 14.35C16.8292 14.85 17 15.4 17 16H19C19.8333 16 20.5417 16.275 21.125 16.825C21.7083 17.375 22 18.1 22 19V20L
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49865	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	912	OUT	GET /wp-content/uploads/2023/11/customer-reviews.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-3c8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de0def909f3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	892	IN	Data Raw: 33 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 31 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 3c8<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7913" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	83	IN	Data Raw: 43 36 20 31 37 2e 32 38 33 33 20 36 2e 30 39 35 38 33 20 31 37 2e 35 32 30 38 20 36 2e 32 38 37 35 20 31 37 2e 37 31 32 35 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: C6 17.2833 6.09583 17.5208 6.2875 17.7125Z" fill="#030352"></path> </g></svg>
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49866	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1163	OUT	GET /wp-content/uploads/2023/11/audit-compliance.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:46 GMT ETag: W/"65845b52-89f" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de19bfb0a01-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	900	IN	Data Raw: 38 39 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 30 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 89f<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8006" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	1314	IN	Data Raw: 20 31 33 43 31 36 20 31 33 2e 33 38 33 33 20 31 35 2e 39 35 34 32 20 31 33 2e 37 34 31 37 20 31 35 2e 38 36 32 35 20 31 34 2e 30 37 35 43 31 35 2e 37 37 30 38 20 31 34 2e 34 30 38 33 20 31 35 2e 36 33 33 33 20 31 34 2e 37 31 36 37 20 31 35 2e 34 35 20 31 35 4c 31 38 20 31 37 2e 36 56 38 2e 37 4c 31 34 2e 30 35 20 34 48 36 56 32 30 48 31 34 2e 37 35 5a 4d 31 32 20 31 35 43 31 32 2e 35 35 20 31 35 20 31 33 2e 30 32 30 38 20 31 34 2e 38 30 34 32 20 31 33 2e 34 31 32 35 20 31 34 2e 34 31 32 35 43 31 33 2e 38 30 34 32 20 31 34 2e 30 32 30 38 20 31 34 20 31 33 2e 35 35 20 31 34 20 31 33 43 31 34 20 31 32 2e 34 35 20 31 33 2e 38 30 34 32 20 31 31 2e 39 37 39 32 20 31 33 2e 34 31 32 35 20 31 31 2e 35 38 37 35 43 31 33 2e 30 32 30 38 20 31 31 2e 31 39 35 38 20 31 Data Ascii: 13C16 13.3833 15.9542 13.7417 15.8625 14.075C15.7708 14.4083 15.6333 14.7167 15.45 15L18 17.6V8.7L14.05 4H6V20H14.75ZM12 15C12.55 15 13.0208 14.8042 13.4125 14.4125C13.8042 14.0208 14 13.55 14 13C14 12.45 13.8042 11.9792 13.4125 11.5875C13.0208 11.1958 1
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49871	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	911	OUT	GET /wp-content/uploads/2023/11/success-stories.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-4e3" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de2892d0ad1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	892	IN	Data Raw: 34 65 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 38 37 31 32 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 31 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 Data Ascii: 4e3<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_8712)"> <mask id="mask0_2056_8712" style="mask-type:alpha" maskUnits="userSpace
2024-04-24 12:32:33 UTC	366	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 37 2e 35 39 39 38 4c 31 39 2e 32 20 31 39 2e 39 39 39 38 4c 32 30 2e 34 20 31 38 2e 33 39 39 38 4c 31 37 2e 32 20 31 35 2e 39 39 39 38 4c 31 36 20 31 37 2e 35 39 39 38 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 36 2e 33 39 39 37 36 4c 31 37 2e 32 20 37 2e 39 39 39 37 36 4c 32 30 2e 34 20 35 2e 35 39 39 37 36 4c 31 39 2e 32 20 33 2e 39 39 39 37 36 4c 31 36 20 36 2e 33 39 39 37 36 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 Data Ascii: "></path> <path d="M16 17.5998L19.2 19.9998L20.4 18.3998L17.2 15.9998L16 17.5998Z" fill="#0A0AF4"></path> <path d="M16 6.39976L17.2 7.99976L20.4 5.59976L19.2 3.99976L16 6.39976Z" fill="#0A0AF4"></path> </g> </g> <defs> <clipPath id
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49867	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1149	OUT	GET /wp-content/uploads/2023/11/hr.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:49 GMT ETag: W/"65845b55-c82" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de25ce40ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	900	IN	Data Raw: 63 38 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 31 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: c82<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8016" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 39 2e 35 43 38 2e 35 20 38 2e 35 31 36 36 37 20 38 2e 38 33 37 35 20 37 2e 36 38 37 35 20 39 2e 35 31 32 35 20 37 2e 30 31 32 35 43 31 30 2e 31 38 37 35 20 36 2e 33 33 37 35 20 31 31 2e 30 31 36 37 20 36 20 31 32 20 36 43 31 32 2e 39 38 33 33 20 36 20 31 33 2e 38 31 32 35 20 36 2e 33 33 37 35 20 31 34 2e 34 38 37 35 20 37 2e 30 31 32 35 43 31 35 2e 31 36 32 35 20 37 2e 36 38 37 35 20 31 35 2e 35 20 38 2e 35 31 36 36 37 20 31 35 2e 35 20 39 2e 35 43 31 35 2e 35 20 31 30 2e 34 38 33 33 20 31 35 2e 31 36 32 35 20 31 31 2e 33 31 32 35 20 31 34 2e 34 38 37 35 20 31 31 2e 39 38 37 35 43 31 33 2e 38 31 32 35 20 31 32 2e 36 36 32 35 20 31 32 2e 39 38 33 33 20 31 33 20 31 32 20 31 33 5a 4d 31 32 20 32 32 43 31 30 2e 36 31 36 37 20 32 32 20 39 2e 33 31 36 36 37 20 Data Ascii: 9.5C8.5 8.51667 8.8375 7.6875 9.5125 7.0125C10.1875 6.3375 11.0167 6 12 6C12.9833 6 13.8125 6.3375 14.4875 7.0125C15.1625 7.6875 15.5 8.51667 15.5 9.5C15.5 10.4833 15.1625 11.3125 14.4875 11.9875C13.8125 12.6625 12.9833 13 12 13ZM12 22C10.6167 22 9.31667
2024-04-24 12:32:33 UTC	940	IN	Data Raw: 36 36 37 20 31 30 2e 35 20 39 2e 35 43 31 30 2e 35 20 39 2e 39 33 33 33 33 20 31 30 2e 36 34 31 37 20 31 30 2e 32 39 31 37 20 31 30 2e 39 32 35 20 31 30 2e 35 37 35 43 31 31 2e 32 30 38 33 20 31 30 2e 38 35 38 33 20 31 31 2e 35 36 36 37 20 31 31 20 31 32 20 31 31 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 2e 31 20 32 31 2e 32 31 32 35 43 39 2e 33 31 36 36 37 20 32 31 2e 37 33 37 35 20 31 30 2e 36 31 36 37 20 32 32 20 31 32 20 32 32 43 31 33 2e 33 38 33 33 20 32 32 20 31 34 2e 36 38 33 33 20 32 31 2e 37 33 37 35 20 31 35 2e 39 20 32 31 2e 32 31 32 35 43 31 37 Data Ascii: 667 10.5 9.5C10.5 9.93333 10.6417 10.2917 10.925 10.575C11.2083 10.8583 11.5667 11 12 11Z" fill="#030352"></path> <path fill-rule="evenodd" clip-rule="evenodd" d="M8.1 21.2125C9.31667 21.7375 10.6167 22 12 22C13.3833 22 14.6833 21.7375 15.9 21.2125C17
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49868	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1158	OUT	GET /wp-content/uploads/2023/11/procurement.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-535" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de2592309f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	900	IN	Data Raw: 35 33 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 33 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 535<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8032" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	440	IN	Data Raw: 31 39 20 32 30 43 31 39 20 32 30 2e 35 35 20 31 38 2e 38 30 34 32 20 32 31 2e 30 32 30 38 20 31 38 2e 34 31 32 35 20 32 31 2e 34 31 32 35 43 31 38 2e 30 32 30 38 20 32 31 2e 38 30 34 32 20 31 37 2e 35 35 20 32 32 20 31 37 20 32 32 5a 4d 31 20 34 56 32 48 34 2e 32 37 35 4c 38 2e 35 32 35 20 31 31 48 31 35 2e 35 32 35 4c 31 39 2e 34 32 35 20 34 48 32 31 2e 37 4c 31 37 2e 33 20 31 31 2e 39 35 43 31 37 2e 31 31 36 37 20 31 32 2e 32 38 33 33 20 31 36 2e 38 37 30 38 20 31 32 2e 35 34 31 37 20 31 36 2e 35 36 32 35 20 31 32 2e 37 32 35 43 31 36 2e 32 35 34 32 20 31 32 2e 39 30 38 33 20 31 35 2e 39 31 36 37 20 31 33 20 31 35 2e 35 35 20 31 33 48 38 2e 31 4c 37 20 31 35 48 31 39 56 31 37 48 37 43 36 2e 32 35 20 31 37 20 35 2e 36 37 39 31 37 20 31 36 2e 36 37 35 20 Data Ascii: 19 20C19 20.55 18.8042 21.0208 18.4125 21.4125C18.0208 21.8042 17.55 22 17 22ZM1 4V2H4.275L8.525 11H15.525L19.425 4H21.7L17.3 11.95C17.1167 12.2833 16.8708 12.5417 16.5625 12.725C16.2542 12.9083 15.9167 13 15.55 13H8.1L7 15H19V17H7C6.25 17 5.67917 16.675
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49870	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1162	OUT	GET /wp-content/uploads/2023/11/sales-marketing.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-458" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de28de109f5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	900	IN	Data Raw: 34 35 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 34 30 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 458<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8040" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	219	IN	Data Raw: 35 2e 33 35 56 38 2e 36 35 30 30 32 43 31 34 2e 34 35 20 39 2e 30 35 30 30 32 20 31 34 2e 38 31 32 35 20 39 2e 35 33 37 35 32 20 31 35 2e 30 38 37 35 20 31 30 2e 31 31 32 35 43 31 35 2e 33 36 32 35 20 31 30 2e 36 38 37 35 20 31 35 2e 35 20 31 31 2e 33 31 36 37 20 31 35 2e 35 20 31 32 43 31 35 2e 35 20 31 32 2e 36 38 33 34 20 31 35 2e 33 36 32 35 20 31 33 2e 33 31 32 35 20 31 35 2e 30 38 37 35 20 31 33 2e 38 38 37 35 43 31 34 2e 38 31 32 35 20 31 34 2e 34 36 32 35 20 31 34 2e 34 35 20 31 34 2e 39 35 20 31 34 20 31 35 2e 33 35 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 5.35V8.65002C14.45 9.05002 14.8125 9.53752 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6834 15.3625 13.3125 15.0875 13.8875C14.8125 14.4625 14.45 14.95 14 15.35Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49861	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	510	OUT	GET /embed/v3/form/143456774/88d35df0-d3c8-4847-a056-b715eb5386c3/json?hs_static_app=forms-embed&hs_static_app_version=1.5064&X-HubSpot-Static-App-Info=forms-embed-1.5064 HTTP/1.1 Host: forms-eu1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:33 UTC	1250	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close X-Origin-Hublet: eu1 Vary: origin Access-Control-Allow-Methods: OPTIONS, GET Access-Control-Allow-Headers: * Access-Control-Allow-Credentials: false Access-Control-Max-Age: 180 X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none x-envoy-upstream-service-time: 9 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 8adbff77-dd1c-48b9-ac90-d998e3d9e3b0 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-7kkzx x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 8adbff77-dd1c-48b9-ac90-d998e3d9e3b0 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; path=/; expires=Wed, 24-Apr-24 13:02:33 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 12:32:33 UTC	241	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 38 4e 70 59 4b 33 73 53 36 47 6e 75 30 31 77 74 46 73 2e 49 37 65 72 75 76 36 36 4b 75 54 32 47 6c 33 76 43 56 4b 5f 7a 4a 6d 41 2d 31 37 31 33 39 36 31 39 35 33 37 36 38 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 36 31 64 65 32 62 65 33 33 66 31 37 38 2d 43 44 47 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 87961de2be33f178-CDGalt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 34 63 33 34 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 31 34 33 34 35 36 37 37 34 2c 22 67 75 69 64 22 3a 22 38 38 64 33 35 64 66 30 2d 64 33 63 38 2d 34 38 34 37 2d 61 30 35 36 2d 62 37 31 35 65 62 35 33 38 36 63 33 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 3c 70 20 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 22 3e c2 a1 47 72 61 63 69 61 73 20 70 6f 72 20 65 6c 20 69 6e 74 65 72 c3 a9 73 21 3c 2f 70 3e 5c 6e 3c 70 20 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 22 3e 54 65 20 68 61 73 20 72 65 67 69 73 74 72 61 64 6f 20 65 6e 20 6e 75 65 73 74 72 61 20 Data Ascii: 4c34{"form":{"portalId":143456774,"guid":"88d35df0-d3c8-4847-a056-b715eb5386c3","cssClass":"hs-form stacked","inlineMessage":"<p style=\"text-align: center;\">Gracias por el inters!</p>\n<p style=\"text-align: center;\">Te has registrado en nuestra
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 63 68 65 63 6b 62 6f 78 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 67 72 6f 75 70 4e 61 6d 65 22 3a 22 65 73 5f 63 6f 6e 74 61 63 74 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 7b 22 6c 61 62 65 6c 22 3a 22 4e 6f 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 59 65 73 22 2c 22 76 61 6c 75 65 22 Data Ascii: checkbox","description":"","groupName":"es_contact","displayOrder":-1,"required":true,"selectedOptions":[],"options":[{"label":"No","value":"false","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Yes","value"
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 64 22 3a 22 30 2d 31 22 7d 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 73 53 6d 61 72 74 47 72 6f 75 70 22 3a 66 61 6c 73 65 2c 22 72 69 63 68 54 65 78 74 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 54 45 58 54 22 7d 2c 22 69 73 50 61 67 65 42 72 65 61 6b 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 69 65 6c 64 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 61 63 71 75 69 73 69 74 69 6f 6e 5f 66 6f 72 6d 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 4c 61 73 74 20 41 63 71 75 69 73 69 74 69 6f 6e 20 46 6f 72 6d 22 2c 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 66 69 65 6c 64 54 79 70 65 22 3a 22 74 65 78 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 67 72 6f 75 70 4e 61 6d 65 22 3a 22 65 73 5f 63 6f 6e 74 61 63 Data Ascii: d":"0-1"}],"default":true,"isSmartGroup":false,"richText":{"content":"","type":"TEXT"},"isPageBreak":false},{"fields":[{"name":"acquisition_form__c","label":"Last Acquisition Form","type":"string","fieldType":"text","description":"","groupName":"es_contac
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 45 78 74 65 72 6e 61 6c 20 43 6f 6e 73 75 6c 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 45 78 74 65 72 6e 61 6c 20 43 6f 6e 73 75 6c 74 61 6e 74 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 49 6e 62 6f 75 6e 64 20 43 6f 72 70 6f 72 61 74 65 22 2c 22 76 61 6c 75 65 22 3a 22 49 6e 62 6f 75 6e 64 5f 43 6f 72 70 6f 72 61 74 65 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 Data Ascii: ly":false},{"label":"External Consultant","value":"External Consultant","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Inbound Corporate","value":"Inbound_Corporate","displayOrder":-1,"doubleData":0.0,"hidde
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 49 6e 62 6f 75 6e 64 22 2c 22 76 61 6c 75 65 22 3a 22 49 6e 62 6f 75 6e 64 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 31 33 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 5d 2c 22 76 61 6c 69 64 61 74 69 6f 6e 22 3a 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 64 61 74 61 22 3a 22 22 2c 22 75 73 65 44 65 66 61 75 6c 74 42 6c 6f 63 6b 4c 69 73 74 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 65 64 45 6d 61 69 6c 41 64 64 72 65 73 73 65 73 22 3a 5b 5d 2c 22 63 68 65 63 6b 50 68 6f 6e 65 46 6f 72 6d 61 74 22 3a 66 61 6c 73 65 7d 2c 22 65 Data Ascii: },{"label":"Inbound","value":"Inbound","displayOrder":13,"doubleData":0.0,"hidden":false,"description":"","readOnly":false}],"validation":{"name":"","message":"","data":"","useDefaultBlockList":false,"blockedEmailAddresses":[],"checkPhoneFormat":false},"e
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 64 69 72 65 63 74 20 74 72 61 66 66 69 63 22 2c 22 76 61 6c 75 65 22 3a 22 64 69 72 65 63 74 20 74 72 61 66 66 69 63 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e Data Ascii: se,"description":"","readOnly":false},{"label":"facebook","value":"facebook","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"direct traffic","value":"direct traffic","displayOrder":-1,"doubleData":0.0,"hidden
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 45 6d 61 69 6c 22 2c 22 76 61 6c 75 65 22 3a 22 45 6d 61 69 6c 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 79 61 68 6f 6f 22 2c 22 76 61 6c 75 65 22 3a 22 79 61 68 6f 6f 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 Data Ascii: bleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Email","value":"Email","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"yahoo","value":"yahoo","displayOrder":-1,"doubleData":0.0,"hidde
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 41 70 70 76 69 7a 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 41 70 70 76 69 7a 65 72 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 66 69 6e 61 6e 63 65 69 6e 6e 6f 76 61 74 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 46 69 6e 61 6e 63 65 20 49 6e 6e 6f 76 61 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c Data Ascii: ion":"","readOnly":false},{"label":"Appvizer","value":"Appvizer","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"financeinnovation","value":"Finance Innovation","displayOrder":-1,"doubleData":0.0,"hidden":fal
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 50 61 69 64 20 53 65 61 72 63 68 22 2c 22 76 61 6c 75 65 22 3a 22 50 61 69 64 20 53 65 61 72 63 68 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 50 61 69 64 20 53 6f 63 69 61 6c 22 2c 22 76 61 6c 75 65 22 3a 22 50 61 69 64 20 53 6f 63 69 61 6c 22 2c 22 64 69 73 70 6c 61 79 4f 72 64 65 72 22 3a 2d 31 2c 22 64 6f 75 62 6c 65 44 61 74 61 22 3a 30 2e 30 2c 22 68 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 6c 61 62 Data Ascii: Paid Search","value":"Paid Search","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"label":"Paid Social","value":"Paid Social","displayOrder":-1,"doubleData":0.0,"hidden":false,"description":"","readOnly":false},{"lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49872	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	903	OUT	GET /wp-content/uploads/2023/11/support.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	478	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-1197" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de31ecba984-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	891	IN	Data Raw: 31 31 39 37 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 30 35 36 5f 38 37 31 37 29 22 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 37 31 37 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 Data Ascii: 1197<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_2056_8717)"> <mask id="mask0_2056_8717" style="mask-type:alpha" maskUnits="userSpac
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 20 31 32 2e 32 37 35 4c 33 2e 30 37 35 20 31 30 2e 39 35 43 33 2e 32 32 35 20 39 2e 37 33 33 33 33 20 33 2e 35 37 30 38 33 20 38 2e 36 33 33 33 33 20 34 2e 31 31 32 35 20 37 2e 36 35 43 34 2e 36 35 34 31 37 20 36 2e 36 36 36 36 37 20 35 2e 33 32 39 31 37 20 35 2e 38 33 33 33 33 20 36 2e 31 33 37 35 20 35 2e 31 35 43 36 2e 39 34 35 38 33 20 34 2e 34 36 36 36 37 20 37 2e 38 35 34 31 37 20 33 2e 39 33 37 35 20 38 2e 38 36 32 35 20 33 2e 35 36 32 35 43 39 2e 38 37 30 38 33 20 33 2e 31 38 37 35 20 31 30 2e 39 31 36 37 20 33 20 31 32 20 33 43 31 33 2e 31 20 33 20 31 34 2e 31 35 34 32 20 33 2e 31 38 37 35 20 31 35 2e 31 36 32 35 20 33 2e 35 36 32 35 43 31 36 2e 31 37 30 38 20 33 2e 39 33 37 35 20 31 37 2e 30 37 35 20 34 2e 34 37 30 38 33 20 31 37 2e 38 37 35 20 Data Ascii: 12.275L3.075 10.95C3.225 9.73333 3.57083 8.63333 4.1125 7.65C4.65417 6.66667 5.32917 5.83333 6.1375 5.15C6.94583 4.46667 7.85417 3.9375 8.8625 3.5625C9.87083 3.1875 10.9167 3 12 3C13.1 3 14.1542 3.1875 15.1625 3.5625C16.1708 3.9375 17.075 4.47083 17.875
2024-04-24 12:32:33 UTC	1369	IN	Data Raw: 43 31 33 2e 35 36 36 37 20 36 20 31 34 2e 38 37 39 32 20 36 2e 34 37 39 31 37 20 31 35 2e 39 38 37 35 20 37 2e 34 33 37 35 43 31 37 2e 30 39 35 38 20 38 2e 33 39 35 38 33 20 31 37 2e 37 36 36 37 20 39 2e 35 39 31 36 37 20 31 38 20 31 31 2e 30 32 35 43 31 36 2e 34 33 33 33 20 31 31 2e 30 30 38 33 20 31 35 2e 30 31 36 37 20 31 30 2e 35 38 37 35 20 31 33 2e 37 35 20 39 2e 37 36 32 35 43 31 32 2e 34 38 33 33 20 38 2e 39 33 37 35 20 31 31 2e 35 32 35 20 37 2e 38 36 36 36 37 20 31 30 2e 38 37 35 20 36 2e 35 35 43 31 30 2e 36 30 38 33 20 37 2e 39 20 31 30 2e 30 34 35 38 20 39 2e 30 39 35 38 33 20 39 2e 31 38 37 35 20 31 30 2e 31 33 37 35 43 38 2e 33 32 39 31 37 20 31 31 2e 31 37 39 32 20 37 2e 32 37 35 20 31 31 2e 39 35 20 36 2e 30 32 35 20 31 32 2e 34 35 5a 22 Data Ascii: C13.5667 6 14.8792 6.47917 15.9875 7.4375C17.0958 8.39583 17.7667 9.59167 18 11.025C16.4333 11.0083 15.0167 10.5875 13.75 9.7625C12.4833 8.9375 11.525 7.86667 10.875 6.55C10.6083 7.9 10.0458 9.09583 9.1875 10.1375C8.32917 11.1792 7.275 11.95 6.025 12.45Z"
2024-04-24 12:32:33 UTC	882	IN	Data Raw: 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 32 38 37 35 20 31 33 2e 37 31 32 35 43 38 2e 34 37 39 31 37 20 31 33 2e 39 30 34 32 20 38 2e 37 31 36 36 37 20 31 34 20 39 20 31 34 43 39 2e 32 38 33 33 33 20 31 34 20 39 2e 35 32 30 38 33 20 31 33 2e 39 30 34 32 20 39 2e 37 31 32 35 20 31 33 2e 37 31 32 35 43 39 2e 39 30 34 31 37 20 31 33 2e 35 32 30 38 20 31 30 20 31 33 2e 32 38 33 33 20 31 30 20 31 33 43 31 30 20 31 32 2e 37 31 36 37 20 39 2e 39 30 34 31 37 20 31 32 2e 34 37 39 32 20 39 2e 37 31 32 35 20 31 32 2e 32 38 37 35 43 39 2e 35 32 30 38 33 20 31 32 2e 30 39 35 38 20 39 2e 32 38 33 33 33 20 31 32 20 39 20 31 32 43 38 2e 37 31 36 36 37 20 31 32 20 38 2e 34 37 39 31 37 20 31 32 2e 30 39 35 Data Ascii: "#030352"></path> <path d="M8.2875 13.7125C8.47917 13.9042 8.71667 14 9 14C9.28333 14 9.52083 13.9042 9.7125 13.7125C9.90417 13.5208 10 13.2833 10 13C10 12.7167 9.90417 12.4792 9.7125 12.2875C9.52083 12.0958 9.28333 12 9 12C8.71667 12 8.47917 12.095
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49873	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	905	OUT	GET /wp-content/uploads/2023/11/insurance.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-3b0" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de3199909f7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	892	IN	Data Raw: 33 62 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 35 35 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 3b0<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7955" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	59	IN	Data Raw: 20 31 37 2e 39 35 20 31 32 48 31 32 56 31 39 2e 39 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 17.95 12H12V19.9Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49874	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	914	OUT	GET /wp-content/uploads/2023/11/financial-services.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-681" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de31d3c09f1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	892	IN	Data Raw: 36 38 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 34 37 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 681<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7947" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	780	IN	Data Raw: 32 2e 31 37 35 20 31 35 2e 37 20 32 20 31 36 2e 35 20 32 43 31 36 2e 39 31 36 37 20 32 20 31 37 2e 32 37 30 38 20 32 2e 31 34 35 38 33 20 31 37 2e 35 36 32 35 20 32 2e 34 33 37 35 43 31 37 2e 38 35 34 32 20 32 2e 37 32 39 31 37 20 31 38 20 33 2e 30 38 33 33 33 20 31 38 20 33 2e 35 43 31 38 20 33 2e 36 20 31 37 2e 39 38 37 35 20 33 2e 37 20 31 37 2e 39 36 32 35 20 33 2e 38 43 31 37 2e 39 33 37 35 20 33 2e 39 20 31 37 2e 39 30 38 33 20 33 2e 39 39 31 36 37 20 31 37 2e 38 37 35 20 34 2e 30 37 35 43 31 37 2e 38 30 38 33 20 34 2e 32 35 38 33 33 20 31 37 2e 37 34 35 38 20 34 2e 34 34 35 38 33 20 31 37 2e 36 38 37 35 20 34 2e 36 33 37 35 43 31 37 2e 36 32 39 32 20 34 2e 38 32 39 31 37 20 31 37 2e 35 38 33 33 20 35 2e 30 32 35 20 31 37 2e 35 35 20 35 2e 32 32 35 Data Ascii: 2.175 15.7 2 16.5 2C16.9167 2 17.2708 2.14583 17.5625 2.4375C17.8542 2.72917 18 3.08333 18 3.5C18 3.6 17.9875 3.7 17.9625 3.8C17.9375 3.9 17.9083 3.99167 17.875 4.075C17.8083 4.25833 17.7458 4.44583 17.6875 4.6375C17.6292 4.82917 17.5833 5.025 17.55 5.225
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49877	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1155	OUT	GET /wp-content/uploads/2023/11/facebook.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-214" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de3f86709fb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	539	IN	Data Raw: 32 31 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 2e 30 30 30 39 32 20 32 34 48 31 32 2e 30 30 30 39 56 31 35 2e 37 35 48 39 2e 30 30 30 39 32 56 31 32 48 31 32 2e 30 30 30 39 56 39 43 31 32 2e 30 30 30 39 20 36 2e 35 31 34 20 31 34 2e 30 31 34 39 20 34 2e 35 20 31 36 2e 35 30 30 39 20 34 2e 35 48 31 39 2e 35 30 30 39 56 38 2e 32 35 48 31 38 2e 30 30 30 Data Ascii: 214<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path d="M3.00092 24H12.0009V15.75H9.00092V12H12.0009V9C12.0009 6.514 14.0149 4.5 16.5009 4.5H19.5009V8.25H18.000
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49878	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	905	OUT	GET /wp-content/uploads/2023/11/education.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:33 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-271" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de3fce109ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:33 UTC	632	IN	Data Raw: 32 37 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 36 33 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 271<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7963" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49875	18.154.132.120	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	542	OUT	GET /c/hotjar-909661.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:34 UTC	601	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 0 Connection: close Date: Wed, 24 Apr 2024 12:32:33 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/d41d8cd98f00b204e9800998ecf8427e Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 7u7XbOJnP8inlFuMbTvqG7Ew9q2FOUJLxCTm9nnHs72BENnuCa8V6w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49879	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	906	OUT	GET /wp-content/uploads/2023/11/facilities.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-2a3" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de51a4309f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	682	IN	Data Raw: 32 61 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 37 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 2a3<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7971" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49880	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1156	OUT	GET /wp-content/uploads/2023/11/instagram.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-c02" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de59dc609fd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	900	IN	Data Raw: 63 30 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 2e 30 39 34 32 31 20 31 32 43 36 2e 30 39 34 32 31 20 31 35 2e 32 33 36 20 38 2e 37 31 37 35 34 20 31 37 2e 38 35 39 34 20 31 31 2e 39 35 33 36 20 31 37 2e 38 35 39 34 43 31 35 2e 31 38 Data Ascii: c02<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path fill-rule="evenodd" clip-rule="evenodd" d="M6.09421 12C6.09421 15.236 8.71754 17.8594 11.9536 17.8594C15.18
2024-04-24 12:32:34 UTC	1369	IN	Data Raw: 33 34 20 32 33 2e 38 35 33 35 43 38 2e 34 36 31 35 37 20 32 33 2e 39 36 31 34 20 31 30 2e 32 33 32 38 20 32 34 2e 30 30 33 39 20 31 32 2e 30 30 30 35 20 32 33 2e 39 39 39 37 43 31 33 2e 37 36 38 20 32 34 2e 30 30 33 39 20 31 35 2e 35 33 39 33 20 32 33 2e 39 36 31 34 20 31 37 2e 33 31 32 36 20 32 33 2e 38 35 33 35 43 31 38 2e 38 30 35 39 20 32 33 2e 37 36 32 37 20 32 30 2e 32 32 32 37 20 32 33 2e 32 36 38 31 20 32 31 2e 34 30 34 20 32 32 2e 33 30 34 38 43 32 32 2e 35 34 31 37 20 32 31 2e 33 37 37 20 32 33 2e 32 35 35 35 20 32 30 2e 31 33 34 33 20 32 33 2e 36 31 30 37 20 31 38 2e 37 34 32 31 43 32 33 2e 39 33 38 39 20 31 37 2e 34 35 35 39 20 32 33 2e 39 35 36 36 20 31 36 2e 31 36 33 32 20 32 33 2e 39 37 32 36 20 31 34 2e 39 39 35 35 56 31 34 2e 39 39 35 35 Data Ascii: 34 23.8535C8.46157 23.9614 10.2328 24.0039 12.0005 23.9997C13.768 24.0039 15.5393 23.9614 17.3126 23.8535C18.8059 23.7627 20.2227 23.2681 21.404 22.3048C22.5417 21.377 23.2555 20.1343 23.6107 18.7421C23.9389 17.4559 23.9566 16.1632 23.9726 14.9955V14.9955
2024-04-24 12:32:34 UTC	812	IN	Data Raw: 37 35 39 32 20 31 32 43 31 2e 38 37 38 32 32 20 31 31 2e 30 31 39 35 20 31 2e 38 38 39 33 36 20 31 30 2e 30 33 37 38 20 31 2e 39 30 32 38 33 20 39 2e 30 35 33 32 33 43 31 2e 39 31 39 33 32 20 37 2e 38 34 36 35 38 20 31 2e 39 34 30 33 31 20 36 2e 37 36 36 34 32 20 32 2e 32 30 36 39 35 20 35 2e 37 32 31 34 36 43 32 2e 34 37 37 37 37 20 34 2e 36 36 30 31 37 20 32 2e 39 39 38 37 20 33 2e 37 38 36 39 35 20 33 2e 37 38 31 38 38 20 33 2e 31 34 38 32 39 43 34 2e 36 32 34 38 34 20 32 2e 34 36 30 38 37 20 35 2e 36 35 34 37 38 20 32 2e 30 38 37 37 39 20 36 2e 38 30 32 31 36 20 32 2e 30 31 38 30 32 43 38 2e 35 33 30 36 20 31 2e 39 31 32 39 20 31 30 2e 32 36 32 36 20 31 2e 38 37 31 31 38 20 31 31 2e 39 39 38 33 20 31 2e 38 37 35 32 37 4c 31 32 2e 30 30 30 35 20 31 2e Data Ascii: 7592 12C1.87822 11.0195 1.88936 10.0378 1.90283 9.05323C1.91932 7.84658 1.94031 6.76642 2.20695 5.72146C2.47777 4.66017 2.9987 3.78695 3.78188 3.14829C4.62484 2.46087 5.65478 2.08779 6.80216 2.01802C8.5306 1.9129 10.2626 1.87118 11.9983 1.87527L12.0005 1.
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49881	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:33 UTC	1155	OUT	GET /wp-content/uploads/2023/11/linkedin.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-354" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de60ce00a03-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	859	IN	Data Raw: 33 35 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 35 34 38 5f 32 37 32 33 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 39 34 20 32 34 4c 32 34 20 32 33 2e 39 39 39 56 31 35 2e 31 39 37 43 32 34 20 31 30 2e 38 39 31 20 32 33 2e 30 37 33 20 37 2e 35 37 33 39 37 20 31 38 2e 30 33 39 20 37 2e Data Ascii: 354<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_1548_2723)"> <path d="M23.994 24L24 23.999V15.197C24 10.891 23.073 7.57397 18.039 7.
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49882	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	1154	OUT	GET /wp-content/uploads/2023/11/youtube.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:56 GMT ETag: W/"65845b5c-416" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87961de6b9780ad3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	900	IN	Data Raw: 34 31 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 35 34 38 5f 32 37 32 37 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 34 36 39 20 35 2e 39 32 39 30 31 4c 32 33 2e 34 39 39 20 36 2e 31 32 35 30 31 43 32 33 2e 32 30 39 20 35 2e 30 39 36 30 31 20 32 32 2e 34 32 36 20 34 2e 33 30 32 30 31 20 32 Data Ascii: 416<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_1548_2727)"> <path d="M23.469 5.92901L23.499 6.12501C23.209 5.09601 22.426 4.30201 2
2024-04-24 12:32:34 UTC	153	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 30 5f 31 35 34 38 5f 32 37 32 37 22 3e 0a 20 20 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: "></path> </g> <defs> <clipPath id="clip0_1548_2727"> <rect width="24" height="24" fill="white"></rect> </clipPath> </defs></svg>
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49884	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	907	OUT	GET /wp-content/uploads/2023/11/real_estate.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-5c8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de6ebef0ad9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	892	IN	Data Raw: 35 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 37 39 37 39 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 5c8<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_7979" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:34 UTC	595	IN	Data Raw: 4c 38 2e 36 20 31 33 48 37 56 31 38 2e 35 5a 4d 31 20 32 32 56 31 31 48 38 2e 36 43 38 2e 37 31 36 36 37 20 31 31 20 38 2e 38 33 33 33 33 20 31 31 2e 30 31 32 35 20 38 2e 39 35 20 31 31 2e 30 33 37 35 43 39 2e 30 36 36 36 37 20 31 31 2e 30 36 32 35 20 39 2e 31 37 35 20 31 31 2e 30 39 31 37 20 39 2e 32 37 35 20 31 31 2e 31 32 35 4c 31 35 2e 31 35 20 31 33 2e 33 43 31 35 2e 37 20 31 33 2e 35 20 31 36 2e 31 34 35 38 20 31 33 2e 38 35 20 31 36 2e 34 38 37 35 20 31 34 2e 33 35 43 31 36 2e 38 32 39 32 20 31 34 2e 38 35 20 31 37 20 31 35 2e 34 20 31 37 20 31 36 48 31 39 43 31 39 2e 38 33 33 33 20 31 36 20 32 30 2e 35 34 31 37 20 31 36 2e 32 37 35 20 32 31 2e 31 32 35 20 31 36 2e 38 32 35 43 32 31 2e 37 30 38 33 20 31 37 2e 33 37 35 20 32 32 20 31 38 2e 31 20 32 Data Ascii: L8.6 13H7V18.5ZM1 22V11H8.6C8.71667 11 8.83333 11.0125 8.95 11.0375C9.06667 11.0625 9.175 11.0917 9.275 11.125L15.15 13.3C15.7 13.5 16.1458 13.85 16.4875 14.35C16.8292 14.85 17 15.4 17 16H19C19.8333 16 20.5417 16.275 21.125 16.825C21.7083 17.375 22 18.1 2
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49883	18.154.132.120	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	543	OUT	GET /c/hotjar-2155700.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:34 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 12:32:34 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/a5c93a7abd9916a97bea849007e53300 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 0ln5fp17DPRfyknCjUGJyZNJ2RRGtBWZTFPz-c6wISo6uUmPXEZOpw==
2024-04-24 12:32:34 UTC	10955	IN	Data Raw: 32 61 63 33 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 32 31 35 35 37 30 30 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 30 32 33 39 39 39 39 39 39 34 36 31 30 31 31 36 65 2d 36 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c Data Ascii: 2ac3window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2155700,"rec_value":1.0239999994610116e-6,"state_change_listen_mode":"automatic","record":false,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_consol
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49885	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	912	OUT	GET /wp-content/uploads/2023/11/audit-compliance.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:46 GMT ETag: W/"65845b52-89f" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de75fb10adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	892	IN	Data Raw: 38 39 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 30 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 89f<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8006" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:34 UTC	1322	IN	Data Raw: 20 31 31 2e 39 20 31 36 20 31 33 43 31 36 20 31 33 2e 33 38 33 33 20 31 35 2e 39 35 34 32 20 31 33 2e 37 34 31 37 20 31 35 2e 38 36 32 35 20 31 34 2e 30 37 35 43 31 35 2e 37 37 30 38 20 31 34 2e 34 30 38 33 20 31 35 2e 36 33 33 33 20 31 34 2e 37 31 36 37 20 31 35 2e 34 35 20 31 35 4c 31 38 20 31 37 2e 36 56 38 2e 37 4c 31 34 2e 30 35 20 34 48 36 56 32 30 48 31 34 2e 37 35 5a 4d 31 32 20 31 35 43 31 32 2e 35 35 20 31 35 20 31 33 2e 30 32 30 38 20 31 34 2e 38 30 34 32 20 31 33 2e 34 31 32 35 20 31 34 2e 34 31 32 35 43 31 33 2e 38 30 34 32 20 31 34 2e 30 32 30 38 20 31 34 20 31 33 2e 35 35 20 31 34 20 31 33 43 31 34 20 31 32 2e 34 35 20 31 33 2e 38 30 34 32 20 31 31 2e 39 37 39 32 20 31 33 2e 34 31 32 35 20 31 31 2e 35 38 37 35 43 31 33 2e 30 32 30 38 20 31 Data Ascii: 11.9 16 13C16 13.3833 15.9542 13.7417 15.8625 14.075C15.7708 14.4083 15.6333 14.7167 15.45 15L18 17.6V8.7L14.05 4H6V20H14.75ZM12 15C12.55 15 13.0208 14.8042 13.4125 14.4125C13.8042 14.0208 14 13.55 14 13C14 12.45 13.8042 11.9792 13.4125 11.5875C13.0208 1
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49886	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	898	OUT	GET /wp-content/uploads/2023/11/hr.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:49 GMT ETag: W/"65845b55-c82" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de76b2a09f9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	892	IN	Data Raw: 63 38 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 31 36 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: c82<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8016" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:34 UTC	1369	IN	Data Raw: 38 33 33 20 38 2e 35 20 39 2e 35 43 38 2e 35 20 38 2e 35 31 36 36 37 20 38 2e 38 33 37 35 20 37 2e 36 38 37 35 20 39 2e 35 31 32 35 20 37 2e 30 31 32 35 43 31 30 2e 31 38 37 35 20 36 2e 33 33 37 35 20 31 31 2e 30 31 36 37 20 36 20 31 32 20 36 43 31 32 2e 39 38 33 33 20 36 20 31 33 2e 38 31 32 35 20 36 2e 33 33 37 35 20 31 34 2e 34 38 37 35 20 37 2e 30 31 32 35 43 31 35 2e 31 36 32 35 20 37 2e 36 38 37 35 20 31 35 2e 35 20 38 2e 35 31 36 36 37 20 31 35 2e 35 20 39 2e 35 43 31 35 2e 35 20 31 30 2e 34 38 33 33 20 31 35 2e 31 36 32 35 20 31 31 2e 33 31 32 35 20 31 34 2e 34 38 37 35 20 31 31 2e 39 38 37 35 43 31 33 2e 38 31 32 35 20 31 32 2e 36 36 32 35 20 31 32 2e 39 38 33 33 20 31 33 20 31 32 20 31 33 5a 4d 31 32 20 32 32 43 31 30 2e 36 31 36 37 20 32 32 20 Data Ascii: 833 8.5 9.5C8.5 8.51667 8.8375 7.6875 9.5125 7.0125C10.1875 6.3375 11.0167 6 12 6C12.9833 6 13.8125 6.3375 14.4875 7.0125C15.1625 7.6875 15.5 8.51667 15.5 9.5C15.5 10.4833 15.1625 11.3125 14.4875 11.9875C13.8125 12.6625 12.9833 13 12 13ZM12 22C10.6167 22
2024-04-24 12:32:34 UTC	948	IN	Data Raw: 30 2e 35 20 39 2e 30 36 36 36 37 20 31 30 2e 35 20 39 2e 35 43 31 30 2e 35 20 39 2e 39 33 33 33 33 20 31 30 2e 36 34 31 37 20 31 30 2e 32 39 31 37 20 31 30 2e 39 32 35 20 31 30 2e 35 37 35 43 31 31 2e 32 30 38 33 20 31 30 2e 38 35 38 33 20 31 31 2e 35 36 36 37 20 31 31 20 31 32 20 31 31 5a 22 20 66 69 6c 6c 3d 22 23 30 33 30 33 35 32 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 2e 31 20 32 31 2e 32 31 32 35 43 39 2e 33 31 36 36 37 20 32 31 2e 37 33 37 35 20 31 30 2e 36 31 36 37 20 32 32 20 31 32 20 32 32 43 31 33 2e 33 38 33 33 20 32 32 20 31 34 2e 36 38 33 33 20 32 31 2e 37 33 37 35 20 31 35 2e 39 20 32 31 Data Ascii: 0.5 9.06667 10.5 9.5C10.5 9.93333 10.6417 10.2917 10.925 10.575C11.2083 10.8583 11.5667 11 12 11Z" fill="#030352"></path> <path fill-rule="evenodd" clip-rule="evenodd" d="M8.1 21.2125C9.31667 21.7375 10.6167 22 12 22C13.3833 22 14.6833 21.7375 15.9 21
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49887	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	907	OUT	GET /wp-content/uploads/2023/11/procurement.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-535" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de79f9f0acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	892	IN	Data Raw: 35 33 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 33 32 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 535<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8032" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:34 UTC	448	IN	Data Raw: 39 20 31 39 2e 34 35 20 31 39 20 32 30 43 31 39 20 32 30 2e 35 35 20 31 38 2e 38 30 34 32 20 32 31 2e 30 32 30 38 20 31 38 2e 34 31 32 35 20 32 31 2e 34 31 32 35 43 31 38 2e 30 32 30 38 20 32 31 2e 38 30 34 32 20 31 37 2e 35 35 20 32 32 20 31 37 20 32 32 5a 4d 31 20 34 56 32 48 34 2e 32 37 35 4c 38 2e 35 32 35 20 31 31 48 31 35 2e 35 32 35 4c 31 39 2e 34 32 35 20 34 48 32 31 2e 37 4c 31 37 2e 33 20 31 31 2e 39 35 43 31 37 2e 31 31 36 37 20 31 32 2e 32 38 33 33 20 31 36 2e 38 37 30 38 20 31 32 2e 35 34 31 37 20 31 36 2e 35 36 32 35 20 31 32 2e 37 32 35 43 31 36 2e 32 35 34 32 20 31 32 2e 39 30 38 33 20 31 35 2e 39 31 36 37 20 31 33 20 31 35 2e 35 35 20 31 33 48 38 2e 31 4c 37 20 31 35 48 31 39 56 31 37 48 37 43 36 2e 32 35 20 31 37 20 35 2e 36 37 39 31 37 Data Ascii: 9 19.45 19 20C19 20.55 18.8042 21.0208 18.4125 21.4125C18.0208 21.8042 17.55 22 17 22ZM1 4V2H4.275L8.525 11H15.525L19.425 4H21.7L17.3 11.95C17.1167 12.2833 16.8708 12.5417 16.5625 12.725C16.2542 12.9083 15.9167 13 15.55 13H8.1L7 15H19V17H7C6.25 17 5.67917
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49889	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	911	OUT	GET /wp-content/uploads/2023/11/sales-marketing.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:52 GMT ETag: W/"65845b58-458" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de82d9e0a03-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	892	IN	Data Raw: 34 35 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 30 35 36 5f 38 30 34 30 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e Data Ascii: 458<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <mask id="mask0_2056_8040" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="24" height="24">
2024-04-24 12:32:34 UTC	227	IN	Data Raw: 64 3d 22 4d 31 34 20 31 35 2e 33 35 56 38 2e 36 35 30 30 32 43 31 34 2e 34 35 20 39 2e 30 35 30 30 32 20 31 34 2e 38 31 32 35 20 39 2e 35 33 37 35 32 20 31 35 2e 30 38 37 35 20 31 30 2e 31 31 32 35 43 31 35 2e 33 36 32 35 20 31 30 2e 36 38 37 35 20 31 35 2e 35 20 31 31 2e 33 31 36 37 20 31 35 2e 35 20 31 32 43 31 35 2e 35 20 31 32 2e 36 38 33 34 20 31 35 2e 33 36 32 35 20 31 33 2e 33 31 32 35 20 31 35 2e 30 38 37 35 20 31 33 2e 38 38 37 35 43 31 34 2e 38 31 32 35 20 31 34 2e 34 36 32 35 20 31 34 2e 34 35 20 31 34 2e 39 35 20 31 34 20 31 35 2e 33 35 5a 22 20 66 69 6c 6c 3d 22 23 30 41 30 41 46 34 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: d="M14 15.35V8.65002C14.45 9.05002 14.8125 9.53752 15.0875 10.1125C15.3625 10.6875 15.5 11.3167 15.5 12C15.5 12.6834 15.3625 13.3125 15.0875 13.8875C14.8125 14.4625 14.45 14.95 14 15.35Z" fill="#0A0AF4"></path> </g></svg>
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49891	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	904	OUT	GET /wp-content/uploads/2023/11/facebook.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:34 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:47 GMT ETag: W/"65845b53-214" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961de959f109ff-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:34 UTC	539	IN	Data Raw: 32 31 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 2e 30 30 30 39 32 20 32 34 48 31 32 2e 30 30 30 39 56 31 35 2e 37 35 48 39 2e 30 30 30 39 32 56 31 32 48 31 32 2e 30 30 30 39 56 39 43 31 32 2e 30 30 30 39 20 36 2e 35 31 34 20 31 34 2e 30 31 34 39 20 34 2e 35 20 31 36 2e 35 30 30 39 20 34 2e 35 48 31 39 2e 35 30 30 39 56 38 2e 32 35 48 31 38 2e 30 30 30 Data Ascii: 214<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path d="M3.00092 24H12.0009V15.75H9.00092V12H12.0009V9C12.0009 6.514 14.0149 4.5 16.5009 4.5H19.5009V8.25H18.000
2024-04-24 12:32:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49894	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	905	OUT	GET /wp-content/uploads/2023/11/instagram.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:35 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-c02" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961deb18f409f1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:35 UTC	892	IN	Data Raw: 63 30 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 2e 30 39 34 32 31 20 31 32 43 36 2e 30 39 34 32 31 20 31 35 2e 32 33 36 20 38 2e 37 31 37 35 34 20 31 37 2e 38 35 39 34 20 31 31 2e 39 35 33 36 20 31 37 2e 38 35 39 34 43 31 35 2e 31 38 Data Ascii: c02<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path fill-rule="evenodd" clip-rule="evenodd" d="M6.09421 12C6.09421 15.236 8.71754 17.8594 11.9536 17.8594C15.18
2024-04-24 12:32:35 UTC	1369	IN	Data Raw: 3d 22 4d 36 2e 36 38 38 33 34 20 32 33 2e 38 35 33 35 43 38 2e 34 36 31 35 37 20 32 33 2e 39 36 31 34 20 31 30 2e 32 33 32 38 20 32 34 2e 30 30 33 39 20 31 32 2e 30 30 30 35 20 32 33 2e 39 39 39 37 43 31 33 2e 37 36 38 20 32 34 2e 30 30 33 39 20 31 35 2e 35 33 39 33 20 32 33 2e 39 36 31 34 20 31 37 2e 33 31 32 36 20 32 33 2e 38 35 33 35 43 31 38 2e 38 30 35 39 20 32 33 2e 37 36 32 37 20 32 30 2e 32 32 32 37 20 32 33 2e 32 36 38 31 20 32 31 2e 34 30 34 20 32 32 2e 33 30 34 38 43 32 32 2e 35 34 31 37 20 32 31 2e 33 37 37 20 32 33 2e 32 35 35 35 20 32 30 2e 31 33 34 33 20 32 33 2e 36 31 30 37 20 31 38 2e 37 34 32 31 43 32 33 2e 39 33 38 39 20 31 37 2e 34 35 35 39 20 32 33 2e 39 35 36 36 20 31 36 2e 31 36 33 32 20 32 33 2e 39 37 32 36 20 31 34 2e 39 39 35 35 Data Ascii: ="M6.68834 23.8535C8.46157 23.9614 10.2328 24.0039 12.0005 23.9997C13.768 24.0039 15.5393 23.9614 17.3126 23.8535C18.8059 23.7627 20.2227 23.2681 21.404 22.3048C22.5417 21.377 23.2555 20.1343 23.6107 18.7421C23.9389 17.4559 23.9566 16.1632 23.9726 14.9955
2024-04-24 12:32:35 UTC	820	IN	Data Raw: 39 38 30 35 20 31 2e 38 37 35 39 32 20 31 32 43 31 2e 38 37 38 32 32 20 31 31 2e 30 31 39 35 20 31 2e 38 38 39 33 36 20 31 30 2e 30 33 37 38 20 31 2e 39 30 32 38 33 20 39 2e 30 35 33 32 33 43 31 2e 39 31 39 33 32 20 37 2e 38 34 36 35 38 20 31 2e 39 34 30 33 31 20 36 2e 37 36 36 34 32 20 32 2e 32 30 36 39 35 20 35 2e 37 32 31 34 36 43 32 2e 34 37 37 37 37 20 34 2e 36 36 30 31 37 20 32 2e 39 39 38 37 20 33 2e 37 38 36 39 35 20 33 2e 37 38 31 38 38 20 33 2e 31 34 38 32 39 43 34 2e 36 32 34 38 34 20 32 2e 34 36 30 38 37 20 35 2e 36 35 34 37 38 20 32 2e 30 38 37 37 39 20 36 2e 38 30 32 31 36 20 32 2e 30 31 38 30 32 43 38 2e 35 33 30 36 20 31 2e 39 31 32 39 20 31 30 2e 32 36 32 36 20 31 2e 38 37 31 31 38 20 31 31 2e 39 39 38 33 20 31 2e 38 37 35 32 37 4c 31 32 Data Ascii: 9805 1.87592 12C1.87822 11.0195 1.88936 10.0378 1.90283 9.05323C1.91932 7.84658 1.94031 6.76642 2.20695 5.72146C2.47777 4.66017 2.9987 3.78695 3.78188 3.14829C4.62484 2.46087 5.65478 2.08779 6.80216 2.01802C8.5306 1.9129 10.2626 1.87118 11.9983 1.87527L12
2024-04-24 12:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49895	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	904	OUT	GET /wp-content/uploads/2023/11/linkedin.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:35 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:51 GMT ETag: W/"65845b57-354" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961deb9cb80ad1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:35 UTC	859	IN	Data Raw: 33 35 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 35 34 38 5f 32 37 32 33 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 39 34 20 32 34 4c 32 34 20 32 33 2e 39 39 39 56 31 35 2e 31 39 37 43 32 34 20 31 30 2e 38 39 31 20 32 33 2e 30 37 33 20 37 2e 35 37 33 39 37 20 31 38 2e 30 33 39 20 37 2e Data Ascii: 354<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_1548_2723)"> <path d="M23.994 24L24 23.999V15.197C24 10.891 23.073 7.57397 18.039 7.
2024-04-24 12:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49896	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	903	OUT	GET /wp-content/uploads/2023/11/youtube.svg HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D
2024-04-24 12:32:35 UTC	477	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Dec 2023 15:35:56 GMT ETag: W/"65845b5c-416" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 87961debbd510add-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:35 UTC	892	IN	Data Raw: 34 31 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 35 34 38 5f 32 37 32 37 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 34 36 39 20 35 2e 39 32 39 30 31 4c 32 33 2e 34 39 39 20 36 2e 31 32 35 30 31 43 32 33 2e 32 30 39 20 35 2e 30 39 36 30 31 20 32 32 2e 34 32 36 20 34 2e 33 30 32 30 31 20 32 Data Ascii: 416<?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <g clip-path="url(#clip0_1548_2727)"> <path d="M23.469 5.92901L23.499 6.12501C23.209 5.09601 22.426 4.30201 2
2024-04-24 12:32:35 UTC	161	IN	Data Raw: 22 23 43 45 43 45 46 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 3c 2f 67 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 30 5f 31 35 34 38 5f 32 37 32 37 22 3e 0a 20 20 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: "#CECEF5"></path> </g> <defs> <clipPath id="clip0_1548_2727"> <rect width="24" height="24" fill="white"></rect> </clipPath> </defs></svg>
2024-04-24 12:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49897	172.64.144.225	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:34 UTC	607	OUT	GET /attribution_tracking/conversions/5962.js?p=https://www.signaturit.com/en/legality/&e= HTTP/1.1 Host: tracking.g2crowd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:35 UTC	1261	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, public set-cookie: _session_id=ac5ede721f8ad0dc9547856906fe359e; path=/; expires=Wed, 08 May 2024 12:32:35 GMT; HttpOnly; secure; SameSite=None etag: W/"3dae93a05edd9dcfc1864b87178a31e0" x-request-id: 4488d05b-ade1-478e-8a18-72359f6884c9 x-runtime: 0.003397 strict-transport-security: max-age=604800 x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.com vary: Origin CF-Cache-Status: DYNAMIC
2024-04-24 12:32:35 UTC	322	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 32 61 59 48 41 47 6b 33 36 48 4e 67 62 4a 42 71 56 37 4e 4f 37 32 47 47 66 56 46 34 4b 5a 48 77 41 6f 6b 6d 63 59 4a 74 6a 66 49 2d 31 37 31 33 39 36 31 39 35 35 2d 31 2e 30 2e 31 2e 31 2d 44 31 72 64 4e 4a 6d 63 54 58 67 2e 58 48 33 31 74 64 67 72 38 36 52 49 56 70 6a 63 71 71 67 76 72 57 45 61 34 4b 64 44 64 4c 68 45 37 47 5f 4f 48 46 70 39 71 6d 2e 32 34 6d 4c 67 72 52 4c 61 43 34 36 6b 78 46 57 4b 67 4a 74 39 56 48 32 46 39 76 57 6b 39 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 41 70 72 2d 32 34 20 31 33 3a 30 32 3a 33 35 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 67 32 63 72 6f 77 64 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=2aYHAGk36HNgbJBqV7NO72GGfVF4KZHwAokmcYJtjfI-1713961955-1.0.1.1-D1rdNJmcTXg.XH31tdgr86RIVpjcqqgvrWEa4KdDdLhE7G_OHFp9qm.24mLgrRLaC46kxFWKgJt9VH2F9vWk9g; path=/; expires=Wed, 24-Apr-24 13:02:35 GMT; domain=.g2crowd.com; HttpOnly; Secure;
2024-04-24 12:32:35 UTC	22	IN	Data Raw: 31 30 0d 0a 2f 2f 20 54 72 61 63 6b 69 6e 67 20 46 69 6c 65 0d 0a Data Ascii: 10// Tracking File
2024-04-24 12:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49899	108.139.10.63	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:35 UTC	543	OUT	GET /c84ebe43de7d3bac.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:35 UTC	849	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 78460 Connection: close Date: Wed, 24 Apr 2024 12:32:36 GMT Last-Modified: Tue, 16 Apr 2024 11:40:14 GMT ETag: "59ec2e3127045c41ebbcc2ae5456c4b8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: fB.3CFc259upDD98dR2_7LWYHCDr9VZa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 87e907bf938f21f1b962d1401b077d14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: c-xQRcMpNQjC1nl6zgcqGkcH_8Vz-uY08n2Pt06IWfF1hz1orataVA== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-04-24 12:32:35 UTC	16384	IN	Data Raw: 76 61 72 20 44 65 6d 61 6e 64 62 61 73 65 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4d 2c 78 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 66 28 69 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 65 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 30 2c 6f 29 29 5b 6f 5d 3d 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 28 6e 7c 7c Data Ascii: var Demandbase=window.Demandbase\|\|{};!function(g){"use strict";var M,x=this&&this.__spreadArray\|\|function(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|((n=n\|\|Array.prototype.slice.call(e,0,o))[o]=e[o]);return t.concat(n\|\|
2024-04-24 12:32:35 UTC	2417	IN	Data Raw: 5b 22 6e 61 6d 65 22 2c 22 73 65 67 6d 65 6e 74 73 22 2c 22 70 61 67 65 73 22 2c 22 6d 6f 64 69 66 79 22 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 6d 6f 64 69 66 79 29 72 65 74 75 72 6e 20 50 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 44 42 43 6f 6e 74 65 6e 74 42 75 69 6c 64 65 72 3a 20 69 6e 76 61 6c 69 64 20 74 79 70 65 20 69 6e 20 63 6f 6e 66 69 67 2e 22 29 2c 21 31 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 5b 65 5b 69 5d 5d 29 72 65 74 75 72 6e 20 50 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 44 42 43 6f 6e 74 65 6e 74 42 75 69 6c 64 65 72 3a 20 69 6e 76 61 6c 69 64 20 63 6f 6e Data Ascii: ["name","segments","pages","modify"];if("function"!=typeof t.modify)return P.Utilities.Logging.log("DBContentBuilder: invalid type in config."),!1;for(var i=0;i<e.length;i++)if(void 0===t[e[i]])return P.Utilities.Logging.log("DBContentBuilder: invalid con
2024-04-24 12:32:35 UTC	15360	IN	Data Raw: 65 6d 61 6e 64 62 61 73 65 2e 75 74 69 6c 73 7c 7c 7b 7d 3b 67 2e 53 68 69 6d 73 2e 61 73 73 69 67 6e 28 74 2e 44 65 6d 61 6e 64 62 61 73 65 2e 75 74 69 6c 73 2c 74 2e 44 65 6d 61 6e 64 62 61 73 65 2e 75 74 69 6c 73 2c 7b 6c 6f 67 67 69 6e 67 3a 67 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 67 69 6e 67 2c 64 65 62 75 67 3a 67 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 64 65 62 75 67 2c 61 6c 65 72 74 3a 67 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 61 6c 65 72 74 2e 62 69 6e 64 28 67 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 29 2c 6c 6f 67 3a 67 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 2e 62 69 6e 64 28 67 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 29 7d 29 Data Ascii: emandbase.utils\|\|{};g.Shims.assign(t.Demandbase.utils,t.Demandbase.utils,{logging:g.Utilities.Logging.logging,debug:g.Utilities.Logging.debug,alert:g.Utilities.Logging.alert.bind(g.Utilities.Logging),log:g.Utilities.Logging.log.bind(g.Utilities.Logging)})
2024-04-24 12:32:36 UTC	16384	IN	Data Raw: 35 31 39 65 39 33 30 32 35 39 66 35 38 38 36 61 37 61 66 35 33 62 30 63 63 61 61 22 3b 65 2e 53 45 4e 54 52 59 5f 50 52 4f 4a 45 43 54 5f 49 44 3d 22 31 31 39 30 31 35 30 22 3b 65 2e 53 45 4e 54 52 59 5f 50 55 42 4c 49 43 5f 4b 45 59 3d 22 33 63 39 64 34 36 37 66 38 61 39 64 34 32 39 35 62 30 66 38 33 32 30 61 65 38 35 32 30 39 31 64 22 3b 65 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 3d 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 69 67 6e 6f 72 61 62 6c 65 45 72 72 6f 72 73 3a 5b 5d 7d 3b 65 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 7b 7d 3b 65 2e 61 64 64 69 74 69 6f 6e 61 6c 45 72 72 6f 72 44 65 74 61 69 6c 73 3d 7b 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 Data Ascii: 519e930259f5886a7af53b0ccaa";e.SENTRY_PROJECT_ID="1190150";e.SENTRY_PUBLIC_KEY="3c9d467f8a9d4295b0f8320ae852091d";e.DEFAULT_CONFIGURATION={environment:"production",ignorableErrors:[]};e.configuration={};e.additionalErrorDetails={};i.prototype.mergeConfigs
2024-04-24 12:32:36 UTC	1024	IN	Data Raw: 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 28 74 68 69 73 2e 54 45 53 54 5f 4d 4f 44 45 5f 45 4e 41 42 4c 45 44 29 7c 7c 79 2e 43 6f 6e 66 69 67 2e 75 73 65 54 65 73 74 49 70 2c 74 65 73 74 4d 6f 64 65 56 61 6c 75 65 3a 79 2e 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 28 74 68 69 73 2e 54 45 53 54 5f 4d 4f 44 45 5f 56 41 4c 55 45 29 7c 7c 79 2e 43 6f 6e 66 69 67 2e 74 65 73 74 49 70 7d 29 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 3b 79 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 2e 73 65 6e 64 28 74 29 7d 7d 3b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 49 50 41 50 49 50 61 72 61 6d 65 74 65 72 Data Ascii: Utilities.getQueryParam(this.TEST_MODE_ENABLED)\|\|y.Config.useTestIp,testModeValue:y.Utilities.getQueryParam(this.TEST_MODE_VALUE)\|\|y.Config.testIp});this.initialized=!0}catch(t){this.initialized=!1;y.ErrorReporter.send(t)}};t.prototype.buildIPAPIParameter
2024-04-24 12:32:36 UTC	16384	IN	Data Raw: 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 29 3b 72 65 74 75 72 6e 20 65 26 26 21 79 2e 55 74 69 6c 69 74 69 65 73 2e 69 73 4f 6c 64 42 72 6f 77 73 65 72 4f 72 55 73 65 72 41 67 65 6e 74 55 6e 61 76 61 69 6c 61 62 6c 65 28 29 3f 5b 33 2c 32 5d 3a 5b 34 2c 74 68 69 73 2e 67 65 74 42 79 44 6f 6d 53 63 72 69 70 74 28 61 2c 73 29 5d 3b 63 61 73 65 20 31 3a 74 2e 73 65 6e 74 28 29 3b 72 65 74 75 72 6e 5b 32 2c 79 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 49 50 20 41 50 49 20 71 75 65 72 79 20 76 69 61 20 44 4f 4d 20 74 61 67 22 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 62 75 69 6c 64 49 50 41 50 49 50 61 72 61 6d 65 74 65 72 73 28 61 29 5d 3b 63 61 73 65 20 33 Data Ascii: XObject("Microsoft.XMLHTTP"));return e&&!y.Utilities.isOldBrowserOrUserAgentUnavailable()?[3,2]:[4,this.getByDomScript(a,s)];case 1:t.sent();return[2,y.Utilities.Logging.log("IP API query via DOM tag")];case 2:return[4,this.buildIPAPIParameters(a)];case 3
2024-04-24 12:32:36 UTC	3392	IN	Data Raw: 61 6c 75 65 2c 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 3b 74 68 69 73 2e 65 76 61 6c 75 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 74 68 69 73 2e 6f 70 65 72 61 74 6f 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 44 42 43 6f 6e 64 69 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 65 64 4f 70 65 72 61 74 6f 72 73 5b 69 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 68 65 63 6b 56 61 6c 75 65 28 74 68 69 73 2e 76 61 6c 75 65 29 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 74 68 69 73 2e 76 61 6c 75 65 29 69 66 28 21 30 3d 3d 3d 74 68 69 73 2e 5f 63 68 65 63 Data Ascii: alue,t);default:return!1}};this.evaluate=function(){i=this.operator.toLowerCase();i=window.Demandbase.DBCondition.prototype.supportedOperators[i];if("object"!=typeof this.value)return this._checkValue(this.value);for(var t in this.value)if(!0===this._chec
2024-04-24 12:32:36 UTC	7115	IN	Data Raw: 20 65 20 69 6e 20 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 29 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 65 5d 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 65 5d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 7c 7c 22 44 42 43 6f 6e 64 69 74 69 6f 6e 22 21 3d 3d 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 65 5d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 29 26 26 74 68 69 73 2e 61 64 64 28 22 63 6f 6e 64 69 74 69 6f 6e 22 2c 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 Data Ascii: e in this._allConditions)this._allConditions.hasOwnProperty(e)&&this._allConditions[e]&&(void 0===this._allConditions[e].constructor.prototype.name\|\|"DBCondition"!==this._allConditions[e].constructor.prototype.name)&&this.add("condition",this._allConditi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49901	142.250.101.156	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:35 UTC	937	OUT	GET /td/ga/rul?tid=G-ZB2TFCHC3F&gacid=1954242962.1713961954&gtm=45je44m0v880655858z86591828za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=905032389 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:35 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 12:47:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:35 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 12:32:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49898	172.65.208.22	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:35 UTC	559	OUT	GET /143456774.js?businessUnitId=16226724 HTTP/1.1 Host: js-eu1.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:35 UTC	916	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 2460 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Max-Age: 3600 Cf-Bgj: minify Cf-Polished: origSize=2571 Vary: origin X-Content-Type-Options: nosniff X-HubSpot-Correlation-Id: 259a4f10-62ba-4a0e-9fbd-1e23392f903e x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: fra04/hubapi-td/envoy-proxy-6cb5cf8d4d-pgb74 x-evy-trace-virtual-host: all x-request-id: 259a4f10-62ba-4a0e-9fbd-1e23392f903e CF-Cache-Status: HIT Age: 2307 Last-Modified: Wed, 24 Apr 2024 11:54:08 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961defbf87047f-CDG
2024-04-24 12:32:35 UTC	453	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2d 65 75 31 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 31 33 39 35 39 34 30 30 30 30 30 2f 31 34 33 34 35 36 37 37 34 2e 6a 73 22 2c 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 63 2e 69 64 3d 65 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: !function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js-eu1.hs-analytics.net/analytics/1713959400000/143456774.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNod
2024-04-24 12:32:35 UTC	1369	IN	Data Raw: 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 68 73 2d 61 64 73 2d 70 69 78 65 6c 2d 31 34 33 34 35 36 37 37 34 22 2c 30 2c 7b 22 64 61 74 61 2d 61 64 73 2d 70 6f 72 74 61 6c 2d 69 64 22 3a 31 34 33 34 35 36 37 37 34 2c 22 64 61 74 61 2d 61 64 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 Data Ascii: vascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hs-ads-pixel-143456774",0,{"data-ads-portal-id":143456774,"data-ads-env":"prod","data-loader":"hs-scriptloade
2024-04-24 12:32:35 UTC	638	IN	Data Raw: 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 31 34 33 34 35 36 37 37 34 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 65 75 31 22 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2d 65 75 31 2e 68 73 63 6f 6c 6c 65 63 74 65 64 66 6f 72 6d 73 2e 6e 65 74 2f 63 6f 6c 6c 65 63 74 65 64 66 6f 72 6d 73 2e 6a 73 22 2c 6e 2e 74 Data Ascii: ptloader","data-hsjs-portal":143456774,"data-hsjs-env":"prod","data-hsjs-hublet":"eu1"});!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js-eu1.hscollectedforms.net/collectedforms.js",n.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49905	54.160.89.81	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:35 UTC	656	OUT	GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDI5MDF9.flQCMylC5XJoc6sWx2NSwqpWPPOOry21VZ9djKpQi9Y HTTP/1.1 Host: scout.salesloft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:35 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 41 Connection: close access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://www.signaturit.com access-control-expose-headers: cache-control: max-age=0, private, must-revalidate x-request-id: 120f1098008c1508522c2d82288d37ef Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:32:35 UTC	41	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 6f 75 74 2e 75 73 32 2e 73 61 6c 65 73 6c 6f 66 74 2e 63 6f 6d 22 7d Data Ascii: {"url":"https://scout.us2.salesloft.com"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49900	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:35 UTC	552	OUT	GET /ariadne/v1/ariadne.js?ts=1713961949094 HTTP/1.1 Host: appvizer.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:36 UTC	365	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:35 GMT Content-Type: application/javascript Content-Length: 509 Last-Modified: Wed, 14 Jun 2023 10:14:55 GMT Connection: close Vary: Accept-Encoding ETag: "6489931f-1fd" X-Frame-Options: ALLOWALL X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Accept-Ranges: bytes
2024-04-24 12:32:36 UTC	509	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 69 73 41 76 44 65 66 69 6e 65 64 29 7b 77 69 6e 64 6f 77 2e 69 73 41 76 44 65 66 69 6e 65 64 3d 21 30 3b 76 61 72 20 64 3d 28 28 62 2e 61 76 50 6f 6f 6c 26 26 62 2e 61 76 50 6f 6f 6c 5b 30 5d 7c 7c 7b 7d 29 2e 69 64 7c 7c 22 41 50 2d 30 22 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 62 3d 62 2e 61 76 55 52 4c 2b 22 2f 72 65 73 74 2f 61 72 69 61 64 6e 65 2f 76 32 2f 73 63 72 69 70 74 2f 22 3b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 61 2e 6f 70 65 6e 28 22 47 45 54 22 2c 62 2b 64 2c 21 30 29 3b 61 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a Data Ascii: (function(b){if(!window.isAvDefined){window.isAvDefined=!0;var d=((b.avPool&&b.avPool[0]\|\|{}).id\|\|"AP-0").toUpperCase();b=b.avURL+"/rest/ariadne/v2/script/";try{var a=new XMLHttpRequest;a.open("GET",b+d,!0);a.setRequestHeader("Content-type","application/j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49908	104.19.175.188	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	898	OUT	GET /embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:36 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:36 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 21 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 83dfd3d5-9fff-4e0e-b8f0-47cf2a8299e9 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-7p5f8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 83dfd3d5-9fff-4e0e-b8f0-47cf2a8299e9 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961df3ca4b0a03-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49912	54.160.89.81	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	554	OUT	GET /i HTTP/1.1 Host: scout.salesloft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:36 UTC	610	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 48 Connection: close access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://www.signaturit.com access-control-expose-headers: cache-control: max-age=0, private, must-revalidate x-request-id: 9c7fdbb71adfb86fc548ae490f358976 set-cookie: site_identity=bb66a4db-f8d8-4594-ac91-0ef358c3712d; path=/; expires=Thu, 24 Apr 2025 12:32:36 GMT; max-age=31536000; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:32:36 UTC	48	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 62 62 36 36 61 34 64 62 2d 66 38 64 38 2d 34 35 39 34 2d 61 63 39 31 2d 30 65 66 33 35 38 63 33 37 31 32 64 22 7d Data Ascii: {"token":"bb66a4db-f8d8-4594-ac91-0ef358c3712d"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49914	142.250.101.99	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	721	OUT	GET /recaptcha/enterprise.js?&onload=hsRecaptchaLoaded_aa59ca84_71c6_4a21_83cf_0aee24a58c81&render=explicit&hl=es HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:36 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 12:32:36 GMT Date: Wed, 24 Apr 2024 12:32:36 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:36 UTC	727	IN	Data Raw: 35 38 33 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 583/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-04-24 12:32:36 UTC	691	IN	Data Raw: 6a 51 61 38 4d 6e 6d 43 41 4c 53 45 55 32 39 79 51 46 57 38 64 65 50 5a 37 78 51 54 76 53 74 37 33 70 48 61 7a 4c 46 54 4b 35 66 37 53 79 4c 55 4a 53 6f 32 75 4b 4c 65 73 45 74 45 61 39 61 55 59 63 67 4d 41 41 41 43 50 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 Data Ascii: jQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eS
2024-04-24 12:32:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49915	52.23.83.161	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	446	OUT	GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDI5MDF9.flQCMylC5XJoc6sWx2NSwqpWPPOOry21VZ9djKpQi9Y HTTP/1.1 Host: scout.salesloft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:37 UTC	411	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 41 Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate x-request-id: 564126b43285731a5615a8ba472f5b72 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:32:37 UTC	41	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 6f 75 74 2e 75 73 32 2e 73 61 6c 65 73 6c 6f 66 74 2e 63 6f 6d 22 7d Data Ascii: {"url":"https://scout.us2.salesloft.com"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49916	18.154.144.9	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	747	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&page_title=Page%20not%20found%20%7C%20Signaturit HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:36 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 48 31 4a 66 42 38 6a 42 34 6e 67 6d 70 73 30 33 6c 4b 42 61 79 4b 66 50 4f 38 65 41 51 45 67 66 6c 57 4a 73 70 54 34 4a 22 7d Data Ascii: {"src":"tag","auth":"H1JfB8jB4ngmps03lKBayKfPO8eAQEgflWJspT4J"}
2024-04-24 12:32:37 UTC	959	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 12:32:36 GMT Server: nginx Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 12:32:36 GMT Vary: Accept-Encoding, Origin Request-ID: 80da68a2-927c-49fd-ad02-be32a06733bd X-Cache: Miss from cloudfront Via: 1.1 2692406fe16e2e962bcfe72de6950e96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: 4GA55AgMUbMyeoy-Uc1wYHNMMTqVHQ4MGUXuAVV70rbmioZKoV6Jmw==
2024-04-24 12:32:37 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49909	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	898	OUT	GET /embed/v3/counters.gif?key=forms-embed-v2-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-eu1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:37 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:37 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 88077646-afcc-472c-a5a4-ccaaf99929d1 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-mlxkr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 88077646-afcc-472c-a5a4-ccaaf99929d1 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961df76e6a7841-CDG alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49917	34.96.71.22	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:36 UTC	698	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:37 UTC	511	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=ea556916-5ff9-4bbe-87d1-172f8612a1ce; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713961957\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 12:32:37 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:37 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 32 39 37 37 33 31 35 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 65 61 35 35 36 39 31 36 2d 35 66 66 39 2d 34 62 62 65 2d 38 37 64 31 2d 31 37 32 66 38 36 31 32 61 31 63 65 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49913	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	529	OUT	OPTIONS /rest/ariadne/v2/script/AP-0 HTTP/1.1 Host: appvizer.one Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:37 UTC	693	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:37 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: content-type Access-Control-Expose-Headers: Access-Control-Allow-Origin, Access-Control-Allow-Credentials Access-Control-Allow-Credentials: true Access-Control-Max-Age: 0 Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Frame-Options: SAMEORIGIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49918	104.18.80.204	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	660	OUT	GET /embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:37 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:37 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: f498ed79-aa90-4cbc-ac2f-ca7e62ce0144 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-9fd6b4b-t7sgj x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: f498ed79-aa90-4cbc-ac2f-ca7e62ce0144 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961df99f2b09ed-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49919	52.23.83.161	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	344	OUT	GET /i HTTP/1.1 Host: scout.salesloft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:37 UTC	550	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 48 Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate x-request-id: 2dedc83d6cc23897f11c13bddcaa2acf set-cookie: site_identity=445234c2-cce0-4260-8a15-d898be5d249d; path=/; expires=Thu, 24 Apr 2025 12:32:37 GMT; max-age=31536000; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:32:37 UTC	48	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 34 34 35 32 33 34 63 32 2d 63 63 65 30 2d 34 32 36 30 2d 38 61 31 35 2d 64 38 39 38 62 65 35 64 32 34 39 64 22 7d Data Ascii: {"token":"445234c2-cce0-4260-8a15-d898be5d249d"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49921	142.250.101.155	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	909	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&gjid=398648138&_gid=1531399362.1713961956&_u=YCDAgAABAAAAAG~&z=919864726 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.signaturit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:32:37 UTC	596	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.signaturit.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 12:32:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:37 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49923	18.154.144.129	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	476	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&page_title=Page%20not%20found%20%7C%20Signaturit HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:37 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 12:32:37 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 8fd254d2-b478-4e58-990b-69bb8b0872c8 Vary: Origin X-Cache: Error from cloudfront Via: 1.1 34dd87875785e0ee116e7e29b2ad6cc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: 0G9mOKSwtkLYVVIuR2eC4gFzDZh6Hsc4hcvVFT6ncgLHlqlmHfx_6Q==
2024-04-24 12:32:37 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49922	99.84.66.60	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	647	OUT	GET /bg9s?x-amz-cf-id=4GA55AgMUbMyeoy-Uc1wYHNMMTqVHQ4MGUXuAVV70rbmioZKoV6Jmw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:38 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:52:34 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO50-C1 X-Amz-Cf-Id: 5UXherdI5UIRur2URReI90P_QKQlNt6hlR39HBtX88YTjzj0UCcP9g== Age: 13743 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49930	104.18.36.155	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:37 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:38 UTC	1202	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:32:38 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce&C=1 CF-Ray: 87961dfd9ed969e3-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:32:38 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=4248; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:32:38 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=4248; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:32:38 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RNe1SXWgoaiP6A6kXcXJ5ehgzaduwWK%2FTIvfAdNVhqT6mag3V3ugOZ9VGNGlF6O24xqemKdouBFglfGkn%2BbUV0gskAfwjuLO%2B4rYLOZs1ni%2FPD3o9z73EQTNLi6zuLnUEvRruq1w30RvkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49924	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:38 UTC	660	OUT	GET /embed/v3/counters.gif?key=forms-embed-v2-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-eu1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:38 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:38 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: d29a2787-1fda-42b4-a617-b14d5e0b3b61 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-6j4gk x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: d29a2787-1fda-42b4-a617-b14d5e0b3b61 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961dff7c546980-CDG alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49927	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:38 UTC	605	OUT	GET /rest/ariadne/v2/script/AP-0 HTTP/1.1 Host: appvizer.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:38 UTC	586	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:38 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 51 Connection: close Vary: Accept-Encoding Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Expose-Headers: Access-Control-Allow-Origin, Access-Control-Allow-Credentials Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Frame-Options: SAMEORIGIN
2024-04-24 12:32:38 UTC	51	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 61 70 70 76 69 7a 65 72 2e 6f 6e 65 2f 61 72 69 61 64 6e 65 2f 76 31 2f 61 72 69 61 64 6e 65 5f 73 63 72 61 70 69 6e 67 2e 6a 73 Data Ascii: https://appvizer.one/ariadne/v1/ariadne_scraping.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49928	54.236.114.45	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:38 UTC	592	OUT	GET /sync?UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:38 UTC	513	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:38 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=e51f720edaab4e549610d4fd0f3aea50; Domain=.tremorhub.com; Expires=Thu, 24-Apr-2025 18:20:58 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce; Domain=.tremorhub.com; Expires=Sat, 25-Apr-2026 00:09:18 GMT; Path=/; Secure; SameSite=None
2024-04-24 12:32:38 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-24 12:32:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49933	18.161.6.2	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:39 UTC	550	OUT	GET /modules.588629dd3c10b20ab52d.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:39 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225718 Connection: close Date: Tue, 23 Apr 2024 14:47:12 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "d78f803b3665558f63f048e3a8740d4b" Last-Modified: Tue, 23 Apr 2024 14:46:56 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO52-P1 X-Amz-Cf-Id: LkIoXnwjywYyybQuf1paz2zve0OItM11a82UCv5EAG9dYlgLfE_QQA== Age: 78327
2024-04-24 12:32:39 UTC	15666	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 35 38 38 36 32 39 64 64 33 63 31 30 62 32 30 61 62 35 32 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.588629dd3c10b20ab52d.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 28 29 2c 74 2e 61 63 74 69 76 65 57 69 64 67 65 74 3d 65 7d 29 29 7d 2c 74 2e 73 65 74 4c 61 6e 67 75 61 67 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 6c 61 6e 67 75 61 67 65 20 22 27 2b 74 2b 27 22 27 29 3b 65 3d 74 2c 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c Data Ascii: ((function(){e.runCallback(),t.activeWidget=e}))},t.setLanguage=hj.tryCatch((function(t){if(!u.includes(t))throw new Error('Invalid language "'+t+'"');e=t,hj.widget.activeLanguageDirection=n.indexOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 28 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 28 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 22 5d 2b 28 5c 2e 5b 5e 3c 3e 28 29 5b 5c 5d 5c 5c 2e 2c 3b 3a 5c 73 40 22 5d 2b 29 2a 29 7c 28 22 2e 2b 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 2e 74 65 73 74 28 65 29 7d 29 2c 22 75 74 69 6c 73 2e 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 75 73 65 72 44 Data Ascii: (hj.tryCatch((function(e){return/^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)\|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}),"utils.validateEmail"),hj.tryCatch((function(){return hj.userD
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 74 68 69 73 5b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 20 63 28 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 7d 7d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 30 26 26 63 28 29 29 7d 2c 68 6a 2e 69 6e 69 74 69 61 6c 56 69 73 69 74 44 61 74 61 53 65 6e 74 26 26 65 2e 61 63 74 69 76 61 74 65 28 29 2c 65 7d 28 29 2c 21 30 29 7d 29 2c 22 63 6f 6d 6d 61 6e 64 22 29 28 29 7d 2c 31 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 37 38 38 29 2c 6f 3d 6e 28 36 39 33 39 29 2c 69 3d 6e 28 35 36 35 38 29 2c 61 3d 6e 28 36 38 34 39 29 2c 73 3d 6e 28 36 37 Data Ascii: 0;e<arguments.length;e+=1)this[this.length]=arguments[e];return c(),this.length}}),n.length>0&&c())},hj.initialVisitDataSent&&e.activate(),e}(),!0)}),"command")()},1229:function(e,t,n){"use strict";n.r(t);var r=n(4788),o=n(6939),i=n(5658),a=n(6849),s=n(67
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 26 26 75 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 22 23 32 61 39 64 38 66 22 3b 63 21 3d 65 26 26 73 26 26 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 2c 73 3d 21 31 29 2c 63 3d 65 2c 76 6f 69 64 20 30 21 3d 3d 68 6a 2e 64 65 62 75 67 26 26 68 6a 2e 64 65 62 75 67 2e 69 73 4f 6e 28 29 26 26 28 22 6f 62 6a 65 63 Data Ascii: ebug:function(){},trace:function(){},log:function(){},info:function(){},warn:function(){},error:function(){}})},debug:function(e,t,n){var r=t&&u[t.toLowerCase()]\|\|"#2a9d8f";c!=e&&s&&(console.groupEnd(),s=!1),c=e,void 0!==hj.debug&&hj.debug.isOn()&&("objec
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 6e 5b 74 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 21 72 2e 6c 65 6e 67 74 68 29 7d 29 29 29 29 29 29 29 29 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 79 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 22 29 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 6e 65 77 20 56 28 6e 2e 72 6f 6f 74 2c 65 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 6f 6c 64 50 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 72 3d 6e 65 77 20 71 28 74 29 3b 6e 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 28 72 29 26 26 6e 2e 63 61 6c 6c 62 61 63 6b 28 72 29 7d 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 Data Ascii: n[t])\|\|void 0===r\|\|!r.length)}))))))))}),"MutationSummary.changesToReport"),this.observerCallback=hj.tryCatch((function(e){if(e&&e.length){var t=new V(n.root,e,n.options.oldPreviousSibling),r=new q(t);n.changesToReport(r)&&n.callback(r)}}),"MutationSummar
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 72 5d 2b 22 2f 2a 20 4f 72 69 67 69 6e 61 6c 6c 79 3a 20 3c 6c 69 6e 6b 20 22 3b 66 6f 72 28 76 61 72 20 75 3d 30 2c 6c 3d 61 2e 6c 65 6e 67 74 68 3b 75 3c 6c 3b 75 2b 2b 29 22 69 64 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 26 26 22 63 6c 61 73 73 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 7c 7c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 5b 75 5d 2e 6e 61 6d 65 2c 61 5b 75 5d 2e 76 61 6c 75 65 29 2c 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 61 5b 75 5d 2e 6e 61 6d 65 2b 27 3d 22 27 2b 61 5b 75 5d 2e 76 61 6c 75 65 2b 27 22 20 27 3b 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 22 3e 20 2a 2f 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 62 6c 6f 62 2d 68 61 73 68 2d 22 2b 73 29 2c 6f 2e 70 61 72 65 6e 74 4e Data Ascii: r]+"/* Originally: <link ";for(var u=0,l=a.length;u<l;u++)"id"!==a[u].name&&"class"!==a[u].name\|\|c.setAttribute(a[u].name,a[u].value),i[e.parentSelector]+=a[u].name+'="'+a[u].value+'" ';i[e.parentSelector]+="> */",c.classList.add("blob-hash-"+s),o.parentN
2024-04-24 12:32:39 UTC	15936	IN	Data Raw: 68 2c 64 2c 66 2c 67 3d 7b 7d 2c 70 3d 22 22 2c 76 3d 76 6f 69 64 20 30 2c 6d 3d 6e 75 6c 6c 2c 79 3d 21 31 2c 6a 3d 69 2e 66 5f 2e 6e 6f 77 28 29 2c 62 3d 21 31 3b 67 2e 65 76 65 6e 74 73 3d 5b 5d 2c 67 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 74 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 63 6f 6e 74 65 6e 74 22 29 2c 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 6e 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 75 72 6c 4d 44 35 22 29 2c 65 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 74 65 6e 74 5f Data Ascii: h,d,f,g={},p="",v=void 0,m=null,y=!1,j=i.f_.now(),b=!1;g.events=[],g.storePageContent=function(t,n){hj.log.warnIfEmpty(t,"tryStorePageContent: content"),hj.log.warnIfEmpty(n,"tryStorePageContent: urlMD5"),e.storePageContent(t,(function(e){var t=e.content_
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 6f 6e 28 6f 2c 69 29 7b 69 26 26 6e 75 6c 6c 21 3d 3d 69 2e 61 74 74 72 69 62 75 74 65 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 62 28 69 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 2e 61 74 74 72 69 62 75 74 65 73 2e 73 74 79 6c 65 26 26 28 69 2e 61 74 74 72 69 62 75 74 65 73 2e 73 74 79 6c 65 3d 3d 3d 74 26 26 69 2e 69 64 3d 3d 3d 6e 26 26 28 65 5b 72 5d 2e 63 5b 6f 5d 3d 6e 75 6c 6c 29 2c 74 3d 69 2e 61 74 74 72 69 62 75 74 65 73 2e 73 74 79 6c 65 2c 6e 3d 69 2e 69 64 29 7d 29 29 2c 65 5b 72 5d 2e 63 3d 65 5b 72 5d 2e 63 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 2c 65 5b 72 5d 2e 63 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 65 5b 72 5d 2e 63 Data Ascii: on(o,i){i&&null!==i.attributes&&"object"===b(i.attributes)&&"string"==typeof i.attributes.style&&(i.attributes.style===t&&i.id===n&&(e[r].c[o]=null),t=i.attributes.style,n=i.id)})),e[r].c=e[r].c.filter((function(e){return e})),e[r].c.length\|\|delete e[r].c
2024-04-24 12:32:39 UTC	16384	IN	Data Raw: 22 73 65 73 73 69 6f 6e 22 2c 6e 75 6c 6c 29 3b 76 61 72 20 69 2c 75 2c 68 2c 64 2c 70 2c 76 2c 6d 2c 6a 2c 62 2c 77 2c 53 2c 5f 2c 43 2c 45 3d 63 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 45 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 63 72 65 61 74 65 64 7c 7c 28 45 3d 72 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 45 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 63 72 65 61 74 65 64 26 26 45 2e 63 72 65 61 74 65 64 2b 73 2e 49 62 3c 61 2e 66 5f 2e 6e 6f 77 28 29 26 26 28 63 2e 51 2e 73 65 74 28 22 73 65 73 73 69 6f 6e 22 2c 6e 75 6c 6c 29 2c 45 3d 6e 75 6c 6c 29 2c 6e 75 6c 6c 3d 3d 3d 45 29 7b 76 61 72 20 49 3d 28 69 3d 7b 69 6e 53 61 6d 70 6c 65 3a 6f 28 22 72 65 67 69 73 74 65 72 53 65 73 73 69 Data Ascii: "session",null);var i,u,h,d,p,v,m,j,b,w,S,_,C,E=c.Q.get("session");if(null!==(e=E)&&void 0!==e&&e.created\|\|(E=r),null!==(t=E)&&void 0!==t&&t.created&&E.created+s.Ib<a.f_.now()&&(c.Q.set("session",null),E=null),null===E){var I=(i={inSample:o("registerSessi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49936	104.18.36.155	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:39 UTC	702	OUT	GET /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; CMPS=4248; CMPRO=4248
2024-04-24 12:32:39 UTC	986	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87961e08ccd90ad9-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:32:39 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4248; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:32:39 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uuY0wXa7FTuPulg71k%2BSraI%2FDka21JXvEcHQdPwb0i0TeVlwyZFU9OwwIjdNeSFaWDmpKIMbEa6NAVQgookZbBHlG5ehUW7e1NlR2wxFs7WD%2Ff%2Bk6HBsjnkmKrdnNSQSeWbMia53We18Dg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49937	142.250.101.155	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:39 UTC	653	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&gjid=398648138&_gid=1531399362.1713961956&_u=YCDAgAABAAAAAG~&z=919864726 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:32:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 12:32:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:40 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49938	18.164.174.40	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:39 UTC	563	OUT	GET /universalscript/releases/v0.181.0/bundle.js HTTP/1.1 Host: assets.ubembed.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:40 UTC	568	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 183251 Connection: close Date: Mon, 22 Apr 2024 20:19:27 GMT Last-Modified: Mon, 22 Apr 2024 15:36:41 GMT ETag: "bee109817bc465795a512e104e4319d5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b09fd261fc6f7c40f02dbc422032fc38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: QJLjKTCiKKYiUuFK7Z7_w8FeMcKym2kZj2Gix0Wfa_AmEST_8bCUcw== Age: 144792
2024-04-24 12:32:40 UTC	15816	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 39 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 72 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3b 69 26 26 21 28 22 67 65 74 22 69 6e 20 69 3f 21 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3a 69 2e 77 72 69 74 61 62 6c 65 7c 7c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7c 7c 28 69 3d 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 Data Ascii: !function(){var e={935:function(e,t,r){"use strict";var n=this&&this.__createBinding\|\|(Object.create?function(e,t,r,n){void 0===n&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);i&&!("get"in i?!t.__esModule:i.writable\|\|i.configurable)\|\|(i={enumerable:!0
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 74 73 3a 62 2c 67 65 6f 54 61 72 67 65 74 73 3a 67 2c 75 72 6c 54 61 72 67 65 74 73 3a 68 2c 69 6e 74 65 67 72 61 74 69 6f 6e 73 3a 63 2c 73 63 68 65 6d 61 56 65 72 73 69 6f 6e 3a 31 30 7d 7d 2c 38 3a 65 3d 3e 7b 63 6f 6e 73 74 7b 75 62 43 6f 64 65 3a 74 2c 65 6d 62 55 75 69 64 3a 72 2c 74 72 69 67 67 65 72 3a 6e 2c 70 75 62 6c 69 73 68 65 64 3a 69 2c 66 72 65 71 75 65 6e 63 79 3a 6f 2c 72 65 66 65 72 72 65 72 54 61 72 67 65 74 73 3a 73 2c 64 69 73 70 6c 61 79 53 65 74 74 69 6e 67 73 3a 61 2c 69 64 3a 75 2c 65 76 65 6e 74 3a 63 2c 76 65 72 73 69 6f 6e 3a 6c 2c 70 61 72 65 6e 74 56 65 72 73 69 6f 6e 3a 64 2c 64 69 6d 65 6e 73 69 6f 6e 73 3a 70 2c 6d 65 74 61 3a 66 2c 75 72 6c 54 61 72 67 65 74 73 3a 68 2c 63 6f 6f 6b 69 65 54 61 72 67 65 74 73 3a 62 2c 67 Data Ascii: ts:b,geoTargets:g,urlTargets:h,integrations:c,schemaVersion:10}},8:e=>{const{ubCode:t,embUuid:r,trigger:n,published:i,frequency:o,referrerTargets:s,displaySettings:a,id:u,event:c,version:l,parentVersion:d,dimensions:p,meta:f,urlTargets:h,cookieTargets:b,g
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 72 28 65 2c 74 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3b 69 66 28 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 6e 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f Data Ascii: nction(e,t){if(!e)return;if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(e);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 7d 2c 6e 2e 63 68 64 69 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 72 6f 63 65 73 73 2e 63 68 64 69 72 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 7d 2c 6e 2e 75 6d 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 7d 7d 2c 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 31 30 29 2c 69 3d 72 28 34 31 38 29 2c 6f 3d 72 28 32 30 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 6e 63 6f 64 65 3f 74 2e 73 74 72 69 63 74 3f 6e 28 65 29 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 Data Ascii: },n.chdir=function(e){throw new Error("process.chdir is not supported")},n.umask=function(){return 0}},563:function(e,t,r){"use strict";var n=r(610),i=r(418),o=r(20);function s(e,t){return t.encode?t.strict?n(e):encodeURIComponent(e):e}function a(e){retur
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 5c 2e 29 3f 6a 73 24 2f 2e 74 65 73 74 28 74 2e 66 69 6c 65 6e 61 6d 65 29 29 2c 74 7d 7d 2c 5f 70 72 6f 63 65 73 73 45 78 63 65 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 69 2c 6f 29 7b 76 61 72 20 73 3b 69 66 28 28 21 74 68 69 73 2e 5f 67 6c 6f 62 61 6c 4f 70 74 69 6f 6e 73 2e 69 67 6e 6f 72 65 45 72 72 6f 72 73 2e 74 65 73 74 7c 7c 21 74 68 69 73 2e 5f 67 6c 6f 62 61 6c 4f 70 74 69 6f 6e 73 2e 69 67 6e 6f 72 65 45 72 72 6f 72 73 2e 74 65 73 74 28 74 29 29 26 26 28 74 2b 3d 22 22 2c 69 26 26 69 2e 6c 65 6e 67 74 68 3f 28 72 3d 69 5b 30 5d 2e 66 69 6c 65 6e 61 6d 65 7c 7c 72 2c 69 2e 72 65 76 65 72 73 65 28 29 2c 73 3d 7b 66 72 61 6d 65 73 3a 69 7d 29 3a 72 26 26 28 73 3d 7b 66 72 61 6d 65 73 3a 5b 7b 66 69 6c 65 6e 61 6d 65 3a Data Ascii: \.)?js$/.test(t.filename)),t}},_processException:function(e,t,r,n,i,o){var s;if((!this._globalOptions.ignoreErrors.test\|\|!this._globalOptions.ignoreErrors.test(t))&&(t+="",i&&i.length?(r=i[0].filename\|\|r,i.reverse(),s={frames:i}):r&&(s={frames:[{filename:
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 63 5d 3b 6c 5b 34 5d 26 26 28 6f 5b 6c 5b 31 5d 5d 3d 6f 5b 6c 5b 31 5d 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 72 65 74 75 72 6e 20 6f 2e 61 75 74 68 3d 6f 2e 70 61 73 73 77 6f 72 64 3f 6f 2e 75 73 65 72 6e 61 6d 65 2b 22 3a 22 2b 6f 2e 70 61 73 73 77 6f 72 64 3a 6f 2e 75 73 65 72 6e 61 6d 65 2c 6f 2e 6f 72 69 67 69 6e 3d 22 66 69 6c 65 3a 22 21 3d 3d 6f 2e 70 72 6f 74 6f 63 6f 6c 26 26 62 28 6f 2e 70 72 6f 74 6f 63 6f 6c 29 26 26 6f 2e 68 6f 73 74 3f 6f 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6f 2e 68 6f 73 74 3a 22 6e 75 6c 6c 22 2c 6f 2e 68 72 65 66 3d 6f 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6f 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c Data Ascii: c];l[4]&&(o[l[1]]=o[l[1]].toLowerCase())}return o.auth=o.password?o.username+":"+o.password:o.username,o.origin="file:"!==o.protocol&&b(o.protocol)&&o.host?o.protocol+"//"+o.host:"null",o.href=o.toString(),o},toString:function(e){e&&"function"==typeof e\|\|
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 76 61 72 20 72 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3b 73 77 69 74 63 68 28 78 28 72 29 3f 65 2e 70 6f 70 28 29 3a 72 3d 76 6f 69 64 20 30 2c 65 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 4a 28 72 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 72 3f 48 28 65 2c 72 29 3a 51 28 65 5b 30 5d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 48 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 21 31 3b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 3d 32 26 26 28 72 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6c 69 66 74 28 6e 65 77 20 72 65 28 65 2c 74 2c 72 Data Ascii: h;t++)e[t]=arguments[t];var r=e[e.length-1];switch(x(r)?e.pop():r=void 0,e.length){case 0:return J(r);case 1:return r?H(e,r):Q(e[0]);default:return H(e,r)}}function te(e,t){var r=!1;return arguments.length>=2&&(r=!0),function(n){return n.lift(new re(e,t,r
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 3a 21 30 2c 74 72 61 69 6c 69 6e 67 3a 21 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 74 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 6d 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 4b 74 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6c 69 66 74 28 6e 65 77 20 58 74 28 65 2c 74 2c 72 2e 6c 65 61 64 69 6e 67 2c 72 2e 74 72 61 69 6c 69 6e 67 29 29 7d 7d 76 61 72 20 58 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 2c 6e 29 7b 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 65 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 72 3d 74 2c 74 68 69 73 2e 6c 65 61 64 69 6e 67 3d 72 2c 74 68 69 73 2e 74 72 61 69 6c 69 6e 67 3d 6e 7d 72 65 74 75 72 6e 20 65 2e 70 72 Data Ascii: :!0,trailing:!1};function Gt(e,t,r){return void 0===t&&(t=mt),void 0===r&&(r=Kt),function(n){return n.lift(new Xt(e,t,r.leading,r.trailing))}}var Xt=function(){function e(e,t,r,n){this.duration=e,this.scheduler=t,this.leading=r,this.trailing=n}return e.pr
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 65 72 72 6f 72 28 73 29 7d 2c 65 2e 6f 6e 65 72 72 6f 72 3d 6f 2c 6f 2e 72 65 71 75 65 73 74 3d 74 2c 6f 2e 73 75 62 73 63 72 69 62 65 72 3d 74 68 69 73 2c 6f 2e 70 72 6f 67 72 65 73 73 53 75 62 73 63 72 69 62 65 72 3d 72 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 61 2c 72 3d 74 2e 73 75 62 73 63 72 69 62 65 72 2c 6e 3d 74 2e 70 72 6f 67 72 65 73 73 53 75 62 73 63 72 69 62 65 72 2c 69 3d 74 2e 72 65 71 75 65 73 74 3b 69 66 28 34 3d 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 29 7b 76 61 72 20 6f 3d 31 32 32 33 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 3f 32 30 34 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 73 3d 22 74 65 78 74 22 3d 3d 3d 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 Data Ascii: error(s)},e.onerror=o,o.request=t,o.subscriber=this,o.progressSubscriber=r}function s(e){}function a(e){var t=a,r=t.subscriber,n=t.progressSubscriber,i=t.request;if(4===this.readyState){var o=1223===this.status?204:this.status,s="text"===this.responseType
2024-04-24 12:32:40 UTC	16384	IN	Data Raw: 6f 73 69 74 69 6f 6e 2c 22 3a 20 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 7d 22 29 2b 28 22 62 6f 74 74 6f 6d 22 3d 3d 3d 6f 2e 70 6f 73 69 74 69 6f 6e 3f 22 5c 6e 20 20 20 20 20 20 2e 6c 70 2d 70 6f 6d 2d 62 6f 64 79 20 2e 75 62 2d 65 6d 62 2d 62 61 72 2e 75 62 2d 65 6d 62 2d 76 69 73 69 62 6c 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 22 2e 63 6f 6e 63 61 74 28 61 2c 22 70 78 3b 5c 6e 20 20 20 20 20 20 7d 22 29 3a 22 22 29 3b 72 65 74 75 72 6e 20 55 69 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 7d 2c 55 69 28 22 73 74 79 6c 65 22 2c 6e 75 6c 6c 2c 64 29 2c 69 3f 55 69 28 22 73 74 79 6c 65 22 2c 6e 75 6c 6c 2c 70 29 3a 55 69 28 22 6e 6f 73 63 72 69 70 74 22 Data Ascii: osition,": ").concat(a,"px !important;\n }")+("bottom"===o.position?"\n .lp-pom-body .ub-emb-bar.ub-emb-visible {\n height: ".concat(a,"px;\n }"):"");return Ui("div",{className:c},Ui("style",null,d),i?Ui("style",null,p):Ui("noscript"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49946	99.84.66.95	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:39 UTC	437	OUT	GET /bg9s?x-amz-cf-id=4GA55AgMUbMyeoy-Uc1wYHNMMTqVHQ4MGUXuAVV70rbmioZKoV6Jmw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:40 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:52:34 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HIO50-C1 X-Amz-Cf-Id: RS0Orz4-LR4edFz1y7PoY4CmS5_ouR-vpq1ocmt1vJTs8MqeHkZK5Q== Age: 13745 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49948	34.233.102.171	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	485	OUT	GET /sync?UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=e51f720edaab4e549610d4fd0f3aea50; tv_UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce
2024-04-24 12:32:40 UTC	369	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:40 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=ea556916-5ff9-4bbe-87d1-172f8612a1ce; Domain=.tremorhub.com; Expires=Sat, 25-Apr-2026 00:09:20 GMT; Path=/; Secure; SameSite=None
2024-04-24 12:32:40 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-24 12:32:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49940	172.65.238.60	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	561	OUT	GET /analytics/1713959400000/143456774.js HTTP/1.1 Host: js-eu1.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:40 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:40 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: sNQ8kR7Sb8LmUsYNIpxISC5FdYwm7dzS6nUFzwTt01FDrcsCdvKZt7WAgTs+t5JP5HVG/YSW48Y= x-amz-request-id: 0BC19PHARYRRGM9C Last-Modified: Thu, 18 Apr 2024 20:26:42 GMT ETag: W/"db51f75a88462f28b955dfb366e51596" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public Access-Control-Allow-Credentials: false Vary: origin Expires: Wed, 24 Apr 2024 12:34:53 GMT x-envoy-upstream-service-time: 20 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: cb5ab3a0-0451-4fc5-8bfa-b43c801f4fd8 x-evy-trace-served-by-pod: fra04/analytics-js-proxy-td/envoy-proxy-5f9d8c5998-rz8qw x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: cb5ab3a0-0451-4fc5-8bfa-b43c801f4fd8 CF-Cache-Status: HIT Age: 167 Server: cloudflare CF-RAY: 87961e0c6bea6f9a-CDG
2024-04-24 12:32:40 UTC	358	IN	Data Raw: 37 62 61 66 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 36 33 39 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 76 61 72 20 5f 70 61 71 20 3d 20 5f 70 61 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 54 72 61 63 6b 69 6e 67 47 61 74 65 27 2c 20 27 41 6e 61 6c 79 74 69 63 73 54 72 61 63 6b 69 6e 67 3a 55 73 65 48 61 73 68 65 64 44 6f 6d 61 69 6e 73 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 Data Ascii: 7baf/** * HubSpot Analytics Tracking Code Build Number 1.639 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];var _paq = _paq \|\| [];_hsq.push(['setTrackingGate', 'AnalyticsTracking:UseHashedDomains']);_hsq.push(['se
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 31 31 35 34 35 32 38 32 35 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 30 35 38 38 32 38 39 32 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 37 37 33 34 34 33 33 30 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 35 35 33 36 36 32 36 30 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 30 36 32 39 32 38 37 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 Data Ascii: HashedCookieDomain', '115452825']);_hsq.push(['addHashedCookieDomain', '205882892']);_hsq.push(['addHashedCookieDomain', '77344330']);_hsq.push(['addHashedCookieDomain', '55366260']);_hsq.push(['addHashedCookieDomain', '20629287']);_hsq.push(['addHas
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 65 2e 6c 65 6e 67 74 68 3c 34 3b 29 65 3d 22 30 22 2b 65 3b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 65 5b 30 5d 29 2b 69 28 65 5b 31 5d 29 2b 69 28 65 5b 32 5d 29 2b 69 28 65 5b 33 5d 29 2b 69 28 65 5b 34 5d 29 2b 69 28 65 5b 35 5d 29 2b 69 28 65 5b 36 5d 29 2b 69 28 65 5b 37 5d 29 7d 7d 3b 4d 61 74 68 2e 75 75 69 64 3d 4d 61 74 68 2e 75 75 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 73 74 63 2e 75 74 69 6c 73 2e 6c 6f 67 45 72 72 6f 72 28 6e 65 77 20 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 75 73 65 20 4d 61 74 68 2e 75 75 69 64 28 29 22 29 29 3b 72 65 74 75 72 6e 20 68 73 74 63 2e 4d 61 74 68 2e 75 75 69 64 28 29 7d 3b 28 68 Data Ascii: ion(t){for(var e=t.toString(16);e.length<4;)e="0"+e;return e};return i(e[0])+i(e[1])+i(e[2])+i(e[3])+i(e[4])+i(e[5])+i(e[6])+i(e[7])}};Math.uuid=Math.uuid\|\|function(){hstc.utils.logError(new Error("Attempt to use Math.uuid()"));return hstc.Math.uuid()};(h
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 70 61 74 68 6e 61 6d 65 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 22 3b 74 72 79 7b 74 3d 74 68 69 73 2e 74 6f 70 2e 64 6f 63 75 6d Data Ascii: function(){return this.loc.pathname};hstc.global.Context.prototype.getTop=function(){return this.top};hstc.global.Context.prototype.getParent=function(){return this.parent};hstc.global.Context.prototype.getReferrer=function(){var t="";try{t=this.top.docum
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 65 74 48 6f 75 72 73 28 30 29 3b 74 2e 73 65 74 4d 69 6e 75 74 65 73 28 30 29 3b 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 30 29 3b 74 2e 73 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 30 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 74 72 75 6e 63 61 74 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 6c 65 6e 67 74 68 3e 65 3f 74 2e 73 75 62 73 74 72 28 30 2c 65 29 3a 74 3a 22 22 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 65 61 72 63 68 32 64 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e Data Ascii: stc.utils.clearTimePart=function(t){t.setHours(0);t.setMinutes(0);t.setSeconds(0);t.setMilliseconds(0);return t};hstc.utils.truncateString=function(t,e){return t?t.length>e?t.substr(0,e):t:""};hstc.utils.search2dArray=function(t,e,i,n){for(var r=0;r<t.len
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 7b 66 6f 72 28 69 20 69 6e 20 74 29 69 66 28 21 31 3d 3d 3d 65 2e 63 61 6c 6c 28 74 5b 69 5d 2c 69 2c 74 5b 69 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 73 3d 74 5b 30 5d 3b 6e 3c 72 26 26 21 31 21 3d 3d 65 2e 63 61 6c 6c 28 73 2c 6e 2c 73 29 3b 73 3d 74 5b 2b 2b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: each=function(t,e){var i,n=0,r=t.length;if(void 0===r){for(i in t)if(!1===e.call(t[i],i,t[i]))break}else for(var s=t[0];n<r&&!1!==e.call(s,n,s);s=t[++n]);return t};hstc.utils.isDefined=function(t){return void 0!==t};hstc.utils.addEventListener=function(t,
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 73 65 20 69 3d 75 6e 65 73 63 61 70 65 28 74 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 74 6f 73 74 72 2e 63 61 6c 6c 28 74 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 75 74 63 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 68 61 73 68 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 76 61 72 20 6e 3d 74 2e 63 68 61 72 43 6f Data Ascii: se i=unescape(t);return i};hstc.utils.isFunction=function(t){return"[object Function]"===hstc.utils.tostr.call(t)};hstc.utils.utcnow=function(){return(new Date).getTime()};hstc.utils.hashString=function(t){for(var e=0,i=t.length-1;i>=0;i--){var n=t.charCo
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 5d 3b 61 3d 61 5b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 5d 3d 68 3c 6c 3f 61 5b 63 5d 7c 7c 28 75 5b 68 2b 31 5d 26 26 69 73 4e 61 4e 28 75 5b 68 2b 31 5d 29 3f 7b 7d 3a 5b 5d 29 3a 73 7d 65 6c 73 65 7b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 69 5b 63 5d 29 3f 69 5b 63 5d 2e 70 75 73 68 28 73 29 3a 76 6f 69 64 20 30 21 3d 3d 69 5b 63 5d 3f 69 5b 63 5d 3d 5b 69 5b 63 5d 2c 73 5d 3a 69 5b 63 5d 3d 73 7d 7d 65 6c 73 65 20 63 26 26 28 69 5b 63 5d 3d 65 3f 76 6f 69 64 20 30 3a 22 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 5b 5d 3b 65 3d 65 7c 7c 22 26 22 3b 66 75 6e 63 Data Ascii: ];a=a[c=sanitizeKey(c)]=h<l?a[c]\|\|(u[h+1]&&isNaN(u[h+1])?{}:[]):s}else{c=sanitizeKey(c);hstc.utils.isArray(i[c])?i[c].push(s):void 0!==i[c]?i[c]=[i[c],s]:i[c]=s}}else c&&(i[c]=e?void 0:"")}));return i};hstc.utils.param=function(t,e){var i=[];e=e\|\|"&";func
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 5c 5b 28 2e 2b 3f 29 5c 5d 2f 2c 22 24 31 5f 24 32 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 73 65 43 75 72 72 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 74 2e 6d 61 74 63 68 28 2f 28 5b 5e 5c 64 5d 2a 29 28 5b 5c 64 5c 2e 2c 5d 2b 29 28 5b 5e 5c 64 5c 2e 2c 5d 2a 29 2f 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 2c 72 3d 69 5b 32 5d 2c 73 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2c 22 29 3b 6e 3d 73 2e 6c 65 6e 67 74 68 3e 32 7c 7c 32 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 73 5b 31 5d 2e 6c 65 6e 67 74 68 3e 32 26 26 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 7c 7c 73 5b 30 5d 2e 6c 65 6e 67 74 68 Data Ascii: \[(.+?)\]/,"$1_$2")};hstc.utils.parseCurrency=function(t,e){if("number"==typeof t)return t;var i=t.match(/([^\d])([\d\.,]+)([^\d\.,])/);if(i){var n,r=i[2],s=r.split("."),o=r.split(",");n=s.length>2\|\|2==s.length&&s[1].length>2&&(0===o.length\|\|s[0].length
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 20 74 21 3d 2b 74 3f 65 21 3d 2b 65 3a 30 3d 3d 74 3f 31 2f 74 3d 3d 31 2f 65 3a 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 75 72 6e 2b 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 3d 65 2e 73 6f 75 72 63 65 26 26 74 2e 67 6c 6f 62 61 6c 3d 3d 65 2e 67 6c 6f 62 61 6c 26 26 74 2e 6d 75 6c 74 69 6c 69 6e 65 3d 3d 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 74 2e 69 67 6e 6f 72 65 43 61 73 65 3d 3d 65 2e 69 67 6e 6f 72 65 43 61 73 65 7d 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 Data Ascii: ject Number]":return t!=+t?e!=+e:0==t?1/t==1/e:t==+e;case"[object Date]":case"[object Boolean]":return+t==+e;case"[object RegExp]":return t.source==e.source&&t.global==e.global&&t.multiline==e.multiline&&t.ignoreCase==e.ignoreCase}if("object"!=typeof t\|\|"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49939	172.65.219.229	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	528	OUT	GET /fb.js HTTP/1.1 Host: js-eu1.hsadspixel.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:40 UTC	1324	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Fri, 19 Apr 2024 14:01:51 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: H75lIw.llLd5LbqLQfJpi4qQ6NOhCtlN ETag: W/"65a4cdf8f8c613ea8f766101eea8e667" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 13ad77f5993668d67b8168f460ba6368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: f2GIE-EXnyv6-HdtGle9wyfo0zO9t0R784fRMxcupOFsxy4thFGZKA== Age: 536 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=adsscriptloaderstatic/static-1.551/bundles/pixels-release.js&cfRay=879610f45b2ad682-CDG Cache-Control: max-age=600 X-HS-Target-Asset: adsscriptloaderstatic/static-1.551/bundles/pixels-release.js X-Content-Type-Options: nosniff X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a4216503-6b89-430a-90aa-fd1319a1329d x-evy-trace-served-by-pod: fra04/app-td/envoy-proxy-66c88c747d-fw82v x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-04-24 12:32:40 UTC	202	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 34 32 31 36 35 30 33 2d 36 62 38 39 2d 34 33 30 61 2d 39 30 61 61 2d 66 64 31 33 31 39 61 31 33 32 39 64 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 41 64 73 53 63 72 69 70 74 4c 6f 61 64 65 72 43 6c 6f 75 64 66 6c 61 72 65 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 36 31 65 30 63 36 62 33 39 66 30 63 62 2d 43 44 47 0d 0a 0d 0a Data Ascii: x-request-id: a4216503-6b89-430a-90aa-fd1319a1329dcache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prodCF-Cache-Status: HITServer: cloudflareCF-RAY: 87961e0c6b39f0cb-CDG
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 31 38 39 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 6f 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 3b 69 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6f 3d 5b 7b 6e 61 6d 65 3a 22 68 65 61 64 2d 64 6c 62 2f 62 75 6e 64 6c 65 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6a 73 22 2c 70 61 74 68 3a 22 68 65 61 64 2d 64 6c 62 2f 73 74 61 74 69 63 2d 31 2e 36 38 34 2f 62 75 6e 64 6c 65 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6a 73 Data Ascii: 1893!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,t);i.l=!0;return i.exports}var o=[{name:"head-dlb/bundle.production.js",path:"head-dlb/static-1.684/bundle.production.js
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 70 72 6f 64 22 2c 51 41 3a 22 71 61 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 73 63 72 69 70 74 5b 24 7b 65 7d 5d 60 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3f 6e 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 64 28 69 29 7c 7c 72 2e 50 52 4f 44 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6c 65 74 20 65 3d 64 28 6f 29 3b 65 3d 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 48 53 20 50 69 78 65 6c 20 4c 6f 61 64 65 72 20 63 61 6e Data Ascii: prod",QA:"qa"};function d(e){if(!e)return null;const n=document.querySelectorAll(`script[${e}]`);return n.length?n[0].getAttribute(e):null}function s(){return d(i)\|\|r.PROD}function c(){let e=d(o);e=parseInt(e,10);if(!e)throw new Error("HS Pixel Loader can
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 62 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 6e 5d 2e 70 69 78 65 6c 49 64 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3d 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 2e 70 75 73 68 28 74 29 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c Data Ascii: nction b(e){for(var n=0;n<e.length;n++){const t=e[n].pixelId;window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];window._linkedin_data_partner_ids.push(t)}!function(){var e=document.getElementsByTagName("script")[0],n=document.createEl
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 73 6f 6e 70 55 72 6c 20 61 72 67 73 22 29 3b 75 28 29 3f 4f 28 65 2c 74 29 3a 50 28 6e 2c 74 2c 6f 29 7d 63 6f 6e 73 74 20 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 60 68 74 74 70 73 3a 2f 2f 24 7b 65 7d 3f 70 6f 72 74 61 6c 49 64 3d 24 7b 63 28 29 7d 60 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3b 6e 28 65 29 7d 29 3b 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 79 28 65 29 29 3b 74 2e 73 65 6e 64 28 29 7d 2c 45 3d 65 3d 3e 22 68 75 62 73 70 6f 74 4a 73 6f 6e Data Ascii: sonpUrl args");u()?O(e,t):P(n,t,o)}const y=function(e){return`https://${e}?portalId=${c()}`},O=function(e,n){const t=new XMLHttpRequest;t.addEventListener("load",()=>{const e=JSON.parse(t.responseText);n(e)});t.open("GET",y(e));t.send()},E=e=>"hubspotJson
2024-04-24 12:32:40 UTC	823	IN	Data Raw: 76 65 6e 74 4e 61 6d 65 29 7b 77 69 6e 64 6f 77 2e 65 6e 61 62 6c 65 64 45 76 65 6e 74 53 65 74 74 69 6e 67 73 2e 46 41 43 45 42 4f 4f 4b 26 26 77 69 6e 64 6f 77 2e 65 6e 61 62 6c 65 64 45 76 65 6e 74 53 65 74 74 69 6e 67 73 2e 46 41 43 45 42 4f 4f 4b 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 72 28 6e 2c 65 2e 64 61 74 61 2e 64 61 74 61 29 7d 29 3b 77 69 6e 64 6f 77 2e 65 6e 61 62 6c 65 64 45 76 65 6e 74 53 65 74 74 69 6e 67 73 2e 41 44 57 4f 52 44 53 26 26 77 69 6e 64 6f 77 2e 65 6e 61 62 6c 65 64 45 76 65 6e 74 53 65 74 74 69 6e 67 73 2e 41 44 57 4f 52 44 53 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 64 28 6e 2c 65 2e 64 61 74 61 2e 64 61 74 61 29 7d 29 7d 7d 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 77 Data Ascii: ventName){window.enabledEventSettings.FACEBOOK&&window.enabledEventSettings.FACEBOOK.forEach(n=>{r(n,e.data.data)});window.enabledEventSettings.ADWORDS&&window.enabledEventSettings.ADWORDS.forEach(n=>{d(n,e.data.data)})}},!1)}function r(e,n){if(void 0===w
2024-04-24 12:32:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49941	172.65.236.181	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	578	OUT	GET /web-interactives-embed.js HTTP/1.1 Host: js-eu1.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:40 UTC	1346	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 24 Apr 2024 12:19:55 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: Yrf3rlYmrIDIMljDc1LqyI6902h1cODu ETag: W/"010909310c880a9769e72799fe3c85e8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9ed190c9d6b2f812d19cbb317856ed88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: BFJLeBkdDnGLY15pp1_34BkA2d0k3nKmtnzgd6uFh-ApWUwLg17Aeg== Age: 102 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=web-interactives-embed/static-2.1079/bundles/project.js&cfRay=87961b9078057910-CDG Cache-Control: max-age=600 X-HS-Target-Asset: web-interactives-embed/static-2.1079/bundles/project.js X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 612315ec-0ccc-4366-b2f5-914000d2c2f2 x-evy-trace-served-by-pod: fra04/app-td/envoy-proxy-66c88c747d-fw82v x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-04-24 12:32:40 UTC	1035	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 36 31 32 33 31 35 65 63 2d 30 63 63 63 2d 34 33 36 36 2d 62 32 66 35 2d 39 31 34 30 30 30 64 32 63 32 66 32 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 77 65 62 2d 69 6e 74 65 72 61 63 74 69 76 65 73 2d 65 6d 62 65 64 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 30 44 69 34 77 47 6c 72 51 66 35 79 70 75 35 46 55 34 34 4c 75 67 31 6f 49 53 36 76 62 72 39 51 41 76 32 67 43 56 42 34 4c 38 77 2d 31 37 31 33 39 36 31 39 36 30 2d 31 2e 30 2e 31 2e 31 2d 55 2e 39 62 52 78 61 51 4b 67 55 4d 59 69 34 45 62 49 64 37 45 5f 71 68 6c Data Ascii: x-request-id: 612315ec-0ccc-4366-b2f5-914000d2c2f2cache-tag: staticjsapp-web-interactives-embed-web-prod,staticjsapp-prodCF-Cache-Status: HITSet-Cookie: __cf_bm=0Di4wGlrQf5ypu5FU44Lug1oIS6vbr9QAv2gCVB4L8w-1713961960-1.0.1.1-U.9bRxaQKgUMYi4EbId7E_qhl
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 73 29 7b 69 66 28 74 5b 73 5d 29 72 65 74 75 72 6e 20 74 5b 73 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 73 5d 3d 7b 69 3a 73 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 73 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 69 29 3b 6e 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 3b 69 2e 63 3d 74 3b 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 73 7d 29 7d 3b 69 Data Ascii: 7ff9!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 4e 54 45 52 41 43 54 49 56 45 22 2c 48 41 53 5f 43 4c 4f 53 45 44 3a 22 48 53 5f 43 54 41 5f 48 41 53 5f 43 4c 4f 53 45 44 22 2c 4e 45 57 5f 48 45 49 47 48 54 3a 22 48 53 5f 43 54 41 5f 4e 45 57 5f 48 45 49 47 48 54 22 2c 44 49 53 50 4c 41 59 5f 43 41 4c 4c 5f 54 4f 5f 41 43 54 49 4f 4e 3a 22 48 53 5f 44 49 53 50 4c 41 59 5f 43 41 4c 4c 5f 54 4f 5f 41 43 54 49 4f 4e 22 2c 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 3a 22 48 53 5f 43 54 41 5f 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 22 2c 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 5f 46 4e 3a 22 48 53 5f 43 54 41 5f 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 5f 46 4e 22 2c 53 45 4e 44 5f 46 4f 52 4d 5f 44 45 46 49 4e 49 54 49 4f 4e 3a 22 48 53 5f 53 45 4e 44 5f 46 4f 52 4d 5f 44 45 46 49 4e 49 54 Data Ascii: NTERACTIVE",HAS_CLOSED:"HS_CTA_HAS_CLOSED",NEW_HEIGHT:"HS_CTA_NEW_HEIGHT",DISPLAY_CALL_TO_ACTION:"HS_DISPLAY_CALL_TO_ACTION",PROXY_ANALYTICS:"HS_CTA_PROXY_ANALYTICS",PROXY_ANALYTICS_FN:"HS_CTA_PROXY_ANALYTICS_FN",SEND_FORM_DEFINITION:"HS_SEND_FORM_DEFINIT
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 61 70 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 72 7d 63 6f 6e 73 74 20 63 3d 28 2e 2e 2e 65 29 3d 3e 7b 6f 28 22 5b 47 6c 6f 62 61 6c 49 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5d 22 2c 2e 2e 2e 65 29 7d 3b 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 73 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 74 74 65 72 3d 61 28 29 3b 74 68 69 73 2e 72 65 73 65 74 3d 28 29 3d 3e 7b 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 74 74 65 72 2e 72 65 73 65 74 28 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 73 3d 6e 65 77 20 4d 61 70 7d 7d 72 65 67 69 73 74 65 72 48 61 6e 64 6c 65 72 28 Data Ascii: ap}}function a(){return new r}const c=(...e)=>{o("[GlobalIframeCommunication]",...e)};class l{constructor(){this.iframeCommunicators=new Map;this.eventEmitter=a();this.reset=()=>{this.eventEmitter.reset();this.iframeCommunicators=new Map}}registerHandler(
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 73 73 61 67 65 22 2c 7b 74 79 70 65 3a 74 2c 70 61 79 6c 6f 61 64 3a 69 7d 29 3b 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 74 74 65 72 2e 65 6d 69 74 28 74 2c 69 29 3b 68 2e 65 6d 69 74 28 74 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 69 2c 7b 69 64 3a 74 68 69 73 2e 69 64 7d 29 29 7d 3b 74 68 69 73 2e 68 61 6e 64 6c 65 46 72 61 6d 65 4c 6f 61 64 65 64 3d 28 29 3d 3e 7b 69 66 28 74 68 69 73 2e 69 66 72 61 6d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 75 28 22 49 66 72 61 6d 65 20 6c 6f 61 64 65 64 22 2c 74 68 69 73 2e 69 66 72 61 6d 65 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 74 79 70 65 3a 73 2e 49 4e 49 54 7d 2c 22 2a 22 2c 5b 74 68 69 73 2e 63 68 61 6e 6e Data Ascii: ssage",{type:t,payload:i});this.eventEmitter.emit(t,i);h.emit(t,Object.assign({},i,{id:this.id}))};this.handleFrameLoaded=()=>{if(this.iframe.contentWindow){u("Iframe loaded",this.iframe);this.iframe.contentWindow.postMessage({type:s.INIT},"*",[this.chann
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 73 74 20 69 3d 6e 65 77 20 6d 28 65 2c 74 29 3b 68 2e 72 65 67 69 73 74 65 72 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 28 69 2c 74 29 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 3a 22 29 3f 22 68 74 74 70 3a 2f 2f 22 3a 22 68 74 74 70 73 3a 2f 2f 22 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 74 29 3f 65 3a 60 24 7b 74 7d 24 7b 65 2e 72 65 70 6c 61 63 65 28 2f 68 74 74 70 28 73 29 3f 3a 5c 2f 5c 2f 2f 2c 22 22 29 7d 60 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 22 6e 6f 6e 65 22 3b 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 Data Ascii: st i=new m(e,t);h.registerCommunicator(i,t);return i}function p(e){const t=window.location.origin.startsWith("http:")?"http://":"https://";return e.startsWith(t)?e:`${t}${e.replace(/http(s)?:\/\//,"")}`}function f(e){e.style.border="none";e.style.height="
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 6c 65 73 22 2c 22 74 72 75 65 22 29 7d 74 68 69 73 2e 69 66 72 61 6d 65 3d 76 28 69 2c 72 29 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 74 3b 74 68 69 73 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 3d 67 28 74 68 69 73 2e 69 66 72 61 6d 65 2c 65 7c 7c 31 29 3b 6e 26 26 28 74 68 69 73 2e 6f 6e 46 72 61 6d 65 52 65 61 64 79 3d 6e 29 3b 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 69 66 72 61 6d 65 29 3b 74 68 69 73 2e 72 65 67 69 73 74 65 72 48 61 6e 64 6c 65 72 73 28 29 7d 72 65 67 69 73 74 65 72 48 61 6e 64 6c 65 72 73 28 29 7b 74 68 69 73 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 2e 72 65 67 69 73 74 65 72 48 61 6e 64 6c 65 72 73 28 7b 5b 73 2e 53 54 41 52 54 45 44 5d 3a 74 68 69 73 2e 6f 6e 46 72 61 6d 65 52 Data Ascii: les","true")}this.iframe=v(i,r);this.container=t;this.iframeCommunicator=g(this.iframe,e\|\|1);n&&(this.onFrameReady=n);t.appendChild(this.iframe);this.registerHandlers()}registerHandlers(){this.iframeCommunicator.registerHandlers({[s.STARTED]:this.onFrameR
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 49 7d 63 6f 6e 73 74 20 4d 3d 22 68 75 62 73 70 6f 74 75 74 6b 22 2c 50 3d 22 5f 5f 68 73 74 63 22 2c 5f 3d 22 5f 5f 68 73 73 63 22 2c 4c 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 60 28 5e 7c 5b 5e 3b 5d 2b 29 5c 5c 73 2a 24 7b 65 7d 5c 5c 73 2a 3d 5c 5c 73 2a 28 5b 5e 3b 5d 2b 29 60 29 3b 72 65 74 75 72 6e 20 74 3f 74 2e 70 6f 70 28 29 3a 22 22 7d 2c 46 3d 28 29 3d 3e 4c 28 4d 29 2c 52 3d 28 29 3d 3e 4c 28 50 29 2c 4e 3d 28 29 3d 3e 4c 28 5f 29 2c 6b 3d 28 2e 2e 2e 65 29 3d 3e 7b 6f 28 22 5b 6d 6f 64 65 6c 73 2f 41 6e 61 6c 79 74 69 63 73 5d 22 2c 2e 2e 2e 65 29 7d 3b 63 6c 61 73 73 20 48 7b 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: function O(){return new I}const M="hubspotutk",P="__hstc",_="__hssc",L=e=>{const t=document.cookie.match(`(^\|[^;]+)\\s${e}\\s=\\s*([^;]+)`);return t?t.pop():""},F=()=>L(M),R=()=>L(P),N=()=>L(_),k=(...e)=>{o("[models/Analytics]",...e)};class H{constructo
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 61 67 65 3f 65 2e 6c 61 6e 67 75 61 67 65 3a 6e 75 6c 6c 7d 7d 76 61 72 20 44 3d 6e 65 77 20 48 3b 63 6f 6e 73 74 20 42 3d 28 2e 2e 2e 65 29 3d 3e 7b 6f 28 22 5b 41 6e 61 6c 79 74 69 63 73 50 72 6f 78 79 43 6f 6e 74 72 6f 6c 6c 65 72 5d 22 2c 2e 2e 2e 65 29 7d 2c 56 3d 5b 22 74 72 61 63 6b 46 6f 72 6d 56 69 65 77 22 2c 22 74 72 61 63 6b 46 6f 72 6d 56 69 73 69 62 6c 65 22 2c 22 74 72 61 63 6b 46 6f 72 6d 49 6e 74 65 72 61 63 74 69 6f 6e 22 5d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 61 70 70 6c 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 3a 65 2c 61 6e 61 6c 79 74 69 63 73 53 74 6f 72 65 3a 74 7d 29 7b 74 68 69 73 2e 76 69 65 77 51 75 65 75 65 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 43 6f Data Ascii: age?e.language:null}}var D=new H;const B=(...e)=>{o("[AnalyticsProxyController]",...e)},V=["trackFormView","trackFormVisible","trackFormInteraction"];class x{constructor({applicationController:e,analyticsStore:t}){this.viewQueue=new Map;this.applicationCo
2024-04-24 12:32:40 UTC	1369	IN	Data Raw: 50 41 47 45 5d 3a 28 7b 75 72 6c 3a 65 2c 6f 70 65 6e 4e 65 77 54 61 62 3a 74 2c 69 64 3a 69 7d 29 3d 3e 7b 24 28 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 2e 67 65 74 4e 61 76 69 67 61 74 69 6f 6e 55 72 6c 28 7b 75 72 6c 3a 65 2c 6f 70 65 6e 4e 65 77 54 61 62 3a 74 7d 2c 69 29 2c 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 2e 67 65 74 53 68 6f 75 6c 64 4f 70 65 6e 4e 65 77 54 61 62 28 7b 75 72 6c 3a 65 2c 6f 70 65 6e 4e 65 77 54 61 62 3a 74 7d 2c 69 29 29 7d 7d 29 7d 7d 63 6c 61 73 73 20 6a 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 53 74 6f 72 65 3d 44 3b 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 50 72 6f 78 79 43 6f 6e 74 72 6f 6c 6c 65 72 Data Ascii: PAGE]:({url:e,openNewTab:t,id:i})=>{$(this.applicationController.getNavigationUrl({url:e,openNewTab:t},i),this.applicationController.getShouldOpenNewTab({url:e,openNewTab:t},i))}})}}class j{constructor(){this.analyticsStore=D;this.analyticsProxyController

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49947	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	363	OUT	GET /rest/ariadne/v2/script/AP-0 HTTP/1.1 Host: appvizer.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:40 UTC	395	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:40 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 51 Connection: close Vary: Accept-Encoding Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Frame-Options: SAMEORIGIN
2024-04-24 12:32:40 UTC	51	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 61 70 70 76 69 7a 65 72 2e 6f 6e 65 2f 61 72 69 61 64 6e 65 2f 76 31 2f 61 72 69 61 64 6e 65 5f 73 63 72 61 70 69 6e 67 2e 6a 73 Data Ascii: https://appvizer.one/ariadne/v1/ariadne_scraping.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49949	172.65.202.201	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	544	OUT	GET /v2/143456774/banner.js HTTP/1.1 Host: js-eu1.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:41 UTC	1335	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:41 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: Iu8VKz0hEMp6Ihq7Qu7rPw8onxRTM3YLlgH4i9HEYQkI+2qiI6v98qOhB+dWt0tBPynJCujH7aQ= x-amz-request-id: BHVVVC8C98YVSDFJ Last-Modified: Mon, 15 Apr 2024 19:55:31 GMT ETag: W/"cf6c1b8274c5c38c51cb7e980bad3863" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: pu_GEu7yntCFiT6ksHFc3yvF17sT7_c3 Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-04-24 12:32:41 UTC	763	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 36 30 34 38 30 30 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 56 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 34 20 41 70 72 20 32 30 32 34 20 31 Data Ascii: Access-Control-Expose-Headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-TimingAccess-Control-Allow-Credentials: trueAccess-Control-Max-Age: 604800Timing-Allow-Origin: *Vary: originExpires: Wed, 24 Apr 2024 1
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 75 62 73 70 6f 74 70 61 67 65 62 75 69 6c 64 65 72 2e 65 75 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 Data Ascii: 7ffavar _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hubspotpagebuilder.eu']);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 69 29 29 3b 72 65 74 75 72 6e 20 6f 7d 3b 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 6e 2e 64 28 74 2c 22 61 22 2c 74 29 3b 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 3b 6e 2e 70 3d 22 2f 2f 73 74 61 74 69 63 2e 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 2f Data Ascii: ction(t){return e[t]}.bind(null,i));return o};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 64 6f 6d 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 3d 74 3b 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 5b 5d 2c 6f 3d 7b 7d 3b 66 6f 72 28 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 29 Data Ascii: =this.dom.createDocumentFragment();this.current_element=t;this.whitelist_nodes=[];function n(e,t){var n;for(n=0;n<t.length;n++)if(t[n]==e)return n;return-1}function o(){var e,t,n=[],o={};for(e=0;e<arguments.length;e++)if(arguments[e]&&arguments[e].length)
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 5d 29 7b 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 64 29 29 2e 76 61 6c 75 65 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 5d 5b 64 5d 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 65 6c 73 65 20 69 66 28 2d 31 21 3d 6e 28 65 2c 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 66 6f 72 28 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e Data Ascii: config.add_attributes[a]){(u=document.createAttribute(d)).value=this.config.add_attributes[a][d];this.current_element.setAttributeNode(u)}}else if(-1!=n(e,this.whitelist_nodes)){this.current_element=e.cloneNode(!0);for(;this.current_element.childNodes.len
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 72 6d 61 6c 69 7a 65 26 26 74 2e 6e 6f 72 6d 61 6c 69 7a 65 28 29 3b 72 65 74 75 72 6e 20 74 7d 3b 76 6f 69 64 20 30 21 3d 3d 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2e 61 70 70 6c 79 28 74 2c 5b 5d 29 29 26 26 28 65 2e 65 78 70 6f 72 74 73 3d 6f 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 27 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 64 69 76 2c 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 70 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 Data Ascii: rmalize&&t.normalize();return t};void 0!==(o=function(){return s}.apply(t,[]))&&(e.exports=o)},function(e,t){e.exports='#hs-banner-parent div,#hs-banner-parent p{color:inherit}#hs-banner-parent *{font-size:inherit;font-family:inherit;background:none;borde
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 73 76 67 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d Data Ascii: r-gpc #hs-banner-gpc-header{display:flex;flex-direction:row;justify-content:flex-end}#hs-banner-gpc #hs-banner-gpc-close-button{cursor:pointer;display:block}#hs-banner-gpc #hs-banner-gpc-close-button svg{width:var(--hs-banner-font-size,14px);height:var(--
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e Data Ascii: -translate-x,-50%),var(--hs-banner-translate-y,0)) translateZ(3000000000px);opacity:1}}#hs-eu-cookie-confirmation #hs-eu-cookie-confirmation-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2em)}#hs-eu-cookie-confirmation
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 72 2d 62 75 74 74 6f 6e 2d 63 6f 72 6e 65 72 73 2c 33 65 6d 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 31 65 6d 3b 68 65 69 67 68 74 3a 33 2e 33 65 6d 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 2c 23 34 32 35 62 37 36 29 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 68 73 2d 62 Data Ascii: r-button-corners,3em);min-width:11em;height:3.3em}#hs-eu-cookie-confirmation #hs-eu-confirmation-button{color:var(--hs-banner-accept-text-color,#fff);background:var(--hs-banner-accept-color,var(--hs-banner-accentColor,#425b76));border:1px solid var(--hs-b
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 3b 6d 61 78 2d 68 65 69 67 68 74 3a 38 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 6c 6f 72 2c 23 66 61 66 62 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 38 70 78 20 32 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 38 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 22 4c 61 74 6f 22 29 2c 73 Data Ascii: ;max-height:80%;background-color:var(--hs-banner-modal-color,#fafbff);border-radius:var(--hs-banner-modal-corners,12px);box-shadow:0 8px 28px rgba(0,0,0,.28);font-size:var(--hs-banner-modal-font-size,14px);font-family:var(--hs-banner-font-family,"Lato"),s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49951	172.65.192.122	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:40 UTC	579	OUT	GET /collectedforms.js HTTP/1.1 Host: js-eu1.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:41 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 18:06:23 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: _rd02ux3UWoVQsATQDf.p_LxkLPJ6umh ETag: W/"020909a609cf986b4a8a88cfb577a8db" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6e4ed2b1996ce238462d61d3bfff667a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: 4VbY_nZIgCFkKDpCF5zORZmfSGFb1CryEgQFindkjdPlZKBE1D9Uog== Age: 285 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.491/bundles/project.js&cfRay=8796171e7f6299c3-CDG Cache-Control: s-maxage=600, max-age=300 X-HS-Target-Asset: collected-forms-embed-js/static-1.491/bundles/project.js X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-HS-Cache-Status: HIT x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: b86be683-e6af-4444-a905-c73d800a1b66 x-evy-trace-served-by-pod: fra04/app-td/envoy-proxy-66c88c747d-lthn6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-04-24 12:32:41 UTC	201	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 62 38 36 62 65 36 38 33 2d 65 36 61 66 2d 34 34 34 34 2d 61 39 30 35 2d 63 37 33 64 38 30 30 61 31 62 36 36 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 36 31 65 31 31 30 39 37 38 30 36 33 38 2d 43 44 47 0d 0a 0d 0a Data Ascii: x-request-id: b86be683-e6af-4444-a905-c73d800a1b66cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITServer: cloudflareCF-RAY: 87961e1109780638-CDG
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: 7ff9!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 53 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 66 28 65 29 3b Data Ascii: (y)try{return S(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}},T=function(t,e,r){var n=f(e);
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 4f 62 6a 65 63 74 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: rn 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=d((function(){return!Object("z").propertyIsEnumerable(0)}))?function(t){
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 58 28 69 2c 22 6e 61 6d 65 22 29 7c 7c 43 28 69 2c 22 6e 61 6d 65 22 2c 65 29 3b 72 28 69 29 2e 73 6f 75 72 63 65 Data Ascii: ing(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typeof i){"string"!=typeof e\|\|X(i,"name")\|\|C(i,"name",e);r(i).source
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e 22 2c 49 74 3d 43 74 2e 50 4f 4c 59 46 49 4c 4c 3d 22 50 22 2c 52 74 3d 43 74 2c 50 74 3d 4b 2e 66 2c 6b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 69 2c 6f 2c 73 2c Data Ascii: =function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?d(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N",It=Ct.POLYFILL="P",Rt=Ct,Pt=K.f,kt=function(t,e){var r,n,i,o,s,
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 4d 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 69 6e 67 22 2c 47 74 2c 7b 75 6e 73 61 66 65 3a 21 30 7d 29 3b 76 61 72 20 4a 74 3d 77 2e 66 2c 58 74 3d 4d 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 59 74 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: callee?"Arguments":i},Ht={};Ht[M("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toString",Gt,{unsafe:!0});var Jt=w.f,Xt=M("toStringTag"),Yt=function(t
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 64 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 64 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 53 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 77 65 3d 4b 2e 66 2c 45 65 3d 77 2e 66 2c 54 65 3d 62 65 2e 66 2c 41 65 3d 70 2e 53 79 6d 62 6f 6c 2c 46 65 3d 70 2e 4a 53 4f 4e 2c 4f 65 3d 46 65 26 26 46 65 2e 73 74 72 69 6e 67 69 66 79 2c 78 65 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c Data Ascii: return de(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):de(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,Se=ht.getterFor(ye),we=K.f,Ee=w.f,Te=be.f,Ae=p.Symbol,Fe=p.JSON,Oe=Fe&&Fe.stringify,xe="prototype",
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 58 28 4e 65 2c 65 29 7c 7c 58 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 77 65 28 74 2c 65 29 3b 21 72 7c 7c 21 58 28 4e 65 2c 65 29 7c 7c 58 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 58 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 58 28 69 74 2c 65 29 7c 7c 6e 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 48 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 74 3d 3d 3d 50 65 2c 6e 3d 54 65 28 72 3f 49 65 Data Ascii: !0);if(t!==Pe\|\|!X(Ne,e)\|\|X(Ie,e)){var r=we(t,e);!r\|\|!X(Ne,e)\|\|X(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)X(Ne,e=r[i++])\|\|X(it,e)\|\|n.push(e);return n},He=function(t){for(var e,r=t===Pe,n=Te(r?Ie
2024-04-24 12:32:41 UTC	1369	IN	Data Raw: 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 46 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 65 28 29 3b 72 65 74 75 72 6e 22 5b 6e 75 6c 6c 5d 22 21 3d 4f 65 28 5b 74 5d 29 7c 7c 22 7b 7d 22 21 3d 4f 65 28 7b 61 3a 74 7d 29 7c 7c 22 7b 7d 22 21 3d 4f 65 28 4f 62 6a 65 63 74 28 74 29 29 7d 29 29 7d Data Ascii: :$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Fe&&kt({target:"JSON",stat:!0,forced:!k\|\|d((function(){var t=Ae();return"[null]"!=Oe([t])\|\|"{}"!=Oe({a:t})\|\|"{}"!=Oe(Object(t))}))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49954	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:41 UTC	1595	OUT	POST /socket.io/?EIO=3&transport=polling&t=OyG607C&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive Content-Length: 3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io=oA3aBcYwEDRbz1kEAAlD; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-04-24 12:32:41 UTC	3	OUT	Data Raw: 31 3a 32 Data Ascii: 1:2
2024-04-24 12:32:41 UTC	369	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:41 GMT Content-Type: text/html Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=dMLwofBs2a63vpmXAAkl; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e11fbb30a01-LAS
2024-04-24 12:32:41 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49953	35.244.154.8	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:41 UTC	584	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:41 UTC	664	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CI6tHBoNCOn3o7EGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=h0aapfiVtZ8hj924faUTeYSC6voUbFj/7Z6s7YHch7E=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:32:41 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:32:41 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:32:41 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49958	172.64.151.101	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:41 UTC	502	OUT	GET /rum?cm_dsp_id=18&expiry=1729773157&external_user_id=ea556916-5ff9-4bbe-87d1-172f8612a1ce&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; CMPS=4248; CMPRO=4248
2024-04-24 12:32:41 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87961e1378a70acf-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij75tHM7HgAABPIAUP-9AAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:32:41 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4248; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:32:41 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=43C%2BxMoa7EmT3bKj3gAqVxQKTYwIvpo8dYSZ6RJgKjvKPQT0UZuS12HONK9FHPKMO8emYKPTQeJGfSXORkyW6yRAz%2FBlcxRKCyo%2Fq33b1NVyC941ElScLpBnJeMrdwEUzgduePw61r97tQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49959	172.65.198.159	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:41 UTC	683	OUT	GET /web-interactives/public/v1/embed/combinedConfigs?portalId=143456774&currentUrl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F HTTP/1.1 Host: cta-eu1.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:42 UTC	1279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:42 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: OPTIONS, GET Access-Control-Max-Age: 180 Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: noindex, follow x-envoy-upstream-service-time: 10 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 6348dd27-8a55-443a-82f0-37a1c3d8fad6 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-gcfx6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 6348dd27-8a55-443a-82f0-37a1c3d8fad6 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=8ByHZafuMUlpT68xFEIf3aB2JOoG2FM.w58V_Xrhd9M-1713961962-1.0.1.1-dUwVo02pDkCEb4.7SfPZ81oXO7NhLcSuNK2p21xkgmk5icIlNBb4zAlAWexKgxZJOSL8uYYzdO7jW9lR.tfxcA; path=/; expires=Wed, 24-Apr-24 13:02:42 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-04-24 12:32:42 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 42 36 6b 32 4b 36 52 59 34 52 53 46 25 32 46 4e 73 73 51 4a 25 32 46 45 73 57 36 38 74 6d 49 68 4a 4d 4a 55 4b 4d 6c 7a 32 41 47 48 38 44 45 37 69 38 46 49 32 73 6f 4c 45 51 25 32 46 44 6b 30 70 6f 75 34 7a 4c 37 67 53 64 4e 55 25 32 42 4e 6f 58 79 69 55 55 25 32 42 69 71 30 59 38 68 54 44 44 31 62 6a 6f 37 35 56 69 71 47 50 77 57 30 44 30 4d 52 76 6d 6b 47 41 37 54 77 67 39 6b 38 4d 51 64 69 4d 58 75 65 4b 4d 6f 25 32 42 6e 30 54 59 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B6k2K6RY4RSF%2FNssQJ%2FEsW68tmIhJMJUKMlz2AGH8DE7i8FI2soLEQ%2FDk0pou4zL7gSdNU%2BNoXyiUU%2Biq0Y8hTDD1bjo75ViqGPwW0D0MRvmkGA7Twg9k8MQdiMXueKMo%2Bn0TY4%3D"}],"group":"cf-nel","max
2024-04-24 12:32:42 UTC	440	IN	Data Raw: 31 62 31 0d 0a 7b 22 73 6f 72 74 65 64 41 75 64 69 65 6e 63 65 43 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 65 64 43 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 67 61 74 65 73 22 3a 5b 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 46 69 74 43 6f 6e 74 65 6e 74 48 65 69 67 68 74 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 4e 61 76 69 67 61 74 6f 72 43 6c 69 63 6b 54 72 61 63 6b 69 6e 67 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 52 65 73 69 7a 65 53 63 72 6f 6c 6c 48 69 64 65 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 48 79 64 72 61 74 65 54 72 61 63 6b 69 6e 67 4c 69 6e 6b 73 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 53 65 74 42 6f 64 79 44 69 6d 65 6e 73 69 6f 6e 73 22 2c 22 57 65 62 49 Data Ascii: 1b1{"sortedAudienceConfigs":[],"requestedConfigs":[],"gates":["WebInteractives:FitContentHeight","WebInteractives:NavigatorClickTracking","WebInteractives:ResizeScrollHide","WebInteractives:HydrateTrackingLinks","WebInteractives:SetBodyDimensions","WebI
2024-04-24 12:32:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49961	35.244.154.8	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	690	OUT	GET /1000.gif?memo=CI6tHBoNCOn3o7EGEgUI6AcQAEIASgA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=h0aapfiVtZ8hj924faUTeYSC6voUbFj/7Z6s7YHch7E=; pxrc=CAA=
2024-04-24 12:32:42 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=neuSIWT3LpUhj924faUTeYSC6voUbFj/7Z6s7YHch7E=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:32:42 GMT; Secure; SameSite=None Set-Cookie: pxrc=COr3o7EGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:32:42 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:32:42 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49965	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	1535	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG60Qt&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:43 UTC	385	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:43 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 3 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=dMLwofBs2a63vpmXAAkl; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e19aab20acd-LAS
2024-04-24 12:32:43 UTC	3	IN	Data Raw: 31 3a 31 Data Ascii: 1:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49966	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	1316	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG5vw8&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:43 UTC	252	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:32:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e19bcc50ad9-LAS
2024-04-24 12:32:43 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-24 12:32:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49967	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	1316	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG607C&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:43 UTC	198	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 24 Apr 2024 12:32:43 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e19cd230adb-LAS
2024-04-24 12:32:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49963	141.101.90.96	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	627	OUT	GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=143456774 HTTP/1.1 Host: api-eu1.hubapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:43 UTC	1316	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:42 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: * Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 11 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: d867b9de-afb8-4d69-a4e4-66cd406e36d7 x-evy-trace-served-by-pod: fra04/hubapi-td/envoy-proxy-6cb5cf8d4d-vqjxv x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: d867b9de-afb8-4d69-a4e4-66cd406e36d7 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WQs1aJNE0LnYoQJynPjLT0AZv3CXbwmEYWsqiFSUdT4r8OQ7gqWjETL5bgWPk7vs%2BRl2rUYFTJoe4t%2Fc4WyIv5XZRepghf%2Bs9zH9F%2BAPtZ2fy4BuJRaG7Dz7i4uiydNh3mmLjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961e1c5e080272-CDG
2024-04-24 12:32:43 UTC	53	IN	Data Raw: 31 36 37 0d 0a 7b 22 70 69 78 65 6c 73 22 3a 7b 22 41 44 57 4f 52 44 53 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 31 30 31 38 30 32 32 32 31 35 22 2c 22 6c Data Ascii: 167{"pixels":{"ADWORDS":[{"pixelId":"1018022215","l
2024-04-24 12:32:43 UTC	313	IN	Data Raw: 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 70 69 78 65 6c 49 64 22 3a 22 39 38 34 39 35 37 38 33 36 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 46 41 43 45 42 4f 4f 4b 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 35 33 39 33 38 36 35 38 31 34 30 33 31 31 36 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 4c 49 4e 4b 45 44 49 4e 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 33 33 37 33 33 30 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 70 69 78 65 6c 49 64 22 3a 22 34 33 35 35 30 34 32 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 Data Ascii: imitedDataUseEnabled":false},{"pixelId":"984957836","limitedDataUseEnabled":false}],"FACEBOOK":[{"pixelId":"539386581403116","limitedDataUseEnabled":false}],"LINKEDIN":[{"pixelId":"337330","limitedDataUseEnabled":false},{"pixelId":"4355042","limitedDataUs
2024-04-24 12:32:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49964	172.65.192.122	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	648	OUT	GET /collected-forms/v1/config/json?portalId=143456774&utk= HTTP/1.1 Host: forms-eu1.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:43 UTC	910	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:42 GMT Content-Type: application/json;charset=utf-8 Content-Length: 117 Connection: close Vary: Accept-Encoding Cache-Control: max-age=0 X-Content-Type-Options: nosniff X-Robots-Tag: none Access-Control-Allow-Origin: https://www.signaturit.com Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: * Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 768bdb18-26e7-4921-9793-5864b43149e9 x-evy-trace-served-by-pod: fra04/app-td/envoy-proxy-66c88c747d-fw82v x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 768bdb18-26e7-4921-9793-5864b43149e9 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e1c5c5102ad-CDG
2024-04-24 12:32:43 UTC	117	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 31 34 33 34 35 36 37 37 34 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d Data Ascii: {"portalId":143456774,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49971	142.250.101.99	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&_u=YCDAgAABAAAAAG~&z=1255466199 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:43 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49974	216.137.39.63	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:42 UTC	756	OUT	GET /log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc HTTP/1.1 Host: segments.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ea556916-5ff9-4bbe-87d1-172f8612a1ce; tuuid_lu=1713961957\|ix:0\|mctv:0\|rp:0
2024-04-24 12:32:43 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Wed, 24 Apr 2024 12:32:43 GMT X-Cache: Miss from cloudfront Via: 1.1 f781ef6ca1647978bf98d972dc06ed4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: _rgi093RNJgZWTbXGbEA7AW4DzS-Ol-ZWEf3-AE3sBZ7fyU3CpbZ8Q==
2024-04-24 12:32:43 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49973	142.250.141.103	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:43 UTC	972	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:43 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:32:43 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-bQYJuBu30lOHg7I3YWSUqA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:43 UTC	364	IN	Data Raw: 32 61 65 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae6<!DOCTYPE HTML><html dir="ltr" lang="es"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 62 51 59 4a 75 42 75 33 30 6c 4f 48 67 37 49 33 59 57 53 55 71 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="bQYJuBu30lOHg7I3YWSUqA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 5f 5a 67 4f 6f 61 56 59 50 6a 54 4b 71 4e 4c 49 74 6a 6b 64 4f 75 78 59 59 38 4f 45 42 78 48 4f 49 34 42 64 36 75 7a 57 6e 52 43 6a 67 4a 57 31 6e 4f 4e 70 2d 43 7a 69 32 44 66 59 32 6c 55 35 5a 4f 34 50 38 7a 54 67 4d 6b 65 6d 6c 32 70 6a 53 39 44 43 44 4d 7a 70 59 4b 58 5f 6f 36 6d 65 4b 69 63 52 52 4a 49 55 77 41 53 42 42 45 58 6c 39 48 61 71 6c 72 73 6d 71 61 67 42 74 39 66 5a 4b 46 47 59 61 67 56 57 54 5a 38 34 64 55 42 35 73 54 73 54 4a 4e 33 6f 6c 65 74 59 4b 54 44 50 56 33 50 71 71 6c 45 35 67 5f 55 4e 39 63 35 72 45 76 61 5f 63 6e 37 41 4c 53 4d 59 70 55 38 62 37 61 4b 72 74 41 70 6e 71 6f 77 7a 4d 58 74 33 71 49 30 4f 53 64 74 78 64 55 50 49 73 71 67 72 48 55 41 53 65 55 4e 65 35 59 41 6d 59 61 4c 38 52 4a 7a 6b 50 44 4e 75 42 4f 31 5f 69 51 6c Data Ascii: _ZgOoaVYPjTKqNLItjkdOuxYY8OEBxHOI4Bd6uzWnRCjgJW1nONp-Czi2DfY2lU5ZO4P8zTgMkeml2pjS9DCDMzpYKX_o6meKicRRJIUwASBBEXl9HaqlrsmqagBt9fZKFGYagVWTZ84dUB5sTsTJN3oletYKTDPV3PqqlE5g_UN9c5rEva_cn7ALSMYpU8b7aKrtApnqowzMXt3qI0OSdtxdUPIsqgrHUASeUNe5YAmYaL8RJzkPDNuBO1_iQl
2024-04-24 12:32:43 UTC	1255	IN	Data Raw: 56 63 66 6b 6a 4a 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 62 51 59 4a 75 42 75 33 30 6c 4f 48 67 37 49 33 59 57 53 55 71 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 53 6e Data Ascii: VcfkjJQ"><script type="text/javascript" nonce="bQYJuBu30lOHg7I3YWSUqA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22,\x22\x22,\x22Sn
2024-04-24 12:32:43 UTC	586	IN	Data Raw: 51 76 54 47 51 72 62 53 39 4c 52 30 56 30 52 7a 42 46 64 47 70 69 65 45 70 4a 53 6a 46 6f 52 33 59 30 4e 56 5a 6d 55 44 52 70 63 45 31 47 65 57 70 78 63 6a 68 31 4e 30 31 54 62 6b 56 79 5a 6d 56 4f 54 7a 68 51 56 6a 41 77 65 47 52 49 59 79 74 4d 4e 32 31 48 5a 55 49 7a 55 57 68 4a 54 7a 4e 48 53 45 52 78 4f 45 64 5a 5a 46 5a 56 54 31 52 69 65 6b 4e 7a 4d 54 4a 72 4e 30 55 32 56 46 64 42 4b 79 39 71 57 6c 70 4e 63 55 63 76 64 6b 78 4c 51 56 5a 43 55 57 67 34 57 57 4a 51 64 46 68 35 64 6b 35 4a 51 32 39 5a 65 47 77 34 55 43 39 57 65 55 35 4b 54 46 70 43 56 6d 55 33 57 69 74 68 56 45 67 32 56 32 68 46 63 32 5a 4e 57 57 46 4c 61 48 70 53 65 47 39 46 51 32 39 4e 55 45 77 34 63 6b 5a 49 56 45 74 50 53 48 70 6c 4e 6b 52 43 52 6d 70 57 5a 6b 74 73 62 53 39 49 57 Data Ascii: QvTGQrbS9LR0V0RzBFdGpieEpJSjFoR3Y0NVZmUDRpcE1GeWpxcjh1N01TbkVyZmVOTzhQVjAweGRIYytMN21HZUIzUWhJTzNHSERxOEdZZFZVT1RiekNzMTJrN0U2VFdBKy9qWlpNcUcvdkxLQVZCUWg4WWJQdFh5dk5JQ29ZeGw4UC9WeU5KTFpCVmU3WithVEg2V2hFc2ZNWWFLaHpSeG9FQ29NUEw4ckZIVEtPSHplNkRCRmpWZktsbS9IW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49970	172.65.198.159	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:43 UTC	473	OUT	GET /web-interactives/public/v1/embed/combinedConfigs?portalId=143456774&currentUrl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F HTTP/1.1 Host: cta-eu1.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:43 UTC	1221	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:43 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Access-Control-Allow-Methods: OPTIONS, GET Access-Control-Max-Age: 180 Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: noindex, follow x-envoy-upstream-service-time: 9 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: d2b2ef40-70ef-4906-9f3d-e522106b944c x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-7kkzx x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: d2b2ef40-70ef-4906-9f3d-e522106b944c CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; path=/; expires=Wed, 24-Apr-24 13:02:43 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-04-24 12:32:43 UTC	610	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 34 37 56 68 75 70 65 6f 6d 4d 37 30 77 66 50 63 4a 41 4a 34 6f 69 79 68 37 7a 47 75 39 35 43 64 6d 76 46 43 38 44 38 6a 4a 66 62 6a 6e 4c 67 6f 72 6e 73 66 6c 6e 78 6c 6f 51 4a 43 67 6d 48 43 4b 37 48 79 56 33 78 35 58 74 74 4e 39 63 67 58 57 61 66 31 37 33 6a 34 4f 68 41 4d 37 31 6a 39 36 51 5a 6d 73 55 53 4c 37 69 71 70 4b 45 37 76 41 76 47 78 5a 69 46 6d 44 31 6a 4f 36 6b 6f 4f 64 76 38 42 50 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d47VhupeomM70wfPcJAJ4oiyh7zGu95CdmvFC8D8jJfbjnLgornsflnxloQJCgmHCK7HyV3x5XttN9cgXWaf173j4OhAM71j96QZmsUSL7iqpKE7vAvGxZiFmD1jO6koOdv8BPE%3D"}],"group":"cf-nel","max_age":604800}
2024-04-24 12:32:43 UTC	440	IN	Data Raw: 31 62 31 0d 0a 7b 22 73 6f 72 74 65 64 41 75 64 69 65 6e 63 65 43 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 65 64 43 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 67 61 74 65 73 22 3a 5b 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 46 69 74 43 6f 6e 74 65 6e 74 48 65 69 67 68 74 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 4e 61 76 69 67 61 74 6f 72 43 6c 69 63 6b 54 72 61 63 6b 69 6e 67 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 52 65 73 69 7a 65 53 63 72 6f 6c 6c 48 69 64 65 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 48 79 64 72 61 74 65 54 72 61 63 6b 69 6e 67 4c 69 6e 6b 73 22 2c 22 57 65 62 49 6e 74 65 72 61 63 74 69 76 65 73 3a 53 65 74 42 6f 64 79 44 69 6d 65 6e 73 69 6f 6e 73 22 2c 22 57 65 62 49 Data Ascii: 1b1{"sortedAudienceConfigs":[],"requestedConfigs":[],"gates":["WebInteractives:FitContentHeight","WebInteractives:NavigatorClickTracking","WebInteractives:ResizeScrollHide","WebInteractives:HydrateTrackingLinks","WebInteractives:SetBodyDimensions","WebI
2024-04-24 12:32:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49981	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:43 UTC	1316	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG60Qt&sid=dMLwofBs2a63vpmXAAkl HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:43 UTC	252	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:32:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e21883a0ad9-LAS
2024-04-24 12:32:43 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-24 12:32:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49984	142.250.72.228	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:43 UTC	579	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-61329482-1&cid=1954242962.1713961954&jid=1780916105&_u=YCDAgAABAAAAAG~&z=1255466199 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:44 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49987	216.137.39.126	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:43 UTC	518	OUT	GET /log?vendor=liveramp&user_id=Xc1297uDSgSt1DcsZPnOAeOHseClkrhAz-vif7jg_ZfMfS0dc HTTP/1.1 Host: segments.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ea556916-5ff9-4bbe-87d1-172f8612a1ce; tuuid_lu=1713961957\|ix:0\|mctv:0\|rp:0
2024-04-24 12:32:44 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Wed, 24 Apr 2024 12:32:44 GMT X-Cache: Miss from cloudfront Via: 1.1 3c0c0202765b2b7b973e2ad3371dd028.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 5VFNzJbUcLJkNzxpnbQBNRqS5HtXjU3Qx7R1KUeMAEoKI3nF0ZJEMA==
2024-04-24 12:32:44 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49982	172.65.192.122	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	408	OUT	GET /collected-forms/v1/config/json?portalId=143456774&utk= HTTP/1.1 Host: forms-eu1.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:44 UTC	854	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:44 GMT Content-Type: application/json;charset=utf-8 Content-Length: 117 Connection: close Vary: Accept-Encoding Cache-Control: max-age=0 X-Content-Type-Options: nosniff X-Robots-Tag: none Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: * Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 10 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 37dd8f71-49d5-4fdb-b615-5b419f8e55cd x-evy-trace-served-by-pod: fra04/app-td/envoy-proxy-66c88c747d-lthn6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 37dd8f71-49d5-4fdb-b615-5b419f8e55cd CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e250d3e2a0a-CDG
2024-04-24 12:32:44 UTC	117	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 31 34 33 34 35 36 37 37 34 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d Data Ascii: {"portalId":143456774,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49977	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	544	OUT	GET /ariadne/v1/ariadne_scraping.js HTTP/1.1 Host: appvizer.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:44 UTC	367	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:44 GMT Content-Type: application/javascript Content-Length: 6281 Last-Modified: Wed, 14 Jun 2023 10:14:55 GMT Connection: close Vary: Accept-Encoding ETag: "6489931f-1889" X-Frame-Options: ALLOWALL X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Accept-Ranges: bytes
2024-04-24 12:32:44 UTC	6281	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 63 6f 6e 73 74 20 76 3d 22 63 63 2d 6e 61 6d 65 20 63 61 72 64 2d 6e 61 6d 65 20 63 61 72 64 68 6f 6c 64 65 72 2d 6e 61 6d 65 20 63 61 72 64 68 6f 6c 64 65 72 20 63 63 2d 6e 75 6d 62 65 72 20 63 63 2d 6e 75 6d 20 63 61 72 64 2d 6e 75 6d 62 65 72 20 63 61 72 64 2d 6e 75 6d 20 6e 75 6d 62 65 72 20 63 63 2d 6e 6f 20 63 61 72 64 2d 6e 6f 20 63 72 65 64 69 74 2d 63 61 72 64 20 6e 75 6d 65 72 6f 2d 63 61 72 74 65 20 63 61 72 74 65 20 63 61 72 74 65 2d 63 72 65 64 69 74 20 6e 75 6d 2d 63 61 72 74 65 20 63 62 2d 6e 75 6d 20 63 63 2d 65 78 70 20 63 61 72 64 2d 65 78 70 20 63 63 2d 65 78 70 69 72 61 74 69 6f 6e 20 63 61 72 64 2d 65 78 70 69 72 61 74 69 6f 6e 20 63 63 2d 65 78 20 63 61 72 64 2d 65 78 20 63 61 72 64 2d 65 78 70 Data Ascii: (function(h){const v="cc-name card-name cardholder-name cardholder cc-number cc-num card-number card-num number cc-no card-no credit-card numero-carte carte carte-credit num-carte cb-num cc-exp card-exp cc-expiration card-expiration cc-ex card-ex card-exp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49983	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	889	OUT	GET /embed/v3/counters.gif?key=config-loaded-success&value=1 HTTP/1.1 Host: perf-eu1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:44 UTC	970	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:44 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 779bfdc5-e40e-4f60-961c-054fb5a8ab32 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-mlxkr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 779bfdc5-e40e-4f60-961c-054fb5a8ab32 CF-Cache-Status: MISS Last-Modified: Wed, 24 Apr 2024 12:32:44 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961e256c146f52-CDG alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49985	141.101.90.97	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	417	OUT	GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=143456774 HTTP/1.1 Host: api-eu1.hubapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:44 UTC	1252	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:44 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: * Access-Control-Max-Age: 180 x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 23f388cf-1326-4363-af46-e40d414121cf x-evy-trace-served-by-pod: fra04/hubapi-td/envoy-proxy-6cb5cf8d4d-tnlzj x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 23f388cf-1326-4363-af46-e40d414121cf CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NEkO6kclpW86eKW9E7rghbveBguwDH3LUHcEfWCdUtwzo1Hxnljy2buYwwDNOIWyE5IG%2BkGT3CP6YLX4bbovGhjrjBuDWAEzCPrSNAm7IDMny0t9UdqRMF7rRBpepaIsxP1n6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961e258ca22a29-CDG
2024-04-24 12:32:44 UTC	117	IN	Data Raw: 31 36 37 0d 0a 7b 22 70 69 78 65 6c 73 22 3a 7b 22 41 44 57 4f 52 44 53 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 31 30 31 38 30 32 32 32 31 35 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 70 69 78 65 6c 49 64 22 3a 22 39 38 34 39 35 37 38 33 36 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 Data Ascii: 167{"pixels":{"ADWORDS":[{"pixelId":"1018022215","limitedDataUseEnabled":false},{"pixelId":"984957836","limitedData
2024-04-24 12:32:44 UTC	249	IN	Data Raw: 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 46 41 43 45 42 4f 4f 4b 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 35 33 39 33 38 36 35 38 31 34 30 33 31 31 36 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 4c 49 4e 4b 45 44 49 4e 22 3a 5b 7b 22 70 69 78 65 6c 49 64 22 3a 22 33 33 37 33 33 30 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 70 69 78 65 6c 49 64 22 3a 22 34 33 35 35 30 34 32 22 2c 22 6c 69 6d 69 74 65 64 44 61 74 61 55 73 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 65 6e 68 61 6e 63 65 64 43 6f 6e 76 65 72 73 69 6f 6e 45 76 65 6e 74 53 65 74 74 69 6e 67 73 22 3a 7b 7d 7d 0d 0a Data Ascii: UseEnabled":false}],"FACEBOOK":[{"pixelId":"539386581403116","limitedDataUseEnabled":false}],"LINKEDIN":[{"pixelId":"337330","limitedDataUseEnabled":false},{"pixelId":"4355042","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}
2024-04-24 12:32:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49986	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	903	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms-eu1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:44 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:44 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 2869628d-c3bb-45a7-9676-aab453da58e5 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-7kkzx x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 2869628d-c3bb-45a7-9676-aab453da58e5 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961e259826d2ad-CDG alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49999	142.250.141.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	1192	OUT	POST /g/collect?v=2&tid=G-ZB2TFCHC3F&gtm=45je44m0v880655858z86591828za200&_p=1713961944551&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1954242962.1713961954&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713961953&sct=1&seg=0&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&dt=Page%20not%20found%20%7C%20Signaturit&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=11261 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:44 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.signaturit.com Date: Wed, 24 Apr 2024 12:32:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50002	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:44 UTC	1510	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG613M HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=dMLwofBs2a63vpmXAAkl
2024-04-24 12:32:45 UTC	387	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:45 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=tCEDyrh5I7R_YWX3AAtQ; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e2a2c3109fd-LAS
2024-04-24 12:32:45 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 74 43 45 44 79 72 68 35 49 37 52 5f 59 57 58 33 41 41 74 51 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"tCEDyrh5I7R_YWX3AAtQ","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50001	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	524	OUT	OPTIONS /rest/ariadne/v1/domain HTTP/1.1 Host: appvizer.one Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:45 UTC	628	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:45 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST,GET Access-Control-Allow-Headers: content-type Access-Control-Expose-Headers: Access-Control-Allow-Origin, Access-Control-Allow-Credentials Access-Control-Max-Age: 0 Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Frame-Options: SAMEORIGIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50005	142.250.101.155	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	843	OUT	POST /g/collect?v=2&tid=G-ZB2TFCHC3F&cid=1954242962.1713961954&gtm=45je44m0v880655858z86591828za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signaturit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:32:45 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.signaturit.com Date: Wed, 24 Apr 2024 12:32:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50003	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	665	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms-eu1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:45 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:45 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 929e6232-91d7-4c9a-99f3-c2716e232712 x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-gcfx6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 929e6232-91d7-4c9a-99f3-c2716e232712 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961e2d4bc06982-CDG alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50004	172.65.232.43	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	651	OUT	GET /embed/v3/counters.gif?key=config-loaded-success&value=1 HTTP/1.1 Host: perf-eu1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=5gnHmKNzVs9PPcCVsnbGZX3yynL5X1OyYnqwjFdt6H8-1713961953-1.0.1.1-nrWkdCJ_E65gwQ91LbyG9tnFx3kOGTQU74M23e6zM5vHqKzfL3hLxMBusOjJJLlEG_b3xY._C6xPmB035f5H2A; _cfuvid=8NpYK3sS6Gnu01wtFs.I7eruv66KuT2Gl3vCVK_zJmA-1713961953768-0.0.1.1-604800000
2024-04-24 12:32:45 UTC	970	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:45 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-Origin-Hublet X-Robots-Tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 60dc2044-a859-41f9-ad51-d67987b9a2ac x-evy-trace-served-by-pod: fra04/star-hubspot-td/envoy-proxy-649b594779-mlxkr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 60dc2044-a859-41f9-ad51-d67987b9a2ac CF-Cache-Status: MISS Last-Modified: Wed, 24 Apr 2024 12:32:45 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87961e2df8de3ccf-CDG alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50007	142.250.141.103	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	876	OUT	GET /recaptcha/enterprise/webworker.js?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:45 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 24 Apr 2024 12:32:45 GMT Date: Wed, 24 Apr 2024 12:32:45 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:45 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 73 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__es.js');
2024-04-24 12:32:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50010	142.250.141.103	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	858	OUT	GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly93d3cuc2lnbmF0dXJpdC5jb206NDQz&hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&badge=inline&cb=h2uj9xpnmezr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:45 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18278 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 23 Apr 2024 17:27:34 GMT Expires: Wed, 23 Apr 2025 17:27:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 68711 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:45 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 69 66 28 21 28 59 3d 28 6e 3d 6e 75 6c 6c 2c 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 59 29 7c 7c 21 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTM
2024-04-24 12:32:45 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 64 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 22 2b 64 7d 7d 28 52 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6e 57 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 59 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 3c 6e 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 6e 5b 59 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 59 4b Data Ascii: eateScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK
2024-04-24 12:32:45 UTC	1255	IN	Data Raw: 61 6c 73 65 29 7d 2c 28 6e 2e 56 3d 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 20 6e 2e 7a 5a 28 57 29 7d 29 29 7d 65 6c 73 65 7b 69 66 28 6d 3d 3d 6d 47 29 72 65 74 75 72 6e 20 52 3d 59 5b 32 5d 2c 7a 28 33 38 38 2c 6e 2c 59 5b 36 5d 29 2c 7a 28 34 30 39 2c 6e 2c 52 29 2c 6e 2e 58 28 59 29 3b 6d 3d 3d 69 71 3f 28 6e 2e 54 3d 6e 75 6c 6c 2c 6e 2e 52 67 3d 5b 5d 2c 6e 2e 4e 3d 5b 5d 29 3a 6d 3d 3d 68 53 26 26 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 75 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 6e 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 7c 7c 28 72 3d 74 72 75 65 2c 57 28 29 29 7d 28 72 3d 66 61 6c 73 65 2c 75 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 Data Ascii: alse)},(n.V=[],function(W){return n.zZ(W)}))}else{if(m==mG)return R=Y[2],z(388,n,Y[6]),z(409,n,R),n.X(Y);m==iq?(n.T=null,n.Rg=[],n.N=[]):m==hS&&"loading"===u.document.readyState&&(n.J=function(W,r){function d(){r\|\|(r=true,W())}(r=false,u.document.addEvent
2024-04-24 12:32:45 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 71 28 74 72 75 65 2c 6e 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 4c 7d 2c 6b 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 77 28 28 4c 3d 62 28 6e 29 2c 52 3d 62 28 6e 29 2c 52 29 2c 56 28 59 2c 5a 28 4c 2c 6e 29 29 2c 6e 29 7d 2c 53 5f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 4e 5b 59 5d 28 4e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 6e 2c 66 6c 6f 6f 72 3a 6e 2c 70 72 6f 74 6f 74 79 70 65 3a 6e 2c 73 70 6c 69 63 65 3a 6e 2c 64 6f 63 75 6d 65 6e 74 3a 6e 2c 63 6f 6e 73 6f 6c 65 3a 6e 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 6e 2c 72 65 70 6c 61 63 65 3a 6e 2c 70 6f 70 3a 6e 2c 63 61 6c 6c 3a 6e 2c 73 74 61 63 6b 3a 6e 2c 6c 65 Data Ascii: tion(){q(true,n,true)});break}}return L},kK=function(n,Y,R,L){w((L=b(n),R=b(n),R),V(Y,Z(L,n)),n)},S_=function(n,Y){return N[Y](N.prototype,{parent:n,floor:n,prototype:n,splice:n,document:n,console:n,propertyIsEnumerable:n,replace:n,pop:n,call:n,stack:n,le
2024-04-24 12:32:45 UTC	1255	IN	Data Raw: 31 39 36 3d 3d 6e 3f 59 2e 54 5b 6e 5d 7c 7c 28 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 38 36 2c 52 2c 59 29 29 3a 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 35 37 2c 52 2c 59 29 7d 34 35 38 3d 3d 6e 26 26 28 59 2e 6c 3d 58 28 59 2c 33 32 2c 66 61 6c 73 65 29 2c 59 2e 59 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 66 6f 72 28 52 3d 28 28 4c 3d 5b 5d 2c 6e 29 7c 30 29 2d 31 3b 30 3c 3d 52 3b 52 2d 2d 29 4c 5b 28 6e 7c 30 29 2d 31 2d 28 52 7c 30 29 5d 3d 59 3e 3e 38 2a 52 26 32 35 35 3b 72 65 74 75 72 6e 20 4c 7d 2c 73 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 7d 72 65 74 75 72 6e 7b 69 6e 76 6f 6b 65 3a 28 52 3d 28 4c 3d 28 6e 3d 57 62 28 6e 2c 66 75 6e 63 74 Data Ascii: 196==n?Y.T[n]\|\|(Y.T[n]=JS(n,86,R,Y)):Y.T[n]=JS(n,57,R,Y)}458==n&&(Y.l=X(Y,32,false),Y.Y=void 0)},V=function(n,Y,R,L){for(R=((L=[],n)\|0)-1;0<=R;R--)L[(n\|0)-1-(R\|0)]=Y>>8*R&255;return L},sU=function(n,Y,R,L,m){function W(){}return{invoke:(R=(L=(n=Wb(n,funct
2024-04-24 12:32:45 UTC	1255	IN	Data Raw: 20 6e 2e 41 3f 59 4b 28 6e 2e 43 2c 6e 29 3a 58 28 6e 2c 38 2c 74 72 75 65 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 6d 3d 74 68 69 73 3b 74 72 79 7b 51 4c 28 74 68 69 73 2c 59 2c 52 2c 4c 2c 6e 29 7d 63 61 74 63 68 28 57 29 7b 61 28 74 68 69 73 2c 57 29 2c 52 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6d 2e 68 29 7d 29 7d 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 28 7a 28 59 2c 6e 2c 52 29 2c 52 29 5b 68 53 5d 3d 32 37 39 36 7d 2c 41 53 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 2c 57 29 7b 69 66 28 21 59 2e 68 29 7b 59 2e 75 2b 2b 3b 74 72 79 7b 66 6f 72 28 4c 3d 76 6f 69 64 20 30 2c 52 3d 30 2c 6d 3d 59 2e 4f 3b 2d 2d 6e 3b 29 74 72 79 7b 69 66 28 28 57 3d 76 6f 69 64 20 30 2c 59 29 2e Data Ascii: n.A?YK(n.C,n):X(n,8,true)},U=function(n,Y,R,L,m){m=this;try{QL(this,Y,R,L,n)}catch(W){a(this,W),R(function(r){r(m.h)})}},T=function(n,Y,R){(z(Y,n,R),R)[hS]=2796},AS=function(n,Y,R,L,m,W){if(!Y.h){Y.u++;try{for(L=void 0,R=0,m=Y.O;--n;)try{if((W=void 0,Y).
2024-04-24 12:32:46 UTC	1255	IN	Data Raw: 6c 5e 3d 6d 2a 28 44 3c 3c 32 29 29 2c 52 29 2e 52 3d 6d 7c 7c 52 2e 52 2c 52 29 2e 47 2b 3d 6d 2c 57 29 7c 7c 72 29 52 2e 57 3d 30 2c 52 2e 46 3d 64 3b 69 66 28 21 72 7c 7c 64 2d 52 2e 44 3c 52 2e 68 7a 2d 28 4c 3f 32 35 35 3a 6e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 21 28 52 2e 4a 3d 28 28 7a 28 34 35 34 2c 52 2c 28 52 2e 6b 66 3d 59 2c 4c 3d 5a 28 6e 3f 37 35 3a 34 35 34 2c 52 29 2c 52 29 2e 4f 29 2c 52 2e 69 29 2e 70 75 73 68 28 5b 52 31 2c 4c 2c 6e 3f 59 2b 31 3a 59 2c 52 2e 53 2c 52 2e 48 2c 52 2e 76 2c 52 2e 42 5d 29 2c 6c 71 29 2c 30 29 7d 2c 76 62 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 72 65 74 75 72 6e 20 6e 2e 54 5a 28 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 52 3d 4c 7d 2c 66 61 6c 73 65 2c 59 29 2c Data Ascii: l^=m*(D<<2)),R).R=m\|\|R.R,R).G+=m,W)\|\|r)R.W=0,R.F=d;if(!r\|\|d-R.D<R.hz-(L?255:n?5:2))return false;return!(R.J=((z(454,R,(R.kf=Y,L=Z(n?75:454,R),R).O),R.i).push([R1,L,n?Y+1:Y,R.S,R.H,R.v,R.B]),lq),0)},vb=function(n,Y,R){return n.TZ(function(L){R=L},false,Y),
2024-04-24 12:32:46 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 6e 2e 46 39 3d 4e 53 2c 6e 2e 4e 49 3d 28 6e 2e 63 24 3d 6e 5b 53 5d 2c 5a 59 29 2c 6e 2e 5a 29 29 2c 6e 29 2e 6d 6b 3d 4e 5b 6e 2e 5a 5d 28 6e 2e 59 66 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 30 29 2c 5b 5d 29 3b 33 34 36 3e 72 3b 72 2b 2b 29 57 5b 72 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3b 71 28 74 72 75 65 2c 6e 2c 28 6c 28 28 6c 28 5b 28 28 54 28 6e 2c 32 39 37 2c 28 54 28 6e 2c 28 7a 28 31 39 36 2c 6e 2c 28 7a 28 34 30 39 2c 28 54 28 6e 2c 28 54 28 6e 2c 32 35 35 2c 28 54 28 28 7a 28 33 35 33 2c 6e 2c 28 54 28 6e 2c 28 7a 28 31 38 36 2c 6e 2c 28 7a 28 31 37 37 2c 28 54 28 6e 2c 32 38 37 2c 28 7a 28 34 Data Ascii: tion(){return this.concat()}},(n.F9=NS,n.NI=(n.c$=n[S],ZY),n.Z)),n).mk=N[n.Z](n.Yf,{value:{value:{}}}),0),[]);346>r;r++)W[r]=String.fromCharCode(r);q(true,n,(l((l([((T(n,297,(T(n,(z(196,n,(z(409,(T(n,(T(n,255,(T((z(353,n,(T(n,(z(186,n,(z(177,(T(n,287,(z(4
2024-04-24 12:32:46 UTC	1255	IN	Data Raw: 64 29 2c 64 29 29 3b 54 28 64 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 4b 2c 70 2c 63 29 7b 66 6f 72 28 65 3d 28 70 3d 5b 5d 2c 30 29 2c 4b 3d 5b 5d 3b 65 3c 6b 3b 65 2b 2b 29 7b 69 66 28 21 28 63 3d 44 5b 65 5d 2c 66 5b 65 5d 29 29 7b 66 6f 72 28 3b 63 3e 3d 70 2e 6c 65 6e 67 74 68 3b 29 70 2e 70 75 73 68 28 62 28 74 29 29 3b 63 3d 70 5b 63 5d 7d 4b 2e 70 75 73 68 28 63 29 7d 74 2e 43 3d 28 74 2e 41 3d 66 57 28 45 2e 73 6c 69 63 65 28 29 2c 74 29 2c 66 57 28 4b 2c 74 29 29 7d 29 7d 29 2c 33 31 31 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 2c 6b 29 7b 28 44 3d 28 50 3d 5a 28 28 68 3d 28 6b 3d 5a 28 28 50 3d 62 28 28 68 3d 62 28 28 44 3d 28 6b 3d 62 28 64 29 2c 62 29 28 64 29 2c 64 29 29 2c 64 29 29 2c 6b 29 2c 64 2e 52 29 2c 5a 29 28 68 Data Ascii: d),d));T(d,F,function(t,e,K,p,c){for(e=(p=[],0),K=[];e<k;e++){if(!(c=D[e],f[e])){for(;c>=p.length;)p.push(b(t));c=p[c]}K.push(c)}t.C=(t.A=fW(E.slice(),t),fW(K,t))})}),311),function(d,D,h,P,k){(D=(P=Z((h=(k=Z((P=b((h=b((D=(k=b(d),b)(d),d)),d)),k),d.R),Z)(h
2024-04-24 12:32:46 UTC	1255	IN	Data Raw: 29 7b 45 55 28 64 2c 33 29 7d 29 29 2c 6e 29 2c 5b 5d 29 2c 5b 5d 29 29 2c 49 28 34 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 21 4f 28 74 72 75 65 2c 44 2c 64 2c 66 61 6c 73 65 29 26 26 28 44 3d 42 62 28 64 29 2c 50 3d 44 2e 4f 5f 2c 68 3d 44 2e 6c 53 2c 64 2e 52 3d 3d 64 7c 7c 50 3d 3d 64 2e 45 5f 26 26 68 3d 3d 64 29 26 26 28 7a 28 44 2e 4a 7a 2c 64 2c 50 2e 61 70 70 6c 79 28 68 2c 44 2e 73 29 29 2c 64 2e 46 3d 64 2e 4b 28 29 29 7d 29 29 2c 5b 31 36 30 2c 30 2c 30 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 29 7b 44 3d 62 28 28 68 3d 62 28 64 29 2c 64 29 29 2c 7a 28 44 2c 64 2c 22 22 2b 5a 28 68 2c 64 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 7a 28 28 50 3d 5a 28 28 44 3d 28 44 3d 62 28 28 Data Ascii: ){EU(d,3)})),n),[]),[])),I(4))),function(d,D,h,P){!O(true,D,d,false)&&(D=Bb(d),P=D.O_,h=D.lS,d.R==d\|\|P==d.E_&&h==d)&&(z(D.Jz,d,P.apply(h,D.s)),d.F=d.K())})),[160,0,0])),function(d,D,h){D=b((h=b(d),d)),z(D,d,""+Z(h,d))})),function(d,D,h,P){z((P=Z((D=(D=b((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50014	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	1535	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG61GV&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:33:11 UTC	385	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:11 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 3 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=tCEDyrh5I7R_YWX3AAtQ; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e2f1aa369e6-LAS
2024-04-24 12:33:11 UTC	3	IN	Data Raw: 31 3a 33 Data Ascii: 1:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50013	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	1291	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG613M HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:32:46 UTC	317	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:46 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Origin: * Set-Cookie: io=eWeEpe9fpKZMdZliAAtt; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e2f5c8009f1-LAS
2024-04-24 12:32:46 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 65 57 65 45 70 65 39 66 70 4b 5a 4d 64 5a 6c 69 41 41 74 74 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"eWeEpe9fpKZMdZliAAtt","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50012	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	1471	OUT	GET /socket.io/?EIO=3&transport=websocket&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://sign-app.signaturit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=tCEDyrh5I7R_YWX3AAtQ Sec-WebSocket-Key: ekRhzNC+Ml3GgYM+Poq8Tw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:32:46 UTC	322	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:32:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961e2f18b10a03-LAS
2024-04-24 12:32:46 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 12:32:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50016	142.250.101.156	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:45 UTC	1410	OUT	GET /td/rul/1018022215?random=1713961964710&cv=11&fst=1713961964710&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:32:46 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlbMbkBimZDU6inxDu4qMY2dsgj0DhZKIXMr05YQ-Twm6rYy4RCSvgI2OeN; expires=Fri, 24-Apr-2026 12:32:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 12:32:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50018	142.250.217.130	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:46 UTC	1286	OUT	GET /pagead/viewthroughconversion/1018022215/?random=1713961964710&cv=11&fst=1713961964710&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:32:46 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnHRLhvY_qnzkwGhChyVw_nPAXcMBxLruzQZJl2KVHtlBED8XXXkXFCUUse; expires=Fri, 24-Apr-2026 12:32:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:46 UTC	244	IN	Data Raw: 61 37 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: a7b(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-24 12:32:46 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-24 12:32:46 UTC	1191	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 35 4e 6a 45 35 4e 6a 51 33 4d 54 41 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTM5NjE5NjQ3MTA',['https://www.google.com/pagead/1p-user-lis
2024-04-24 12:32:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50017	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:46 UTC	600	OUT	GET /rest/ariadne/v1/domain HTTP/1.1 Host: appvizer.one Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:46 UTC	521	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:46 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 36 Connection: close Vary: Accept-Encoding Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin, Access-Control-Allow-Credentials X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Frame-Options: SAMEORIGIN
2024-04-24 12:32:46 UTC	36	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 61 72 69 61 64 6e 65 2e 61 70 70 76 69 7a 65 72 2e 6f 6e 65 2f 61 72 69 61 64 6e 65 Data Ascii: https://ariadne.appvizer.one/ariadne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50022	142.250.141.103	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:46 UTC	879	OUT	GET /recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:47 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:32:46 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-fz2K31CPHHEgP0Ni93rVyQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:47 UTC	364	IN	Data Raw: 31 64 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d17<!DOCTYPE HTML><html dir="ltr" lang="es"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 12:32:47 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 12:32:47 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 12:32:47 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:32:47 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 12:32:47 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 12:32:47 UTC	816	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 66 7a 32 4b 33 31 43 50 48 48 45 67 50 30 4e 69 39 33 72 56 79 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="fz2K31CPHHEgP0Ni93rVyQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 12:32:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50024	142.250.101.99	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:46 UTC	1391	OUT	GET /pagead/1p-user-list/1018022215/?random=1713961964710&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq413nPGWpwkP_r56HRHl3GKpKlzNnqGV2jdcck_y7lGn7sDFg&random=818378193&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50025	142.250.217.130	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:47 UTC	1323	OUT	GET /pagead/viewthroughconversion/984957836/?random=1713961965805&cv=11&fst=1713961965805&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnHRLhvY_qnzkwGhChyVw_nPAXcMBxLruzQZJl2KVHtlBED8XXXkXFCUUse
2024-04-24 12:32:47 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:47 UTC	552	IN	Data Raw: 61 37 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a7b(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-24 12:32:47 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-24 12:32:47 UTC	883	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 39 36 30 30 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6d 30 76 38 37 38 36 35 32 32 31 35 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 25 32 46 65 6e 25 32 46 6c 65 67 61 6c 69 74 79 25 32 46 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f Data Ascii: st\x3d1713960000000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44m0v878652215za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F\x26hn\x3dwww.googleadservices.co
2024-04-24 12:32:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50026	142.250.101.156	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:47 UTC	1447	OUT	GET /td/rul/984957836?random=1713961965805&cv=11&fst=1713961965805&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnHRLhvY_qnzkwGhChyVw_nPAXcMBxLruzQZJl2KVHtlBED8XXXkXFCUUse
2024-04-24 12:32:47 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:47 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-24 12:32:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50027	37.59.241.167	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:47 UTC	358	OUT	GET /rest/ariadne/v1/domain HTTP/1.1 Host: appvizer.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:48 UTC	395	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:32:47 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 36 Connection: close Vary: Accept-Encoding Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Frame-Options: SAMEORIGIN
2024-04-24 12:32:48 UTC	36	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 61 72 69 61 64 6e 65 2e 61 70 70 76 69 7a 65 72 2e 6f 6e 65 2f 61 72 69 61 64 6e 65 Data Ascii: https://ariadne.appvizer.one/ariadne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50028	142.250.141.103	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:47 UTC	875	OUT	POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 9063 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:47 UTC	9063	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 8e 0f 30 33 41 46 63 57 65 41 37 6c 4d 71 37 69 56 32 32 4e 52 37 7a 39 45 58 78 37 54 51 5f 37 70 71 2d 55 78 33 75 31 5a 69 44 50 48 35 70 64 71 37 6c 44 38 6a 4e 73 71 65 58 4d 59 31 52 65 53 57 53 41 58 5f 4d 72 70 70 59 65 45 65 74 59 6e 57 79 47 70 63 5f 46 77 73 4b 32 62 74 4e 73 5a 46 50 44 67 46 30 54 55 6c 68 76 45 4a 55 74 2d 58 42 6c 46 6f 34 34 7a 6f 6a 4a 4a 37 6c 51 51 7a 58 68 37 53 76 4b 48 4d 53 68 4e 4b 4d 4e 67 53 75 35 51 44 53 48 35 71 4f 31 42 63 43 34 71 57 46 43 4f 6e 48 78 4c 70 4b 33 7a 76 68 43 41 77 58 66 66 41 79 73 44 62 63 4e 79 38 71 35 36 6d 4a 45 41 70 58 47 67 6a 2d 64 71 62 33 50 79 70 6a 59 57 45 66 6d 4f 54 41 43 4f 70 58 52 64 36 4d 30 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA7lMq7iV22NR7z9EXx7TQ_7pq-Ux3u1ZiDPH5pdq7lD8jNsqeXMY1ReSWSAX_MrppYeEetYnWyGpc_FwsK2btNsZFPDgF0TUlhvEJUt-XBlFo44zojJJ7lQQzXh7SvKHMShNKMNgSu5QDSH5qO1BcC4qWFCOnHxLpK3zvhCAwXffAysDbcNy8q56mJEApXGgj-dqb3PypjYWEfmOTACOpXRd6M0
2024-04-24 12:32:48 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:32:48 GMT Expires: Wed, 24 Apr 2024 12:32:48 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA;Path=/recaptcha;Expires=Mon, 21-Oct-2024 12:32:48 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:48 UTC	559	IN	Data Raw: 32 33 32 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 79 55 73 73 48 4a 71 55 61 6d 66 45 55 52 6e 79 46 56 6b 61 59 4d 6e 39 78 38 44 50 33 74 35 45 39 52 65 4f 6f 6c 63 6d 66 58 67 64 4e 2d 32 6b 45 6f 73 79 73 71 4d 73 31 34 5f 65 51 42 74 4b 65 76 6b 72 6f 65 4e 34 4f 6b 41 70 54 50 48 57 45 36 4c 6d 6d 56 56 75 46 35 6c 47 77 30 33 56 6a 44 5a 55 4d 73 6b 34 59 6b 55 34 7a 4f 51 70 71 41 75 4d 63 4c 33 55 2d 59 6b 32 64 52 64 58 54 46 44 31 49 42 69 53 37 53 43 2d 43 51 6b 67 57 77 64 77 69 5f 78 77 6b 78 79 50 65 6e 75 30 75 66 46 67 46 51 46 59 77 56 37 68 4a 41 71 4b 6d 7a 78 78 38 30 79 64 58 62 67 6f 55 78 4d 47 32 52 51 4e 52 47 55 51 2d 35 42 6c 49 76 4a 5f 38 69 56 72 73 47 63 72 30 63 43 5f 32 39 33 47 6a 57 Data Ascii: 232)]}'["rresp","03AFcWeA5yUssHJqUamfEURnyFVkaYMn9x8DP3t5E9ReOolcmfXgdN-2kEosysqMs14_eQBtKevkroeN4OkApTPHWE6LmmVVuF5lGw03VjDZUMsk4YkU4zOQpqAuMcL3U-Yk2dRdXTFD1IBiS7SC-CQkgWwdwi_xwkxyPenu0ufFgFQFYwV7hJAqKmzxx80ydXbgoUxMG2RQNRGUQ-5BlIvJ_8iVrsGcr0cC_293GjW
2024-04-24 12:32:48 UTC	10	IN	Data Raw: 55 75 7a 4d 58 6e 54 41 0d 0a Data Ascii: UuzMXnTA
2024-04-24 12:32:48 UTC	1255	IN	Data Raw: 61 34 34 0d 0a 5a 76 4c 6b 32 6a 62 30 55 68 35 48 4d 53 66 62 43 32 4f 55 4d 6d 68 35 71 67 54 32 2d 32 2d 70 32 39 61 73 36 37 72 6f 79 71 53 73 64 33 5a 45 50 64 79 31 4e 79 57 35 78 34 33 57 4a 41 70 33 34 61 4d 6f 55 41 4b 5a 38 49 52 36 39 6f 69 56 7a 65 5f 4a 39 65 4f 41 4c 4c 7a 32 51 32 53 52 6b 55 78 45 49 45 6e 64 30 4f 42 38 52 4c 48 6b 72 6b 72 56 63 7a 64 33 62 67 6d 39 6a 5f 76 4f 4e 62 6e 74 70 6a 37 6d 6d 69 34 35 38 58 5f 39 67 37 6c 71 49 75 6c 4e 30 2d 6c 39 30 57 64 6e 4e 47 44 66 75 67 4c 69 32 4e 55 6a 74 71 41 72 35 48 2d 4c 71 6d 34 44 76 4e 48 36 4b 53 4d 43 4a 79 6f 67 6b 35 44 77 64 45 56 66 36 47 56 55 61 53 4b 32 49 71 4a 32 34 58 55 6a 73 56 4f 43 69 58 57 33 50 78 4d 49 4f 79 70 75 55 76 70 57 6f 53 51 5a 5f 30 41 63 62 6d Data Ascii: a44ZvLk2jb0Uh5HMSfbC2OUMmh5qgT2-2-p29as67royqSsd3ZEPdy1NyW5x43WJAp34aMoUAKZ8IR69oiVze_J9eOALLz2Q2SRkUxEIEnd0OB8RLHkrkrVczd3bgm9j_vONbntpj7mmi458X_9g7lqIulN0-l90WdnNGDfugLi2NUjtqAr5H-Lqm4DvNH6KSMCJyogk5DwdEVf6GVUaSK2IqJ24XUjsVOCiXW3PxMIOypuUvpWoSQZ_0Acbm
2024-04-24 12:32:48 UTC	1255	IN	Data Raw: 5f 45 52 30 53 69 35 62 6b 32 5f 74 6c 30 79 71 4b 68 38 61 63 6d 37 41 75 47 76 70 6f 4c 6f 4c 65 66 76 70 30 49 58 32 73 67 39 7a 35 4c 49 56 2d 63 43 67 38 30 46 36 4f 4d 54 32 4c 52 6a 6b 6a 51 5f 30 7a 33 76 38 47 6e 44 77 45 79 4a 35 72 4e 35 7a 4f 76 7a 57 51 74 4b 4f 31 5a 71 61 74 4f 56 4a 35 41 62 71 72 52 52 36 4c 51 6b 59 69 69 44 43 79 44 66 5a 4b 43 71 2d 39 57 48 31 36 45 46 54 46 53 34 62 5f 4b 33 67 65 44 34 4e 51 73 4d 7a 6b 4e 4e 2d 79 31 6f 4a 42 70 78 6a 71 47 64 4b 77 79 38 54 6c 7a 6a 77 58 63 63 51 73 4c 5f 43 35 43 6b 37 71 42 7a 50 63 5a 56 5f 6c 58 6c 64 41 34 52 44 64 53 47 4a 6e 42 55 6f 56 6f 52 64 2d 69 53 64 73 4e 53 6f 41 37 65 4d 68 35 31 6f 76 41 63 56 79 6f 62 56 53 43 32 78 30 55 41 79 72 6a 66 6b 61 47 49 37 38 78 53 Data Ascii: _ER0Si5bk2_tl0yqKh8acm7AuGvpoLoLefvp0IX2sg9z5LIV-cCg80F6OMT2LRjkjQ_0z3v8GnDwEyJ5rN5zOvzWQtKO1ZqatOVJ5AbqrRR6LQkYiiDCyDfZKCq-9WH16EFTFS4b_K3geD4NQsMzkNN-y1oJBpxjqGdKwy8TlzjwXccQsL_C5Ck7qBzPcZV_lXldA4RDdSGJnBUoVoRd-iSdsNSoA7eMh51ovAcVyobVSC2x0UAyrjfkaGI78xS
2024-04-24 12:32:48 UTC	125	IN	Data Raw: 73 58 4d 6e 35 70 4a 68 46 73 36 73 57 56 50 46 57 53 4a 54 5f 37 35 68 65 78 74 31 42 50 74 31 2d 4f 33 65 65 39 4a 38 72 49 47 5f 42 4c 48 77 43 64 58 68 4d 4c 74 67 75 37 2d 4d 4f 69 64 37 41 58 4d 76 4f 68 77 32 38 55 53 37 59 6a 53 58 44 4d 73 58 56 61 58 33 4a 6b 44 79 6f 34 74 69 2d 52 33 55 4d 64 42 51 42 7a 47 57 32 54 62 57 4e 44 48 32 6a 41 69 51 44 79 54 0d 0a Data Ascii: sXMn5pJhFs6sWVPFWSJT_75hext1BPt1-O3ee9J8rIG_BLHwCdXhMLtgu7-MOid7AXMvOhw28US7YjSXDMsXVaX3JkDyo4ti-R3UMdBQBzGW2TbWNDH2jAiQDyT
2024-04-24 12:32:48 UTC	1255	IN	Data Raw: 31 35 61 31 0d 0a 5f 69 4d 68 5a 46 35 50 31 56 47 64 77 57 51 4b 45 58 48 79 31 69 52 4f 2d 63 32 70 62 30 78 61 4c 63 30 4a 58 47 2d 30 73 6a 6c 30 56 70 57 39 45 6c 53 76 5a 70 6b 30 63 37 62 4c 64 4a 4f 63 51 57 4f 31 49 52 69 4e 59 47 63 72 49 52 6f 74 79 51 4d 63 69 49 5a 77 6a 58 67 48 33 67 68 44 61 4f 4c 7a 7a 6c 4a 76 63 75 4c 6e 6c 6e 4f 37 6f 5a 46 71 4b 6c 71 46 73 55 34 54 57 50 4e 66 4a 34 6d 50 2d 37 78 53 39 6f 56 74 58 78 50 73 6e 6a 47 35 67 6f 77 43 76 64 39 7a 74 49 30 36 67 53 51 78 4f 6a 75 49 51 68 78 6a 6a 41 44 75 30 63 67 63 35 2d 4a 35 4c 6d 74 53 69 38 51 51 39 47 46 55 66 52 49 6b 63 56 4d 48 2d 79 34 6c 77 79 64 75 41 69 66 58 55 41 4d 34 6b 4d 4a 62 69 51 5a 41 49 32 48 73 57 42 6d 37 79 53 5a 2d 35 53 4b 55 45 43 6e 37 41 Data Ascii: 15a1_iMhZF5P1VGdwWQKEXHy1iRO-c2pb0xaLc0JXG-0sjl0VpW9ElSvZpk0c7bLdJOcQWO1IRiNYGcrIRotyQMciIZwjXgH3ghDaOLzzlJvcuLnlnO7oZFqKlqFsU4TWPNfJ4mP-7xS9oVtXxPsnjG5gowCvd9ztI06gSQxOjuIQhxjjADu0cgc5-J5LmtSi8QQ9GFUfRIkcVMH-y4lwyduAifXUAM4kMJbiQZAI2HsWBm7ySZ-5SKUECn7A
2024-04-24 12:32:48 UTC	1255	IN	Data Raw: 31 38 6b 43 49 52 77 51 41 5f 69 6d 65 74 31 36 67 38 6b 49 51 41 77 4f 4b 4b 51 45 6b 59 47 77 43 74 6a 43 64 6f 74 68 4c 42 36 41 68 6f 61 54 53 66 75 41 63 62 73 66 55 39 77 79 6c 31 51 68 37 74 6e 47 62 32 48 6c 4c 63 42 59 70 58 45 53 37 57 75 6d 6d 59 58 74 5a 69 68 61 62 4b 4e 30 48 57 6d 42 76 74 6a 73 64 70 6d 32 52 55 55 50 39 4c 53 50 31 46 44 64 4a 6e 45 33 79 52 4a 67 68 6d 6f 69 48 42 72 58 44 47 69 6f 54 39 54 68 6e 6e 39 4f 79 6d 37 50 38 6c 67 6a 64 6b 61 64 71 71 6e 75 78 37 74 77 79 4d 45 5a 72 4b 33 42 44 4b 30 71 4d 6f 30 70 6e 65 37 71 56 44 34 5a 36 69 45 6e 45 41 6a 68 5a 33 37 50 4b 42 56 6d 6d 42 51 32 4c 4e 4d 4f 63 37 61 6a 6a 38 6e 42 38 4e 37 61 4f 55 65 30 37 4e 58 68 6e 4c 6a 32 64 7a 52 52 66 36 57 4a 36 31 6d 53 62 72 68 Data Ascii: 18kCIRwQA_imet16g8kIQAwOKKQEkYGwCtjCdothLB6AhoaTSfuAcbsfU9wyl1Qh7tnGb2HlLcBYpXES7WummYXtZihabKN0HWmBvtjsdpm2RUUP9LSP1FDdJnE3yRJghmoiHBrXDGioT9Thnn9Oym7P8lgjdkadqqnux7twyMEZrK3BDK0qMo0pne7qVD4Z6iEnEAjhZ37PKBVmmBQ2LNMOc7ajj8nB8N7aOUe07NXhnLj2dzRRf6WJ61mSbrh
2024-04-24 12:32:48 UTC	1255	IN	Data Raw: 4f 38 57 41 6a 71 72 76 6e 38 4c 65 6d 4d 4b 70 46 51 47 72 2d 77 58 46 67 6f 44 75 44 39 64 64 5f 35 34 44 68 74 49 30 32 5a 57 64 49 36 4c 74 5a 74 4b 62 67 22 2c 6e 75 6c 6c 2c 36 30 30 2c 5b 22 70 6d 65 74 61 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 2f 6d 2f 30 31 39 39 67 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 34 5f 73 76 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 31 35 71 66 66 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 34 5f 73 76 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 31 6c 79 6e 68 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 5d 5d 5d 2c 22 6d 75 6c 74 69 63 61 70 74 63 68 61 22 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 Data Ascii: O8WAjqrvn8LemMKpFQGr-wXFgoDuD9dd_54DhtI02ZWdI6LtZtKbg",null,600,["pmeta",null,null,null,null,[[["/m/0199g",null,2,4,4],["/m/04_sv",null,2,4,4],["/m/015qff",null,2,4,4],["/m/04_sv",null,2,4,4],["/m/01lynh",null,2,4,4]]]],"multicaptcha",null,["bgdata","Ly93
2024-04-24 12:32:48 UTC	1255	IN	Data Raw: 6c 54 52 54 64 55 54 54 51 32 55 45 35 6c 53 46 52 70 61 45 30 7a 5a 55 49 77 61 45 68 4e 55 56 64 78 4e 44 5a 52 53 47 68 68 4c 33 6f 72 56 55 64 36 64 57 6f 31 4d 55 52 78 55 57 39 75 65 6e 4a 32 4e 6e 51 76 65 58 5a 6d 52 33 6b 79 4f 48 45 34 4d 6b 30 7a 4e 6c 45 33 4f 56 5a 30 55 43 74 46 5a 6e 52 79 65 6e 64 4b 65 48 6b 30 51 30 38 33 53 55 51 30 53 6d 31 52 4f 44 46 4f 53 7a 5a 4a 57 48 6c 48 65 55 46 6e 4f 48 68 4a 55 32 6c 5a 4d 6b 67 33 62 56 64 34 53 53 74 48 5a 33 42 68 4f 54 5a 4e 4d 6d 77 78 57 69 39 74 64 6b 70 6c 4f 58 68 5a 62 31 45 31 5a 31 6f 30 55 45 35 55 4e 45 49 77 4b 7a 52 56 5a 6e 42 49 4e 47 64 56 53 6e 56 31 57 46 5a 72 61 56 56 79 4e 57 52 6a 57 58 4a 30 53 45 49 76 4e 6a 56 52 52 46 64 4c 64 79 39 76 52 30 6c 56 64 6d 52 6f 52 Data Ascii: lTRTdUTTQ2UE5lSFRpaE0zZUIwaEhNUVdxNDZRSGhhL3orVUd6dWo1MURxUW9uenJ2NnQveXZmR3kyOHE4Mk0zNlE3OVZ0UCtFZnRyendKeHk0Q083SUQ0Sm1RODFOSzZJWHlHeUFnOHhJU2lZMkg3bVd4SStHZ3BhOTZNMmwxWi9tdkplOXhZb1E1Z1o0UE5UNEIwKzRVZnBINGdVSnV1WFZraVVyNWRjWXJ0SEIvNjVRRFdLdy9vR0lVdmRoR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50029	135.125.85.242	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:48 UTC	533	OUT	OPTIONS /ariadne/external-event HTTP/1.1 Host: ariadne.appvizer.one Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:48 UTC	271	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://www.signaturit.com Content-Length: 0 Date: Wed, 24 Apr 2024 12:32:48 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50030	135.125.85.242	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:48 UTC	533	OUT	OPTIONS /ariadne/external-event HTTP/1.1 Host: ariadne.appvizer.one Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:48 UTC	271	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://www.signaturit.com Content-Length: 0 Date: Wed, 24 Apr 2024 12:32:48 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50033	142.250.101.99	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:48 UTC	1391	OUT	GET /pagead/1p-user-list/984957836/?random=1713961965805&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1GtnD_OWmBYYYZ1_7sfhsEbgOrJTyw2a3vepm14Ea0IO1ue2&random=3038026455&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50034	142.250.72.228	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:48 UTC	1153	OUT	GET /pagead/1p-user-list/1018022215/?random=1713961964710&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v893375037za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq413nPGWpwkP_r56HRHl3GKpKlzNnqGV2jdcck_y7lGn7sDFg&random=818378193&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50041	141.193.213.20	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	2092	OUT	GET /wp-content/themes/signaturit/images/favicon.png HTTP/1.1 Host: www.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/en/legality/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; slireg=https://scout.us2.salesloft.com; sliguid=bb66a4db-f8d8-4594-ac91-0ef358c3712d; slirequested=true; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _gd_visitor=debda57b-e0dd-4674-85a9-d29d168ac8f0; _gd_session=f036755f-cdc3-4234-8b92-271a76fee068; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192
2024-04-24 12:32:49 UTC	519	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:49 GMT Content-Type: image/webp Content-Length: 362 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=969 Content-Disposition: inline; filename="favicon.webp" ETag: "6584632b-3c9" Last-Modified: Thu, 21 Dec 2023 16:09:15 GMT Vary: Accept CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961e468e9e09f3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:49 UTC	362	IN	Data Raw: 52 49 46 46 62 01 00 00 57 45 42 50 56 50 38 4c 55 01 00 00 2f 1f c0 07 10 c7 c2 a0 6d 23 49 c3 1f ee fd 37 33 4d 68 30 6c db 36 52 f6 1f f7 fe 4b 62 69 fe 0d a4 6d 13 fd f3 77 37 87 46 15 dd 53 94 19 94 04 4d 79 1e 80 5d 80 dd 94 6e 76 01 80 eb 0a e8 a6 9b dd 12 14 40 51 8e 23 05 48 f8 7f 12 92 80 19 94 5d 00 45 99 09 50 14 25 21 e1 ff 51 14 2d 21 41 e9 e6 fb d8 ed fb 50 94 5d 12 ba 03 14 00 48 98 41 51 34 40 01 12 00 a5 ca 57 b9 2a a9 55 ad 4a 55 aa 12 20 c8 b6 6d 3a fa 3b 46 db b6 6d db 4a e7 bc 78 fe 53 e1 bd 55 19 40 44 ff 27 20 aa 96 82 cc 43 a9 16 55 e4 5c 2b 79 95 82 57 50 6f bd 3f 5c 1d 9f 5a 5e 5f 5f 5f ff 34 b9 1d a2 fd 88 2c af 13 74 78 6a f1 97 83 fe cd f3 8d e6 a3 7f 8b 2b 18 f8 92 e7 0e 2c c9 75 0f 26 7c 1e 80 c5 67 0f 4d 02 b1 c1 85 b3 6f Data Ascii: RIFFbWEBPVP8LU/m#I73Mh0l6RKbimw7FSMy]nv@Q#H]EP%!Q-!AP]HAQ4@W*UJU m:;FmJxSU@D' CU\+yWPo?\Z^___4,txj+,u&\|gMo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50042	142.250.72.228	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	616	OUT	GET /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA
2024-04-24 12:32:49 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:32:49 GMT Expires: Wed, 24 Apr 2024 12:32:49 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:32:49 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 12:32:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50044	142.250.72.228	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	1153	OUT	GET /pagead/1p-user-list/984957836/?random=1713961965805&cv=11&fst=1713960000000&bg=ffffff&guid=ON&async=1&gtm=45be44m0v878652215za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20%7C%20Signaturit&did=dMWZhNz%2CdZTQ1Zm&gdid=dMWZhNz.dZTQ1Zm&npa=0&us_privacy=1---&pscdl=noapi&auid=1936675652.1713961949&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1GtnD_OWmBYYYZ1_7sfhsEbgOrJTyw2a3vepm14Ea0IO1ue2&random=3038026455&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:49 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:32:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50039	135.125.85.242	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	630	OUT	POST /ariadne/external-event HTTP/1.1 Host: ariadne.appvizer.one Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:49 UTC	186	OUT	Data Raw: 7b 22 69 64 22 3a 22 41 50 2d 32 37 32 30 39 22 2c 22 65 78 74 65 72 6e 61 6c 49 64 22 3a 31 37 31 33 39 36 31 39 36 33 35 35 37 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 34 54 31 32 3a 33 32 3a 34 36 2e 30 34 35 5a 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 74 22 3a 39 30 37 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 65 6e 2f 6c 65 67 61 6c 69 74 79 2f 22 7d 2c 22 65 76 65 6e 74 22 3a 22 76 69 73 69 74 22 7d Data Ascii: {"id":"AP-27209","externalId":1713961963557,"metadata":{"timestamp":"2024-04-24T12:32:46.045Z","width":1280,"height":907,"url":"https://www.signaturit.com/en/legality/"},"event":"visit"}
2024-04-24 12:32:50 UTC	223	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.signaturit.com Content-Length: 0 Content-Type: application/json Date: Wed, 24 Apr 2024 12:32:50 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50040	135.125.85.242	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	630	OUT	POST /ariadne/external-event HTTP/1.1 Host: ariadne.appvizer.one Connection: keep-alive Content-Length: 181 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://www.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:49 UTC	181	OUT	Data Raw: 7b 22 69 64 22 3a 22 41 50 2d 30 22 2c 22 65 78 74 65 72 6e 61 6c 49 64 22 3a 31 37 31 33 39 36 31 39 36 33 35 35 37 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 34 54 31 32 3a 33 32 3a 34 36 2e 30 34 34 5a 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 74 22 3a 39 30 37 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 65 6e 2f 6c 65 67 61 6c 69 74 79 2f 22 7d 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 7d Data Ascii: {"id":"AP-0","externalId":1713961963557,"metadata":{"timestamp":"2024-04-24T12:32:46.044Z","width":1280,"height":907,"url":"https://www.signaturit.com/en/legality/"},"event":"init"}
2024-04-24 12:32:50 UTC	223	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.signaturit.com Content-Length: 0 Content-Type: application/json Date: Wed, 24 Apr 2024 12:32:50 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50047	142.250.141.103	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	1186	OUT	GET /recaptcha/enterprise/payload?p=06AFcWeA5d-vJe2uMuWW9qFbA8rVEt5N5az5wb7Wb5EepBorcdDRatbyaI0R7xyTotWEjJXo253d46Ne6RBdWfhOOAsS5KOj2zTsq3rmlA40TgAv5Mmyl4_SMp3EdO6QwNjgTfXN4X-laqGSSbPALR-k_o9kKH_uBROZUUDWf3X-OtVAMvVcsV9OZsWmBo1xZpOJIPaOkUEf3E2uuzD1NLyURapwSjAgDE8A&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=es&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA
2024-04-24 12:32:50 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:32:49 GMT Date: Wed, 24 Apr 2024 12:32:49 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:50 UTC	6	IN	Data Raw: 41 35 43 46 0d 0a Data Ascii: A5CF
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: b7 0d c1 fa d1 8b 4d 59 9a e2 9b d0 e1 f4 59 24 82 26 65 03 01 70 d9 ad 1d 0a de 69 2e cc d1 0c 46 17 71 c9 f7 aa 57 96 86 d6 e5 a1 52 4a 83 f3 57 53 a0 e9 af 04 76 f2 17 dc 25 0c 1c 57 97 56 2f 73 39 ce 3c ba 9b 17 87 6a 44 7d aa 85 d3 e0 e3 3e f5 66 f5 b2 17 9e 17 8a cd bf 90 2b fe 95 34 a9 b6 71 c6 3c cf 42 6f bf df a9 c5 60 f8 89 fe cb 78 8c 91 80 08 cb 76 cd 6d c1 ba 06 06 6e 31 93 b4 fb d6 4e bf a8 c3 71 6e b6 a9 6b fb c4 18 2c c3 ad 7a f8 5a 2e 27 7d 2a 4e 3a b3 35 75 19 d8 79 81 41 55 e3 04 03 58 0f af 58 24 d2 24 d6 87 70 62 01 1d 2b a0 b3 88 b4 78 68 f8 27 a8 ae 32 ea d1 64 ba 99 94 ae 37 9e f5 dd 18 a6 74 4a 49 1b 56 5a 85 a4 c5 99 4b 6d ed 91 5d d7 84 ae 48 d1 de 4b 68 8b 03 21 ef c0 af 1d 96 e5 2d 5c 79 6d b8 83 d0 1e 33 5e 91 f0 d2 f0 c1 a1 Data Ascii: MYY$&epi.FqWRJWSv%WV/s9<jD}>f+4q<Bo`xvmn1Nqnk,zZ.'}*N:5uyAUXX$$pb+xh'2d7tJIVZKm]HKh!-\ym3^
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: 36 ff 00 ba 17 82 2a c5 b7 17 73 e7 93 e6 0e bf 4a c9 8f c9 24 6c da c3 1c 1a e9 75 04 82 36 85 a2 40 ac d1 86 73 ea 6b 87 11 a5 91 c7 8d 96 96 38 7b bc f9 f2 1e e5 8d 5d f0 fa 44 d7 11 3e 49 9b 79 07 3d 02 d6 5e a1 33 2d c3 28 fe f1 e6 b5 bc 33 6f 71 e7 47 33 c7 88 cb 94 19 ea 4e 2b 5a 11 b2 30 c3 2b b3 d1 63 8e 78 d6 d9 ed 24 45 46 20 37 cb c6 2b 3b 53 b3 b9 b8 95 ad 94 33 c8 ee 0e 40 e8 33 5d 0c 6b 10 d3 63 60 4a ec 01 80 1d cf 4a c6 9a ee e1 35 f8 ce 76 c2 53 0e 55 b0 6a ab a5 a1 d5 5e 37 69 1c be b9 a3 5c 25 a4 b3 46 25 77 17 26 3c 0e a4 60 73 5b 9a 64 52 5b db 5a c7 32 ba b4 51 90 fb b8 af 4c d3 34 ad 39 a2 8a 41 6a 09 c0 6c b1 dd 9f 7a d7 93 4d d3 66 8f 12 5a 44 73 d4 ed e4 d4 4f 0c aa d8 99 51 8b 47 88 87 69 cb 2a e7 a9 23 de a9 bc ac 03 05 52 d2 Data Ascii: 6sJ$lu6@sk8{]D>Iy=^3-(3oqG3N+Z0+cx$EF 7+;S3@3]kc`JJ5vSUj^7i\%F%w&<`s[dR[Z2QL49AjlzMfZDsOQGi#R
2024-04-24 12:32:50 UTC	333	IN	Data Raw: 84 28 62 0f 1d 29 b9 59 8d ab 9a 9e 14 ba 8e d3 c6 76 57 33 1c 22 cb 93 f9 54 d7 93 ad c5 fd ec d1 9f 95 ee 18 8f ce b2 0a 98 b5 b8 9a 4f 95 43 02 4f e1 57 ec 93 cd 69 31 c0 32 63 8f ad 68 a6 ac 67 cb a9 ea 7e 1c 50 df 14 b4 5c 0c 9f b0 8f e4 6b da a3 c8 03 35 e3 9e 10 8f fe 2e 96 8e 37 0c 0b 21 c9 3d 3e 5a f6 92 01 15 d1 19 68 8e 6a d1 d5 08 ec 40 52 05 5a f1 3f cb e0 cb a9 73 f7 2d de ab 28 35 6f c4 99 3e 0c b9 41 8c 9b 76 e0 d2 93 b2 d4 4b 63 e5 9b 9b 97 96 67 8e 3b 74 f5 c9 a9 2d 26 8c 7c f1 c4 8b 9e c7 d6 b4 db 4c 45 9c c8 84 90 fc 38 c7 4a 74 9a 50 8a 36 96 10 a5 40 cf 22 be 7a b6 22 3c cd 1e b4 26 d2 46 63 5c 40 92 c7 1a aa 46 49 03 e9 5d 16 a4 ea 23 84 9c 1f dd 81 90 3a 9a c7 d2 b4 8b cd 42 4d b1 41 e6 31 7c 2e 2b 77 53 d3 e7 b6 22 2b b0 ca aa 84 Data Ascii: (b)YvW3"TOCOWi12chg~P\k5.7!=>Zhj@RZ?s-(5o>AvKcg;t-&\|LE8JtP6@"z"<&Fc\@FI]#:BMA1\|.+wS"+
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: 73 5c c7 89 1e 68 f5 d6 4b 72 36 a8 2c 40 3c 9f 63 5d 6c 17 b6 b6 36 6b 69 2c 51 e5 d7 86 3d 57 9a e6 35 7d 32 eb 53 d7 5d ac dd 42 ba 70 e4 64 55 34 a5 f1 1d 73 8f 31 1e 93 f1 3b 50 d2 54 47 71 68 1c 21 db b4 b6 30 be d5 d1 5c 7c 5f 0b 65 15 c5 8d 84 6e 59 be 71 21 e9 c5 72 17 be 00 d5 ee 17 cf 92 e6 dd fe 5e e3 04 54 49 e1 0b db 2d 1e e3 7d bf 9f 14 79 72 eb c6 38 a1 41 47 44 c4 f4 3a 94 f8 df 72 50 89 34 58 49 07 a8 90 8c 8a 77 fc 2f 06 c6 7f b0 e1 1f f6 d4 d7 86 4b aa db 2b ba b0 97 83 c7 4a 88 6a 56 ec d9 0a fc fa 8a dd 53 d2 ec 8e 7b 9e f9 17 c6 ec 92 5f 46 88 0f 69 29 f1 fc 6a 2f 9f 2f 43 56 73 c0 1e 67 5a f2 1d 23 4e 37 f1 ab 2c b8 05 77 13 e9 5a 8f a6 26 8a c9 7f 3c ae f1 03 80 47 55 35 31 71 72 b3 62 73 68 f5 0b 2f 8b f3 4b 70 b0 be 87 b7 9c b1 Data Ascii: s\hKr6,@<c]l6ki,Q=W5}2S]BpdU4s1;PTGqh!0\\|_enYq!r^TI-}yr8AGD:rP4XIw/K+JjVS{_Fi)j//CVsgZ#N7,wZ&<GU51qrbsh/Kp
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: 71 0d a5 da e0 8f f9 e6 2a b4 9e 1f f0 ad 98 72 34 68 19 c7 fb 1d ea bd aa 7d 05 ec d9 f3 75 b6 eb eb 98 a0 92 40 a1 d8 2e e6 5e 95 d2 9d 15 74 a9 1a 21 30 b9 1c 36 e4 19 15 ea 33 f8 7f 48 bc 91 8c 1a 4c 20 67 20 6c c5 68 69 3e 1c b6 81 40 fb 10 8f dc 52 75 9d b4 0f 66 8f 3b d2 24 b8 bf f1 3d ad d5 b4 33 46 20 44 56 93 69 ed 5e f1 6d 79 6e d0 ab 19 02 e4 01 cf ad 65 da 59 c5 09 fd d2 20 cf 52 10 55 dd c0 28 8d 90 13 f4 aa 8e 22 51 64 54 a3 19 a2 69 af 6d a1 1b 9e 74 c0 ff 00 6a af 6a 8d f6 9f 0c 5c ba 48 36 b4 04 2f d2 b3 62 82 d9 d8 f9 90 c7 81 d8 ad 3a e4 03 13 40 80 88 19 71 b4 1e 2a e5 89 6d 59 99 7d 59 5b 43 ca e5 b6 61 0b 18 54 64 f5 ab da 16 9b 25 e3 ac 2d 1f c9 91 b9 8d 75 bf d9 5a 5c 0c a4 44 ea 47 1c 54 7e 42 42 8f e4 17 f9 ce 79 e3 15 e3 4b 0a Data Ascii: qr4h}u@.^t!063HL g lhi>@Ruf;$=3F DVi^myneY RU("QdTimtjj\H6/b:@qmY}Y[CaTd%-uZ\DGT~BByK
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: 29 20 51 f5 a6 43 d0 bb 75 75 10 38 2d 9d bd 31 d4 56 54 d2 c6 d2 33 6e 63 dc 54 17 5a 9d b9 63 97 4c d6 66 a5 a8 c2 20 df 1c ff 00 31 1d 14 d5 c6 2c 86 cb ff 00 68 f7 7a 2b 93 fe d3 b9 ff 00 9e cd 45 69 c8 c5 cc 8f 59 82 e6 5f 30 8f 41 8a 75 b2 31 df b9 b3 9a 9a 08 62 f2 15 f0 77 b0 cd 44 8e 50 b0 03 b5 71 1a dc bd 69 26 61 d8 4f 41 8a 7d c3 00 36 f0 71 fc ab 2a c6 52 b7 63 7b 61 5b d6 af 25 ca 34 f2 12 01 14 c0 ae e7 fd 20 1c 67 20 f1 55 62 50 25 91 98 e4 f4 fc 2a 39 e7 6f 30 30 e8 09 a7 29 24 f5 eb 40 68 32 e0 b0 ba 88 00 31 ef 5e 80 9f bc f0 6c 8a 71 9f 28 d7 07 26 d7 95 07 bf 5a ee 34 f2 4f 84 ee 46 78 5c 8f d2 ba b0 af 53 9b 13 f0 9c f6 94 54 58 a0 32 00 7d 33 8a b8 24 e3 00 67 de b2 74 f0 c6 15 3c 62 b4 22 60 07 35 15 be 36 69 4d de 28 99 64 20 e7 Data Ascii: ) QCuu8-1VT3ncTZcLf 1,hz+EiY_0Au1bwDPqi&aOA}6qRc{a[%4 g UbP%9o00)$@h21^lq(&Z4OFx\STX2}3$gt<b"`56iM(d
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: 67 39 ff 00 0a 4d dc 62 98 49 e4 d7 44 4c 6e 3f 79 f7 fc e8 a8 b7 1a 2a ae 23 e8 61 1f 96 bb 72 08 aa 57 5f 2c c7 68 a9 cb 30 3c 9c d4 0f 93 33 3b 1e 3b 57 94 ae 75 b4 67 dd c7 20 8f 79 ea a7 8c 55 ab 29 47 96 49 ea 46 0f 14 fb 9f 9d 42 80 3a 55 7b 63 b2 3c 1c 67 38 34 12 45 2b 0f 2d b6 af 7e 95 09 94 a4 64 77 a9 ae b1 b8 c8 bc 0c d5 09 9f e6 60 7e 94 c6 4f 04 e5 a4 53 e8 6b be b2 98 0f 09 c9 93 8d f9 fc f1 5e 77 6a 84 12 c7 a5 76 36 72 31 f0 cc 9c f1 82 7e 95 d3 86 5e f1 86 27 e0 28 69 db be ce a0 03 f5 ab 7e 53 b0 e0 d6 14 5a 85 dc 2d e4 c4 b1 32 91 fc 4d 83 57 61 bd bf 90 85 2b 0a 7b e6 95 65 69 32 a9 b5 ca 8b c2 d2 41 c9 62 6a 65 17 11 21 00 fc a4 74 c5 22 48 fe 5e 59 d1 8f 4e 0d 36 49 26 2a 06 56 b2 2f 52 b0 87 12 99 0e 79 39 23 34 6d 62 c4 e3 8a 9e Data Ascii: g9MbIDLn?y#arW_,h0<3;;Wug yU)GIFB:U{c<g84E+-~dw`~OSk^wjv6r1~^'(i~SZ-2MWa+{ei2Abje!t"H^YN6I&V/Ry9#4mb
2024-04-24 12:32:50 UTC	1255	IN	Data Raw: 2a ab c1 30 e1 e2 75 fc 2b 64 c8 d5 95 f0 28 a9 7c 93 fd d6 a2 9d d0 ac 7b d7 97 fb 90 73 d6 99 39 02 02 b8 e7 d6 a4 69 50 45 80 7e 5e d5 4e 49 0b 38 51 c8 af 31 3d 0e b6 28 c8 ea 3a 77 aa 31 c8 05 c3 a9 3c 76 fa d5 8b 89 76 a9 e7 a0 ac 86 90 f9 ca fd 89 a5 a8 ac 5e 9c ee 2c a3 a0 aa 52 2f 7e b5 3e e6 19 27 a1 a6 80 19 b6 8e 94 5c 76 b1 24 48 b1 c4 59 81 27 19 c7 a5 76 5e 0c 81 75 0f 06 5e 04 39 65 91 97 9f a5 71 37 92 94 b6 73 dc 8c 01 5d af c1 12 ed e1 5d 4c c9 ce 26 3f 87 15 d5 87 7d 4c 31 1a c5 a3 cb 3c 4d 23 45 a9 80 a4 fd de c6 b3 e3 bc 9c 1c ac 8f ff 00 7d 55 ef 14 7f c8 5d cb 74 62 4f eb 55 04 4a 14 6c 23 9a e8 a9 66 cc a9 3f 74 91 75 2b e0 30 97 52 8f c6 a6 8b 58 d5 50 f1 7a e4 fa 11 9a a8 13 1d 48 34 e5 51 9e a0 56 0e 09 9b 29 34 69 c5 e2 3d 65 Data Ascii: *0u+d(\|{s9iPE~^NI8Q1=(:w1<vv^,R/~>'\v$HY'v^u^9eq7s]]L&?}L1<M#E}U]tbOUJl#f?tu+0RXPzH4QV)4i=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50045	31.13.70.7	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:49 UTC	539	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:49 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 12:32:49 UTC	1500	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 12:32:49 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 12:32:50 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 12:32:50 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-24 12:32:50 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-24 12:32:50 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-24 12:32:50 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-24 12:32:50 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-24 12:32:50 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-24 12:32:50 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50053	141.193.213.21	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:50 UTC	1841	OUT	GET /wp-content/themes/signaturit/images/favicon.png HTTP/1.1 Host: www.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=X9yK9y4vl9pgAjbjz3Nu2Ev1X7xIxQromhlxml2kizE-1713961944-1.0.1.1-H94JSeYFPmrTiwy3.7DfGM7KYjXGlIrh4bm8AVFbC1qRKyppIbWYChlXy7sI749aptc39pIVsRJ5PXpZomt5CA; wp-wpml_current_language=en; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; slireg=https://scout.us2.salesloft.com; sliguid=bb66a4db-f8d8-4594-ac91-0ef358c3712d; slirequested=true; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _gd_visitor=debda57b-e0dd-4674-85a9-d29d168ac8f0; _gd_session=f036755f-cdc3-4234-8b92-271a76fee068; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192
2024-04-24 12:32:50 UTC	451	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:50 GMT Content-Type: image/png Content-Length: 644 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=969 ETag: "6584632b-3c9" Last-Modified: Thu, 21 Dec 2023 16:09:15 GMT Vary: Accept CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 87961e4d699a09f3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:50 UTC	644	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 0f 49 44 41 54 78 da ed 97 3d 4b c3 50 14 86 b3 aa 08 a2 f8 b1 08 22 8a 93 e0 a0 1d 1d 1c 9d 2a a8 6d dd 04 c1 0f 5c 54 1c ec 22 82 e0 26 88 fd 05 2a 0a 0e 4e 9d 4a 7f 40 29 85 66 6a 87 d2 a1 74 6e 0b 6d 3e ee 4d 9a be 26 97 7a 4b b0 5a 91 db 04 c1 c0 0b 81 84 9c 27 27 ef 39 27 47 72 8e 81 81 46 78 70 50 91 6d 99 b6 d0 5f b1 18 b2 1d 33 d4 0e ae 44 d8 05 1f c4 20 da 6f 0e 9f 24 4b 3c ed fe c8 74 00 e0 a7 fe 26 c0 ca 8a 86 fd 7d 82 ab 2b 8a 78 bc 89 97 17 13 37 37 06 a2 51 Data Ascii: PNGIHDR szzgAMAa cHRMz&u0`:pQ<IDATx=KP"m\T"&NJ@)fjtnm>M&zKZ''9'GrFxpPm_3D o$K<t&}+x77Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50057	31.13.70.7	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:50 UTC	1315	OUT	GET /signals/config/539386581403116?v=2.9.154&r=stable&domain=www.signaturit.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:51 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 12:32:51 UTC	1528	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 12:32:51 UTC	7	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 Data Ascii: /*** C
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 Data Ascii: opyright (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 Data Ascii: ))return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?S
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f Data Ascii: setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=functio
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 Data Ascii: ;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,targe
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 Data Ascii: ],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c Data Ascii: for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null
2024-04-24 12:32:51 UTC	169	IN	Data Raw: 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 Data Ascii: S=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=a
2024-04-24 12:32:51 UTC	1500	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 65 5b 67 5d 21 3d 3d 61 5b 67 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 7b 6b 65 79 3a 22 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 62 3d 41 72 72 61 79 28 61 29 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 62 5b 63 5d 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: rguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;for(var g=0;g<e.length;g++)if(e[g]!==a[g])return!0;return!1}},{key:"passesThrottle",value:function(){for(var a=arguments.length,b=Array(a),c=0;c<a;c++)b[c]=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50059	142.250.72.228	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:51 UTC	848	OUT	GET /recaptcha/enterprise/payload?p=06AFcWeA5d-vJe2uMuWW9qFbA8rVEt5N5az5wb7Wb5EepBorcdDRatbyaI0R7xyTotWEjJXo253d46Ne6RBdWfhOOAsS5KOj2zTsq3rmlA40TgAv5Mmyl4_SMp3EdO6QwNjgTfXN4X-laqGSSbPALR-k_o9kKH_uBROZUUDWf3X-OtVAMvVcsV9OZsWmBo1xZpOJIPaOkUEf3E2uuzD1NLyURapwSjAgDE8A&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6fiZaTZ-VkzXtT1QWIGVNisXyAd97RVKUGk0av7wL4JEgue7Sa3Vpr5y-yGHCyY699zw31kffGBA59ZClA
2024-04-24 12:32:51 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:32:51 GMT Date: Wed, 24 Apr 2024 12:32:51 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:32:51 UTC	6	IN	Data Raw: 41 35 43 46 0d 0a Data Ascii: A5CF
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: b7 0d c1 fa d1 8b 4d 59 9a e2 9b d0 e1 f4 59 24 82 26 65 03 01 70 d9 ad 1d 0a de 69 2e cc d1 0c 46 17 71 c9 f7 aa 57 96 86 d6 e5 a1 52 4a 83 f3 57 53 a0 e9 af 04 76 f2 17 dc 25 0c 1c 57 97 56 2f 73 39 ce 3c ba 9b 17 87 6a 44 7d aa 85 d3 e0 e3 3e f5 66 f5 b2 17 9e 17 8a cd bf 90 2b fe 95 34 a9 b6 71 c6 3c cf 42 6f bf df a9 c5 60 f8 89 fe cb 78 8c 91 80 08 cb 76 cd 6d c1 ba 06 06 6e 31 93 b4 fb d6 4e bf a8 c3 71 6e b6 a9 6b fb c4 18 2c c3 ad 7a f8 5a 2e 27 7d 2a 4e 3a b3 35 75 19 d8 79 81 41 55 e3 04 03 58 0f af 58 24 d2 24 d6 87 70 62 01 1d 2b a0 b3 88 b4 78 68 f8 27 a8 ae 32 ea d1 64 ba 99 94 ae 37 9e f5 dd 18 a6 74 4a 49 1b 56 5a 85 a4 c5 99 4b 6d ed 91 5d d7 84 ae 48 d1 de 4b 68 8b 03 21 ef c0 af 1d 96 e5 2d 5c 79 6d b8 83 d0 1e 33 5e 91 f0 d2 f0 c1 a1 Data Ascii: MYY$&epi.FqWRJWSv%WV/s9<jD}>f+4q<Bo`xvmn1Nqnk,zZ.'}*N:5uyAUXX$$pb+xh'2d7tJIVZKm]HKh!-\ym3^
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: 36 ff 00 ba 17 82 2a c5 b7 17 73 e7 93 e6 0e bf 4a c9 8f c9 24 6c da c3 1c 1a e9 75 04 82 36 85 a2 40 ac d1 86 73 ea 6b 87 11 a5 91 c7 8d 96 96 38 7b bc f9 f2 1e e5 8d 5d f0 fa 44 d7 11 3e 49 9b 79 07 3d 02 d6 5e a1 33 2d c3 28 fe f1 e6 b5 bc 33 6f 71 e7 47 33 c7 88 cb 94 19 ea 4e 2b 5a 11 b2 30 c3 2b b3 d1 63 8e 78 d6 d9 ed 24 45 46 20 37 cb c6 2b 3b 53 b3 b9 b8 95 ad 94 33 c8 ee 0e 40 e8 33 5d 0c 6b 10 d3 63 60 4a ec 01 80 1d cf 4a c6 9a ee e1 35 f8 ce 76 c2 53 0e 55 b0 6a ab a5 a1 d5 5e 37 69 1c be b9 a3 5c 25 a4 b3 46 25 77 17 26 3c 0e a4 60 73 5b 9a 64 52 5b db 5a c7 32 ba b4 51 90 fb b8 af 4c d3 34 ad 39 a2 8a 41 6a 09 c0 6c b1 dd 9f 7a d7 93 4d d3 66 8f 12 5a 44 73 d4 ed e4 d4 4f 0c aa d8 99 51 8b 47 88 87 69 cb 2a e7 a9 23 de a9 bc ac 03 05 52 d2 Data Ascii: 6sJ$lu6@sk8{]D>Iy=^3-(3oqG3N+Z0+cx$EF 7+;S3@3]kc`JJ5vSUj^7i\%F%w&<`s[dR[Z2QL49AjlzMfZDsOQGi#R
2024-04-24 12:32:51 UTC	333	IN	Data Raw: 84 28 62 0f 1d 29 b9 59 8d ab 9a 9e 14 ba 8e d3 c6 76 57 33 1c 22 cb 93 f9 54 d7 93 ad c5 fd ec d1 9f 95 ee 18 8f ce b2 0a 98 b5 b8 9a 4f 95 43 02 4f e1 57 ec 93 cd 69 31 c0 32 63 8f ad 68 a6 ac 67 cb a9 ea 7e 1c 50 df 14 b4 5c 0c 9f b0 8f e4 6b da a3 c8 03 35 e3 9e 10 8f fe 2e 96 8e 37 0c 0b 21 c9 3d 3e 5a f6 92 01 15 d1 19 68 8e 6a d1 d5 08 ec 40 52 05 5a f1 3f cb e0 cb a9 73 f7 2d de ab 28 35 6f c4 99 3e 0c b9 41 8c 9b 76 e0 d2 93 b2 d4 4b 63 e5 9b 9b 97 96 67 8e 3b 74 f5 c9 a9 2d 26 8c 7c f1 c4 8b 9e c7 d6 b4 db 4c 45 9c c8 84 90 fc 38 c7 4a 74 9a 50 8a 36 96 10 a5 40 cf 22 be 7a b6 22 3c cd 1e b4 26 d2 46 63 5c 40 92 c7 1a aa 46 49 03 e9 5d 16 a4 ea 23 84 9c 1f dd 81 90 3a 9a c7 d2 b4 8b cd 42 4d b1 41 e6 31 7c 2e 2b 77 53 d3 e7 b6 22 2b b0 ca aa 84 Data Ascii: (b)YvW3"TOCOWi12chg~P\k5.7!=>Zhj@RZ?s-(5o>AvKcg;t-&\|LE8JtP6@"z"<&Fc\@FI]#:BMA1\|.+wS"+
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: 73 5c c7 89 1e 68 f5 d6 4b 72 36 a8 2c 40 3c 9f 63 5d 6c 17 b6 b6 36 6b 69 2c 51 e5 d7 86 3d 57 9a e6 35 7d 32 eb 53 d7 5d ac dd 42 ba 70 e4 64 55 34 a5 f1 1d 73 8f 31 1e 93 f1 3b 50 d2 54 47 71 68 1c 21 db b4 b6 30 be d5 d1 5c 7c 5f 0b 65 15 c5 8d 84 6e 59 be 71 21 e9 c5 72 17 be 00 d5 ee 17 cf 92 e6 dd fe 5e e3 04 54 49 e1 0b db 2d 1e e3 7d bf 9f 14 79 72 eb c6 38 a1 41 47 44 c4 f4 3a 94 f8 df 72 50 89 34 58 49 07 a8 90 8c 8a 77 fc 2f 06 c6 7f b0 e1 1f f6 d4 d7 86 4b aa db 2b ba b0 97 83 c7 4a 88 6a 56 ec d9 0a fc fa 8a dd 53 d2 ec 8e 7b 9e f9 17 c6 ec 92 5f 46 88 0f 69 29 f1 fc 6a 2f 9f 2f 43 56 73 c0 1e 67 5a f2 1d 23 4e 37 f1 ab 2c b8 05 77 13 e9 5a 8f a6 26 8a c9 7f 3c ae f1 03 80 47 55 35 31 71 72 b3 62 73 68 f5 0b 2f 8b f3 4b 70 b0 be 87 b7 9c b1 Data Ascii: s\hKr6,@<c]l6ki,Q=W5}2S]BpdU4s1;PTGqh!0\\|_enYq!r^TI-}yr8AGD:rP4XIw/K+JjVS{_Fi)j//CVsgZ#N7,wZ&<GU51qrbsh/Kp
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: 71 0d a5 da e0 8f f9 e6 2a b4 9e 1f f0 ad 98 72 34 68 19 c7 fb 1d ea bd aa 7d 05 ec d9 f3 75 b6 eb eb 98 a0 92 40 a1 d8 2e e6 5e 95 d2 9d 15 74 a9 1a 21 30 b9 1c 36 e4 19 15 ea 33 f8 7f 48 bc 91 8c 1a 4c 20 67 20 6c c5 68 69 3e 1c b6 81 40 fb 10 8f dc 52 75 9d b4 0f 66 8f 3b d2 24 b8 bf f1 3d ad d5 b4 33 46 20 44 56 93 69 ed 5e f1 6d 79 6e d0 ab 19 02 e4 01 cf ad 65 da 59 c5 09 fd d2 20 cf 52 10 55 dd c0 28 8d 90 13 f4 aa 8e 22 51 64 54 a3 19 a2 69 af 6d a1 1b 9e 74 c0 ff 00 6a af 6a 8d f6 9f 0c 5c ba 48 36 b4 04 2f d2 b3 62 82 d9 d8 f9 90 c7 81 d8 ad 3a e4 03 13 40 80 88 19 71 b4 1e 2a e5 89 6d 59 99 7d 59 5b 43 ca e5 b6 61 0b 18 54 64 f5 ab da 16 9b 25 e3 ac 2d 1f c9 91 b9 8d 75 bf d9 5a 5c 0c a4 44 ea 47 1c 54 7e 42 42 8f e4 17 f9 ce 79 e3 15 e3 4b 0a Data Ascii: qr4h}u@.^t!063HL g lhi>@Ruf;$=3F DVi^myneY RU("QdTimtjj\H6/b:@qmY}Y[CaTd%-uZ\DGT~BByK
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: 29 20 51 f5 a6 43 d0 bb 75 75 10 38 2d 9d bd 31 d4 56 54 d2 c6 d2 33 6e 63 dc 54 17 5a 9d b9 63 97 4c d6 66 a5 a8 c2 20 df 1c ff 00 31 1d 14 d5 c6 2c 86 cb ff 00 68 f7 7a 2b 93 fe d3 b9 ff 00 9e cd 45 69 c8 c5 cc 8f 59 82 e6 5f 30 8f 41 8a 75 b2 31 df b9 b3 9a 9a 08 62 f2 15 f0 77 b0 cd 44 8e 50 b0 03 b5 71 1a dc bd 69 26 61 d8 4f 41 8a 7d c3 00 36 f0 71 fc ab 2a c6 52 b7 63 7b 61 5b d6 af 25 ca 34 f2 12 01 14 c0 ae e7 fd 20 1c 67 20 f1 55 62 50 25 91 98 e4 f4 fc 2a 39 e7 6f 30 30 e8 09 a7 29 24 f5 eb 40 68 32 e0 b0 ba 88 00 31 ef 5e 80 9f bc f0 6c 8a 71 9f 28 d7 07 26 d7 95 07 bf 5a ee 34 f2 4f 84 ee 46 78 5c 8f d2 ba b0 af 53 9b 13 f0 9c f6 94 54 58 a0 32 00 7d 33 8a b8 24 e3 00 67 de b2 74 f0 c6 15 3c 62 b4 22 60 07 35 15 be 36 69 4d de 28 99 64 20 e7 Data Ascii: ) QCuu8-1VT3ncTZcLf 1,hz+EiY_0Au1bwDPqi&aOA}6qRc{a[%4 g UbP%9o00)$@h21^lq(&Z4OFx\STX2}3$gt<b"`56iM(d
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: 67 39 ff 00 0a 4d dc 62 98 49 e4 d7 44 4c 6e 3f 79 f7 fc e8 a8 b7 1a 2a ae 23 e8 61 1f 96 bb 72 08 aa 57 5f 2c c7 68 a9 cb 30 3c 9c d4 0f 93 33 3b 1e 3b 57 94 ae 75 b4 67 dd c7 20 8f 79 ea a7 8c 55 ab 29 47 96 49 ea 46 0f 14 fb 9f 9d 42 80 3a 55 7b 63 b2 3c 1c 67 38 34 12 45 2b 0f 2d b6 af 7e 95 09 94 a4 64 77 a9 ae b1 b8 c8 bc 0c d5 09 9f e6 60 7e 94 c6 4f 04 e5 a4 53 e8 6b be b2 98 0f 09 c9 93 8d f9 fc f1 5e 77 6a 84 12 c7 a5 76 36 72 31 f0 cc 9c f1 82 7e 95 d3 86 5e f1 86 27 e0 28 69 db be ce a0 03 f5 ab 7e 53 b0 e0 d6 14 5a 85 dc 2d e4 c4 b1 32 91 fc 4d 83 57 61 bd bf 90 85 2b 0a 7b e6 95 65 69 32 a9 b5 ca 8b c2 d2 41 c9 62 6a 65 17 11 21 00 fc a4 74 c5 22 48 fe 5e 59 d1 8f 4e 0d 36 49 26 2a 06 56 b2 2f 52 b0 87 12 99 0e 79 39 23 34 6d 62 c4 e3 8a 9e Data Ascii: g9MbIDLn?y#arW_,h0<3;;Wug yU)GIFB:U{c<g84E+-~dw`~OSk^wjv6r1~^'(i~SZ-2MWa+{ei2Abje!t"H^YN6I&V/Ry9#4mb
2024-04-24 12:32:51 UTC	1255	IN	Data Raw: 2a ab c1 30 e1 e2 75 fc 2b 64 c8 d5 95 f0 28 a9 7c 93 fd d6 a2 9d d0 ac 7b d7 97 fb 90 73 d6 99 39 02 02 b8 e7 d6 a4 69 50 45 80 7e 5e d5 4e 49 0b 38 51 c8 af 31 3d 0e b6 28 c8 ea 3a 77 aa 31 c8 05 c3 a9 3c 76 fa d5 8b 89 76 a9 e7 a0 ac 86 90 f9 ca fd 89 a5 a8 ac 5e 9c ee 2c a3 a0 aa 52 2f 7e b5 3e e6 19 27 a1 a6 80 19 b6 8e 94 5c 76 b1 24 48 b1 c4 59 81 27 19 c7 a5 76 5e 0c 81 75 0f 06 5e 04 39 65 91 97 9f a5 71 37 92 94 b6 73 dc 8c 01 5d af c1 12 ed e1 5d 4c c9 ce 26 3f 87 15 d5 87 7d 4c 31 1a c5 a3 cb 3c 4d 23 45 a9 80 a4 fd de c6 b3 e3 bc 9c 1c ac 8f ff 00 7d 55 ef 14 7f c8 5d cb 74 62 4f eb 55 04 4a 14 6c 23 9a e8 a9 66 cc a9 3f 74 91 75 2b e0 30 97 52 8f c6 a6 8b 58 d5 50 f1 7a e4 fa 11 9a a8 13 1d 48 34 e5 51 9e a0 56 0e 09 9b 29 34 69 c5 e2 3d 65 Data Ascii: *0u+d(\|{s9iPE~^NI8Q1=(:w1<vv^,R/~>'\v$HY'v^u^9eq7s]]L&?}L1<M#E}U]tbOUJl#f?tu+0RXPzH4QV)4i=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50049	172.65.240.166	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:51 UTC	1192	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968228&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1 Host: track-eu1.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
2024-04-24 12:32:51 UTC	1297	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:51 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 87961e50da6e9eb9-CDG CF-Cache-Status: MISS Accept-Ranges: bytes Cache-Control: no-cache, no-store, no-transform Last-Modified: Wed, 24 Apr 2024 12:32:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin, Accept-Encoding Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: fra04/analytics-tracking-td/envoy-proxy-7986999587-fm6dk x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 612fa906-7c1b-406d-bed8-7db596f12c7a x-request-id: 612fa906-7c1b-406d-bed8-7db596f12c7a X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HlhmXUYL2Pa3k9bQI7M7mioLrl5IAk9RA12gBan5GJuFbPXNprzNJuMrISGTsj6yAcJayQ5BjR0P4kwc7RxHlV14rn4a5J%2B6%2B%2F14SH8ruWaKkbn6RGBYKi3SG3W9L8VQXid%2Fijb5Tw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:32:51 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50050	172.65.240.166	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:51 UTC	1279	OUT	GET /__ptq.gif?k=15&fi=88d35df0-d3c8-4847-a056-b715eb5386c3&fci=aa59ca84-71c6-4a21-83cf-0aee24a58c81&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968236&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1 Host: track-eu1.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
2024-04-24 12:32:51 UTC	1297	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:51 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 87961e50d8697018-CDG CF-Cache-Status: MISS Accept-Ranges: bytes Cache-Control: no-cache, no-store, no-transform Last-Modified: Wed, 24 Apr 2024 12:32:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin, Accept-Encoding Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 3 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: fra04/analytics-tracking-td/envoy-proxy-7986999587-cv87t x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 092780af-9324-4883-b04d-fe198045b100 x-request-id: 092780af-9324-4883-b04d-fe198045b100 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4yIesl%2BdAVoxBsPwgPdk%2B1krkAJCfSea5sKSOoBDJkWDazmNEY%2FVYiCZgHB3nUF610ck6trjdV3fES5pee%2FCOgkWMLqUGN7jxjrZhOZbhQveOctC57W7p3GHrvBbS9mC5KFtWFhog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:32:51 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50058	135.125.85.242	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:51 UTC	366	OUT	GET /ariadne/external-event HTTP/1.1 Host: ariadne.appvizer.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:51 UTC	110	IN	HTTP/1.1 405 Method Not Allowed Content-Length: 0 Date: Wed, 24 Apr 2024 12:32:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50063	157.240.11.35	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:52 UTC	902	OUT	GET /tr/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:52 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:32:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50062	157.240.11.35	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:52 UTC	994	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:52 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:32:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:32:52 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 12:32:52 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 12:32:52 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50061	135.125.85.242	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:52 UTC	366	OUT	GET /ariadne/external-event HTTP/1.1 Host: ariadne.appvizer.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:53 UTC	110	IN	HTTP/1.1 405 Method Not Allowed Content-Length: 0 Date: Wed, 24 Apr 2024 12:32:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50065	172.65.240.166	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:52 UTC	954	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968228&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1 Host: track-eu1.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
2024-04-24 12:32:53 UTC	1299	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:53 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 87961e5b6e21782f-CDG CF-Cache-Status: MISS Accept-Ranges: bytes Cache-Control: no-cache, no-store, no-transform Last-Modified: Wed, 24 Apr 2024 12:32:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin, Accept-Encoding Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: fra04/analytics-tracking-td/envoy-proxy-7986999587-wmt4v x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: c40af5c6-9eee-4386-ac70-f361680c0196 x-request-id: c40af5c6-9eee-4386-ac70-f361680c0196 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ivvU8JQR8HL26KRvoSa0icQ7B77ftTx9absRODpVtkNiV%2Fy2vr64jcQ6QNvzvZ0YRwORgJitS%2FwP9t1e0VXVwFoXgUFX8PWGp9FEpvZFDeCRoOtbdRjue1tEp%2FIH%2B%2Frm6qutswu91A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:32:53 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50064	172.65.240.166	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:52 UTC	1041	OUT	GET /__ptq.gif?k=15&fi=88d35df0-d3c8-4847-a056-b715eb5386c3&fci=aa59ca84-71c6-4a21-83cf-0aee24a58c81&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1976953477&v=1.1&a=143456774&pu=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&t=Page+not+found+%7C+Signaturit&cts=1713961968236&vi=b958b1819010205aeb2705c441237b34&nc=true&u=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1&b=77344330.1.1713961968192&cc=15 HTTP/1.1 Host: track-eu1.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=9T6jhP3O7NIz36J4QGRNiMNpNGLxbhTw7xW3U_VxUh4-1713961963-1.0.1.1-T0H39Xw3XoJe4Q0sXFon_TCOkiuGzEoALTZXZKUq.Fta8x_EtSlCRoKJtAQQbe9RycRQpv9668N_o9SqCXQROA; _cfuvid=5L70dgjJ52psr.uR8HX46eOuAfvrVNaYHPyUNunFozE-1713961963433-0.0.1.1-604800000
2024-04-24 12:32:53 UTC	1305	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:53 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 87961e5b78fa6980-CDG CF-Cache-Status: MISS Accept-Ranges: bytes Cache-Control: no-cache, no-store, no-transform Last-Modified: Wed, 24 Apr 2024 12:32:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin, Accept-Encoding Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 3 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: fra04/analytics-tracking-td/envoy-proxy-7986999587-cv87t x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 658224e6-0b47-472b-9749-b7fda5b6a3bc x-request-id: 658224e6-0b47-472b-9749-b7fda5b6a3bc X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8j%2Be%2FO6Gs8TtK4s0e8sOhxwwJzxsTFknTbZs%2FyYA3vQh5%2B7ZDcUhdUP98D%2BZAgFUsDEYAFlt%2B%2FCUtnavM3b3gmzfH8lr26KOk1IfeeM4SV7E70EBd%2BLwC1xANHtvrTPMgW8WQeaFFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:32:53 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50066	31.13.70.36	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:53 UTC	701	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:53 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:32:53 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:32:53 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50067	31.13.70.36	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:53 UTC	664	OUT	GET /tr/?id=539386581403116&ev=PageView&dl=https%3A%2F%2Fwww.signaturit.com%2Fen%2Flegality%2F&rl=&if=false&ts=1713961971012&sw=1280&sh=1024&ud[external_id]=b958b1819010205aeb2705c441237b34&v=2.9.154&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1713961971010.1958424249&ler=empty&cdl=API_unavailable&it=1713961969830&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:53 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:32:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50075	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:57 UTC	1745	OUT	GET /hc/en-us HTTP/1.1 Host: help.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249
2024-04-24 12:32:58 UTC	1075	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87961e7ba90f0a03-LAS CF-Cache-Status: MISS Cache-Control: max-age=0, public Content-Language: en-us Strict-Transport-Security: max-age=259200; includeSubDomains Vary: Accept-Encoding Protocol: HTTP/1.1 always x-frame-options: SAMEORIGIN x-runtime: 0.144382 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block x-zendesk-origin-server: app-server-6465d6d96-wczfw x-zendesk-processed-host-header: help.signaturit.com Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=10lHSJ5wM565OfutE3biB4RzJLNp386nvG1X8VeuOAIXVYeI6Hrg8v6Sp3YVjGztNogJMqwNPNRKdwcNRuRHtYI%2Bx78pwuyilWclIkqy83kQLjjK3dZa86PHIIuV49t8he13Vp0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; path=/; domain=.help.signaturit.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-24 12:32:58 UTC	294	IN	Data Raw: 33 31 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 21 2d 2d 20 76 32 34 34 34 36 20 2d 2d 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 61 74 75 72 69 74 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 0a 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 68 72 65 66 3d 22 68 74 Data Ascii: 313d<!DOCTYPE html><html dir="ltr" lang="en-US"><head> <meta charset="utf-8" /> ... v24446 --> <title>Signaturit</title> <link rel="canonical" href="https://help.signaturit.com/hc/en-us"><link rel="alternate" hreflang="en-us" href="ht
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 65 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 66 72 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 65 73 22 3e 0a 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 Data Ascii: ink rel="alternate" hreflang="es" href="https://help.signaturit.com/hc/es"><link rel="alternate" hreflang="fr" href="https://help.signaturit.com/hc/fr"><link rel="alternate" hreflang="x-default" href="https://help.signaturit.com/hc/es"> <link rel="st
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 71 75 65 72 69 65 73 20 2d 2d 3e 0a 3c 21 2d 2d 20 57 41 52 4e 49 4e 47 3a 20 52 65 73 70 6f 6e 64 2e 6a 73 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 69 66 20 79 6f 75 20 76 69 65 77 20 74 68 65 20 70 61 67 65 20 76 69 61 20 66 69 6c 65 3a 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 68 74 6d 6c 35 73 68 69 76 2f 33 2e 37 2e 32 2f 68 74 6d 6c 35 73 68 69 76 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 72 65 73 70 6f 6e 64 2f 31 2e 34 2e 32 2f 72 65 73 70 6f 6e 64 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 Data Ascii: queries -->... WARNING: Respond.js doesn't work if you view the page via file:-->...[if lt IE 9]><script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script><script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></scrip
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 30 39 30 35 37 37 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 27 29 2e 61 70 70 65 6e 64 28 27 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 62 72 69 65 66 63 61 73 65 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 24 28 27 23 34 34 31 36 39 35 37 32 35 37 37 34 35 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 27 29 2e 61 70 70 65 6e 64 28 27 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 66 69 6c 65 2d 70 65 6e 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 24 28 27 23 34 34 31 36 39 35 30 33 32 39 33 36 31 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 27 29 2e 61 70 70 65 6e 64 28 27 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 62 65 6c 6c 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 0a 0a 20 20 7d 29 3b 0a Data Ascii: 090577 .category-icon').append('<i class="fa-solid fa-briefcase"></i>'); $('#4416957257745 .category-icon').append('<i class="fa-solid fa-file-pen"></i>'); $('#4416950329361 .category-icon').append('<i class="fa-solid fa-bell"></i>'); });
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 20 20 20 20 3c 61 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 64 61 74 61 2d 61 75 74 68 2d 61 63 74 69 6f 6e 3d 22 73 69 67 6e 69 6e 22 20 74 69 74 6c 65 3d 22 4f 70 65 6e 73 20 61 20 64 69 61 6c 6f 67 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 2f 68 63 2f 65 6e 2d 75 73 2f 73 69 67 6e 69 6e 3f 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 25 32 46 68 63 25 32 46 65 6e 2d 75 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 0a 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 72 6f 70 Data Ascii: <a rel="nofollow" data-auth-action="signin" title="Opens a dialog" role="button" href="/hc/en-us/signin?return_to=https%3A%2F%2Fhelp.signaturit.com%2Fhc%2Fen-us"> Sign in </a> <div class="drop
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 61 76 22 3e 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 76 69 73 69 62 6c 65 5f 78 73 22 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 Data Ascii: av"> <li><a href=""></a></li> <li><a href=""></a></li> <li><a href=""></a></li> <li><a href=""></a></li> <li class="visible_xs"></li> <li class="
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 32 30 39 31 37 33 31 37 32 36 37 33 34 35 2d 53 65 6e 64 69 6e 67 2d 72 65 71 75 65 73 74 73 27 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 65 6e 64 69 6e 67 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 Data Ascii: 20917317267345-Sending-requests' class="blocks-item-link"> <span class="category-icon"></span> <span class="blocks-item-title"> Sending requests </span> <span clas
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 63 63 6f 75 6e 74 20 6d 61 6e 61 67 65 6d 65 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 3c 2f 73 Data Ascii: class="blocks-item-link"> <span class="category-icon"></span> <span class="blocks-item-title"> Account management </span> <span class="blocks-item-description"></s
2024-04-24 12:32:58 UTC	1369	IN	Data Raw: 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6e 74 65 67 72 61 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 73 2d 69 74 65 6d 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e Data Ascii: link"> <span class="category-icon"></span> <span class="blocks-item-title"> Integrations </span> <span class="blocks-item-description"></span> </a>
2024-04-24 12:32:58 UTC	1367	IN	Data Raw: 61 73 73 3d 22 66 6f 6f 74 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 5f 69 63 6f 6e 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 73 69 67 6e 61 74 75 72 69 74 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 62 20 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 22 3e 3c 2f 69 3e 3c Data Ascii: ass="footer text-center"> <div class="container"> <div class="social_icons"> <ul class="social"> <li><a href="https://www.facebook.com/signaturit" target="_blank"><i class="fab fa-facebook-f"></i><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50077	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:59 UTC	594	OUT	GET /hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:59 UTC	1120	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:59 GMT Content-Type: text/css Content-Length: 50929 Connection: close x-amz-id-2: azZWrV0nGF0ymC6LOGV5yqRSHZyhlFwhxNGkLz78VBH2lMtxEEjGKwSfL/gK/FHvpl+OktV9/0/ipYtQmEY+Kg== x-amz-request-id: K2S486SFDK66G45T x-amz-replication-status: COMPLETED Last-Modified: Wed, 24 Apr 2024 09:07:05 GMT ETag: "04f3a41483e9dfe36d52404867dc1527" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: zYvfqLavK.uLPcXY_fQfhYD.TPZyjDwg CF-Cache-Status: HIT Age: 10862 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XpHIC7fKIugJPbfDoihWvjaREhci%2BxpEht%2BuWJO2fxxNJZkZAanfxfvI3IyAN05vAtPrm5r0YHNsJF4IPfZu30Nq6QDHht0vLqR57CyYRphnIeWEwE0Q1VPz1f805kHuhV1%2FKNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e830ea90ad3-LAS
2024-04-24 12:32:59 UTC	249	IN	Data Raw: 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 72 67 69 6e 3a 2e 39 65 6d 20 61 75 74 6f 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 5b 64 69 72 3d 6c 74 72 5d 20 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 74 61 62 6c 65 20 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 5b 64 69 72 3d 72 74 6c 5d 20 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 74 61 62 6c 65 20 74 68 7b 74 65 78 74 2d 61 6c 69 67 Data Ascii: figure.wysiwyg-table{display:table;margin:.9em auto}figure.wysiwyg-table table{border-collapse:collapse;border-spacing:0;height:100%;width:100%}[dir=ltr] figure.wysiwyg-table table th{text-align:left}[dir=rtl] figure.wysiwyg-table table th{text-alig
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 6e 3a 72 69 67 68 74 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 61 70 74 69 6f 6e 2d 73 69 64 65 3a 74 6f 70 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 61 70 74 69 6f 6e 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 74 61 62 6c 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 2d 72 65 73 69 7a 65 64 7b 74 61 62 6c 65 2d 6c 61 79 6f 75 74 3a 66 69 78 65 64 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 6d 65 64 69 61 7b 6d 61 72 67 69 6e 3a 30 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e Data Ascii: n:right}figure.wysiwyg-table figcaption{caption-side:top;display:table-caption;padding:4px;text-align:center;word-break:break-word}table.wysiwyg-table-resized{table-layout:fixed}figure.wysiwyg-media{margin:0}figure.wysiwyg-image{background:none;border:non
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 65 6d 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 61 6c 69 67 6e 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 65 6d 7d 5b 64 69 72 3d 22 6c 74 72 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 5b 64 69 72 3d 22 6c 74 72 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 Data Ascii: d{margin-left:1.5em}[dir="rtl"] .wysiwyg-image-align-end{margin-right:1.5em}[dir="ltr"] .wysiwyg-image-block-end{margin-right:0}[dir="rtl"] .wysiwyg-image-block-end{margin-left:0}[dir="ltr"] .wysiwyg-image-block-end{margin-left:auto}[dir="rtl"] .wysiwyg-i
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 30 7b 63 6f 6c 6f 72 3a 23 65 36 65 36 65 36 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 72 65 64 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 6f 72 61 6e 67 65 7b 63 6f 6c 6f 72 3a 23 66 39 30 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 7b 63 6f 6c 6f 72 3a 23 66 66 30 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 67 72 65 65 6e 7b 63 6f 6c 6f 72 3a 6c 69 6d 65 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 63 79 61 6e 7b 63 6f 6c 6f 72 3a 61 71 75 61 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 7b 63 6f 6c 6f 72 3a 62 6c 75 65 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 7b 63 6f 6c 6f 72 3a 23 39 30 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 69 Data Ascii: 0{color:#e6e6e6}.wysiwyg-color-red{color:red}.wysiwyg-color-orange{color:#f90}.wysiwyg-color-yellow{color:#ff0}.wysiwyg-color-green{color:lime}.wysiwyg-color-cyan{color:aqua}.wysiwyg-color-blue{color:blue}.wysiwyg-color-purple{color:#90f}.wysiwyg-color-pi
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 30 7b 63 6f 6c 6f 72 3a 23 36 36 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 37 30 7b 63 6f 6c 6f 72 3a 23 39 39 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 31 31 30 7b 63 6f 6c 6f 72 3a 23 30 30 63 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 31 32 30 7b 63 6f 6c 6f 72 3a 23 30 30 39 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 31 33 30 7b 63 6f 6c 6f 72 3a 23 30 30 36 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 39 30 7b 63 6f 6c 6f 72 3a 23 61 64 33 33 66 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 38 30 7b 63 6f 6c 6f 72 3a 23 63 32 36 36 66 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 37 30 7b 63 6f 6c 6f 72 3a 23 Data Ascii: 0{color:#66f}.wysiwyg-color-blue70{color:#99f}.wysiwyg-color-blue110{color:#00c}.wysiwyg-color-blue120{color:#009}.wysiwyg-color-blue130{color:#006}.wysiwyg-color-purple90{color:#ad33ff}.wysiwyg-color-purple80{color:#c266ff}.wysiwyg-color-purple70{color:#
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 37 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 Data Ascii: wysiwyg-indent5{padding-left:50px}[dir=rtl] .wysiwyg-indent5{padding-left:auto;padding-right:50px}.wysiwyg-indent6{padding-left:60px}[dir=rtl] .wysiwyg-indent6{padding-left:auto;padding-right:60px}.wysiwyg-indent7{padding-left:70px}[dir=rtl] .wysiwyg-inde
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 69 77 79 67 2d 69 6e 64 65 6e 74 31 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 38 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 31 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 39 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 31 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 39 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 32 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 32 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 30 Data Ascii: iwyg-indent18{padding-left:auto;padding-right:180px}.wysiwyg-indent19{padding-left:190px}[dir=rtl] .wysiwyg-indent19{padding-left:auto;padding-right:190px}.wysiwyg-indent20{padding-left:200px}[dir=rtl] .wysiwyg-indent20{padding-left:auto;padding-right:200
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 33 66 33 7d 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6d 75 6c 74 69 62 72 61 6e 64 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 34 70 78 7d 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6d 75 6c 74 69 62 72 61 6e 64 20 65 6d 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6d 75 6c 74 69 62 72 61 6e 64 20 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 74 69 74 6c 65 2d 6d 75 6c 74 69 62 72 61 6e 64 7b 63 6f 6c 6f Data Ascii: ]{background-color:#f3f3f3}zd-autocomplete-multibrand:last-child{border-bottom-left-radius:4px;border-bottom-right-radius:4px}zd-autocomplete-multibrand em{font-style:normal;font-weight:bold}zd-autocomplete-multibrand zd-autocomplete-title-multibrand{colo
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 2d 70 69 6c 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 5d 20 6c 69 5b 64 61 74 61 2d 68 63 2d 70 69 6c 6c 3d 74 72 75 65 5d 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 3b 6d 61 72 67 69 6e 3a 32 2e 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 32 66 32 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 75 6c 5b 64 61 74 61 2d 68 63 2d 70 69 6c 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 5d 20 6c 69 5b 64 61 74 61 2d 68 63 2d 70 69 6c 6c 3d 74 72 75 65 5d 5b 61 72 69 61 2d 69 6e 76 61 6c 69 64 3d 74 72 75 65 5d 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 33 Data Ascii: -pills-container] li[data-hc-pill=true]{height:25px;line-height:23px;margin:2.5px;background-color:#f2f2f2;cursor:default;border:1px solid #f2f2f2;border-radius:2px}ul[data-hc-pills-container] li[data-hc-pill=true][aria-invalid=true]{border:1px solid #e03
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 31 31 31 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 74 77 68 6f 2d 76 69 65 77 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 61 74 77 68 6f 2d 76 69 65 77 20 75 6c 20 Data Ascii: te;top:0;left:0;display:none;margin-top:18px;background:#fff;color:#000;border:1px solid #ddd;border-radius:3px;box-shadow:0 0 5px rgba(0,0,0,.1);min-width:120px;z-index:11110 !important}.atwho-view ul{list-style:none;padding:0;margin:auto}.atwho-view ul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50079	104.17.24.14	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:59 UTC	559	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:59 UTC	951	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 14 Apr 2025 12:32:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lgifWJmYuXXA4SVb2M%2BHbXOkkWEHMspASa6jkblbk35RuDixLqbndUHljuqtGSGO%2BEfnZ3qG9E4MSzklJdwnQiIKsC9LpUll223gcpegzhkMwJ%2BYZ5Dk9csWj61j9%2F22EfwKud%2FY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87961e830b2909f5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:32:59 UTC	418	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bfa/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 Data Ascii: ,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeT
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 Data Ascii: tion(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStac
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b Data Ascii: ,r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c Data Ascii: (?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.*)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 Data Ascii: :"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?funct
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 Data Ascii: urn function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f Data Ascii: .ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(functio
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 Data Ascii: )if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c Data Ascii: input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50081	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:32:59 UTC	596	OUT	GET /hc/theming_assets/708839/550881/style.css?digest=15992025776401 HTTP/1.1 Host: p17.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:32:59 UTC	872	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:32:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ua-compatible: IE=edge cache-control: max-age=604800, public x-zendesk-processed-host-header: p17.zdassets.com strict-transport-security: max-age=0 x-zendesk-origin-server: app-server-7f8b8ccff-5tzld etag: W/"21207ce70183b4b9f89eb9f396c7fcb0" x-request-id: 866806d74d00292d-LHR x-runtime: 0.014709 Protocol: HTTP/1.1 always CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aWPkTD81r57ArJ50XQ6ye7LS%2FIrIRznYE0v3YbjzApeP0ZIcn3dEs4Zv%2Bf9607ijiXa1uIO76HKE8eT72DrheEFn3FLXQmTyBowS1n2KPCLrJb9JgOeF4I2j4QiPUkpPCyk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961e831cbc09f1-LAS
2024-04-24 12:32:59 UTC	497	IN	Data Raw: 37 63 33 39 0d 0a 2f 2a 0a 20 2a 20 54 68 65 6d 65 20 4e 61 6d 65 3a 20 56 65 72 74 69 6f 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 38 0a 20 2a 20 41 75 74 68 6f 72 3a 20 43 75 73 74 6f 6d 65 72 20 53 75 70 70 6f 72 74 20 54 68 65 6d 65 20 28 47 72 6f 77 20 53 68 69 6e 65 20 53 65 72 76 69 63 65 73 20 50 76 74 2e 20 4c 74 64 29 0a 20 2a 20 44 6f 77 6e 6c 6f 61 64 20 46 72 6f 6d 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 75 73 74 6f 6d 65 72 73 75 70 70 6f 72 74 74 68 65 6d 65 2e 63 6f 6d 0a 20 2a 20 43 6f 72 70 6f 72 61 74 65 20 57 65 62 73 69 74 65 20 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 6f 77 2d 73 68 69 6e 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 59 6f 75 20 6d 75 73 74 20 68 61 76 65 20 61 20 76 61 6c 69 64 20 6c 69 Data Ascii: 7c39/* * Theme Name: Vertio * Version: 4.0.8 * Author: Customer Support Theme (Grow Shine Services Pvt. Ltd) * Download From: https://www.customersupporttheme.com * Corporate Website : https://www.grow-shine.com * License: You must have a valid li
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 0a 68 74 6d 6c 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 6d 61 69 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 2e 36 37 65 6d 20 30 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 Data Ascii: lize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css */html { line-height: 1.15; -webkit-text-size-adjust: 100%;}body { margin: 0;}main { display: block;}h1 { font-size: 2em; margin: 0.67em 0;}hr { box-sizing: conte
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 67 3a 20 30 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 0a 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 0a 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 0a 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 2e 69 73 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 63 64 38 31 32 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 65 33 66 33 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: g: 0;}button:-moz-focusring,[type="button"]:-moz-focusring,[type="reset"]:-moz-focusring,[type="submit"]:-moz-focusring { outline: 1px dotted ButtonText;}.button.is-info { background-color: #fcd812 !important; color: #1e3f3f; font-s
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 69 61 6c 69 61 73 65 64 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 62 6f 64 79 20 3e 20 6d 61 69 6e 20 7b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 35 76 68 3b 0a 20 20 7d 0a 7d 0a 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 64 65 72 61 74 27 2c 68 65 6c 76 65 74 69 63 61 72 6f 6d 61 6e 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 44 33 44 33 46 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 0a 7d 0a 0a Data Ascii: ialiased;}@media (min-width: 1024px) { body > main { min-height: 65vh; }}h1, h2, h3, h4, h5, h6 { font-family: 'Moderat',helveticaroman,Arial,sans-serif; font-weight: 400; margin-top: 0; color: #1D3D3F;}h1 { font-size: 32px;}
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 65 63 74 3a 3a 2d 6d 73 2d 65 78 70 61 6e 64 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 72 65 73 69 7a 65 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 0a 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 35 37 2c 20 32 32 30 2c 20 31 31 35 2c 20 31 29 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 Data Ascii: ect::-ms-expand { display: none;}textarea { border: 1px solid #ddd; border-radius: 3px; resize: vertical; width: 100%; outline: none; padding: 10px;}textarea:focus { border: 1px solid rgba(57, 220, 115, 1);}.container { max-widt
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 6c 6f 77 20 62 75 74 74 6f 6e 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 6c 69 6e 6b 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 61 73 74 2d 6c 69 6e 6b 2c 20 2e 65 64 69 74 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 61 2c 20 2e 68 63 5f 5f 62 74 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 35 Data Ascii: low button, .requests-table-toolbar .organization-subscribe button, .subscriptions-subscribe button, .pagination-next-link, .pagination-prev-link, .pagination-first-link, .pagination-last-link, .edit-profile-button a, .hc__btn { background-color: rgba(5
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 61 73 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 65 64 69 74 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 61 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 20 2e 61 72 74 69 63 6c 65 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 20 2e 63 6f 6d 6d 75 6e 69 74 79 2d 66 6f 6c 6c 6f 77 20 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 3a 61 63 74 Data Ascii: on-first-link:hover, .pagination-last-link:hover, .edit-profile-button a:hover, .button:active, .section-subscribe button:active, .article-subscribe button:active, .community-follow button:active, .requests-table-toolbar .organization-subscribe button:act
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 61 73 74 2d 6c 69 6e 6b 2c 20 2e 65 64 69 74 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 61 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 35 37 2c 20 32 32 30 2c 20 31 31 35 2c 20 31 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 29 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d Data Ascii: ination-prev-link, .button-primary.pagination-first-link, .button-primary.pagination-last-link, .edit-profile-button a.button-primary { background-color: rgba(57, 220, 115, 1); color: rgba(255, 255, 255, 1); text-decoration: none;}.button.button-
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 6d 61 72 79 3a 66 6f 63 75 73 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 3a 66 6f 63 75 73 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 3a 66 6f 63 75 73 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 Data Ascii: mary:focus, .requests-table-toolbar .organization-subscribe button[data-selected="true"]:focus, .subscriptions-subscribe button.button-primary:focus, .subscriptions-subscribe button[data-selected="true"]:focus, .button-primary.pagination-next-link:focus,
2024-04-24 12:32:59 UTC	1369	IN	Data Raw: 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 64 69 73 61 62 6c 65 64 5d 2c 20 2e 63 6f 6d 6d 75 6e 69 74 79 2d 66 6f 6c 6c 6f 77 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 64 69 73 61 62 6c 65 64 5d 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 64 69 73 61 62 6c 65 64 5d 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 64 69 73 61 62 6c 65 64 5d 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 6c 69 6e 6b 5b 64 61 74 61 2d 64 69 73 61 62 6c 65 64 5d 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 5b 64 61 74 61 2d 64 69 73 61 Data Ascii: be button[data-disabled], .community-follow button[data-disabled], .requests-table-toolbar .organization-subscribe button[data-disabled], .subscriptions-subscribe button[data-disabled], .pagination-next-link[data-disabled], .pagination-prev-link[data-disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50083	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:00 UTC	561	OUT	GET /hc/assets/en-us.05a4d042de4a0bd7e0e4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50085	104.18.70.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:00 UTC	642	OUT	GET /theme_assets/708839/7248320f1e80605a0d15a4cf8f811be0b619bd68.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://p17.zdassets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:00 UTC	1223	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:00 GMT Content-Type: image/png Content-Length: 120606 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Wed, 15 Jun 2022 09:51:59 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: pbI7_0LjoLXIOtXKq3opFMVGaKHIvJjq Cache-Control: public, max-age=86400 ETag: "ddb977c29b7967e7402e8ef0cbe86120" Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 332ef4544bd8b531e8f11abaa4197c08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: F5bkZsoMtpXSgVpJsoNZuGLhhkpkYhGngr5jyO_SFB9WEESz1qMz3w== CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H6VvCqJi9azEPaGVygzoskYh7qn8SFhTGdMbZfBgLNSuJw6zfQUA%2BiuqSaD0IkqPMAeaUH1xw4IsVTDN%2F5KokkpeNcxOgoThp05Zcl0CQMt%2BKGIAlXEwdbO5W00KW47f3965jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961e89eb410a01-LAS
2024-04-24 12:33:00 UTC	146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 f2 00 00 01 ce 08 06 00 00 01 4c 42 02 51 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec bd e7 b2 2c 39 8e 26 08 7a a8 73 45 ea cc aa ea 12 d9 d3 6b b6 b3 66 fb 14 63 d6 ef ff 73 c7 ac 6d 76 6d ba ba b2 74 55 ca ab 42 39 d7 e8 4e 90 1f 40 90 ee 1e 27 e2 5c 91 87 dd 95 f7 84 53 0b 00 1f 40 01 f7 f5 bf ff 0f 4f b5 e0 ca ef c3 27 e7 Data Ascii: PNGIHDRLBQpHYs~ IDATx,9&zsEkfcsmvmtUB9N@'\S@O'
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 8c 8f f2 df cd 76 45 c7 63 9f 7e 8b 7c 0e d3 ba f4 3b fc b3 5e 77 14 1a 74 f6 3e c5 0d d9 c2 7f 3a 22 ea 1c b9 95 23 5a b9 e1 d3 ee ff fe 38 fe ed a0 1e 1a 7f 87 92 3c ff 2d 9b 18 22 1c e5 34 22 1e 47 c4 e7 78 e7 21 af fe e6 c7 6f 79 28 62 dd 5c 5e 88 8f 7f 8b 38 2e 0b be 8b 34 de a7 f2 4f 2f 7b da 3c ed d2 b7 1c 37 a6 1f db e2 c7 fe 7a f8 cd 69 7d fe 7b 18 eb d4 51 63 a2 ad 38 4f d0 11 1e 54 b5 7c 86 89 df 9f c5 22 f1 69 c0 75 65 b1 c3 ce d1 7a d3 91 ef 3d 9d 53 bd 7e 98 70 1f 27 c9 9d 63 f2 d0 d9 de 93 5f 39 da ff cf 1f 87 05 b1 fd ef cf c9 ad 3a 18 fd 38 40 61 1c 1c a5 c1 4e 45 87 ef 24 07 4f 74 45 4d 1c e5 7f a0 e9 b0 70 3c e4 ae 2c 1e 1e 37 cf 69 ab 8b 6c 6c d9 f0 af 27 3a be ea 87 bf c3 c4 53 8c b3 d2 a7 06 f6 dc 59 ae 4f b5 2b fe bb 56 b3 43 c5 dc Data Ascii: vEc~\|;^wt>:"#Z8<-"4"Gx!oy(b\^8.4O/{<7zi}{Qc8OT\|"iuez=S~p'c_9:8@aNE$OtEMp<,7ill':SYO+VC
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 83 3c c1 0e 0d 4b 62 42 7d d9 98 e2 9b e4 14 eb d1 08 60 cc f4 24 c5 d7 06 42 8a 84 ed 47 1b 3a fc 74 9c 5d 56 75 11 60 f9 69 94 c0 0e 60 2c 82 aa 38 08 49 8e 7e 44 ff 7d 34 07 06 ad 61 dd 8d 94 e8 b2 59 78 18 f8 0e 34 11 10 09 dc 0e 27 7f 0e dc 23 25 61 60 47 79 21 bb b3 a3 3e d4 d7 cb ef c8 de 93 5d 20 c9 6e 2c d3 13 2e 36 5f 4c 76 65 31 90 14 45 6b aa c9 df c6 04 e1 f7 ed c7 6a 72 31 ee a3 35 1d 7e 3c 2c b3 19 cc 5d 04 e9 83 93 e9 f5 22 18 40 1f 49 71 10 85 f4 b0 f0 bb 68 36 0d 13 df 9f 89 56 bc 00 80 dc 19 10 76 40 90 02 00 28 14 08 8b 42 ee 2b 78 ea 06 6b 64 3f b2 7a ec 87 02 79 b2 44 7b 11 c8 7c 1e e8 ce 67 6c 01 0b 30 e1 98 58 96 60 fb 62 75 b5 b8 41 8d 7a 21 6e 58 14 3f 1e 65 6d 3a a3 55 de c5 9c 60 9c 1c 96 6f 19 13 80 a1 c8 47 4c 40 6c a9 61 84 Data Ascii: <KbB}`$BG:t]Vu`i`,8I~D}4aYx4'#%a`Gy!>] n,.6_Lve1Ekjr15~<,]"@Iqh6Vv@(B+xkd?zyD{\|gl0X`buAz!nX?em:U`oGL@la
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 48 df 44 fe a4 1a ba 4c 90 70 f8 98 04 f8 83 33 85 5a 02 40 33 c5 16 6e d2 22 61 81 04 36 1f b0 c9 4f 87 bc 9b 29 e0 41 5e 24 d5 c9 0f 1b 1b 41 8f df ff 5d 51 f9 2d 67 3f 86 8b 00 e2 d4 22 a0 0a 2e 20 35 ba fc 67 fa 56 e7 04 db 2f a2 d6 03 82 39 81 3c 60 f3 14 d5 41 81 c9 90 7d 5b 13 0e 5a 00 6e c7 8a e6 03 e6 19 d6 de c7 5b ea 5f ec 13 64 29 ef 1f a0 da 59 91 f9 0c e8 8a 89 0f 46 ae 63 6f e4 b8 5d 58 cc 0d 9a 78 a1 c1 0d 66 80 43 53 4d ec 35 38 64 85 c1 67 83 10 6b 05 04 d4 8a 94 8f 0b 00 af 79 39 4b f6 73 b3 e0 60 4a c0 1d 9f 6c a9 ff 61 5f ac d1 bc ae 01 d7 d4 64 fe ee ab 3b 3a fe 78 a0 7e 6f 4f f2 51 db ef 1f 28 dc 8b 1b 14 df 0d 6e 30 83 a3 20 48 0d e2 f0 f0 cf 43 4e 23 b4 80 71 56 71 93 27 61 04 b4 bf c0 ef 42 fd 73 19 ba 68 d0 97 16 41 cc 10 ee 24 Data Ascii: HDLp3Z@3n"a6O)A^$A]Q-g?". 5gV/9<`A}[Zn[_d)YFco]XxfCSM58dgky9Ks`Jla_d;:x~oOQ(n0 HCN#qVq'aBshA$
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 9d e3 7f d4 0d 1f f8 c1 00 d4 fd f6 f9 e5 93 1f 0e 1a 7c d0 d4 8f 03 16 bc 77 b1 5c ff cf f7 67 b1 5b 0b a5 fb cd b3 f1 71 c9 6f 7e ba 1f e0 0b 03 b1 fb 6f cf de ab 01 59 12 ee 3b e9 b5 a3 01 0f 16 54 fd dd ef 9e 53 ff cd 8b f4 ac e0 fd d1 7e b0 11 df ad 46 4e f0 81 84 c0 de 43 bf b6 bf 7d f2 70 0b fb 0a 0b c5 15 7f 8c 61 f5 f5 b3 11 4c fe e1 45 8c 8a 27 7c aa 1e 35 2b 8d 71 d6 fe a3 e2 2f 1b f6 98 05 df 1d 67 d6 08 84 a4 d7 cc cd ca d1 91 2f 3f c6 d7 ae 1d ff 3d 78 d3 04 af 9a 9d 1b 3c 6a 72 de 24 cf 1c ca 3f 27 9b 99 0c 24 f8 a4 69 0c fa f4 0b d8 d3 51 53 92 9e 2f 29 df d8 49 e9 c0 9f 9d cf fb ee 0e e3 f1 bb d7 65 60 bd e3 1f a7 17 e7 e1 ea f5 e6 ae 83 7c 70 6e 8f a4 07 4d 8e 17 71 e0 51 73 3d db c8 00 63 21 9e 37 d3 83 c7 bf bd 2c d8 73 03 8a ca 3c 0f Data Ascii: \|w\g[qo~oY;TS~FNC}paLE'\|5+q/g/?=x<jr$?'$iQS/)Ie`\|pnMqQs=c!7,s<
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: d2 08 c4 62 81 a2 ec 1f fc e2 9e 3d b9 d3 b8 00 06 3c e0 d0 3b 56 6c 0f c8 7f fe 53 3c 90 80 13 2c 38 01 9a 53 a1 1f 48 89 9d 72 a3 9e e6 4a 6d b3 c2 75 30 40 23 f9 1f 6d c0 d1 8d 32 be 35 fc e1 cb c9 a9 c5 15 1e 30 61 01 ac 9f 8e ee c7 27 c5 80 c6 8d 2d 37 a9 b0 00 78 30 92 16 e0 61 01 c0 5b d2 8c f6 47 1f 38 51 2c f4 d1 39 62 1f ac 62 fd e8 1a 2d 2c 06 45 e9 a8 45 9c 29 53 3c 97 27 6d f8 b2 2f 0c e8 b0 73 63 5b 1c f5 a1 5c a5 62 15 32 1d 59 8b 70 9c 88 3e 76 ca 09 76 a6 fe 2f b9 c7 fa 62 a7 88 aa 9d 3a 04 79 de 9f 7b 3a be 38 db 79 66 2c 80 7c 5e bc 26 06 1a 6a 60 82 d3 e0 2f af 07 0d 80 d9 62 f0 8b c7 7e 72 57 2e 6d 00 09 87 48 d1 4f 4e 81 ed fa ac f7 f3 a4 f8 fc 49 64 70 d0 e6 3e 64 14 b7 d8 d4 40 1a b2 bc 88 23 12 5c d2 5b 94 ae 3d 61 c3 a2 30 3d 63 Data Ascii: b=<;VlS<,8SHrJmu0@#m250a'-7x0a[G8Q,9bb-,EE)S<'m/sc[\b2Yp>vv/b:y{:8yf,\|^&j`/b~rW.mHONIdp>d@#\[=a0=c
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: e7 87 10 c8 cb aa 05 da 17 96 38 8e 87 05 f2 d1 96 fc 4f 7b a8 03 17 5c 4e 57 9d f8 dd 57 bb c2 c9 e1 ea e9 9a ce af 6e ef ed ea 5d 70 73 2a 81 a0 6d 0c da 7c 14 ed 18 91 95 0a 40 c7 1e 2e 1d c8 7b 55 7e 9a 74 f1 7a 65 9e fc 4c d1 86 29 37 95 97 a9 79 f5 f1 e8 e8 b0 83 29 ce 46 be cc b1 5d 8d d5 5b 93 4e 83 9b b3 d5 83 4c 3c 87 ab 6a 03 97 e0 80 04 04 01 6c c5 99 d9 7e be cd 9e bd 41 13 48 e2 d4 e1 c6 88 11 0f 60 0f 8f 17 e2 c9 5b a9 e2 29 fd 1e da 1b ce 0f b8 e7 1b 3a ff b8 af d8 00 d0 c2 17 71 89 1e ec e0 d9 72 ff f7 da 3b 70 37 10 f0 33 c3 4d b4 01 aa c8 f3 09 31 10 6c f0 83 1d 43 73 01 a6 f6 61 32 e1 a0 a8 7a a5 4a 54 ed 2d 15 0f b6 fc f1 51 44 94 e9 b1 a0 e0 d5 d2 bf 3a 51 ff 3d 12 2a ec 48 5a ce 0d 35 ab 9f 74 6e f8 f6 e6 3d 85 07 33 0a 35 ca 08 ef Data Ascii: 8O{\NWWn]psm\|@.{U~tzeL)7y)F][NL<jl~AH`[):qr;p73M1lCsa2zJT-QD:Q=HZ5tn=35
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: e8 bf 3d a3 fd ff fe b0 a8 3e f4 29 84 fb f4 ab c5 e6 6b 51 fa 7b 39 a1 5e 7e 77 65 62 3e 85 9b de 70 f8 64 4b dd 27 9b 38 e1 f0 bd ea 69 72 2a cc 94 49 4e fc 31 23 93 d1 99 e1 cf ce d1 7a 33 6a 9f 47 3e 0d 54 1b a9 54 9d 9b 4c 47 56 3a f6 c1 1a dc 98 84 f7 67 c3 13 61 bd 2f 67 c2 c9 dd 0f a7 bf bb f1 ef e1 95 2c fc d6 f1 4d da f1 fb ee ff fa 28 bd 9e e9 ca d9 ce 8f 2a e8 7a 1a 5d 2a e2 9c ad e5 49 6b 61 23 bf 48 e3 d5 6f 43 9d f4 f5 7a 8b dd c8 e2 99 76 63 19 a0 59 dc 68 af 78 ed d3 ab 74 e8 10 0a fa 60 d6 a9 eb f1 22 93 2a 07 d2 86 c7 a5 4e 9e ce 87 f1 8c e4 f6 59 27 b6 c1 e7 94 87 7e 0e c4 37 ee 8f 30 d5 cb f6 3b 9c 17 f0 99 e0 a0 3e 4e bf ae 4d f4 24 7d ce cc 27 fb e8 cb 24 ad ed 6d 50 57 d7 eb 71 10 47 37 75 3a de e5 df f0 27 1a ac 5c 25 1d a9 74 21 Data Ascii: =>)kQ{9^~web>pdK'8irIN1#z3jG>TTLGV:ga/g,M(z]Ika#HoCzvcYhxt`"NY'~70;>NM$}'$mPWqG7u:'\%t!
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: e3 f9 27 47 fd fe 30 7a 2c d8 ac c6 45 bb 1a 9d e8 67 38 3e e6 49 5d 92 fb 46 52 07 a5 ec 98 07 7b e4 44 7a d0 29 86 7f 7a bd 94 db c1 4b 09 56 4c 8f c1 19 84 ac 32 7c b8 7a 20 80 fc bb a2 3f 30 ba 89 87 6e 03 6a 4a ed 48 65 2b 89 0e f3 8e 50 3d 8f 8d d6 bf b9 bd 96 b1 0e d2 2b 42 96 a8 aa cd 10 84 9a 81 e5 fb 96 4e 6f 8d 6a 2d 4c 31 05 8b d3 ce 50 0b ba 75 37 34 32 ec 79 ce 62 3c 0d 66 b5 7d 16 9d 29 81 6b f3 2a 12 b0 24 85 ab 44 a2 94 17 4c 80 b2 34 27 90 e6 04 b3 9b 59 71 cc 07 cf 5e 10 10 9d 83 4c d8 16 84 ea 3c e9 c9 43 e6 e8 1b 7f 48 13 11 c0 e0 43 2f 30 80 b5 4b c4 cf db 85 e8 50 39 b5 17 bb c7 80 e3 9c eb b6 a7 c0 cb 76 a7 c1 c8 0d 97 98 a3 1c d6 da 4e 20 a6 13 78 44 a2 dd 12 b0 b6 ae bc 0b 8f 9c 61 7f 3d 9a 50 56 b1 80 9e 2a 56 73 28 db e4 69 96 Data Ascii: 'G0z,Eg8>I]FR{Dz)zKVL2\|z ?0njJHe+P=+BNoj-L1Pu742yb<f})k$DL4'Yq^L<CHC/0KP9vN xDa=PVVs(i
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 23 4b a4 b5 38 a3 2e cd a0 75 a4 d9 3c 2f a2 9d fe 0e 43 66 41 f9 9c 1c 2f dc 5c 31 d4 f7 23 4b 86 d0 ad 5c 26 64 23 db 40 ec ce 20 76 bb cf b2 f7 53 e1 56 88 60 21 23 a0 1a a3 6c a1 01 51 7f 7e 19 59 30 02 a4 6d 54 09 ba bc 80 52 be 08 01 d2 10 28 24 90 ef 09 a0 04 8b 27 cc 3a e0 36 c3 c5 21 57 30 11 c7 cb b0 53 8b 54 8f 8b 21 f9 73 fd 75 78 1f c2 6a 1d 6f 47 1e cf 32 9f c1 37 4b 98 4f b2 c4 0a 2a 15 f3 a6 d2 a0 2d 00 eb f2 8a 01 48 86 62 55 88 c1 eb 42 92 64 8f 60 4c e3 92 a2 84 bc 24 bc 58 06 0f f6 0a 2a 32 84 dd 67 5b 3b 91 03 c9 fe bd 41 ec b3 a5 fb c2 7c 16 22 68 a1 96 09 a8 bf 24 ed a4 0d a5 29 9c d4 62 65 02 e4 f5 c2 52 85 17 cd 19 89 9a 2b cc c6 29 ad fb 0b 74 02 ab 39 dd 2d e8 19 d6 33 ec 8f 60 b3 cb b0 3e 11 55 9f db e8 08 0e 06 75 b2 39 fc c3 Data Ascii: #K8.u</CfA/\1#K\&d#@ vSV`!#lQ~Y0mTR($':6!W0ST!suxjoG27KO-HbUBd`L$X2g[;A\|"h$)beR+)t9-3`>Uu9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50086	104.18.70.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:00 UTC	642	OUT	GET /theme_assets/708839/8180d5172f5c7c2ff760c0531922aa1271e76615.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://p17.zdassets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:00 UTC	1235	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:00 GMT Content-Type: image/png Content-Length: 1967528 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Wed, 08 Jun 2022 08:58:57 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: VuGaGMKBIhGnuluG1u2Xf0DfbOJXMtRq Cache-Control: public, max-age=86400 ETag: "77651bce2347849e1eef818b9f4dbf91" Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 e2b6596be074ad87bd3300d4df7735b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: UxHAu07eu6oFBnV1qFxdzP3QADsXSajyw0TV8DPlogOqCiTnzGIUcQ== CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LBm5uIXrmI9xSc7omuJtVMrN6ulJGC1V1B%2B1vT9DZ2VciEFD%2FqgsafphwCB%2FXx3F%2FVP8qwSRMx3Cs8NM5UpMVpKME5v8%2B8FGmxtfSjOby3xENZ2uI2FkxAYJNX2HMxAMsNZnfg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961e89fb470a01-LAS
2024-04-24 12:33:00 UTC	134	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 02 00 00 00 67 b1 56 14 00 00 01 37 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 91 95 8f bf 4a c3 50 14 87 bf 1b 45 c5 a1 56 08 e2 e0 70 27 51 50 6c d5 c1 8c 49 5b 8a 20 58 ab 43 92 ad 49 43 95 62 12 6e ae 7f fa 10 8e 6e 1d 5c dc 7d 02 27 47 c1 41 f1 09 7c 03 c5 a9 83 43 84 0c 05 8b df f4 9d df 39 1c Data Ascii: PNGIHDR8gV7iCCPAdobe RGB (1998)(JPEVp'QPlI[ XCICbnn\}'GA\|C9
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: ce 01 a3 62 d7 9d 86 51 86 f3 58 ab 76 d3 91 ae e7 cb d9 17 66 98 02 80 4e 98 a5 76 ab 75 00 10 27 71 c4 18 df ef 08 80 d7 4d bb ee 34 c6 fb 7f 32 1f a6 4a 03 23 60 bb 1b 65 21 88 0a d0 bf d2 a9 06 31 04 cc a0 9f 6a 10 0f 80 a9 4e da 35 10 4f 40 a9 97 fb 1b 50 0a 72 ff 00 4a ca f5 7c 10 5f 80 d9 73 3d 1f 8c 39 c0 0c 72 5f 01 4c 1d 5d 6b 80 5a 92 0e d4 59 ef 54 cb aa 65 59 d2 ee 26 41 24 8f 07 99 8e ce 33 b9 1f 87 89 4a 13 d5 d1 51 17 c8 ef 03 60 31 1f 6c 37 1d b9 56 b5 ac bd f5 7f fe 3d 11 d7 f3 65 6e 9f 47 08 40 2c 3d 17 59 41 78 a1 2e 7f 55 18 3b 93 eb 62 c7 70 19 0e ef 61 7a 54 64 bb 37 70 b7 01 0b b7 45 b6 5a 85 f2 16 3c 0e 7f 00 c0 c6 4f fd f3 53 3f c8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0c d6 69 54 58 74 58 4d 4c 3a Data Ascii: bQXvfNvu'qM42J#`e!1jN5O@PrJ\|_s=9r_L]kZYTeY&A$3JQ`1l7V=enG@,=YAx.U;bpazTd7pEZ<OS?pHYsiTXtXML:
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 31 22 20 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3d 22 37 32 30 30 30 30 2f 31 30 30 30 30 22 20 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3d 22 37 32 30 30 30 30 2f 31 30 30 30 30 22 20 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3d 22 32 22 20 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3d 22 36 35 35 33 35 22 20 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3d 22 31 39 32 30 22 20 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3d 22 31 30 38 30 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 Data Ascii: iff:Orientation="1" tiff:XResolution="720000/10000" tiff:YResolution="720000/10000" tiff:ResolutionUnit="2" exif:ColorSpace="65535" exif:PixelXDimension="1920" exif:PixelYDimension="1080"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:ins
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 34 64 64 62 64 66 37 2d 61 33 30 63 2d 30 63 34 33 2d 38 37 31 65 2d 63 37 62 37 65 34 64 64 61 65 66 31 22 20 73 74 52 65 66 3a 6f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 35 39 64 39 36 38 64 2d 65 62 34 61 2d 30 39 34 31 2d 38 63 37 37 2d 34 62 39 34 66 35 31 31 64 37 37 30 22 2f 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 3e 32 46 32 30 39 33 45 30 34 41 39 33 38 44 38 41 36 32 33 45 34 42 33 39 45 34 32 41 30 36 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 46 44 30 34 33 37 36 42 39 46 45 34 46 44 42 32 32 34 37 44 32 36 35 37 41 43 44 Data Ascii: :docid:photoshop:24ddbdf7-a30c-0c43-871e-c7b7e4ddaef1" stRef:originalDocumentID="xmp.did:e59d968d-eb4a-0941-8c77-4b94f511d770"/> <photoshop:DocumentAncestors> <rdf:Bag> <rdf:li>2F2093E04A938D8A623E4B39E42A067F</rdf:li> <rdf:li>2FD04376B9FE4FDB2247D2657ACD
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: a0 1e 43 5b a6 77 5f a3 de 00 c0 db 1f b3 71 bb 9b 77 4b 59 ba 80 bb 99 a7 8a fd 04 0a 7c c9 18 82 68 c9 09 1e 6c 90 ef 66 77 03 bc 65 be 50 af 6e a9 8c 1e 23 8f c4 bb 7b 01 17 f9 5e 7d 8d 7a 83 ef ce 16 53 9f 6c 92 b7 3e 43 dc 8d c7 58 06 76 51 9b 2b e1 5f 3f 88 bb e1 75 24 e7 f5 c7 3e 34 9a 90 1d 90 15 45 37 aa ac c8 da a9 ac 4c 5f e4 02 56 8c cf 02 4a 7a 07 4a 2f 16 08 89 99 6c 0a bb 1b 55 e8 66 cf 62 a1 7d a3 31 42 7a 92 ee 18 4c 49 c5 3c b5 0d a6 36 e5 51 58 2d 1d 21 62 21 61 af c7 68 9f be 8d ee 96 1c 36 78 77 23 7f 7f 2f 5c 94 73 91 46 c4 06 46 8f 0a 5d 64 ec 28 ba 79 63 bc 95 ad df 6a 36 7a d6 27 22 e1 d5 e5 be a0 ad 01 c0 02 5e 2d 8d e0 dd 36 05 2b be b8 1b 17 b9 2c 78 00 fa 51 ba b5 7d ca db 32 cf bc a3 7c 3a c7 44 63 ef 6c 5f e4 7b a1 aa af 48 Data Ascii: C[w_qwKY\|hlfwePn#{^}zSl>CXvQ+_?u$>4E7L_VJzJ/lUfb}1BzLI<6QX-!b!ah6xw#/\sFF]d(ycj6z'"^-6+,xQ}2\|:Dcl_{H
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: c5 5a 41 9c 1c 22 d5 e8 8a 17 65 23 bc 8f 8a 3f 8b 16 e8 1b 7d 51 21 44 34 8d c6 61 20 a4 e3 45 fa 91 49 51 2a c8 b2 5a ec 9a 0b 28 71 42 56 9b fc 8d be 71 f4 21 3f 07 2b e1 6c 81 f6 c4 34 1c 6f 8a f1 01 88 ab 20 18 17 03 8e 0b 7d 15 56 17 30 91 43 3f 0a 04 df 8d 06 f5 0a 45 82 a1 ab 00 92 72 66 f1 7c 22 5f 64 fc fd 82 cb 2b 49 23 0a 79 14 24 01 e0 ad e1 ed 9f 73 e2 90 b1 59 44 dd 2d 30 24 1e c1 2a 3c 06 0b 88 0d f3 b7 98 58 ae 49 5b a2 71 f1 fb 51 8d 87 31 3c 48 cb cb 8a 5a a5 59 7e c9 6e 90 8d 49 16 3d 9b 97 3a 18 a2 4a 3b bb ed bb c4 26 c8 89 43 f4 38 6f 71 d8 d3 a5 bd 3b dc 15 4c 5d 51 48 a8 08 b0 09 3c f3 95 8b 06 ee 08 c6 90 5c ac d0 be 0d 2c a2 1c c0 68 a7 2c 5d 8c 27 00 21 fa b8 09 18 79 5b 2f ca 5c de 86 53 0d 5e 25 2b 43 3d 1b 83 86 9d 36 28 71 Data Ascii: ZA"e#?}Q!D4a EIQZ(qBVq!?+l4o }V0C?Erf\|"_d+I#y$sYD-0$<XI[qQ1<HZY~nI=:J;&C8oq;L]QH<\,h,]'!y[/\S^%+C=6(q
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 4a 27 2c c2 ae 37 b2 22 2b cf 94 5c 32 d7 de 42 15 7c 10 8e 62 06 8b da f4 d1 ea e6 28 98 76 6d 10 80 84 3d 11 42 a7 3a 5d 24 c3 4d ec da bb 6e 86 be 90 6c 00 07 a1 31 ec d3 95 95 b3 77 d8 db a7 72 b4 43 8c b7 50 27 a4 da c9 7d e7 d5 9a f6 fe 65 2d 73 62 55 ea 3c 2b a3 b4 df 48 88 02 b8 6b c3 cb c9 12 29 45 d7 d8 7b ea c4 ca 4a 92 40 5a 6b f0 39 92 71 d8 a2 88 10 97 ab 3a a4 8f 76 31 f9 92 6d 26 3e 3d bb 82 c7 95 20 42 37 3d 78 2d ae 91 d2 46 73 9c 97 92 0d 58 16 fe 44 8b 4c 16 bf f3 98 9c e7 e4 ea fd c0 e8 66 ed f5 01 50 05 98 65 e6 a8 36 12 67 25 1e f4 7b 13 7d 95 2b 26 97 62 25 25 80 5d 78 e1 ed 5c c0 23 fc f8 2c 57 10 14 27 37 26 86 8d 01 48 e3 0b 70 da d8 02 14 df 59 b6 61 55 0a 39 d6 a4 88 c4 f7 11 14 14 71 1b 50 f1 4e 5c d1 41 89 97 cc aa 78 42 98 Data Ascii: J',7"+\2B\|b(vm=B:]$Mnl1wrCP'}e-sbU<+Hk)E{J@Zk9q:v1m&>= B7=x-FsXDLfPe6g%{}+&b%%]x\#,W'7&HpYaU9qPN\AxB
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 28 25 08 6f f1 cb 20 5a 35 62 36 0b 73 b5 4e b5 78 37 df 7e 1e b9 63 ae e6 7b 81 ac af 76 d4 29 cc 43 a7 ff 67 37 bc 17 85 38 98 4d 28 cb 32 d0 9d 61 d1 e5 2a dd dd ec 41 02 c9 bd 67 98 5c 1d 93 7a 8c c1 96 fb 1b f7 9d 98 da 18 9e 07 a9 cd 90 00 63 a9 3e 6f 11 9f 8f 84 d6 29 8a 1f 44 44 a6 ee ef f8 02 02 96 8e eb e9 a2 db 71 b7 ad 63 cf ef b9 ef b6 ad cd c5 8d bb a6 ee 75 cc 60 ed ff 08 76 52 16 41 0e 3d 2e 83 b1 15 7b 19 b3 aa 0e b8 e2 85 99 97 9f e2 b6 ca 67 70 c4 aa bd 6b 23 0e 6a 2f 5b ab 42 70 da 2e 4d 80 62 25 bd c8 a9 40 40 2e 38 f1 8e 2e 75 9d f7 32 5e 43 d5 a4 e1 f5 be 96 ae 2b b1 ef 90 98 73 c7 73 4b c7 8b 35 e6 76 5d ae ab 0b 1e 88 c1 df fc b2 7f d6 4a c2 c7 2e 6d ce dd 66 bf 0f 57 3b 37 6a bf a0 9f 2f 06 96 8a 6e 3a 37 ca a3 e6 95 c3 d4 7f 40 Data Ascii: (%o Z5b6sNx7~c{v)Cg78M(2a*Ag\zc>o)DDqcu`vRA=.{gpk#j/[Bp.Mb%@@.8.u2^C+ssK5v]J.mfW;7j/n:7@
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: dd de 9d fc 9a f7 c0 d0 82 1c 88 72 1a 27 1b 90 1a 11 1d 4b 18 9f 51 b3 e0 dc 05 e9 fe 2e 01 f6 25 63 24 66 aa c1 a3 c5 41 3e 75 80 fd 61 fa 86 22 8f 99 fd b8 9d b7 75 ed 00 92 00 56 4f fa 7f 1e 23 b3 95 d0 24 ab c5 1d 27 36 3b 56 af 13 f3 1f eb d9 4e 36 47 9d 67 bb 23 0c a7 a7 73 6d 9c 86 56 31 6d dd 1b 4b e7 35 25 84 bf 15 78 60 30 c2 05 28 ee 68 8c d3 78 4e ba 34 2e 32 f5 65 c9 15 c1 18 ec 91 ec be 0a a8 1f 7e 8b be a8 48 38 77 67 c6 53 b4 a4 c8 14 7f 61 3d 6a d3 31 35 49 53 6f 91 fc 29 a6 26 1d d9 74 38 d1 15 4c 0e 2e 7b 10 ed 08 01 dc 6d 54 d3 9e 58 58 af d6 a4 a0 b8 56 37 a7 ca ca 05 71 d9 cc 4a 54 6d 00 99 5e ae 5d 16 03 37 a7 32 29 3a 82 64 bd e1 61 86 79 57 55 25 cb 91 f1 ab f9 6e b3 c0 fa b9 f8 ee 1b f5 06 00 dc 43 49 a3 ee 85 0e 23 26 a5 b9 6d Data Ascii: r'KQ.%c$fA>ua"uVO#$'6;VN6Gg#smV1mK5%x`0(hxN4.2e~H8wgSa=j15ISo)&t8L.{mTXXV7qJTm^]72):dayWU%nCI#&m
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: a0 57 16 cb 0d 52 d0 ab 5d e4 6b 81 99 1d 09 c7 77 f4 78 1e 12 30 dd 96 8d f3 33 03 0e ba ae 0c 93 e9 53 05 f2 76 49 99 cc ae 7b f9 7a 9c 69 03 c2 d6 e3 40 2d bf 26 f9 56 20 b2 0b 39 77 5f 05 2a 3d 83 d7 44 d3 59 07 d9 13 2f 94 5c 95 39 0e 14 3d 04 0d 41 51 12 ce 77 7b f4 ca 96 f5 d4 3e 33 fd c5 ce d4 66 a3 bc c5 71 ee 77 5c 2a 3d d7 88 38 82 b1 05 93 e9 ae b7 ed 09 30 64 6c 27 52 12 ce cb 16 eb 8d 26 b7 e3 0e 09 fd 27 43 76 60 60 8f 64 06 66 4f 2c 7c 99 6a 22 ed 96 a7 db b0 38 3c 82 2b 20 c6 fc a0 f7 9e 8e 94 06 39 e4 6a 23 9c 31 74 09 08 3f 42 d0 c1 e8 b2 78 2b 92 39 65 65 b9 a4 75 69 c6 b3 ec a4 35 81 cd 79 7d fc 19 79 3b 55 89 e7 f5 b6 55 f4 e7 e7 dd 8f 4a 10 47 20 93 d9 2a db 6a ad f3 91 f2 39 85 9c c7 53 b4 5f ef ca 03 73 2f 54 fc ce 84 eb d6 9d f1 Data Ascii: WR]kwx03SvI{zi@-&V 9w_=DY/\9=AQw{>3fqw\=80dl'R&'Cv``dfO,\|j"8<+ 9j#1t?Bx+9eeui5y}y;UUJG *j9S_s/T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50087	104.18.70.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:00 UTC	645	OUT	GET /theme_assets/708839/39a538119dff681270eb7a0d5641a347b77d0089.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:00 UTC	1223	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:00 GMT Content-Type: image/png Content-Length: 7255 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Mon, 06 Jun 2022 15:08:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: wOkPusEsn_Gfd66pNCU.zbppBkyf3LDv Cache-Control: public, max-age=86400 ETag: "02486e0910b93ce621ed304a4b8592c3" Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: CxtBI1IfauN-5C2AKspcEXvQ9TTmqtpunFJQE4dcBy630AGOK4VtxQ== CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SbL0DK3PoIo4dg4m%2BG9Ax0sf5oRZeLlipLV6BMHvL3l6ZaqsJ9Tb%2FYHoFL81DqSgarRCO60B4ynGpAoHKQ2xqMhK2O%2FklrpmDQY5yrMvPMwdn0xTCcKK%2BLup5fGSDlSIDuaXYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961e89fc6609fd-LAS
2024-04-24 12:33:00 UTC	146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b5 00 00 00 3c 08 06 00 00 00 20 ec fb b9 00 00 01 37 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 91 95 8f bf 4a c3 50 14 87 bf 1b 45 c5 a1 56 08 e2 e0 70 27 51 50 6c d5 c1 8c 49 5b 8a 20 58 ab 43 92 ad 49 43 95 62 12 6e ae 7f fa 10 8e 6e 1d 5c dc 7d 02 27 47 c1 41 f1 09 7c 03 c5 a9 83 43 84 0c 05 8b df f4 9d df 39 1c ce 01 a3 62 d7 9d 86 51 86 f3 58 ab Data Ascii: PNGIHDR< 7iCCPAdobe RGB (1998)(JPEVp'QPlI[ XCICbnn\}'GA\|C9bQX
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 76 d3 91 ae e7 cb d9 17 66 98 02 80 4e 98 a5 76 ab 75 00 10 27 71 c4 18 df ef 08 80 d7 4d bb ee 34 c6 fb 7f 32 1f a6 4a 03 23 60 bb 1b 65 21 88 0a d0 bf d2 a9 06 31 04 cc a0 9f 6a 10 0f 80 a9 4e da 35 10 4f 40 a9 97 fb 1b 50 0a 72 ff 00 4a ca f5 7c 10 5f 80 d9 73 3d 1f 8c 39 c0 0c 72 5f 01 4c 1d 5d 6b 80 5a 92 0e d4 59 ef 54 cb aa 65 59 d2 ee 26 41 24 8f 07 99 8e ce 33 b9 1f 87 89 4a 13 d5 d1 51 17 c8 ef 03 60 31 1f 6c 37 1d b9 56 b5 ac bd f5 7f fe 3d 11 d7 f3 65 6e 9f 47 08 40 2c 3d 17 59 41 78 a1 2e 7f 55 18 3b 93 eb 62 c7 70 19 0e ef 61 7a 54 64 bb 37 70 b7 01 0b b7 45 b6 5a 85 f2 16 3c 0e 7f 00 c0 c6 4f fd f3 53 3f c8 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 c0 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d Data Ascii: vfNvu'qM42J#`e!1jN5O@PrJ\|_s=9r_L]kZYTeY&A$3JQ`1l7V=enG@,=YAx.U;bpazTd7pEZ<OS?pHYs.#.#x?viTXtXML:com.adobe.xm
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 62 37 30 66 64 32 39 2d 31 31 37 34 2d 34 31 34 66 2d 61 31 63 39 2d 38 36 33 63 61 66 61 66 35 35 34 35 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 38 54 31 37 3a 31 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 Data Ascii: :softwareAgent="Adobe Photoshop 21.2 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:4b70fd29-1174-414f-a1c9-863cafaf5545" stEvt:when="2022-04-28T17:12+02:00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)" stEvt:changed="/"/> </r
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 3d a8 d9 05 55 93 18 83 73 a1 56 20 ee 03 8a e6 ae 40 7a e3 27 e8 79 6f 46 1c ab 36 e0 51 e0 17 a6 fd 1e 4e ba 80 b8 f1 01 cf fb 9d c8 48 dd 83 a4 fe 87 28 56 b1 86 98 0d d2 ca 22 8a 9f 20 c2 1a 0e dc 00 9c 85 08 dc 12 f9 52 60 11 f0 3c f1 1b 94 de 07 b4 89 ea 07 7e 6a 33 1e 43 7a ed 26 e0 7c 94 a7 be 0d 3d ef da 8c 2e 9e f6 ea c0 77 df 22 d5 a3 35 22 e0 ff 42 44 fd 5b 24 f1 33 86 aa 56 be 9c 85 fc cc 17 20 43 c2 8b c5 68 72 16 c4 32 32 89 e2 41 48 fc 3c 19 53 9f 75 01 ab 80 53 51 d0 65 c6 61 1e 4b 65 68 86 b2 07 cb 80 ff 48 72 de 89 88 41 1e 44 2e c6 f2 4c 0e 2a dd 72 ae 7a 88 a3 fc 0c 18 86 5f e1 7f 13 ad c6 97 ab 3d ba 23 0f d7 00 0f 21 15 a4 11 31 e7 44 1c 46 2c 45 1e 94 27 80 9f 67 fa 62 55 2d 12 b0 f8 16 a9 1d 97 a3 55 38 16 25 3c 01 f4 41 fa f0 ec Data Ascii: =UsV @z'yoF6QNH(V" R`<~j3Cz&\|=.w"5"BD[$3V Chr22AH<SuSQeaKehHrAD.L*rz_=#!1DF,E'gbU-U8%<A
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 59 1e 72 2e 68 7e bc 69 ca bb 90 37 c7 e2 3c e0 5d 9c ed d4 1f f8 26 a2 af b4 91 8b f3 49 7e 44 bc 89 32 85 f8 57 ec 23 e6 38 04 11 b8 f5 25 3e 8b 53 15 ca 09 f7 3e 4c c2 2f 82 21 d1 98 99 8d c2 f7 16 5b 10 e7 b5 c4 ff 3a 22 b4 77 3d e7 58 62 d8 88 74 6c 9b 8c bf 0e 79 34 2c 82 52 66 ab a7 1d 34 68 1f 0d 8c a3 0c ff 1e 29 05 48 82 78 73 5b c0 19 53 e7 20 ce 6e dd 7a 4b 3d d7 0b 5e ab a3 f9 de 62 1b 7e 35 a8 2d f2 dd 37 44 35 a6 41 df b9 65 2a d3 02 9f b7 44 0b d3 ee c7 f1 29 9a 3f 4b d4 61 9b 17 15 93 68 e4 be 80 db 0a e3 36 44 e0 d6 66 1b 8a 6c 99 d8 91 8b 33 52 d2 2d 17 8a c2 7f 23 1d 18 e4 d2 db 8b 74 da e7 71 ee af 69 e8 41 db b4 d2 d6 c8 83 61 d1 d4 fc c6 ea 9d 7b 70 c6 c9 58 c4 e9 3a 21 dd 3d c8 d5 3a e1 aa e1 67 22 62 d9 e9 f9 be 1f b2 d0 41 86 a5 Data Ascii: Yr.h~i7<]&I~D2W#8%>S>L/![:"w=Xbtly4,Rf4h)Hxs[S nzK=^b~5-7D5Ae*D)?Kah6Dfl3R-#tqiAa{pX:!=:g"bA
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: a9 6c fa d2 18 11 f6 04 14 fd 1b 84 72 95 f3 11 97 5e 8e 8b 74 4e 44 12 c1 fe 89 69 67 94 46 3b 12 e5 07 bf 4a 62 78 db e2 04 d3 ff ab b8 d4 db c6 28 d4 7d 25 8a 2a da cd 79 da 91 a8 36 8d 47 c1 0d 5b 89 04 2a b1 eb 60 da cd 11 37 6b 8a a2 89 c3 50 f2 d8 7c f3 99 45 3f 44 30 4b 91 ea 06 92 78 a3 91 ea f6 a6 e7 fc 47 50 32 56 d4 96 c1 41 dc 6f ee cf 5b e0 30 d2 bc e6 99 f1 9c 6a 3e 7f 10 7f 81 c8 65 48 c2 0e 47 a1 f8 2e 28 ae 70 1c aa 10 2a 41 81 9d d1 68 7e 4a 50 c6 e2 c9 c8 75 3b 17 97 28 07 4a 20 7b 05 45 7b 8b a0 f6 13 f5 13 e8 e1 ec 42 aa 82 f7 1f bd 6c 5a e4 3c 52 db 92 ec 4b e4 35 79 05 a9 2a bd d1 62 58 8f 82 30 36 60 f3 08 9a ac 97 51 72 d3 0f 11 01 4c 41 04 6d a3 63 cb 48 4c 88 2a 42 d1 d7 3d e6 1a 8b 51 3e c4 3e 14 ca be 0f 25 52 8d 40 13 b4 1d Data Ascii: lr^tNDigF;Jbx(}%y6G[`7kP\|E?D0KxGP2VAo[0j>eHG.(pAh~JPu;(J {E{BlZ<RK5ybX06`QrLAmcHL*B=Q>>%R@
2024-04-24 12:33:00 UTC	264	IN	Data Raw: ec 95 c1 7a 3f 3a 21 a2 ab c9 bf b6 88 42 3d c4 ed 4b a8 7e ea c1 85 68 63 a1 cb 11 71 46 55 a2 c7 86 da a6 7e d8 e2 d7 dd 24 ee e7 56 80 db f2 2a b8 af 45 5c 28 47 84 f5 2e f2 31 1f 8d 8c a9 4c 11 34 48 ed d8 86 6a 0e 6b 03 41 83 d4 80 39 c4 93 4b d3 06 71 d7 f3 a9 01 82 86 da c7 a9 17 e1 38 74 70 ab 5a cb a5 4b f1 ef 97 91 45 16 3e d4 26 4e 9d 8b db 0b e3 bd c0 77 6d 71 81 88 6a e7 06 64 f1 dd 46 6d 22 ea a3 71 1c 38 58 7c 60 4b ea 37 f2 dd f9 8f ee 2c 32 84 da 44 d4 7b 71 c9 39 de ed 6f 67 e3 8a 6a c3 b6 af cd 22 0b 1f 6a 53 f0 65 3f 72 5d 0d 41 c4 bb 11 6d 88 63 43 d1 4b 50 a2 4c 16 59 24 45 6d 33 14 3b 13 fe bf 20 9b 90 17 a2 46 4b ed b3 a8 9b a8 4d ea 07 28 02 d7 07 6d 2d b6 03 79 3a 1e 43 ee ae 2c 41 67 91 12 fe 0f ff d9 da 25 25 3c 2f 39 00 00 00 Data Ascii: z?:!B=K~hcqFU~$V*E\(G.1L4HjkA9Kq8tpZKE>&NwmqjdFm"q8X\|`K7,2D{q9ogj"jSe?r]AmcCKPLY$Em3; FKM(m-y:C,Ag%%</9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50076	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:00 UTC	1921	OUT	GET /hc/en-us/sections/20917497510929-Certified-files HTTP/1.1 Host: help.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://help.signaturit.com/hc/en-us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978
2024-04-24 12:33:00 UTC	939	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87961e88ff6969e6-LAS CF-Cache-Status: MISS Cache-Control: max-age=0, public Content-Language: en-us Strict-Transport-Security: max-age=259200; includeSubDomains Vary: Accept-Encoding Protocol: HTTP/1.1 always x-frame-options: SAMEORIGIN x-runtime: 0.152979 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block x-zendesk-origin-server: app-server-6465d6d96-wczfw x-zendesk-processed-host-header: help.signaturit.com Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3tMUckIMqDdBzqMxvm6PVlerZzwO%2F%2BLOOkofIwDOEd2yflOgAXpGCSFQpF1Tztq6%2Frw86rSrTWuBhgEev9knoliOOA2lCpszsc%2FNnweZb2zPwxfhLGG%2BOSC3wQMUi3i6wUXeE6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:33:00 UTC	430	IN	Data Raw: 32 38 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 21 2d 2d 20 76 32 34 34 34 36 20 2d 2d 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 43 65 72 74 69 66 69 65 64 20 66 69 6c 65 73 20 26 6e 64 61 73 68 3b 20 53 69 67 6e 61 74 75 72 69 74 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 0a 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 73 65 63 74 69 6f 6e 73 2f 32 30 39 31 37 34 39 37 35 31 30 39 32 39 2d 43 Data Ascii: 2811<!DOCTYPE html><html dir="ltr" lang="en-US"><head> <meta charset="utf-8" /> ... v24446 --> <title>Certified files – Signaturit</title> <link rel="canonical" href="https://help.signaturit.com/hc/en-us/sections/20917497510929-C
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 65 73 2f 73 65 63 74 69 6f 6e 73 2f 32 30 39 31 37 34 39 37 35 31 30 39 32 39 2d 41 72 63 68 69 76 6f 73 2d 63 65 72 74 69 66 69 63 61 64 6f 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 68 63 2f 65 73 2f 73 65 63 74 69 6f 6e 73 2f 32 30 39 31 37 34 39 37 35 31 30 39 32 39 2d 41 72 63 68 69 76 6f 73 2d 63 65 72 74 69 66 69 63 61 64 6f 73 22 3e 0a 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f Data Ascii: " href="https://help.signaturit.com/hc/es/sections/20917497510929-Archivos-certificados"><link rel="alternate" hreflang="x-default" href="https://help.signaturit.com/hc/es/sections/20917497510929-Archivos-certificados"> <link rel="stylesheet" href="//
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 41 52 4e 49 4e 47 3a 20 52 65 73 70 6f 6e 64 2e 6a 73 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 69 66 20 79 6f 75 20 76 69 65 77 20 74 68 65 20 70 61 67 65 20 76 69 61 20 66 69 6c 65 3a 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 68 74 6d 6c 35 73 68 69 76 2f 33 2e 37 2e 32 2f 68 74 6d 6c 35 73 68 69 76 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 72 65 73 70 6f 6e 64 2f 31 2e 34 2e 32 2f 72 65 73 70 6f 6e 64 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a Data Ascii: ARNING: Respond.js doesn't work if you view the page via file:-->...[if lt IE 9]><script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script><script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script><![endif]-->
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 63 6f 6e 27 29 2e 61 70 70 65 6e 64 28 27 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 62 72 69 65 66 63 61 73 65 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 24 28 27 23 34 34 31 36 39 35 37 32 35 37 37 34 35 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 27 29 2e 61 70 70 65 6e 64 28 27 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 66 69 6c 65 2d 70 65 6e 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 24 28 27 23 34 34 31 36 39 35 30 33 32 39 33 36 31 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 27 29 2e 61 70 70 65 6e 64 28 27 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 62 65 6c 6c 22 3e 3c 2f 69 3e 27 29 3b 0a 20 20 20 20 0a 0a 20 20 7d 29 3b 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 0a 3c 2f 68 Data Ascii: con').append('<i class="fa-solid fa-briefcase"></i>'); $('#4416957257745 .category-icon').append('<i class="fa-solid fa-file-pen"></i>'); $('#4416950329361 .category-icon').append('<i class="fa-solid fa-bell"></i>'); });</script> </h
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 6f 77 22 20 64 61 74 61 2d 61 75 74 68 2d 61 63 74 69 6f 6e 3d 22 73 69 67 6e 69 6e 22 20 74 69 74 6c 65 3d 22 4f 70 65 6e 73 20 61 20 64 69 61 6c 6f 67 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 2f 68 63 2f 65 6e 2d 75 73 2f 73 69 67 6e 69 6e 3f 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 25 32 46 68 63 25 32 46 65 6e 2d 75 73 25 32 46 73 65 63 74 69 6f 6e 73 25 32 46 32 30 39 31 37 34 39 37 35 31 30 39 32 39 2d 43 65 72 74 69 66 69 65 64 2d 66 69 6c 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 0a 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ow" data-auth-action="signin" title="Opens a dialog" role="button" href="/hc/en-us/signin?return_to=https%3A%2F%2Fhelp.signaturit.com%2Fhc%2Fen-us%2Fsections%2F20917497510929-Certified-files"> Sign in </a>
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 0a 3c 6e 61 76 3e 0a 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 63 64 2d 70 72 69 6d 61 72 79 2d 6e 61 76 22 3e 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 Data Ascii: </div> </div></header><nav> <ul class="cd-primary-nav"> <li><a href=""></a></li> <li><a href=""></a></li> <li><a href=""></a></li> <li><a href=""
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 74 69 6f 6e 3d 22 2f 68 63 2f 65 6e 2d 75 73 2f 73 65 61 72 63 68 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 3e 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 75 74 66 38 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 26 23 78 32 37 31 33 3b 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 65 61 72 63 68 22 20 6e 61 6d 65 3d 22 71 75 65 72 79 22 20 69 64 3d 22 71 75 65 72 79 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 53 65 61 72 63 68 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 53 65 61 72 63 68 22 20 2f 3e 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 6e 61 76 3e 0a 20 20 3c 2f Data Ascii: tion="/hc/en-us/search" accept-charset="UTF-8" method="get"><input name="utf8" type="hidden" value="✓" autocomplete="off" /><input type="search" name="query" id="query" placeholder="Search" aria-label="Search" /></form> </div> </nav> </
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 73 69 67 6e 61 74 75 72 69 74 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 62 20 66 61 2d 6c 69 6e 6b 65 64 69 6e 2d 69 6e 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 2f 73 69 67 6e 61 74 75 72 69 74 5f 74 65 61 6d 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c Data Ascii: <li><a href="https://es.linkedin.com/company/signaturit" target="_blank"><i class="fab fa-linkedin-in"></i></a></li> <li><a href="https://www.instagram.com/signaturit_team/" target="_bl
2024-04-24 12:33:00 UTC	252	IN	Data Raw: 6c 6f 63 61 6c 65 3d 22 65 6e 2d 75 73 22 20 64 61 74 61 2d 61 75 74 68 2d 6f 72 69 67 69 6e 3d 22 35 35 30 38 38 31 2c 74 72 75 65 2c 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 2f 2a 0a 0a 20 20 20 20 47 72 65 65 74 69 6e 67 73 20 73 6f 75 72 63 65 63 6f 64 65 20 6c 75 72 6b 65 72 21 0a 0a 20 20 20 20 54 68 69 73 20 69 73 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 5a 65 6e 64 65 73 6b 20 61 6e 64 20 6c 65 67 61 63 79 20 75 73 61 67 65 2c 0a 20 20 20 20 77 65 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 6f 72 20 67 75 61 72 61 6e 74 65 65 20 61 6e 79 20 6f 66 20 74 68 65 73 65 20 76 61 6c 75 65 73 0a 20 20 20 20 73 6f 20 70 6c 0d 0a Data Ascii: locale="en-us" data-auth-origin="550881,true,true"></script> <script type="text/javascript"> /* Greetings sourcecode lurker! This is for internal Zendesk and legacy usage, we don't support or guarantee any of these values so pl
2024-04-24 12:33:00 UTC	1369	IN	Data Raw: 31 66 33 33 0d 0a 65 61 73 65 20 64 6f 6e 27 74 20 62 75 69 6c 64 20 73 74 75 66 66 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 6d 2e 0a 0a 20 20 2a 2f 0a 0a 20 20 48 65 6c 70 43 65 6e 74 65 72 20 3d 20 7b 7d 3b 0a 20 20 48 65 6c 70 43 65 6e 74 65 72 2e 61 63 63 6f 75 6e 74 20 3d 20 7b 22 73 75 62 64 6f 6d 61 69 6e 22 3a 22 73 69 67 6e 61 74 75 72 69 74 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 6e 61 6d 65 22 3a 22 53 69 67 6e 61 74 75 72 69 74 22 7d 3b 0a 20 20 48 65 6c 70 43 65 6e 74 65 72 2e 75 73 65 72 20 3d 20 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 64 61 33 39 61 33 65 65 35 65 36 62 34 62 30 64 33 32 35 35 62 66 65 66 39 35 36 30 31 38 39 30 61 66 64 38 30 37 30 39 22 2c 22 65 6d 61 69 6c 22 3a 6e Data Ascii: 1f33ease don't build stuff on top of them. */ HelpCenter = {}; HelpCenter.account = {"subdomain":"signaturit","environment":"production","name":"Signaturit"}; HelpCenter.user = {"identifier":"da39a3ee5e6b4b0d3255bfef95601890afd80709","email":n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50092	35.190.80.1	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:00 UTC	544	OUT	OPTIONS /report/v4?s=XpHIC7fKIugJPbfDoihWvjaREhci%2BxpEht%2BuWJO2fxxNJZkZAanfxfvI3IyAN05vAtPrm5r0YHNsJF4IPfZu30Nq6QDHht0vLqR57CyYRphnIeWEwE0Q1VPz1f805kHuhV1%2FKNA%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://static.zdassets.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 12:33:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50095	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	406	OUT	GET /theme_assets/708839/39a538119dff681270eb7a0d5641a347b77d0089.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	1233	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:01 GMT Content-Type: image/png Content-Length: 7255 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Mon, 06 Jun 2022 15:08:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: wOkPusEsn_Gfd66pNCU.zbppBkyf3LDv Cache-Control: public, max-age=86400 ETag: "02486e0910b93ce621ed304a4b8592c3" Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: CxtBI1IfauN-5C2AKspcEXvQ9TTmqtpunFJQE4dcBy630AGOK4VtxQ== CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GwWCeqQRxwXS9hh21AbO0NgO8pCNs8BVgWKyX1b%2FedL9JpOwMc%2FDfs6X%2BKYksOdx3omyKktFYLDD9qq8GrAdFDOYgHX1%2BIq4WdHJWu8DEQrPHlkGNcn2MsQBEpvWx477Fj%2F4PA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961e8f6ef909ff-LAS
2024-04-24 12:33:01 UTC	136	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b5 00 00 00 3c 08 06 00 00 00 20 ec fb b9 00 00 01 37 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 91 95 8f bf 4a c3 50 14 87 bf 1b 45 c5 a1 56 08 e2 e0 70 27 51 50 6c d5 c1 8c 49 5b 8a 20 58 ab 43 92 ad 49 43 95 62 12 6e ae 7f fa 10 8e 6e 1d 5c dc 7d 02 27 47 c1 41 f1 09 7c 03 c5 a9 83 43 84 0c 05 8b df f4 9d df 39 1c ce 01 Data Ascii: PNGIHDR< 7iCCPAdobe RGB (1998)(JPEVp'QPlI[ XCICbnn\}'GA\|C9
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: a3 62 d7 9d 86 51 86 f3 58 ab 76 d3 91 ae e7 cb d9 17 66 98 02 80 4e 98 a5 76 ab 75 00 10 27 71 c4 18 df ef 08 80 d7 4d bb ee 34 c6 fb 7f 32 1f a6 4a 03 23 60 bb 1b 65 21 88 0a d0 bf d2 a9 06 31 04 cc a0 9f 6a 10 0f 80 a9 4e da 35 10 4f 40 a9 97 fb 1b 50 0a 72 ff 00 4a ca f5 7c 10 5f 80 d9 73 3d 1f 8c 39 c0 0c 72 5f 01 4c 1d 5d 6b 80 5a 92 0e d4 59 ef 54 cb aa 65 59 d2 ee 26 41 24 8f 07 99 8e ce 33 b9 1f 87 89 4a 13 d5 d1 51 17 c8 ef 03 60 31 1f 6c 37 1d b9 56 b5 ac bd f5 7f fe 3d 11 d7 f3 65 6e 9f 47 08 40 2c 3d 17 59 41 78 a1 2e 7f 55 18 3b 93 eb 62 c7 70 19 0e ef 61 7a 54 64 bb 37 70 b7 01 0b b7 45 b6 5a 85 f2 16 3c 0e 7f 00 c0 c6 4f fd f3 53 3f c8 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 c0 69 54 58 74 58 4d 4c 3a 63 6f Data Ascii: bQXvfNvu'qM42J#`e!1jN5O@PrJ\|_s=9r_L]kZYTeY&A$3JQ`1l7V=enG@,=YAx.U;bpazTd7pEZ<OS?pHYs.#.#x?viTXtXML:co
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 62 37 30 66 64 32 39 2d 31 31 37 34 2d 34 31 34 66 2d 61 31 63 39 2d 38 36 33 63 61 66 61 66 35 35 34 35 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 38 54 31 37 3a 31 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 Data Ascii: :00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:4b70fd29-1174-414f-a1c9-863cafaf5545" stEvt:when="2022-04-28T17:12+02:00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)" stEvt:changed
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 65 5e 24 b3 01 94 97 f0 1b ac 3d a8 d9 05 55 93 18 83 73 a1 56 20 ee 03 8a e6 ae 40 7a e3 27 e8 79 6f 46 1c ab 36 e0 51 e0 17 a6 fd 1e 4e ba 80 b8 f1 01 cf fb 9d c8 48 dd 83 a4 fe 87 28 56 b1 86 98 0d d2 ca 22 8a 9f 20 c2 1a 0e dc 00 9c 85 08 dc 12 f9 52 60 11 f0 3c f1 1b 94 de 07 b4 89 ea 07 7e 6a 33 1e 43 7a ed 26 e0 7c 94 a7 be 0d 3d ef da 8c 2e 9e f6 ea c0 77 df 22 d5 a3 35 22 e0 ff 42 44 fd 5b 24 f1 33 86 aa 56 be 9c 85 fc cc 17 20 43 c2 8b c5 68 72 16 c4 32 32 89 e2 41 48 fc 3c 19 53 9f 75 01 ab 80 53 51 d0 65 c6 61 1e 4b 65 68 86 b2 07 cb 80 ff 48 72 de 89 88 41 1e 44 2e c6 f2 4c 0e 2a dd 72 ae 7a 88 a3 fc 0c 18 86 5f e1 7f 13 ad c6 97 ab 3d ba 23 0f d7 00 0f 21 15 a4 11 31 e7 44 1c 46 2c 45 1e 94 27 80 9f 67 fa 62 55 2d 12 b0 f8 16 a9 1d 97 a3 55 Data Ascii: e^$=UsV @z'yoF6QNH(V" R`<~j3Cz&\|=.w"5"BD[$3V Chr22AH<SuSQeaKehHrAD.L*rz_=#!1DF,E'gbU-U
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 16 bd 1c 0f bc 80 63 4e 56 9d 59 1e 72 2e 68 7e bc 69 ca bb 90 37 c7 e2 3c e0 5d 9c ed d4 1f f8 26 a2 af b4 91 8b f3 49 7e 44 bc 89 32 85 f8 57 ec 23 e6 38 04 11 b8 f5 25 3e 8b 53 15 ca 09 f7 3e 4c c2 2f 82 21 d1 98 99 8d c2 f7 16 5b 10 e7 b5 c4 ff 3a 22 b4 77 3d e7 58 62 d8 88 74 6c 9b 8c bf 0e 79 34 2c 82 52 66 ab a7 1d 34 68 1f 0d 8c a3 0c ff 1e 29 05 48 82 78 73 5b c0 19 53 e7 20 ce 6e dd 7a 4b 3d d7 0b 5e ab a3 f9 de 62 1b 7e 35 a8 2d f2 dd 37 44 35 a6 41 df b9 65 2a d3 02 9f b7 44 0b d3 ee c7 f1 29 9a 3f 4b d4 61 9b 17 15 93 68 e4 be 80 db 0a e3 36 44 e0 d6 66 1b 8a 6c 99 d8 91 8b 33 52 d2 2d 17 8a c2 7f 23 1d 18 e4 d2 db 8b 74 da e7 71 ee af 69 e8 41 db b4 d2 d6 c8 83 61 d1 d4 fc c6 ea 9d 7b 70 c6 c9 58 c4 e9 3a 21 dd 3d c8 d5 3a e1 aa e1 67 22 62 Data Ascii: cNVYr.h~i7<]&I~D2W#8%>S>L/![:"w=Xbtly4,Rf4h)Hxs[S nzK=^b~5-7D5Ae*D)?Kah6Dfl3R-#tqiAa{pX:!=:g"b
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: a6 fb 04 3f 57 3a 0f f7 5f 8c a9 6c fa d2 18 11 f6 04 14 fd 1b 84 72 95 f3 11 97 5e 8e 8b 74 4e 44 12 c1 fe 89 69 67 94 46 3b 12 e5 07 bf 4a 62 78 db e2 04 d3 ff ab b8 d4 db c6 28 d4 7d 25 8a 2a da cd 79 da 91 a8 36 8d 47 c1 0d 5b 89 04 2a b1 eb 60 da cd 11 37 6b 8a a2 89 c3 50 f2 d8 7c f3 99 45 3f 44 30 4b 91 ea 06 92 78 a3 91 ea f6 a6 e7 fc 47 50 32 56 d4 96 c1 41 dc 6f ee cf 5b e0 30 d2 bc e6 99 f1 9c 6a 3e 7f 10 7f 81 c8 65 48 c2 0e 47 a1 f8 2e 28 ae 70 1c aa 10 2a 41 81 9d d1 68 7e 4a 50 c6 e2 c9 c8 75 3b 17 97 28 07 4a 20 7b 05 45 7b 8b a0 f6 13 f5 13 e8 e1 ec 42 aa 82 f7 1f bd 6c 5a e4 3c 52 db 92 ec 4b e4 35 79 05 a9 2a bd d1 62 58 8f 82 30 36 60 f3 08 9a ac 97 51 72 d3 0f 11 01 4c 41 04 6d a3 63 cb 48 4c 88 2a 42 d1 d7 3d e6 1a 8b 51 3e c4 3e 14 Data Ascii: ?W:_lr^tNDigF;Jbx(}%y6G[`7kP\|E?D0KxGP2VAo[0j>eHG.(pAh~JPu;(J {E{BlZ<RK5ybX06`QrLAmcHL*B=Q>>
2024-04-24 12:33:01 UTC	274	IN	Data Raw: d0 82 e9 81 8c cb 1e a4 ff 7f ec 95 c1 7a 3f 3a 21 a2 ab c9 bf b6 88 42 3d c4 ed 4b a8 7e ea c1 85 68 63 a1 cb 11 71 46 55 a2 c7 86 da a6 7e d8 e2 d7 dd 24 ee e7 56 80 db f2 2a b8 af 45 5c 28 47 84 f5 2e f2 31 1f 8d 8c a9 4c 11 34 48 ed d8 86 6a 0e 6b 03 41 83 d4 80 39 c4 93 4b d3 06 71 d7 f3 a9 01 82 86 da c7 a9 17 e1 38 74 70 ab 5a cb a5 4b f1 ef 97 91 45 16 3e d4 26 4e 9d 8b db 0b e3 bd c0 77 6d 71 81 88 6a e7 06 64 f1 dd 46 6d 22 ea a3 71 1c 38 58 7c 60 4b ea 37 f2 dd f9 8f ee 2c 32 84 da 44 d4 7b 71 c9 39 de ed 6f 67 e3 8a 6a c3 b6 af cd 22 0b 1f 6a 53 f0 65 3f 72 5d 0d 41 c4 bb 11 6d 88 63 43 d1 4b 50 a2 4c 16 59 24 45 6d 33 14 3b 13 fe bf 20 9b 90 17 a2 46 4b ed b3 a8 9b a8 4d ea 07 28 02 d7 07 6d 2d b6 03 79 3a 1e 43 ee ae 2c 41 67 91 12 fe 0f ff Data Ascii: z?:!B=K~hcqFU~$V*E\(G.1L4HjkA9Kq8tpZKE>&NwmqjdFm"q8X\|`K7,2D{q9ogj"jSe?r]AmcCKPLY$Em3; FKM(m-y:C,Ag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50097	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	561	OUT	GET /hc/assets/en-us.05a4d042de4a0bd7e0e4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	1134	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:01 GMT Content-Type: application/javascript Content-Length: 217399 Connection: close x-amz-id-2: a9gwUzXRxXFrDAVtsT58d/IScANmrRd3Rj2EXnNBlx/WqL/ZXMCnSvBDLfni7sNCc1ZDrC2Ex79B/birt3jVeQ== x-amz-request-id: W1E42XPFGWWDVFYA x-amz-replication-status: COMPLETED Last-Modified: Fri, 22 Mar 2024 09:42:32 GMT ETag: "05a4d042de4a0bd7e0e4cb23b83adcf1" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: IfkAU9Booky3hB4pzWFs8mDROgBynelT CF-Cache-Status: HIT Age: 440869 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iWCDmHpiOjdYi0N1k9LdnQrnXurXppBz3WPkjVNlhAGZqA%2FDZFXtm%2FkN0TBBduehj2ULTdTbnPHbHYpPXWUlefvpCXy5nv83GMMPXRXnUy4ZuNFfK3UZX2zw7QFaCUY0lKiisWg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e8fbace69e6-LAS
2024-04-24 12:33:01 UTC	235	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 49 31 38 4e 3d 77 69 6e 64 6f 77 2e 49 31 38 4e 7c 7c 7b 7d 3b 76 61 72 20 65 2c 74 3d 7b 6c 6f 63 61 6c 65 3a 22 65 6e 2d 75 73 22 2c 64 69 72 65 63 74 69 6f 6e 3a 22 6c 74 72 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 7b 22 61 63 74 69 76 65 6d 6f 64 65 6c 2e 61 74 74 72 69 62 75 74 65 73 2e 72 65 71 75 65 73 74 2e 61 6e 6f 6e 79 6d 6f 75 73 5f 72 65 71 75 65 73 74 65 72 5f 65 6d 61 69 6c 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 72 65 71 75 65 73 74 65 72 20 65 6d 61 69 6c 3a 22 2c 22 61 63 74 69 76 65 6d 6f 64 65 6c 2e 61 74 74 72 69 62 75 74 65 73 2e 72 65 71 75 65 73 74 2e 72 65 63 61 70 74 63 68 61 22 3a 22 52 65 63 61 70 74 63 68 61 Data Ascii: !function(){window.I18N=window.I18N\|\|{};var e,t={locale:"en-us",direction:"ltr",translations:{"activemodel.attributes.request.anonymous_requester_email":"Anonymous requester email:","activemodel.attributes.request.recaptcha":"Recaptcha
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 3a 22 2c 22 61 63 74 69 76 65 6d 6f 64 65 6c 2e 65 72 72 6f 72 73 2e 6d 6f 64 65 6c 73 2e 74 6f 70 69 63 5f 66 6f 72 6d 2e 61 74 74 72 69 62 75 74 65 73 2e 62 61 73 65 2e 74 6f 70 69 63 5f 6c 69 6d 69 74 22 3a 22 59 6f 75 20 68 61 76 65 20 72 65 61 63 68 65 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 6f 70 69 63 73 20 66 6f 72 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3a 20 25 7b 74 6f 70 69 63 5f 6c 69 6d 69 74 7d 22 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 2e 61 74 74 72 69 62 75 74 65 73 2e 63 6f 6d 6d 65 6e 74 2e 62 6f 64 79 22 3a 22 43 6f 6d 6d 65 6e 74 3a 22 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 2e 61 74 74 72 69 62 75 74 65 73 2e 63 6f 6d 6d 75 6e 69 74 79 5f 63 6f 6d 6d 65 6e 74 2e 62 6f 64 79 22 3a 22 43 6f 6d 6d Data Ascii: :","activemodel.errors.models.topic_form.attributes.base.topic_limit":"You have reached the maximum number of topics for your account: %{topic_limit}","activerecord.attributes.comment.body":"Comment:","activerecord.attributes.community_comment.body":"Comm
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 2e 6d 6f 64 65 6c 73 2e 75 73 65 72 5f 73 65 67 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 2e 67 72 6f 75 70 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 6e 6f 74 5f 6f 6e 5f 73 61 6d 65 5f 61 63 63 6f 75 6e 74 22 3a 22 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 67 72 6f 75 70 73 22 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 2e 65 72 72 6f 72 73 2e 6d 6f 64 65 6c 73 2e 75 73 65 72 5f 73 65 67 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 69 6e 76 61 6c 69 64 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 5f 66 6f 72 5f 75 73 65 72 5f 74 79 70 65 22 3a 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 72 65 Data Ascii: .models.user_segment.attributes.group_restrictions.not_on_same_account":"could not find one or more of the specified groups","activerecord.errors.models.user_segment.attributes.organization_restrictions.invalid_restrictions_for_user_type":"organization re
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 20 62 69 67 22 2c 22 65 72 72 6f 72 73 2e 66 6f 72 6d 61 74 22 3a 22 25 7b 61 74 74 72 69 62 75 74 65 7d 20 25 7b 6d 65 73 73 61 67 65 7d 22 2c 22 65 72 72 6f 72 73 2e 6d 65 73 73 61 67 65 73 2e 61 63 63 65 73 73 5f 70 6f 6c 69 63 79 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 6e 65 77 5f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 5f 6e 6f 74 5f 61 6c 6c 6f 77 65 64 5f 62 79 5f 70 6c 61 6e 22 3a 22 59 6f 75 72 20 70 6c 61 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 69 73 20 66 65 61 74 75 72 65 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 64 64 20 6e 65 77 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 22 2c 22 65 72 72 6f 72 73 2e 6d 65 Data Ascii: big","errors.format":"%{attribute} %{message}","errors.messages.access_policy.organization_restrictions.new_organization_restrictions_not_allowed_by_plan":"Your plan does not support this feature. You cannot add new organization restrictions.","errors.me
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 73 5f 65 78 70 69 72 65 64 22 3a 22 55 70 6c 6f 61 64 65 64 20 61 74 74 61 63 68 6d 65 6e 74 73 20 65 78 70 69 72 65 64 2e 20 50 6c 65 61 73 65 20 72 65 6d 6f 76 65 20 74 68 65 20 61 74 74 61 63 68 6d 65 6e 74 73 20 61 6e 64 20 72 65 75 70 6c 6f 61 64 20 74 68 65 6d 20 62 65 66 6f 72 65 20 73 75 62 6d 69 74 74 69 6e 67 20 61 67 61 69 6e 2e 22 2c 22 65 72 72 6f 72 73 2e 6d 65 73 73 61 67 65 73 2e 73 61 6d 65 5f 61 63 63 6f 75 6e 74 22 3a 22 64 6f 65 73 20 6e 6f 74 20 62 65 6c 6f 6e 67 20 74 6f 20 61 20 76 61 6c 69 64 20 61 63 63 6f 75 6e 74 22 2c 22 68 65 6c 70 65 72 73 2e 73 65 6c 65 63 74 2e 70 72 6f 6d 70 74 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 22 2c 22 68 65 6c 70 65 72 73 2e 73 75 62 6d 69 74 2e 63 72 65 61 74 65 22 3a 22 43 72 65 61 74 65 Data Ascii: s_expired":"Uploaded attachments expired. Please remove the attachments and reupload them before submitting again.","errors.messages.same_account":"does not belong to a valid account","helpers.select.prompt":"Please select","helpers.submit.create":"Create
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 62 79 74 65 2e 6f 6e 65 22 3a 22 42 79 74 65 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 62 79 74 65 2e 6f 74 68 65 72 22 3a 22 42 79 74 65 73 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 67 62 22 3a 22 47 42 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 6b 62 22 3a 22 4b 42 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 6d 62 22 3a 22 4d 42 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 Data Ascii: man.storage_units.units.byte.one":"Byte","number.human.storage_units.units.byte.other":"Bytes","number.human.storage_units.units.gb":"GB","number.human.storage_units.units.kb":"KB","number.human.storage_units.units.mb":"MB","number.human.storage_units.uni
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 69 6f 6e 20 6c 6f 63 61 6c 65 20 76 61 6c 75 65 73 20 28 25 7b 76 61 6c 75 65 73 7d 29 20 61 72 65 20 69 6e 76 61 6c 69 64 20 66 6f 72 20 74 68 69 73 20 48 65 6c 70 20 43 65 6e 74 65 72 2e 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 72 74 69 63 6c 65 2e 65 72 72 6f 72 2e 6d 69 73 73 69 6e 67 5f 70 65 72 6d 69 73 73 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 59 6f 75 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 70 65 72 6d 69 73 73 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 2e 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 72 74 69 63 6c 65 2e 65 72 72 6f 72 2e 6d 69 73 73 69 6e 67 5f 75 73 65 72 5f 73 65 67 6d 65 6e 74 5f 69 64 22 3a 22 59 6f 75 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 75 73 65 72 5f 73 65 67 6d Data Ascii: ranslation locale values (%{values}) are invalid for this Help Center.","txt.help_center.article.error.missing_permission_group_id":"You must provide permission_group_id.","txt.help_center.article.error.missing_user_segment_id":"You must provide user_segm
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 79 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d 65 6e 74 2e 72 65 6c 61 74 69 76 65 5f 74 69 6d 65 2e 64 64 22 3a 22 25 64 20 64 61 79 73 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d 65 6e 74 2e 72 65 6c 61 74 69 76 65 5f 74 69 6d 65 2e 66 75 74 75 72 65 22 3a 22 69 6e 20 25 73 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d 65 6e 74 2e 72 65 6c 61 74 69 76 65 5f 74 69 6d 65 2e 68 22 3a 22 31 20 68 6f 75 72 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d Data Ascii: y","txt.help_center.assets.javascripts.moment.relative_time.dd":"%d days","txt.help_center.assets.javascripts.moment.relative_time.future":"in %s","txt.help_center.assets.javascripts.moment.relative_time.h":"1 hour","txt.help_center.assets.javascripts.mom
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 61 64 64 45 6d 61 69 6c 42 75 74 74 6f 6e 2e 6c 61 62 65 6c 22 3a 22 41 64 64 20 65 6d 61 69 6c 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 61 64 64 50 68 6f 6e 65 42 75 74 74 6f 6e 2e 6c 61 62 65 6c 22 3a 22 41 64 64 20 70 68 6f 6e 65 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 61 64 64 50 68 6f 6e 65 4e 75 6d 62 65 72 46 69 65 6c 64 2e 6c 61 62 65 6c 22 3a 22 41 64 64 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 22 2c 22 74 78 74 Data Ascii: alid email address","txt.help_center.contact_details_modal.addEmailButton.label":"Add email","txt.help_center.contact_details_modal.addPhoneButton.label":"Add phone","txt.help_center.contact_details_modal.addPhoneNumberField.label":"Add phone number","txt
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 65 6d 61 69 6c 56 65 72 69 66 69 63 61 74 69 6f 6e 41 6c 65 72 74 2e 62 6f 64 79 22 3a 22 41 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 65 6d 61 69 6c 20 77 61 73 20 73 65 6e 74 20 74 6f 20 7b 7b 65 6d 61 69 6c 5f 61 64 64 72 65 73 73 7d 7d 2e 20 49 66 20 79 6f 75 20 64 6f 6e 27 74 20 73 65 65 20 69 74 2c 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 61 6d 20 6f 72 20 7b 7b 23 72 65 73 65 6e 64 5f 6c 69 6e 6b 7d 7d 72 65 73 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 7b 7b 2f 72 65 73 65 6e 64 5f 6c 69 6e 6b 7d 7d 2e 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 65 6d 61 69 6c 56 Data Ascii: help_center.contact_details_modal.emailVerificationAlert.body":"A verification email was sent to {{email_address}}. If you don't see it, check your spam or {{#resend_link}}resend verification{{/resend_link}}.","txt.help_center.contact_details_modal.emailV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50098	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	582	OUT	GET /hc/theming_assets/708839/550881/script.js?digest=15992025776401 HTTP/1.1 Host: p17.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	900	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:01 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ua-compatible: IE=edge vary: Accept cache-control: max-age=604800, public x-zendesk-processed-host-header: p17.zdassets.com strict-transport-security: max-age=0 x-zendesk-origin-server: app-server-5dfb848bd4-bd4zz etag: W/"4d706d8b5e181225ef2dcae6146593c6" x-request-id: 8679fa11d9b17b8f-LHR x-runtime: 0.011723 Protocol: HTTP/1.1 always CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vs5vQLeNbtaoaBzWkqUJHMyzvBZn%2BpSwtsz8QnR3Lio2NuDz8BzpWMwqgvcuzYSDdItAvWTDnEYEefrA9EB4q0N%2FU%2B%2BtxV8mLsXwubYus0rkAQ%2FbDbRkeF4FuYiHmUsKkTI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961e8fced209f3-LAS
2024-04-24 12:33:01 UTC	469	IN	Data Raw: 33 65 64 30 0d 0a 2f 2a 0a 20 2a 20 54 68 65 6d 65 20 4e 61 6d 65 3a 20 56 65 72 74 69 6f 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 38 0a 20 2a 20 41 75 74 68 6f 72 3a 20 43 75 73 74 6f 6d 65 72 20 53 75 70 70 6f 72 74 20 54 68 65 6d 65 20 28 47 72 6f 77 20 53 68 69 6e 65 20 53 65 72 76 69 63 65 73 20 50 76 74 2e 20 4c 74 64 29 0a 20 2a 20 44 6f 77 6e 6c 6f 61 64 20 46 72 6f 6d 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 75 73 74 6f 6d 65 72 73 75 70 70 6f 72 74 74 68 65 6d 65 2e 63 6f 6d 0a 20 2a 20 43 6f 72 70 6f 72 61 74 65 20 57 65 62 73 69 74 65 20 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 6f 77 2d 73 68 69 6e 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 59 6f 75 20 6d 75 73 74 20 68 61 76 65 20 61 20 76 61 6c 69 64 20 6c 69 Data Ascii: 3ed0/* * Theme Name: Vertio * Version: 4.0.8 * Author: Customer Support Theme (Grow Shine Services Pvt. Ltd) * Download From: https://www.customersupporttheme.com * Corporate Website : https://www.grow-shine.com * License: You must have a valid li
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2f 20 4b 65 79 20 6d 61 70 0a 20 20 76 61 72 20 45 4e 54 45 52 20 3d 20 31 33 3b 0a 20 20 76 61 72 20 45 53 43 41 50 45 20 3d 20 32 37 3b 0a 20 20 76 61 72 20 53 50 41 43 45 20 3d 20 33 32 3b 0a 20 20 76 61 72 20 55 50 20 3d 20 33 38 3b 0a 20 20 76 61 72 20 44 4f 57 4e 20 3d 20 34 30 3b 0a 20 20 76 61 72 20 54 41 42 20 3d 20 39 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 73 74 20 28 65 6c 65 6d 65 6e 74 2c 20 73 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 69 66 20 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 63 6c 6f 73 65 73 74 28 Data Ascii: DOMContentLoaded', function() { // Key map var ENTER = 13; var ESCAPE = 27; var SPACE = 32; var UP = 38; var DOWN = 40; var TAB = 9; function closest (element, selector) { if (Element.prototype.closest) { return element.closest(
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 65 74 75 72 6e 46 6f 63 75 73 54 6f 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 46 6f 63 75 73 54 6f 45 6c 20 26 26 20 72 65 74 75 72 6e 46 6f 63 75 73 54 6f 45 6c 2e 66 6f 63 75 73 20 26 26 20 72 65 74 75 72 6e 46 6f 63 75 73 54 6f 45 6c 2e 66 6f 63 75 73 28 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 73 68 6f 77 20 66 6f 72 6d 20 63 6f 6e 74 72 6f 6c 73 20 77 68 65 6e 20 74 68 65 20 74 65 78 74 61 72 65 61 20 72 65 63 65 69 76 65 73 20 66 6f 63 75 73 20 6f 72 20 62 61 63 6b 62 75 74 74 6f 6e 20 69 73 20 75 73 65 64 20 61 6e 64 20 76 61 6c 75 65 20 65 78 69 73 74 73 0a 20 20 76 61 72 20 63 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 65 78 74 61 72 65 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 Data Ascii: uerySelector(returnFocusTo); returnFocusToEl && returnFocusToEl.focus && returnFocusToEl.focus(); } // show form controls when the textarea receives focus or backbutton is used and value exists var commentContainerTextarea = document.querySelec
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 65 73 74 43 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 72 69 67 67 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 46 69 65 6c 64 73 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 20 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 20 7d 29 3b 0a 20 20 20 20 20 20 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 53 75 62 6d 69 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 27 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 63 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 65 78 74 61 72 65 61 29 20 7b 0a 20 20 20 20 Data Ascii: estCommentContainerTrigger.style.display = 'none'; Array.prototype.forEach.call(requestCommentFields, function(e) { e.style.display = 'block'; }); requestCommentSubmit.style.display = 'inline-block'; if (commentContainerTextarea) {
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 65 61 2e 76 61 6c 75 65 20 3d 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 65 71 75 65 73 74 4d 61 72 6b 41 73 53 6f 6c 76 65 64 42 75 74 74 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 71 75 65 73 74 4d 61 72 6b 41 73 53 6f 6c 76 65 64 42 75 74 74 6f 6e 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 72 65 71 75 65 73 74 4d 61 72 6b 41 73 53 6f 6c 76 65 64 42 75 74 74 6f 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 73 6f 6c 76 65 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 53 75 62 6d 69 74 42 75 74 74 6f 6e 2e 64 69 73 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 Data Ascii: ea.value === '') { if (requestMarkAsSolvedButton) { requestMarkAsSolvedButton.innerText = requestMarkAsSolvedButton.getAttribute('data-solve-translation'); } requestCommentSubmitButton.disabled = true; } else {
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 4e 61 76 69 67 61 74 69 6f 6e 28 74 6f 67 67 6c 65 2c 20 6d 65 6e 75 29 20 7b 0a 20 20 20 20 76 61 72 20 69 73 45 78 70 61 6e 64 65 64 20 3d 20 6d 65 6e 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 61 72 69 61 2d 65 78 70 61 6e 64 65 64 27 29 20 3d 3d 3d 20 27 74 72 75 65 27 3b 0a 20 20 20 20 6d 65 6e 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 72 69 61 2d 65 78 70 61 6e 64 65 64 27 2c 20 21 69 73 45 78 70 61 6e 64 65 64 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 72 69 61 2d 65 78 70 61 6e 64 65 64 27 2c 20 21 69 73 45 78 70 61 6e 64 65 64 29 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 4e 61 76 69 67 61 74 69 6f 6e 28 74 6f 67 67 6c 65 Data Ascii: unction toggleNavigation(toggle, menu) { var isExpanded = menu.getAttribute('aria-expanded') === 'true'; menu.setAttribute('aria-expanded', !isExpanded); toggle.setAttribute('aria-expanded', !isExpanded); } function closeNavigation(toggle
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 6e 28 74 6f 67 67 6c 65 2c 20 74 68 69 73 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 20 20 7d 29 3b 0a 0a 20 20 2f 2f 20 53 75 62 6d 69 74 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 66 6f 72 6d 20 69 6e 20 74 68 65 20 72 65 71 75 65 73 74 20 70 61 67 65 0a 20 20 76 61 72 20 72 65 71 75 65 73 74 4f 72 67 61 6e 69 73 61 74 69 6f 6e 53 65 6c 65 63 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 23 72 65 71 75 65 73 74 2d 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 73 65 6c 65 63 74 27 29 3b 0a 0a 20 20 69 66 20 28 72 65 71 75 65 73 74 4f 72 67 61 6e 69 73 61 74 69 6f 6e 53 65 6c 65 63 74 29 20 7b 0a 20 20 20 20 72 65 71 75 65 73 74 4f 72 67 61 6e 69 73 61 74 69 6f 6e 53 65 6c 65 63 74 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: n(toggle, this); } }); }); // Submit organization form in the request page var requestOrganisationSelect = document.querySelector('#request-organization select'); if (requestOrganisationSelect) { requestOrganisationSelect.addEventL
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 63 6b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 74 72 69 67 67 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 72 69 67 67 65 72 29 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 74 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6d 75 6c 74 69 62 72 61 6e 64 2d 66 69 6c 74 65 72 2d 6c 69 73 74 2d 2d 63 6f 6c 6c 61 70 73 65 64 22 29 0a 20 20 20 20 20 20 7d 29 0a 20 20 20 20 7d 0a 20 20 7d 29 3b 0a 0a 20 20 2f 2f 20 49 66 20 74 68 65 72 65 20 61 72 65 20 61 6e 79 20 65 72 72 6f 72 20 6e Data Ascii: ck trigger.addEventListener("click", function(e) { e.stopPropagation(); trigger.parentNode.removeChild(trigger); filter.classList.remove("multibrand-filter-list--collapsed") }) } }); // If there are any error n
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 75 72 6e 3b 0a 0a 20 20 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 65 6e 64 22 2c 20 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 74 6f 70 22 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 6f 70 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 69 73 45 78 70 61 6e 64 65 64 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 20 74 72 75 65 29 3b Data Ascii: urn; this.menu.setAttribute("aria-expanded", false); this.menu.classList.remove("dropdown-menu-end", "dropdown-menu-top"); }, open: function() { if (this.isExpanded) return; this.menu.setAttribute("aria-expanded", true);
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 73 2e 69 6e 64 65 78 4f 66 28 63 75 72 72 65 6e 74 49 74 65 6d 29 3b 0a 20 20 20 20 20 20 76 61 72 20 70 72 65 76 69 6f 75 73 49 6e 64 65 78 20 3d 20 63 75 72 72 65 6e 74 49 6e 64 65 78 20 3c 3d 20 30 20 3f 20 74 68 69 73 2e 6d 65 6e 75 49 74 65 6d 73 2e 6c 65 6e 67 74 68 20 2d 20 31 20 3a 20 63 75 72 72 65 6e 74 49 6e 64 65 78 20 2d 20 31 3b 0a 0a 20 20 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 49 74 65 6d 73 5b 70 72 65 76 69 6f 75 73 49 6e 64 65 78 5d 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 63 6c 69 63 6b 48 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 69 73 45 78 70 61 6e 64 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 64 69 73 6d 69 73 73 28 29 3b 0a 20 Data Ascii: s.indexOf(currentItem); var previousIndex = currentIndex <= 0 ? this.menuItems.length - 1 : currentIndex - 1; this.menuItems[previousIndex].focus(); }, clickHandler: function() { if (this.isExpanded) { this.dismiss();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50096	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	578	OUT	GET /hc/assets/hc_enduser-fb88a13df887cd7e3577fa4983341c63.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	1125	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:01 GMT Content-Type: application/javascript Content-Length: 616722 Connection: close x-amz-id-2: 4/n2N3b1WWtHwOFaukuXkyAqMxiLBU6u8M5pW0lA1RBEuVvcdraFrt6g5RbeJYo9mdqmJkxBBIg= x-amz-request-id: K2S1KA332659YZGD x-amz-replication-status: COMPLETED Last-Modified: Wed, 24 Apr 2024 09:07:10 GMT ETag: "8d8be71cb03af1f2c20524f69272efe8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: tTetcAcuYAfmox863ZVRstOztipWSCyE CF-Cache-Status: HIT Age: 10863 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2FoqVZwE0AVXA1aX0LYNnSh8aWvkwcsAoaQF4BNKFDu8IiL0fLYwfH%2BlX95KDEtsg4J2SSj95Kx8Tx1cCaP7P0znfqx%2F8aCETzR6jgI3ppHSe2SsHjFIfC7Sw8jUE%2FUf2dgVwTg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e8fcae70ad1-LAS
2024-04-24 12:33:01 UTC	244	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 68 63 5f 65 6e 64 75 73 65 72 2d 66 62 38 38 61 31 33 64 66 38 38 37 63 64 37 65 33 35 37 37 66 61 34 39 38 33 33 34 31 63 36 33 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 61 3d 7b 33 38 30 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 36 33 34 31 29 7d 2c 37 38 37 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 6e 28 37 33 32 31 36 29 2c 61 3d 6e 28 33 37 35 36 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 28 74 68 69 73 20 69 Data Ascii: /! For license information please see hc_enduser-fb88a13df887cd7e3577fa4983341c63.js.LICENSE.txt /!function(){var e,t,n,r,a={38016:function(e,t,n){e.exports=n(66341)},78701:function(e,t,n){const r=n(73216),a=n(37566);function o(){if(!(this i
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 6f 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 61 2e 67 65 74 28 29 2e 66 69 6c 65 73 2e 69 6e 74 6c 3b 74 26 26 21 77 69 6e 64 6f 77 2e 49 6e 74 6c 3f 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 49 6e 74 6c 2e 43 6f 6c 6c 61 74 6f 72 7c 7c 28 49 6e 74 6c 2e 43 6f 6c 6c 61 74 6f 72 3d 6f 29 2c 65 28 74 29 7d 29 29 3a 65 28 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 6e 3d 61 2e 67 65 74 28 29 2e 66 69 6c 65 73 2c 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 2c 69 3d 6e 5b 22 72 65 6c 61 74 69 76 65 2e 22 2b 28 22 6e 6f 22 3d 3d 3d 6f 3f 22 6e 6e 22 3a 6f 29 5d 7c 7c 6e 5b 22 Data Ascii: nstanceof o))return new o}function i(e,t){!function(e){const t=a.get().files.intl;t&&!window.Intl?r(t,(function(t){t\|\|Intl.Collator\|\|(Intl.Collator=o),e(t)})):e()}((function(){const n=a.get().files,o=e.split("-")[0],i=n["relative."+("no"===o?"nn":o)]\|\|n["
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 65 3a 30 3d 3d 3d 74 26 26 65 2b 22 2e 7a 65 72 6f 22 69 6e 20 6e 3f 65 2b 22 2e 7a 65 72 6f 22 3a 31 3d 3d 3d 74 26 26 65 2b 22 2e 6f 6e 65 22 69 6e 20 6e 3f 65 2b 22 2e 6f 6e 65 22 3a 32 3d 3d 3d 74 26 26 65 2b 22 2e 74 77 6f 22 69 6e 20 6e 3f 65 2b 22 2e 74 77 6f 22 3a 65 2b 22 2e 6f 74 68 65 72 22 69 6e 20 6e 3f 65 2b 22 2e 6f 74 68 65 72 22 3a 65 2b 22 2e 6d 61 6e 79 22 69 6e 20 6e 3f 65 2b 22 2e 6d 61 6e 79 22 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 2e 67 65 74 28 29 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 28 29 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 Data Ascii: eturn void 0===t?e:0===t&&e+".zero"in n?e+".zero":1===t&&e+".one"in n?e+".one":2===t&&e+".two"in n?e+".two":e+".other"in n?e+".other":e+".many"in n?e+".many":e}function l(){if(void 0===i.get()\|\|"object"!=typeof i.get().translations)throw new Error("Could
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 22 29 2c 6f 3d 5b 5d 3b 6c 65 74 20 63 2c 75 3d 7b 70 61 72 74 73 3a 5b 5d 7d 2c 62 3d 30 3b 66 6f 72 28 3b 3b 29 7b 63 6f 6e 73 74 20 6e 3d 61 2e 65 78 65 63 28 72 29 3b 69 66 28 6e 5b 31 5d 26 26 75 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 74 65 78 74 22 2c 76 61 6c 75 65 3a 6e 5b 31 5d 7d 29 2c 22 5c 6e 22 3d 3d 3d 6e 5b 34 5d 29 75 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 6e 65 77 6c 69 6e 65 22 2c 76 61 6c 75 65 3a 68 28 74 2e 6e 65 77 6c 69 6e 65 2c 22 5c 6e 22 2c 62 2b 2b 29 7d 29 3b 65 6c 73 65 20 69 66 28 22 23 22 3d 3d 3d 6e 5b 32 5d 29 63 3d 7b 74 79 70 65 3a 22 72 61 6e 67 65 22 2c 6e 61 6d 65 3a 6e 5b 33 5d 2c 70 61 72 74 73 3a 5b 5d 7d 2c 75 2e 70 61 72 74 73 2e 70 75 73 68 28 63 29 2c 6f 2e 70 75 73 68 28 75 Data Ascii: "),o=[];let c,u={parts:[]},b=0;for(;;){const n=a.exec(r);if(n[1]&&u.parts.push({type:"text",value:n[1]}),"\n"===n[4])u.parts.push({type:"newline",value:h(t.newline,"\n",b++)});else if("#"===n[2])c={type:"range",name:n[3],parts:[]},u.parts.push(c),o.push(u
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 74 2e 73 74 61 72 74 73 57 69 74 68 28 65 29 7d 29 29 7d 2c 67 2e 67 65 74 43 6c 64 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 28 29 2c 21 69 2e 67 65 74 28 29 2e 63 6c 64 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 43 4c 44 52 20 64 61 74 61 20 69 6e 20 74 68 65 20 67 6c 6f 62 61 6c 20 49 31 38 4e 20 76 61 72 69 61 62 6c 65 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 74 68 65 20 43 4c 44 52 20 64 61 74 61 20 77 69 74 68 20 74 68 65 20 70 6c 75 67 69 6e 22 29 3b 72 65 74 75 72 6e 20 69 2e 67 65 74 28 29 2e 63 6c 64 72 7d 2c 67 2e 6c 61 6e 67 75 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 67 2e 67 65 74 43 6c 64 72 28 29 2c 6e Data Ascii: t.startsWith(e)}))},g.getCldr=function(){if(l(),!i.get().cldr)throw new Error("Could not find the CLDR data in the global I18N variable, make sure to include the CLDR data with the plugin");return i.get().cldr},g.language=function(e){const t=g.getCldr(),n
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 72 5b 65 5d 7d 29 29 7d 6d 28 29 7d 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 67 65 74 28 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 28 29 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 26 26 6d 28 29 2c 65 2e 65 78 70 6f 72 74 73 3d 67 7d 2c 39 38 39 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e Data Ascii: r[e]}))}m()},void 0!==i.get()&&"object"==typeof i.get().translations&&m(),e.exports=g},98971:function(e){e.exports=function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 72 28 65 2c 5b 7b 6b 65 79 3a 22 61 64 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 65 6e 65 72 73 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 Data Ascii: n(){function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e),this.listeners=[]}return r(e,[{key:"add",value:function(e){var t=this,n=function(e){return t.listeners.findIndex((function(t){return t.f
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 6e 2e 68 72 65 66 3d 66 2e 72 65 64 69 72 65 63 74 55 72 6c 7c 7c 22 2f 61 63 63 65 73 73 2f 6c 6f 67 69 6e 3f 72 65 74 75 72 6e 5f 74 6f 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 22 58 2d 5a 65 6e 64 65 73 6b 2d 52 65 6e 65 77 2d 53 65 73 73 69 6f 6e 22 5d 7c 7c 28 65 5b 22 58 2d 5a 65 6e 64 65 73 6b 2d 52 65 6e 65 77 2d 53 65 73 73 69 6f 6e 22 5d 3d 22 66 61 6c 73 65 22 29 2c 66 65 74 63 68 28 66 2e 72 Data Ascii: n.href=f.redirectUrl\|\|"/access/login?return_to="+encodeURIComponent(window.location.href),!0}function b(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return e["X-Zendesk-Renew-Session"]\|\|(e["X-Zendesk-Renew-Session"]="false"),fetch(f.r
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 54 69 6d 65 6f 75 74 29 28 35 39 65 33 29 3a 6e 3c 32 38 35 65 33 26 26 28 30 2c 6f 2e 73 65 74 49 64 6c 65 53 74 61 74 65 54 69 6d 65 6f 75 74 29 28 32 38 35 65 33 29 7d 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2d 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 74 2e 73 74 61 72 74 53 65 73 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 64 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 73 7c 7c 28 73 3d 21 30 2c 79 28 29 2c 28 30 2c 6f 2e 61 64 64 49 64 6c 65 53 74 61 74 65 4c 69 73 74 65 6e 65 72 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 69 64 6c 65 22 3d 3d 3d Data Ascii: Timeout)(59e3):n<285e3&&(0,o.setIdleStateTimeout)(285e3)}}},k=function(){return d-Date.now()};t.startSession=function(){f=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},d=Date.now(),s\|\|(s=!0,y(),(0,o.addIdleStateListener)((function(e){"idle"===
2024-04-24 12:33:01 UTC	1369	IN	Data Raw: 74 5c 74 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 66 61 6b 65 49 64 3a 20 66 61 6b 65 49 64 7d 29 3b 5c 74 5c 74 5c 74 7d 2c 20 74 69 6d 65 29 3b 5c 74 5c 74 5c 74 62 72 65 61 6b 3b 5c 74 5c 74 63 61 73 65 20 27 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 27 3a 5c 74 5c 74 5c 74 69 66 20 28 66 61 6b 65 49 64 54 6f 49 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 28 66 61 6b 65 49 64 29 29 20 7b 5c 74 5c 74 5c 74 5c 74 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 61 6b 65 49 64 54 6f 49 64 5b 66 61 6b 65 49 64 5d 29 3b 5c 74 5c 74 5c 74 5c 74 64 65 6c 65 74 65 20 66 61 6b 65 49 64 54 6f 49 64 5b 66 61 6b 65 49 64 5d 3b 5c 74 5c 74 5c 74 7d 5c 74 5c 74 5c 74 62 72 65 61 6b 3b 5c 74 5c 74 63 61 73 65 20 27 73 65 74 54 69 6d 65 6f 75 74 27 3a 5c 74 5c 74 5c 74 Data Ascii: t\tpostMessage({fakeId: fakeId});\t\t\t}, time);\t\t\tbreak;\t\tcase 'clearInterval':\t\t\tif (fakeIdToId.hasOwnProperty (fakeId)) {\t\t\t\tclearInterval(fakeIdToId[fakeId]);\t\t\t\tdelete fakeIdToId[fakeId];\t\t\t}\t\t\tbreak;\t\tcase 'setTimeout':\t\t\t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50106	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	555	OUT	GET /auth/v2/host/without_iframe.js HTTP/1.1 Host: signaturit.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	1145	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:33:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close p3p: CP="NOI DSP COR NID ADMa OPTa OUR NOR" vary: Accept x-xss-protection: 1; mode=block location: https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js cache-control: max-age=86400, public strict-transport-security: max-age=31536000; includeSubDomains x-zendesk-origin-server: classic-app-server-6f665fdb8c-2w8wz x-runtime: 0.048547 X-Zendesk-Zorg: yes X-Request-ID: 87953d0bdfed2f62-LAX CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0v44cs19aDp6hKQUIXTEQ7QwCJE26gRBcFo7497za6G3QNhbALeY7P%2FoK%2FWOyGv%2BXrw7KJUguX7bia0GC1PNJ90dK8M%2B6SGqIU2ogkRM%2BeaG3zqkTU0XmFf6mAmSfG71KkEVPxu%2B9K8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=7164262fe2a06e812899d7c447996a5777237e03-1713961981; path=/; domain=.signaturit.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87961e90cb3b0ad1-LAS
2024-04-24 12:33:01 UTC	165	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 61 75 74 68 2f 31 31 31 65 38 65 36 65 30 31 62 33 39 35 32 38 34 30 66 64 36 66 66 32 61 65 37 39 31 66 62 35 32 32 63 36 37 62 31 39 2f 76 32 2f 68 6f 73 74 2d 77 69 74 68 6f 75 74 2d 69 66 72 61 6d 65 2e 6a 73 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body>You are being <a href="https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js">redirected</a>.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50107	35.190.80.1	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	482	OUT	POST /report/v4?s=XpHIC7fKIugJPbfDoihWvjaREhci%2BxpEht%2BuWJO2fxxNJZkZAanfxfvI3IyAN05vAtPrm5r0YHNsJF4IPfZu30Nq6QDHht0vLqR57CyYRphnIeWEwE0Q1VPz1f805kHuhV1%2FKNA%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 453 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:01 UTC	453	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 30 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 38 2e 37 32 2e 31 31 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a Data Ascii: [{"age":3,"body":{"elapsed_time":507,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://help.signaturit.com/","sampling_fraction":1.0,"server_ip":"104.18.72.113","status_code":0,"type":"abandoned"},"type":"network-error","url":
2024-04-24 12:33:01 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 12:33:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50111	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:01 UTC	593	OUT	GET /auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:02 UTC	1083	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:02 GMT Content-Type: application/javascript Content-Length: 3594 Connection: close x-amz-id-2: YNhqtucY7tJICC0PGzRwtoOei7z0j4KI8KbXbhaqEUA25tLSupEfBuwCW0wnE3qESDc+xRI4JQ0= x-amz-request-id: FRAXGHP6ZPRA1HG0 x-amz-replication-status: COMPLETED Last-Modified: Wed, 25 Oct 2023 18:53:30 GMT ETag: "35166401913bc433e702156b229abb6d" x-amz-server-side-encryption: AES256 x-amz-version-id: KSmUWZZPaK1vsWrmUQVn23dSj1b63R2s CF-Cache-Status: HIT Age: 3626 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vYbudmIq7dZmCUKG35%2BAXc%2F60InKJrn%2FSfvF4HZG1Y0kwzorHW2HV22adHHO9DZhbqPW2lVcces5HAZaeXmAGs9pM4d2BKxEay1ppFBUKgfMO%2BdNbMcG2ivOxnvpLFCXUjPGm6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e95283009f7-LAS
2024-04-24 12:33:02 UTC	286	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 37 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 34 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 65 6c 6d 22 29 3b 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 28 65 7c 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 22 64 61 74 61 2d 22 2b 6e 28 65 29 2c 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6f 29 3b 2f 5e 28 74 72 75 65 7c 66 61 6c 73 65 29 24 2f 2e 74 65 73 74 28 69 29 26 26 28 69 3d 22 74 72 75 65 22 3d 3d 3d 69 29 2c 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 69 29 26 26 28 69 3d 70 61 72 73 65 49 6e 74 28 69 2c Data Ascii: (()=>{var t={78:(t,e,r)=>{var n=r(427);t.exports=function(t,e){if(!t)throw new Error("Missing elm");var r={};return(e\|\|[]).forEach((function(e){var o="data-"+n(e),i=t.getAttribute(o);/^(true\|false)$/.test(i)&&(i="true"===i),/^\d+$/.test(i)&&(i=parseInt(i,
2024-04-24 12:33:02 UTC	1369	IN	Data Raw: 34 32 37 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 29 7d 7d 2c 34 36 32 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5f 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 29 7d 7d 2c 35 34 3a 28 74 2c 65 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 Data Ascii: 427:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"-".concat(t.toLowerCase())}))}},462:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"_".concat(t.toLowerCase())}))}},54:(t,e,r)=>{function n(t
2024-04-24 12:33:02 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 5b 5d 2c 72 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 74 75 72 6e 54 6f 29 2e 6d 61 74 63 68 28 2f 28 68 74 74 70 3a 5c 2f 5c 2f 7c 68 74 74 70 73 3a 5c 2f 5c 2f 29 2b 28 2e 2a 29 28 5c 2f 61 64 6d 69 6e 7c 5c 2f 61 67 65 6e 74 7c 5c 2f 63 68 61 74 7c 5c 2f 63 6f 6e 6e 65 63 74 7c 5c 2f 65 78 70 6c 6f 72 65 7c 5c 2f 73 65 6c 6c 7c 6f 61 75 74 68 5c 2f 29 2f 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 50 61 72 61 6d 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 2e 6f 70 74 69 6f 6e 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 65 2e 70 75 73 68 28 22 22 2e 63 6f 6e 63 61 Data Ascii: unction(){var t=this,e=[],r=decodeURIComponent(this.options.returnTo).match(/(http:\/\/\|https:\/\/)+(.*)(\/admin\|\/agent\|\/chat\|\/connect\|\/explore\|\/sell\|oauth\/)/);return this.validParams.forEach((function(r){t.options.hasOwnProperty(r)&&e.push("".conca
2024-04-24 12:33:02 UTC	570	IN	Data Raw: 74 69 6f 6e 22 5d 2c 74 68 69 73 2e 65 6c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 73 72 63 2a 3d 22 2f 61 75 74 68 2f 76 32 22 5d 27 29 2c 21 74 68 69 73 2e 65 6c 6d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 73 63 72 69 70 74 20 74 61 67 20 66 6f 72 20 7a 65 6e 64 65 73 6b 5f 61 75 74 68 22 29 3b 69 66 28 74 68 69 73 2e 64 65 63 6c 61 72 61 74 69 76 65 4f 70 74 69 6f 6e 73 3d 69 28 74 68 69 73 2e 65 6c 6d 2c 74 68 69 73 2e 4b 45 59 53 29 2c 21 74 68 69 73 2e 64 65 63 6c 61 72 61 74 69 76 65 4f 70 74 69 6f 6e 73 2e 61 75 74 68 44 6f 6d 61 69 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c Data Ascii: tion"],this.elm=document.currentScript\|\|document.querySelector('[src*="/auth/v2"]'),!this.elm)throw new Error("Could not find script tag for zendesk_auth");if(this.declarativeOptions=i(this.elm,this.KEYS),!this.declarativeOptions.authDomain){var t=this.el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50091	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:02 UTC	1834	OUT	POST /hc/activity HTTP/1.1 Host: help.signaturit.com Connection: keep-alive Content-Length: 380 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://help.signaturit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.signaturit.com/hc/en-us/sections/20917497510929-Certified-files Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1
2024-04-24 12:33:02 UTC	380	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 73 65 63 74 69 6f 6e 5f 76 69 65 77 65 64 22 2c 22 64 61 74 61 22 3a 22 42 41 68 37 43 44 6f 50 63 32 56 6a 64 47 6c 76 62 6c 39 70 5a 47 77 72 43 42 45 38 41 6a 77 47 45 7a 6f 4c 62 47 39 6a 59 57 78 6c 53 53 49 4b 5a 57 34 74 64 58 4d 47 4f 67 5a 46 56 44 6f 4b 58 32 31 6c 64 47 46 37 44 44 6f 50 59 57 4e 6a 62 33 56 75 64 46 39 70 5a 47 6b 44 35 39 41 4b 4f 68 4e 6f 5a 57 78 77 58 32 4e 6c 62 6e 52 6c 63 6c 39 70 5a 47 6b 45 63 62 37 74 43 7a 6f 4e 59 6e 4a 68 62 6d 52 66 61 57 52 70 41 2b 46 6e 43 44 6f 4d 64 58 4e 6c 63 6c 39 70 5a 44 41 36 45 33 56 7a 5a 58 4a 66 63 6d 39 73 5a 56 39 75 59 57 31 6c 53 53 49 4f 51 55 35 50 54 6c 6c 4e 54 31 56 54 42 6a 73 48 56 44 73 47 53 53 49 4b 5a 57 34 74 64 58 4d 47 4f 77 64 55 4f Data Ascii: {"event":"section_viewed","data":"BAh7CDoPc2VjdGlvbl9pZGwrCBE8AjwGEzoLbG9jYWxlSSIKZW4tdXMGOgZFVDoKX21ldGF7DDoPYWNjb3VudF9pZGkD59AKOhNoZWxwX2NlbnRlcl9pZGkEcb7tCzoNYnJhbmRfaWRpA+FnCDoMdXNlcl9pZDA6E3VzZXJfcm9sZV9uYW1lSSIOQU5PTllNT1VTBjsHVDsGSSIKZW4tdXMGOwdUO
2024-04-24 12:33:03 UTC	834	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 87961e96adbb0ad3-LAS CF-Cache-Status: DYNAMIC referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none X-Request-ID: 87961e97a4f30ad3-LAS x-runtime: 0.002685 x-xss-protection: 1; mode=block X-Zendesk-Zorg: yes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izlXF%2BVjAYOcqFuY94qmpt8onqjBrL9D%2FqBEFpt%2BExa2lDz6T0epnnCHT7D21JiutnKAfJt536oMlRUncHnMG9d6Mm5GpdpOKGgpKHbhQ2wJ4Xt2rrZtkzbd%2Bhama%2FY1OO6%2F21o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:33:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50112	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:02 UTC	574	OUT	GET /ekr/snippet.js?key=web_widget/signaturit.zendesk.com HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:03 UTC	1144	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Type: application/javascript Content-Length: 10187 Connection: close x-amz-id-2: 4OYei3DkpSYkS6dKBDFbZjtSdVexoHjQ1eS9Mf3MCmEOCurZC/+Isbd1AVVpsiKAmJ7FWWviPJSrjy0q3mZxeg== x-amz-request-id: 9X4B0G1GWNB25PJG x-amz-replication-status: PENDING Last-Modified: Mon, 15 Jan 2024 02:56:11 GMT ETag: "c0053b411b753138af468db1bd3b19f3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: sR7NItkX1i3nKckB5vEat7T2DUmPnRiJ CF-Cache-Status: HIT Age: 46 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FoCHr1fXxfCglsQOeIIviq6d1YvRA%2BwrHYzjtotfdH2OwZZBdvaV7N1DUaegKXmtRDrFxy0J8%2BQpIU%2BhnxVvKu9Ibf5NKEWoQ2xBENGoOah1s4y5DlDA4LF%2BEz8gbPNqnDncu5M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e99cddc0ad5-LAS
2024-04-24 12:33:03 UTC	225	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").redu
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 2e 72 65 61 64 79 Data Ascii: ce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.ready
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 7d 7d 61 7c 7c 28 63 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 61 72 65 6e 74 4e Data Ascii: }}a\|\|(c=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.parentN
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 73 73 20 6f 7b 63 Data Ascii: rEach(t.bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};class o{c
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 29 7d 29 29 7d 29 29 7d 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 Data Ascii: )}))}))}createIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("aria-hid
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 20 75 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 72 6e 69 6e 67 28 Data Ascii: u{constructor(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWarning(
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 61 6d 65 3f 6e 65 77 20 63 28 65 2e 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 65 74 50 Data Ascii: ame?new c(e.id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return null}getP
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 2e 67 65 74 53 63 72 69 70 74 53 72 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 63 Data Ascii: .getScriptSrc(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}static
2024-04-24 12:33:03 UTC	379	IN	Data Raw: 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e 28 28 65 3d 3e 74 2e 67 65 74 50 72 6f 64 75 63 74 73 28 65 2c 72 29 29 29 2e 74 68 65 6e 28 28 65 3d Data Ascii: =e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then((e=>t.getProducts(e,r))).then((e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50113	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:02 UTC	573	OUT	GET /hc/assets/react-59929afd541f3d4213b2a81d773e1d73.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:03 UTC	1141	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Type: application/javascript Content-Length: 137983 Connection: close x-amz-id-2: Evc6NoNBzuF96/nbBX7mx1VP8P91FZKe3RZuS+gxFAQI6hmGZs2OFOe12l9uGUJ/V26PRaYRiPgEkgUesHNALA== x-amz-request-id: 479MRY1GN8AFF3RZ x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Mar 2024 14:12:11 GMT ETag: "369b985d745fd3baca53908699104a02" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: RQb7kx3.s6jSiSbjf_12SWabAKTnowXg CF-Cache-Status: HIT Age: 80723 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p1E%2BtDT%2Bw4N%2BeVND2GHAQop0mRIyBIHIHbYFFnXuRA1VtdYkNEziTAL9WkgUia%2FlJ3w1wMKf%2BhnJYOK3KNx8oi8hH4ZI0%2BItdruQDESarUg4woYHtmOWx0bPLGGadCfDPxzgH8w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e99c800a984-LAS
2024-04-24 12:33:03 UTC	228	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2d 35 39 39 32 39 61 66 64 35 34 31 66 33 64 34 32 31 33 62 32 61 38 31 64 37 37 33 65 31 64 37 33 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 35 31 34 5d 2c 7b 33 38 36 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 34 31 38 29 2c 6c 3d 6e Data Ascii: /! For license information please see react-59929afd541f3d4213b2a81d773e1d73.js.LICENSE.txt /"use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[75514],{38698:function(e,t,n){var r=n(27418),l=n
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 28 36 37 32 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 3b 72 65 74 75 72 6e 22 4d 69 6e 69 66 69 65 64 20 52 65 61 63 74 20 65 72 72 6f 72 20 23 22 2b 65 2b 22 3b 20 76 69 73 69 74 20 22 2b 74 2b 22 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 20 6d 65 73 73 61 67 65 20 6f 72 20 75 73 65 20 74 68 65 20 6e 6f 6e 2d 6d 69 6e 69 66 69 Data Ascii: (67294);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minifi
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 6d 3a 72 65 74 75 72 6e 20 45 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 76 3a 72 65 74 75 72 6e 20 45 28 65 2e 5f 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 3a 74 3d 65 2e 5f 70 61 79 6c 6f 61 64 2c 65 3d 65 2e 5f 69 6e 69 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 45 28 65 28 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 78 3d 6c 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 2c 43 3d 7b 7d 3b 66 75 6e 63 74 69 6f Data Ascii: \|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case m:return E(e.type);case v:return E(e._render);case g:t=e._payload,e=e._init;try{return E(e(t))}catch(e){}}return null}var x=l.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,C={};functio
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 6d 6c 46 6f 72 22 2c 22 66 6f 72 22 5d 2c 5b 22 68 74 74 70 45 71 75 69 76 22 2c 22 68 74 74 70 2d 65 71 75 69 76 22 5d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 30 5d 3b 4d 5b 74 5d 3d 6e 65 77 20 44 28 74 2c 31 2c 21 31 2c 65 5b 31 5d 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 2c 22 64 72 61 67 67 61 62 6c 65 22 2c 22 73 70 65 6c 6c 43 68 65 63 6b 22 2c 22 76 61 6c 75 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4d 5b 65 5d 3d 6e 65 77 20 44 28 65 2c 32 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 61 75 74 6f 52 65 76 65 72 73 65 22 2c 22 65 78 74 65 Data Ascii: mlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];M[t]=new D(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){M[e]=new D(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","exte
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 73 69 7a 65 20 66 6f 6e 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 20 66 6f 6e 74 2d 73 74 79 6c 65 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 20 66 6f 6e 74 2d 77 65 69 67 68 74 20 67 6c 79 70 68 2d 6e 61 6d 65 20 67 6c 79 70 68 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 67 6c 79 70 68 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 2d 76 65 72 74 69 63 61 6c 20 68 6f 72 69 7a 2d 61 64 76 2d 78 20 68 6f 72 69 7a 2d 6f 72 69 67 69 6e 2d 78 20 69 6d 61 67 65 2d 72 65 6e 64 65 72 69 6e 67 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 20 6c 69 67 68 74 69 6e 67 2d 63 6f 6c 6f 72 20 6d 61 72 6b 65 72 2d 65 6e 64 20 6d 61 72 6b 65 72 2d 6d 69 64 20 6d 61 72 6b 65 72 2d 73 74 61 72 74 20 6f 76 65 72 6c 69 6e 65 2d Data Ascii: size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 69 6e 6b 3a 68 72 65 66 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 2c 21 30 2c 21 31 29 2c 5b 22 73 72 63 22 2c 22 68 72 65 66 22 2c 22 61 63 74 69 6f 6e 22 2c 22 66 6f 72 6d 41 63 74 69 6f 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4d 5b 65 5d 3d 6e 65 77 20 44 28 65 2c 31 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 30 2c 21 30 29 7d 29 29 3b 76 61 72 20 55 3d 2f 5b 22 27 26 3c 3e 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 22 22 2b 65 3b 65 3d 22 22 2b 65 3b 76 61 72 20 74 3d 55 2e 65 Data Ascii: ink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){M[e]=new D(e,1,!1,e.toLowerCase(),null,!0,!0)}));var U=/["'&<>]/;function V(e){if("boolean"==typeof e\|\|"number"==typeof e)return""+e;e=""+e;var t=U.e
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 31 2f 74 29 7c 7c 65 21 3d 65 26 26 74 21 3d 74 7d 2c 48 3d 6e 75 6c 6c 2c 42 3d 6e 75 6c 6c 2c 6a 3d 6e 75 6c 6c 2c 51 3d 21 31 2c 24 3d 21 31 2c 71 3d 6e 75 6c 6c 2c 4b 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 59 28 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 48 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 33 32 31 29 29 3b 72 65 74 75 72 6e 20 48 7d 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 69 66 28 30 3c 4b 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 33 31 32 29 29 3b 72 65 74 75 72 6e 7b 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3a 6e 75 6c 6c 2c 71 75 65 75 65 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6a 3f 6e 75 6c 6c 3d 3d 3d 42 3f 28 51 3d 21 31 2c 42 3d 6a 3d 58 28 29 29 3a Data Ascii: 1/t)\|\|e!=e&&t!=t},H=null,B=null,j=null,Q=!1,$=!1,q=null,K=0;function Y(){if(null===H)throw Error(a(321));return H}function X(){if(0<K)throw Error(a(312));return{memoizedState:null,queue:null,next:null}}function G(){return null===j?null===B?(Q=!1,B=j=X()):
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 6f 65 3d 7b 72 65 61 64 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 65 2e 74 68 72 65 61 64 49 44 3b 72 65 74 75 72 6e 20 5f 28 65 2c 74 29 2c 65 5b 74 5d 7d 2c 75 73 65 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 59 28 29 3b 76 61 72 20 74 3d 61 65 2e 74 68 72 65 61 64 49 44 3b 72 65 74 75 72 6e 20 5f 28 65 2c 74 29 2c 65 5b 74 5d 7d 2c 75 73 65 4d 65 6d 6f 3a 6e 65 2c 75 73 65 52 65 64 75 63 65 72 3a 74 65 2c 75 73 65 52 65 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 48 3d 59 28 29 3b 76 61 72 20 74 3d 28 6a 3d 47 28 29 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 3f 28 65 3d 7b 63 75 72 72 65 6e 74 3a 65 7d 2c 6a 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 Data Ascii: oe={readContext:function(e){var t=ae.threadID;return _(e,t),e[t]},useContext:function(e){Y();var t=ae.threadID;return _(e,t),e[t]},useMemo:ne,useReducer:te,useRef:function(e){H=Y();var t=(j=G()).memoizedState;return null===t?(e={current:e},j.memoizedState
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 70 61 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 74 61 72 74 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 6c 69 6e 65 43 6c 61 6d 70 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 74 61 62 53 69 7a 65 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 44 61 73 68 61 72 72 61 79 3a 21 30 2c 73 74 72 6f 6b 65 44 61 73 68 Data Ascii: ,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDash
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 29 7b 76 61 72 20 64 3d 6f 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6c 2e 70 72 6f 70 73 2c 69 2e 73 74 61 74 65 29 3b 6e 75 6c 6c 21 3d 64 26 26 28 69 2e 73 74 61 74 65 3d 72 28 7b 7d 2c 69 2e 73 74 61 74 65 2c 64 29 29 7d 7d 65 6c 73 65 20 69 66 28 48 3d 7b 7d 2c 69 3d 6f 28 6c 2e 70 72 6f 70 73 2c 75 2c 66 29 2c 6e 75 6c 6c 3d 3d 28 69 3d 5a 28 6f 2c 6c 2e 70 72 6f 70 73 2c 69 2c 75 29 29 7c 7c 6e 75 6c 6c 3d 3d 69 2e 72 65 6e 64 65 72 29 72 65 74 75 72 6e 20 76 6f 69 64 20 45 65 28 65 3d 69 2c 6f 29 3b 69 66 28 69 2e 70 72 6f 70 73 3d 6c 2e 70 72 6f 70 73 2c 69 2e 63 6f 6e 74 65 78 74 3d 75 2c 69 2e 75 70 64 61 74 65 Data Ascii: etDerivedStateFromProps){var d=o.getDerivedStateFromProps.call(null,l.props,i.state);null!=d&&(i.state=r({},i.state,d))}}else if(H={},i=o(l.props,u,f),null==(i=Z(o,l.props,i,u))\|\|null==i.render)return void Ee(e=i,o);if(i.props=l.props,i.context=u,i.update

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50115	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:02 UTC	573	OUT	GET /hc/assets/61618-e00125bb003008fb81737a0eb569cb2b.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:03 UTC	1130	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Type: application/javascript Content-Length: 28304 Connection: close x-amz-id-2: ok6VyKSViV41Bdr5xX7kOTxb7YUSlTWl6no/lCpi7nzDrOFPMNnQ8Xnm2u3BGJv566x3KXGSbhs= x-amz-request-id: RTNWD1FJNJR7QT2E x-amz-replication-status: COMPLETED Last-Modified: Thu, 30 Nov 2023 13:04:20 GMT ETag: "e5f85e6bd463e2e2730ee981abc816ab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: hoIIGkfOPU86DTEDKdcBXVvhoAJeBsRP CF-Cache-Status: HIT Age: 89740 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lbzf%2Fet%2BkFWIs%2FdPQBOmHgemPsegnZsgypyC2vo9Wpec81V1vsjTqQtSsXc9Fv7NicKs3CRYsQdrjFjWtirjY%2FVRIyMLLg%2FNA0%2Bt14bXaZdS9ffg%2FaGiHYK7BIbTZb4quUvC7sk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e99db02a982-LAS
2024-04-24 12:33:03 UTC	239	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 31 36 31 38 2d 65 30 30 31 32 35 62 62 30 30 33 30 30 38 66 62 38 31 37 33 37 61 30 65 62 35 36 39 63 62 32 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 36 31 38 5d 2c 7b 39 30 30 39 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 38 31 39 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 31 35 36 38 34 3a 66 75 6e 63 74 69 6f 6e Data Ascii: /! For license information please see 61618-e00125bb003008fb81737a0eb569cb2b.js.LICENSE.txt /(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[61618],{90093:function(e,t,n){var r=n(28196);e.exports=r},15684:function
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 39 33 37 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 36 35 33 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 33 38 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 37 33 31 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 35 33 34 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 34 35 30 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 33 30 35 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 32 37 37 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 37 33 33 38 31 29 3b 76 61 72 20 72 3d 6e 28 33 35 37 30 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 22 46 75 6e 63 74 69 6f 6e 22 29 2e Data Ascii: (e,t,n){var r=n(19373);e.exports=r},65362:function(e,t,n){var r=n(63383);e.exports=r},73151:function(e,t,n){var r=n(9534);e.exports=r},45012:function(e,t,n){var r=n(23059);e.exports=r},27700:function(e,t,n){n(73381);var r=n(35703);e.exports=r("Function").
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 6e 28 37 36 38 38 37 29 2c 6f 3d 6e 28 39 38 33 30 38 29 3b 72 28 7b 74 61 72 67 65 74 3a 22 46 75 6e 63 74 69 6f 6e 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 21 3d 3d 6f 7d 2c 7b 62 69 6e 64 3a 6f 7d 29 7d 2c 32 38 31 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 32 34 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 34 38 32 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 34 31 32 32 29 7d 2c 35 31 37 39 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 39 34 34 37 29 7d 2c 36 37 35 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 Data Ascii: n(76887),o=n(98308);r({target:"Function",proto:!0,forced:Function.bind!==o},{bind:o})},28196:function(e,t,n){var r=n(16246);e.exports=r},48216:function(e,t,n){e.exports=n(14122)},51791:function(e,t,n){e.exports=n(69447)},67552:function(e,t,n){e.exports=n(
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 61 72 20 73 3d 6f 5b 22 75 73 65 49 64 22 2e 74 6f 53 74 72 69 6e 67 28 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 7b 63 6f 6e 74 65 78 74 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 74 2c 69 74 65 6d 73 3a 6e 2c 73 65 74 3a 6f 7d 29 7b 6c 65 74 20 61 3d 72 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 28 7b 65 6c 65 6d 65 6e 74 3a 65 2c 69 6e 64 65 78 3a 74 2c 2e 2e 2e 6e 7d 29 3d 3e 65 3f 28 6f 28 28 72 3d 3e 7b 69 66 28 6e 75 6c 6c 21 3d 74 26 26 2d 31 21 3d 3d 74 29 72 65 74 75 72 6e 20 70 28 72 2c 7b 65 6c 65 6d 65 6e 74 3a 65 2c 69 6e 64 65 78 3a 74 2c 2e 2e 2e 6e 7d 2c 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 7b 2e 2e 2e 6e 2c 65 6c 65 6d 65 6e 74 3a 65 2c 69 6e 64 65 78 3a 30 7d 5d 3b 69 66 28 72 2e 66 69 6e 64 28 28 74 3d Data Ascii: ar s=o["useId".toString()];function d({context:e,children:t,items:n,set:o}){let a=r.useCallback((({element:e,index:t,...n})=>e?(o((r=>{if(null!=t&&-1!==t)return p(r,{element:e,index:t,...n},t);if(0===r.length)return[{...n,element:e,index:0}];if(r.find((t=
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 4d 65 6d 6f 28 28 28 29 3d 3e 28 7b 64 65 73 63 65 6e 64 61 6e 74 73 3a 6e 2c 72 65 67 69 73 74 65 72 44 65 73 63 65 6e 64 61 6e 74 3a 61 7d 29 29 2c 5b 6e 2c 61 5d 29 7d 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 26 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 50 4f 53 49 54 49 4f 4e 5f 50 52 45 43 45 44 49 4e 47 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 26 26 6e 20 69 6e 20 65 3f 5b 2e 2e 2e 65 2e 73 6c 69 63 65 28 30 2c 6e 29 2c 74 2c 2e 2e 2e 65 2e 73 6c 69 63 65 28 6e 29 5d 3a 5b 2e 2e 2e 65 2c 74 5d 7d 76 61 72 20 68 3d 22 43 4c 45 41 52 5f 53 45 4c Data Ascii: Memo((()=>({descendants:n,registerDescendant:a})),[n,a])},t)}function f(e,t){return Boolean(t.compareDocumentPosition(e)&Node.DOCUMENT_POSITION_PRECEDING)}function p(e,t,n){return null!=n&&n in e?[...e.slice(0,n),t,...e.slice(n)]:[...e,t]}var h="CLEAR_SEL
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 49 64 3a 68 2c 64 72 6f 70 64 6f 77 6e 52 65 66 3a 6f 2c 6d 6f 75 73 65 44 6f 77 6e 53 74 61 72 74 50 6f 73 52 65 66 3a 45 2c 70 6f 70 6f 76 65 72 52 65 66 3a 61 2c 72 65 61 64 79 54 6f 53 65 6c 65 63 74 3a 62 2c 73 65 6c 65 63 74 43 61 6c 6c 62 61 63 6b 73 3a 79 2c 73 74 61 74 65 3a 76 2c 74 72 69 67 67 65 72 43 6c 69 63 6b 65 64 52 65 66 3a 67 2c 74 72 69 67 67 65 72 52 65 66 3a 6e 7d 2c 28 30 2c 69 2e 6d 66 29 28 74 29 3f 74 28 7b 69 73 45 78 70 61 6e 64 65 64 3a 76 2e 69 73 45 78 70 61 6e 64 65 64 2c 69 73 4f 70 65 6e 3a 76 2e 69 73 45 78 70 61 6e 64 65 64 7d 29 3a 74 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 7b 6f 6e 4b 65 79 44 6f 77 6e 3a 65 2c 6f 6e 4d 6f 75 73 65 44 6f 77 6e 3a 74 2c 69 64 3a 6e 2c 72 65 66 3a 6f 2c 2e 2e 2e 61 7d 29 7b 6c 65 Data Ascii: Id:h,dropdownRef:o,mouseDownStartPosRef:E,popoverRef:a,readyToSelect:b,selectCallbacks:y,state:v,triggerClickedRef:g,triggerRef:n},(0,i.mf)(t)?t({isExpanded:v.isExpanded,isOpen:v.isExpanded}):t))};function M({onKeyDown:e,onMouseDown:t,id:n,ref:o,...a}){le
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 6f 77 6e 49 74 65 6d 22 29 2c 4e 3d 72 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 2c 5b 4f 2c 50 5d 3d 72 2e 75 73 65 53 74 61 74 65 28 76 7c 7c 22 22 29 2c 5f 3d 72 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 65 3d 3e 7b 21 76 26 26 65 3f 2e 74 65 78 74 43 6f 6e 74 65 6e 74 26 26 50 28 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 7d 29 2c 5b 76 5d 29 2c 41 3d 72 2e 75 73 65 52 65 66 28 21 31 29 2c 5b 6a 2c 55 5d 3d 28 30 2c 69 2e 42 52 29 28 4e 2c 6e 75 6c 6c 29 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6c 65 74 20 6f 3d 28 30 2c 69 2e 4e 57 29 28 29 2c 7b 72 65 67 69 73 74 65 72 44 65 73 63 65 6e 64 61 6e 74 3a 61 2c 64 65 73 63 65 6e 64 61 6e 74 73 3a 75 7d 3d 72 2e 75 73 65 43 6f 6e 74 65 78 74 28 74 29 2c 63 3d 6e 3f 3f 75 2e 66 69 6e 64 49 6e Data Ascii: ownItem"),N=r.useRef(null),[O,P]=r.useState(v\|\|""),_=r.useCallback((e=>{!v&&e?.textContent&&P(e.textContent)}),[v]),A=r.useRef(!1),[j,U]=(0,i.BR)(N,null),F=function(e,t,n){let o=(0,i.NW)(),{registerDescendant:a,descendants:u}=r.useContext(t),c=n??u.findIn
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 75 72 72 65 6e 74 2e 66 6f 63 75 73 28 29 2c 79 28 7b 74 79 70 65 3a 62 2c 70 61 79 6c 6f 61 64 3a 7b 69 6e 64 65 78 3a 46 7d 7d 29 29 7d 29 29 2c 6f 6e 4d 6f 75 73 65 4c 65 61 76 65 3a 28 30 2c 69 2e 4d 6a 29 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 7b 74 79 70 65 3a 68 7d 29 7d 29 29 2c 6f 6e 4d 6f 75 73 65 4d 6f 76 65 3a 28 30 2c 69 2e 4d 6a 29 28 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 44 2e 63 75 72 72 65 6e 74 29 7b 6c 65 74 20 74 3d 38 2c 6e 3d 4d 61 74 68 2e 61 62 73 28 65 2e 63 6c 69 65 6e 74 58 2d 52 2e 63 75 72 72 65 6e 74 2e 78 29 2c 72 3d 4d 61 74 68 2e 61 62 73 28 65 2e 63 6c 69 65 6e 74 59 2d 52 2e 63 75 72 72 65 6e 74 2e 79 29 3b 28 6e 3e 74 7c 7c 72 3e 74 29 26 26 28 44 2e 63 75 72 72 65 6e 74 3d 21 30 29 7d Data Ascii: urrent.focus(),y({type:b,payload:{index:F}}))})),onMouseLeave:(0,i.Mj)(c,(function(e){y({type:h})})),onMouseMove:(0,i.Mj)(l,(function(e){if(!D.current){let t=8,n=Math.abs(e.clientX-R.current.x),r=Math.abs(e.clientY-R.current.y);(n>t\|\|r>t)&&(D.current=!0)}
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 2c 64 72 6f 70 64 6f 77 6e 52 65 66 3a 63 7d 7d 29 7d 29 2c 5b 63 2c 61 2c 77 2c 45 2c 52 2c 44 2c 70 5d 29 3b 6c 65 74 20 6b 3d 28 30 2c 69 2e 4d 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 6b 65 79 3a 74 7d 3d 65 3b 69 66 28 64 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 45 6e 74 65 72 22 3a 63 61 73 65 22 20 22 3a 6c 65 74 20 6e 3d 77 2e 66 69 6e 64 28 28 65 3d 3e 65 2e 69 6e 64 65 78 3d 3d 3d 70 29 29 3b 6e 26 26 21 6e 2e 64 69 73 61 62 6c 65 64 26 26 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 2e 69 73 4c 69 6e 6b 26 26 6e 2e 65 6c 65 6d 65 6e 74 3f 6e 2e 65 6c 65 6d 65 6e 74 2e 63 6c 69 63 6b 28 29 3a 28 4c 28 75 2e 63 75 72 72 65 6e 74 29 2c 6c 2e 63 75 72 72 65 6e 74 5b 6e 2e 69 6e 64 65 78 5d 26 26 6c 2e 63 Data Ascii: ,dropdownRef:c}})}),[c,a,w,E,R,D,p]);let k=(0,i.Mj)((function(e){let{key:t}=e;if(d)switch(t){case"Enter":case" ":let n=w.find((e=>e.index===p));n&&!n.disabled&&(e.preventDefault(),n.isLink&&n.element?n.element.click():(L(u.current),l.current[n.index]&&l.c
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 66 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 3d 63 7c 7c 22 62 6f 74 68 22 3d 3d 3d 63 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 6c 65 74 20 74 3d 28 73 3f 70 3a 66 29 28 29 3b 6f 28 22 6f 70 74 69 6f 6e 22 3d 3d 3d 75 3f 74 3a 74 5b 75 5d 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 50 61 67 65 55 70 22 3a 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 6c 65 74 20 74 3d 28 65 2e 63 74 72 6c 4b 65 79 3f 70 3a 68 29 28 29 3b 6f 28 22 6f 70 74 69 6f 6e 22 3d 3d 3d 75 3f 74 3a 74 5b 75 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 48 6f 6d 65 22 3a 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 6c 65 74 20 6e 3d 68 28 29 3b 6f 28 22 6f 70 74 69 6f 6e 22 3d 3d 3d 75 3f 6e 3a 6e 5b 75 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 Data Ascii: f("horizontal"===c\|\|"both"===c){e.preventDefault();let t=(s?p:f)();o("option"===u?t:t[u])}break;case"PageUp":e.preventDefault();let t=(e.ctrlKey?p:h)();o("option"===u?t:t[u]);break;case"Home":e.preventDefault();let n=h();o("option"===u?n:n[u]);break;case"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50114	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:02 UTC	577	OUT	GET /hc/assets/subscribe-bcea9748128daed810dc1d824bcc210d.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:03 UTC	1118	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Type: application/javascript Content-Length: 21467 Connection: close x-amz-id-2: stoiGA9fiep/1zSRnRvjlKveWgx9nUEv4RKug/Km15jkHjt2hdbdELTFzUSEMIzUDu1BJg7xZ98= x-amz-request-id: 2AZSB9ZS1A71F941 x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Jan 2024 10:57:48 GMT ETag: "ff27f27e6f093644d38df3b19332ee00" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: .4Lbp15QtM6dhBXWoJitC7eTkepioeHB CF-Cache-Status: HIT Age: 87846 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W87lKz2N1TK1EsCWXML4G2XIe4EYT8jyWpzohhp7ntn6O4NrMtaxZ%2BlyUGaMtQC0xsc1GIsVMcoT3PfYyttPaxYqLnn7tGQWhwM4OlMxRa9XCMMHHij3CxQoWQJgTur5BhexvSQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961e99dbc60adb-LAS
2024-04-24 12:33:03 UTC	251	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 75 62 73 63 72 69 62 65 2d 62 63 65 61 39 37 34 38 31 32 38 64 61 65 64 38 31 30 64 63 31 64 38 32 34 62 63 63 32 31 30 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 32 39 35 2c 36 33 38 34 30 5d 2c 7b 36 31 34 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 6f 3d 74 28 36 37 32 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 Data Ascii: /! For license information please see subscribe-bcea9748128daed810dc1d824bcc210d.js.LICENSE.txt /(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[56295,63840],{61425:function(e,n,t){"use strict";var r,o=t(67294);function i(){r
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 6e 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 69 28 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f Data Ascii: eturn i=Object.assign\|\|function(e){for(var n=1;n<arguments.length;n++){var t=arguments[n];for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])}return e},i.apply(this,arguments)}n.Z=function(e){return o.createElement("svg",i({xmlns:"http:/
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 29 29 3b 68 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 63 2e 6a 32 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3b 76 61 72 20 78 3d 28 30 2c 69 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 66 28 6e 2c 69 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 75 72 72 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 61 63 68 2d 6d 65 6e 75 2d 69 74 65 6d 73 22 29 2c 74 2e 63 75 72 72 65 6e 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 61 63 68 2d 70 6f 70 6f 76 65 72 22 29 2c 74 2e 63 75 72 72 65 6e 74 2e Data Ascii: ));h.displayName=c.j2.displayName;var x=(0,i.forwardRef)((function(e,n){var t=f(n,i.useRef(null));return(0,i.useEffect)((function(){t.current.removeAttribute("data-reach-menu-items"),t.current.parentElement.removeAttribute("data-reach-popover"),t.current.
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 7d 29 3b 76 61 72 20 72 3d 74 28 32 35 31 31 30 29 2c 6f 3d 74 2e 6e 28 72 29 2c 69 3d 74 28 36 37 32 39 34 29 2c 61 3d 74 28 37 33 39 33 35 29 2c 73 3d 74 28 35 36 38 36 39 29 2c 63 3d 74 2e 6e 28 73 29 2c 6c 3d 74 28 34 34 38 34 35 29 2c 75 3d 74 28 38 33 37 32 38 29 2c 66 3d 74 28 33 33 39 33 38 29 2c 70 3d 74 28 35 31 36 37 39 29 2c 64 3d 74 2e 6e 28 70 29 2c 41 3d 74 28 39 37 36 30 36 29 2c 62 3d 74 2e 6e 28 41 29 2c 6d 3d 74 28 32 38 32 32 32 29 2c 76 3d 74 2e 6e 28 6d 29 2c 68 3d 74 28 38 30 32 32 32 29 2c 78 3d 74 2e 6e 28 68 29 2c 77 3d 74 28 31 34 34 31 38 29 2c 79 3d 74 2e 6e 28 77 29 2c 45 3d 74 28 38 34 34 36 29 2c 67 3d 74 2e 6e 28 45 29 2c 43 3d 74 28 36 36 38 37 30 29 2c 42 3d 74 2e 6e 28 Data Ascii: ction(){return H}});var r=t(25110),o=t.n(r),i=t(67294),a=t(73935),s=t(56869),c=t.n(s),l=t(44845),u=t(83728),f=t(33938),p=t(51679),d=t.n(p),A=t(97606),b=t.n(A),m=t(28222),v=t.n(m),h=t(80222),x=t.n(h),w=t(14418),y=t.n(w),E=t(8446),g=t.n(E),C=t(66870),B=t.n(
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 28 29 2c 4b 3d 7b 73 65 63 74 69 6f 6e 3a 53 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 75 73 65 72 2e 66 6f 6c 6c 6f 77 69 6e 67 2e 74 79 70 65 2e 73 65 63 74 69 6f 6e 22 29 2c 61 72 74 69 63 6c 65 3a 53 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 75 73 65 72 2e 66 6f 6c 6c 6f 77 69 6e 67 2e 74 79 70 65 2e 61 72 74 69 63 6c 65 22 29 2c 74 6f 70 69 63 3a 53 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 75 73 65 72 2e 66 6f 6c 6c 6f 77 69 6e 67 2e 74 79 70 65 2e 74 6f 70 69 63 22 29 2c 70 6f 73 74 3a 53 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 75 73 65 72 2e 66 6f 6c 6c 6f 77 69 6e 67 2e 74 79 70 65 2e 63 6f 6d 6d 75 6e Data Ascii: (),K={section:S()("txt.help_center.views.user.following.type.section"),article:S()("txt.help_center.views.user.following.type.article"),topic:S()("txt.help_center.views.user.following.type.topic"),post:S()("txt.help_center.views.user.following.type.commun
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 29 2c 65 2c 6e 75 6c 6c 2c 5b 5b 34 2c 39 5d 5d 29 7d 29 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 66 2e 5a 29 28 6a 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6a 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 70 28 21 31 29 2c 61 28 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 62 28 29 28 6f 29 2e 63 61 6c 6c 28 6f 2c 28 66 75 6e Data Ascii: eturn e.stop()}}),e,null,[[4,9]])})));return function(n){return e.apply(this,arguments)}}(),C=function(){var e=(0,f.Z)(j().mark((function e(){return j().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return p(!1),a(null==o?void 0:b()(o).call(o,(fun
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 61 2d 66 6f 6c 6c 6f 77 65 72 2d 63 6f 75 6e 74 22 3a 76 2c 22 64 61 74 61 2d 73 65 6c 65 63 74 65 64 22 3a 6c 2c 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 3a 79 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 4f 7d 2c 5f 29 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 59 2e 69 6e 76 69 73 69 62 6c 65 2c 69 64 3a 79 7d 2c 54 29 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 71 79 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 59 2e 6c 69 73 74 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 45 7d 2c 62 28 29 28 6f 29 2e 63 61 6c 6c 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 73 4e 2c 7b 6b 65 79 3a 65 2e Data Ascii: a-follower-count":v,"data-selected":l,"aria-describedby":y,"aria-label":O},_),i.createElement("span",{className:Y.invisible,id:y},T),i.createElement(I.qy,{className:Y.list,"aria-labelledby":E},b()(o).call(o,(function(e){return i.createElement(I.sN,{key:e.
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 28 29 2e 73 74 72 69 6e 67 2e 69 73 52 65 71 75 69 72 65 64 2c 75 72 6c 3a 57 28 29 2e 73 74 72 69 6e 67 2e 69 73 52 65 71 75 69 72 65 64 2c 73 65 6c 65 63 74 65 64 3a 57 28 29 2e 62 6f 6f 6c 2e 69 73 52 65 71 75 69 72 65 64 7d 29 29 7d 7d 2c 37 37 30 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 28 37 34 39 37 39 29 3b 76 61 72 20 72 3d 74 28 35 34 30 35 38 29 2e 4f 62 6a 65 63 74 2c 6f 3d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 6e 29 7d 3b 72 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 2e 73 68 61 6d 26 26 28 6f 2e 73 68 61 6d 3d 21 30 29 7d 2c 32 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 28 34 36 39 32 Data Ascii: ().string.isRequired,url:W().string.isRequired,selected:W().bool.isRequired}))}},7702:function(e,n,t){t(74979);var r=t(54058).Object,o=e.exports=function(e,n){return r.defineProperties(e,n)};r.defineProperties.sham&&(o.sham=!0)},286:function(e,n,t){t(4692
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 74 28 39 35 39 38 31 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 31 29 7d 29 29 7d 2c 7b 6b 65 79 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 65 29 29 7d 7d 29 7d 2c 35 37 33 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 37 37 30 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 37 39 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 32 38 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 36 32 38 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 39 32 37 36 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 39 35 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 33 30 34 Data Ascii: 0,forced:t(95981)((function(){i(1)}))},{keys:function(e){return i(o(e))}})},57396:function(e,n,t){var r=t(7702);e.exports=r},79427:function(e,n,t){var r=t(286);e.exports=r},62857:function(e,n,t){var r=t(92766);e.exports=r},9534:function(e,n,t){var r=t(304
2024-04-24 12:33:03 UTC	1369	IN	Data Raw: 5c 6e 5c 6e 2e 4e 46 50 67 46 63 30 67 49 30 48 76 6f 6e 66 4c 64 4f 72 6a 41 57 6c 70 65 36 66 68 73 67 75 32 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 70 78 3b 5c 6e 7d 5c 6e 22 2c 22 22 2c 7b 76 65 72 73 69 6f 6e 3a 33 2c 73 6f 75 72 63 65 73 3a 5b 22 77 65 62 70 61 63 6b 3a 2f 2f 2e 2f 75 69 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 4d 65 6e 75 42 75 74 74 6f 6e 2f 69 6e 64 65 78 2e 63 73 73 22 5d 2c 6e 61 6d 65 73 3a 5b 5d 2c 6d 61 70 70 69 6e 67 73 3a 22 41 41 41 41 3b 45 41 43 45 2c 73 42 41 41 73 42 3b 41 41 43 78 42 3b 3b 41 41 45 41 3b 45 41 43 45 2c 67 42 41 41 67 42 3b 45 41 43 68 42 2c 6f 43 41 41 6f 43 3b 45 41 43 70 43 2c 6b 42 41 41 6b 42 3b 45 41 43 6c 42 2c 77 43 Data Ascii: \n\n.NFPgFc0gI0HvonfLdOrjAWlpe6fhsgu2 {\n display: inline-block;\n width: 10px;\n}\n","",{version:3,sources:["webpack://./ui/components/MenuButton/index.css"],names:[],mappings:"AAAA;EACE,sBAAsB;AACxB;;AAEA;EACE,gBAAgB;EAChB,oCAAoC;EACpC,kBAAkB;EAClB,wC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50116	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:03 UTC	1695	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: help.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1
2024-04-24 12:33:03 UTC	621	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHyOrJiz30EKI6Ax6p0oSAr4Dylki2qE7XDbgvb4eo6Inv2S%2FH1mUbhv60ZkGa4TbFVIKXicrBVEb7puaabHtM7VN3oKIfUEAenRdX38m%2F9rKGK6vdX6aPTUcjGKnoTQF0kmva0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961e9ddf7c0ad5-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50118	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:03 UTC	593	OUT	GET /compose/web_widget/signaturit.zendesk.com HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://help.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:03 UTC	1249	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:03 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-expose-headers: access-control-max-age: 7200 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"32369e1729e31fca90d8c14b8097982a" x-request-id: 872abe659d346689-SEA X-Request-ID: 872abe659d346689-SEA x-runtime: 0.006537 X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dad0VyWYCkGh0n1UY8DnCggUJiVT0jXHxxVMaCerkR9yiDs%2Fie6GnIet%2FAWuGxaqmbXN0T39hdFLZSG6pROIQ%2BpJKLdWuxgruSPjigH1SIxn53ZOEbXYFzq6V6cNDwLwtiM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961e9efca309fd-LAS
2024-04-24 12:33:03 UTC	120	IN	Data Raw: 35 34 39 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 73 69 67 6e 61 74 75 72 69 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 61 6e 73 77 65 72 42 6f 74 43 62 70 55 73 61 Data Ascii: 549{"products":[{"name":"web_widget","id":"signaturit.zendesk.com","bootstrap":{"config":{"features":{"answerBotCbpUsa
2024-04-24 12:33:03 UTC	1240	IN	Data Raw: 67 65 22 3a 74 72 75 65 2c 22 70 72 65 63 68 61 74 46 6f 72 6d 56 69 73 69 62 6c 65 44 65 70 61 72 74 6d 65 6e 74 73 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 62 72 61 6e 64 22 3a 22 53 69 67 6e 61 74 75 72 69 74 22 2c 22 68 6f 73 74 4d 61 70 70 69 6e 67 22 3a 22 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 6e 73 77 65 72 42 6f 74 45 6e Data Ascii: ge":true,"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#2c352b","brand":"Signaturit","hostMapping":"help.signaturit.com","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEn
2024-04-24 12:33:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50119	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:03 UTC	1573	OUT	GET /hc/activity HTTP/1.1 Host: help.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
2024-04-24 12:33:04 UTC	851	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 12:33:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 87961e9f9ec10a01-LAS CF-Cache-Status: MISS Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none X-Request-ID: 87961e9fc0190a01-LAX x-runtime: 0.001169 x-xss-protection: 1; mode=block X-Zendesk-Zorg: yes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y4bblrhRxDEbpgdWFMXkcSHiF6eZk7Utlebm9OUi2JkBerS10kJg3iehisKquJHcuM9HM0pvfSXEAEu7VvbF2fUjqrqwvGw370soERh%2BEPEJcVeX3wzk0X2fUvZSSQLPSCP2kOU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-24 12:33:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50120	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:04 UTC	1766	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js HTTP/1.1 Host: help.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
2024-04-24 12:33:04 UTC	634	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:04 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-content-type-options: nosniff cache-control: max-age=14400, public vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wEBXLLO4QrMspEHpDNQ40F0rE3z%2BjwTy76C%2F6U%2FvQBIclRSYgAwEsOQB0vjxjITbOTrFkpSYIrWAw7n8VNZ3BiTQcwJSovrwttODKXBVGr5vLKUeNpHgfAjeO0%2Bfw9cNuWrUgh0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961ea1de7aa982-LAS
2024-04-24 12:33:04 UTC	735	IN	Data Raw: 31 65 61 30 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 6d 2c 6e 2c 78 2c 79 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 39 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 32 30 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 33 32 37 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 39 39 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 55 28 33 36 35 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 30 34 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 39 36 29 29 Data Ascii: 1ea0window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,x,y,A){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(379))/1+-parseInt(U(320))/2(-parseInt(U(327))/3)+-parseInt(U(299))/4+parseInt(U(365))/5(parseInt(U(304))/6)+parseInt(U(296))
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 35 2c 4f 29 7b 66 6f 72 28 61 35 3d 61 34 2c 4e 5b 61 35 28 32 39 38 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 35 28 33 36 30 29 5d 3b 4e 5b 4f 2b 31 5d 3d 3d 3d 4e 5b 4f 5d 3f 4e 5b 61 35 28 33 36 39 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 34 28 33 30 37 29 5d 5b 61 34 28 33 38 30 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 34 28 33 36 30 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 73 28 43 2c 44 2c 4b 29 2c 49 28 4c 29 3f 28 4d 3d 4c 3d 3d 3d 27 73 27 26 26 21 43 5b 61 34 28 33 35 32 29 5d 28 44 5b 4b 5d 29 2c 61 34 28 33 37 30 29 3d 3d 3d 45 2b 4b 3f 47 28 45 2b 4b 2c 4c 29 3a 4d 7c 7c Data Ascii: )):function(N,a5,O){for(a5=a4,N[a5(298)](),O=0;O<N[a5(360)];N[O+1]===N[O]?N[a5(369)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a4(307)][a4(380)](I),J=0;J<H[a4(360)];K=H[J],L=s(C,D,K),I(L)?(M=L==='s'&&!C[a4(352)](D[K]),a4(370)===E+K?G(E+K,L):M\|\|
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 2e 31 35 7c 54 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 33 34 36 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 33 35 31 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 31 2e 33 35 26 54 7c 4f 3c 3c 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 33 34 36 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 33 39 37 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d 65 6c 73 65 20 66 6f 72 28 54 3d 48 5b 4a 5d 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 2e 36 39 7c 31 26 54 2c 50 3d 3d 45 2d 31 3f 28 50 Data Ascii: =0;G<M;O=O<<1.15\|T,P==E-1?(P=0,N[aa(346)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(351)](0),G=0;16>G;O=1.35&T\|O<<1,P==E-1?(P=0,N[aa(346)](F(O)),O=0):P++,T>>=1,G++);}K--,0==K&&(K=Math[aa(397)](2,M),M++),delete I[J]}else for(T=H[J],G=0;G<M;O=O<<1.69\|1&T,P==E-1?(P
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 39 37 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 39 37 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 Data Ascii: ,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(397)](2,8),M=1;M!=R;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[ad(397)](2,16),M=1;R!=M;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)*M,M<<=1
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 2c 65 2c 59 2c 66 2c 43 29 7b 59 3d 56 2c 66 3d 7b 27 77 70 27 3a 41 5b 59 28 33 30 35 29 5d 28 4a 53 4f 4e 5b 59 28 33 33 33 29 5d 28 65 29 29 2c 27 73 27 3a 59 28 33 35 39 29 7d 2c 43 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2c 43 5b 59 28 33 32 33 29 5d 28 59 28 33 39 38 29 2c 59 28 33 39 35 29 2b 67 5b 59 28 33 30 30 29 5d 5b 59 28 33 30 31 29 5d 2b 59 28 33 34 31 29 2b 63 29 2c 43 5b 59 28 33 35 35 29 5d 28 59 28 33 35 38 29 2c 59 28 33 39 33 29 29 2c 43 5b 59 28 33 39 36 29 5d 28 4a 53 4f 4e 5b 59 28 33 33 33 29 5d 28 66 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 63 2c 57 29 7b 72 65 74 75 72 6e 20 57 3d 56 2c 4d 61 74 68 5b 57 28 33 37 31 29 5d 28 29 3c 63 7d Data Ascii: );return e}function k(c,e,Y,f,C){Y=V,f={'wp':A[Y(305)](JSON[Y(333)](e)),'s':Y(359)},C=new XMLHttpRequest(),C[Y(323)](Y(398),Y(395)+g[Y(300)][Y(301)]+Y(341)+c),C[Y(355)](Y(358),Y(393)),C[Y(396)](JSON[Y(333)](f))}function i(c,W){return W=V,Math[W(371)]()<c}
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 4f 66 2c 63 68 61 72 43 6f 64 65 41 74 2c 69 73 4e 61 4e 2c 74 61 62 49 6e 64 65 78 2c 73 70 6c 69 74 2c 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 2c 69 73 41 72 72 61 79 2c 66 72 6f 6d 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 30 2e 31 34 31 35 35 33 30 38 35 35 39 35 31 32 39 32 3a 31 37 31 33 39 36 30 36 31 34 3a 57 78 31 65 6e 4e 62 35 52 5f 5a 46 4f 53 5a 55 44 7a 36 58 39 7a 35 6c 72 47 35 46 4b 67 59 56 65 41 38 57 43 70 4a 44 4c 67 4d 2c 6c 65 6e 67 74 68 2c 65 72 72 6f 72 20 6f 6e 20 63 66 5f 63 68 6c 5f 70 72 6f 70 73 2c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 2c 6c 6f 61 64 69 6e 67 2c 73 74 72 69 6e 67 2c 39 35 35 48 47 70 76 70 41 2c 4f 62 6a 65 63 74 2c 62 69 67 69 6e 74 2c 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 Data Ascii: totypeOf,charCodeAt,isNaN,tabIndex,split,setRequestHeader,isArray,from,Content-Type,0.1415530855951292:1713960614:Wx1enNb5R_ZFOSZUDz6X9z5lrG5FKgYVeA8WCpJDLgM,length,error on cf_chl_props,[native code],loading,string,955HGpvpA,Object,bigint,contentDocument
2024-04-24 12:33:04 UTC	268	IN	Data Raw: 3b 74 72 79 7b 72 65 74 75 72 6e 20 43 5b 44 5d 5b 61 31 28 33 33 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 27 70 27 7d 63 61 74 63 68 28 46 29 7b 7d 74 72 79 7b 69 66 28 6e 75 6c 6c 3d 3d 43 5b 44 5d 29 72 65 74 75 72 6e 20 43 5b 44 5d 3d 3d 3d 76 6f 69 64 20 30 3f 27 75 27 3a 27 78 27 7d 63 61 74 63 68 28 47 29 7b 72 65 74 75 72 6e 27 69 27 7d 72 65 74 75 72 6e 20 65 5b 61 31 28 33 38 33 29 5d 5b 61 31 28 33 35 36 29 5d 28 43 5b 44 5d 29 3f 27 61 27 3a 43 5b 44 5d 3d 3d 3d 65 5b 61 31 28 33 38 33 29 5d 3f 27 70 35 27 3a 21 30 3d 3d 3d 43 5b 44 5d 3f 27 54 27 3a 21 31 3d 3d 3d 43 5b 44 5d 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 43 5b 44 5d 2c 61 31 28 33 39 30 29 3d 3d 45 3f 6f 28 65 2c 43 5b 44 5d 29 3f 27 4e 27 3a 27 66 27 3a 6e 5b 45 Data Ascii: ;try{return C[D][a1(339)](function(){}),'p'}catch(F){}try{if(null==C[D])return C[D]===void 0?'u':'x'}catch(G){return'i'}return e[a1(383)][a1(356)](C[D])?'a':C[D]===e[a1(383)]?'p5':!0===C[D]?'T':!1===C[D]?'F':(E=typeof C[D],a1(390)==E?o(e,C[D])?'N':'f':n[E
2024-04-24 12:33:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50121	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:04 UTC	535	OUT	GET /web_widget/classic/latest/web-widget-main-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:04 UTC	1202	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:04 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 992059 Connection: close x-amz-id-2: ldH41+NY0+fYAgvbqFIJmvudIE2j/SxzaKSwKqxB3P/vSWpJ08HqoFV2mSP6KWgMbK8lgvcvTvmD4moNqUmffw== x-amz-request-id: 64S1GV9HNQKB0DVA x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "3784cf5e1ddd3a68e335f3bb4a5e2fcd" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: _IYDenNVju8wHXIpAa8FJzBqmTlghdyK CF-Cache-Status: HIT Age: 1126074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fjd9ecsvZeNXH%2BuYheK%2BKm%2BYGwbl7Y%2FwhHsS7btZjBCos74PlWiELqnxJX%2Fx0XD7wi8MYzfiM5fI604PRLqXYbEpuB13DuC4t0SAC4JsEv5%2B1wtkNLuOH%2B0xJtpOvhkfeXHMbsU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961ea3cc9c69e6-LAS
2024-04-24 12:33:04 UTC	167	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 32 30 39 31 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 31 35 38 32 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: /classic-web-widget-sdks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={20916:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(15826);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.len
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 33 2e 31 33 20 30 20 37 73 33 2e 31 33 20 37 20 37 20 37 20 37 2d 33 2e 31 33 20 37 2d 37 2d 33 2e 31 33 2d 37 2d 37 2d 37 7a 6d 33 2e 30 39 20 35 2e 33 36 33 6c 2d 33 2e 33 20 34 2e 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 35 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d 31 2e 30 36 6c 31 2e 31 30 33 20 31 2e 31 30 32 4c 38 2e 39 31 20 34 2e 34 33 37 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 31 2e 31 38 2e 39 32 36 7a 22 7d 29 29 29 7d 7d 2c 38 38 33 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d Data Ascii: 3.13 0 7s3.13 7 7 7 7-3.13 7-7-3.13-7-7-7zm3.09 5.363l-3.3 4.2a.75.75 0 0 1-.545.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-1.06l1.103 1.102L8.91 4.437a.75.75 0 0 1 1.18.926z"})))}},88343:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i}
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 28 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 34 2c 68 65 69 67 68 74 3a 31 34 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 20 31 34 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 Data Ascii: ({xmlns:"http://www.w3.org/2000/svg",width:14,height:14,focusable:"false",viewBox:"0 0 14 14","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLine
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 68 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c 36 2e 31 20 36 2e 31 22 7d 29 29 Data Ascii: ht:16,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l6.1 6.1"}))
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 38 2c 63 79 3a 38 2c 72 3a 37 2e 35 7d 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f Data Ascii: t:16,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("circle",{cx:8,cy:8,r:7.5}),o.createElement("path",{strokeLinecap:"ro
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 73 29 2c 74 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 31 35 2c 68 65 69 67 68 74 3a 31 33 2c 78 3a 2e 35 2c 79 3a 31 2e 35 2c 72 78 3a 2e 35 2c 72 79 3a 2e 35 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 Data Ascii: ,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":n},s),t?a.createElement("title",{id:n},t):null,r\|\|(r=a.createElement("g",{fill:"none",stroke:"currentColor"},a.createElement("rect",{width:15,height:13,x:.5,y:1.5,rx:.5,ry:.5}),a.createElement("path
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 6f 6e 73 74 20 69 3d 65 3d 3e 7b 6c 65 74 7b 74 69 74 6c 65 3a 74 2c 74 69 74 6c 65 49 64 3a 6e Data Ascii: on a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(this,arguments)}const i=e=>{let{title:t,titleId:n
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 33 20 32 2e 35 68 31 30 22 7d 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 33 20 34 76 31 31 63 30 20 2e 35 35 2e 34 35 20 31 20 31 20 31 68 38 63 2e 35 35 20 30 20 31 2d 2e 34 35 20 31 2d 31 56 34 48 33 7a 6d 34 20 39 2e 35 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 73 2e 35 2e 32 32 2e 35 2e 35 76 37 7a 6d 33 20 30 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e Data Ascii: trokeLinecap:"round",d:"M3 2.5h10"})),o\|\|(o=a.createElement("path",{fill:"currentColor",d:"M3 4v11c0 .55.45 1 1 1h8c.55 0 1-.45 1-1V4H3zm4 9.5c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.5.5-.5s.5.22.5.5v7zm3 0c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.
2024-04-24 12:33:04 UTC	1369	IN	Data Raw: 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 32 36 2c 68 65 69 67 68 74 3a 32 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 30 20 32 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 31 33 2e 34 31 20 30 48 32 43 2e 39 20 30 20 30 20 2e 39 20 30 20 32 76 32 32 63 30 20 31 2e 31 2e 39 20 32 20 32 20 32 68 31 36 63 31 2e 31 20 30 20 32 2d 2e 39 20 32 2d 32 56 36 2e 35 38 4c 31 33 2e 34 31 Data Ascii: 2000/svg",width:26,height:26,focusable:"false",viewBox:"0 0 20 26","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"currentColor",d:"M13.41 0H2C.9 0 0 .9 0 2v22c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V6.58L13.41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50122	104.18.70.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:04 UTC	381	OUT	GET /compose/web_widget/signaturit.zendesk.com HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:05 UTC	1108	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:04 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"32369e1729e31fca90d8c14b8097982a" x-request-id: 87832ada6d520f69-SEA X-Request-ID: 87832ada6d520f69-SEA x-runtime: 0.007023 X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h8u75S%2BsmL6s6z35d7CnkP8VFpDPjVwjz%2FD8JXKFmdVxSdbFersp%2FUza0Dd1ZGojB0bPCw8QEVos64JV%2B5JvHSUhA5H9kqCKi6CfFhsrWF0KdjjL%2BhDw7litL37qJWyw6R8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961ea4afd1a982-LAS
2024-04-24 12:33:05 UTC	261	IN	Data Raw: 35 34 39 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 73 69 67 6e 61 74 75 72 69 74 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 61 6e 73 77 65 72 42 6f 74 43 62 70 55 73 61 67 65 22 3a 74 72 75 65 2c 22 70 72 65 63 68 61 74 46 6f 72 6d 56 69 73 69 62 6c 65 44 65 70 61 72 74 6d 65 6e 74 73 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 62 72 61 6e 64 22 3a 22 53 69 67 6e 61 74 75 72 69 74 22 2c 22 68 6f 73 74 4d 61 70 70 69 6e 67 22 3a 22 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f Data Ascii: 549{"products":[{"name":"web_widget","id":"signaturit.zendesk.com","bootstrap":{"config":{"features":{"answerBotCbpUsage":true,"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#2c352b","brand":"Signaturit","hostMapping":"help.signaturit.co
2024-04-24 12:33:05 UTC	1099	IN	Data Raw: 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 6e 73 77 65 72 42 6f 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2e 30 2c 22 6e 61 6d 65 46 69 65 6c 64 52 65 71 75 69 72 65 64 22 3a Data Ascii: beds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"nameFieldRequired":
2024-04-24 12:33:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50124	104.18.70.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:04 UTC	645	OUT	GET /theme_assets/708839/aaf0bfd0e0dc6bcd40849adc95d1517096cbeeaa.jpg HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:05 UTC	1238	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:05 GMT Content-Type: image/jpeg Content-Length: 43069 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Thu, 28 Apr 2022 14:24:50 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: u0.szN.fI77URYSKYLzYgAxpyW09ZJiL Cache-Control: public, max-age=86400 ETag: "a2d140e69bb89f074a957794cf3978c8" Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 d07c8167eda81d307ca96358727f505e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: gtsGMcKHy4lra796OiGpgN1LBMqA34MV3gtXSTKf0FVxWVII8vUTWQ== CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Er9CVrh6jbv0mKqq%2FBEVadaeUf3m9BSLg3qaYZBDfKT50xebY0OUaTU4ZqUO9pKzFxuuiM1%2Fxk%2BWQ82TluEvsYRCZo3EOX1e6T7SPVSBULjZo%2FXF37v%2FaxSUNaJOHD6nI%2BeORg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961ea6cb1209f1-LAS
2024-04-24 12:33:05 UTC	131	IN	Data Raw: ff d8 ff e1 09 d4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 Data Ascii: ExifMM*bj(1r2i-'-'Adobe
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 34 3a 32 38 20 31 36 3a 32 34 3a 34 31 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 90 a0 03 00 04 00 00 00 01 00 00 01 90 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 00 00 01 00 00 01 2a 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 32 02 02 00 04 00 00 00 01 00 00 08 9a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c Data Ascii: Photoshop 21.2 (Windows)2022:04:28 16:24:41"*(2HHAdobe_CMAdobed
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 8b 1a 5f ea b5 bf ca 65 cf 76 ff 00 f8 ca d7 2c bd 33 1b eb 3f d5 3f ad d8 6c e9 fd 7a b6 62 65 4c b5 97 3b 68 df fe 93 07 38 6c f7 7f 23 f4 37 7f 83 f4 ac ad 67 75 4f f1 55 99 59 2f e9 19 ad bd 9c 8a 72 86 c7 c7 96 4d 0d 73 1f fd ac 6a ff 00 e3 12 b4 91 7a 8d 5e 11 25 7f a9 f4 1e b5 d2 64 f5 2c 2b 71 eb 1c dd 01 f5 6b ff 00 76 29 f5 2a 6f fd 71 cc 54 01 04 48 32 0f 04 24 85 24 92 49 21 49 c7 29 93 8e 52 53 ff d2 e4 4f 29 93 9e 53 27 30 a9 25 af f5 6b ea d6 6f d6 3c d7 e3 e3 bd b4 53 43 43 b2 32 5c 0b 83 77 7f 37 5b 2b 05 9e a5 d6 6d 77 e7 b3 d9 ff 00 5b f5 28 f5 2c 23 d3 fa 8e 56 03 ac 17 1c 4b 5d 51 b5 a2 03 b6 fe 76 d9 76 cf e5 b3 77 d3 49 35 d5 ac 40 20 82 24 1e 41 57 fa 67 5f eb 7d 26 1b d3 b3 6d a2 b6 f1 41 22 ca bf f6 1e ef 52 b6 7f d6 bd 35 41 24 Data Ascii: _ev,3??lzbeL;h8l#7guOUY/rMsjz^%d,+qkv)*oqTH2$$I!I)RSO)S'0%ko<SCC2\w7[+mw[(,#VK]QvvwI5@ $AWg_}&mA"R5A$
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 6c 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@oBl doub@oBrdTUntF#RltBld UntF#Rlt
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 01 90 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 01 90 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 Data Ascii: ypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHor
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: e8 fb dc 0c 3a bc 6f dc a9 9f 46 dc 9f fa d5 1f a4 f5 2d a3 b3 eb 5f 5a 3a 0f d4 fc 56 f4 ae 9b 8e c7 e5 d6 d1 e9 e1 53 0d 6b 27 fc 2e 65 be ed 9b fe 9f f8 4c 9b ff 00 f0 54 ff 00 5d 3e b2 b7 ea d7 4c a7 03 a6 35 95 e6 de cf 4f 15 80 0d 94 55 58 0c 75 fe 97 d0 fd 17 b2 bc 7a be 87 a9 ff 00 05 55 ab c9 dc 5c e7 39 ef 73 9f 65 8e 2f b2 c7 92 e7 39 ce 32 fb 2c 7b bd cf 7b ff 00 39 c8 6e b8 9e 1d 06 ee 87 59 fa c1 d6 3a e3 cb ba 96 41 b2 a9 96 e2 b3 d9 43 7c 22 89 3e a6 df f4 99 0e ba d5 9d e4 92 48 ad 51 00 82 08 90 74 20 f7 0b d6 be af 3e ce a9 fe 2f 18 cc a7 6e 75 98 77 e3 39 e7 52 5b 5f ad 88 d7 3b f7 9d e9 d6 bc 95 76 bd 33 eb 77 4d c1 fa 81 6f 4a 0f 3f b5 36 5f 8f 5d 10 64 fa ef b5 cc c8 df 1b 3d 2a eb bf 7f d2 ff 00 07 e9 24 53 13 f9 3c 45 4e 2e a9 8e Data Ascii: :oF-_Z:VSk'.eLT]>L5OUXuzU\9se/92,{{9nY:AC\|">HQt >/nuw9R[_;v3wMoJ?6_]d=*$S<EN.
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 27 82 94 14 96 ac 9c 72 94 14 80 32 92 9f ff d9 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 00 00 00 01 01 00 ff e1 0e 26 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 Data Ascii: 'r28BIM!WAdobe PhotoshopAdobe Photoshop 20208BIM&http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:met
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 70 6e 67 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 31 65 66 36 30 38 32 2d 37 63 61 34 2d 36 37 34 32 2d 62 34 31 32 2d 65 31 30 36 35 37 32 33 39 35 65 63 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 38 54 31 36 3a 32 34 3a 34 31 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f Data Ascii: Evt:parameters="from image/png to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:31ef6082-7ca4-6742-b412-e106572395ec" stEvt:when="2022-04-28T16:24:41+02:00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)" stEvt:changed="/"/> </
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-24 12:33:05 UTC	1369	IN	Data Raw: 49 4a 58 59 5a 67 68 69 6a 76 77 78 79 7a 85 86 87 88 89 8a 94 95 96 97 98 99 9a a4 a5 a6 a7 a8 a9 aa b4 b5 b6 b7 b8 b9 ba c4 c5 c6 c7 c8 c9 ca d4 d5 d6 d7 d8 d9 da e4 e5 e6 e7 e8 e9 ea f4 f5 f6 f7 f8 f9 fa 11 00 02 01 03 02 04 04 03 05 04 04 04 06 06 05 6d 01 02 03 11 04 21 12 05 31 06 00 22 13 41 51 07 32 61 14 71 08 42 81 23 91 15 52 a1 62 16 33 09 b1 24 c1 d1 43 72 f0 17 e1 82 34 25 92 53 18 63 44 f1 a2 b2 26 35 19 54 36 45 64 27 0a 73 83 93 46 74 c2 d2 e2 f2 55 65 75 56 37 84 85 a3 b3 c3 d3 e3 f3 29 1a 94 a4 b4 c4 d4 e4 f4 95 a5 b5 c5 d5 e5 f5 28 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 Data Ascii: IJXYZghijvwxyzm!1"AQ2aqB#Rb3$Cr4%ScD&5T6Ed'sFtUeuV7)(GWf8vgwHXhx9IYiy*:JZjz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50123	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:04 UTC	1845	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/87961e88ff6969e6 HTTP/1.1 Host: help.signaturit.com Connection: keep-alive Content-Length: 15841 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://help.signaturit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
2024-04-24 12:33:04 UTC	15841	OUT	Data Raw: 7b 22 77 70 22 3a 22 65 51 71 56 6c 46 49 43 6c 6b 71 6c 77 5a 24 49 61 49 78 52 39 56 46 66 52 44 6e 52 33 4a 33 4d 4d 46 43 49 63 55 52 2b 4b 66 4e 4b 57 71 52 31 2b 62 37 24 4b 6b 49 34 52 77 61 71 4c 79 51 51 52 44 6f 4d 52 76 52 4d 66 4d 71 49 52 41 4d 49 50 24 73 56 6f 6b 51 68 64 6a 56 2b 4b 6d 51 6e 44 2d 34 78 5a 4c 48 56 50 6d 6c 67 6e 4f 49 2d 55 2b 6f 33 52 6c 71 71 38 33 31 46 68 79 52 53 4c 79 57 35 68 52 35 56 5a 31 52 46 67 71 52 33 56 46 46 56 6d 77 56 33 52 49 4b 52 39 6b 7a 52 49 4f 68 52 45 58 43 44 4c 51 62 49 44 6f 79 71 52 46 58 68 52 46 24 37 39 52 37 46 52 49 68 41 57 36 71 6a 34 6e 66 46 4c 46 49 35 50 6e 51 55 6c 6d 30 42 35 2b 52 4a 56 46 33 54 72 51 52 43 7a 51 4b 5a 57 2b 70 41 4c 52 37 42 35 6f 6d 4a 44 56 52 36 6f 4a 57 33 Data Ascii: {"wp":"eQqVlFIClkqlwZ$IaIxR9VFfRDnR3J3MMFCIcUR+KfNKWqR1+b7$KkI4RwaqLyQQRDoMRvRMfMqIRAMIP$sVokQhdjV+KmQnD-4xZLHVPmlgnOI-U+o3Rlqq831FhyRSLyW5hR5VZ1RFgqR3VFFVmwV3RIKR9kzRIOhREXCDLQbIDoyqRFXhRF$79R7FRIhAW6qj4nfFLFI5PnQUlm0B5+RJVF3TrQRCzQKZW+pALR7B5omJDVR6oJW3
2024-04-24 12:33:05 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=5vQ24BR0ehrs9Mkf0yqA4XzpOPC7DtkICiLJbPmWfrc-1713961985-1.0.1.1-E4gr8V4LrWx_tG.l.4zA84hlcID9ZOnJSOA15F29YahIlgQA7tJyrnlYP4m4fd_Mf504sS0imM5DJ23XODAyjg; path=/; expires=Thu, 24-Apr-25 12:33:05 GMT; domain=.help.signaturit.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cn3JiWmMKAE0mAqNGCYkouC4RwBcZuybmguv5zyt8QyZ1JLdKdjRsVbqwJvv4f2P2OgDa7bqfBdFiKN5Cn49z3X59diBWLocwMWZEzehThWz%2Fa4sAccyfkafR4yVxJJ%2Bgb7%2FfZE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961ea59c9069e3-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50126	3.141.154.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:05 UTC	542	OUT	GET /zendesk/widget/r0l5nqfm HTTP/1.1 Host: app.hellozest.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:05 UTC	217	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 24 Apr 2024 12:33:05 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://app.birdie.so:443/zendesk/widget/r0l5nqfm
2024-04-24 12:33:05 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50127	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:05 UTC	1779	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/87961e88ff6969e6 HTTP/1.1 Host: help.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; __cfruid=b66699c16d66666c074a6a16e901263d45dcccf0-1713961978; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; cf_clearance=5vQ24BR0ehrs9Mkf0yqA4XzpOPC7DtkICiLJbPmWfrc-1713961985-1.0.1.1-E4gr8V4LrWx_tG.l.4zA84hlcID9ZOnJSOA15F29YahIlgQA7tJyrnlYP4m4fd_Mf504sS0imM5DJ23XODAyjg
2024-04-24 12:33:05 UTC	679	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:33:05 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: zSxIdGLo0koF4XN82Tekzw==$Tcg2pFWOpZReNDJYsMFXSA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kyHcvz%2BVCtJ5qHDEivMy3m9XqN6aO1rXrKmE%2FvoqqkMAo3o4G7XcV1dwb5qJhlD8wVp00j0QcDFRfGQKLXUoluvqY62kHiKzfqxgUyvXOGimbb8B%2BXMy7dO93RKieTYDhcRugYI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961eaaaece0ad3-LAS
2024-04-24 12:33:05 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50128	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:05 UTC	406	OUT	GET /theme_assets/708839/aaf0bfd0e0dc6bcd40849adc95d1517096cbeeaa.jpg HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:06 UTC	1260	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:05 GMT Content-Type: image/jpeg Content-Length: 43069 Connection: close Access-Control-Allow-Methods: HEAD, GET Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri ETag: "a2d140e69bb89f074a957794cf3978c8" Last-Modified: Thu, 28 Apr 2022 14:24:50 GMT Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 d07c8167eda81d307ca96358727f505e.cloudfront.net (CloudFront) X-Amz-Cf-Id: gtsGMcKHy4lra796OiGpgN1LBMqA34MV3gtXSTKf0FVxWVII8vUTWQ== X-Amz-Cf-Pop: LAX50-P5 X-Cache: RefreshHit from cloudfront x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: u0.szN.fI77URYSKYLzYgAxpyW09ZJiL CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uMW2J7RcVWjYy8vCHrhpoAtx9rrZ%2FFsTQ52fXeXYaSS2%2FbWSKpOk8kNFIT1%2BLOwOrzs5WoHkUQENq5EHi1H%2BkDF%2BNmfkayV732vSa0%2BCeq66n7k6QDOsbmNaUZU9kLkuS1bu3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87961eac3cc70a01-LAS
2024-04-24 12:33:06 UTC	109	IN	Data Raw: ff d8 ff e1 09 d4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 Data Ascii: ExifMM*bj(1r2i
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 34 3a 32 38 20 31 36 3a 32 34 3a 34 31 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 90 a0 03 00 04 00 00 00 01 00 00 01 90 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 00 00 01 00 00 01 2a 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 32 02 02 00 04 00 00 00 01 00 00 08 9a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 Data Ascii: -'-'Adobe Photoshop 21.2 (Windows)2022:04:28 16:24:41"*(2HHAdobe_CMAdobed
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 2e c7 a4 90 68 bd 07 f8 cb 66 4b 7e b5 17 de 0f a5 66 35 5f 65 3d 8b 1a 5f ea b5 bf ca 65 cf 76 ff 00 f8 ca d7 2c bd 33 1b eb 3f d5 3f ad d8 6c e9 fd 7a b6 62 65 4c b5 97 3b 68 df fe 93 07 38 6c f7 7f 23 f4 37 7f 83 f4 ac ad 67 75 4f f1 55 99 59 2f e9 19 ad bd 9c 8a 72 86 c7 c7 96 4d 0d 73 1f fd ac 6a ff 00 e3 12 b4 91 7a 8d 5e 11 25 7f a9 f4 1e b5 d2 64 f5 2c 2b 71 eb 1c dd 01 f5 6b ff 00 76 29 f5 2a 6f fd 71 cc 54 01 04 48 32 0f 04 24 85 24 92 49 21 49 c7 29 93 8e 52 53 ff d2 e4 4f 29 93 9e 53 27 30 a9 25 af f5 6b ea d6 6f d6 3c d7 e3 e3 bd b4 53 43 43 b2 32 5c 0b 83 77 7f 37 5b 2b 05 9e a5 d6 6d 77 e7 b3 d9 ff 00 5b f5 28 f5 2c 23 d3 fa 8e 56 03 ac 17 1c 4b 5d 51 b5 a2 03 b6 fe 76 d9 76 cf e5 b3 77 d3 49 35 d5 ac 40 20 82 24 1e 41 57 fa 67 5f eb 7d 26 Data Ascii: .hfK~f5_e=_ev,3??lzbeL;h8l#7guOUY/rMsjz^%d,+qkv)*oqTH2$$I!I)RSO)S'0%ko<SCC2\w7[+mw[(,#VK]QvvwI5@ $AWg_}&
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 6c 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 Data Ascii: ntOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@oBl doub@oBrdTUntF#RltB
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 01 90 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 01 90 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a Data Ascii: TypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorz
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 5f f0 69 25 d0 fa 9f f5 2f 23 eb 03 be d7 92 e7 63 f4 96 12 3d 46 e8 fb dc 0c 3a bc 6f dc a9 9f 46 dc 9f fa d5 1f a4 f5 2d a3 b3 eb 5f 5a 3a 0f d4 fc 56 f4 ae 9b 8e c7 e5 d6 d1 e9 e1 53 0d 6b 27 fc 2e 65 be ed 9b fe 9f f8 4c 9b ff 00 f0 54 ff 00 5d 3e b2 b7 ea d7 4c a7 03 a6 35 95 e6 de cf 4f 15 80 0d 94 55 58 0c 75 fe 97 d0 fd 17 b2 bc 7a be 87 a9 ff 00 05 55 ab c9 dc 5c e7 39 ef 73 9f 65 8e 2f b2 c7 92 e7 39 ce 32 fb 2c 7b bd cf 7b ff 00 39 c8 6e b8 9e 1d 06 ee 87 59 fa c1 d6 3a e3 cb ba 96 41 b2 a9 96 e2 b3 d9 43 7c 22 89 3e a6 df f4 99 0e ba d5 9d e4 92 48 ad 51 00 82 08 90 74 20 f7 0b d6 be af 3e ce a9 fe 2f 18 cc a7 6e 75 98 77 e3 39 e7 52 5b 5f ad 88 d7 3b f7 9d e9 d6 bc 95 76 bd 33 eb 77 4d c1 fa 81 6f 4a 0f 3f b5 36 5f 8f 5d 10 64 fa ef b5 cc c8 Data Ascii: _i%/#c=F:oF-_Z:VSk'.eLT]>L5OUXuzU\9se/92,{{9nY:AC\|">HQt >/nuw9R[_;v3wMoJ?6_]d
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 3a 99 45 7f e9 3d 55 cf 6a 94 14 a9 46 44 ac 00 00 00 20 0d 00 09 27 82 94 14 96 ac 9c 72 94 14 80 32 92 9f ff d9 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 00 00 00 01 01 00 ff e1 0e 26 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 Data Ascii: :E=UjFD 'r28BIM!WAdobe PhotoshopAdobe Photoshop 20208BIM&http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 70 6e 67 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 31 65 66 36 30 38 32 2d 37 63 61 34 2d 36 37 34 32 2d 62 34 31 32 2d 65 31 30 36 35 37 32 33 39 35 65 63 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 34 2d 32 38 54 31 36 3a 32 34 3a 34 31 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 Data Ascii: :action="converted" stEvt:parameters="from image/png to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:31ef6082-7ca4-6742-b412-e106572395ec" stEvt:when="2022-04-28T16:24:41+02:00" stEvt:softwareAgent="Adobe Photoshop 21.2 (Windows)"
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: e2 f2 64 83 74 93 84 65 a3 b3 c3 d3 e3 29 38 66 f3 75 2a 39 3a 48 49 4a 58 59 5a 67 68 69 6a 76 77 78 79 7a 85 86 87 88 89 8a 94 95 96 97 98 99 9a a4 a5 a6 a7 a8 a9 aa b4 b5 b6 b7 b8 b9 ba c4 c5 c6 c7 c8 c9 ca d4 d5 d6 d7 d8 d9 da e4 e5 e6 e7 e8 e9 ea f4 f5 f6 f7 f8 f9 fa 11 00 02 01 03 02 04 04 03 05 04 04 04 06 06 05 6d 01 02 03 11 04 21 12 05 31 06 00 22 13 41 51 07 32 61 14 71 08 42 81 23 91 15 52 a1 62 16 33 09 b1 24 c1 d1 43 72 f0 17 e1 82 34 25 92 53 18 63 44 f1 a2 b2 26 35 19 54 36 45 64 27 0a 73 83 93 46 74 c2 d2 e2 f2 55 65 75 56 37 84 85 a3 b3 c3 d3 e3 f3 29 1a 94 a4 b4 c4 d4 e4 f4 95 a5 b5 c5 d5 e5 f5 28 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 Data Ascii: dte)8fu*9:HIJXYZghijvwxyzm!1"AQ2aqB#Rb3$Cr4%ScD&5T6Ed'sFtUeuV7)(GWf8vgwHXhx9IYiy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50130	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:05 UTC	557	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:06 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:06 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25711 Connection: close x-amz-id-2: W9B1SBtAeKjZ8kR3+2GgpY7yqrRwEUd74ifS+fdKkR32Prbx0bEwMeNV6dGVRlF6Cg02ybWPMLk= x-amz-request-id: DKWT4SJ3NP0VX855 x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:15 GMT ETag: "6eb45e96a7cbb4b8ca10897f3cf09981" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:13 GMT x-amz-version-id: LLNIVxZ_bojnmbOmqAvI_43_VNrKfel_ CF-Cache-Status: HIT Age: 1126075 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z8WWbxqBV%2FFuBsB%2FHjvNWVDZyRRcVb4WZyXsS2u3EwMqOc%2BIXlk21SqEKohxU%2BpmfZQ2FdZ%2BpXV9IJiq06n6v5kdYRl1A4gMpRx%2FxoDNoADVPO9cSMhwPVcN0d%2FYPmcHBMghMp8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961eacbc8f0a03-LAS
2024-04-24 12:33:06 UTC	180	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 35 30 5d 2c 7b 34 33 32 35 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6950],{43255:e=>{e.exports=JSON.parse('{"locale":{"l
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 6f 63 61 6c 65 22 3a 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 72 20 6d 79 20 71 75 65 73 74 69 6f 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f Data Ascii: ocale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 63 68 6f 69 63 65 2e 67 65 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 73 75 Data Ascii: choice.get_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answerBot.msg.channel_choice.su
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 72 65 73 75 6c 74 73 2e 6d 61 6e 79 5f 61 72 Data Ascii: another question.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framework.answerBot.results.many_ar
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 74 22 3a 22 44 69 73 61 62 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 72 65 65 6e 61 62 6c 65 5f 63 68 61 74 Data Ascii: t":"Disable Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agreement.cookies.reenable_chat
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 Data Ascii: failed. File sending is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed. Something went wr
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 28 61 67 65 6e 74 32 29 73 20 61 72 65 20 74 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 6f 6e 22 3a 22 51 75 65 75 65 20 70 6f 73 69 74 69 6f 6e Data Ascii: (agent2)s are typing","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePosition":"Queue position
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 22 45 6d 61 69 6c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 79 22 3a 22 4c 6f 61 64 69 6e 67 20 6d 65 73 73 61 67 65 Data Ascii: "Email will be sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_history":"Loading message
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 74 73 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 Data Ascii: ts.hover.label":"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddable_framework.chat.me
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 69 6d 65 52 61 6e 67 65 22 3a 22 25 28 6f 70 65 6e Data Ascii: ork.chat.operatingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label.timeRange":"%(open

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50131	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:05 UTC	536	OUT	GET /embeddable/config HTTP/1.1 Host: signaturit.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://help.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:06 UTC	1089	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:06 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-86f48469bc-7v78t x-runtime: 0.002898 vary: Origin X-Cached: MISS Last-Modified: Wed, 24 Apr 2024 12:17:16 GMT CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gjM6RLDVbaYOK99X9NwmkygeQQ%2BONwdc9b11L%2FSSzuI2IjQpeXUIdXLBK5C%2BpW8adm1e7ixWavO8L32trNxsPvk8j7IRI8%2Bi2zUj19LyBOTpoFiqStriNpea8%2BUtfqtVtZ1OTKLrGvk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=3e401422a4f82201ba3ba7ab558c5532006eaad6-1713961986; path=/; domain=.signaturit.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87961eaccb5b09f5-LAS
2024-04-24 12:33:06 UTC	280	IN	Data Raw: 33 38 35 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 53 69 67 6e 61 74 75 72 69 74 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2c 22 68 6f 73 74 4d 61 70 70 69 6e 67 22 3a 22 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 6e 73 77 65 72 42 6f 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 Data Ascii: 385{"brand":"Signaturit","brandCount":1,"hostMapping":"help.signaturit.com","color":"#2c352b","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"emb
2024-04-24 12:33:06 UTC	628	IN	Data Raw: 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 63 75 73 74 6f 6d 46 69 65 6c 64 73 22 3a 7b 22 69 64 73 22 3a 5b 22 31 39 30 30 30 30 30 35 34 35 33 33 33 22 2c 22 31 39 30 30 30 30 30 35 34 35 35 31 33 22 5d 7d 2c 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6e 61 6d 65 46 69 65 6c 64 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 7a 6f 70 69 6d 49 64 22 3a 22 70 77 63 49 39 31 73 47 46 6d 78 45 74 54 43 44 Data Ascii: ":{"color":"#2c352b","customFields":{"ids":["1900000545333","1900000545513"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true,"nameFieldRequired":true}},"chat":{"embed":"chat","props":{"color":"#2c352b","zopimId":"pwcI91sGFmxEtTCD
2024-04-24 12:33:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50132	3.141.154.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:06 UTC	539	OUT	GET /zendesk/widget/r0l5nqfm HTTP/1.1 Host: app.birdie.so Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:06 UTC	1729	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=INuQAz3RM3mZDdXcEsAssMjqqa4WA87hOqanAs9IMbtONyXcFUr+xe36sNZjOfbAmfXOsLB3UnjsdPXgXz9ehw/bYDoaEugaqYGQgdlpwv1bXpHG2UQGCdSIRGdc; Expires=Wed, 01 May 2024 12:33:06 GMT; Path=/ Set-Cookie: AWSALBCORS=INuQAz3RM3mZDdXcEsAssMjqqa4WA87hOqanAs9IMbtONyXcFUr+xe36sNZjOfbAmfXOsLB3UnjsdPXgXz9ehw/bYDoaEugaqYGQgdlpwv1bXpHG2UQGCdSIRGdc; Expires=Wed, 01 May 2024 12:33:06 GMT; Path=/; SameSite=None; Secure Server: nginx Cache-Control: no-cache, private Vary: Origin Set-Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; expires=Sat, 18 May 2024 12:33:06 GMT; Max-Age=2073600; path=/; domain=.birdie.so; secure; samesite=none Set-Cookie: birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D; expires=Sat, 18 May 2024 12:33:06 GMT; Max-Age=2073600; path=/; domain=.birdie.so; secure; httponly; samesite=none Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-24 12:33:06 UTC	7107	IN	Data Raw: 31 62 62 62 0d 0a 2f 2a 20 4d 69 6e 69 66 69 65 72 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 6c 6c 70 65 61 76 79 2e 63 6f 6d 2f 74 6f 6f 6c 73 2f 6d 69 6e 69 66 69 65 72 2f 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 7a 65 6e 64 65 73 6b 5f 69 66 72 61 6d 65 3b 0a 76 61 72 20 62 61 73 65 44 6f 63 5f 66 6f 72 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 3b 0a 76 61 72 20 62 61 73 65 44 6f 63 5f 63 68 61 74 3b 0a 76 61 72 20 69 73 4f 6e 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 69 73 46 6f 72 6d 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 6c 69 73 74 65 6e 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 63 6f 6e 74 61 63 74 5f 74 79 70 65 20 3d 20 22 22 3b 0a 76 61 72 20 73 68 61 72 69 6e 67 4c 69 6e 6b 49 6e 73 65 72 74 65 64 20 3d 20 22 22 Data Ascii: 1bbb/* Minifier: https://www.willpeavy.com/tools/minifier/ */(function(){var zendesk_iframe;var baseDoc_form = document;var baseDoc_chat;var isOn = false;var isForm = false;var listen = false;var contact_type = "";var sharingLinkInserted = ""
2024-04-24 12:33:07 UTC	6492	IN	Data Raw: 31 39 35 34 0d 0a 61 67 65 3d 24 7b 74 69 70 5f 6d 65 73 73 61 67 65 7d 26 65 6d 61 69 6c 5f 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 3d 24 7b 65 6d 61 69 6c 5f 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 7d 60 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 35 30 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 73 6f 75 72 63 65 20 3d 3d 20 22 7a 65 6e 64 65 73 6b 5f 66 6f 72 6d 22 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 48 65 6c 70 43 65 6e 74 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 48 65 6c 70 43 65 6e 74 65 72 2e 75 73 65 72 29 Data Ascii: 1954age=${tip_message}&email_error_message=${email_error_message}`; },500); }); } else if (source == "zendesk_form") { setTimeout(function() { if (window.HelpCenter) { if (window.HelpCenter.user)
2024-04-24 12:33:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50133	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:06 UTC	539	OUT	GET /web_widget/classic/latest/web-widget-chat-sdk-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:06 UTC	1184	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:06 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 206903 Connection: close x-amz-id-2: XxQ8S/lBv1OtyK14Vkg8IAF2w1ME0kGwFoL/pkM7jEvNEGJZFHeFeFmAEaVODwS7Try+N51fJGM= x-amz-request-id: 7P01XWB44YSSFFP5 x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "b8284a4b45e40625c2b90a641ebe4a68" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: PnwdCuJviouphoOKkGhIayUUaC4tYXWL CF-Cache-Status: HIT Age: 1126075 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=njw8gh881ijc4oolJu3T5WLk5sv0gBpbP62yZwWdOKER%2F8M4a88xpmmclF7yQZszlzQ5gPTG2K6%2BDokvhwXYlRo3LEhrCPNhp21v8XEpJqIg4Z0G%2F8jRnbNkc7nE%2FaZVtSX602g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961eb10ba50ad9-LAS
2024-04-24 12:33:06 UTC	185	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widge
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 37 36 5d 2c 7b 36 35 35 33 32 3a 65 3d 3e 7b 76 61 72 20 74 3b 77 69 6e 64 6f 77 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 Data Ascii: t-sdks/web-widget/getting-started/legal/ */(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[8876],{65532:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o])ret
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 77 65 62 5f 73 64 6b 21 2e 2f 73 72 63 2f 77 65 62 5f 73 64 6b 2e 6a 73 22 29 7d 28 7b 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 Data Ascii: web_sdk!./src/web_sdk.js")}({"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 73 72 63 2f 6a 78 2f 63 6f 72 65 2f 41 73 73 65 72 74 2e 6a 73 22 29 2c 6e 3d 72 28 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 Data Ascii: /vendor/jxml/src/jx/core/Assert.js"),n=r("./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webp
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 66 28 22 77 69 6e 33 32 22 29 2c 4c 3d 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 69 6e 74 6f 73 68 22 29 7c 7c 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 20 6f 73 20 78 22 29 2c 43 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 41 3d 72 2e 6c 61 6e 67 75 61 67 65 7c 7c 72 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 73 79 73 74 65 6d 4c 61 6e 67 75 61 67 65 2c 7a 3d 7b 6e 6f 42 6f 78 53 69 7a 69 6e 67 3a 4f 3c 3d 37 2c 69 65 3a 7b 63 73 73 42 6f 74 74 6f 6d 52 69 67 68 74 3a 64 2c 63 73 73 46 69 78 65 64 3a 64 7c 7c 53 2c 62 75 67 67 79 43 53 53 3a 64 7c 7c 53 7d 7d 2c 44 3d 22 74 65 78 74 43 6f Data Ascii: f("win32"),L=-1!==s.indexOf("macintosh")\|\|-1!==s.indexOf("mac os x"),C="https:"===document.location.protocol,A=r.language\|\|r.browserLanguage\|\|r.userLanguage\|\|r.systemLanguage,z={noBoxSizing:O<=7,ie:{cssBottomRight:d,cssFixed:d\|\|S,buggyCSS:d\|\|S}},D="textCo
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 63 75 72 65 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5e 68 74 74 70 3a 2f 2c 43 3f 22 68 74 74 70 73 3a 22 3a 22 68 74 74 70 3a 22 29 7d 2c 68 61 73 46 6c 61 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 72 2e 70 6c 75 67 69 6e 73 26 26 72 2e 70 6c 75 67 69 6e 73 5b 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 28 65 3d 72 2e 6d 69 6d 65 54 79 70 65 73 26 26 72 2e 6d 69 6d 65 54 79 70 65 73 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 5d 29 26 26 21 65 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 3f 6e 75 6c 6c 3a 74 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 77 69 6e 64 6f 77 2e Data Ascii: cureURL:function(e){return e.replace(/^http:/,C?"https:":"http:")},hasFlash:function(){var e,t=r.plugins&&r.plugins["Shockwave Flash"];if(t)return(e=r.mimeTypes&&r.mimeTypes["application/x-shockwave-flash"])&&!e.enabledPlugin?null:t.description;if(window.
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 30 7d 2c 69 73 54 65 78 74 43 6f 6e 74 65 6e 74 3a 44 2c 68 61 73 50 61 73 73 69 76 65 4c 69 73 74 65 6e 65 72 73 3a 4e 7d 7d 76 61 72 20 61 3d 73 28 29 3b 61 2e 73 6e 69 66 66 42 72 6f 77 73 65 72 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a Data Ascii: e.length?e[0].clientWidth:0},isTextContent:D,hasPassiveListeners:N}}var a=s();a.sniffBrowser=s,e.exports=a},"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/j
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 76 65 6e 74 3f 73 2e 64 65 74 61 69 6c 3a 73 29 26 26 28 64 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 6e 2e 66 69 72 65 28 22 65 72 72 6f 72 22 2c 65 29 7d 69 66 28 69 2e 5f 61 63 74 69 76 65 3d 21 31 2c 69 2e 5f 64 69 72 74 79 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 6c 3b 61 2b 2b 29 69 5b 61 5d 7c 7c 28 61 3d 3d 6c 2d 31 3f 69 2e 70 6f 70 28 29 3a 69 5b 61 2d 2d 5d 3d 69 2e 70 6f 70 28 29 2c 6c 2d 2d 29 3b 69 2e 5f 64 69 72 74 79 3d 21 31 7d 69 66 28 21 31 3d 3d 3d 64 29 72 65 74 75 72 6e 20 73 26 26 28 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 29 2c 21 31 7d 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 73 5b 74 5d 29 3a 65 2e 61 64 Data Ascii: vent?s.detail:s)&&(d=!1)}catch(e){n.fire("error",e)}if(i._active=!1,i._dirty){for(a=0;a<l;a++)i[a]\|\|(a==l-1?i.pop():i[a--]=i.pop(),l--);i._dirty=!1}if(!1===d)return s&&(s.preventDefault(),s.returnValue=!1),!1},e.attachEvent?e.attachEvent("on"+t,s[t]):e.ad
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 75 6e 65 78 74 65 6e 64 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 72 26 26 73 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 73 29 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 6c 28 65 29 3b 72 3d 73 3d 6e 75 6c 6c 7d 7d 7d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 64 3b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 64 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 26 26 28 65 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 20 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 26 26 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 64 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: break}return e}},unextendEvents:function(){if(r&&s){for(var e in s)s.hasOwnProperty(e)&&l(e);r=s=null}}};if(t)return d;for(var u in d)d.hasOwnProperty(u)&&(e[u]=d[u]);return o.bugs.leaksMemory&&o.bugs.leaksMemory((function(){for(var t in d)d.hasOwnPropert
2024-04-24 12:33:06 UTC	1369	IN	Data Raw: 73 2f 6a 78 6d 6c 2d 6c 6f 61 64 65 72 2e 6a 73 3f 6e 61 6d 65 3d 6a 78 2f 63 6f 72 65 2f 46 75 6e 63 74 69 6f 6e 55 74 69 6c 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 73 72 63 2f 6a 78 2f 63 6f 72 65 2f 46 75 6e 63 74 69 6f 6e 55 74 69 6c 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6f 3d 72 28 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 Data Ascii: s/jxml-loader.js?name=jx/core/FunctionUtils!./vendor/jxml/src/jx/core/FunctionUtils.js":function(e,t,r){var o=r("./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50134	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:06 UTC	433	OUT	GET /embeddable/config HTTP/1.1 Host: signaturit.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=7164262fe2a06e812899d7c447996a5777237e03-1713961981
2024-04-24 12:33:07 UTC	942	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-86f48469bc-7v78t x-runtime: 0.002898 vary: Origin X-Cached: MISS Last-Modified: Wed, 24 Apr 2024 12:17:16 GMT CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2FlHY2sUfZ5FkVwah0dnGhRWUdi8enp2Ww8qSoOqyhQgc0EENmFZ0SoaxeW2TMudD9p2vojevcjk2Z6%2BWqQvp6v%2F0CxwiGgg3OYBPs3AyIrnE9B8yxxcmk1k71FqMbkcKsST7eMxNg4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961eb32c990ad9-LAS
2024-04-24 12:33:07 UTC	427	IN	Data Raw: 33 38 35 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 53 69 67 6e 61 74 75 72 69 74 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2c 22 68 6f 73 74 4d 61 70 70 69 6e 67 22 3a 22 68 65 6c 70 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 6e 73 77 65 72 42 6f 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 Data Ascii: 385{"brand":"Signaturit","brandCount":1,"hostMapping":"help.signaturit.com","color":"#2c352b","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#2c352b","contextualHelpEnabled":true,"answerBotEnabled":true}},"ticketSubmissionForm":{"emb
2024-04-24 12:33:07 UTC	481	IN	Data Raw: 72 75 65 2c 22 6e 61 6d 65 46 69 65 6c 64 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 7a 6f 70 69 6d 49 64 22 3a 22 70 77 63 49 39 31 73 47 46 6d 78 45 74 54 43 44 61 31 36 33 31 62 45 48 66 5a 70 7a 73 34 66 47 22 2c 22 62 61 64 67 65 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 63 33 35 32 62 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6d 61 67 65 50 61 74 68 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 6c 65 66 74 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 7d 2c 22 66 6f 72 6d 73 22 3a 7b 22 6f 66 66 6c 69 6e 65 45 6e 61 62 6c 65 64 22 3a 74 Data Ascii: rue,"nameFieldRequired":true}},"chat":{"embed":"chat","props":{"color":"#2c352b","zopimId":"pwcI91sGFmxEtTCDa1631bEHfZpzs4fG","badge":{"color":"#2c352b","enabled":true,"imagePath":"","layout":"image_left","text":"Chat with us"},"forms":{"offlineEnabled":t
2024-04-24 12:33:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50136	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:07 UTC	537	OUT	OPTIONS /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: signaturit.zendesk.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://help.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:08 UTC	854	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 12:33:08 GMT Connection: close access-control-allow-headers: Content-Type access-control-allow-origin: * access-control-max-age: 600 cache-control: max-age=600 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 87961eb91e9669e6-LAS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KZhERPV%2F%2FiOW4KHHrdLLK4uT21Ef1Ej7wqPCWmwH%2B8tv%2BHe2EG4i5vK6XQ%2FuEVi0Q7BYrjuG2YufwPMCBBjdJ%2FtKwSQCHsrBwozf0QFi53ke8rdgJ%2BPkzuUNsyY9TZQkoqz15HwyvEQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=75c334c2f5f6c00761878a01b65264aa79b4ffc1-1713961988; path=/; domain=.signaturit.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87961eb91e9669e6-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50135	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:07 UTC	547	OUT	GET /s/W/ws/HlHzlAqgzRYBFW6x/c/1713961986349 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://help.signaturit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: QWEj2Q173XZoJt+K3WZugg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:33:08 UTC	505	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:07 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=5NK4UGOUDKQ+yO9EYuo0KDbN3UkzXmPDUUqY4vGtvtb10EbAJ7ipSQfm8MeMuWbJqyfBhy8Egg5jxm0AICRRSdqWq5RHbKcuI7860U94Rli58UKZlPTwdvq+Znf5; Expires=Wed, 01 May 2024 12:33:07 GMT; Path=/ Set-Cookie: AWSALBCORS=5NK4UGOUDKQ+yO9EYuo0KDbN3UkzXmPDUUqY4vGtvtb10EbAJ7ipSQfm8MeMuWbJqyfBhy8Egg5jxm0AICRRSdqWq5RHbKcuI7860U94Rli58UKZlPTwdvq+Znf5; Expires=Wed, 01 May 2024 12:33:07 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50138	34.36.90.178	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:07 UTC	663	OUT	POST /api/113/envelope/?sentry_key=460f708319894406a8ebaea641969c60&sentry_version=7 HTTP/1.1 Host: zendesk-eu.my.sentry.io Connection: keep-alive Content-Length: 134 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://help.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:07 UTC	134	OUT	Data Raw: 7b 7d 0a 7b 22 74 79 70 65 22 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 39 38 36 2e 36 31 36 2c 22 64 69 73 63 61 72 64 65 64 5f 65 76 65 6e 74 73 22 3a 5b 7b 22 72 65 61 73 6f 6e 22 3a 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 65 72 72 6f 72 22 2c 22 71 75 61 6e 74 69 74 79 22 3a 31 7d 5d 7d Data Ascii: {}{"type":"client_report"}{"timestamp":1713961986.616,"discarded_events":[{"reason":"sample_rate","category":"error","quantity":1}]}
2024-04-24 12:33:08 UTC	256	IN	HTTP/1.1 429 Too Many Requests Server: nginx Date: Wed, 24 Apr 2024 12:33:08 GMT Content-Type: text/plain Content-Length: 3 Access-Control-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:33:08 UTC	3	IN	Data Raw: 7b 7d 0a Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50140	13.227.74.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:07 UTC	1810	OUT	GET /en/login HTTP/1.1 Host: account.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
2024-04-24 12:33:08 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7149 Connection: close Date: Wed, 24 Apr 2024 02:05:43 GMT Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "08b8d01350d13c8a6f98dcf0e41b2631" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f9d4b21c935c23e15cfc47b3d33e44e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: YGmA3jNB5SeJ7DD6KUwv2PnoubqVLjDJJF98WILyZpFp9Mjl5pqxvw== Age: 37646 Vary: Origin
2024-04-24 12:33:08 UTC	6396	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 2f 3e 3c 74 69 74 6c 65 3e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 33 64 76 6e 31 74 6e 79 78 61 62 6e 35 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><base href="/"/><title>Authentication app</title><link rel="icon" type="image/png" sizes="16x16" href="https://d3dvn1tnyxabn5.cloudfront.
2024-04-24 12:33:08 UTC	753	IN	Data Raw: 61 72 74 27 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6c 20 3d 20 6c 20 21 3d 20 27 64 61 74 61 4c 61 79 65 72 27 20 3f 20 27 26 6c 3d 27 20 2b 20 6c 20 3a 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: art': new Date().getTime(), event: 'gtm.js', }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : '';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50141	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:08 UTC	530	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/c/1713961987306 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:08 UTC	633	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:08 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=EoOu8uEFbQQz+6D1NcVGPvtNTufKXsw1iF1Xpt4fg+Dd0v4+YJMkjUb4af7nyEDHQW8D7KKybHVwXkDjWBNw4lh7FFZObhQ9lmGRaBY8FEFrKlwD1QQ/kYUfJDJQ; Expires=Wed, 01 May 2024 12:33:08 GMT; Path=/ Set-Cookie: AWSALBCORS=EoOu8uEFbQQz+6D1NcVGPvtNTufKXsw1iF1Xpt4fg+Dd0v4+YJMkjUb4af7nyEDHQW8D7KKybHVwXkDjWBNw4lh7FFZObhQ9lmGRaBY8FEFrKlwD1QQ/kYUfJDJQ; Expires=Wed, 01 May 2024 12:33:08 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-24 12:33:08 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 39 36 31 39 38 38 37 37 38 5c 6e 31 34 37 32 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713961988778\n1472\n1\n0\nn\n15000")
2024-04-24 12:33:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50139	13.227.74.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:08 UTC	1712	OUT	GET /main-a73c411dc2.js HTTP/1.1 Host: account.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.signaturit.com/en/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
2024-04-24 12:33:09 UTC	538	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1273600 Connection: close Date: Wed, 24 Apr 2024 12:33:10 GMT Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "96967efb5d03a27dc48b6fbae181914a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8a7696c9764ab79132ce2754e8e20bec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: C6WBpYDcZxkGUSjob7mKdTt1_KwguzW63jGTvZQDX_aIvrqkiOmeow== Vary: Origin
2024-04-24 12:33:09 UTC	7671	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2d 61 37 33 63 34 31 31 64 63 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 36 36 37 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 69 6e 73 65 72 74 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 6e 3d 30 3d 3d 3d 74 2e 74 61 67 73 2e 6c 65 6e 67 74 68 3f 74 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 Data Ascii: /! For license information please see main-a73c411dc2.js.LICENSE.txt /var e,t,n,r,o={66751:function(e,t,n){n.d(t,{Z:function(){return re}});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint
2024-04-24 12:33:09 UTC	16384	IN	Data Raw: 28 65 2c 74 2b 31 29 29 62 72 65 61 6b 3b 63 61 73 65 20 36 34 34 34 3a 73 77 69 74 63 68 28 63 28 65 2c 66 28 65 29 2d 33 2d 28 7e 75 28 65 2c 22 21 69 6d 70 6f 72 74 61 6e 74 22 29 26 26 31 30 29 29 29 7b 63 61 73 65 20 31 30 37 3a 72 65 74 75 72 6e 20 73 28 65 2c 22 3a 22 2c 22 3a 22 2b 42 29 2b 65 3b 63 61 73 65 20 31 30 31 3a 72 65 74 75 72 6e 20 73 28 65 2c 2f 28 2e 2b 3a 29 28 5b 5e 3b 21 5d 2b 29 28 3b 7c 21 2e 2b 29 3f 2f 2c 22 24 31 22 2b 42 2b 28 34 35 3d 3d 3d 63 28 65 2c 31 34 29 3f 22 69 6e 6c 69 6e 65 2d 22 3a 22 22 29 2b 22 62 6f 78 24 33 24 31 22 2b 42 2b 22 24 32 24 33 24 31 22 2b 4e 2b 22 24 32 62 6f 78 24 33 22 29 2b 65 7d 62 72 65 61 6b 3b 63 61 73 65 20 35 39 33 36 3a 73 77 69 74 63 68 28 63 28 65 2c 74 2b 31 31 29 29 7b 63 61 73 65 Data Ascii: (e,t+1))break;case 6444:switch(c(e,f(e)-3-(~u(e,"!important")&&10))){case 107:return s(e,":",":"+B)+e;case 101:return s(e,/(.+:)([^;!]+)(;\|!.+)?/,"$1"+B+(45===c(e,14)?"inline-":"")+"box$3$1"+B+"$2$3$1"+N+"$2box$3")+e}break;case 5936:switch(c(e,t+11)){case
2024-04-24 12:33:09 UTC	16384	IN	Data Raw: 69 6f 6e 20 63 28 65 29 7b 63 6f 6e 73 74 7b 63 68 69 6c 64 72 65 6e 3a 74 2c 64 69 73 61 62 6c 65 41 75 74 6f 46 6f 63 75 73 3a 6e 3d 21 31 2c 64 69 73 61 62 6c 65 45 6e 66 6f 72 63 65 46 6f 63 75 73 3a 6c 3d 21 31 2c 64 69 73 61 62 6c 65 52 65 73 74 6f 72 65 46 6f 63 75 73 3a 63 3d 21 31 2c 67 65 74 54 61 62 62 61 62 6c 65 3a 64 3d 73 2c 69 73 45 6e 61 62 6c 65 64 3a 66 3d 75 2c 6f 70 65 6e 3a 70 7d 3d 65 2c 68 3d 72 2e 75 73 65 52 65 66 28 21 31 29 2c 6d 3d 72 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 2c 67 3d 72 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 2c 76 3d 72 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 2c 62 3d 72 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 2c 79 3d 72 2e 75 73 65 52 65 66 28 21 31 29 2c 78 3d 72 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 2c 77 3d Data Ascii: ion c(e){const{children:t,disableAutoFocus:n=!1,disableEnforceFocus:l=!1,disableRestoreFocus:c=!1,getTabbable:d=s,isEnabled:f=u,open:p}=e,h=r.useRef(!1),m=r.useRef(null),g=r.useRef(null),v=r.useRef(null),b=r.useRef(null),y=r.useRef(!1),x=r.useRef(null),w=
2024-04-24 12:33:09 UTC	2048	IN	Data Raw: 6c 65 63 74 65 64 22 3a 72 7d 7d 2c 69 64 3a 59 2c 69 6e 70 75 74 56 61 6c 75 65 3a 64 65 2c 76 61 6c 75 65 3a 75 65 2c 64 69 72 74 79 3a 4b 65 2c 65 78 70 61 6e 64 65 64 3a 77 65 26 26 72 65 2c 70 6f 70 75 70 4f 70 65 6e 3a 77 65 2c 66 6f 63 75 73 65 64 3a 70 65 7c 7c 2d 31 21 3d 3d 61 65 2c 61 6e 63 68 6f 72 45 6c 3a 72 65 2c 73 65 74 41 6e 63 68 6f 72 45 6c 3a 6f 65 2c 66 6f 63 75 73 65 64 54 61 67 3a 61 65 2c 67 72 6f 75 70 65 64 4f 70 74 69 6f 6e 73 3a 51 65 7d 7d 7d 2c 31 30 32 33 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 37 34 36 32 29 2c 6f 3d 6e 28 32 38 34 34 32 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c Data Ascii: lected":r}},id:Y,inputValue:de,value:ue,dirty:Ke,expanded:we&&re,popupOpen:we,focused:pe\|\|-1!==ae,anchorEl:re,setAnchorEl:oe,focusedTag:ae,groupedOptions:Qe}}},10238:function(e,t,n){n.d(t,{$:function(){return a}});var r=n(87462),o=n(28442);function a(e,t,
2024-04-24 12:33:09 UTC	16384	IN	Data Raw: 6c 76 69 6e 67 53 6c 6f 74 50 72 6f 70 73 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 54 79 70 65 3a 6e 2c 65 78 74 65 72 6e 61 6c 53 6c 6f 74 50 72 6f 70 73 3a 63 2c 6f 77 6e 65 72 53 74 61 74 65 3a 64 2c 73 6b 69 70 52 65 73 6f 6c 76 69 6e 67 53 6c 6f 74 50 72 6f 70 73 3a 66 3d 21 31 7d 3d 65 2c 70 3d 28 30 2c 6f 2e 5a 29 28 65 2c 75 29 2c 68 3d 66 3f 7b 7d 3a 28 30 2c 73 2e 78 29 28 63 2c 64 29 2c 7b 70 72 6f 70 73 3a 6d 2c 69 6e 74 65 72 6e 61 6c 52 65 66 3a 67 7d 3d 28 30 2c 6c 2e 4c 29 28 28 30 2c 72 2e 5a 29 28 7b 7d 2c 70 2c 7b 65 78 74 65 72 6e 61 6c 53 6c 6f 74 50 72 6f 70 73 3a 68 7d 29 29 2c 76 3d 28 30 2c 61 2e 5a 29 28 67 2c 6e 75 6c 6c 3d 3d 68 3f 76 6f 69 64 20 30 3a 68 2e 72 Data Ascii: lvingSlotProps"];function c(e){var t;const{elementType:n,externalSlotProps:c,ownerState:d,skipResolvingSlotProps:f=!1}=e,p=(0,o.Z)(e,u),h=f?{}:(0,s.x)(c,d),{props:m,internalRef:g}=(0,l.L)((0,r.Z)({},p,{externalSlotProps:h})),v=(0,a.Z)(g,null==h?void 0:h.r
2024-04-24 12:33:09 UTC	1024	IN	Data Raw: 6f 74 3b 72 65 74 75 72 6e 28 30 2c 66 2e 6a 73 78 29 28 5a 2c 28 30 2c 6f 2e 5a 29 28 7b 69 6e 3a 53 2c 74 69 6d 65 6f 75 74 3a 45 7d 2c 50 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 66 2e 6a 73 78 29 28 68 2c 28 30 2c 6f 2e 5a 29 28 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 7d 2c 54 2c 7b 61 73 3a 6e 75 6c 6c 21 3d 28 61 3d 6e 75 6c 6c 21 3d 28 73 3d 6b 2e 72 6f 6f 74 29 3f 73 3a 79 2e 52 6f 6f 74 29 3f 61 3a 62 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 5a 29 28 52 2e 72 6f 6f 74 2c 76 2c 6e 75 6c 6c 3d 3d 54 3f 76 6f 69 64 20 30 3a 54 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 6f 77 6e 65 72 53 74 61 74 65 3a 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 4f 2c 6e 75 6c 6c 3d 3d 54 3f 76 6f 69 64 20 30 3a 54 2e 6f 77 6e 65 72 53 74 61 74 65 29 2c 63 6c 61 73 Data Ascii: ot;return(0,f.jsx)(Z,(0,o.Z)({in:S,timeout:E},P,{children:(0,f.jsx)(h,(0,o.Z)({"aria-hidden":!0},T,{as:null!=(a=null!=(s=k.root)?s:y.Root)?a:b,className:(0,i.Z)(R.root,v,null==T?void 0:T.className),ownerState:(0,o.Z)({},O,null==T?void 0:T.ownerState),clas
2024-04-24 12:33:09 UTC	16384	IN	Data Raw: 2c 64 3d 6e 28 32 30 36 38 29 2c 66 3d 6e 28 37 39 36 37 34 29 2c 70 3d 6e 28 34 33 39 39 32 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 72 65 74 75 72 6e 20 68 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 68 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d Data Ascii: ,d=n(2068),f=n(79674),p=n(43992);function h(){return h=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},h.apply(this,argum
2024-04-24 12:33:09 UTC	1024	IN	Data Raw: 65 74 22 2c 6f 75 74 6c 69 6e 65 3a 30 2c 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 3a 22 6e 6f 6e 65 22 2c 62 6f 72 64 65 72 3a 30 2c 70 61 64 64 69 6e 67 3a 30 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 6d 69 64 64 6c 65 22 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 62 6f 72 64 65 72 2d 62 6f 78 22 2c 5b 60 26 2e 24 7b 76 2e 5a 2e 64 69 73 61 62 6c 65 64 7d 60 5d 3a 7b 6f 70 61 63 69 74 79 3a 28 65 2e 76 61 72 73 7c 7c 65 29 2e 70 61 6c 65 74 74 65 2e 61 63 74 69 6f 6e 2e 64 69 73 61 62 6c 65 64 4f 70 61 63 69 74 79 2c 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3a 22 6e 6f 6e 65 22 7d 2c 5b 60 26 20 2e 24 7b 76 2e 5a 2e 61 76 61 74 61 72 7d 60 5d 3a 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 35 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 2d 36 2c 77 69 64 74 68 3a 32 34 Data Ascii: et",outline:0,textDecoration:"none",border:0,padding:0,verticalAlign:"middle",boxSizing:"border-box",[`&.${v.Z.disabled}`]:{opacity:(e.vars\|\|e).palette.action.disabledOpacity,pointerEvents:"none"},[`& .${v.Z.avatar}`]:{marginLeft:5,marginRight:-6,width:24
2024-04-24 12:33:10 UTC	16384	IN	Data Raw: 67 68 74 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 63 6f 6c 6f 72 3a 65 2e 76 61 72 73 3f 60 72 67 62 61 28 24 7b 65 2e 76 61 72 73 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 43 68 61 6e 6e 65 6c 7d 20 2f 20 30 2e 32 36 29 60 3a 28 30 2c 73 2e 46 71 29 28 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 2c 2e 32 36 29 2c 66 6f 6e 74 53 69 7a 65 3a 32 32 2c 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 2c 6d 61 72 67 69 6e 3a 22 30 20 35 70 78 20 30 20 2d 36 70 78 22 2c 22 26 3a 68 6f 76 65 72 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 76 61 72 73 3f 60 72 67 62 61 28 24 7b 65 2e 76 61 72 73 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 43 68 61 6e 6e 65 6c 7d 20 2f 20 30 2e 34 29 60 3a 28 30 Data Ascii: ghtColor:"transparent",color:e.vars?`rgba(${e.vars.palette.text.primaryChannel} / 0.26)`:(0,s.Fq)(e.palette.text.primary,.26),fontSize:22,cursor:"pointer",margin:"0 5px 0 -6px","&:hover":{color:e.vars?`rgba(${e.vars.palette.text.primaryChannel} / 0.4)`:(0
2024-04-24 12:33:10 UTC	16384	IN	Data Raw: 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 7b 70 72 6f 70 73 3a 65 2c 73 74 61 74 65 73 3a 74 2c 6d 75 69 46 6f 72 6d 43 6f 6e 74 72 6f 6c 3a 6e 7d 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 64 75 63 65 28 28 28 74 2c 72 29 3d 3e 28 74 5b 72 5d 3d 65 5b 72 5d 2c 6e 26 26 76 6f 69 64 20 30 3d 3d 3d 65 5b 72 5d 26 26 28 74 5b 72 5d 3d 6e 5b 72 5d 29 2c 74 29 29 2c 7b 7d 29 7d 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 7d 2c 37 34 34 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 36 37 32 39 34 29 2c 6f 3d 6e 28 34 37 31 36 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 Data Ascii: ,n){function r({props:e,states:t,muiFormControl:n}){return t.reduce(((t,r)=>(t[r]=e[r],n&&void 0===e[r]&&(t[r]=n[r]),t)),{})}n.d(t,{Z:function(){return r}})},74423:function(e,t,n){n.d(t,{Z:function(){return a}});var r=n(67294),o=n(47167);function a(){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50143	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:08 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: signaturit.zendesk.com Connection: keep-alive Content-Length: 492 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://help.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:08 UTC	492	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 63 61 62 38 32 37 65 35 36 62 35 38 34 66 32 61 38 30 30 39 35 63 32 34 34 61 35 34 34 34 64 35 22 2c 22 73 75 69 64 22 3a 22 38 39 66 33 34 35 64 63 34 33 31 36 34 66 39 33 38 66 39 63 62 61 35 63 31 30 32 39 64 66 63 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 2c 7b 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 3a 7b 22 69 6e 69 74 49 6e 74 65 72 76 61 6c 22 3a 33 37 34 38 2c 22 77 69 64 67 65 74 54 79 70 65 22 3a 22 63 6c 61 73 73 69 63 22 2c 22 69 73 4d 6f 62 69 6c 65 22 3a Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"cab827e56b584f2a80095c244a5444d5","suid":"89f345dc43164f938f9cba5c1029dfcd","version":"7bc1c0f"},{"performance":{"initInterval":3748,"widgetType":"classic","isMobile":
2024-04-24 12:33:09 UTC	758	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:09 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 87961ec0697b0ad9-LAS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O8FoLBe8fueC29M1oGHdRUOqkU3Kpu6dYBzidvlfg%2Ff85oq0%2FaHQYfDeZOKWa957t78Z7tC7Z1Yjv66iXiktEkOA1Tw2XOxxzeQsd2lhOJ%2Bh1Ue9B2naFGrWUuYiT%2BnTuG8HvVWK5s0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=3ab3e6606df6b50e993f43a29c7adca1aa88c649-1713961989; path=/; domain=.signaturit.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87961ec0697b0ad9-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50144	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:09 UTC	1535	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/d/1713961988077/1713961988077%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%22pwcI91sGFmxEtTCDa1631bEHfZpzs4fG%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Certified%20files%20%E2%80%93%20Signaturit%22%2C%22url%22%3A%22https%3A%2F%2Fhelp.signaturit.com%2Fhc%2Fen-us%2Fsections%2F20917497510929-Certified-files%22%2C%22ref%22%3A%22https%3A%2F%2Fhelp.signaturit.com%2Fhc%2Fen-us%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=EoOu8uEFbQQz+6D1NcVGPvtNTufKXsw1iF1Xpt4fg+Dd0v4+YJMkjUb4af7nyEDHQW8D7KKybHVwXkDjWBNw4lh7FFZObhQ9lmGRaBY8FEFrKlwD1QQ/kYUfJDJQ
2024-04-24 12:33:09 UTC	633	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:09 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=TmpEmmis4/uxgHC4w2a9r1VPfqEwcf4C9hmsxXzaauwzESWSX8i/qACggWv7UhVK0/+ubAIVVUpMiplbXSNBXDgRmHFieVlh0r2NUdyeqfT8tBeR+3QbMryw3sWD; Expires=Wed, 01 May 2024 12:33:09 GMT; Path=/ Set-Cookie: AWSALBCORS=TmpEmmis4/uxgHC4w2a9r1VPfqEwcf4C9hmsxXzaauwzESWSX8i/qACggWv7UhVK0/+ubAIVVUpMiplbXSNBXDgRmHFieVlh0r2NUdyeqfT8tBeR+3QbMryw3sWD; Expires=Wed, 01 May 2024 12:33:09 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-24 12:33:09 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-24 12:33:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50145	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:09 UTC	675	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961988079 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=EoOu8uEFbQQz+6D1NcVGPvtNTufKXsw1iF1Xpt4fg+Dd0v4+YJMkjUb4af7nyEDHQW8D7KKybHVwXkDjWBNw4lh7FFZObhQ9lmGRaBY8FEFrKlwD1QQ/kYUfJDJQ
2024-04-24 12:33:09 UTC	633	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:09 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=I28C0/txeJvKq/wlrIxqI5h4Sb3rTKKPAM+nxIQ6nomKYsUq42HCIMC2qAYD6sg6towohe1UsiOKil6KZ8uUrYalmPhfxaRS13dA9FdHe0y2sqsf9+G13kDO/JTW; Expires=Wed, 01 May 2024 12:33:09 GMT; Path=/ Set-Cookie: AWSALBCORS=I28C0/txeJvKq/wlrIxqI5h4Sb3rTKKPAM+nxIQ6nomKYsUq42HCIMC2qAYD6sg6towohe1UsiOKil6KZ8uUrYalmPhfxaRS13dA9FdHe0y2sqsf9+G13kDO/JTW; Expires=Wed, 01 May 2024 12:33:09 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-24 12:33:09 UTC	414	IN	Data Raw: 31 39 37 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 39 36 31 39 38 39 35 36 30 5c 6e 31 34 37 31 2e 38 35 34 32 30 32 34 36 37 37 31 31 33 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d Data Ascii: 197$Loader && ($Loader.payload = "1713961989560\n1471.8542024677113\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-
2024-04-24 12:33:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50147	104.16.53.111	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:09 UTC	477	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: signaturit.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=7164262fe2a06e812899d7c447996a5777237e03-1713961981
2024-04-24 12:33:10 UTC	577	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 24 Apr 2024 12:33:10 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 87961ec5a84f09f1-LAS CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2BJMAOXzOE7IONl0zMDqUwRtmXfmHBEV9nggKS%2FxHdc091OQnbdTNLCdaX7XrozVvGq36dfxJ2WgU4nxCROduowCiuKO3H7STT5N1PiQ3lll6Su1SwgWD1wkQ0kuLLmOh9nVgMYOm6Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87961ec5a84f09f1-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50148	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:10 UTC	675	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961988869 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=I28C0/txeJvKq/wlrIxqI5h4Sb3rTKKPAM+nxIQ6nomKYsUq42HCIMC2qAYD6sg6towohe1UsiOKil6KZ8uUrYalmPhfxaRS13dA9FdHe0y2sqsf9+G13kDO/JTW
2024-04-24 12:33:10 UTC	633	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:10 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=/LNSHrOV63j/o0JLhXZxFscISQmFvi9gPgEUejz1c4EbL/lnbjSAfryxgKEAGIppT5wcVPyX9WFy4n8IFG8stIoG9F7Hd9jJRK2f1N6GbgntnTI9pEF6T7APGMch; Expires=Wed, 01 May 2024 12:33:10 GMT; Path=/ Set-Cookie: AWSALBCORS=/LNSHrOV63j/o0JLhXZxFscISQmFvi9gPgEUejz1c4EbL/lnbjSAfryxgKEAGIppT5wcVPyX9WFy4n8IFG8stIoG9F7Hd9jJRK2f1N6GbgntnTI9pEF6T7APGMch; Expires=Wed, 01 May 2024 12:33:10 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-24 12:33:10 UTC	4087	IN	Data Raw: 66 66 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 39 36 31 39 39 30 33 33 31 5c 6e 31 34 37 31 2e 36 38 38 32 31 31 31 31 37 32 33 36 5c 6e 33 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 67 61 74 65 73 5c 22 3a 7b 5c 22 73 65 74 5f 66 6f 6e 74 5f 63 6f 6e 66 69 67 24 62 6f 6f 6c 5c 22 3a 74 72 75 65 2c 5c 22 5f 24 69 6e 74 5c 22 3a 31 7d 7d 2c 5c 22 73 65 71 5c 22 3a 33 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 73 79 73 74 65 6d 5c 22 3a 7b 5c 22 75 72 6c 73 5c 22 3a 7b 5c 22 73 6f 63 69 61 6c 5f 73 69 67 6e 69 6e 5f 74 Data Ascii: ff0$Loader && ($Loader.payload = "1713961990331\n1471.688211117236\n3\n1\nd\n{\"path\":\"livechat\",\"update\":{\"gates\":{\"set_font_config$bool\":true,\"_$int\":1}},\"seq\":3}\n{\"path\":\"livechat\",\"update\":{\"system\":{\"urls\":{\"social_signin_t
2024-04-24 12:33:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50149	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:10 UTC	675	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961989641 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=/LNSHrOV63j/o0JLhXZxFscISQmFvi9gPgEUejz1c4EbL/lnbjSAfryxgKEAGIppT5wcVPyX9WFy4n8IFG8stIoG9F7Hd9jJRK2f1N6GbgntnTI9pEF6T7APGMch
2024-04-24 12:33:11 UTC	633	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:11 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=9/GhluKOA0UjbtEMO6BqZuTbpAqPUrI+iKio1at+g9+QUImJ0GR0Ww/bkp9+FiFxFk1j6yU20V3820UGcqXcDagqbidi4onxJRD3RI3f69zNsuVymakx1IEizQ9D; Expires=Wed, 01 May 2024 12:33:11 GMT; Path=/ Set-Cookie: AWSALBCORS=9/GhluKOA0UjbtEMO6BqZuTbpAqPUrI+iKio1at+g9+QUImJ0GR0Ww/bkp9+FiFxFk1j6yU20V3820UGcqXcDagqbidi4onxJRD3RI3f69zNsuVymakx1IEizQ9D; Expires=Wed, 01 May 2024 12:33:11 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-24 12:33:11 UTC	1645	IN	Data Raw: 36 36 36 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 39 36 31 39 39 31 31 31 35 5c 6e 31 34 37 31 2e 37 32 37 37 39 37 39 32 36 36 39 31 5c 6e 34 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 64 65 70 61 72 74 6d 65 6e 74 73 5c 22 3a 6e 75 6c 6c 2c 5c 22 67 72 6f 75 70 73 5c 22 3a 6e 75 6c 6c 7d 2c 5c 22 73 65 71 5c 22 3a 31 30 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 61 63 63 6f 75 6e 74 5c 22 3a 7b 5c 22 6b 65 79 24 73 74 72 69 6e 67 5c 22 3a 5c 22 70 77 63 49 39 31 73 47 46 6d 78 45 74 54 43 44 61 31 36 33 31 62 45 48 66 Data Ascii: 666$Loader && ($Loader.payload = "1713961991115\n1471.727797926691\n4\n1\nd\n{\"path\":\"livechat\",\"update\":{\"departments\":null,\"groups\":null},\"seq\":10}\n{\"path\":\"livechat\",\"update\":{\"account\":{\"key$string\":\"pwcI91sGFmxEtTCDa1631bEHf
2024-04-24 12:33:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50151	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:10 UTC	1876	OUT	POST /socket.io/?EIO=3&transport=polling&t=OyG67RX&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive Content-Length: 3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; io=eWeEpe9fpKZMdZliAAtt; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0
2024-04-24 12:33:10 UTC	3	OUT	Data Raw: 31 3a 32 Data Ascii: 1:2
2024-04-24 12:33:11 UTC	369	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:11 GMT Content-Type: text/html Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=tCEDyrh5I7R_YWX3AAtQ; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961ecd2eb169e6-LAS
2024-04-24 12:33:11 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50153	216.137.39.96	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:11 UTC	545	OUT	OPTIONS /locales/en.json HTTP/1.1 Host: d47l4duuvaadc.cloudfront.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-requested-with Origin: https://account.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:12 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7149 Connection: close Date: Wed, 24 Apr 2024 12:33:13 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: x-requested-with Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "08b8d01350d13c8a6f98dcf0e41b2631" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Error from cloudfront Via: 1.1 9fa56be62b1be7dd446abf03b1b07c74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 1g5RRPS3IlrWvBmXbubBpyBdW_QMTq6VKE7S2DBCxuvhgazY10BkzQ==
2024-04-24 12:33:12 UTC	7149	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 2f 3e 3c 74 69 74 6c 65 3e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 33 64 76 6e 31 74 6e 79 78 61 62 6e 35 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><base href="/"/><title>Authentication app</title><link rel="icon" type="image/png" sizes="16x16" href="https://d3dvn1tnyxabn5.cloudfront.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50154	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:11 UTC	675	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/p/1713961990573 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=9/GhluKOA0UjbtEMO6BqZuTbpAqPUrI+iKio1at+g9+QUImJ0GR0Ww/bkp9+FiFxFk1j6yU20V3820UGcqXcDagqbidi4onxJRD3RI3f69zNsuVymakx1IEizQ9D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50155	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:11 UTC	565	OUT	GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:12 UTC	1181	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 236 Connection: close x-amz-id-2: R3PecKyMJCGDs4JT2rQH8kobx+xe4PmFL3bhxKf2ufYIH8AcJNe/MKDfH2LJ2tMd1M/EVwVYdpk= x-amz-request-id: XFADR46K4TGX035H x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "77bb07ca171e3ff2b72a7dafa7822bc8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: Lm_gk05VN5DG3iiQELVQYeeCHNOGOA_r CF-Cache-Status: HIT Age: 1126080 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V7Z8UQexrUXbKSBoyWpafi%2BDlplv5czOIQrVx4hqsIHe%2BYVzQIRXjPdSyQ0CCa%2Brs2Bt2iqU3CfNYTSkM38Y7mL4sTGCUY8yWzaepiER7KaKt%2FguBLA0ZKGMyXYqJbXODoadHmA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961ed2cf4209ed-LAS
2024-04-24 12:33:12 UTC	188	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 37 36 5d 2c 7b 36 32 36 37 37 3a 28 65 2c 73 2c 64 29 3d 3e 7b 64 2e 72 28 73 29 2c 64 2e 64 28 73 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 63 6f 6e 73 74 20 63 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[5376],{62677:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c
2024-04-24 12:33:12 UTC	48	IN	Data Raw: 3d 64 2e 70 2b 22 66 64 61 36 63 64 33 35 34 39 35 63 37 35 66 38 33 35 30 38 64 39 64 32 65 37 37 65 65 33 33 64 2e 6d 70 33 22 7d 7d 5d 29 3b Data Ascii: =d.p+"fda6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50156	52.37.227.74	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:11 UTC	979	OUT	GET /s/W/xdds/HlHzlAqgzRYBFW6x/d/1713961990733/1713961990733%0A-697.1520369977142%0A2%0A4%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713961986350%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=9/GhluKOA0UjbtEMO6BqZuTbpAqPUrI+iKio1at+g9+QUImJ0GR0Ww/bkp9+FiFxFk1j6yU20V3820UGcqXcDagqbidi4onxJRD3RI3f69zNsuVymakx1IEizQ9D
2024-04-24 12:33:12 UTC	633	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:12 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=xLXCR4T0HCenEbSyLXZtJ2jd4IHWlBrhbjd+gZ8oBtP8vsbdSKzBTPTD1gqt9lMuGP1uZdloQq/NUX+7fVRMwAWGUhurMlt5+mcme6W9husbmR4YGG9sdfJwgLAQ; Expires=Wed, 01 May 2024 12:33:12 GMT; Path=/ Set-Cookie: AWSALBCORS=xLXCR4T0HCenEbSyLXZtJ2jd4IHWlBrhbjd+gZ8oBtP8vsbdSKzBTPTD1gqt9lMuGP1uZdloQq/NUX+7fVRMwAWGUhurMlt5+mcme6W9husbmR4YGG9sdfJwgLAQ; Expires=Wed, 01 May 2024 12:33:12 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-24 12:33:12 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-24 12:33:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50158	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:12 UTC	1623	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG61GV&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:33:13 UTC	252	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:33:13 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961ed4cf6d0ad3-LAS
2024-04-24 12:33:13 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-24 12:33:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50160	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:12 UTC	1623	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG67RX&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:33:12 UTC	315	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 3 Connection: close Access-Control-Allow-Origin: * Set-Cookie: io=tCEDyrh5I7R_YWX3AAtQ; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961ed4dd3309f9-LAS
2024-04-24 12:33:12 UTC	3	IN	Data Raw: 31 3a 31 Data Ascii: 1:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50159	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:12 UTC	1842	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG67kp&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:33:12 UTC	198	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 24 Apr 2024 12:33:12 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961ed4dbfb09fd-LAS
2024-04-24 12:33:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50161	3.141.154.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:12 UTC	543	OUT	GET /widget/embed/r0l5nqfm HTTP/1.1 Host: app.hellozest.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:13 UTC	215	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 24 Apr 2024 12:33:12 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://app.birdie.so:443/widget/embed/r0l5nqfm
2024-04-24 12:33:13 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50162	216.137.39.96	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:12 UTC	619	OUT	GET /locales/en.json HTTP/1.1 Host: d47l4duuvaadc.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:13 UTC	650	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 8916 Connection: close Date: Wed, 24 Apr 2024 12:33:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "877af45943959651d9bbbceb11fc4e9d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 40e91b31dd840e2e02680165e2c720fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: _YU5VxsioI4IHLIQckUu4YkpxQ3W-tyHJjjMTHcD-itSPD9EPKtIQg==
2024-04-24 12:33:13 UTC	8916	IN	Data Raw: 7b 0a 20 20 20 20 22 61 75 74 68 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 6f 67 69 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 6b 5f 61 63 63 6f 75 6e 74 22 3a 20 22 44 6f 6e 27 74 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 3f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 74 74 6f 6e 5f 6c 6f 67 69 6e 22 3a 20 22 4c 6f 67 69 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 45 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 74 65 72 22 3a 20 22 45 6e 74 65 72 20 77 69 74 68 20 79 6f 75 72 20 53 69 67 6e 61 74 75 72 69 74 20 61 63 63 6f 75 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 72 72 6f 72 5f 63 72 65 64 65 6e 74 69 61 6c 73 22 3a 20 22 57 72 6f 6e 67 20 75 Data Ascii: { "auth": { "login": { "ask_account": "Don't have an account?", "button_login": "Login", "email": "Email", "enter": "Enter with your Signaturit account", "error_credentials": "Wrong u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50163	18.154.207.209	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:12 UTC	638	OUT	GET /common-assets/v1/favicons/favicon-32x32.png HTTP/1.1 Host: d3dvn1tnyxabn5.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:13 UTC	447	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1562 Connection: close Date: Wed, 24 Apr 2024 12:33:14 GMT Last-Modified: Thu, 09 Apr 2020 10:25:27 GMT ETag: "98d9ad910c2b17df06fd37c2489c2c8d" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 360ac648682c5b4ae3b84565b3d9c7b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: xrm5Nu2SXGrbnaNjcqyawxOKSTOP1lxi5jvpaNbox_3W9yFXkMF92g==
2024-04-24 12:33:13 UTC	1562	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 e0 50 4c 54 45 14 71 92 15 72 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 15 72 93 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 15 72 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 13 71 92 11 6f 91 12 70 91 16 73 93 1e 77 97 19 74 95 1a 75 95 4c 94 ad 88 ba ca a5 cd d8 bb da e3 ad d2 dc 52 98 b0 13 70 91 13 70 92 4c 95 ad a9 cf db e3 f4 f7 f6 ff ff f4 ff ff d0 e8 ed Data Ascii: PNGIHDR DgAMAasRGB cHRMz&u0`:pQ<PLTEqrqqqqqqqqqrqqqqqqqqrqqqqqqopswtuLRppL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50165	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:13 UTC	1902	OUT	POST /socket.io/?EIO=3&transport=polling&t=OyG67yL&sid=tCEDyrh5I7R_YWX3AAtQ HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive Content-Length: 3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:33:13 UTC	3	OUT	Data Raw: 31 3a 31 Data Ascii: 1:1
2024-04-24 12:33:13 UTC	322	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:33:13 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961eda3c1909f3-LAS
2024-04-24 12:33:13 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-24 12:33:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50166	3.141.154.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:13 UTC	1399	OUT	GET /widget/embed/r0l5nqfm HTTP/1.1 Host: app.birdie.so Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=INuQAz3RM3mZDdXcEsAssMjqqa4WA87hOqanAs9IMbtONyXcFUr+xe36sNZjOfbAmfXOsLB3UnjsdPXgXz9ehw/bYDoaEugaqYGQgdlpwv1bXpHG2UQGCdSIRGdc; XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
2024-04-24 12:33:13 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:13 GMT Content-Type: application/javascript Content-Length: 1167 Connection: close Set-Cookie: AWSALB=ogZFtsDUNbiI827XxWlIpq+UyxrukV66GMHTouzrWVeag2WV3Ro7ycumlyxO3YpaCd+EVfowPuZSSaEtHyiulHkUJupW1xWDEiolYdjxICwqxhnSupZ/abfY9TwE; Expires=Wed, 01 May 2024 12:33:13 GMT; Path=/ Set-Cookie: AWSALBCORS=ogZFtsDUNbiI827XxWlIpq+UyxrukV66GMHTouzrWVeag2WV3Ro7ycumlyxO3YpaCd+EVfowPuZSSaEtHyiulHkUJupW1xWDEiolYdjxICwqxhnSupZ/abfY9TwE; Expires=Wed, 01 May 2024 12:33:13 GMT; Path=/; SameSite=None; Secure Server: nginx Last-Modified: Wed, 24 Apr 2024 07:06:32 GMT ETag: "6628af78-48f" Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:33:13 UTC	1167	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 76 6f 69 64 20 30 2c 74 3d 21 31 2c 69 3d 22 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 30 3b 72 3c 6f 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 6c 65 74 20 73 3d 6f 5b 72 5d 2e 73 72 63 3b 69 66 28 73 2e 69 6e 64 65 78 4f 66 28 22 2f 77 69 64 67 65 74 2f 65 6d 62 65 64 2f 22 29 3e 3d 30 26 26 28 73 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 69 72 64 69 65 2e 22 29 3e 3d 30 7c 7c 73 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 68 65 6c 6c 6f 7a 65 73 74 2e 69 6f 22 29 3e 3d 30 29 29 7b 65 3d 6f 5b 72 5d 2c 74 3d 73 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 Data Ascii: !function(){for(var e=void 0,t=!1,i="",o=document.getElementsByTagName("script"),r=0;r<o.length;r++){let s=o[r].src;if(s.indexOf("/widget/embed/")>=0&&(s.indexOf("https://app.birdie.")>=0\|\|s.indexOf("https://app.hellozest.io")>=0)){e=o[r],t=s.indexOf("htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50168	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:13 UTC	1817	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG688e HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=tCEDyrh5I7R_YWX3AAtQ
2024-04-24 12:33:14 UTC	387	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com Set-Cookie: io=uxWQgoxnncAT64DmAA1T; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961edf299709f9-LAS
2024-04-24 12:33:14 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 75 78 57 51 67 6f 78 6e 6e 63 41 54 36 34 44 6d 41 41 31 54 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"uxWQgoxnncAT64DmAA1T","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50169	104.18.72.113	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:13 UTC	563	OUT	GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-24 12:33:14 UTC	1205	IN	HTTP/1.1 206 Partial Content Date: Wed, 24 Apr 2024 12:33:14 GMT Content-Type: audio/mpeg; charset=utf-8 Content-Length: 19698 Connection: close x-amz-id-2: eANrIaPqScX/HcTBuO9Ygxuy2PDIF5gMPbbtEnNP4r8awfJScAcJ08j4BwLBd4anl8viLy0rADU= x-amz-request-id: ZJZE7JMCCHH4D6TV x-amz-replication-status: COMPLETED Last-Modified: Mon, 06 Nov 2023 00:49:00 GMT ETag: "f11ce9e8f40a392830217253fe75d6de" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 05 Nov 2024 00:48:59 GMT x-amz-version-id: 4bV_wFumuJbx5cco1BXg1VPt41lZHsX1 CF-Cache-Status: HIT Age: 13218780 Content-Range: bytes 0-19697/19698 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yGfmliMY6VO0zOu3KF%2Bb2JoVvV%2FEktI%2BirIHCnnzY08g6QP%2Bm8Sult2KpxFMMDTyIgwH00Ut%2BLQLESlIHEBIkfEotOrGaNx8XCo%2FTL9Kla0XJRLYF%2BZQoaK90wDtAgtwxiDCajk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87961edfacbd0ad5-LAS
2024-04-24 12:33:14 UTC	164	IN	Data Raw: 49 44 33 03 00 00 00 00 33 69 50 52 49 56 00 00 11 df 00 00 58 4d 50 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 Data Ascii: ID33iPRIVXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/0
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f Data Ascii: 2/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 30 37 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 41 30 46 35 30 34 45 41 45 41 41 38 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 33 2d 30 34 2d 30 34 54 31 31 3a 30 32 3a 30 31 2b 30 38 3a 30 30 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 41 75 64 69 74 69 6f 6e 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 0a 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 36 38 30 Data Ascii: 078011740720681192B0A0F504EAEAA8" stEvt:when="2013-04-04T11:02:01+08:00" stEvt:softwareAgent="Adobe Audition CS6 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0680
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: cd cd 09 d4 0e 98 b7 cb e9 a0 9a d0 5a 2c 71 1f 56 9a d0 4e a5 f5 a3 f5 ff fe 58 4f ff ff ff ff e9 b4 04 b1 00 00 86 95 00 00 03 c9 52 11 22 46 6c 38 fa ff fb 90 40 04 00 02 11 36 d5 7f 6d a0 08 4e e6 ca af ee 34 01 47 e0 d9 53 8d ed 4b 71 56 32 2a f5 ba a9 b6 80 23 90 3c 32 fa e0 d6 9c 25 c6 c5 c2 a5 c2 02 b5 5a 22 36 07 0b 01 41 4e bc 30 48 09 61 80 a2 85 d4 6c 2e 14 92 fc 4d d6 df fe c5 bf ff ff a9 21 26 3f ff ff 36 ff fe a2 eb d4 20 88 91 92 ae fc 7d 40 11 e8 5c 32 e0 d2 30 e6 54 9e 69 36 60 12 90 20 9a 50 05 06 1c 0c 52 0a 30 98 94 fa 24 a3 16 81 8c 0a 0a 02 f4 27 a2 f1 70 79 24 f5 f0 db 24 51 6f 5e d5 d8 6e 4b ff ff e9 19 06 d1 09 ff db f6 25 bf ff a8 70 8d d5 a0 49 52 7e 72 05 2c 19 37 00 5d 82 9b 1d 48 d2 5f 0d ad a2 31 61 11 60 04 05 27 0c 90 95 Data Ascii: Z,qVNXOR"Fl8@6mN4GSKqV2*#<2%Z"6AN0Hal.M!&?6 }@\20Ti6` PR0$'py$$Qo^nK%pIR~r,7]H_1a`'
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 37 6e 42 b7 a4 58 dc a2 88 d6 ec 9c 02 64 ba 85 c4 d2 c0 ec c8 d6 ad 31 89 eb ed 25 36 b3 71 39 46 1c 8e b0 ff 53 fd bb 01 4c 44 1e 9f 77 f4 80 fa b0 01 77 5d ac 00 00 fc 38 6e c2 ef 67 05 cf 4e 42 6f c8 86 10 68 41 b0 22 94 94 17 ac c3 f0 23 1a 0c 66 e9 1e 99 08 e4 ff be 91 aa 48 75 7d c8 25 ed 08 42 24 7f 46 71 3a da d1 4b 0f 76 5f 0e b5 43 e4 30 ca 11 97 ad 2b 09 17 4a 45 98 33 5e be 9a d4 d4 de ff f5 c4 6b 39 7f e6 49 53 ff ff ba 80 2e a6 a4 c4 13 31 85 d4 95 ba 65 c1 1b 38 e0 9b 3c e4 38 f1 c0 b5 1c 34 a7 71 60 53 e4 9f 43 6d 34 49 34 23 39 18 a2 80 fc f9 73 a2 11 97 16 4c b4 ad 5d ea b1 eb 0c 57 70 ae f0 61 10 50 4e 44 65 fd 29 a5 2f 77 e2 6f f3 00 07 b6 db 40 00 0d ab c4 fc b8 cb 94 b4 4c a4 59 4d 38 56 07 68 f0 32 0c 13 36 4a 91 f6 ec 6b 17 99 8a Data Ascii: 7nBXd1%6q9FSLDww]8ngNBohA"#fHu}%B$Fq:Kv_C0+JE3^k9IS.1e8<84q`SCm4I4#9sL]WpaPNDe)/wo@LYM8Vh26Jk
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: 8f 24 d0 cb 81 e2 68 a9 d0 b3 9f 44 cd 54 4b 74 a1 63 3d 9d ad 9d aa 96 f7 69 c7 f8 6e 72 8e ae 57 de 2c 3d 4d 5d df 37 87 0a 22 eb 65 9d 38 0e dd 92 42 bb 5b 58 00 0a 4b b2 7a 8b 78 4d b1 61 64 ab 92 49 9a 86 3c 24 0e 86 1a 22 60 f2 2d a6 51 bb ef 43 6d 23 67 af 8a b2 25 d8 30 02 d4 3e 0a 60 e6 82 bc 2e 69 2a e2 ba cb e0 28 f4 92 c6 31 bc 63 f0 db f3 2e 88 d1 5a af 37 56 66 ec ab 96 71 ec c4 ba ae 37 b2 ff ff a0 dd 33 6f d9 04 3d f6 da 00 00 ac b8 73 08 1a 85 7d 86 a9 1f 13 b9 9b 37 16 ed ab 0d 06 53 3d 15 44 41 11 1a 40 f1 0a 0c c7 5f 84 c2 15 29 9a 2e e2 c8 a5 2c c5 b0 d9 20 66 f8 d1 3a 4e 65 2a 6d 1f d9 21 bc a2 69 77 3d a4 74 8e 9e cc fb 8a ae 96 ae ed bc de 3c e8 a8 db d6 00 57 eb ff fb 90 60 b8 80 03 21 26 d2 6b 1a 7a 5c 54 84 9a 6d 1b 0f 4b cb b0 Data Ascii: $hDTKtc=inrW,=M]7"e8B[XKzxMadI<$"`-QCm#g%0>`.i(1c.Z7Vfq73o=s}7S=DA@_)., f:Nem!iw=t<W`!&kz\TmK
2024-04-24 12:33:14 UTC	1369	IN	Data Raw: e6 a3 d6 d7 bd e6 60 84 47 7f 40 b7 54 00 5b 5b 22 00 01 26 e6 76 61 f6 18 d3 c9 c9 0e 90 a5 0d b6 d1 a2 25 42 80 b7 c0 16 a0 d7 11 42 a6 10 4a a2 c0 40 90 40 0a da a4 55 11 20 15 20 eb 37 58 9b 4e 87 e5 31 b7 fe 3c e4 b9 2e 0e 10 c4 b6 ff 32 ec cd 8d 6f fe cf 85 92 24 96 ff cf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb 90 60 dc 80 02 c9 1f 4f eb 1a c2 4e 53 84 7a 3d 63 2f 4b ca 40 7b 41 ac 65 e9 31 4a 90 69 7d ac 3d 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb b5 44 85 b5 b6 30 00 1f 12 c2 5f 3b 8b 32 fc a2 53 0d ee 1e 4c 82 b0 af 05 5d 53 97 23 f4 17 51 3d 63 96 78 b0 25 02 2f d8 42 95 81 a6 46 e6 21 f7 d5 b3 b4 e8 3e 89 92 cb e0 c9 7b c7 37 18 8b cd 52 4a e2 9f a8 84 93 2d d7 c0 8b ce cf 25 dc dd ba 12 02 ba d9 18 00 04 53 Data Ascii: `G@T[["&va%BBJ@@U 7XN1<.2o$`ONSz=c/K@{Ae1Ji}='D0_;2SL]S#Q=cx%/BF!>{7RJ-%S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50170	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:13 UTC	1831	OUT	GET /es/account/user HTTP/1.1 Host: app.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://account.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=25c11597e6ed0a156f110bf6db8f0a69; _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d
2024-04-24 12:33:14 UTC	389	IN	HTTP/1.1 403 Forbidden Date: Wed, 24 Apr 2024 12:33:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, private x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000 x-frame-options: DENY
2024-04-24 12:33:14 UTC	1261	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f 6e 74 Data Ascii: content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsitecont
2024-04-24 12:33:14 UTC	1515	IN	Data Raw: 78 2d 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 73 69 67 6e 61 74 75 72 69 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 72 61 76 65 6e 6a 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 6f 74 6a 61 72 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 67 65 74 73 69 74 65 63 6f Data Ascii: x-content-security-policy: default-src 'self' https://.signaturit.com https://.cloudfront.net https://apis.google.com https://app.box.com https://cdn.jsdelivr.net https://cdn.ravenjs.com https://.hotjar.com https://.hotjar.io https://widgets.getsiteco
2024-04-24 12:33:14 UTC	52	IN	Data Raw: 32 65 0d 0a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 63 63 65 73 73 20 44 65 6e 69 65 64 2e 22 7d 0d 0a Data Ascii: 2e{"status_code":403,"message":"Access Denied."}
2024-04-24 12:33:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50171	18.154.207.24	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:14 UTC	396	OUT	GET /common-assets/v1/favicons/favicon-32x32.png HTTP/1.1 Host: d3dvn1tnyxabn5.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:14 UTC	454	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1562 Connection: close Date: Wed, 24 Apr 2024 12:33:14 GMT Last-Modified: Thu, 09 Apr 2020 10:25:27 GMT ETag: "98d9ad910c2b17df06fd37c2489c2c8d" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f75e35fb43ff0f12d193fc9d62977d34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: Ei4E6fFvoHquAH9EcLgvUO02ir_Dkho87ViOvUz_lD-oF6blQw_gtA== Age: 1
2024-04-24 12:33:14 UTC	1562	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 e0 50 4c 54 45 14 71 92 15 72 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 15 72 93 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 15 72 92 14 71 92 14 71 92 14 71 92 14 71 92 14 71 92 13 71 92 11 6f 91 12 70 91 16 73 93 1e 77 97 19 74 95 1a 75 95 4c 94 ad 88 ba ca a5 cd d8 bb da e3 ad d2 dc 52 98 b0 13 70 91 13 70 92 4c 95 ad a9 cf db e3 f4 f7 f6 ff ff f4 ff ff d0 e8 ed Data Ascii: PNGIHDR DgAMAasRGB cHRMz&u0`:pQ<PLTEqrqqqqqqqqqrqqqqqqqqrqqqqqqopswtuLRppL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50172	216.137.39.96	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:14 UTC	367	OUT	GET /locales/en.json HTTP/1.1 Host: d47l4duuvaadc.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:15 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 8916 Connection: close Date: Wed, 24 Apr 2024 12:33:15 GMT Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "877af45943959651d9bbbceb11fc4e9d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2d00df3f936d7626d50853ebd0e73b30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: _ga3oy9VS_b6K7O2WNpPA5r3CBZBsjuPpg8cFPvAJlFX3Xao_phEPA== Vary: Origin
2024-04-24 12:33:15 UTC	8916	IN	Data Raw: 7b 0a 20 20 20 20 22 61 75 74 68 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 6f 67 69 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 6b 5f 61 63 63 6f 75 6e 74 22 3a 20 22 44 6f 6e 27 74 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 3f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 74 74 6f 6e 5f 6c 6f 67 69 6e 22 3a 20 22 4c 6f 67 69 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 45 6d 61 69 6c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 74 65 72 22 3a 20 22 45 6e 74 65 72 20 77 69 74 68 20 79 6f 75 72 20 53 69 67 6e 61 74 75 72 69 74 20 61 63 63 6f 75 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 72 72 6f 72 5f 63 72 65 64 65 6e 74 69 61 6c 73 22 3a 20 22 57 72 6f 6e 67 20 75 Data Ascii: { "auth": { "login": { "ask_account": "Don't have an account?", "button_login": "Login", "email": "Email", "enter": "Enter with your Signaturit account", "error_credentials": "Wrong u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50173	18.164.174.89	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:14 UTC	597	OUT	GET /widget/embed/manifest.json?r=1713961993118 HTTP/1.1 Host: cdn.birdie.so Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:14 UTC	825	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 523 Connection: close Date: Wed, 24 Apr 2024 12:33:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 22 Apr 2024 21:15:58 GMT ETag: "5dbab1ba7ddfa643591063ef0825210e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b09fd261fc6f7c40f02dbc422032fc38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: 88EZ_EGlBciW-969V7EhZRoqWbQnjYCk3Vcc2u5Ht39LlN26-3F8Nw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-04-24 12:33:14 UTC	523	IN	Data Raw: 7b 0a 20 20 22 6d 61 69 6e 2e 63 73 73 22 3a 20 22 63 73 73 2f 6d 61 69 6e 32 2e 63 73 73 22 2c 0a 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 6d 61 69 6e 2e 33 63 35 62 33 36 63 62 61 30 63 36 34 63 65 33 65 64 39 34 2e 6a 73 22 2c 0a 20 20 22 77 6f 72 6b 65 72 2e 6a 73 22 3a 20 22 77 6f 72 6b 65 72 2e 63 66 31 38 35 39 65 66 63 32 31 30 65 32 64 63 63 33 36 63 2e 6a 73 22 2c 0a 20 20 22 72 65 6d 6f 74 65 2e 6a 73 22 3a 20 22 72 65 6d 6f 74 65 2e 61 31 37 33 63 30 64 66 39 37 66 65 33 36 65 33 39 37 31 66 2e 6a 73 22 2c 0a 20 20 22 38 38 33 2e 6a 73 22 3a 20 22 38 38 33 2e 61 33 38 31 37 66 31 33 31 39 33 36 37 39 35 39 31 30 35 30 2e 6a 73 22 2c 0a 20 20 22 72 65 6d 6f 74 65 6e 65 74 77 6f 72 6b 2e 6a 73 22 3a 20 22 72 65 6d 6f 74 65 6e 65 74 77 6f 72 6b Data Ascii: { "main.css": "css/main2.css", "main.js": "main.3c5b36cba0c64ce3ed94.js", "worker.js": "worker.cf1859efc210e2dcc36c.js", "remote.js": "remote.a173c0df97fe36e3971f.js", "883.js": "883.a3817f13193679591050.js", "remotenetwork.js": "remotenetwork

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50174	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:14 UTC	1778	OUT	GET /socket.io/?EIO=3&transport=websocket&sid=uxWQgoxnncAT64DmAA1T HTTP/1.1 Host: sockets.signaturit.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://sign-app.signaturit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=uxWQgoxnncAT64DmAA1T Sec-WebSocket-Key: DayjDMDQICmSG9H64BhQPg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:33:15 UTC	322	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:33:15 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sign-app.signaturit.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961ee41ef9a984-LAS
2024-04-24 12:33:15 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 12:33:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50175	104.18.4.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:14 UTC	1842	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG68L0&sid=uxWQgoxnncAT64DmAA1T HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sign-app.signaturit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sign-app.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=uxWQgoxnncAT64DmAA1T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50176	104.18.5.186	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:14 UTC	1598	OUT	GET /socket.io/?EIO=3&transport=polling&t=OyG688e HTTP/1.1 Host: sockets.signaturit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; io=uxWQgoxnncAT64DmAA1T
2024-04-24 12:33:15 UTC	317	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 104 Connection: close Access-Control-Allow-Origin: * Set-Cookie: io=OZ37Y9kCnW7gzEYIAA1f; Path=/; HttpOnly; SameSite=Strict CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87961ee4180c09f3-LAS
2024-04-24 12:33:15 UTC	104	IN	Data Raw: 39 37 3a 30 7b 22 73 69 64 22 3a 22 4f 5a 33 37 59 39 6b 43 6e 57 37 67 7a 45 59 49 41 41 31 66 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 7d 32 3a 34 30 Data Ascii: 97:0{"sid":"OZ37Y9kCnW7gzEYIAA1f","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000}2:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50179	18.164.174.89	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:15 UTC	1330	OUT	GET /widget/embed/main.3c5b36cba0c64ce3ed94.js?slug=r0l5nqfm&wk=worker.cf1859efc210e2dcc36c.js HTTP/1.1 Host: cdn.birdie.so Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
2024-04-24 12:33:15 UTC	737	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 61034 Connection: close Last-Modified: Mon, 22 Apr 2024 21:15:57 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Apr 2024 21:58:53 GMT ETag: "b37723d79525f3b5624a70d24f237028" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7f7457f2e97a4388e352d433568e7af8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: PTRAd5SUKZL4WiRv5Cl_Y879fd7zJuMKtyyCe8HOCOn9o99XhN5HtA== Age: 52463 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-24 12:33:15 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 33 63 35 62 33 36 63 62 61 30 63 36 34 63 65 33 65 64 39 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 36 37 32 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 36 37 29 2c 6f 3d 6e 28 32 39 36 29 2c 69 3d 6e 28 34 37 35 36 29 2c 61 3d 6e 2e 6e 28 69 29 3b 63 6f 6e 73 74 20 63 3d 28 7b 68 61 72 64 77 61 72 65 4f 6e 6c 79 3a 65 3d 21 31 2c 65 6e 61 62 6c 65 57 65 62 67 6c 3a 74 3d 21 31 2c 65 6e 61 62 6c 65 53 63 72 65 65 6e 3a 6e 3d 21 30 2c 64 65 62 75 67 3a 72 3d 21 31 2c 72 61 77 3a 6f 3d 21 31 7d 3d 7b 7d Data Ascii: /! For license information please see main.3c5b36cba0c64ce3ed94.js.LICENSE.txt /(()=>{var e,t,n={6728:(e,t,n)=>{"use strict";var r=n(467),o=n(296),i=n(4756),a=n.n(i);const c=({hardwareOnly:e=!1,enableWebgl:t=!1,enableScreen:n=!0,debug:r=!1,raw:o=!1}={}
2024-04-24 12:33:15 UTC	16384	IN	Data Raw: 29 29 2e 77 73 4c 69 76 65 5f 6d 65 73 73 61 67 65 5f 72 65 63 65 69 76 65 64 28 65 29 7d 29 29 7d 76 6f 69 64 20 30 21 3d 3d 46 26 26 46 2e 77 73 4c 69 76 65 5f 6d 65 73 73 61 67 65 5f 72 65 63 65 69 76 65 64 28 65 29 7d 65 6c 73 65 20 44 65 28 65 29 7d 28 74 2e 64 61 74 61 29 3a 22 70 69 6e 67 5f 6f 75 74 64 61 74 65 64 22 3d 3d 74 2e 61 63 74 69 6f 6e 49 64 26 26 28 31 3d 3d 70 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 77 65 62 73 6f 63 6b 65 74 5f 6d 69 72 72 6f 72 5f 70 69 6e 67 5f 6f 75 74 64 61 74 65 64 22 29 2c 47 65 28 7b 61 63 74 69 6f 6e 3a 22 64 69 73 63 6f 6e 6e 65 63 74 22 2c 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 3a 7a 65 7d 29 2c 65 65 26 26 43 65 28 7b 61 63 74 69 6f 6e 3a 22 63 6c 6f 73 65 5f 77 73 5f 6d 69 72 72 6f 72 22 7d 29 2c 31 Data Ascii: )).wsLive_message_received(e)}))}void 0!==F&&F.wsLive_message_received(e)}else De(e)}(t.data):"ping_outdated"==t.actionId&&(1==pe&&console.log("websocket_mirror_ping_outdated"),Ge({action:"disconnect",connectionId:ze}),ee&&Ce({action:"close_ws_mirror"}),1
2024-04-24 12:33:15 UTC	1514	IN	Data Raw: 3d 63 29 2c 4e 3d 22 49 45 22 3d 3d 44 3f 53 74 72 69 6e 67 28 4e 5b 31 5d 2e 74 6f 46 69 78 65 64 28 31 29 29 3a 4e 5b 30 5d 29 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 50 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 26 26 2f 5e 28 3f 3a 43 68 72 6f 6d 65 7c 46 69 72 65 66 6f 78 29 5c 62 2f 2e 74 65 73 74 28 44 29 26 26 28 52 2e 70 75 73 68 28 22 6d 61 73 6b 69 6e 67 20 61 73 20 22 2b 44 2b 22 20 22 2b 4e 29 2c 44 3d 22 49 45 22 2c 4e 3d 22 31 31 2e 30 22 2c 46 3d 5b 22 54 72 69 64 65 6e 74 22 5d 2c 48 3d 22 57 69 6e 64 6f 77 73 22 29 3b 65 6c 73 65 20 69 66 28 41 26 26 28 4c 3d 28 63 3d 41 2e 6c 61 6e 67 2e 53 79 73 74 65 6d 29 2e 67 65 74 50 72 6f 70 65 72 74 79 28 22 6f 73 2e 61 72 63 68 22 29 2c 48 3d 48 7c 7c 63 2e 67 65 74 50 72 6f 70 65 72 Data Ascii: =c),N="IE"==D?String(N[1].toFixed(1)):N[0]):"number"==typeof P.documentMode&&/^(?:Chrome\|Firefox)\b/.test(D)&&(R.push("masking as "+D+" "+N),D="IE",N="11.0",F=["Trident"],H="Windows");else if(A&&(L=(c=A.lang.System).getProperty("os.arch"),H=H\|\|c.getProper
2024-04-24 12:33:15 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 6e 2e 65 78 74 65 72 6e 61 6c 26 26 52 2e 75 6e 73 68 69 66 74 28 22 70 6c 61 74 66 6f 72 6d 20 70 72 65 76 69 65 77 22 29 7d 63 61 74 63 68 28 65 29 7b 52 2e 75 6e 73 68 69 66 74 28 22 65 6d 62 65 64 64 65 64 22 29 7d 65 6c 73 65 28 2f 5c 62 42 6c 61 63 6b 42 65 72 72 79 5c 62 2f 2e 74 65 73 74 28 57 29 7c 7c 2f 5c 62 42 42 31 30 5c 62 2f 2e 74 65 73 74 28 74 29 29 26 26 28 63 3d 28 52 65 67 45 78 70 28 57 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 2a 22 29 2b 22 2f 28 5b 2e 5c 5c 64 5d 2b 29 22 2c 22 69 22 29 2e 65 78 65 63 28 74 29 7c 7c 30 29 5b 31 5d 7c 7c 4e 29 3f 28 48 3d 28 28 63 3d 5b 63 2c 2f 42 42 31 30 2f 2e 74 65 73 74 28 74 29 5d 29 5b 31 5d 3f 28 57 3d 6e 75 6c 6c 2c 47 3d 22 42 6c 61 63 6b 42 65 72 72 79 22 29 Data Ascii: null===n.external&&R.unshift("platform preview")}catch(e){R.unshift("embedded")}else(/\bBlackBerry\b/.test(W)\|\|/\bBB10\b/.test(t))&&(c=(RegExp(W.replace(/ +/g," *")+"/([.\\d]+)","i").exec(t)\|\|0)[1]\|\|N)?(H=((c=[c,/BB10/.test(t)])[1]?(W=null,G="BlackBerry")
2024-04-24 12:33:15 UTC	10368	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 28 65 29 7d 29 29 3b 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 65 72 72 6f 72 7d 29 29 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 75 28 22 61 62 6f 72 74 22 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6f 5b 30 5d 7d 29 29 3b 76 61 72 20 69 3d 75 28 22 64 69 73 70 6f 73 65 22 29 3b 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 64 69 73 70 6f 73 65 26 26 65 2e 64 69 73 70 6f 73 65 28 29 7d 29 29 3b 76 61 72 20 61 2c 63 3d 75 28 22 61 70 70 6c 79 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ction(t){return t(e)}));t=void 0;var o=r.map((function(e){return e.error})).filter(Boolean);if(o.length>0)return u("abort").then((function(){throw o[0]}));var i=u("dispose");r.forEach((function(e){e.dispose&&e.dispose()}));var a,c=u("apply"),l=function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50178	13.227.74.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:15 UTC	1774	OUT	GET /698-23b1986463.js HTTP/1.1 Host: account.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.signaturit.com/en/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1936675652.1713961949; sg_last_impact=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22not-provided%22%2C%22utm_campaign%22%3A%22not-provided%22%2C%22utm_content%22%3A%22not-provided%22%2C%22utm_term%22%3A%22not-provided%22%2C%22utm_id%22%3A%22not-provided%22%2C%22ac_referral%22%3A%22not-provided%22%7D; _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _uetsid=b9eb9450023611ef9e29e364868a1b0a; _uetvid=b9ebb250023611ef81fb0ddf29048296; _ga=GA1.2.1954242962.1713961954; _gid=GA1.2.1531399362.1713961956; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; __hstc=77344330.b958b1819010205aeb2705c441237b34.1713961968191.1713961968191.1713961968191.1; hubspotutk=b958b1819010205aeb2705c441237b34; __hssrc=1; __hssc=77344330.1.1713961968192; _fbp=fb.1.1713961971010.1958424249; _gat=1; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d
2024-04-24 12:33:16 UTC	656	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1055 Connection: close Date: Wed, 24 Apr 2024 12:33:17 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "102a0047295d4136d69ffafffb75a524" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 c1caaceb6655a57ae014aef7bc8ec388.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: wBVjune4vvWHARt0BSMaIa9WDIpiIPCADAEBKYQDWF7tq3pzxuyQ_w==
2024-04-24 12:33:16 UTC	1055	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 61 75 74 68 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 61 75 74 68 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 38 5d 2c 7b 38 34 36 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 76 61 72 20 61 3d 6e 28 39 38 31 35 32 29 2c 72 3d 6e 28 36 36 34 38 39 29 2c 69 3d 6e 28 39 39 32 32 36 29 2c 6d 3d 6e 28 34 36 35 37 34 29 2c 70 3d 6e 28 36 36 37 32 30 29 2c 6f 3d 6e 28 36 37 32 39 34 29 2c 6c 3d 6e 28 38 39 32 35 30 29 2c 63 3d 6e 28 36 39 31 31 34 29 2c 75 3d 6e 28 36 39 39 38 35 29 2c 67 3d 7b 6d 61 72 67 69 6e 54 6f 70 3a 22 Data Ascii: (self.webpackChunkauth_app=self.webpackChunkauth_app\|\|[]).push([[698],{84698:function(e,t,n){n.r(t),n.d(t,{default:function(){return d}});var a=n(98152),r=n(66489),i=n(99226),m=n(46574),p=n(66720),o=n(67294),l=n(89250),c=n(69114),u=n(69985),g={marginTop:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50180	18.164.174.82	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:15 UTC	1101	OUT	GET /widget/embed/manifest.json?r=1713961993118 HTTP/1.1 Host: cdn.birdie.so Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
2024-04-24 12:33:15 UTC	695	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 523 Connection: close Date: Wed, 24 Apr 2024 12:33:16 GMT Last-Modified: Mon, 22 Apr 2024 21:15:58 GMT ETag: "5dbab1ba7ddfa643591063ef0825210e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b0f205dad5bc685f6d01b19929877a76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: Dv14S1YHeXlofqvMWB6knlWOStDtIplh_WY58vKNMSr_gfjkHtZctg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-24 12:33:15 UTC	523	IN	Data Raw: 7b 0a 20 20 22 6d 61 69 6e 2e 63 73 73 22 3a 20 22 63 73 73 2f 6d 61 69 6e 32 2e 63 73 73 22 2c 0a 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 6d 61 69 6e 2e 33 63 35 62 33 36 63 62 61 30 63 36 34 63 65 33 65 64 39 34 2e 6a 73 22 2c 0a 20 20 22 77 6f 72 6b 65 72 2e 6a 73 22 3a 20 22 77 6f 72 6b 65 72 2e 63 66 31 38 35 39 65 66 63 32 31 30 65 32 64 63 63 33 36 63 2e 6a 73 22 2c 0a 20 20 22 72 65 6d 6f 74 65 2e 6a 73 22 3a 20 22 72 65 6d 6f 74 65 2e 61 31 37 33 63 30 64 66 39 37 66 65 33 36 65 33 39 37 31 66 2e 6a 73 22 2c 0a 20 20 22 38 38 33 2e 6a 73 22 3a 20 22 38 38 33 2e 61 33 38 31 37 66 31 33 31 39 33 36 37 39 35 39 31 30 35 30 2e 6a 73 22 2c 0a 20 20 22 72 65 6d 6f 74 65 6e 65 74 77 6f 72 6b 2e 6a 73 22 3a 20 22 72 65 6d 6f 74 65 6e 65 74 77 6f 72 6b Data Ascii: { "main.css": "css/main2.css", "main.js": "main.3c5b36cba0c64ce3ed94.js", "worker.js": "worker.cf1859efc210e2dcc36c.js", "remote.js": "remote.a173c0df97fe36e3971f.js", "883.js": "883.a3817f13193679591050.js", "remotenetwork.js": "remotenetwork

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50184	18.164.174.89	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:16 UTC	1281	OUT	GET /widget/embed/css/main2.css HTTP/1.1 Host: cdn.birdie.so Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
2024-04-24 12:33:16 UTC	718	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 19525 Connection: close Last-Modified: Tue, 16 Apr 2024 09:21:48 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 12:33:17 GMT ETag: "49078ea17b8e7f8cb786dd0fafaa2b81" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 751fc053858a7dcbf0836b1907c888d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: 9ZZ65v5aoY6ukpWd9nZxT5wz3rfUtD8h4y2xYFymEBsFOOa4A5ytBA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-24 12:33:16 UTC	15666	IN	Data Raw: 2e 62 69 72 64 69 65 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 6e 6f 6e 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 62 69 72 64 69 65 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 61 75 74 6f 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 62 69 72 64 69 65 2d 66 69 78 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 62 69 72 64 69 65 2d 61 62 73 6f 6c 75 74 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 62 69 72 64 69 65 2d 72 65 6c 61 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 62 69 72 64 69 65 2d 74 6f 70 2d 33 7b 74 6f 70 3a 30 2e 37 35 72 65 6d 7d 2e 62 69 72 64 69 65 2d 6c 65 66 74 2d 36 7b 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 2e 62 69 72 64 69 65 Data Ascii: .birdie-pointer-events-none{pointer-events:none}.birdie-pointer-events-auto{pointer-events:auto}.birdie-fixed{position:fixed}.birdie-absolute{position:absolute}.birdie-relative{position:relative}.birdie-top-3{top:0.75rem}.birdie-left-6{left:1.5rem}.birdie
2024-04-24 12:33:16 UTC	3859	IN	Data Raw: 2f 52 44 51 2b 38 38 4d 47 50 41 49 49 49 49 59 77 49 6f 6f 67 68 6a 67 53 53 53 43 47 4e 6a 45 79 57 36 67 46 47 72 43 67 4b 67 33 44 36 54 32 33 62 6a 46 6e 62 74 6d 33 62 74 6d 33 62 74 6d 33 62 4e 74 66 32 62 6e 56 50 58 6d 7a 50 4e 30 6f 6b 6c 45 54 4a 6c 45 4b 70 6c 4d 62 57 6c 55 6c 5a 6c 45 30 35 76 46 6b 56 55 43 45 56 55 54 45 33 4a 4c 63 6a 74 79 4b 56 55 43 6d 56 55 54 6c 56 55 43 56 56 55 54 58 56 55 43 33 56 55 54 31 76 4b 73 33 55 51 71 33 55 52 75 33 55 51 5a 33 55 78 61 62 52 53 33 33 55 54 77 4d 30 53 45 4d 30 54 43 4d 30 53 6d 4d 30 54 68 4d 30 79 54 59 77 51 37 4d 30 78 39 42 66 70 43 56 61 5a 74 43 76 30 54 70 74 63 4c 52 72 6d 33 5a 6f 6c 34 50 63 41 44 2b 69 59 7a 71 68 55 7a 70 6a 53 44 75 67 72 7a 6d 57 44 65 51 48 65 71 51 6e 65 Data Ascii: /RDQ+88MGPAIIIIYwIooghjgSSSCGNjEyW6gFGrCgKg3D6T23bjFnbtm3btm3btm3bNtf2bnVPXmzPN0oklETJlEKplMbWlUlZlE05vFkVUCEVUTE3JLcjtyKVUCmVUTlVUCVVUTXVUC3VUT1vKs3UQq3URu3UQZ3UxabRS33UTwM0SEM0TCM0SmM0ThM0yTYwQ7M0x9BfpCVaZtCv0TptcLRrm3Zol4PcAD+iYzqhUzpjSDugrzmWDeQHeqQne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50185	18.164.174.89	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:16 UTC	598	OUT	GET /widget/embed/worker.cf1859efc210e2dcc36c.js HTTP/1.1 Host: cdn.birdie.so Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:16 UTC	779	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 32053 Connection: close Date: Wed, 24 Apr 2024 12:33:17 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Mon, 22 Apr 2024 21:16:01 GMT ETag: "8ec89c9e9f79ebd0ff7febb0bbd251ae" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 bba30123f54a6d1251a0db5da01006dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: luCNHgokwTOVLDD8Nf8PH0CLtOLZKiVuyhhx7h7pdzLJbLvqKflUsw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-04-24 12:33:16 UTC	7928	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 35 30 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 38 30 31 35 29 7d 2c 35 35 39 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 39 35 31 36 29 2c 6f 3d 72 28 37 35 32 32 29 2c 69 3d 72 28 33 39 34 38 29 2c 73 3d 72 28 39 31 30 36 29 2c 61 3d 72 28 39 36 31 35 29 2c 63 3d 72 28 32 30 31 32 29 2c 75 3d 72 28 34 32 30 32 29 2c 64 3d 72 28 37 37 36 33 29 2c 66 3d 72 28 36 39 38 37 29 2c 6c 3d 72 28 31 39 32 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 70 2c 68 3d 65 2e 64 61 74 61 2c 6d Data Ascii: (()=>{var e,t,r={2505:(e,t,r)=>{e.exports=r(8015)},5592:(e,t,r)=>{"use strict";var n=r(9516),o=r(7522),i=r(3948),s=r(9106),a=r(9615),c=r(2012),u=r(4202),d=r(7763),f=r(6987),l=r(1928);e.exports=function(e){return new Promise((function(t,r){var p,h=e.data,m
2024-04-24 12:33:16 UTC	4924	IN	Data Raw: 72 65 74 75 72 6e 20 72 20 69 6e 20 74 3f 6f 28 65 5b 72 5d 2c 74 5b 72 5d 29 3a 72 20 69 6e 20 65 3f 6f 28 76 6f 69 64 20 30 2c 65 5b 72 5d 29 3a 76 6f 69 64 20 30 7d 76 61 72 20 75 3d 7b 75 72 6c 3a 73 2c 6d 65 74 68 6f 64 3a 73 2c 64 61 74 61 3a 73 2c 62 61 73 65 55 52 4c 3a 61 2c 74 72 61 6e 73 66 6f 72 6d 52 65 71 75 65 73 74 3a 61 2c 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 3a 61 2c 70 61 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 3a 61 2c 74 69 6d 65 6f 75 74 3a 61 2c 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 3a 61 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 61 2c 61 64 61 70 74 65 72 3a 61 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 61 2c 78 73 72 66 43 6f 6f 6b 69 65 4e 61 6d 65 3a 61 2c 78 73 72 66 48 65 61 64 65 72 4e 61 6d 65 3a Data Ascii: return r in t?o(e[r],t[r]):r in e?o(void 0,e[r]):void 0}var u={url:s,method:s,data:s,baseURL:a,transformRequest:a,transformResponse:a,paramsSerializer:a,timeout:a,timeoutMessage:a,withCredentials:a,adapter:a,responseType:a,xsrfCookieName:a,xsrfHeaderName:
2024-04-24 12:33:16 UTC	1428	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 7d 2c 37 30 31 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 39 35 31 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 66 6f 72 45 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 6e 21 3d 3d 74 26 26 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 26 26 28 65 5b 74 5d 3d 72 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 29 7d 29 29 7d 7d 2c 32 30 31 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 39 35 31 36 29 2c 6f 3d 5b 22 61 67 65 22 2c 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 Data Ascii: ction(){return!0}},7018:(e,t,r)=>{"use strict";var n=r(9516);e.exports=function(e,t){n.forEach(e,(function(r,n){n!==t&&n.toUpperCase()===t.toUpperCase()&&(e[t]=r,delete e[n])}))}},2012:(e,t,r)=>{"use strict";var n=r(9516),o=["age","authorization","content
2024-04-24 12:33:16 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 66 6f 72 28 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 20 3e 30 3b 29 7b 76 61 72 20 69 3d 6e 5b 6f 5d 2c 73 3d 74 5b 69 5d 3b 69 66 28 73 29 7b 76 61 72 20 61 3d 65 5b 69 5d 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 73 28 61 2c 69 2c 65 29 3b 69 66 28 21 30 21 3d 3d 63 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 20 22 2b 69 2b 22 20 6d 75 73 74 20 62 65 20 22 2b 63 29 7d 65 6c 73 65 20 69 66 28 21 30 21 3d 3d 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 6f 70 Data Ascii: ypeof e)throw new TypeError("options must be an object");for(var n=Object.keys(e),o=n.length;o-- >0;){var i=n[o],s=t[i];if(s){var a=e[i],c=void 0===a\|\|s(a,i,e);if(!0!==c)throw new TypeError("option "+i+" must be "+c)}else if(!0!==r)throw Error("Unknown op
2024-04-24 12:33:16 UTC	1389	IN	Data Raw: 65 72 72 6f 72 2d 68 61 6e 64 6c 65 72 2d 65 72 72 6f 72 65 64 22 2c 6d 6f 64 75 6c 65 49 64 3a 73 2c 64 65 70 65 6e 64 65 6e 63 79 49 64 3a 70 5b 79 5d 2c 65 72 72 6f 72 3a 6e 2c 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3a 72 7d 29 2c 65 2e 69 67 6e 6f 72 65 45 72 72 6f 72 65 64 7c 7c 28 74 28 6e 29 2c 74 28 72 29 29 7d 65 6c 73 65 20 65 2e 6f 6e 45 72 72 6f 72 65 64 26 26 65 2e 6f 6e 45 72 72 6f 72 65 64 28 7b 74 79 70 65 3a 22 61 63 63 65 70 74 2d 65 72 72 6f 72 65 64 22 2c 6d 6f 64 75 6c 65 49 64 3a 73 2c 64 65 70 65 6e 64 65 6e 63 79 49 64 3a 70 5b 79 5d 2c 65 72 72 6f 72 3a 72 7d 29 2c 65 2e 69 67 6e 6f 72 65 45 72 72 6f 72 65 64 7c 7c 74 28 72 29 7d 7d 7d 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 45 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 Data Ascii: error-handler-errored",moduleId:s,dependencyId:p[y],error:n,originalError:r}),e.ignoreErrored\|\|(t(n),t(r))}else e.onErrored&&e.onErrored({type:"accept-errored",moduleId:s,dependencyId:p[y],error:r}),e.ignoreErrored\|\|t(r)}}}for(var b=0;b<E.length;b++){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50188	13.227.74.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:16 UTC	1302	OUT	GET /636-558c93c544.js HTTP/1.1 Host: account.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.signaturit.com/en/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; CookieConsent={stamp:%27um5jqEOEusZkBw+K6wAfeekEV2fzAbuQ5MW1MEl3HsHPjovZN15Ykg==%27%2Cnecessary:true%2Cpreferences:false%2Cstatistics:false%2Cmarketing:false%2Cmethod:%27explicit%27%2Cver:1%2Cutc:1713961995814%2Cregion:%27us-32%27}
2024-04-24 12:33:17 UTC	657	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13407 Connection: close Date: Wed, 24 Apr 2024 12:33:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "ae67b09c4c952beac81b0255a26b2fc5" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8a7696c9764ab79132ce2754e8e20bec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: JPg8LEYhY0rHzOS_PG4oL8_UAM300XavBwT8cilXq6VWANOQYzJu9Q==
2024-04-24 12:33:17 UTC	13407	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 61 75 74 68 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 61 75 74 68 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 36 2c 34 38 30 5d 2c 7b 33 39 39 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 7d 29 3b 76 61 72 20 6e 3d 61 28 38 37 34 36 32 29 2c 6f 3d 61 28 34 39 34 32 29 2c 72 3d 61 28 39 38 31 35 32 29 2c 69 3d 28 61 28 36 36 39 39 32 29 2c 61 28 34 31 35 33 39 29 2c 61 28 33 33 39 34 38 29 2c 61 28 33 37 32 36 38 29 2c 61 28 36 36 34 38 39 29 29 2c 6c 3d 61 28 32 33 39 37 32 29 2c 63 3d 61 28 37 33 38 39 31 29 2c 73 3d 61 28 31 34 32 39 30 29 2c 75 3d 61 28 34 31 30 35 Data Ascii: (self.webpackChunkauth_app=self.webpackChunkauth_app\|\|[]).push([[636,480],{39917:function(e,t,a){a.d(t,{Z:function(){return Z}});var n=a(87462),o=a(4942),r=a(98152),i=(a(66992),a(41539),a(33948),a(37268),a(66489)),l=a(23972),c=a(73891),s=a(14290),u=a(4105

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50190	18.164.174.82	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:17 UTC	1102	OUT	GET /widget/embed/worker.cf1859efc210e2dcc36c.js HTTP/1.1 Host: cdn.birdie.so Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D
2024-04-24 12:33:17 UTC	786	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 32053 Connection: close Date: Wed, 24 Apr 2024 12:33:17 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Mon, 22 Apr 2024 21:16:01 GMT ETag: "8ec89c9e9f79ebd0ff7febb0bbd251ae" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 510cbc3ed47e5ac404ea7e8b15d44868.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: fO7xxpCD26OrstbcPIElixi05isuujMKf8rkc5fGNwH2RkurScTeWw== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-04-24 12:33:17 UTC	15598	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 35 30 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 38 30 31 35 29 7d 2c 35 35 39 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 39 35 31 36 29 2c 6f 3d 72 28 37 35 32 32 29 2c 69 3d 72 28 33 39 34 38 29 2c 73 3d 72 28 39 31 30 36 29 2c 61 3d 72 28 39 36 31 35 29 2c 63 3d 72 28 32 30 31 32 29 2c 75 3d 72 28 34 32 30 32 29 2c 64 3d 72 28 37 37 36 33 29 2c 66 3d 72 28 36 39 38 37 29 2c 6c 3d 72 28 31 39 32 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 70 2c 68 3d 65 2e 64 61 74 61 2c 6d Data Ascii: (()=>{var e,t,r={2505:(e,t,r)=>{e.exports=r(8015)},5592:(e,t,r)=>{"use strict";var n=r(9516),o=r(7522),i=r(3948),s=r(9106),a=r(9615),c=r(2012),u=r(4202),d=r(7763),f=r(6987),l=r(1928);e.exports=function(e){return new Promise((function(t,r){var p,h=e.data,m
2024-04-24 12:33:17 UTC	16384	IN	Data Raw: 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7d 2c 69 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 69 73 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 69 73 4f 62 6a 65 63 74 3a 61 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 63 2c 69 73 55 6e 64 65 66 69 6e 65 64 3a 73 2c 69 73 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3d 3d 3d 6f 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 46 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 69 6c 65 5d 22 Data Ascii: r instanceof ArrayBuffer},isString:function(e){return"string"==typeof e},isNumber:function(e){return"number"==typeof e},isObject:a,isPlainObject:c,isUndefined:s,isDate:function(e){return"[object Date]"===o.call(e)},isFile:function(e){return"[object File]"
2024-04-24 12:33:17 UTC	71	IN	Data Raw: 68 20 75 70 64 61 74 65 20 6d 61 6e 69 66 65 73 74 20 22 2b 65 2e 73 74 61 74 75 73 54 65 78 74 29 3b 72 65 74 75 72 6e 20 65 2e 6a 73 6f 6e 28 29 7d 7d 29 29 7d 7d 29 28 29 2c 6f 28 37 38 38 33 29 7d 29 28 29 3b Data Ascii: h update manifest "+e.statusText);return e.json()}}))}})(),o(7883)})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50191	3.141.154.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:17 UTC	499	OUT	OPTIONS /wsauth/r0l5nqfm HTTP/1.1 Host: app.birdie.so Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: cache-control,content-type Origin: https://account.signaturit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:17 UTC	1055	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 12:33:17 GMT Content-Type: text/html; charset=UTF-8 Connection: close Set-Cookie: AWSALB=UGHT47nqSbrjaNZgL7sHOTRJNIE0dywIY/yxMJKjxXv/BP5rOGscN7r8BxiPdr5+/5I9Fc0ImzTHACMVD1LFIw0TTwpFB8Zhp4W0DhAtmQX5asHvhcgLcE8AFN43; Expires=Wed, 01 May 2024 12:33:17 GMT; Path=/ Set-Cookie: AWSALBCORS=UGHT47nqSbrjaNZgL7sHOTRJNIE0dywIY/yxMJKjxXv/BP5rOGscN7r8BxiPdr5+/5I9Fc0ImzTHACMVD1LFIw0TTwpFB8Zhp4W0DhAtmQX5asHvhcgLcE8AFN43; Expires=Wed, 01 May 2024 12:33:17 GMT; Path=/; SameSite=None; Secure Server: nginx Cache-Control: no-cache, private Access-Control-Allow-Origin: https://account.signaturit.com Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Headers: cache-control,content-type Access-Control-Max-Age: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50194	13.227.74.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:17 UTC	1299	OUT	GET /b009a76ad6.woff2 HTTP/1.1 Host: account.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://account.signaturit.com/en/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; CookieConsent={stamp:%27um5jqEOEusZkBw+K6wAfeekEV2fzAbuQ5MW1MEl3HsHPjovZN15Ykg==%27%2Cnecessary:true%2Cpreferences:false%2Cstatistics:false%2Cmarketing:false%2Cmethod:%27explicit%27%2Cver:1%2Cutc:1713961995814%2Cregion:%27us-32%27}
2024-04-24 12:33:18 UTC	638	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 15744 Connection: close Date: Wed, 24 Apr 2024 12:33:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "15d9f621c3bd1599f0169dcf0bd5e63e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 1343d20bdb50193b4d08099f66c57450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: 3-KdG4jhCcxOugJQPjfw3DVcOVnXQWYGyO9qKhCjrqrSDkZB0Ijc8g==
2024-04-24 12:33:18 UTC	15744	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3d 80 00 12 00 00 00 00 8e 74 00 00 3d 1a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 64 1c 85 5e 06 60 00 83 20 08 54 09 83 3c 11 0c 0a 81 dc 7c 81 c4 7b 0b 84 0a 00 12 82 10 01 36 02 24 03 88 10 04 20 05 82 74 07 20 0c 82 49 1b 33 7f 25 ec d8 8b 02 ba 03 38 a1 a9 26 aa 91 08 fb 34 5a e5 7c 74 20 f6 38 90 b8 ee 17 fc ff e7 04 cd 44 06 b9 f9 24 ad 75 4e 45 85 50 84 45 9d 41 6b 14 db eb 3d ca 78 0e 39 58 7a f5 60 03 49 f1 a6 9c eb 52 ad 94 c1 fa 23 46 2b 42 60 ad bb 7d da 52 50 7c 45 fd d0 c2 5a 5c 7f 57 5b bc 1a eb fa 9f e0 8f 05 e0 a2 ff d1 ed 08 43 94 88 12 51 42 81 03 e8 99 18 6d bf a3 ec 63 6d bb 3f a3 46 f4 84 67 f4 b4 d0 0e da d8 e8 51 8a 95 ba ab 33 c0 9d 1c d1 88 93 87 70 ed 1f Data Ascii: wOF2=t=dd^` T<\|{6$ t I3%8&4Z\|t 8D$uNEPEAk=x9Xz`IR#F+B`}RP\|EZ\W[CQBmcm?FgQ3p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50193	13.227.74.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:17 UTC	1299	OUT	GET /f25d774ecf.woff2 HTTP/1.1 Host: account.signaturit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.signaturit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://account.signaturit.com/en/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_ZB2TFCHC3F=GS1.1.1713961953.1.0.1713961953.60.0.0; _dc_gtm_UA-61329482-1=1; _hjSessionUser_2155700=eyJpZCI6IjExZTRkZmNkLTJlM2QtNWE1NC04YjVmLWM3MjdjMTViYTkyNiIsImNyZWF0ZWQiOjE3MTM5NjE5NTkzNjgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2155700=eyJpZCI6IjQ1Yzk0Yjc0LTJmMjQtNDFmYS05MDc1LTRiYWM0OTZjYjY1ZiIsImMiOjE3MTM5NjE5NTkzNzEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_DRF0TD3RFY=GS1.2.1713961982.1.0.1713961982.0.0.0; __zlcmid=1LRmfWciCE8TB2d; CookieConsent={stamp:%27um5jqEOEusZkBw+K6wAfeekEV2fzAbuQ5MW1MEl3HsHPjovZN15Ykg==%27%2Cnecessary:true%2Cpreferences:false%2Cstatistics:false%2Cmarketing:false%2Cmethod:%27explicit%27%2Cver:1%2Cutc:1713961995814%2Cregion:%27us-32%27}
2024-04-24 12:33:18 UTC	638	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 15920 Connection: close Date: Wed, 24 Apr 2024 12:33:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 06:27:50 GMT ETag: "3a44e06eb954b96aa043227f3534189d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 c2354f8128e4d7b61eb5ba62ca8e4aea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: BQLXgh9-J6k8aO7QCDmGRZfCXUBPofqnSvpK6iB5_KhsbvMQKUZkFQ==
2024-04-24 12:33:18 UTC	15746	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3e 30 00 12 00 00 00 00 8f 54 00 00 3d cb 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 9a 1e 1c 85 5e 06 60 00 83 20 08 5c 09 83 3c 11 0c 0a 81 de 04 81 c6 11 0b 84 0a 00 12 82 10 01 36 02 24 03 88 10 04 20 05 83 00 07 20 0c 82 53 1b 21 80 25 63 dc 0d 0f ce 03 00 a9 7c 79 b4 d9 81 16 36 8e 00 3b e0 73 23 03 c1 c6 01 a0 78 5f 3c f8 ff 6f c9 0d 11 05 fb 01 1a d3 1e aa 6c b8 10 c5 4a cf 60 70 bc 6d cc 84 c2 36 fa b8 b1 68 f8 9c c2 1a 55 d7 70 44 c6 1c 0a 52 8d 4a d9 24 f2 04 a1 57 86 ea 60 37 77 06 d3 10 5b c5 07 71 44 9f aa a0 c9 3c 50 e9 e7 fb ab 1a 8e 4a a9 78 df 2b 4a 2d 5e 15 92 ff e6 76 61 e8 b1 f4 03 3a c6 4b 57 e8 ef 50 68 82 0f fe 87 22 da e0 8e 16 7b 1b 57 34 43 ae fc f4 0c 70 87 15 Data Ascii: wOF2>0T=d^` \<6$ S!%c\|y6;s#x_<olJ`pm6hUpDRJ$W`7w[qD<PJx+J-^va:KWPh"{W4Cp
2024-04-24 12:33:18 UTC	174	IN	Data Raw: 55 12 66 9b 07 c0 4d b4 e4 04 59 23 88 52 00 52 41 82 9f 9d 31 00 e5 6f ab 2b cb 53 4b 85 55 d1 08 a0 76 37 c3 48 72 05 d0 64 06 58 61 84 03 68 63 fd 2c d4 04 5b e8 ca 62 3d 10 40 1f e3 63 ae c6 17 c0 20 23 c2 cb 4a 3f 16 a3 81 ba 34 3f f3 74 60 10 cd 48 25 4d 06 df 01 16 3f 98 c6 0a 5d 1d 24 5f 41 36 7e c2 60 5a 54 97 97 a8 37 b8 54 24 ef 27 0c 5a 73 91 5c 09 77 8b fb 87 f8 fd c4 41 5d ce 9b 4b 8d 5e 10 d8 d7 22 21 8d 41 a0 47 40 fc 55 84 41 ef c4 95 70 2b dc 3f aa 5b ef 91 17 a2 91 70 cb 4b 89 5a 95 14 74 15 00 00 Data Ascii: UfMY#RRA1o+SKUv7HrdXahc,[b=@c #J?4?t`H%M?]$_A6~`ZT7T$'Zs\wA]K^"!AG@UAp+?[pKZt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50198	13.225.141.96	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:18 UTC	608	OUT	GET /new._.blue.svg HTTP/1.1 Host: diysyudrbtisp.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.signaturit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:18 UTC	511	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9545 Connection: close Date: Wed, 24 Apr 2024 12:33:19 GMT Last-Modified: Wed, 01 Mar 2023 11:57:06 GMT ETag: "ee0b0664d065babeb90ddfc92fb1c0a0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a18ab1a2e56cae6e1bbaf5b1ee56db86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX3-C4 X-Amz-Cf-Id: -3HHrupbGM6Q9tEbot-EyFLrYaQ_bmByXXeg7lfwWcsOpQ43RaW6_w==
2024-04-24 12:33:18 UTC	9545	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 35 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 35 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 33 30 34 37 5f 38 30 39 33 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 32 2e 36 38 31 20 33 34 2e 39 34 33 32 43 31 33 32 2e 36 36 31 20 33 34 2e 38 38 30 37 20 31 33 32 2e 36 36 31 20 33 34 2e 39 32 32 33 20 31 33 32 2e 36 38 31 20 33 34 2e 39 34 33 32 56 33 34 2e 39 34 33 32 5a 22 20 66 69 6c 6c 3d 22 23 30 46 33 45 34 44 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 31 36 38 20 32 Data Ascii: <svg width="145" height="48" viewBox="0 0 145 48" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_3047_8093)"><path d="M132.681 34.9432C132.661 34.8807 132.661 34.9223 132.681 34.9432V34.9432Z" fill="#0F3E4D"/><path d="M17.168 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50197	3.141.154.91	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:18 UTC	490	OUT	POST /wsauth/r0l5nqfm HTTP/1.1 Host: app.birdie.so Connection: keep-alive Content-Length: 665 Accept: application/json cache-control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: https://account.signaturit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:18 UTC	665	OUT	Data Raw: 7b 22 66 69 6e 67 65 72 70 72 69 6e 74 22 3a 32 38 31 34 30 36 35 39 33 38 2c 22 62 72 6f 77 73 65 72 5f 64 61 74 61 22 3a 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 68 72 6f 6d 65 20 31 31 37 2e 30 2e 30 2e 30 20 6f 6e 20 57 69 6e 64 6f 77 73 20 31 30 20 36 34 2d 62 69 74 22 2c 22 6e 61 6d 65 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 6f 73 22 3a 7b 22 66 61 6d 69 6c 79 22 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 22 2c 22 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 22 3a 2d 31 32 30 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 61 62 54 69 74 6c 65 22 3a 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 22 2c 22 68 61 73 5f 66 6f 63 Data Ascii: {"fingerprint":2814065938,"browser_data":{"description":"Chrome 117.0.0.0 on Windows 10 64-bit","name":"","mobile":false,"os":{"family":"Windows"},"timezone":"Europe/Zurich","timezoneOffset":-120,"language":"en-US","tabTitle":"Authentication app","has_foc
2024-04-24 12:33:18 UTC	1809	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:33:18 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=cQm4fJAJo7/8yLmms2GAWbZBNsvJ2qWRuIAUamNqT3wv76D6F7s89m7tHQx4YRzboHzF2a9QMcm72swppbxiD6Nz2Ni+pFzRMlhEwFjCne4eP/67TzFJnCWoXiJG; Expires=Wed, 01 May 2024 12:33:18 GMT; Path=/ Set-Cookie: AWSALBCORS=cQm4fJAJo7/8yLmms2GAWbZBNsvJ2qWRuIAUamNqT3wv76D6F7s89m7tHQx4YRzboHzF2a9QMcm72swppbxiD6Nz2Ni+pFzRMlhEwFjCne4eP/67TzFJnCWoXiJG; Expires=Wed, 01 May 2024 12:33:18 GMT; Path=/; SameSite=None; Secure Server: nginx Cache-Control: no-cache, private Access-Control-Allow-Origin: https://account.signaturit.com Vary: Origin Access-Control-Allow-Credentials: true Set-Cookie: XSRF-TOKEN=eyJpdiI6ImJQaXZ1dDhXVE96SkJKQVlsbkxxOFE9PSIsInZhbHVlIjoiQzh1MkxReDBHeE82SWlpQ3dXdWN4bUFXWlFmZ2xvcjJSLzlTRnpVcytUMDBkNnNwaFpKTlRkcWMxS2ZaK0FDK1lraUw3VG1ITFZRcUxWc2ppaFRmREZSN1NzekJzME5yMXljZEVxY0llSUpVNGd0b3VyaGVnY1R3NTMrSHJ5UE8iLCJtYWMiOiIzNzM4YmFiZGM3YzcwYjE2NTQxODIyMmM3OWFjZWIwNGUzZTY5NzNjOGEwMmRhMGFmMDdmMWVjNGU5MTZiYWY3IiwidGFnIjoiIn0%3D; expires=Sat, 18 May 2024 12:33:18 GMT; Max-Age=2073600; path=/; domain=.birdie.so; secure; samesite=none Set-Cookie: birdie_session=eyJpdiI6Ik9tUXloeDJNVTFrK29UZE4xNDZvelE9PSIsInZhbHVlIjoiY25RY21wRy9Jc2FTbEdmZFM5OWRoQklkOXgvdThncVQyaVhmYlB3ZU44OTJLZFpYakFVSXJpMnhTTjdsaGZVOU50NCttQnZPZjhtVzR0c3Awc1JCdDJwT3pITDBhaDErdHp6Ris5MUp4cmgwd09MM2FnSGREWWhZUHhnT0RPbzIiLCJtYWMiOiJkNWQwMzkyZDRiMDBkODhlN2FlM2YzMjdmZmI2MDI5MDZmMTNlYTBmNzhlMzk5MWY5NmJkMzRmOTI3MDlmYmMwIiwidGFnIjoiIn0%3D; expires=Sat, 18 May 2024 12:33:18 GMT; Max-Age=2073600; path=/; domain=.birdie.so; secure; httponly; samesite=none Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-24 12:33:18 UTC	347	IN	Data Raw: 31 35 34 0d 0a 7b 22 72 31 22 3a 37 36 38 2c 22 72 32 22 3a 22 61 35 62 36 65 39 37 63 30 63 66 35 61 65 30 38 64 36 62 33 34 37 64 61 61 32 66 39 36 38 30 30 31 38 33 62 61 66 34 31 35 37 30 31 61 65 30 30 37 30 66 62 61 39 30 64 30 34 33 31 39 36 30 32 61 37 30 33 37 36 66 32 65 66 64 39 36 64 33 66 33 65 63 65 64 32 39 32 38 61 33 61 30 34 30 38 61 39 34 34 61 61 32 65 35 65 38 35 31 32 35 62 37 38 32 33 62 31 34 37 36 36 38 37 35 62 39 35 22 2c 22 72 33 22 3a 22 53 69 67 6e 61 74 75 72 69 74 22 2c 22 62 65 22 3a 66 61 6c 73 65 2c 22 63 65 22 3a 74 72 75 65 2c 22 64 65 22 3a 66 61 6c 73 65 2c 22 73 74 77 73 22 3a 66 61 6c 73 65 2c 22 68 62 62 22 3a 66 61 6c 73 65 2c 22 64 65 62 75 67 22 3a 66 61 6c 73 65 2c 22 74 7a 22 3a 22 41 6d 65 72 69 63 61 5c 2f Data Ascii: 154{"r1":768,"r2":"a5b6e97c0cf5ae08d6b347daa2f96800183baf415701ae0070fba90d04319602a70376f2efd96d3f3eced2928a3a0408a944aa2e5e85125b7823b14766875b95","r3":"Signaturit","be":false,"ce":true,"de":false,"stws":false,"hbb":false,"debug":false,"tz":"America\/
2024-04-24 12:33:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50200	3.140.57.243	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:19 UTC	1223	OUT	GET / HTTP/1.1 Host: sockp.birdie.so Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://account.signaturit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: aAG1BSTZBkILCr8iB7xe+Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:33:19 UTC	104	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 12:33:19 GMT Content-Length: 26 Connection: close
2024-04-24 12:33:19 UTC	26	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 42 61 64 20 52 65 71 75 65 73 74 22 7d Data Ascii: {"message": "Bad Request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50201	18.189.125.189	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:19 UTC	1211	OUT	GET /wsauth/r0l5nqfm HTTP/1.1 Host: app.birdie.so Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlloUi8ySTdST3pyRisxRzFWOVdRanc9PSIsInZhbHVlIjoiY0RpdE9rM1JVaU9pZW5neWVvYlVGTk1FTEpYbi81aXNFQXNCZHFnL1htZ2RkMkRzeWptb2VadVlwMUtMUTJCaXo5dWozdytVWlVRZVF4bFBVTzRRb0FQejhHUnVvYXhkeDA1RDFPZEpSZFJMQWxmRzhicUt3WG5BakZvRHlKb1kiLCJtYWMiOiIyMGMyYmM5YzhjNjA4NTFjYzRjODkwYmJhYmQ4MGI2ZjllOWMxZjE4MmJjYzU5OTNmMWZiZmExMTk4MTEyZjE1IiwidGFnIjoiIn0%3D; birdie_session=eyJpdiI6ImYycUxoZHhpSTRlZXptU2MyeGR6a3c9PSIsInZhbHVlIjoiSmR6RUlEeFBtVERoVkZQVXI3Ujh4ZERBclZqOHhONVpQWlNVMy9lK1ZXT0NINzZyeGZMcFVsVzNnaHRDNW9VNlBGYzJhOVF4Z0h2TjQzSW5Pd01lYmhCMWZKRW1oZ0pQZ0tKcmtLN1BRTlJBcjFDcGwxYnhsbWREdVczdWRWbEoiLCJtYWMiOiI4MjliOTVmMTg5NDdiNzliZTQyZGNlMzBhNGEwY2VlOTE0MjVlYmExZGYxZmNlNjQyYjI2YzM2MzkwNWFiYWFmIiwidGFnIjoiIn0%3D; AWSALBCORS=ogZFtsDUNbiI827XxWlIpq+UyxrukV66GMHTouzrWVeag2WV3Ro7ycumlyxO3YpaCd+EVfowPuZSSaEtHyiulHkUJupW1xWDEiolYdjxICwqxhnSupZ/abfY9TwE
2024-04-24 12:33:19 UTC	719	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 24 Apr 2024 12:33:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=bZPek64zMjpbeRdaWnmyzOgmqCm1adHlj3yVxkLULRlxt2JJayv3Mlvws3GwSkJxZFq+yv5OQ0ZznY0E3uBA44ZhQTbT3zCZKWKCbH7wCewntat8gr1yB254aZqJ; Expires=Wed, 01 May 2024 12:33:19 GMT; Path=/ Set-Cookie: AWSALBCORS=bZPek64zMjpbeRdaWnmyzOgmqCm1adHlj3yVxkLULRlxt2JJayv3Mlvws3GwSkJxZFq+yv5OQ0ZznY0E3uBA44ZhQTbT3zCZKWKCbH7wCewntat8gr1yB254aZqJ; Expires=Wed, 01 May 2024 12:33:19 GMT; Path=/; SameSite=None; Secure Server: nginx allow: POST Cache-Control: no-cache, private Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 12:33:19 UTC	1016	IN	Data Raw: 33 66 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 2c 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6e 20 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 3c 73 76 67 20 78 6d 6c 6e 73 3d 25 32 32 Data Ascii: 3f1<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="robots" content="noindex,nofollow,noarchive" /> <title>An Error Occurred: Method Not Allowed</title> <link rel="icon" href="data:image/svg+xml,<svg xmlns=%22
2024-04-24 12:33:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50202	13.225.141.4	443	2316	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:33:19 UTC	366	OUT	GET /new._.blue.svg HTTP/1.1 Host: diysyudrbtisp.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:33:19 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9545 Connection: close Date: Wed, 24 Apr 2024 12:33:19 GMT Last-Modified: Wed, 01 Mar 2023 11:57:06 GMT ETag: "ee0b0664d065babeb90ddfc92fb1c0a0" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5d364edd2927236ece76b1ef58ec87da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX3-C4 X-Amz-Cf-Id: EdYKXPmzSJ3MBsw5IkkpseT__sW47LobYAXdwfX9f8bt49rs21FjQA== Age: 1
2024-04-24 12:33:19 UTC	6396	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 35 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 35 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 33 30 34 37 5f 38 30 39 33 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 32 2e 36 38 31 20 33 34 2e 39 34 33 32 43 31 33 32 2e 36 36 31 20 33 34 2e 38 38 30 37 20 31 33 32 2e 36 36 31 20 33 34 2e 39 32 32 33 20 31 33 32 2e 36 38 31 20 33 34 2e 39 34 33 32 56 33 34 2e 39 34 33 32 5a 22 20 66 69 6c 6c 3d 22 23 30 46 33 45 34 44 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 31 36 38 20 32 Data Ascii: <svg width="145" height="48" viewBox="0 0 145 48" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_3047_8093)"><path d="M132.681 34.9432C132.661 34.8807 132.661 34.9223 132.681 34.9432V34.9432Z" fill="#0F3E4D"/><path d="M17.168 2
2024-04-24 12:33:19 UTC	3149	IN	Data Raw: 37 36 43 37 35 2e 31 30 31 34 20 33 30 2e 36 37 33 36 20 37 39 2e 38 30 37 37 20 32 37 2e 30 37 30 39 20 38 30 2e 35 37 38 32 20 32 36 2e 35 37 31 31 43 38 30 2e 35 39 39 20 32 36 2e 35 35 30 33 20 38 31 2e 31 38 32 31 20 32 36 2e 31 37 35 35 20 38 32 2e 31 38 31 37 20 32 35 2e 32 35 39 31 43 38 32 2e 37 30 32 33 20 32 34 2e 38 36 33 35 20 38 33 2e 32 32 32 39 20 32 34 2e 34 32 36 33 20 38 33 2e 35 37 37 20 32 34 2e 30 35 31 34 43 38 33 2e 35 31 34 35 20 32 34 2e 39 32 36 20 38 33 2e 36 31 38 36 20 32 35 2e 39 30 34 38 20 38 34 2e 30 37 36 37 20 32 36 2e 36 39 36 31 43 38 35 2e 36 31 37 37 20 32 38 2e 39 34 35 31 20 38 37 2e 36 37 39 33 20 32 37 2e 39 30 33 39 20 39 30 2e 31 33 36 35 20 32 35 2e 39 30 34 38 43 39 30 2e 30 39 35 20 32 36 2e 34 38 37 39 20 Data Ascii: 76C75.1014 30.6736 79.8077 27.0709 80.5782 26.5711C80.599 26.5503 81.1821 26.1755 82.1817 25.2591C82.7023 24.8635 83.2229 24.4263 83.577 24.0514C83.5145 24.926 83.6186 25.9048 84.0767 26.6961C85.6177 28.9451 87.6793 27.9039 90.1365 25.9048C90.095 26.4879

Target ID:	0
Start time:	14:31:49
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:31:53
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2676 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:31:55
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	14:33:13
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6492 --field-trial-handle=2644,i,1301236207325724552,8243787168716576204,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Windows Analysis Report
https://app.signaturit.com/document/c3142696-0fbf-46ef-a245-5bb543bcb92c/6248316d-8590-4dd2-9d39-fe90a1423256